Cisco Technology, Inc.

Guy Keinan

Thomas Szigeti

David John Zacks

Walter Theodore Hulick, Jr

Akram Ismail Sheriff

Jean-Philippe Vasseur

Michal Wladyslaw Garcarz

Stefano Giorcelli

Methods are provided in which a domain name system (DNS) service obtains a lookup request for information about a source of a traffic flow being transmitted to a network resource external of a service cluster and performs, based on the lookup request, a lookup operation for a microservice that is the source of the traffic flow, among a plurality of microservices of the service cluster registered with the DNS service. The methods further include providing information about the microservice based on the lookup operation. The information includes at least a name of the microservice for visibility of the microservice external of the service cluster.

Microservice visibility and control

In one embodiment, a device obtains telemetry data associated with an online application accessible via a network. The device trains, based on the telemetry data, a machine learning model to determine whether a given address in the network is associated with the online application. The device uses the machine learning model to generate a listing of network addresses associated with the online application. The device provides the listing of network addresses for use by an application detection service in the network to determine that an initial packet of a traffic flow is associated with the online application based on a match between a destination address of that packet and a network address in the listing of network addresses.

Using machine learning for online application detection

The present disclosure provides a method of exchanging on-premise network analytics and cloud-based application analytics between an enterprise network and a cloud-based application without exchanging any personally identifiable information about the end users and devices involved in a communication session conducted over the enterprise network and using the cloud-based application. In one aspect, a method includes receiving, at a controller of a network, first analytics data, the first analytics data being embedded with a watermark, the first analytics data excluding personally identifiable information associated with end points of a communication session using a cloud-based application; receiving second analytics data from one or more components of the network, the second analytics data including the watermark; correlating the first analytics data and the second analytics data using the watermark to yield correlated data; and performing network analysis and troubleshooting using the correlated data.

Anonymous integration of cloud based applications and on-premise network analytics

Growing community of inventors

Kfar-Saba, Israel

Guy Keinan