Steven Michael Peters

US Patent:

20190018710, Jan 17, 2019

Filed:

Nov 13, 2017

Appl. No.:

15/810159

Inventors:

- Palo Alto CA, US
Prayas Gaurav - Pune, IN
James Joseph Stabile - Palo Alto CA, US
Steven Peters - Palo Alto CA, US

International Classification:

G06F 9/50
G06F 9/455
H04L 29/12

Abstract:

In a computer-implemented method for managing resource allocation of a managed system, responsive to a request by a consumer node, an owner node of a plurality of owner nodes that controls resource allocations from the pool of resources is determined, where the resource is associated with a data object. A resource is allocated from a pool of resources comprising a plurality of resources by the owner node. An allocation marker corresponding to the resource is created. The resource and the allocation marker are made available for retrieval by the consumer node.

US Patent:

20180007000, Jan 4, 2018

Filed:

Dec 21, 2016

Appl. No.:

15/386214

Inventors:

- Palo Alto CA, US
Uday Masurekar - Sunnyvale CA, US
Shadab Shah - Sunnyvale CA, US
James Joseph Stabile - Los Altos CA, US
Steven Peters - Palo Alto CA, US

International Classification:

H04L 29/06
G06F 12/0813
G06F 12/0875

Abstract:

Some embodiments provide a method for distributing firewall configuration in a datacenter comprising multiple host machines. The method retrieves a rule in the firewall configuration for distribution to the host machines. The firewall rule is associated with a minimum required version number. The method identifies a high-level construct in the firewall rule. The method queries a translation cache for the identified high-level construct. The translation cache stores previous translation results for different high-level constructs. Each stored translation result is associated with a version number. When the translation cache has a stored previous translation result for the identified high-level construct that is associated with a version number that is equal to or newer than the minimum required version number, the method uses the previous translation result stored in the cache to translate the identified high-level construct to a low-level construct.

US Patent:

20180007008, Jan 4, 2018

Filed:

Dec 21, 2016

Appl. No.:

15/386207

Inventors:

- Palo Alto CA, US
Uday Masurekar - Sunnyvale CA, US
Shadab Shah - Sunnyvale CA, US
James Joseph Stabile - Los Altos CA, US
Steven Peters - Palo Alto CA, US

International Classification:

H04L 29/06

Abstract:

Some embodiments provide a method for managing firewall protection in a datacenter that includes multiple host machines that each hosts a set of data compute nodes. The method maintains a firewall configuration for the host machines at a network manager of the data center. The firewall configuration includes multiple firewall rules to be enforced at the host machines. The method aggregates a first set of updates to the firewall configuration into a first aggregated update and associates the first aggregated update with a first version number. The method distributes a first host-level firewall configuration update to a first host machine based on the first aggregated update and associates the first host machine with the first version number. The method aggregates a second set of updates to the firewall configuration into a second aggregated update and associates the second aggregated update with a second version number.