Juniper Networks, Inc.

Appformix Inc.

Tromzo, Inc.

Harshit Naresh Chitalia

Sumeet Singh

Travis Gregory Newhouse

Parantap Roy

Avi K Patel

Tarun Banka

Neeren Shripad Patki

Moitrayee Gupta

Pawan Prakash

Weixu Zhuang

Biswajit Mandal

Manoj Ganesh Naik

Rajenkumar Patel

Anita Kar

Yixiao Wei

Gauresh Dilip Vanjare

Mithun Chakaravarrti Dharmaraj

Shruti Jadon

Aditi Ghotikar

Chaitanya Pemmaraju

Anuja More

Srivignessh Pacham Sri Srinivasan

Mithun Chakaravarrti Dhamaraj

Harshil Parikh

Venny Kranthi Teja Kommarthi

Keval Nimeshkumar Shah

Moitayree Gupta

Mithun Chakarvarrti Dharmaraj

This disclosure describes techniques for monitoring, scheduling, and performance management for virtualization infrastructures within networks. In one example, a computing system includes a plurality of different cloud-based compute clusters (e.g., different cloud projects), each comprising a set of compute nodes. Policy agents execute on the compute nodes to monitor performance and usage metrics relating to resources of the compute nodes. Policy controllers within each cluster deploy policies to the policy agents and evaluate performance and usage metrics from the policy agents by application of one or more rulesets for infrastructure elements of the compute cluster. Each of the policy controllers outputs data to a multi-cluster dashboard software system indicative of a current health status for the infrastructure elements based on the evaluation of the performance and usage metrics for the cluster. The multi-cluster dashboard software system data outputs, as single user interface screen, the current health status for each of the cloud-based compute clusters.

Policy controller for distributed virtualization infrastructure element monitoring

In one aspect, a system that provides a context-aware code security solution within a continuous integration and continuous deployment (CI/CD) pipeline is disclosed. During operation, the system can receive a set of security vulnerabilities generated by a set of security tools incorporated with the CI/CD pipeline. The system further receives contextual data associated with the set of security vulnerabilities from a set of DevOps tools used by the CI/CD pipeline. Next, the system augments the set of security vulnerabilities with the received contextual data. The system next prioritizes the augmented security vulnerabilities to identify a subset of high-priority vulnerabilities within the set of security vulnerabilities. The system subsequently notifies the owners of the identified subset of high-priority vulnerabilities to cause the subset of high-priority vulnerabilities to be fixed by the owners.

Developer-focused context-aware application security platform

A computing system includes a computing device configured to execute a plurality of virtual machines, each virtual machine of the plurality of virtual machines configured to provide control plane functionality for at least a different respective subset of forwarding units of a network device, the computing device distinct from the network devices. The computing system also includes a policy agent configured to execute on the computing device. The agent is configured to determine that a particular virtual machine of the plurality of virtual machines provides control plane functionality for one or more forwarding units of the network device; determine control plane usage metrics for resources of the particular virtual machine; and output, to a policy controller, data associated with the control plane usage metrics and data associating the particular virtual machine with the one or more forwarding units for which the particular virtual machine provides control plane functionality.

Monitoring and policy control of distributed data and control planes for virtual nodes

Display screen with animated graphical user interface

This disclosure describes techniques that include collecting underlay flow data along with overlay flow data within a network and correlating the data to enable insights into network operation and performance. In one example, this disclosure describes a method that includes collecting flow data for a network having a plurality of network devices and a plurality of virtual networks established within the network; storing the flow data in a data store; receiving a request for information about a data flow, wherein the request for information specifies a source virtual network for the data flow and further specifies a destination virtual network for the data flow; and querying the data store with the specified source virtual network and the specified destination virtual network to identify, based on the stored flow data, one or more network devices that have processed at least one packet in the data flow.

Underlay-overlay correlation

A telemetry service can receive telemetry collection requirements that are expressed as an 'intent' that defines how telemetry is to be collected. A telemetry intent compiler can receive the telemetry intent and translate the high level intent into abstract telemetry configuration parameters that provide a generic description of desired telemetry data. The telemetry service can determine, from the telemetry intent, a set of devices from which to collect telemetry data. For each device, the telemetry service can determine capabilities of the device with respect to telemetry data collection. The capabilities may include a telemetry protocol supported by the device. The telemetry service can create a protocol specific device configuration based on the abstract telemetry configuration parameters and the telemetry protocol supported by the device. Devices in a network system that support a particular telemetry protocol can be allocated to instances of a telemetry collector that supports the telemetry protocol.

Intent-based telemetry collection service with supported telemetry protocol in a virtualized computing infrastructure

The present invention addresses the need for improved virtualized cloud infrastructure policy implementation and management in order allow real-time monitoring and optimization of virtualized resources. It provides systems and methods for real-time cloud infrastructure policy implementation and management that include a plurality of host devices, a plurality of real-time probe agents associated with the plurality of host devices operating on each of the plurality of host devices, and a policy engine communicatively coupled to the plurality of host devices and containing a policy associated with an application program deployed in at least one of the plurality of host devices. The policy engine is programmed to monitor in real time changes in deployment of the application program across the plurality of host devices and to push the policy to the real-time probe agent operating on each host device on which the application program is deployed.

Policy implementation and management

In one example, a method includes obtaining, by a policy controller for a virtualization infrastructure, a first profile for a first group of one or more elements, the first profile comprising a first ruleset having one or more alarms; obtaining, by the policy controller, a second profile for a second group of one or more elements, the second profile comprising a second ruleset having one or more alarms; receiving, by the policy controller, configuration data configuring an element of the virtualization infrastructure as a member of the first group of one or more elements and as a member of the second group of one or more elements; generating, by the policy controller based on the configuration data, a profile for the element comprising the first ruleset and the second ruleset; and outputting, by the policy controller to a computing device, the profile for the element.

Virtualization infrastructure element monitoring and policy control in a cloud environment using profiles

A variety of different graphical user interfaces are generated that when displayed provide a visual and interactive representation of one or more performance metrics associated with the operation of a computer network. The graphical user interfaces may be used to monitor the underlay computer network for a virtualization infrastructure, as one example. Aspects include grouping the servers of a computer network into a plurality of aggregates, each aggregate comprising one or more servers. A set of probes are configured that are issued by an agent of a server in one aggregate and sent through the computer network to one or more agents in the server(s) of a different aggregate. Responses and other measurements taken based on the issuance of the probes is gathered and analyzed to generate metrics that are then used to generate, at least in part, the information provided in the graphical user interfaces.

Virtualization infrastructure underlay network performance measurement and monitoring

Display screen with graphical user interface for a data flow path

Techniques for resource monitoring and managed message reordering in a data center are described. In one example, a computing system comprises an ingress engine to receive a message from a network device in a data center comprising a plurality of network devices and the computing system; and in response to receiving the message from a network device in the data center, communicate the message to an appropriate collector application corresponding to the message's protocol type in compliance with at least one requirement for data stored in a message flow communicated from one or more network devices to the computing system.

Data center resource monitoring with managed message load balancing with reordering consideration

This disclosure describes techniques that include collecting underlay flow data within a network and associating underlay flow data with a source and a destination virtual network to enable insights into network operation and performance. In one example, this disclosure describes a method that includes identifying, for each underlay data flow, a source overlay network and a destination overlay network associated with the underlay data flow, wherein identifying includes retrieving, from one or more Ethernet Virtual Private Network (EVPN) databases, information identifying the source and destination overlay networks.

System and method for determining a data flow path in an overlay network

Growing community of inventors

Mountain View, CA, United States of America

Harshit Naresh Chitalia