Cisco Technology, Inc.

Juniper Networks, Inc.

Other

Packetfabric, LLC

David Delano Ward

Clarence Filsfils

Stefano Benedetto Previdi

Jean-Philippe Vasseur

Jan Medved

John Galen Scudder

Carlos M Pignataro

James Neil Guichard

Muthurajah Sivabalan

Paul M Quinn

Stewart Frederick Bryant

Jim Guichard

Keyur Patel

Mohammed Ismael Tatar

Reshad Rahman

Hannes Gredler

Hendrikus G P Bosch

Ahmed Refaat Bashandy

Sami Boutros

Alessandro Duminuco

Hugo Latapie

Enzo Fenoglio

John H W Bettink

William Mark Townsley

George Swallow

Surendra M Kumar

Ornan Alexander Gerstel

Robert Raszuk

Nagendra Kumar Nainar

Eric Albin Voit

Alon Shlomo Bernstein

Ian Michael Charles Shand

John Joseph Williams, Jr

Plamen Nedeltchev

Frank Brockners

Jeffrey Michael Napper

Cedell Adam Alexander, Jr

Ijsbrand Wijnands

Michael R Smith

Nagaraj Bagepalli

Satish Raghunath

Francois Clad

John E Drake

David A Maluf

David M Katz

Yoann Desmouceaux

Rex Emmanuel Fernando

Pierre Pfister

Doron Oz

Robert Stephen Rodgers

Navindra Yadav

Shwetha Subray Bhandari

Russell Ivan White

Peter Bosch

Pradosh Mohapatra

Thomas John Giuli

Stephen Paul Belair

Jerome Henry

Rajiv Asati

Flavio Giovanni Bonomi

Prashanth Patil

Bart A Brinckman

Pablo Camarillo Garvia

Zafar Ali

Ian James Wells

Andre Surcouf

Puneet Gupta

Syed Khalid Raza

Thomas David Nadeau

Pawan Uberoy

Alberto Rodriguez Natal

Scott Roy Fluhrer

Andre Jean-Marie Surcouf

Pascal Thubert

Mark Grayson

Kireeti Kompella

Robert Edgar Barton

Kyle Andrew Donald Mestery

Gregory J Shepherd

Malcolm Muir Smith

Cullen F Jennings

Nancy Cam-Winget

Pradeep Kumar Kathail

Ralph Droms

Ross W Callon

Michael Brian Galles

Tarek Saad

Patrice Brissette

Subhasri Dhesikan

Peter Psenak

Chandrashekhar Appanna

Anantha Ramaiah

Jonathan C Barth

Benoit Claise

Luca Martini

Garry Paul Epps

Patrice Bellagamba

Bruce Stuart Davie

Nitin Bahadur

Syed Kamran Raza

Techniques for devices in autonomous systems to utilize a protocol, such as a Border Gateway Protocol (BGP), to signal intent to instantiate services for establishing connections between the devices. For instance, first device(s) in a first autonomous system (AS) may determine to establish a connection with a second AS. The first device(s) may encode a service key into an Internet Protocol (IP) address where the service key indicates a service that is to be provisioned on second device(s) in the second AS. The first device(s) system may then advertise the IP address host-route using BGP, and the second device(s) may receive the BGP advertisement. The second device(s) may decode the service key from the IP address, and provision the service to establish the connection between the autonomous systems. Thus, the devices in may leverage existing protocols to signal intent to instantiate services and establish connections between autonomous systems.

Signaling intent to establish connections between autonomous systems

This disclosure describes methods and systems to externally manage network-to-network interconnect configuration data in conjunction with a centralized database subsystem. An example of the methods includes receiving and storing, in the centralized database subsystem, data indicative of user intent to interconnect at least a first network and a second network. The example method further includes, based at least in part on the data indicative of user intent, determining and storing, in the centralized database subsystem, a network intent that corresponds to the user intent. The example method further includes providing data indicative of the network intent from the centralized database subsystem to a first data plane adaptor, associated with the first network, and a second data plane adaptor, associated with the second network.

Method and system for managing network-to-network interconnection

An enclave manager of a network enclave obtains a request to retrieve configuration information and state information corresponding to compute devices and network devices comprising a network enclave. The request specifies a set of parameters of the configuration information and the state information usable to generate a response to the request. The enclave manager evaluates the compute devices, the network devices, and network connections among these devices within the network enclave to obtain the configuration information and the state information. Based on the configuration information and the state information, the enclave manager determines whether the network enclave is trustworthy. Based on the parameters of the request, the enclave manager generates a response indicating a summary that is used to identify the trustworthiness of the network enclave.

