Stateful connection policy filtering
US10757077B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Nov 15, 2017 |
| Grant date | Aug 25, 2020 |
| Priority date | — |
| Expiry date | Feb 17, 2038 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L47/10
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A method for performing stateful processing of a packet at a flow-based managed forwarding element (MFE) is provided. The method sends a first packet from the MFE to a connection tracker that stores headers of a set of original direction packets that each established a new connection. The method receives, from the connection tracker, the first packet with the header of an original direction packet associated with the first packet appended to the first packet. The header of the original direction packet includes (i) a second set of IP addresses different than a first set of IP addresses of the first packet and (ii) stateful connection status information. The method replaces a first set of IP addresses of the first packet with the second set of IP addresses and performs a matching operation on the packet based on the second set of IP addresses and the stateful connection status information.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.