Nagaraj A Bagepalli

7586851, Sep 8, 2009

Apr 26, 2004

10/832796

Rina Panigrahy - Sunnyvale CA, US
Jackie Liu - Sunnyvale CA, US
Daniel Yu-Kwong Ng - San Jose CA, US
Sanjay Jain - Santa Clara CA, US
Nagaraj A. Bagepalli - San Jose CA, US
Abhijit Patra - San Jose CA, US

Cisco Technology, Inc. - San Jose CA

H04L 12/56
H04J 1/16

370252, 370238, 370254, 370389

The present invention provides a packet processing device and method. A parsing processor provides instruction-driven content inspection of network packets at 10-Gbps and above with a parsing engine that executes parsing instructions. A flow state unit maintains statefulness of packet flows to allow content inspection across several related network packets. A state-graph unit traces state-graph nodes to keyword indications and/or parsing instructions. The parsing instructions can be derived from a high-level application to emulate user-friendly parsing logic. The parsing processor sends parsed packets to a network processor unit for further processing.

7623468, Nov 24, 2009

Aug 25, 2004

10/927290

Rina Panigrahy - Sunnyvale CA, US
Jackie Liu - Sunnyvale CA, US
Daniel Yu-Kwong Ng - San Jose CA, US
Sanjay Jain - Santa Clara CA, US
Nagaraj A. Bagepalli - San Jose CA, US
Abhijit Patra - San Jose CA, US

Cisco Technology, Inc. - San Jose CA

H04L 12/56

370252, 370238, 370254, 370389

The present invention provides a packet processing device and method. A parsing processor provides instruction-driven content inspection of network packets at 10-Gbps and above with a parsing engine that executes parsing instructions. A flow state unit maintains statefulness of packet flows to allow content inspection across several related network packets. A state-graph unit traces state-graph nodes to keyword indications and/or parsing instructions. The parsing instructions can be derived from a high-level application to emulate user-friendly parsing logic. The parsing processor sends parsed packets to a network processor unit for further processing.

7623546, Nov 24, 2009

Dec 15, 2005

11/303577

Murali Bashyam - Fremont CA, US
Nagaraj Bagepalli - San Jose CA, US
Abhijit Patra - San Jose CA, US

Cisco Technology, Inc. - San Jose CA

H04J 3/16

370465

A method of improving latency time of a data transfer between a sender and a receiver, receiving an odd number of data segments from among a plurality of data segments the receiver determines if it is waiting for a further data segment of less than full size. The determination is based on a total number of data segments received, an amount of information expected in the data transfer, and a maximum segment size. If the receiver is waiting for a further data segment of less than full size then sending a message is sent to the sender that triggers the transmission by the sender of said less than full size data segment.

7657940, Feb 2, 2010

May 6, 2005

11/124003

Maurizio Portolani - Milpitas CA, US
Mauricio Arregoces - Rancho Palos Verdes CA, US
David W. Chang - Milpitas CA, US
Nagaraj A. Bagepalli - San Jose CA, US
Stefano Testa - San Jose CA, US

Cisco Technology, Inc. - San Jose CA

G06F 11/00
G06F 12/14
G06F 12/16
G08B 23/00

726 23, 380200

A data center provides secure handling of HTTPS traffic using backend SSL decryption and encryption in combination with a load balancer such as a content switch. The load balancer detects HTTPS traffic and redirects it to an SSL offloading device for decryption and return to the load balancer. The load balancer then uses the clear text traffic for load balancing purposes before it redirects the traffic back to the SSL offloading device for re-encryption. Thereafter, the re-encrypted traffic is sent to the destination servers in the data center. In one embodiment, the combination with the back-end SSL with an intrusion detection system improves security by performing intrusion detection on the decrypted HTTPS traffic.

7895463, Feb 22, 2011

Apr 11, 2008

12/101865

Nagaraj Bagepalli - San Jose CA, US
Prashant Gandhi - San Jose CA, US
Abhijit Patra - San Jose CA, US
Kirti Prabhu - San Jose CA, US
Anant Thakar - Cupertino CA, US

Cisco Technology, Inc. - San Jose CA

G06F 11/00

714 4

Redundant application network appliances using a low latency lossless interconnect link are described herein. According to one embodiment, in response to receiving at a first network element a packet of a network transaction from a client over a first network for accessing a server of a datacenter, a layer 2 network process is performed on the packet and a data stream is generated. The data stream is then replicated to a second network element via a layer 2 interconnect link to enable the second network element to perform higher layer processes on the data stream to obtain connection states of the network transaction. In response to a failure of the first network element, the second network element is configured to take over processes of the network transaction from the first network element using the obtained connection states without user interaction of the client. Other methods and apparatuses are also described.

7913529, Mar 29, 2011

Apr 11, 2008

12/101860

Nagaraj Bagepalli - San Jose CA, US
Prashant Gandhi - San Jose CA, US
Abhijit Patra - San Jose CA, US
Kirti Prabhu - San Jose CA, US
Anant Thakar - Cupertino CA, US

Cisco Technology, Inc. - San Jose CA

G06F 15/173

70223, 709203, 709217, 709224, 370352, 370389, 370401

A network element having centralized TCP termination with multi-service chaining is described herein. According to one embodiment, a network element includes a switch fabric, a first service module coupled to the switch fabric, and a second and a third service modules coupled to the first service module over the switch fabric. In response to packets of a network transaction received from a client over a first network for access a server of a data center having multiple servers over a second network, the first service module is configured to terminate a TCP connection of the packets. The TCP terminated packets are transmitted to the second and third service modules over the switch fabric. The second and third service modules are configured to perform different application network services on the TCP terminated packets without having to perform a TCP process again. Other methods and apparatuses are also described.

7921686, Apr 12, 2011

Apr 11, 2008

12/101850

Nagaraj Bagepalli - San Jose CA, US
Prashant Gandhi - San Jose CA, US
Abhijit Patra - San Jose CA, US
Kirti Prabhu - San Jose CA, US
Anant Thakar - Cupertino CA, US

Cisco Technology, Inc. - San Jose CA

G06F 15/173

70223, 709203, 709217, 709224, 370352, 370389, 370401

A highly scalable application network appliance is described herein. According to one embodiment, a network element includes a switch fabric, a first service module coupled to the switch fabric, and a second service module coupled to the first service module over the switch fabric. In response to packets of a network transaction received from a client over a first network to access a server of a data center having multiple servers over a second network, the first service module is configured to perform a first portion of OSI (open system interconnection) compatible layers of network processes on the packets while the second service module is configured to perform a second portion of the OSI compatible layers of network processes on the packets. The first portion includes at least one OSI compatible layer that is not included in the second portion. Other methods and apparatuses are also described.

8094560, Jan 10, 2012

May 19, 2008

12/123223

Nagaraj Bagepalli - San Jose CA, US
Abhijit Patra - San Jose CA, US

Cisco Technology, Inc. - San Jose CA

H04L 12/28
H04L 12/56

370235, 370388

Techniques for multi-stage multi-core processing of network packets are described herein. In one embodiment, work units are received within a network element, each work unit representing a packet of different flows to be processed in multiple processing stages. Each work unit is identified by a work unit identifier that uniquely identifies a flow in which the associated packet belongs and a processing stage that the associated packet is to be processed. The work units are then dispatched to multiple core logic, such that packets of different flows can be processed concurrently by multiple core logic and packets of an identical flow in different processing stages can be processed concurrently by multiple core logic, in order to determine whether the packets should be transmitted to one or more application servers of a datacenter. Other methods and apparatuses are also described.