Network enclave attestation for network and compute devices

In one embodiment, an apparatus of a LISP environment includes one or more processors and computer-readable non-transitory storage media coupled to the one or more processors. The computer-readable non-transitory storage media include instructions that, when executed by the one or more processors, cause the one or more processors to perform operations including receiving an attestation token from a first component of the LISP environment. The operations also include encoding the attestation token using a LISP message format. The operations further include distributing the encoded attestation token with a LISP signaling message to a third component of the LISP environment.

Systems and methods for applying attestation tokens to LISP messages

Systems, methods, and computer-readable for cognitive sensor fusion management include obtaining one or more data streams from one or more sensors. Learning algorithms are used for determining whether a combination of the one or more data streams includes sufficient information for achieving a desired outcome, based on context, business verticals, or other considerations. One or more modifications are determined to at least the one or more data streams or one or more sensors based on whether the combination of the one or more data streams includes sufficient information for achieving the desired outcome. In a closed-loop system, feedback from implementing the one or more modifications can be used to update the desired outcome.

Cognitive sensor fusion management

In one embodiment, a method includes a method includes receiving, by a headend node, network traffic. The method also includes determining, by the headend node, that the network traffic matches a service route. The method further includes steering, by the headend node, the network traffic into an SR-TE policy. The SR-TE policy is associated with the service route and includes a security level constraint.

Systems and methods for steering traffic into SR-TE policies

In one embodiment, a first deep fusion reasoning engine (DFRE) agent in a network receives first sensor data from a first set of one or more sensors in the network. The first DFRE agent translates the first sensor data into symbolic data. The first DFRE agent applies, using a symbolic knowledge base maintained by the first DFRE agent, symbolic reasoning to the symbolic data to make an inference regarding the first sensor data. The first DFRE agent updates, based on the inference regarding the first sensor data, the knowledge base. The first DFRE agent propagates the inference to one or more other DFRE agents in the network.

Federated artificial intelligence with cumulative learning in a computer network

A method includes receiving a DNS request, notifying a serverless orchestrator system of data associated with the DNS request, provisioning a function on a serverless function node based on the DNS request, notifying a load balancer regarding the serverless function node, providing a response to the DNS request and routing an API request associated with the DNS request to the serverless function node.

Systems and methods providing serverless DNS integration

In one embodiment, an offload platform is an compute platform, adjunct to a router or other packet switching device, that performs packet processing operations including determining an egress forwarding value corresponding to the next-hop node of the packet switching device to which to send an offload-platform processed packet. The offload platform downloads forwarding information from the router, and augments it, such as, but not limited to, representing interfaces of the router as identifiable virtual interface(s) on the offload platform, and including each of one or more next-hop nodes of the router represented as an identifiable virtual adjacency and identifiable tunnel (e.g., identified by the egress forwarding value). In one embodiment, the egress forwarding value is an Multiprotocol Label Switching (MPLS) label or Segment Routing Identifier. The router identifies packets of certain packet flows to send to the adjunct offload platform, rather than processing per its routing information base.

Processing packets by an offload platform adjunct to a packet switching device

Resource provider specifications, characterizing computing resources of computing resource providers, are received. The reachability of each IP address included in the received specification is determined. An agent is deployed that is operable to determine the value of each of a set of metrics in the environment of the host at which the agent is deployed. The agent determines the value of each metric of the set of metrics in the environment of the relevant host, and communicates the determined values to one or more computing devices that validate whether the resources characterized by the communicated values are sufficient to provide the performance characterized by the received specification and that each ISP router complies with a predetermined policy. For each computing resource provider validated and determined to comprise an ISP router compliant with policy, the specified computing resources are added to a pool of resources for cloud computing.

Crowd-sourced cloud computing resource validation

An apparatus and method is disclosed for segment routing (SR) over label distribution protocol (LDP). In one embodiment, the method includes a node receiving a packet with an attached segment ID. In response, the node may attach a label to the packet. Thereafter, the node may forward the packet with the attached label and segment ID to another node via a label switched path (LSP).

Segment routing over label distribution protocol

In one embodiment, an apparatus includes one or more processors and one or more computer-readable non-transitory storage media coupled to the one or more processors. The one or more computer-readable non-transitory storage media include instructions that, when executed by the one or more processors, cause the apparatus to perform operations including determining a path through a plurality of provider nodes within a provider network and determining that the path through the plurality of provider nodes within the provider network is secure. The operations also include receiving, from a customer node, a Resource Reservation Protocol (RSVP) path message comprising an attribute for a security request. The operations further include routing the RSVP path message along the path of the plurality of provider nodes.

Systems and methods for determining secure network paths

Growing community of inventors

Somerset, WI, United States of America

David Delano Ward