At&t Intellectual Property I, LP

Adrian Cepleanu

Dimitri Krinos

Israel L Means

Han Q Nguyen

Huajin Jeng

Thomas Spencer, Iv

Praveen Ramadenu

Gary R Flack

Hui Tong

Eric Mueller

In one example, a method includes receiving a plurality of network probes originating from a first provider edge router in a service provider network, calculating a plurality of network performance metrics, based on the plurality of network probes, and storing the network performance metrics associated with each network probe of the plurality of network probes in a path metric table, wherein an entry in the path metric table for the each network probe includes a path traveled by the each network probe from the first provider edge router to the processing system, the network performance metrics associated with the each network probe, a community value associated with the each network probe, and a traffic classification value associated with the each network probe.

Encapsulating network performance metrics in border gateway protocol to support customer-driven path selection

A dynamic denial of service (DDoS) mitigation system comprising a BGP address family exchange connected to at least one DDoS mitigation route reflector, and at least one DDoS mitigation route reflector being an address family identifier specific route reflector, where each DDoS mitigation route reflector advertises BGP content in a first address family to the BGP family exchange. The BGP address family exchange translates the BGP content from the first address family to a destination address family and announces the translated content to a destination route reflector, and wherein the destination address family includes a flow specification diversion route.

Dynamic denial of service mitigation system

A system comprising a BAFX adapted to provide a route exchange between dissimilar address family interfaces; wherein the BAFX is a control plane BGP speaker that connects directly to each address family interface specific route reflector and wherein each address family interface specific route reflector advertises its BGP content to the BAFX for translation; and the BAFX translates a received address family interface format into a destination address family interface format and announces a reformatted route address to a destination route reflector.

Method and apparatus for creating border gateway protocol reachability on demand in a multi-protocol label switching network

Methods, computer-readable media and devices are disclosed for generating a security decision for network management traffic for a virtual provider edge router of a network. For example, a processor may receive a security policy of the network, receive an assignment to a virtual provider edge router in the network, receive network management traffic for the virtual provider edge router, generate a security decision for the network management traffic based upon the security policy, and perform a task in response to the security decision.

Virtual infrastructure perimeter regulator

A network routing and service control design enables an internet protocol ('IP') network to effectively divert, on-demand, a given set of IP traffic flow from its normally followed network path to a network-attached application service processing complex and then enable the IP network to re-inject post-processed (e.g., Distributed Denial of Service scrubbed) traffic back into the network for routing to an originally-intended destination. This design also provides a sophisticated control mechanism for application service providers and/or customers/users for service management purposes. For example, application service providers can manage network and service processing resources and customers/users can manage their service requests.

Growing community of inventors

Anthem, AZ, United States of America

Adrian Cepleanu