Juniper Networks, Inc.

Vmware, Inc.

Cisco Technology, Inc.

Anil Lohiya

Yakov Rekhter

Rahul Aggarwal

Xinhua Hong

Dhananjaya Rao

Amit Shukla

Vipin Jain

Kaushik Ghosh

Stephen Tan

Ramasamy Ramanathan

Senthilkumar Karunakaran

Manoj Sharma

Rahul Kasralikar

Meenakshi Sundaram Selvaraj

Shrinivasa Kini

Vijayalaxmi Basavaraj

Cunzhi Lu

Steven Xu

Amit Srivastav

Nitin Kumar

Ravi Shekhar

Jianjun Shen

Maheedhar Nallapareddy

Akshay Kale

Fang Peng

Jagdeep Channa

A method for creating overlay networking constructs to establish network connectivity between virtual routers and remote physical gateways is provided. An orchestrator receives a mapping between tenant network identifiers for multiple tenant networks and overlay network identifiers for multiple overlay networks. The orchestrator attaches a virtual router to a parent logical port of an overlay logical switch for connectivity between a physical gateway and the multiple tenant networks. The orchestrator creates multiple child logical ports that are sub-interfaces of the parent logical port. Each child logical port is uniquely identified by a tenant network identifier. The orchestrator connects multiple child logical switches to the multiple child logical ports according to the received mapping. Each child logical switch is uniquely identified by an overlay network identifier. The orchestrator establishes multiple overlay networks based on the child logical switches to tunnel data between the physical gateway and the child logical ports.

Orchestration of tenant overlay network constructs

A network system that uses a cluster of edge nodes to send and receive multicast traffic is provided. The network system is a network virtualization environment that includes one or more distributed routers, each distributed router implemented by virtualization software running on one or more host machines. The network system also includes a cluster of edge nodes for sending data from the one or more distributed routers to one or more uplink/upstream physical routers outside of a datacenter and for receiving data from the physical routers to the distributed routers. One of the edge nodes is a designated edge node that queries for membership information for one or more multicast groups to be received by at least two edge nodes of the cluster of edge nodes. The cluster of edge nodes forwards multicast traffic to and from the distributed routers according to the received membership information.

Active-active support of multicast streams in virtualized environment

In some embodiments a method includes receiving, at a first network device, a data unit to be sent to second network device via a tunnel, the data unit associated with an application. The method includes appending, to the data unit, an encapsulation header that includes a first portion configured such that the second network device is configured to forward the data unit based on the second portion of the encapsulation header that is configured to identify the application. The method includes sending, from the first network device to the second network device via a first portion of the tunnel, the data unit such that the second network device appends the encapsulation header to the data unit prior to forwarding the data unit via a second portion of the tunnel.

End to end application identification and analytics of tunnel encapsulated traffic in the underlay

A network device may receive user datagram protocol (UDP) packets associated with an internet protocol (IP) session. The network device may apply a first firewall filter by setting one or more bits of each UDP packet to particular bit values to allow each UDP packet to be identified in association with the first firewall filter. The network device may update, each time a UDP packet is received, a first packet counter to account for a total number of UDP packets to which the first firewall filter has been applied. The network device may provide each UDP packet to another network device. The other network device may update a second packet counter. The network device and the other network device may provide the first packet counter and the second packet counter to a server device to cause the server device to determine packet loss information for the IP session.

Packet loss detection for user datagram protocol (UDP) traffic

A network device receives, from another network device associated with a first data center, a route update that includes a common virtual network identifier or a first virtual network identifier associated with the first data center. The network device translates the common virtual network identifier or the first virtual network identifier to a second virtual network identifier associated with a second data center, where the second data center is different than the first data center. The network device provides the route update, with the second virtual network identifier, to the second data center.

Interconnecting virtual networks using an ethernet virtual private network (EVPN) and virtual extensible local area network (VXLAN) based overlay network

In general, techniques for facilitating a distributed network (L3) subnet by which multiple independent control planes of network devices connected to physically separate L2 networks provide L2 reachability to/from a single L3 subnet. In some examples, a shared L2 network physically situated to connect a plurality of physically separate L2 networks 'stitches' the L2 networks together within the respective, independent control planes of switches such that the control planes bridge L2 traffic for a single bridge domain for the separate L2 networks to the shared L2 network and visa-versa. Each of the independent control planes may be configured with a virtual IRB instance associated with the bridge domain and with a common network subnet. Each of the virtual IRBs provides a functionally similar routing interface for the single bridge domain for the separate L2 networks and allows the shared network subnet to be distributed among the independent control planes.

Distributed network subnet

Presented herein are techniques to detect a misconfigured duplicate Internet Protocol (IP) address in a distributed data center network fabric. A network topology is provided that includes a plurality of network elements. A network element receives a configuration message comprising an IP address from a first host associated with the first network element. The IP address is detected to already be in use by a second host associated with a second network element. A request message is provided to the second network element, the request message configured to cause the second network element to attempt to contact the second host. A reply message is received from the second network element. If the reply message indicates that the second host exists at the second network element, an indication of a misconfiguration event is generated. Otherwise, the IP address is associated with the first host.

Detection of a misconfigured duplicate IP address in a distributed data center network fabric

Principles of the invention are described for providing multicast virtual private networks (MVPNs) across a public network that are capable of carrying high-bandwidth multicast traffic with increased scalability. In particular, the MVPNs may transport layer three (L3) multicast traffic, such as Internet Protocol (IP) packets, between remote sites via the public network. The principles described herein may reduce the overhead of protocol independent multicast (PIM) neighbor adjacencies and customer control information maintained for MVPNs. The principles may also reduce the state and the overhead of maintaining the state in the network by removing the need to maintain at least one dedicated multicast tree per each MVPN.

Transport of control and data traffic for multicast virtual private networks

Reliable exchange of control information for multicast virtual private networks

Multicast data trees for multicast virtual private networks

Principles of the invention are described for providing multicast virtual private networks (MVPNS) across a public network that are capable of carrying high-bandwidth multicast traffic with increased scalability. In particular, the MVPNs may transport layer three (L) multicast traffic, such as Internet Protocol (IP) packets, between remote sites via the public network. The principles described herein may reduce the overhead of protocol independent multicast (PIM) neighbor adjacencies and customer control information maintained for MVPNs. The principles may also reduce the state and the overhead of maintaining the state in the network by removing the need to maintain at least one dedicated multicast tree per each MVPN.

Growing community of inventors

Cupertino, CA, United States of America

Anil Lohiya