Cisco Technology, Inc.

Atri Indiresan

Sanjay Kumar Hooda

Frank Brockners

Riaz Khan

Manas Pati

Shwetha Subray Bhandari

Roberto Mitsuo Kobo

Akshay Sunil Dorwat

Victor Manuel Moreno

Prakash C Jain

Michael Wu

Kaushik Kumar Dam

Anand Pulicat Gopalakrishnan

Aniket Ghule

Christophe Rene

Da-Yuan Tung

Fabio Rodolfo Maino

Sudhir Kumar Jain

David John Zacks

John William Marshall

Satish Kumar Kondalam

Syed Khalid Raza

Peter Geoffrey Jones

Vina Ermagan

Nalinaksh Pai

Marc Portoles Comeras

Rahul Kachalia

Giovanni Meo

Shivangi Sharma

Mosaddaq Hussain Turabi

Rishabh Parekh

Gaurav Dawra

Linda Tin-Wen Cheng

Iwan Kartawira

Russell E Schroter

Vimarsh Puneet

Sandesh Kumar Narappa Bheemanakone

Himanshu Jain

Anton Smirnov

Sandesh Kumar B Narappa

Felix Yuan

Ramchander Rao Nadipally

Rajesh Arora

Mariam Zaim

Jerish Sam David

John Vickroy

Shakeel Ahmed

Tawei Liao

Melvin Tsai

Chunjen Wang

This disclosure describes various methods, systems, and devices related to identifying path changes of data flows in a network. An example method includes receiving, at a node, a packet including a first signature. The method further includes generating a second signature by inputting the first signature and one or more node details into a hash function. The method includes replacing the first signature with the second signature in the packet. The packet including the second value is forwarded by the node.

Path signatures for data flows

This disclosure describes various methods, systems, and devices related to identifying an issue in a network using a probe packet. An example method includes identifying an expired data packet transmitted in a network and addressed to a destination; generating a probe packet addressed to the destination; and forwarding the probe packet. When the probe packet is received, a report indicating a routing loop in the network can be transmitted to an administrator.

Diagnosing and resolving issues in a network using probe packets

An embodiment is directed to switchover operations with a mobile virtualized network device in a mobile device. The mobile virtualized hardware switchover operations may be used to selectively and temporarily provide virtualized control-plane operations to the data-plane of a non-redundant network device undergoing an upgrade or a reboot of its control plane. A non-redundant network device may operate hitless, or near hitless, operation even when its control plane is unavailable.

Near-hitless upgrade or fast bootup with mobile virtualized hardware

An exemplary method is disclosed that facilitate the on-demand creation of an exemplary instrumented network device in a cloud infrastructure, remote server, evaluation platform, or customized testing server and to form a stack between the instrumented network device as a debug network device and a target network device. The control plane of the target network device then switches over, via a switchover operation, to the control plane of the debug network device, while the data-plane of the target network device continues to operate. Once switched over, the instrumentation (e.g., hardware or software) of the control plane or debug network device facilitates the debug, optimization, profile, and/or recovery of the physical network device, even in a live network.

System and method to debug, optimize, profile, or recover network device in live network

This disclosure describes various methods, systems, and devices related to identifying path changes of data flows in a network. An example method includes receiving, at a node, a packet including a first value. The method further includes generating a second value by inputting the first value and one or more node details into a hash function. The method includes replacing the first value with the second value in the packet. The packet including the second value is forwarded by the node.

An embodiment is directed to switchover operations with a virtualized network device in a cloud or remote infrastructure. The virtualized hardware switchover operations may be used to selectively and temporarily provide virtualized control-plane operations to the data-plane of a non-redundant network device undergoing an upgrade or a reboot of its control plane. A non-redundant network device may operate hitless, or near hitless, operation even when its control plane is unavailable.

Near-hitless upgrade or fast bootup with virtualized hardware

Client device blocking may be provided. A switching device may receive data from a first client device. The data may be addressed to a second client device. Then it may be determined that both the first client device and the second client device belong to a protected group. Next, in response to determining that both the first client device and the second client device belong to the protected group, the data may be blocked from being forwarding to the second client device on a network interface of the switching device.

Isolation of clients within a virtual local area network (VLAN) in a fabric network

A controller device for a network provides data associated with pipeline capabilities of a programmable switch. The programmable switch receives data associated with pipeline capabilities of the programmable switch. The pipeline capabilities include a plurality of flow tables and allowable table transitions for each of the flow tables. The programmable switch determines that a first flow table and a second flow table are mutually independent based on the allowable table transitions for each of the flow tables. The programmable switch configures a pipeline for data flow in the computing device, the pipeline comprising a plurality of pipeline stages, a particular pipeline stage comprising the first flow table and the second flow table.

Dynamic hardware forwarding pipeline compression

In one embodiment, a method comprises receiving traffic to send from a router to a host in the fabric edge network, wherein the fabric edge network comprises a plurality of switches and an inter-switch link (ISL); and sending the traffic from the router to the host via at least one of the switches based on the downlink connectivity of the host. Sending the traffic from the router to the host is performed without sending the traffic through the ISL. Sending the traffic from the router to the host comprises sending the traffic through the ISL when there is a link failure on a path between the router and the host.

Unequal cost load balancing for redundant virtualized fabric edge devices

In one embodiment, a method is performed at a controller of a fabric that is connected to a first seed device in the fabric. The method includes obtaining a connectivity graph of the fabric including the first seed device. The method further includes causing the first seed device to send a first request to a first neighboring device in the connectivity graph via a first interface of the first seed device connectable to the first neighboring device. The method also includes assigning fabric component properties to devices in the fabric based at least in part on a first message from the first seed device, where the first seed device generates the first message based at least in part on a first response from the first neighboring device received via the first interface. The method additionally includes converting the first neighboring device to a second seed device in the fabric.

Systems and methods for enterprise fabric creation

This disclosure describes various methods, systems, and devices related to identifying path changes of data flows in a network. An example method includes receiving, at a node, a packet including a first path signature. The method further includes generating a second path signature by inputting the first path signature and one or more node details into a hash function. The method includes replacing the first path signature with the second path signature in the packet. The packet including the second path signature is forwarded by the node.

A method is performed by an access router of an enterprise network including a first edge router to communicate with a second edge router over a wide area network (WAN). The method includes receiving a packet from a first endpoint, receiving from a mapping service a network location of a second edge router for which the packet is destined and a security association (SA) to encrypt the packet from the access router to the second edge router, and generating for the first edge router one or more path selectors for WAN path selection. The method includes encrypting the packet using the SA, and adding to the encrypted IP packet, in clear text, the path selectors and outer encapsulation including the network location, to produce an encrypted tunnel packet. The method also includes forwarding the encrypted tunnel packet to the second edge router via the first edge router and the WAN.

Secure WAN path selection at campus fabric edge

Growing community of inventors

Sunnyvale, CA, United States of America

Atri Indiresan