Cisco Technology, Inc.

Ayan Banerjee

Raghava Kodigenahalli Sivaramu

Varun A Shah

Srinivasan Ramabadran

Mehak Mahajan

Ramesh Sivakolundu

Abhay Kumar Roy

Chakradhar Kar

Ramana Mellacheruvu

Sagar Borikar

Anant Thakar

Nataraj Batchu

Nataraj Bacthu

Sanjay Sane

Ambrish Niranjan Mehta

Ramesh V N Ponnapalli

Sourabh Jain

Thomas James Edsall

Ronak K Desai

Dhananjaya Rao

Dino Farinacci

Luca Cafiero

Sameer Merchant

Santosh Rajagopalan

Venkatesh Srinivasan

Vengada Prasad Govindan

Abhishek Saxena

Sridhar Santhanam

Ankan Ghosh

Vishal Jain

Nair Venugopal

Ramkumar Parameswaran

Abhayraj Kuldip Gidwani

Mudigonda Jwala Mallik

Swami Narayanan

Liangi Lin

Ali Sajassi

Sami Boutros

Samer Salam

Ayaskant Pani

Veena Raghavan

Erik Nordmark

Leonard Thomas Tracy

Francois Edouard Tallet

Harsha Bharadwaj

Raja Rao Tadimeti

Swaminathan Narayanan

Madhava Rao Cheethirala

Ravikanth Nasika

Hariharan Balasubramanian

Saikat Bhattacharya

Rahul Savarapu Parameswaran

Tissa Senevirathne

Rajesh Sharma

Chandrasekhar V Modumudi

Ann Roshini Paul

Venkata Naga Ramesh Ponnapalli

Mike Dvorkin

Shiv Saini

Ambrish Mehta

Ramesh VN Ponnapalli

This disclosure describes techniques for performing Internet Protocol (IP) switch-based Storage Area Networks (SANS) analytics management. An example method is performed by an IP switch. The method includes identifying information associated with Non-Volatile Memory express (NVMe)/Transport Control Protocol (TCP) Protocol Data Units (PDUs) examined from an Application-Specific Integrated Circuit (ASIC) data path. The information can be stored based on the NVMe/TCP PDUs being included in separate corresponding TCP data segments, according to a handshake protocol. Alternatively or additionally, the information can be stored based on a metadata header being received as a first PDU in a TCP segment. The NVMe/TCP PDUs can be used to extract the information to populate connection and IO tables inside an ASIC. The storage I/O metrics may then be available from the tables.

Internet protocol (IP) switch-based analytics management

This disclosure describes techniques for collecting network parameter data for network switches and/or physical servers and provisioning virtual resources of a service on physical servers based on network resource availability. The network parameter data may include network resource availability data, diagnostic constraint data, traffic flow data, etc. The techniques include determining network switches that have an availability of network resources to support a virtual resource on a connected physical server. A scheduler may deploy virtual machines to particular servers based on the network parameter data in lieu of, or in addition to, the server utilization data of the physical servers (e.g., CPU usage, memory usage, etc.). In this way, a virtual resource may be deployed to a physical server that has an availability of the server resources, but also is connected to a network switch with the availability of network resources to support the virtual resource.

Utilizing network analytics for service provisioning

A method of creating a root-of-trust (RoT) within a network fabric may include powering on a network interface card (NIC) baseboard management controller (BMC) (NIC BMC), booting up a NIC via the NIC BMC, obtaining an address for the NIC, verifying an identity of the NIC at a fabric trust identity server using a key obtained from a secure vault communicatively coupled to the NIC BMC, verifying with the fabric trust identity server a number of images of a host device residing in the NIC based at least in part on the identity of the NIC being verified, and instructing a platform BMC to boot up the host device based at least in part on the number of images of the host device being verified.

Fabric-based root-of-trust

Techniques for sending Compute Express Link (CXL) packets over Ethernet (CXL-E) in a composable data center that may include disaggregated, composable servers. The techniques may include receiving, from a first server device, a request to bind the first server device with a multiple logical device (MLD) appliance. Based at least in part on the request, a first CXL-E connection may be established for the first server device to export a computing resource to the MLD appliance. The techniques may also include receiving, from the MLD appliance, an indication that the computing resource is available, and receiving, from a second server device, a second request for the computing resource. Based at least in part on the second request, a second CXL-E connection may be established for the second server device to consume or otherwise utilize the computing resource of the first server device via the MLD appliance.

Compute express link over ethernet in composable data centers

In accordance with one example embodiment, a system configured for programming a network layer multicast address entry in a routing table of an ingress line card module is disclosed. The network layer multicast address entry includes a network layer address associated with at least one egress line card. The system is further configured for programming a data link layer multicast routing address entry in a routing table of a fabric card module in which the data link layer multicast routing address entry corresponds to the network layer multicast address entry.

Multicast routing

Unlocking computing resources for decomposable data centers

Techniques to eliminate duplicate packets from a stream of packets. A method includes receiving a packet, hashing elements of the packet to obtain a packet partial signature, generating an action data value by appending, to the packet partial signature, unhashed packet information, accessing a hash store location in a hash store based on the action data value, determining, based on data stored at the hash store location, whether the packet is a duplicate of a previously-received packet, and based on whether the packet is a duplicate of a previously-received packet, one of allowing and preventing one of the packet and a copy of the packet to reach a downstream network node.

Packet deduplication

A communication pathway between a plurality of network nodes within a network is established. A DIS election operation is executed to determine a first network node among the plurality of network nodes as the DIS for the network and creating a first pseudo node for the first network node, and with each network node of the plurality of network nodes, determining whether the connectivity between the first network node and the other network nodes of the plurality of network nodes within the network is in a synchronous state with the adjacencies with the other network nodes of the plurality of network nodes within the network.

Designated intermediate system (DIS) priority changing

A communication pathway between a plurality of network nodes within a network is established. A DIS election operation is executed to determine a first network node among the plurality of network nodes as the DIS for the network and creating a first pseudo node for the first network node, and with each network node of the plurality of network nodes, monitoring connectivity between the first network node and the other network nodes of the plurality of network nodes within the network, and monitoring adjacencies with the other network nodes of the plurality of network nodes within the network. Whether the connectivity between the first network node and the other network nodes of the plurality of network nodes within the network is in a synchronous state with the adjacencies with the other network nodes of the plurality of network nodes may be determined.

Customized feature vectors are used to train a machine learning algorithm to automatically identify a network component where a network fault has occurred. A database comprising network components and associated network faults is analyzed to select a set of network components associated with the largest quantity of network faults. Customized features associated with the network faults are identified and selected for use in a feature vector as input to a machine learning algorithm. The features are selected based upon analysis of consistency checks, component configuration limits, and network wide configurations.

Identifying locations and causes of network faults

Aspects of the disclosed technology address limitations relating to packet replication for multi-destination traffic, by providing methods for performing hardware-based replication in network infrastructure devices, such as switches. In some aspects, application specific integrated circuits (ASICs) resident in physical devices can be used to perform packet replication. Depending on implementation, a hardware-based replication process can include steps for receiving a first packet that includes a first outer header containing first address information, receiving a second packet including a second outer header containing a hardware replication flag, forwarding the first packet to all virtual tunnel endpoints (VTEPs) connected with the TOR switch, and performing hardware replication for the second packet based on the hardware replication flag to generate one or more unicast packets. Systems and machine readable media are also provided.

Hardware based packet replication at tail end node

Growing community of inventors

Fremont, CA, United States of America

Ayan Banerjee