Cisco Technology, Inc.

Cohesity, Inc.

Telefonaktiebolaget Lm Ericsson (publ)

Nxp B.v.

Anubhav Gupta

Navindra Yadav

Shashidhar R Gandham

Shih-Chun Chang

Abhishek Ranjan Singh

Jackson Ngoc Ki Pang

Hai Trong Vu

Khawar Deen

Rohit Chandra Prasad

Zhihuan Qiu

Anirvan Duttagupta

Hendrikus G P Bosch

Sunil Gupta

Supreeth Hosur Nagesh Rao

Jeffrey Michael Napper

Ashutosh Kulshreshtha

Sudhir Srinivas

Venkata Ranga Radhanikanth Guturi

Praveen Kumar Yarlagadda

Stefan Olofsson

Sachin Jain

Sidharth Mishra

Ali Parandehgheibi

Apurv Gupta

Hoang Viet Nguyen

Omid Madani

Varun Sagar Malhotra

Vimalkumar Jeyakumar

Michael Standish Watts

Ellen Christine Scheib

Roberto Fernando Spadaro

Bharathwaj Sankara Viswanathan

Subramanian Sethumadhavan

Fnu Rachita Agasthy

Duane Thomas Barlow

Ijsbrand Wijnands

Fabio Rodolfo Maino

Alberto Rodriguez Natal

Lars Olaf Stefan Olofsson

Sarthak Agarwal

Nagapramod S Mandagere

Laxmikantha Reddy Ponnuru

Chinmaya Manjunath

Karandeep Singh Chawla

Venkatesh Prabhakar

Mahesh Kumar

Prashant Gaurav

Shreyas Talele

Samual Krish Ravichandran

Sanjay Kumar Hooda

Mohit Aron

Samir D Thoria

Rex Emmanuel Fernando

Vamsidhar Valluri

Abhijit Chakankar

Manoj Singhal

Arunkumar M Desigan

Syam Sundar Appala

Yu-Shen Ng

Prashant Gothi

Jeffrey Howard

Arun Sharma

Aiswarya Bhavani Shankar

Naga Venkata Sai Indubhaskar Jupudi

Ajay Kumar Mishra

Ganesha Shanmuganathan

Sape Jurriën Mullender

Pritam Baruah

Prabahar Radhakrishnan

Avoy Nanda

Manvendra Singh Tomar

Satyajit Das

Malini Mahalakshmi Venkatachari

Sharath Kumar Naeni

Sireesha Yeruva

Avinash Sridharan

Prashant Saraswat

Suresh Bysani Venkata Naga

David Alan Du

Mukund Srinivasan

Veluchamy Dinakaran

Mahesh Eknath Bhole

Manvendra Tomar Singh

Varun Sagar Malhorta

Peter James Stonard

Sunil Kumar Gupta

The subject matter of this disclosure relates in general to the field of computer networking, and more particularly, to systems and methods for discovery of a tunnel for wide area network. Certain aspects provide a method for network path analysis. The method includes sending a first probe packet configured to identify a network tunnel, wherein the first probe packet includes an identifier of the first probe packet and a first time to live (TTL) value that corresponds to a first network hop; receiving a first response message from the first network hop in the network tunnel, wherein the first response message corresponds to the first probe packet and includes the identifier of the first probe packet; and analyzing the network tunnel based on the first response message including the identifier of the first probe packet.

Underlay path discovery for a wide area network

Systems, methods, and computer-readable media for updating configurations in sensors deployed in multi-layer virtualized environments. In some examples, a system can track information of sensors and collectors in the network. In response to determining that a specific collector becomes unavailable (e.g., the specific collector is down, offline or becomes unsupported), the system can determine affected sensors corresponding to the specific collector, determine a new collector among active collectors of the network for each of the affected sensors, and dynamically update configuration and settings of the affected sensors to maintain proper collector-to-sensor mappings and other settings on the affected sensors.

Auto update of sensor configuration

In one embodiment, a router includes one or more processors and one or more computer-readable non-transitory storage media coupled to the one or more processors. The one or more computer-readable non-transitory storage media include instructions that, when executed by the one or more processors, cause the router to perform operations including receiving software-defined networking in a wide area network (SD-WAN) policies from a component of an SD-WAN network. The operations also include establishing a session with a mobile device and receiving information associated with the mobile device in response to establishing the session with the mobile device. The operations further include filtering the SD-WAN policies based on the information associated with the mobile device to generate SD-WAN device-specific policies and communicating the SD-WAN device-specific policies to the mobile device.

Systems and methods for distributing SD-WAN policies

Systems, methods, and computer-readable media for locally applying endpoint-specific policies to an endpoint in a network environment. A network device local to one or more endpoints in a network environment can receive from a centralized network controller one or more network-wide endpoint policies. A first endpoint of the one or more endpoints can be configured to inject policy metadata into first data traffic. Policy metadata injected into the first traffic data can be received from the first endpoint. The network device can determine one or more first endpoint-specific polices for the first endpoint by evaluation the first policy metadata with respect to the one or more network-wide endpoint policies. As follows, the one or more first endpoint-specific policies can be applied to control data traffic associated with the first endpoint.

