Allocating enforcement of a segmentation policy between host and network devices
US10785115B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Oct 26, 2018 |
| Grant date | Sep 22, 2020 |
| Priority date | — |
| Expiry date | Oct 26, 2038 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/0236
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A segmentation server configures enforcement of a segmentation policy by allocating enforcement of management instructions between network devices and hosts. The segmentation policy comprises rules that control communications between workloads. For a particular workload, the segmentation server generates management instructions for controlling communications to and from the particular workload in accordance with the rules. The segmentation server determines an allocation of management instructions between enforcement on a host on which the particular workload executes and enforcement on a network device upstream from the workload. The segmentation server sends configuration information to at least one of the host and the network device in accordance with the allocation to enable enforcement of the management instructions.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.