Juniper Networks, Inc.

Apoorva Jindal

Sandeep Bajaj

Rahul Kasralikar

Jainendra Kumar

Ramya Olichandran

Rahul Jain

Sandip K Shah

Rahul S Kasralikar

A computer-implemented method for increasing the scalability of software-defined networks may include (1) maintaining a set of databases collectively configured to (i) store a set of flow entries that direct network traffic within a software-defined network and (ii) facilitate searching the set of flow entries based at least in part on at least one key whose size remains substantially constant irrespective of the number of flow entries within the set of flow entries, (2) detecting a request to perform an operation in connection with a flow of data packets within the software-defined network, (3) identifying at least one attribute of the flow of data packets in the request, and then (4) searching, using the attribute of the flow of data packets as a database key, at least one database within the set of databases to facilitate performing the operation. Various other methods, systems, and apparatuses are also disclosed.

Systems and methods for increasing the scalability of software-defined networks

A computer-implemented method for interfacing software-defined networks with non-software-defined networks may include (1) receiving at least one packet via software-defined network at a switching device, (2) searching a set of flow entries that collectively direct network traffic within the software-defined network for a flow entry that corresponds to the packet, (3) determining that the packet is destined for a non-software-defined network based at least in part on the search, and (4) forwarding the packet to the non-software-defined network via a logical tunnel that interfaces the software-defined network with the non-software-defined network by connecting a virtual port within the software-defined network to a virtual port within the non-software-defined network. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for interfacing software-defined networks with non-software-defined networks

A system is configured to receive a set of rules that specify how packets are to be processed by a node, where the set of rules include one or more negative rules that identify operations to be performed, by the node, when information associated with the packets does not match information specified by the negative rules, and one or more positive rules that identify other operations to be performed, by the node, when the information associated with the packets matches information specified by the positive rules. The system is also configured to create a group of modified rules by converting the negative rules into a corresponding group of positive rules; and install the modified rules in the node that allows the node to process the packets, using the modified rules, as though the node was processing the packets using the set of rules.

Transposing a packet firewall policy within a node

Growing community of inventors

San Jose, CA, United States of America

Apoorva Jindal