Brocade Communications Systems, Inc.

Riverbed Technology, Inc.

Avago Technologies International Sales Pte. Limited

Aspen Networks, Inc.

Bill Ying Chin

Dan Norbert Retter

Mayur Mahajan

Poongovan Ponnavaikko

William R Mahoney

Vineet M Abraham

Bill Jianqiang Zhou

Xupei Liang

Arthur L Jones

Aditya Saxena

Kand Ly

Sajit Bhaskaran

Venkatram Ramanathan

Surendranadh Madineni

Arun Natarajan

Robin Mavunkel

Alfred Jörg Ammann

Ilya Ratner

Elanchezhiyan Elango

Tushar Desai

Certain embodiments enable application message delivery to be automatically guaranteed for all failover scenarios through use of a novel infrastructure layer that supports high availability (HA) messaging. The High Availability Application Messaging Layer (HAML) can guarantee delivery of application messages whether a failover occurs at one or both of the source and the intended destination of the message. The HAML may transmit messages to one intended destination, as unicast messaging, or to multiple intended destinations, as multicast messaging. In some embodiments, the HAML may be HA aware, which refers to the awareness of the HAML of the redundancy for all processing entities within a network device to ensure hitless failover at the network device. By moving support for HA messaging from individual applications to the HAML, as a common infrastructure layer across the processing entities, the individual applications do not need to implement additional software to explicitly support HA messaging.

High availability application messaging layer

Systems and techniques are described for preventing data leaks from a network. A set of sensitive files or sensitive data that includes sensitive information can be received, and a first set of labels can be determined based on the set of sensitive files or sensitive data. An apparatus can then receive data that is to be checked for sensitive information, and determine a second set of labels based on the data. Next, the apparatus can match the second set of labels with the first set of labels. The apparatus can then determine whether or not the data includes sensitive information based on a result of said matching, and perform a data leak prevention action if it is determined that the data includes sensitive information.

Data leak prevention using content based segmentation scanning

Systems and techniques are described for ensuring that policies are consistently applied to traffic across an overlay network. An application identifier associated with a forward traffic flow and a corresponding reverse traffic flow can be determined by a device that routes packets of both the forward traffic flow and the corresponding reverse traffic flow. Next, an overlay header can be added to each packet in the forward traffic flow and to each packet in the corresponding reverse traffic flow, wherein the overlay header comprises the application identifier, a policy identifier, and a policy action. Each device in the overlay network can then apply the policy action specified in the overlay header of each packet that it routes.

Preserving policy with path selection

Some embodiments described herein provide a combination of a layer 3 (L3) hop with layer 2 (L2) bypass/fail-to-wire in a network device. Specifically, some embodiments place the network device between two routers, thereby becoming a L3 hop between the two routers. The existing route between the two routers is preserved by using L2 bypass through the network device. If the network device fails, then the physical fail-to-wire will be engaged, removing its L3 hop, but preserving the L2 bypass.

High availability (HA) network device

Systems and techniques are described for applying a set of policy rules to network traffic. During operation, conditions specified in the set of policy rules can be evaluated, wherein each condition is a logical expression defined over a set of variables, and is evaluated by substituting values of the set of variables associated with the network traffic into the logical expression. Next, a subset of policy rules can be selected whose conditions evaluated as true. A highest precedence policy rule from the subset of policy rules can then be identified by applying a set of precedence rules to the subset of policy rules, wherein the set of precedence rules imposes a precedence order on the set of policy rules based on condition categories and condition specificities. Finally, an action that is specified in the highest precedence policy rule can be performed.

Hierarchical policies in a network

Certain embodiments of the present invention provide techniques that enable messages to be sent to a processing entity within a computing device without knowing the network address of the processing entity. In certain embodiments, instead of using the network address of the processing entity, a message can be communicated to the processing entity using information indicative of a role or state or function performed by the processing entity.

Role based multicast messaging infrastructure

Techniques for persisting data stored in volatile memory across a warm boot. One or more portions (referred to as 'warm memory') of volatile memory of the system can be reserved and configured such that the data stored by these portions is not affected by a warm boot thereby resulting in the data stored being persisted across a warm boot.

Persisting data across warm boots

Techniques for achieving high-availability using a single processor (CPU). In a system comprising a multi-core processor, at least two partitions may be configured with each partition being allocated one or more cores of the multiple cores. The partitions may be configured such that one partition operates in active mode while another partition operates in standby mode. In this manner, a single processor is able to provide active-standby functionality, thereby enhancing the availability of the system comprising the processor.

Achieving ultra-high availability using a single CPU

A method for achieving multiple link quality of service for video and voice calls over Internet links, or over IP links running in private networks, is described. This method applies to both the non-mobile domain (alternate paths exist in one place at the same time) as well as the mobile domain (one path is used at any one place at a given time, but the user device roams from place to place). This method can be implemented as either computer software or other digital logic (ASIC or FPGA). Using this invention, voice and video calls can be moved at will from one path to another, as many times as required during a single conversation, without breaking the RTP voice or video payload stream. The benefit is that embodiments of this invention have a significantly higher probability that a call never breaks under various conditions of quality degrade. This includes the case of link and router failures, which are treated as a special case of quality degrade in the context of voice and video.

Growing community of inventors

San Jose, CA, United States of America

Bill Ying Chin