Versa Networks, Inc.

Juniper Networks, Inc.

Lucent Technologies Inc.

Alcatel-lucent USA Inc.

Pulse Secure, LLC

Riverstone Networks, Inc.

Apurva Mehta

Krishna Sankaran

Kumar B Mehta

Gopi Krishna

Shiva Shenoy

Ramanarayanan Ramakrishnan

Sridhar Vishwanathan Iyer

Srinivasa Chaganti

Kapil Bajaj

Bin William Hong

Jayakrishnan V Iyer

Jagadish Grandhi

Rajagopalan Subbiah

Sanjiv Doshi

Ramasamy Ramanathan

Prakash Kamath

Prashanth Ishwar

Shivaprakash Shenoy

Roopa Bayar

Murtuza S Attarwala

Ananda Sathyanarayana

Akshay Adhikari

Bobby Vandalore

Sunesh Rustagi

Santosh Gupta

Ajay Gaonkar

Andrzej Szyszko

Manish Satyapal Gupta

Hendrikus G P Bosch

Rahul Aggarwal

Eric T Anderson

Rohini Kasturi

Thomas Wayne Anderson

Pankaj Shukla

Kamatchi Soundaram Gopalakrishnan

Dhiraj D Ballal

Dinesh Bakiaraj

Jagadish Narasimha Grandhi

Serpil Bayraktar

Sri Sairam Goli

Michael R MacFaden

Hartmut Schroeder

Sreenivasa R Tellakula

Hendrikus Gp Bosch

Fidelis Prashanth

Amey Gavand

Vignesh Chinnakkannu

Manjunath Prabhu

Juan Sanchez

Debi Prasad Sahoo

Balamurugan Ramaraj

Moojin Jeong

Rama Ramakrishnan

Chetan Bali

Apoorv Saxena

Chitresh Yadav

Rahul Vaidya

Aswin Sivasubramanian

Huaxiang Sun

Randhir Bhattacharya

Gazal Sahai

Jagadishchandra Sarnaik

John Rigby

Deepak Ojha

Ram Krishnan

Venkatesh Badakere Ramachandra

Vikram Bobade

Venkatesh Gota

Diwakar Tundlam

Rajesh Kumar Nuvvula

Ravi Josyula

Rohit Puri

Sureshkannan Duraisamy

Vitaly Dzhitenov

Prem Ananthakrishnan

Suraj Chandrasekaran

Prasanna Siddalingaiah

Priyank Warkede

Mukul Katiyar

Pani Ayyappa

Samya Das Sarma

Dave Traugott

Pulikeshi Vitalapura Ramanath

Praveen Madhav

Ravikiran Keralapura Srinivasa

Ram Prasad

Bill Hong

Indira Priyadarshini Thangella

Kumar Mehta

Amanda Sathyanarayana

Aggarwal Rahul

Bin W Hong

Ramanarayanan Ramarkrishnan

A flow identifier is described for packet sequences through a secure tunnel of an SD-WAN in a tunnel-less mode. A method includes receiving from a first client packets of a same flow, facilitating a secure tunnel between the first hub and the second hub, assigning a flow identifier to the packets, associating fields of a header of a start packet with the flow identifier, sending the start packet with the flow identifier through the secure tunnel, receiving an acknowledgement of the flow identifier, updating a state of the secure tunnel, removing the associated fields from a header of a second packet to form a reduced packet in response to 10 receiving the acknowledgment, encapsulating the reduced packet in a wrapper that includes the flow identifier, and sending encapsulated reduced packet.

Method and apparatus for flow identifier of unidirectional packet sequence flow in tunnel-less SDWAN

A flow identifier is described for packet sequences through a secure tunnel of an SD-WAN in a tunnel-less mode. A method includes receiving a sequence of packets from a first client at the first hub, the sequence of packets each having a same flow, facilitating a secure tunnel between the first hub and the second hub, assigning a flow identifier to the sequence of packets, converting fields from a header of the packet to a metadata supplement to the packet to form a reduced packet, encapsulating the reduced packet in a wrapper that includes the flow identifier, and sending the packet of the sequence of packets from the first hub to the second hub the secure tunnel.

