Arista Networks, Inc.

François Labonté

Sambath Kumar Balasubramanian

Hugh Weber Holbrook

Dipankar Bhatt Acharya

Muhammad Khalid Yousuf

Kartik Chandran

Kevin Martin Amiraux

Stefan J Rebaud

Kenneth James Duda

Sonny N Tran

Min H Teng

Methods and systems for modifying network traffic data. The method of modifying network traffic data may include receiving a network traffic data unit by a switching engine; performing an analysis on the network traffic data unit to obtain network tunnel information; generating encryption information based on the network tunnel information; and securing the network traffic data unit, by an encryption engine, based on the encryption information.

In-line encryption of network data

A network device includes a switching system for directing packets between ingress ports and egress ports of the network device. The network device also includes a switching system manager that makes an identification of a state change of a virtual output queue of the switching system; and performs an action set, based on the state change, to modify a latency of the virtual output queue to meet a predetermined latency in response to the identification.

Adaptive buffering in a distributed system with latency / adaptive tail drop

Methods, computer readable mediums, and systems for securing network traffic data. The method of securing network traffic data may include obtaining a network traffic data unit, that includes: a payload; forwarding information, that includes: a first forwarding portion; and a second forwarding portion that indicates a network tunnel; encryption type information; and encryption location information; analyzing a first segment of the first forwarding portion to obtain a first forwarding location; modifying the network traffic data unit, based on the encryption type information and the encryption location information, to obtain a modified network traffic data unit; and transmitting the modified network traffic data unit to the first forwarding location.

Securing MPLS network traffic

Methods and systems for modifying network traffic data. The method of modifying network traffic may include receiving a network traffic data unit that includes an identifier, at a proxy port; based on the identifier, performing a proxy port action set to obtain a modified network traffic data unit; and transmitting the modified network traffic data unit towards an egress port.

Proxy ports for network device functionality

Load balancing through selective multicast replication of data packets in a computer network. Specifically, selective multicast replication entails facilitating the graceful removal or hitless addition of one or more load balancing nodes in a load balancing cluster by multicasting, rather than encapsulating, received data packets from any given client to the load balancing cluster. Further, selective multicast replication considers whether received data packets are synchronize (SYN) or non-synchronize (non-SYN) data packets, in order to employ an appropriate forwarding group towards forwarding the received data packets to one or more appropriate load balancing nodes in the load balancing cluster.

Load balancing through selective multicast replication of data packets

A method and system of accelerating monitoring of network traffic. The method may include receiving, at a network chip of a network device, a network traffic data unit; capturing, by the network chip, the network traffic data unit based on a traffic sampling rate; adding, by the network chip, a sampling header to the network traffic data unit to obtain a sampled network traffic data unit; sending the sampled network traffic data unit from the network chip to a sampling engine; receiving, from the sampling engine, a flow datagram that includes a network traffic data unit portion and a flow datagram header; generating a flow network data traffic unit that includes the flow datagram; and transmitting the flow network data traffic unit towards a collector.

Accelerated network traffic sampling using an accelerated line card

A method and system for accelerating monitoring of network traffic. The method may include receiving, at a network chip of a network device, a network traffic data unit; selecting, by the network chip, the network traffic data unit based on a traffic sampling rate; processing, by the network chip, the network traffic data unit to obtain sample information; truncating the network traffic data unit to obtain a network traffic data unit portion; generating a flow sample header comprising the sample information; storing, in storage of the network chip, a flow sample comprising the flow sample header and the network traffic data unit portion; constructing a flow datagram comprising the flow sample and a plurality of other flow samples; sending the flow datagram to a collector; and clearing the flow sample and the plurality of other flow samples from the storage of the network chip.

Accelerated network traffic sampling using a network chip

Embodiments of the invention may relate to methods, systems, and/or non-transitory computer readable mediums for sidelining Such sidelining may include making a first determination, by a first network device, that a first network device state has degraded and making a first request, based on the first determination, to receive a first sideline token from a network controller. The network controller, in response to the first request, may make a second determination that a remaining sideline token is available. The method may also include receiving, by the first network device and based on the second determination, the remaining sideline token from the network controller and initiating, by the first network device, a graceful offlining based on receiving the remaining sideline token.

Method and system for sidelining of a network device

Accelerating monitoring of network traffic by: configuring a first network chip of a non-accelerated line card with a VOQ associated with an internal interface that is connected to a second network chip of a first accelerated line card; receiving, at the first network chip, a data unit; selecting, by the first network chip, the data unit based on a traffic sampling rate; adding information identifying the data unit as having been selected for sampling to obtain a selected data unit; and sending the selected data unit from the first network chip to the second network chip using the VOQ and the internal interface. The second network chip identifies the selected data unit and, based on the identification, appends a sampling header to the data unit to obtain a sampled data unit, and transmits the sampled data unit to the sampling engine of the first accelerated line card.

Growing community of inventors

Menlo Park, CA, United States of America

François Labonté