Cisco Technology, Inc.

Ashish Purushottam Attarde

Samar Sharma

Avni Baveja

Mitali Parthasarathy

Biju Mathews Mammen

Mouli Vytla

Rajendra Kumar Thirumurthi

Nikhil Dhar

The present disclosure describes several key features of an agent deployable on a service appliance: agent architecture/design, transport and channel abstractions of the agent, new message definition components, channel switching (e.g., platform independent processing), Channel state machine, platform dependent hooks (e.g., memory, timers), Service key data store, and Secure channel infrastructure. Many of these features alleviate the vendor of the service appliance from having to provide the features. The features and standardization thereof enable the system to be more robust (and increases code quality). Speed of integration is decreased while the risk of integration issues is also decreased. Updates to the agent can be deployed in a controlled and efficient manner. Furthermore, the agent can ensure security between a switch and the agent. The agent deployed and running on vendor appliances provides a unique way to present transport channels that run between the switch, agent, and other service appliance components.

Systems, methods, and apparatus for implementing agents in service appliances

A network apparatus for providing native load balancing within a switch, including: a first network interface operable to communicatively couple to a first network; a plurality of second network interfaces operable to communicatively couple to a second network; one or more logic elements providing a switching engine operable for providing network switching or routing; and one or more logic elements providing a load balancing engine operable for: load balancing network traffic among a plurality of service nodes; probing a first service node; determining that the first service node is unavailable; and reassigning the buckets associated with the first service node to a next available service node.

System and method for minimizing disruption from failed service nodes

In an example, there is disclosed a network apparatus for providing native load balancing within a switch, including: a first network interface operable to communicatively couple to a first network; a plurality of second network interfaces operable to communicatively couple to a second network; one or more logic elements forming a switching engine operable for providing network switching or routing; and one or more logic elements providing a load balancing engine operable for: load balancing network traffic among a plurality of service nodes; probing a first service node; and determining that the first service node is unavailable.

System and method for monitoring service nodes

In an example, there is disclosed a computing apparatus for providing an integrated service engine on a service appliance requiring switching or routing services, including one or more logic elements providing a service appliance engine operable for performing a service appliance function; and one or more logic elements providing a protocol engine operable for: creating a route required by the service appliance; and sending an integrated service engine message (remote route programmability and distribution (RRPD) to an upstream network member comprising instructions to realize the route on the upstream network member. There is also disclosed a method of performing the foregoing operations, and one or more computer-readable mediums having stored thereon instructions for realizing the operations.

Route distribution for service appliances

A method for setting up standby links on a link failure may be provided. The method comprises for a set of N link ports and M standby link ports, where N and M are integers and N is not equal to M, performing the following functions. Determining the status of a link from a first link port of the N ports. After the link from the first link port has failed, determining when a standby link port from the M standby link ports has been assigned to the first link port of the N ports. After the standby link port has been assigned, determining the health of the standby link port. After the standby link port has been assigned and is healthy, redirecting traffic from the first link port to the standby link port.

Fault tolerant level 2 channel selection

In an example, there is disclosed a computing apparatus for providing an integrated service engine on a service appliance, including one or more logic elements providing a service appliance engine operable for performing a service appliance function; and one or more logic elements providing a protocol engine operable for: detecting that a plurality of upstream network switches are connected to the service appliance in a virtual port channel configuration; and provisioning virtual port channel (VPC) services comprising replicating a routing policy to each of the plurality of upstream network switches. There is also disclosed one or more computer-readable mediums having stored thereon instructions for providing the foregoing, and a computer-implemented method of performing the foregoing operations.

Automated configuration of virtual port channels

In one embodiment a forwarding policy from a first network node coupled to a network element is received. The forwarding policy specifies an address of a second network node coupled to the network element. A plurality of ports of the network element are identified, wherein the second network node is accessible from the network element through each of the plurality of ports. The forwarding policy is applied to the plurality of ports of the network element. Network traffic received at a port of the plurality of ports from the second network node is forwarded to the first network node.

Configuration of network elements for automated policy-based routing

In one embodiment, a method for enabling network appliance monitoring is disclosed. The method includes establishing a remote execution channel for executing commands on a network element such as e.g. a switch. The method also includes using the remote execution channel to initiate execution of one or more commands on the network element. The method further includes receiving at least part of an output resulting from the execution of the one or more commands, wherein the received at least part of the output enables performing the network appliance monitoring.

Methods and systems for a monitoring device to execute commands on an attached switch

A method, service appliance, and non-transitory media for establishing connections to virtual device contexts (VDCs) whereby a communication channel for each of the VDCs is identified based on connection data corresponding to each of the VDCs. A service appliance receives, from each of one or more VDCs located on a switch, a message containing connection data that identifies at least one communication channel between the service appliance and a corresponding one of the one or more VDCs from which the message was received. The connection data is stored in a memory accessible to the service appliance. The service appliance identifies a communication channel for each of a plurality of VDCs based on the connection data and an identifier corresponding to each of the plurality of VDCs. The service appliance establishes a connection to each of the plurality of VDCs using the communication channel for each of the plurality of VDCs.

Growing community of inventors

San Jose, CA, United States of America

Ashish Purushottam Attarde