Method and apparatus for metadata conversion with a flow identifier of a packet sequence in a tunnel-less SDWAN

A flow identifier is described for packet sequences through a secure tunnel of an SD-WAN in a tunnel-less mode. A method includes receiving a sequence of packets from a first client at the first hub, the sequence of packets each having a same flow and facilitating a secure tunnel between the first hub and the second hub. A flow identifier is assigned to the sequence of packets. Fields of a header of a start packet of the sequence of packets are associated with the flow identifier and the associated fields are removed from a header of a second packet of the sequence of packets to form a reduced packet. The reduced packet is encapsulated in a wrapper that includes the flow identifier, and the encapsulated reduced packet of the sequence of packets is sent from the first hub to the second hub through the secure tunnel.

Method and apparatus for flow identifier of packet sequence in tunnel-less SDWAN

A non-transitory computer readable medium, a device, and a method for configuring a channel at an access point (AP) are disclosed. In an embodiment, the non-transitory computer readable medium includes instructions for receiving an Internet Protocol (IP) geolocation of an AP at an AP manager, where the IP geolocation indicates a physical location country of the AP, obtaining a configuration of the AP from a configuration database, the configuration of the AP including a configured country, determining whether the physical location country matches the configured country, identifying a common channel when the physical location country of the AP and the configured country of the AP do not match, the common channel including a channel that is authorized for use in both the physical location country and in the configured country, and pushing an indication of the common channel from the AP manager to the AP in a configuration message.

Methods and devices for configuring a channel at an access point (AP)

A flow identifier is described for packet sequences through a secure tunnel of an SD-WAN and an error message for recovering the flow. A method includes receiving a sequence of packets, facilitating a first secure tunnel between a first hub and a second hub, assigning a first flow identifier to the sequence of packets, encapsulating a first start packet, the wrapper including the first flow identifier, sending the encapsulated first start packet to the second hub through the first secure tunnel, receiving an error message from the second hub, the error message including the first flow identifier and an error code, facilitating a second secure tunnel, assigning a second flow identifier, encapsulating a second start packet, the wrapper including the second flow identifier, and sending the encapsulated second start packet through the second secure tunnel.

Method and apparatus to recover flow using an error message in a tunnel-less SDWAN

Embodiments herein disclose path selection for data traffic within a software-defined wide area network using traffic metrics. Some embodiments relate to a method that includes polling peers of the SD-WAN for traffic metrics, receiving traffic metrics from at least a portion of the peers, combining the received traffic metrics, calculating performance of a plurality of possible paths from a source node to a destination node, the nodes being within the SD-WAN topology, and selecting a path from the source node to the destination node based on the calculated performance.

Path selection for data traffic within a software-defined wide area network using traffic metrics

Embodiments herein disclose conditioning traffic through multiple data paths of a Software-Defined Wide Area Network (SD-WAN). Some embodiments include monitoring a path through an SD-WAN to reach a destination node, determining a quality score for packets to the destination node on the path, determining a link utilization for the path, sending a data packet sequence to the destination node on the path, generating a forward error correction (FEC) packet for the data packet sequence, and sending the FEC packet to the destination node on the path in response to the quality score being less than a quality threshold and the link utilization being less than a high utilization threshold.

Data packet traffic conditioning through a lossy data path with forward error correction

End-to-end data packet flow control is described for an overlay environment of a wide area network. A method includes detecting an active session of a specific application with a source node and a destination node within an overlay environment, detecting a traffic flow from the source node to the destination node associated with the active session, mapping the traffic flow to a dedicated service processing thread of a network services appliance, mapping an identifier to the dedicated service processing thread, and forwarding the traffic flow to the destination node through the dedicated service processing thread by applying the identifier to the traffic flow.

