Arista Networks, Inc.

Arup Raton Roy

Anuraag Mittal

Thejesh Ajjikariappla Panchappa

Nitin Ravindra Karkhanis

Ryan Izard

Junaid Zulfiqar

May Louie

Theiesh Panchappa

Nitin Karkhanis

The disclosure relates to automating a balanced configuration of traffic monitoring filters to monitor traffic in a production network. A deployment in accordance with the disclosure includes a production network and a monitoring fabric. The production network includes a network controller to configure and provide information about the production network, and likewise the monitoring fabric includes a controller to configure and provide information about the monitoring fabric. A filter agent can create traffic monitoring rules that constitute user-defined traffic monitoring filters, and deploy the rules in a balanced fashion across devices in the production network and in the monitoring fabric using information queried from the production network controller and the monitoring fabric controller. The filter agent can redeploy traffic monitoring rules in response to changes in the operating environment.

Automated configuration of filters to monitor production network traffic

A method and system for propagating network traffic flows between end points based on service and priority policies. Specifically, the method and system disclosed herein entail configuring network elements with network-disseminated traffic management policies. Each traffic management policy guides the handling of a network traffic flow between origination and termination end points (i.e., source and destination hosts), which may be defined through data link layer, network layer, and/or transport layer header information, as well as group assignment information, associated with the source and destination hosts.

Method and system for propagating network traffic flows between end points based on service and priority policies

A method and system for processing network traffic is disclosed. The method includes receiving one or more service policies from a control plane service. For each of service policies, a value pattern is generated using at least one of a source group data item and a destination group data item, and a pattern mask is generated on subset of bit locations in the value pattern. The method includes updating a lookup table to incorporate each of the one or more service policies that entails allocating memory for consolidating a new entry in a portion of the lookup table designated for control plane policies. The new entry includes a binding relating the value pattern and the pattern mask to a lookup table result, and the lookup table result specifies a traffic flow instruction and a priority level included in a service policy of the one or more service policies.

Methods and systems for managing network device fabrics. The methods and systems may entail the re-assignment of enforcement responsibilities, pertinent to one or more traffic management and/or access rules, from a service device to a network device fabric.

Growing community of inventors

Burnaby, Canada

Arup Raton Roy