Silver Peak Systems, Inc.

Cisco Technology, Inc.

Hewlett Packard Enterprise Development LP

Other

David Anthony Hughes

Damon John Ennis

John Burns

Pawan Kumar Singh

Zhigang Yin

Theodore Ernest Tedijanto

Rolf Muralt

Santosh Bheemarajaiah

Lokesh Lingarajan

David Holt Merwin

Madhav V Marathe

Daniel E Klausmeier

Edward Paul Travalia

Hon Tat Ho

Shyh Pei Yen

Abhelaksh Thakur

Catrina A Torda

Krishna Kumar Sadasivam

Balaji Balasubramanian

Manoj Gopal Kulkarni

Kevin C Wong

Fred R Rednor

David Auerbach

Douglas C Shriver

Danny Kwok

Andrew West

Udaya Shankar

Onur Ozduygu

Kevin James Roselle

Quang Nguyen

Bruce Stuart Davie

Srivathsa Sarangapani

David L Dooley

Jeremy Lawrence

Frank Chui

Manoj Kumar Dutta

Man Pak Yip

Patrick Lee Mahan

Ravikumar Govindarao

Jigar Chheda

Timothy Robert Hefel

Bowen Yan

Kennedy Tjong Ki Ngo

Ganesh Lakshmanan

Gary S Goldman

Rajesh Kumar

Gene K Chui

Eugene T Wang

John Ellis

Ross Heitkamp

Yie-Fong Dan

Gurmohan Singh Samrao

Rafael Gomez

Gary Kipnis

Sonny N Tran

Isaac P Choi

Radhika Padmanabhan

Neufito L Fernandes

Onchuen D Lau

Raymond Ng

Cherng-Ren Sue

William P Buckley

Raffaello Pardini

Mohammad Seyed Nikuie

Alan E Saldinger

Patrick D Daley

Carl Hubbard

Duc Manh Hoang

Lionel A King

Dan Klausmeier

Daryn Lau

Jeremy R Lawrence

Chang-Yu Wang

Narayan Balasubramanian

Dave Holt Merwin

Mohammed Mostafa

Steven Man Pak Yip

Michael T Chin

Michael Raymond Hughes

Disclosed herein are systems and methods for the collection, aggregation, and processing of network traffic statistics for a plurality of network appliances in a wide area network. Select network traffic statistics can be collected and associated with a hierarchical string, and aggregated over time. In this way, only information that is likely to be relevant is gathered and maintained, allowing for the maintenance of select network traffic statistics for large-scale operations.

Hierarchical aggregation of select network traffic statistics

Disclosed herein are network information collectors, methods, computer-readable media, and systems for generating network traffic statistics. For example, the network appliance is to receive, via a network, an accumulating map from a network appliance device, wherein the accumulating map comprises a condensed and aggregated version of web traffic flow information to the network appliance device; receive, via the network, additional accumulating maps from other network appliance devices; populate an accumulation map database with the accumulating map and the additional accumulating maps; and generate a report of the network traffic statistics hosted by the network appliance device and the other network appliance devices.

Aggregation of select network traffic statistics

Disclosed is a system and method for the monitoring and authorization of an optimization device in a network. In exemplary embodiments, an optimization device transmits an authorization request message to a portal to receive authorization to operate. The portal transmits an authorization response message to the optimization device with capability parameters for operation of the device, including at least one expiration parameter for the authorization. The optimization device sends updated authorization request messages to the portal with its device usage information, such that the portal can dynamically monitor the optimization device and continue to authorize its operation.

Dynamic monitoring and authorization of an optimization device

Systems and methods for selectively transmitting routing information between separated local area network (LAN) interfaces are disclosed. In exemplary embodiments, a network appliance to update a local routing table with IP subnet, neighbor type, source type, and community identifier of a second network appliance; based at least on the local routing table, receive a customized routing policy and subnet exporting policy that permits the network appliance to export a subset of IP addresses from the local routing table to a permitted community of network appliances, wherein the customized routing policy and subnet exporting policy are configured by a network administrator of the network appliance; match the permitted community of network appliances to a new community identifier of a third network appliance; and export the subset of IP addresses of the local routing table to the third network appliance based on the customized routing policy and subnet exporting policy.

