Abstract: The present invention relates to an outdoor unit for a refrigeration cabinet and a refrigeration cabinet. The outdoor unit comprises: a first unit comprising a compressor; a second unit comprising a condenser; wherein, the outdoor unit is configured to be installed in a first mode or a second mode; where in the first mode, the first unit and the second unit are installed adjacent to each other and connected with each other through fasteners, and the first unit and the second unit are connected through a first fluid pipeline passing through an adjacent surface between the first unit and the second unit; where in the second mode, the first unit and the second unit are respectively installed at a first position and a second position spaced apart, and the first unit and the second unit are connected through a second fluid pipeline extending between the first and second positions.

Abstract: A method and an apparatus for browsing a table in a document, and an electronic device and a storage medium. The method includes: in a process of editing a table in an online document, receiving a table page jump instruction of a first table and jumping from a document page corresponding to the online document to a first table page for display; receiving a table switching instruction in the first table page; and switching from the first table page to a second table page for display according to the table switching instruction; where the first table page is used to display the first table, and the second table page is used to display a second table. Tables can be switched quickly, and the browsing speed of tables can be improved.

Abstract: A method and an apparatus for browsing a table in a document, and an electronic device and a storage medium. The method includes: in a process of editing a table in an online document, receiving a table page jump instruction of a first table and jumping from a document page corresponding to the online document to a first table page for display; receiving a table switching instruction in the first table page; and switching from the first table page to a second table page for display according to the table switching instruction; where the first table page is used to display the first table, and the second table page is used to display a second table. Tables can be switched quickly, and the browsing speed of tables can be improved.

Abstract: A method and an apparatus for browsing a table in a document, and an electronic device and a storage medium. The method includes: in a process of editing a table in an online document, receiving a table page jump instruction of a first table and jumping from a document page corresponding to the online document to a first table page for display; receiving a table switching instruction in the first table page; and switching from the first table page to a second table page for display according to the table switching instruction; where the first table page is used to display the first table, and the second table page is used to display a second table. Tables can be switched quickly, and the browsing speed of tables can be improved.

Abstract: Systems and methods for selectively disabling anti-replay security checks based on a defined network policy that can override the globally-defined defaults for specific network sessions are provided. A network security device protecting a private network receives a packet associated with a network traffic flow between a source computing device and an internal destination computing device. The network security device identifies an anti-replay policy associated with the network traffic flow and whether the anti-replay policy is intended to override a global anti-replay policy of the network security device. When the identifying is affirmative, the network security device performs one or more anti-replay security checks in accordance with the anti-replay policy. When the identifying is negative, the network security device performs the one or more anti-replay security checks in accordance with the global anti-replay policy.

Abstract: A method and an apparatus for browsing a table in a document, and an electronic device and a storage medium. The method includes: in a process of editing a table in an online document, receiving a table page jump instruction of a first table and jumping from a document page corresponding to the online document to a first table page for display; receiving a table switching instruction in the first table page; and switching from the first table page to a second table page for display according to the table switching instruction; where the first table page is used to display the first table, and the second table page is used to display a second table. Tables can be switched quickly, and the browsing speed of tables can be improved.

Abstract: Systems and methods for a VRF-aware socket are provided. According to one embodiment, a user-space application of a network device, maintaining a virtual routing table for each of multiple VRF domains, creates a VRF-aware listening socket. The socket includes information regarding: (i) which of the virtual routing tables is to be used to look up routing or forwarding information for outgoing traffic; (ii) the VRF domain(s) from which the socket is able to receive incoming traffic; and/or (iii) the last VRF domain from which the socket read data. The socket is configured to be a super-VRF listening socket capable of receiving incoming traffic from all VRF domains by setting its VRF domain(s) to a wildcard value. The super-VRF listening socket then receives from a client device associated with a first VRF domain of the multiple VRF domains a request on behalf of the user-space application.

