Cisco Technology, Inc.

Hewlett Packard Enterprise Development LP

Aseem Sethi

Pranav Tiwari

Mark Andrew Denny

Manoj Wagle

Isaac Theogaraj

Gopal Gupta

Abhinesh Mishra

Sragdhara Datta Chaudhuri

Tanuka Dutta

Sragdhura D Chaudhuri

In an example implementation consistent with the features disclosed herein, publisher-subscriber message mapping is performed. A message is received from a publisher, with the message including a first topic. The first topic includes a gateway identifier of a gateway for the publisher. The gateway identifier is then mapped to a user identifier. The first topic of the message is modified to a second topic by replacing the gateway identifier with the user identifier. The message is then sent to a subscriber that is subscribed to the second topic.

Publisher-subscriber message mapping

Systems and methods are provided for dynamic virtual private network concentrators (VPNC) gateway selection and on-demand VRF-ID configuration. A dynamic VPNC gateway selection component can dynamically route to a particular VPNC gateway based on multiple user-specific factors, including: a) behavior of users on the network; and b) performance of a destination service/device. A dynamic VPNC gateway selection component can rank a user based on one or more factors relating to the behavior of the user. Also, the dynamic VPNC gateway selection component can determine whether a VPNC gateway at a data center is healthy, and whether a destination service at the data center is healthy. The dynamic VPNC gateway selection component can dynamically select a VPNC gateway from a plurality of VPNC gateways at the data center for communicating forwarded traffic from the user based on the user's ranking if either the VPNC gateway or the service are unhealthy.

Dynamic selection of a VPNC gateway based on user behavior

A method is provided that includes receiving, at a first access point in a local area network, a request from a client device to access a wireless local area network. The method also includes creating authentication credentials for the client device based on an identification of the client device, and transmitting the authentication credentials for the client device to a second access point, wherein the first access point and the second access point share a secure block chain application. The method also includes allowing the client device to roam from the first access point to the second access point without requesting new authentication credentials. A system and a non-transitory, computer-readable medium storing instructions to perform the above method are also provided.

Remote access point clustering for user authentication in wireless networks

In some examples, a system monitors a network that includes a collection of interconnected virtual network functions (VNFs), the monitoring comprising receiving control information from a VNF of the VNFs, the control information specifying an action to take to address an issue detected by the VNF. Responsive to the monitoring, the system modifies an allocation of resources to the VNF.

Modifying resource allocation or policy responsive to control information from a virtual network function

In some examples, a first virtual network function (VNF) that is part of a collection of interconnected VNFs detects a service interruption in a network that includes the collection interconnected VNFs. In response to detecting the service interruption, the first VNF sends control information to a target entity, the control information specifying an action to take to change a communication flow through the collection of interconnected VNFs.

Virtual network function response to a service interruption

An interface module in a user space intercepts a call from a first virtual process, the call to cause communication of data from the first virtual process to a second virtual process. The interface module accesses mapping information to redirect the communication of data to the second virtual process without passing through the protocol stack of a kernel, the mapping information comprising entries each including network addresses used in identifying a respective connection between corresponding virtual processes.

Communication of data between virtual processes

Example implementations relate to a data processing method for monitoring at least one performance metric associated with a characteristic of a virtual network function; the method comprising instantiating the virtual network function, monitoring said at least one performance metric associated with the characteristic of the virtual network function; and adapting allocated resources supporting the virtual network function according to said monitoring.

Network function virtualisation

An example system comprising a management server to execute a directory service for internet-of-things (IoT) devices deployed on the management server, the management server to receive a subscription message including a topic about the IoT devices from a client device, store an address of the client device and the corresponding topic subscribed by the client device in the directory service for the IoT devices, extract device information from a sensor, wherein the device information includes the topic about the IoT devices, and transmit a configuration packet to the sensor in response to an identification of the topic from the device information, wherein the configuration packet includes the address of the client device.

Subscription based directory services for IOT devices

An example network orchestrator includes processing circuitry and memory. Instructions of the memory, when executed by the processing circuitry, cause the network orchestrator to receive an indication that a branch gateway has joined a SD-WAN. The instructions further cause the network orchestrator to determine, based on parameters of the branch gateway, a geographic location of the branch gateway. The instructions further cause the network orchestrator to select a set of headend gateways located in a region including the geographic location of the branch gateway. The instructions further cause the network orchestrator to calculate a suitability score for each headend gateway based on the geographic location of the branch gateway in comparison to a geographic location of the each headend gateway. The instructions further cause the network orchestrator to assign the branch gateway to a headend gateway of the set of headend gateways with an optimal suitability score.

Automated gateway selection in SD-WAN

A system and method for a self-adapting SDWAN to ensure compliance with client requirements. A SDWAN performance analyzer continuously monitors all of the nodes within an SDWAN, receiving a plurality of operational data regarding operational parameters of each node. Based on the operational data, a machine learning algorithm is applied to develop a tree-structure representative of a desired network configuration, based on the real-time state of the network, to ensure compliance with client requirements. The SDWAN performance analyzer can generate configuration commands to send to one or more of the nodes in the SDWAN to reconfigure the operational parameters of the nodes in line with the desired network configuration.

Generation of network configuration and configuration commands for impacted nodes of a software defined wide area network

A network access server (NAS) determines the status of availability (e.g., how much more quota is unused) of an access resource, and sends a notification embedded in a point-to-point protocol (PPP) packet. The format of the packet is chosen such that definition/use of higher layers (e.g., HTTP) is not required to communicate the status to a client system. As a result, the user may be notified even if software such as web browser is not being executed on the client system.

Growing community of inventors

Bengaluru, India

Aseem Sethi