Selective routing

Disclosed herein are network appliances, methods, computer-readable media, and systems for aggregating network traffic statistics in a communication network. For example, the network appliance is to receive a SYN network packet; store header information from the SYN network packet in a flow data table; for each of the data packets related to the SYN network packet, store header information of the data packets in the flow table; after a predetermined amount of time or a predetermined number of rows is reached, invoke an eviction policy on the flow data table, wherein the eviction policy removes the related data packets from the flow data table; and populate an accumulating map with the flow data table.

Disclosed herein are systems and methods for multi-level classification of data traffic flows based on information in a first data packet for a data traffic flow. In exemplary embodiments of the present disclosure, a key can be generated to track data traffic flows by application names and data packet information or properties. Based on these keys, patterns can be discerned to infer data traffic information based on only the information in a first data packet. The determined patterns can be used to predict classifications of future traffic flows with similar key information. In this way, data traffic flows can be classified and steered in a network based on limited information available in a first data packet.

Multi-level learning for classifying network traffic flows from first packet data

Provided are methods, apparatus, and system for policy based wide area network. A network of network appliances is configured with a policy configuration. Each network appliance is configured to validate each wide area network packet against the policy configuration. The validation can include verifying that the packets meet the SD-WAN network segment requirements and security rules including verifying that the source and destination address of the packet meet the firewall zone requirements. Each wide area network packet contains a policy header that is checked by the sending and receiving network appliance against the policy configuration.

Method device and system for policy based packet processing

Disclosed herein are network appliances, methods, computer-readable media, and systems for aggregating network traffic statistics in a communication network. For example, the network appliance is to determine a plurality of network flow strings that are transmitted from the network appliance or received at the network appliance; extract a network metric of the plurality of network flow strings; aggregate values associated with the network metric over the plurality of network flow strings; generate an accumulating map, wherein the accumulating map comprises the values associated with the aggregated network metric; when a new network flow string is received, invoke an eviction policy on the new network flow string, wherein the eviction policy removes at least one of the plurality of network flow strings from the accumulating map; and transmit the accumulating map to a network information collector in communication with the network appliance.

Disclosed herein are systems and methods for multi-level classification of data traffic flows based on information in a first packet for a data traffic flow. In exemplary embodiments of the present disclosure, a key can be generated from intercepted DNS data to track data traffic flows by application names and destination IP addresses. Based on these keys, patterns can be discerned to infer data traffic information based on only the information in a first packet, such as destination IP address. The determined patterns can be used to predict classifications of future traffic flows with similar key information. In this way, data traffic flows can be classified and steered in a network based on limited information available in a first packet.

Multi-level learning for classifying traffic flows on a first packet from DNS response data

Disclosed herein are systems and methods for forward packet recovery in a communication network with constrained network bandwidth overhead. In exemplary embodiments, a target byte protection ratio is determined. Error correcting frames are dynamically generated by a first processor such that error correcting information can be generated to approximate the target byte protection ratio. The data packets and error correcting information are then transmitted across one or more communication networks to a second processor. The second processor can use the error correcting information to regenerate or replace data packets missing or corrupted in transmission across one or more communication networks.

Forward packet recovery with constrained network overhead

Disclosed herein are systems and methods for dynamically selecting network paths for data transmission in a virtual overlay network created and maintained across multiple communication networks managed by service providers. The simple creation and management of network overlays is accomplished via a network orchestrator manager, allowing for automation of configuration of connected network devices throughout an entire organization's network, regardless of the physical location of each device. Further, error correcting information can be transferred across a different network path than a plurality of data packets, in accordance with a designated bonding policy.

Data transmission via bonded tunnels of a virtual wide area network overlay with error correction

Growing community of inventors

Los Altos Hills, CA, United States of America

David Anthony Hughes