Abstract: Methods and systems are provided for increasing application performance and accelerating data communications in a WAN environment. According to one embodiment, packets are received at a flow classification module operating at the Internet Protocol (IP) layer of a first wide area network (WAN) acceleration device via a private tunnel, which is operable to convey application layer data for connection-oriented applications between WAN acceleration devices. The packets are passed to a WAN socket operating at the transport layer. Based on the application protocol, the packets are passed to an application handler of multiple application handlers operating at the application layer each of which implements one or more application acceleration techniques for a particular application layer protocol known to behave poorly within a WAN environment. The existing connection-oriented flow is securely accelerated by performing one or more application acceleration techniques and applying one or more security functions.

Abstract: Systems and methods for selectively disabling anti-replay security checks based on a defined network policy that can override the globally-defined defaults for specific network sessions are provided. A network security device protecting a private network receives a packet associated with a network traffic flow between a source computing device and an internal destination computing device. The network security device identifies an anti-replay policy associated with the network traffic flow and whether the anti-replay policy is intended to override a global anti-replay policy of the network security device. When the identifying is affirmative, the network security device performs one or more anti-replay security checks in accordance with the anti-replay policy. When the identifying is negative, the network security device performs the one or more anti-replay security checks in accordance with the global anti-replay policy.

Abstract: Systems and methods for facilitating communication between applications associated with virtual domains (VDOMs) of a virtualized network device and an external network are provided. According to one embodiment, a sub-interface is created for a physical Ethernet interface of the network device. A unique MAC address is assigned to the sub-interface. An application associated with a first VDOM is bound to the sub-interface. When the first VDOM is operating in transparent mode and an egress packet is received via the sub-interface by an internal switch running on the network device: (i) a forwarding database of the network device is caused to learn an association between a source MAC address of the egress packet and the sub-interface; and (ii) the egress packet is transmitted to the external network device via the physical Ethernet interface without replacing the source MAC address with the unique MAC address of the sub-interface.

Abstract: Systems and methods for synchronizing an EMACVLAN FDB among cluster units of an HA cluster are provided. According to one embodiment, real-time synchronization of a first FDB maintained within a kernel space of a first network security operating system running on a primary unit and a second FDB maintained within a kernel space of a second network security operating system running on a secondary unit is performed by: transferring information regarding an entry from the kernel space of the first network security operating system to a first synchronization unit running within a user space of the first network security operating system, and causing the second forwarding database to be updated by the first synchronization unit in response to receipt of the information regarding the entry, by transmitting the information regarding the entry to a second synchronization unit running within the user space of the second network security operating system.

Abstract: Systems and methods for mitigating effects of source-Media Access Control (MAC) flooding attacks on a forwarding database (FDB) that maps MAC addresses to enhanced MAC Virtual Local Area Network (EMACVLAN) sub-interfaces of a physical Ethernet interface are provided. A Virtual Domain (VDOM) operating in transparent mode receives an ingress packet by an internal switch running on the virtualized network device via a sub-interface. When an entry, corresponding to a source MAC address of the ingress packet, does not exist in the FDB, an appropriate entry is created in the FDB and the entry is queued for confirmation at a tail of an ephemeral queue. When a total number of entries contained in the FDB reaches a predetermined threshold, an unconfirmed entry at a head of the queue is removed from the FDB. When the entry is confirmed, it is retained in the FDB and is unlinked from the queue.

Abstract: Systems and methods for a VRF-aware socket are provided. According to one embodiment, a user-space application of a network device, maintaining a virtual routing table for each of multiple VRF domains, creates a VRF-aware listening socket. The socket includes information regarding: (i) which of the virtual routing tables is to be used to look up routing or forwarding information for outgoing traffic; (ii) the VRF domain(s) from which the socket is able to receive incoming traffic; and/or (iii) the last VRF domain from which the socket read data. The socket is configured to be a super-VRF listening socket capable of receiving incoming traffic from all VRF domains by setting its VRF domain(s) to a wildcard value. The super-VRF listening socket then receives from a client device associated with a first VRF domain of the multiple VRF domains a request on behalf of the user-space application.

