82 results about "IP fragmentation" patented technology

Network endpoints using TCP / IP operate to determine the maximum transmission unit (MTU) of the path between them. This determination is done so as to avoid the expensive IP fragmentation that will occur when transitioning links with a smaller MTU size. The standard method of determining the path MTU (PMTU) has several known deficiencies, including: inefficient use of bandwidth as proper operation will likely result in the loss of one or more packets and difficulty of implementation as the reverse channel communication mechanism, reception of ICMP messages indicating the discarding of unfragmentable packets, is frequently blocked by firewalls and other security apparatus. A method of determining the PMTU between intermediate proxies is disclosed that does not require reception of ICMP messages or the inefficient use of bandwidth due to the presumed dropping of packets with valid data.

Data structures, a method, and an associated transmission system for IP fragmentation and IP reassembly on network processors in order to minimize memory allocation requirements. Frame data for IP fragmentation or reassembly on a network processor is read into buffers to which are associated various control structures. The control structures permit IP fragmentation or reassembly to be accomplished without creating multiple copies of the frame or fragments.

A local area network includes computers and peripherals networked in a high-speed LAN with access to a WAN through a slower connection via a broadband modem. A LAN gateway device manages data traffic between the local computers and peripherals and between the LAN and the WAN. The LAN gateway device provides multiple features, such as wired or wireless links, security, firewall, NAT, DCHP, traffic management, and the like. Traffic management features include an automatic quality of service priority classification scheme. A quality of service module automatically assigns priorities to the data streams based on analysis of the data packets. A configuration access list can be provided with pre-configured priorities for some streams. Initially, all streams are given highest priority and subsequently the priority is automatically adapted to the results of the packet analysis. Traffic shaping techniques control the LAN gateway upstream output and enable IP fragmentation of TCP packets according to measured upstream channel conditions.

The invention discloses a network garbage information filtering method supported by multiprotocols and based on the transparent bridge, and a device, which belongs to the information security domain. The method and the device comprise a transparent bridge, data packet redirection, IP packet receiving and reinjecting, protocol analysis, a multi-thread scheduling analysis module and filtering modules (such as a mail filtering module and a short message filtering module, etc.) of various protocols. The method and the device adopt the technical proposal that the related information in the network is detained on the well-built linux transparent bridge by using iptables / netfilter, then ip lamination processing is completed, tcp data stream is restored, and complete network information is obtained and stored in a double-buffering queue; then the worker thread in a thread-scheduling awakened thread pool retrieves information form the double-buffering queue, and different filtering modules are invoked for filtering; the information is discarded when being judged as the garbage information, otherwise, the information is released. The device can be positioned at the front end of the gateway of a large and medium-sized enterprise or deployed at the front end of a border router for filtering the network information.

The method includes procedures: when processing first IP banding, network device of starting use of Internet secure protocol picks up information for unique identifying the IP message from the IP banding; then, building mapping from the information to relevant security policy; when processing other bandings of the IP message, Internet secure protocol maps to relevant security policy through the said unique information so as to implement process in high speed for the IP banding by the Internet secure protocol. Comparing with prior art, the invention overcomes disadvantages of using lots of memory, weighting process burden of gateway, lowering network throughput. The invention raises service range supported by network device, and guarantees high forwarding performance of network device.

The present invention relates to a method for improving IP fragmentation and transmission of user payload between a User Equipment, UE (10), and a Peer Node, PN (14). The payload is transmitted through a transmission path enabled by at least a first (17, 18) and a second (17, 18) established tunnel, said tunnels connecting a first (11), (13) and a second (11, 13) node in a Packet Core Network, PCN. The method comprises the steps of: - The first node (11,13) fragments (19) at least one received payload packet (15) into fragments (16) on the basis of a minimum Maximum Transmission Unit, MTU, for an upper IP layer of the transmission path. The first node (11, 13) encapsulates (20) said fragments at the entry of the first tunnel (17, 18). What particularly characterizes the method is that it further comprises a step where the first node (11, 13) determines (21) the MTU for the upper IP layer of the transmission path on the basis of an MTU of a lower IP layer of the transmission path and on the basis of the size of at least one additional tunnel header for the encapsulated fragments (16).

The present invention provides an analysis and treatment method of a network data pipeline type, firstly, the message enters a network system through a physical network entrance, the operation of an IP banding recombination, a TCP message reordering, a service quality and a bandwidth management is executed; and then a detection from a first floor to a sixth floor is performed to the message, a detection content comprises a classification and treatment based on a state, a firewall treatment, an antivirus filtering, a counterespionage software detection, an intrusion detection / intrusion defense, a content filtering, an application level gateway and a VPN treatment; a detection result reflects a treatment decision to the message, a part of message is dropped, the other message enters a normal message output treatment; a further treatment is performed again, the operation of a route, a streaming ordering, a bandwidth management and a service quality is executed, subsequently, the message is sent out through a physical network gateway. The efficiency of the network data treatment is greatly improved, and the network delay and the network cost are obviously reduced.