Cisco Technology, Inc.

Avni Baveja

Samar Sharma

Mitali Parthasarathy

Ashish Purushottam Attarde

Biju Mathews Mammen

Mouli Vytla

Nikhil Dhar

Derek L Huckaby

Walter Song

Ashish Ashish Attarde

In an example, there is disclosed a network switch or other computing apparatus comprising: an ingress interface; a plurality of egress interfaces; and one or more logic elements, including at least a content addressable memory (CAM), comprising a channel selection engine to provide persistent channel selection comprising: receive a packet on the ingress interface; inspect a layer 2 (L2) attribute of the packet; lookup the L2 attribute in the CAM; and assign the packet to an egress interface communicatively coupled to a network service.

Layer 2 channel selection

An example method is provided and includes configuring a service on a network element; associating a directly connected port with the service to create a port channel between the network element and a directly connected service appliance, the port channel comprising a plurality of member ports; performing an auto-discovery process for each of the member ports; and, upon successful completion of the performing, indicating on the network element that the service appliance is operational. In certain embodiments, the network element includes an intelligent service card manager module ('ISCM') that forms part of a Remote Integrated Service Engine ('RISE') element with a corresponding intelligent service card client module (&#x201c;ISCC&#x201d;) installed on the service appliance. The method may further include, upon unsuccessful completion of the auto-discovery process, repeating the auto-discovery process.

Discovery protocol for enabling automatic bootstrap and communication with a service appliance connected to a network switch

An example method for zero touch configuration and synchronization of a service appliance in a network environment includes receiving, at an appliance port on a service appliance, an indication that a switch port on a switch changed from an inactive status to an active status, the appliance port being connected over a network to the switch port, starting a bootstrap protocol, including by receiving at the service appliance from the switch, a bootstrap message from a service executing in the switch, creating, by the service appliance, an empty port channel at the service appliance, adding, by the service appliance, the appliance port to the port channel, and associating, by the service appliance, the service to the port channel in a cache.

Zero touch configuration and synchronization of a service appliance in a network environment

The present disclosure describes several key features of an agent deployable on a service appliance: agent architecture/design, transport and channel abstractions of the agent, new message definition components, channel switching (e.g., platform independent processing), Channel state machine, platform dependent hooks (e.g., memory, timers), Service key data store, and Secure channel infrastructure. Many of these features alleviate the vendor of the service appliance from having to provide the features. The features and standardization thereof enable the system to be more robust (and increases code quality). Speed of integration is decreased while the risk of integration issues is also decreased. Updates to the agent can be deployed in a controlled and efficient manner. Furthermore, the agent can ensure security between a switch and the agent. The agent deployed and running on vendor appliances provides a unique way to present transport channels that run between the switch, agent, and other service appliance components.

Systems, methods, and apparatus for implementing agents in service appliances

In an example, there is disclosed a network apparatus for providing native load balancing within a switch, including: a first network interface operable to communicatively couple to a first network; a plurality of second network interfaces operable to communicatively couple to a second network; one or more logic elements comprising a switching engine operable for providing network switching; a content-addressable memory (CAM); and one or more logic elements providing a load balancing engine operable for: receiving incoming network traffic via the first network; selecting the incoming network traffic based at least in part on a selection factor, and load balancing selected traffic to a first egress interface based at least in part on a load balancing factor other than an IP address.

Intelligent data paths for a native load balancer

Embodiments of the present disclosure enable monitoring network traffic on multiple Virtual Device Context (VDC) elements of a switch using a single NAM module. To that end, if a monitored network element supports contexts (i.e. VDC elements), a NAM module could be configured to seamlessly drive the move of the data port interfaces (at the managed device) from one context to the other. After the move of the data ports that support SPAN destination traffic flow to the target VDC is complete, these SPAN destination ports may be configured to be able to receive SPAN data traffic.