On-path dynamic policy enforcement and endpoint-aware policy enforcement for endpoints

A specification of content to be stored in a cloud storage is received at a client-side component. A first portion of the content is divided into a plurality of data chunks. One or more data chunks of the plurality of data chunks that are to be sent via a network to be stored in the cloud storage are identified. It is determined whether a batch size of the one or more identified data chunks does not meets a threshold size. One or more data chunks of a second portion of the content that are to be stored in the cloud storage are identified. It is determined that a size of a second batch of data chunks that includes the one or more identified data chunks of the first portion of the content and the one or more identified data chunks of the second portion of the content does not meet the threshold size. It is determined that a batch period is greater than or equal to a batch threshold period. The second batch of data chunks is written to a storage of a cloud server included in a data plane.

Efficiently storing data in a cloud storage

An example method includes detecting, using sensors, packets throughout a datacenter. The sensors can then send packet logs to various collectors which can then identify and summarize data flows in the datacenter. The collectors can then send flow logs to an analytics module which can identify the status of the datacenter and detect an attack.

System for monitoring and managing datacenters

Metadata associated with content stored in a corresponding primary storage system is received receiving from each secondary storage cluster of a plurality of different secondary storage clusters included in different storage domains. The metadata received from the plurality of different secondary storage clusters is stored and indexed together. A unified metadata search interface is provided for stored data of the corresponding primary storage systems and the plurality of different secondary storage clusters of the different storage domains.

Unified metadata search

According to certain embodiments, a system comprises one or more processors and one or more computer-readable non-transitory storage media comprising instructions that, when executed by the one or more processors, cause one or more components of the system to perform operations comprising: receiving location data associated with a plurality of remote users accessing one or more existing remote access gateways that are located at one or more network locations; building a heatmap of user locations based at least in part on the received location data; and identifying, from the heatmap of user locations, at least one new network location in which to generate at least one new remote access gateway, or at least one existing network location in which to remove at least one of the existing remote access gateways.

Systems and methods for dynamically generating a mobile software-defined wide area network gateway location for remote users

Systems, methods, and computer-readable media for managing compromised sensors in multi-tiered virtualized environments. In some embodiments, a system can receive, from a first capturing agent deployed in a virtualization layer of a first device, data reports generated based on traffic captured by the first capturing agent. The system can also receive, from a second capturing agent deployed in a hardware layer of a second device, data reports generated based on traffic captured by the second capturing agent. Based on the data reports, the system can determine characteristics of the traffic captured by the first capturing agent and the second capturing agent. The system can then compare the characteristics to determine a multi-layer difference in traffic characteristics. Based on the multi-layer difference in traffic characteristics, the system can determine that the first capturing agent or the second capturing agent is in a faulty state.

Technologies for managing compromised sensors in virtualized environments

In one embodiment, a method by an edge router configured to operate at a first site of a software-defined wide-area network includes receiving a data packet from a first host located in the first site, where the data packet is destined to a second host located in a second site, determining that an identifier of a second group to which the second host belongs is not available at the edge router, sending a request for an identifier of the second group to a network apparatus, where the request may comprise an address of the second host, receiving a response comprising the identifier of the second group from the network apparatus, determining that the second group is a destination group, applying one or more policies associated with the destination group to the data packet, and causing the data packet to be routed to the second host.

Group-based policies for inter-domain traffic

Data associated with a source system is ingested. After the data is ingested, a post-processing metadata conversion process is performed including by selecting an entry of a chunk metadata data structure and determining that a data chunk associated with the selected entry is not referenced by at least a threshold number of objects. In response to determining that the data chunk associated with the selected entry is not referenced by at least the threshold number of objects, metadata of a tree data structure node corresponding to a chunk identifier associated with the data chunk is updated to store a reference to a chunk file storing the data chunk and the selected entry is removed from the chunk metadata data structure.

Reducing memory usage in storing metadata

A request to launch an application that is comprised of a plurality of layers is received. Each layer of the plurality of layers of the application is comprised of one or more corresponding virtualization resource units. The one or more corresponding virtualization resource units at each of the plurality of layers of the application is expressed as a resource ratio. It is determined that a surplus of resources is available for one or more applications. In response to determining that the surplus of resources is available for one or more applications, a priority associated with the application is determined. A version of the application is launched based on the determined priority associated with the application. The launched version of the application maintains the resource ratio.

Scaling virtualization resource units of applications

A cloud server component determines that a size of a first cloud storage element object is at least below a first threshold. In response to the first determination, a client-side component is requested to store additional data in the cloud storage element object including by having the client-side component update the first cloud storage element with an updated version that includes previously existing data of the first cloud storage element and the additional data. The first cloud storage element object is added to a set of one or more cloud storage element objects available for update. The client-side component is configured to generate an updated version of the first cloud storage element object that has a size that is greater than or equal to the first threshold.

Growing community of inventors

Sunnyvale, CA, United States of America

Anubhav Gupta