End-to-end data packets flow control through an overlay environment of a wide area network

Methods and system for providing network connectivity are disclosed. In an embodiment, a method for providing network connectivity involves receiving from a Mobile Network Operator (MNO) an access ID and an IP address at a SASE domain, wherein the access ID and the IP address correspond to a wireless device, generating an IP address-to-tenant mapping at the SASE domain by applying the access ID and the IP address to an access ID-to-tenant mapping, and forwarding traffic received at the SASE domain from the wireless device via the MNO according to the IP address-to-tenant mapping.

Methods and systems for providing network connectivity to a secure access service edge (SASE) domain

Embodiments of methods and systems for managing traffic across a WAN are disclosed. A method for managing traffic across a WAN involves identifying incoming traffic as Direct Internet Access (DIA) traffic at a first node, identifying incoming traffic as SD-WAN traffic at the first node, policing the DIA traffic at the first node, and adapting the policing of the DIA traffic at the first node in response to a comparison between the SD-WAN traffic and an SD-WAN traffic threshold.

Methods and system for adaptively managing the policing of network traffic

Embodiments herein disclose conditioning traffic through multiple data paths of a Software-Defined Wide Area Network (SD-WAN). Some embodiments include monitoring available paths through an SD-WAN to reach a destination node, determining a quality score for packets to the destination node on a first path of the available paths, sending a data packet sequence to the destination node on the first path, generating a forward error correction (FEC) packet for the packet sequence, and sending the FEC packet to the destination node on a second path of the available paths in response to the quality score being less than a quality threshold.

Data packet traffic conditioning through multiple lossy data paths with forward error correction

Method and systems for transitioning a wireless device between client-less connectivity and client-based connectivity are disclosed. In an embodiment, a method for transitioning a wireless device between client-less connectivity and client-based connectivity involves forwarding traffic from a wireless device through a SASE domain, receiving a request for information related to a SASE gateway in the SASE domain from the wireless device, transmitting information related to the SASE gateway from the SASE domain to the wireless device in response to the request, and transitioning the wireless device between client-less connectivity to the SASE gateway and client-based connectivity to the SASE gateway.

Methods and systems for transitioning between client-less and client-based network connectivity to a secure access service edge (SASE) domain

Embodiments herein disclose conditioning traffic through multiple data paths of a Software-Defined Wide Area Network (SD-WAN). Some embodiments include monitoring a first and a second path through an SD-WAN to reach a destination node, comparing the link utilization for the first and the second path to generate an allocation ratio of the first and the second path, allocating a sequence of data packets to the first and the second path using the allocation ratio to generate a first path data sequence and a second path data sequence, generating a forward error correction (FEC) packet for first path sequence, sending the first path data sequence to the destination node on the first path, sending the second path data sequence to the destination node on the second path, and sending the FEC packet on at least one of the first and the second path.

Data packet traffic conditioning with packet striping through lossy data paths

Embodiments of methods and systems for managing traffic across a WAN are disclosed. A method involves advertising an input rate limit across a WAN from a first node, advertising an input distribution array across the WAN from the first node, wherein the input distribution array includes forwarding class-specific weights, and adapting at least one of the input rate limit and the input distribution array in response to an error between a target forwarding class distribution and an observed input traffic distribution.

Methods and system for adaptively managing the distribution of network traffic

A system and a method are described for data packet fragmentation for replicated packet traffic through an SD-WAN. In an example a first packet has an internet protocol identification (IP-ID). The first packet is replicated to create a second packet. The first packet and the second packet are fragmented into fragments for transmission through a tunnel in one or more paths between the source address and the destination address. The IP-ID of the second packet is modified. The fragments of the first packet and the second packet are separately encapsulated. The first and second packet fragments are received through the tunnel at a second node. The second node reassembles the first packet using the first packet fragments and reassembles the second packet using the second packet fragments. The IP-ID of the reassembled second packet is restored to be the IP-ID of the first packet.

Data packet fragmentation for replicated packet traffic through a software-defined wide area network

Growing community of inventors

Cupertino, CA, United States of America

Apurva Mehta