Abstract: In one aspect, a method of IP obfuscation of a user device includes receiving, over an Extendible Authentication Protocol (EAP) session between a user device and a network access point, location preferences of the user device, generating, based on the location preferences or a network policy, a geohash for the user device, identifying, for the user device, an IP anchor, sending, over the EAP session, the geohash to the user device, and receiving, from the user device, network traffic, wherein the network access point utilizes the geohash and the IP anchor to route the network traffic for the user device and obfuscate IP address of the user device from third-party access.

Abstract: A blade router for increased interface scalability is provided. The blade router may address interface scalability by having each of the linecards manage its interfaces locally and may use the concept of virtual and local interfaces for intelligent forwarding. The blade router may appear as a single router from the customer perspective during configuration. For some embodiments, two virtual interfaces may be used, one for regular interface traffic and another for Network Address Translation (NAT)-enabled interface traffic.

Abstract: A blade switch for increased interface scalability is provided. The blade switch may address interface scalability by having each of the switch linecards manage its interfaces locally and may use the concept of virtual and local interfaces for intelligent forwarding. The blade switch may appear as a single network switch having a single bridge ID from the network perspective during operation and from the customer perspective during configuration.

Abstract: A blade router for increased interface scalability is provided. The blade router may address interface scalability by having each of the linecards manage its interfaces locally and may use the concept of virtual and local interfaces for intelligent forwarding. The blade router may appear as a single router from the customer perspective during configuration. For some embodiments, two virtual interfaces may be used, one for regular interface traffic and another for Network Address Translation (NAT)-enabled interface traffic.

Abstract: A blade switch for increased interface scalability is provided. The blade switch may address interface scalability by having each of the switch linecards manage its interfaces locally and may use the concept of virtual and local interfaces for intelligent forwarding. The blade switch may appear as a single network switch having a single bridge ID from the network perspective during operation and from the customer perspective during configuration.

Abstract: A method for dynamically building a packet processing chain includes providing a plurality of packet processing elements. For each element of a first subset of elements operations indications are provided. For each element of a second subset of elements, expectations indications are provided. Finally, the chain is built by combining elements to form the chain according to a configuration requirement. Elements are selected such that an element's indicated expectations are satisfied by the time it executes, as indicated by the operations indications of the previous chain element.

Abstract: An operating system architecture and method which provides for transparent inheritance of memory management policies in data processing systems and enhanced memory management is disclosed. The operating system provides for a special “debug” process flag to be associated with debug and device management processes. When a source process transmits a message to a destination process, the operating system determines whether the source process is a debug process (i.e., whether the source process contains a debug process flag indicator associated therewith). If the source process is a debug process, a debug process flag indicator is also associated with the destination process. The operating system also reserves a portion of the device's memory (a reserve memory pool) which is only allocated to special “debug” process when the non-reserved pool of memory is depleted.

Abstract: A method and system for notifying router subsystems of configuration changes made to router configuration information which are maintained by a centralized information provider or database system. The centralized database provides registration and unregistration for notification of changes made to the router configuration information. The centralized database further provides router configuration change notifications to subsystems registered to receive such notifications.

Abstract: A method and system for transacting routing device configurations using a centralized information provider or database system. The invention receives configuration commands from a user of the router. The invention then communicates the configuration command to the centralized database system. The centralized database system manages a storage structure (database tree) having a plurality of tuple nodes, where each tuple node contains configuration data for the router. The centralized database then carries out the configuration change in the appropriate tuple node using the configuration information provided in the configuration command issued by the user. The invention allows the user of the router to “back-out” of such transactions by reverting the configuration of the affected tuple node to its previous or original state. The invention also reverts the configuration of the affected tuple nodes upon the occurrence of certain events.

Abstract: A method of allocating memory for a file includes determining a size of the file and searching a memory segment list to determine whether the file can be stored in one of a plurality of memory segments catalogued in the memory segment list. The memory segment list includes a plurality of entries, each one of the plurality of entries being associated with one of the plurality of memory segments and indicating whether the associated one of the plurality of memory segments includes a hole that is unoccupied, where each of the corresponding ones of the plurality of entries are adapted for identifying the hole and a hole size associated with the hole that identifies an amount of memory within the memory segment that is unoccupied.

Abstract: A flash file system for use with flash cards and internetwork operating system software is provided. Absolute path names are stored in the name field of existing files on flash cards. When the system is initialized, a directory structure is created and stored in RAM by accessing the absolute path names stored in the name field of each file on the flash cards. Accessing a file on a flash card is then accomplished by traversing the directory structure in RAM, and going directly to the precise location of the file on the flash card, thereby minimizing the amount of information that must be retrieved from the flash cards and greatly increasing the speed of accesses. Additionally, cards designed for use with older, non-modular internetwork operating systems may still be used, as name fields for files in these flash cards may easily be used to store absolute path names.