Cisco Technology, Inc.

Anil Bhikuayya Jangam

Rajiv Asati

Shyam N Kapadia

Om Prakash Suthar

Srinivas Veereshwara

Santa Dasu

Murthy N Bhetanabhotla

Deepika Sharma

A system performs a method including: generating a posture of a first microservice in a microservice based network environment; implementing the posture of the first microservice at a sidecar of the first microservice; distributing the posture of the first microservice to a sidecar of a second microservice in the microservice based network environment; implementing the posture of the first microservice at the sidecar of the second microservice; and controlling communication of personally identifiable information between the first microservice and the second microservice based on the posture of the first microservice through either or both the sidecar of the first microservice and the sidecar of the second microservice. The posture of the first microservice includes an identification of one or more types of personally identifiable information that the first microservice is authorized to distribute and one or more types of personally identifiable information that the first microservice is authorized to receive.

Policy based personally identifiable information leakage prevention in cloud native environments

In one embodiment, an illustrative method herein may comprise: determining, by a network controller, physical network topology of a data center network; collecting, by the network controller, virtual machine related network topology of the data center network from a virtual machine manager for the data center network; collecting, by the network controller, virtual ethernet flow mapping information of the data center network from a blade system management software for the data center network; collecting, by the network controller, container workload information of the data center network from a container orchestrator for the data center network; and generating, by the network controller, an integrated correlated visualization mapping of containers and associated network attachment points in the data center network based on the physical network topology, the virtual machine related network topology, the virtual ethernet flow mapping information, and the container workload information.

Enhancing container workload visibility in data center environments with blade switches

A system performs a method including: generating a posture of a first microservice in a microservice based network environment; implementing the posture of the first microservice at a sidecar of the first micro service; distributing the posture of the first microservice to a sidecar of a second microservice in the microservice based network environment; implementing the posture of the first microservice at the sidecar of the second micro service; and controlling communication of personally identifiable information between the first microservice and the second microservice based on the posture of the first microservice through either or both the sidecar of the first microservice and the sidecar of the second micro service. The posture of the first microservice includes an identification of one or more types of personally identifiable information that the first microservice is authorized to distribute and one or more types of personally identifiable information that the first microservice is authorized to receive.

Policy based personally identifiable information leakage prevention in cloud native enviroments

Techniques for container management and topology visualization are provided. A network topology of a data center is determined, where the network topology includes a plurality of physical servers. A plurality of containers executing in the data center is identified, and for each respective container of the plurality of containers, a respective server from the plurality of physical servers that is executing the respective container is determined. An augmented network topology is generated by correlating the network topology and the determined server executing each container, where the augmented network topology indicates relationships among the plurality of containers and physical resources in the data center.

Container workload monitoring and topology visualization in data centers

Techniques for policy management and enforcement using semantic data modeling are provided. A first declarative policy is received at a network node from a controller. A first semantic data query protocol (SDQP) transaction is generated by retrieving a first semantic data model associated with the network node, where the first semantic data model describes a configuration domain of the network node, and parsing the first declarative policy based on the first semantic data model to generate the first SDQP transaction. The first declarative policy is then implemented by executing the first SDQP transaction against a semantic database.

Context-aware software defined networking policy management and enforcement using semantic data modeling

The disclosure provides a secure and scalable approach for (a) exchanging, between a first network and a second network, provisioning requirements of a user device, (b) executing a smart contract that includes the provisioning requirements, and (c) connecting the user device to one of the networks. The method comprises connecting the user device to a first network, and connecting the first and second networks through a scalable blockchain network. The method further comprises sending a smart contract, by the first network to the second network, through the blockchain network. The second network either accepts or rejects the contract. If the second network accepts, then the user device connects to the second network and the second network provides network services to the user device. The provided network services comply with the conditions or parameters of the smart contract.

Growing community of inventors

Milpitas, CA, United States of America

Anil Bhikuayya Jangam