Christopher David Liljenstolpe

US Patent:

20130223444, Aug 29, 2013

Filed:

Feb 23, 2012

Appl. No.:

13/403776

Inventors:

Christopher D. Liljenstolpe - San Francisco CA, US
R. Kyle Forster - San Francisco CA, US
Daniel C. Hersey - Peoria AZ, US
Balaji Sivasubramanian - Milpitas CA, US

International Classification:

H04L 12/56
H04L 12/28

US Classification:

370392, 370401

Abstract:

A network controlled by a controller may include end hosts that are coupled to the switches. The network may be coupled to gateways that interface between the network and an external network. The network may include subnetworks formed from respective portions of the end hosts of the network. The controller may create virtual gateways that interface between each of the subnetworks and the network by providing the end hosts of each subnetwork with virtual gateway Ethernet addresses. The controller may receive a network packet having a virtual gateway Ethernet address from an end host of a given subnetwork. The network packet may be destined for an end host of an external network or subnetwork. The controller may forward the network packet to the destination end host by redirecting the network packet through a selected gateway or by controlling the switches to perform gateway functions.

US Patent:

20210168198, Jun 3, 2021

Filed:

Jan 18, 2021

Appl. No.:

17/151500

Inventors:

- San Francisco CA, US
Christopher David Liljenstolpe - San Francisco CA, US

International Classification:

H04L 29/08

Abstract:

Metadata associated with a workload is determined. The workload is associated with a consumer of a service. One or more policies associated with the metadata are retrieved. An agent is configured to perform policy-controlled service routing of communications comprising the data packets with respect to the workload based on the one or more policies.

US Patent:

20210067376, Mar 4, 2021

Filed:

May 6, 2020

Appl. No.:

16/868086

Inventors:

- San Francisco CA, US
Christopher David Liljenstolpe - San Francisco CA, US

International Classification:

H04L 12/46
H04L 12/715
H04L 12/751

Abstract:

Measures for routing data packets in a data center network are provided. A packet forwarding function in a server in a data center network is configured to forward data packets to/from virtual systems hosted on that server. The packet forwarding function is configured to make forwarding decisions for received data packets based on the destination internet protocol (IP) address of the received data packet, and forward the data packet at least on the basis of the forwarding decision.

US Patent:

20200127852, Apr 23, 2020

Filed:

Dec 17, 2019

Appl. No.:

16/717893

Inventors:

- San Francisco CA, US
Christopher David Liljenstolpe - San Francisco CA, US

International Classification:

H04L 9/32
H04L 9/30
H04L 9/00
H04L 9/14

Abstract:

One or more data packets intended for a workload running on the server are received from an endpoint at a proxy associated with a server. The proxy associated with the server determines whether the one or more data packets intended for the workload are encrypted with a certificate associated with a policy group that includes the workload. The one or more data packets are provided to the workload based on whether the one or more data packets intended for the workload are encrypted with a certificate associated with a policy group that includes the workload.

US Patent:

20190081818, Mar 14, 2019

Filed:

Nov 12, 2018

Appl. No.:

16/186816

Inventors:

- San Francisco CA, US
Christopher David Liljenstolpe - San Francisco CA, US

International Classification:

H04L 12/46
H04L 12/751
H04L 12/715

Abstract:

Measures for routing data packets in a data center network are provided. A packet forwarding function in a server in a data center network is configured to forward data packets to/from virtual systems hosted on that server. The packet forwarding function is configured to make forwarding decisions for received data packets based on the destination internet protocol (IP) address of the received data packet, and forward the data packet at least on the basis of the forwarding decision.

US Patent:

20180019897, Jan 18, 2018

Filed:

Sep 27, 2017

Appl. No.:

15/717638

Inventors:

- San Francisco CA, US
Christopher David Liljenstolpe - San Francisco CA, US

International Classification:

H04L 12/46
H04L 12/715
H04L 12/751

Abstract:

Measures for routing data packets in a data center network are provided. A packet forwarding function in a server in a data center network is configured to forward data packets to/from virtual systems hosted on that server. The packet forwarding function is configured to make forwarding decisions for received data packets based on the destination internet protocol (IP) address of the received data packet, and forward the data packet at least on the basis of the forwarding decision.

US Patent:

20170104674, Apr 13, 2017

Filed:

Dec 19, 2016

Appl. No.:

15/383090

Inventors:

- San Francisco CA, US
Christopher David Liljenstolpe - San Francisco CA, US

International Classification:

H04L 12/713
G06F 9/455
H04L 29/06
H04L 12/931

Abstract:

Measures for controlling communication access in a data center network are provided. A packet forwarding function in a server in a data center network is configured to access an access control data store when making forwarding decisions for received data packets which are being routed to/from virtual systems hosted on that server. In response to receipt, at the server, of a setup notification relating to setup of a virtual machine on the server, one or more entries are populated in the access control data store. The entries comprise an internet protocol (IP) address of the virtual system and at least one associated IP address of one or more other communication endpoints.

US Patent:

20170063631, Mar 2, 2017

Filed:

Aug 28, 2015

Appl. No.:

14/838928

Inventors:

- San Francisco CA, US
Christopher LILJENSTOLPE - San Francisco CA, US
Alex POLLITT - San Francisco CA, US
Matthew Gerard Horatio DUPRE - Enfield, GB
Edward Peter HARRISON - Enfield, GB

International Classification:

H04L 12/24

Abstract:

Measures, including systems, methods and non-transitory computer-readable storage mediums, for use in operating a data center network, the data center network including an interconnect fabric including a plurality of spine switches, a plurality of top-of-rack switches and a plurality of compute servers. The interconnect fabric is configured to implement a plurality of independent spine switch planes. Each spine switch plane in the plurality of independent spine switch planes includes a different spine switch in the plurality of spine switches. The configuring includes configuring Layer 2 networking within each independent spine switch plane in the plurality of independent spine switch planes.