Juniper Networks, Inc.

Dilip H Sanghavi

Rishi Kaundinya Mutnuru

Padmanabha Nallur

Huei-ping Chen

Narasimha Talapady Nayak

Saravanadas P Subramanian

Rakesh Kumar

Girish Kumar Attimgere Lingaiah

Sai Sundar Ramamurthy

Jwala Dinesh Gupta Chakka

A virtual network device may identify a cloud provider associated with the virtual network device, and may provide a request for public network addresses and private network addresses associated with the cloud provider. The virtual network device may receive the public network addresses and the private network addresses from the cloud provider based on the request, and may generate a translation table that maps the public network addresses and the private network addresses. The virtual network device may utilize the translation table to establish a secure communication between an endpoint device and a server device, where the secure communication is associated with at least one packet that requires an inner payload network address change.

Providing cloud-aware security for an application level network device

A network device obtains information, associated with blacklisted domains, that includes blacklisted domain identifiers, and sinkhole server identifiers associated with the blacklisted domain identifiers. The network device obtains a set of rules that specify match criteria, associated with the blacklisted domains, that include source network addresses and/or destination network addresses for comparison to packet source network addresses and/or packet destination network addresses associated with incoming packets. The set of rules specify actions to perform based on a result of comparing the match criteria and the packet source network addresses and/or the packet destination network addresses for the incoming packets. The network device receives packets, examines a packet source network address and/or a packet destination network address associated with the packets, compares the packet source network address and/or the packet destination network address to the match criteria, and performs an action based on a result of the comparison.

Methods and devices for blocking, detecting, and/or preventing malicious traffic

Techniques are described for automatic discovery of two or more virtual service instances configured to apply a given service to a packet in a software-defined networking (SDN)/network functions virtualization (NFV) environment. Virtual service instances may be deployed as virtual entities hosted on one or more physical devices to offer individual services or chains of services from a service provider. The use of virtual service instances enables automatic scaling of the services on-demand. The techniques of this disclosure enable automatic discovery by a gateway network device of virtual service instances for a given service as load balancing entities. According to the techniques, the gateway network device automatically updates a load balancing group for the given service to include the discovered virtual service instances on which to load balance traffic for the service. In this way, the disclosed techniques provide auto-scaling and auto-discovery of services in an SDN/NFV environment.

Auto discovery and auto scaling of services in software-defined network environment

A device may perform dynamic load balancing to identify one or more service devices, of a group of service devices, that is to apply a set of network services to traffic associated with a session of a subscriber device. The device may provide outgoing traffic, associated with the session, to the one or more service devices based on identifying the one or more service devices. The outgoing traffic may be provided to cause the one or more service devices to apply the set of network services to the outgoing traffic. The device may provide, to another device, information that identifies the one or more service devices. The information that identifies the one or more service devices may be provided to cause the other device to provide incoming traffic, associated with the session, to the one or more service devices to apply the set of network services to the incoming traffic.

Growing community of inventors

Cupertino, CA, United States of America

Dilip H Sanghavi