Juniper Networks, Inc.

Cisco Technology, Inc.

Gurminder Singh

Pei-Yu Yang

Rong Xie

Prasad Miriyala

Jeffrey S Marshall

Iqlas M Ottamalika

Mamata Devabhaktuni

Chunguang (Chris) Liu

Yansheng (Jason) Jiang

Atul S Moghe

Mahesh Sivakumar

Michael Henkel

Fnu Nadeem

Ignatious Johnson Christober

Joseph Williams

Srinivas Akkipeddi

Édouard Thuleau

Dale Davis

Nagendra Maynattamai

In an example, a method includes processing, by an application programming interface (API) server implemented by a configuration node of a network controller for a software-defined networking (SDN) architecture system, requests for operations on native resources of a container orchestration system; processing, by a custom API server implemented by the configuration node, requests for operations on custom resources for SDN architecture configuration, wherein each of the custom resources for SDN architecture configuration corresponds to a type of configuration object in the SDN architecture system; detecting, by a control node of the network controller, an event on an instance of a first custom resource of the custom resources; and by the control node, in response to detecting the event on the instance of the first custom resource, obtaining configuration data for the instance of the first custom resource and configuring a corresponding instance of a configuration object in the SDN architecture.

Cloud native software-defined network architecture

This disclosure is directed to devices, systems, and techniques for enforcing access to resources within a computer network. In some examples, a system includes a network managed by a service provider and configured to provide a plurality of microservices to a plurality of tenants each having one or more users and a controller having access to the network. The controller is configured to output, to a user interface, data indicative of a plurality of capabilities for presentation by the user interface and receive, from the user interface, data indicative of a user selection of a set of capabilities and a user selection of a new role identifier. The controller is further configured to create, based on the set of capabilities and the role identifier, a role which enables access to a set of actions within a computer network, the set of actions corresponding to the set of capabilities.

Creating roles and controlling access within a computer network

A method includes subscribing, by an agent, to telemetry flow data from each network device of a plurality of network devices and receiving, by the agent, a plurality of streams of telemetry flow data from the plurality of the network devices. Each of the plurality of streams corresponds to a different one of the plurality of network devices. The method further includes aggregating, by the agent, data from at least one stream of the plurality of streams of the telemetry flow data received over a period of time and, at the end of the period of time and/or when the data from the at least one stream exceeds a data threshold, sending, by the agent, the aggregated telemetry flow data to a network analyzer device.

Agent for aggregation of telemetry flow data

In some examples, a system includes a network managed by a service provider and configured to provide access to one or more objects to a set of tenants each having one or more users, the service provider and the set of tenants being part of a set of entities that form a hierarchy, and a controller having access to the network. The controller is configured to obtain data indicative of a set of parameters, where the data indicative of the set of parameters is associated with an owner entity of the set of entities, generate a rule which incorporates the set of parameters, where the rule enables the controller to control access to an object of the one or more objects, and add the rule to a rules database, wherein the rules database is accessible to the controller.

Controlling access to microservices within a multi-tenancy framework

A controller may be used to create and process an assertion, in some cases, to implement single-sign on (SSO) in a computer network. In some examples, the controller includes processing circuitry coupled to a storage device. The processing circuitry is configured to create the assertion, where the assertion includes information indicative of a set of attributes and parse the assertion to determine the set of attributes. Additionally, the processing circuitry is configured to determine if each attribute of the set of attributes maps to a plurality of primary user groups stored in the storage device. Based on determining that an attribute of the set of attributes does not map to at least one primary user group of the plurality of primary user groups, the processing circuitry is configured to create a set of secondary user groups and a set of secondary user group names corresponding to the attribute.

Dynamic provisioning of user groups within computer networks based on user attributes

A page for sending to a client process from a server during network management incorporates a form having a plurality of input fields and a submit button. The form is associated with either a first submit method or a second submit method. The first submit method is for obtaining information about a state of a particular network device. The second submit method is for changing the state of a particular network device. The page is sent to the client process. In response to activation of the submit button in the client process, routines are executed to operate on the particular network device based on which submit method was associated with the form. Using these techniques, a single set of input fields can be designed for both displaying and editing the state of network devices.

Techniques for configuring network devices with consistent forms for getting and setting device properties

Method and template for developing device-centric network management applications

Growing community of inventors

Union City, CA, United States of America

Gurminder Singh