Abstract: Systems and methods for coordinating security operations among members of a cooperative security fabric (CSF) are provided. According to one embodiment, a first network security appliance of a CSF receives incoming network traffic and determines if the incoming network traffic is transmitted from a second network security appliance based on the source address of the network traffic. If the incoming network traffic is from the second network security appliance, the first network security appliance determines operations that are executed by the second network security appliance and then determines local operations. The first network security appliance executes local operations to the incoming network traffic.

Abstract: Systems and methods for synchronizing an EMACVLAN FDB among cluster units of an HA cluster are provided. According to one embodiment, real-time synchronization of a first FDB maintained within a kernel space of a first network security operating system running on a primary unit and a second FDB maintained within a kernel space of a second network security operating system running on a secondary unit is performed by: transferring information regarding an entry from the kernel space of the first network security operating system to a first synchronization unit running within a user space of the first network security operating system, and causing the second forwarding database to be updated by the first synchronization unit in response to receipt of the information regarding the entry, by transmitting the information regarding the entry to a second synchronization unit running within the user space of the second network security operating system.

Abstract: Systems and methods for facilitating communication between applications associated with virtual domains (VDOMs) of a virtualized network device and an external network are provided. According to one embodiment, a sub-interface is created for a physical Ethernet interface of the network device. A unique MAC address is assigned to the sub-interface. An application associated with a first VDOM is bound to the sub-interface. When the first VDOM is operating in transparent mode and an egress packet is received via the sub-interface by an internal switch running on the network device: (i) a forwarding database of the network device is caused to learn an association between a source MAC address of the egress packet and the sub-interface; and (ii) the egress packet is transmitted to the external network device via the physical Ethernet interface without replacing the source MAC address with the unique MAC address of the sub-interface.

Abstract: Systems and methods for mitigating effects of source-MAC flooding attacks on a forwarding database (FDB) that maps MAC addresses to EMACVLAN sub-interfaces of a physical Ethernet interface are provided. A VDOM operating in transparent mode receives an ingress packet an internal switch running on the virtualized network device via the sub-interface. When an entry, having a MAC address corresponding to a source MAC address of the ingress packet, does not exist in FDB: an entry containing the source MAC address and information regarding the sub-interface is created in FDB and the entry is queued for confirmation at a tail of an ephemeral queue. When a total number of entries contained in FDB reach a predetermined threshold, an unconfirmed entry at a head of ephemeral queue is removed from FDB. When the entry is recognized as a confirmed entry, the entry is retained in FDB and is unlinked from ephemeral queue.

Abstract: Systems and methods for coordinating security operations among members of a cooperative security fabric (CSF) are provided. According to one embodiment, a first network security appliance of a CSF receives incoming network traffic and determines if the incoming network traffic is transmitted from a second network security appliance based on the source address of the network traffic. If the incoming network traffic is from the second network security appliance, the first network security appliance determines operations that are executed by the second network security appliance and then determines local operations. The first network security appliance executes local operations to the incoming network traffic.

Abstract: Systems and methods for designating interfaces of a network security appliance as source/destination interfaces in connection with defining a security rule are provided. According to one embodiment, a security rule configuration interface is displayed through which a network administrator can specify parameters of security rules to be applied to traffic attempting to traverse the network security appliance. Information defining a traffic flow to be controlled by a security rule is received via the security rule configuration interface. The information defining the traffic flow includes: (i) a set of source interfaces; and (ii) a set of destination interfaces. At least one of which includes multiple interfaces such that the security rule permits the traffic flow to be defined in terms of multiple source interfaces and/or multiple destination interfaces.

Abstract: Systems and methods for connecting a network using one network protocol with a network using another network protocol are provided. According to an embodiment, a method is provided for performing network address translation. A data packet is received, by a protocol bridge connecting a first network, using a first protocol, and a second network, using a second protocol, via a first session of the first protocol from a first network appliance of the first network. The first protocol may be either Internet Protocol version 4 (IPv4) or Internet Protocol version 6 (IPv6) and the second protocol is the other. The data packet is translated into the second protocol. The translation is performed in a kernel space of the protocol bridge. Finally, the data packet is transmitted via a second session of the second protocol to a second network appliance of the second network.