Hewlett Packard Enterprise Development LP

Hewlett-packard Development Company, L.p.

Duane Edward Mentze

Charles F Clark

Shaun Wackerly

Brett Williams

Richard Jensen Rollins

Nathan Harmon

Mark Gooch

Steven Glen Jorgensen

Madhu Prashanth Kannan

Mark Patrick Henry

Shaun Wakumoto

Venkatavaradhan Devarajan

Craig Joseph Mills

Rajeev Grover

Jechun Chiu

Heather Giovanni

Nam Soo Kim

Christopher Affleck

Suganya John Bosco Sesu Annamary

Beeram Suresh Kumar Reddy

Cameron Brodeur

Fernando Juliao

Aparna Anand

Christopher Sean Affleck

Anand Aparna

Examples disclosed herein relate to a method comprising detecting a plurality of changes in a database, wherein the database is used to configure a switch operating traffic on a network. The method may include determining that a subset of the plurality of changes are to be deferred before being used to configure the switch, wherein each change in the subset has a potential dependency with at least one other change in the subset. The method may also include iterating through each change in the subset. The iteration may include confirming that a target change has a dependency with another change in the subset, resolving the dependency and transmitting the target change to an object manager for configuration of the switch.

Switch event ordering

Example implementations relate to construction of a network service chain. For example, a system for construction of a network service chain can include a detection engine to detect a portion of a first network policy directing a subset of packets to a first service and a portion of a second network policy directing the subset of packets to a second service, and a construction engine to construct a network service chain of the first service and the second service in an order determined from a priority assigned to the first network policy and a priority assigned to the second network policy.

Network service chain construction

In some examples, a method includes accessing an orthogonal network policy set that represents a first intent-based network policy and a second intent-based network policy. The method may also include determining multiple reduced orthogonal network policy sets from the orthogonal network policy set. The multiple reduced orthogonal network policy sets may differ from one another, and each represent the first and second intent-based network policies. The method may further include selecting a particular reduced orthogonal network policy set among the multiple reduced orthogonal network policy sets to implement on a target switching device.

Reduced orthogonal network policy set selection

Example embodiments disclosed herein relate to determining whether a device exhibits anomalous behavior based on a set of rules, address usage information, and address range information. Address usage information for a device communicating on a data plane of a network implemented using switches is received via a control plane. Address range information for the network is maintained. Whether the device exhibits anomalous behavior is determined based on the set of rules, address usage information, and address range information.

Determine anomalous behavior based on dynamic device configuration address range

In example implementations, a method is provided. The method detects, by a processor, a change in incoming data packet relative to a previously received data packet. In response to the change, group rate limiters are enabled to the incoming data packets for each one of a plurality of different data packet groups. The group rate limiters stop the incoming data packet when the data packet is assigned to one of the plurality of different data packet groups that has reached a respective group rate limiter. A hardware controller is programmed to forward respective data packets in each one of the plurality of different data packet groups.

Group rate limiters for multicast data packets

Example implementations relate to network policy distribution. For example, a system for network policy distribution can include a state engine to determine a change in a state of a network, a policy engine to determine a number of policy changes based on the change in the state of the network, an identification engine to identify a number of network endpoints that correspond to the number of policy changes, and a distribution engine to load instructions based on the number of policy changes to the number of endpoints that correspond to the number of policy changes.

Network policy distribution

In an example, a method is disclosed for implementing forwarding behavior based on communication activity between an SDN controller and a network device. The method includes generating, for the network device, a first flow table rule to implement first forwarding behavior for a network flow if communication to the SDN controller is active. The first flow table rule comprises match criteria for matching to the network flow, a first timeout value, and a first priority value. The method also includes generating, for the network device, a second flow table rule to implement second forwarding behavior for the network flow if communication to the SDN controller is not active. The second flow table rule comprises match criteria for matching to the network flow, a second timeout value, and a second priority value. The method further includes instructing the network device to implement the first and second flow table rules.

Implementing forwarding behavior based on communication activity between a controller and a network device

In an example, a re-convergence point is determined for a convergence point in a network. A host is currently connected to the convergence point for example to access the network. Authentication information and a policy for the host is sent to the re-convergence point prior to the host connecting to the re-convergence point to access the network.

Network re-convergence point

Example implementations relate to network policy conflict detection and resolution. For example, a system for network policy conflict detection and resolution can include a policy compilation engine to compile a plurality of network policies based on an intent format, a conflict detection engine to detect a conflict between a first network policy among the plurality of network policies and a second network policy among the plurality of network policies, using the intent format, and a conflict resolution engine to resolve the detected conflict between the first network policy and the second network policy. Further, the system for network policy conflict detection and resolution can include a translation engine to translate the resolution of the detected conflict to a protocol-specific format.

Network policy conflict detection and resolution

A method for handling of conflicts in a multicast routing election in a multicast network is described herein. The multicast network includes a plurality of multicast network devices. A conflict is detected in a Designated Forwarder (DF) election for a link.

Methods for handling conflicts in a multicast routing election

Network service insertion includes determining a tunnel interface corresponding to a service entity to which an incoming packet is to be directed, the tunnel interface being determined based on software defined network (SDN) flow rules. Further, the incoming packet can be encapsulated based on a tunnel configuration corresponding to the tunnel interface to generate an encapsulated packet such that the encapsulated packet includes media access control (MAC) address headers and a virtual local area network (VLAN) tag associated with the incoming packet. The encapsulated packet can be sent to the service entity through the tunnel interface for network service insertion.

Network service insertion

Endpoint device policy change can, in various examples, include detecting a change in a first registered attribute associated with an endpoint device on a network to a second registered attribute and changing a first policy applied to the endpoint device to a second policy associated with the second registered attribute in response to the detected change.

Endpoint policy change

Network devices, systems, and methods, including executable instructions and/or logic thereon, are provided to discover a multicast router topology. A network device includes a processing resource coupled to a memory. The memory includes program instructions executed by the processing resource to discover a multicast router topology by determining a number of routers are connected to each other via a number of network connections and are running a multicast routing protocol (MRP) on a number of interfaces on the number of routers that are connected.

Multicast router topology discovery

Embodiments of the present disclosure may include network devices, systems, and methods, including executable instructions and/or logic thereon, to check a multicast routing path. A network device includes a processing resource coupled to a memory. The memory includes program instructions executed by the processing resource to determine if a path between an initiator router and an end point router is available for transferring multicast packets, wherein the path between the initiator router and the end point router includes a number of routers.

Multicast routing path check

A method for multicast routing may include receiving, at a router of a receiving multicast domain, a data packet from a forwarding multicast domain. The method may further include configuring the router to operate as if a multicast forwarding information base entry is directly connected, and configuring the router with a reverse path forwarding override with source discovery such that a path used by multicast traffic is different from a path used for unicast traffic.

Growing community of inventors

Roseville, CA, United States of America

Duane Edward Mentze