A system and method is provided for automatically identifying and removing malicious data packets, such as denial-of-service (DoS) packets, in an intermediate network node before the packets can be forwarded to a central processing unit (CPU) in the node. The CPU's processing bandwidth is therefore not consumed identifying and removing the malicious packets from the system memory. As such, processing of the malicious packets is essentially 'off-loaded' from the CPU, thereby enabling the CPU to process non-malicious packets in a more efficient manner. Unlike prior implementa­tions, the invention identifies malicious packets having complex encapsulations that can not be identified using traditional techniques, such as ternary content addressable memories (TCAM) or lookup tables.

Hardware filtering support for denial-of-service attacks

A method and apparatus for controlling at least one executable on a blade server having a controller, which is accessible to the blade server and to at least one blade having access to a storage device in association with the controller. The controller has access to a source snapshot of at least one executable stored on the storage device An available blade is selected for loading an instance of a running snapshot associated with the source snapshot, and the instance of the running snapshot is loaded to the available blade.

Method and an apparatus for controlling executables running on blade servers

A system and method (200) are disclosed for managing quality of service for multimedia applications. A system that incorporates teachings of the present disclosure may include, for example, a network management system (NMS) (106) having a controller (107) that manages operations of a Digital Subscriber Line Access Multiplexer (DSLAM) (109) interfacing to a digital subscriber line (DSL) modem (114) over a digital subscriber line. The controller can be programmed to detect (204) a signal quality violation in the digital subscriber line according to a quality policy associated with a content source, cause (210) the DSLAM to interleave content supplied thereto by the content source; and cause (212) the DSLAM to allocate to the content supplied by the content source a first portion of a data service bandwidth assigned to the digital subscriber line. Additional embodiments are disclosed.

Method and apparatus for managing quality of service for multimedia applications

The application concerns a method for transmitting video data in a data stream and associated metadata, said metadata representing associated video data structure. The method comprises the steps of -determining the structure of the video data, -splitting said structure into chunks in an incremental manner, -transmitting said chunks in the data stream at time intervals before the video data it is related to. The application concerns also a method for transmitting fingerprint information associated with video data into a video data stream. The method comprises the steps of : -determining fingerprint associated with at least one frame of said video data, -inserting at least a message into the video stream comprising said fingerprint information.

Method to transmit video data in a data stream and associated metadata

The invention discloses a baseband processing resource allocation method and a device thereof. The device is applied to a baseband centralized processing system formed by a plurality of baseband processing servers. The device comprises a cache module and an allocation module, the cache module is used for caching baseband signals of different modes, and the allocation module is used for allocating baseband signals to be processed in the cache module to the baseband processing servers according to the current computing resource occupation amount provided by the baseband processing servers. The method is applied to the baseband centralized processing system formed by the baseband processing servers. The method includes the steps of carrying out cache according to the baseband signals of different modes, and allocating the baseband signals to be processed in the cache to the baseband processing servers according to the current computing resource occupation amount provided by the baseband processing servers. By means of the baseband processing resource allocation method and the device thereof, the use ratio, efficiency and the space use ratio of the baseband processing servers in a large-scale baseband processing center can be improved.

Baseband processing resource allocation method and device thereof

A method and system for distributing flows between a multiple processors. The flows can be received from an external source such as a network, by a front-end processor that recognizes the flow and the associated request, and identifies at least one internal applications processor to process the request/flow. The front-end processor utilizes a flow scheduling vector related to the identified applications processor(s), and the flow scheduling vector can be based on intrinsic data from the applications processor(s) that can include CPU utilization, memory utilization, packet loss, and queue length or buffer occupation. In some embodiments, applications processors can be understood to belong to a group, wherein applications processors within a group can be configured identically. A flow schedule vector can be computed for the different applications processor groups.

Flow scheduling and structure for network application apparatus

A method and system for distributing flows between a multiple processors The flows can be received from an external source such as a network, by a front-end processor that recognizes the flow and the associated request, and identifies at least one internal applicatiolns processor to process the request/flow The front-end processor utilizes a flow scheduling vector related to the identified applications processor(s), and the flow scheduling vector can be based on instrinsic data from the applications processor(s) that can include CPU utilization, memory utilization, packet loss, and queue length or buffer occupation In some embodiments, applications processors can be understood to belong to a group, wherein applications processors within a group can be configured identically A flow schedule vector can be computed for the different applications processor groups In some embodiments, a control processor can collect the instrinsic applications processor data, compute the flow scheduling vectors, and transfer the flow scheduling vectors to the frontend processor

Flow scheduling and architecture for network application apparatus

A method and system for distributing flows between a multiple processors. The flows can be received from an external source such as a network, by a front-end processor that recognizes the flow and the associated request, and identifies at least one internal applications processor to process the request/flow. The front-end processor utilizes a flow scheduling vector related to the identified applications processor(s), and the flow scheduling vector can be based on intrinsic data from the applications processor(s) that can include CPU utilization, memory utilization, packet loss, and queue length or buffer occupation. In some embodiments, applications processors can be understood to belong to a group, wherein applications processors within a group can be configured identically. A flow schedule vector can be computed for the different applications processor groups. In some embodiments, a control processor can collect the intrinsic applications processor data, compute the flow scheduling vectors, and transfer the flow scheduling vectors to the front-end processor.

J.C. Ferguson

Papers

Flow scheduling and structure for network application apparatus

Flow scheduling and architecture for network application apparatus

Flow scheduling for network application