Cisco Technology, Inc.

Goran Saradzic

Samar Sharma

Sunil Cherukuri

Xiao Hu Gao

Mahadeva Swamy Chandra

Pavani Baddepudi

Manjunath Masanagi

In an embodiment, a method is provided. The method includes: storing, in at least one hardware module of a network device having a plurality of ports, attributes for at least one access control list and associated actions that cause network packets received at one of the plurality of ports that match the attributes for the at least one access control list, to be directed into a service chain that includes at least a first network processing application specified according to a port and a second network processing application specified according to an internet protocol (IP) address; and directing a received network packet that matches the attributes for the at least one access control list into the service chain.

Hybrid services insertion

A device and method are provided to provide multi-exit firewall capabilities for cloud server or cloud service deployments without prior knowledge of reachability information of a client device where the client device may belong to one of several networks accessing the cloud server or cloud service. The reachability information may be derived based on flow of data to and from the client device in response to a data transfer initiation request. A firewall connection table may be updated to record routability to the client device comprising the derived reachability information. The recorded reachability information in the connection table may be used for the data transfer with the client device instead of a default route in a routing table.

Path selection in a multi-service and multi-tenant secure cloud environment

Growing community of inventors

Erie, CO, United States of America

Goran Saradzic