Andrew R Curtis

US Patent:

20120131222, May 24, 2012

Filed:

Nov 22, 2010

Appl. No.:

12/951748

Inventors:

Andrew Robert Curtis - Mountain View CA, US
Praveen Yalagandula - Redwood City CA, US

International Classification:

G06F 15/16

US Classification:

709235

Abstract:

Example embodiments relate to elephant flow detection in a computing device. In example embodiments, a computing device may monitor a socket for a given flow. The computing device may then determine whether the flow is an elephant flow based on the monitoring of the socket. If so, the computing device may signal the network that transmits the flow that the flow is an elephant flow.

US Patent:

20210248017, Aug 12, 2021

Filed:

Apr 26, 2021

Appl. No.:

17/240910

Inventors:

- Redwood City CA, US
Teemu Koponen - San Francisco CA, US
Andrew Curtis - San Mateo CA, US
Torin Sandall - San Francisco CA, US
Octavian Florescu - Kirkland WA, US

International Classification:

G06F 9/54
H04L 29/06
G06F 16/11
G06F 16/185
G06F 21/60
G06F 21/62

Abstract:

Some embodiments of the invention provide a system for defining, distributing and enforcing policies for authorizing API (Application Programming Interface) calls to applications executing on one or more sets of associated machines (e.g., virtual machines, containers, computers, etc.) in one or more datacenters. This system has a set of one or more servers that acts as a logically centralized resource for defining and storing policies and parameters for evaluating these policies. The server set in some embodiments also enforces these API-authorizing policies. Conjunctively, or alternatively, the server set in some embodiments distributes the defined policies and parameters to policy-enforcing local agents that execute near the applications that process the API calls. From an associated application, a local agent receives API-authorization requests to determine whether API calls received by the application are authorized. In response to such a request, the local agent uses one or more parameters associated with the API call to identify a policy stored in its local policy storage to evaluate whether the API call should be authorized. To evaluate this policy, the agent might also retrieve one or more parameters from the local policy storage.

US Patent:

20210240550, Aug 5, 2021

Filed:

Apr 19, 2021

Appl. No.:

17/234708

Inventors:

- Redwood City CA, US
Teemu Koponen - San Francisco CA, US
Andrew Curtis - San Mateo CA, US
Torin Sandall - San Francisco CA, US
Octavian Florescu - Kirkland WA, US

International Classification:

G06F 9/54
H04L 29/06
G06F 16/11
G06F 16/185
G06F 21/60
G06F 21/62

Abstract:

Some embodiments of the invention provide a system for defining, distributing and enforcing policies for authorizing API (Application Programming Interface) calls to applications executing on one or more sets of associated machines (e.g., virtual machines, containers, computers, etc.) in one or more datacenters. This system has a set of one or more servers that acts as a logically centralized resource for defining and storing policies and parameters for evaluating these policies. The server set in some embodiments also enforces these API-authorizing policies. Conjunctively, or alternatively, the server set in some embodiments distributes the defined policies and parameters to policy-enforcing local agents that execute near the applications that process the API calls. From an associated application, a local agent receives API-authorization requests to determine whether API calls received by the application are authorized. In response to such a request, the local agent uses one or more parameters associated with the API call to identify a policy stored in its local policy storage to evaluate whether the API call should be authorized. To evaluate this policy, the agent might also retrieve one or more parameters from the local policy storage.