Methods and systems for a network appliance module enabling dynamic VDC aware span

A computing apparatus for providing an integrated service engine on a network switch, including: one or more logic elements comprising a protocol engine operable for providing a state machine, wherein states of the state machine include: an add-in-progress state operable for receiving an automated policy-based routing (APBR) add transaction, and to set an add-in-progress flag; an add-complete state operable for receiving an APBR add-complete transaction and to clear the add-in-progress flag; a delete-in-progress state operable to receive an APBR delete transaction and to set a delete-in-progress flag; and a delete-complete state operable to receive an APBR delete-complete transaction and to clear the delete-in-progress flag.

System and method for automated policy-based routing

In an example, there is disclosed a computing apparatus for providing an integrated service engine on a network switch, including: one or more logic elements including a protocol engine operable for providing routing policies, including: providing an ADD command, comprising a first ordinal list of operations; and providing a DELETE command, comprising a second ordinal list of operations, wherein the second ordinal list of operations is the ordinal inverse of the first ordinal list of operations.

Route map policies for network switches

A method is provided in one example embodiment and includes transmitting from an appliance connected to a first virtual device context ('VDC') instantiated on a network device a request for statistics associated with selected ones of a plurality of VDCs implemented on the network device, wherein the plurality of VDCs includes the first VDC and wherein the appliance is connected to the first VDC via a management link; and receiving at the appliance the requested statistics associated with the plurality of VDCs. The method may further comprise receiving at the appliance a configuration message, wherein the configuration message identifies at least one of the selected ones of the plurality of VDCs for which statistics are to be provided, at least one type of statistic to be provided for the selected ones of the VDCs, and a polling interval at which statistics are to be collected from the selected VDCs.

Mechanism for serving hardware resource information to an attached appliance

In an example, there is disclosed a computing apparatus for providing an integrated service engine on a service appliance requiring switching or routing services, including one or more logic elements providing a service appliance engine operable for performing a service appliance function; and one or more logic elements providing a protocol engine operable for: creating a route required by the service appliance; and sending an integrated service engine message (remote route programmability and distribution (RRPD) to an upstream network member comprising instructions to realize the route on the upstream network member. There is also disclosed a method of performing the foregoing operations, and one or more computer-readable mediums having stored thereon instructions for realizing the operations.

Route distribution for service appliances

A method for setting up standby links on a link failure may be provided. The method comprises for a set of N link ports and M standby link ports, where N and M are integers and N is not equal to M, performing the following functions. Determining the status of a link from a first link port of the N ports. After the link from the first link port has failed, determining when a standby link port from the M standby link ports has been assigned to the first link port of the N ports. After the standby link port has been assigned, determining the health of the standby link port. After the standby link port has been assigned and is healthy, redirecting traffic from the first link port to the standby link port.

Fault tolerant level 2 channel selection

In an example, there is disclosed a computing apparatus for providing load-balanced switching, including a switching network; one or more logic elements operable for providing network switching or routing; and one or more logic elements providing a load balancing engine operable for: load balancing at least some incoming network traffic; receiving an exclude list identifying a network node excluded from load balancing; identifying a network packet directed to the network node excluded from load balancing; and directing the network packet to the network.

Exclude filter for load balancing switch

In an example, there is disclosed a computing apparatus for providing an integrated service engine on a service appliance, including one or more logic elements providing a service appliance engine operable for performing a service appliance function; and one or more logic elements providing a protocol engine operable for: detecting that a plurality of upstream network switches are connected to the service appliance in a virtual port channel configuration; and provisioning virtual port channel (VPC) services comprising replicating a routing policy to each of the plurality of upstream network switches. There is also disclosed one or more computer-readable mediums having stored thereon instructions for providing the foregoing, and a computer-implemented method of performing the foregoing operations.

Automated configuration of virtual port channels

In one embodiment a forwarding policy from a first network node coupled to a network element is received. The forwarding policy specifies an address of a second network node coupled to the network element. A plurality of ports of the network element are identified, wherein the second network node is accessible from the network element through each of the plurality of ports. The forwarding policy is applied to the plurality of ports of the network element. Network traffic received at a port of the plurality of ports from the second network node is forwarded to the first network node.

Growing community of inventors

San Jose, CA, United States of America

Avni Baveja