David Patrick Lucey

US Patent:

20200045080, Feb 6, 2020

Filed:

Jul 31, 2018

Appl. No.:

16/051147

Inventors:

- San Francisco CA, US
David Lucey - Arlington WA, US
David Murray - Seattle WA, US
Xiongjian Fu - Sammamish WA, US

International Classification:

H04L 29/06
H04L 29/08

Abstract:

Methods, systems, and devices for transparent data encryption are described. A transparent proxy may enforce a specific encryption policy for a data transmission from a source host to a target host, where the transparent proxy determines if the data transmission is encrypted according to a specific encryption policy prior to forwarding the data transmission to the target host. As such, if the data transmission is not encrypted according to the specific encryption policy, the transparent proxy may encrypt the data transmission and then forward it to the target host. Alternatively, if the transparent proxy determines that the data transmission is encrypted according to the specific encryption policy, then the transparent proxy may refrain from further encrypting the data transmission and forward the data transmission to the target host without the additional encryption.

US Patent:

20190238456, Aug 1, 2019

Filed:

Jan 31, 2018

Appl. No.:

15/885661

Inventors:

- San Francisco CA, US
David Lucey - Arlington WA, US
Edet Nkposong - Mercer Island WA, US

International Classification:

H04L 12/715
H04L 12/721
H04L 29/12
H04L 12/24
H04L 9/32

Abstract:

Techniques are disclosed relating to establishing routes to access services executing on host computer systems. In some embodiments, a computing system receives a request to distribute routing data for a first service to switches of a plurality of host computer systems. The first service is one of a plurality of services belonging to a plurality of tenants supported by the plurality of host computer systems. The computing system analyzes the routing data to determine whether distribution of the routing data is in accordance with a set of criteria established for a first tenant associated with the first service. Based on the analyzing, the computing system permits communication of the routing data via one or more border gateway protocol (BGP) update messages to the switches.