Arista Networks, Inc.

Optumsoft, Inc.

Hugh Weber Holbrook

Francois Labonte

Kenneth James Duda

Adam James Sweeney

Anshul Sadana

François Labonté

Kartik Chandran

Douglas Alan Gourlay

Sriram Sellappa

Sebastian Sapa

Dipankar Bhatt Acharya

Duncan Stuart Ritchie

Simon Francis Capper

Sambath Kumar Balasubramanian

David R Cheriton

Xuanran Zong

Andreas Bechtolsheim

Roman Olegovich Chertov

Michael Chih-Yen Wang

Hacene Chaouch

Eswaran Baskaran

Neal Thomas Nuckolls

Karthik Shyam Krishnan Subraveti

Navdeep Bhatia

Ramakrishna Shivaramaiah Paduvalli

Vijay Rangarajan

Min H Teng

Zhong Xu

François Labonte

Alexander Channing Ho

Lorenz Wolfgang Redlefsen

Fai Li

Eitan Joffe

Alexander S Rose

Yunli Xiong

François LabontÉ

Methods and systems for modifying network traffic data. The method of modifying network traffic data may include receiving a network traffic data unit by a switching engine; performing an analysis on the network traffic data unit to obtain network tunnel information; generating encryption information based on the network tunnel information; and securing the network traffic data unit, by an encryption engine, based on the encryption information.

In-line encryption of network data

A network device may include a packet processing pipeline. The packet processing pipeline may include a parser configured to parse packet information in a transit packet received at an input interface of the network device. The packet processing pipeline may include packet sampling information storage circuitry configured to store sampled packet information obtained based on the parsed packet information. The packet processing pipeline may include a processing engine configured to modify a payload of a sampling information accumulation packet to include the sampled packet information for the transit packet. The payload of the sampling information accumulation packet may include the sampled packet information for multiple transit packets.

Sampled packet information accumulation

A method and apparatus of a network element that processes a packet in the network element is described. In an exemplary embodiment, the network element receives a data packet that includes a destination address. The network element receives a packet, with a packet switch unit, wherein the packet was received by the network element on an ingress interface. The network element further determines if the packet is to be stored in an external queue. In addition, the network element identifies the external queue for the packet based on one or more characteristics of the packet. The network element additionally forwards the packet to a packet storage unit, wherein the packet storage unit includes storage for the external queue. Furthermore, the network element receives the packet from the packet storage unit and forwards the packet to an egress interface corresponding to the external queue.

System and method of a high buffered high bandwidth network element

A method and apparatus of a network element that processes control plane data in a network element is described. In an exemplary embodiment, the network element receives control plane data and determines a class of the control plane data. In addition, the network element marks the control plane data based on at least on an existence of an indication of whether the network element had previously processed other data in the same class as the class of the control plane data. Furthermore, the network element queues the control plane data.

System and method of processing control plane data

A networking system may include one or more network nodes such as one or more network switches. The network switches include respective matching engines. The matching engines across the network switches may be configured to match on a consistent set of matching criteria based on low and high entropy data fields to sample a same subset of packets for each network flow of interest. The sampled packets may include annotations and may be sent to collector circuitry for analysis. Controller circuitry may enforce consistent sampling policies across the network switches.

Network telemetry

Embodiments of the present disclosure include a pluggable optical line system module for amplification, multiplexing, and demultiplexing of coherent optical signals that can be integrated with a switch-router. Integration may include mechanical, electrical, and software control aspects. One example embodiment of the optical line system is in an industry standard small form factor pluggable module such as OSFP (octal small form factor pluggable) or QSFP (quad small form factor pluggable). When configured in a switch-router, the pluggable optical line is powered, managed and controlled by the switch-router which greatly reduces the cost, space, power and the management complexity of optical line systems.

Network device with integrated optical line system

Each switch unit in a networking system shares its local state information among other switch units in the networking system, collectively referred to as the shared forwarding state. Each switch unit creates a respective set of output queues that correspond to ports on other switch unites based on the shared forwarding state. A received packet on an ingress switch unit operating in accordance with a first routing protocol instance can be enqueued on an output queue in the ingress switch; the packet is subsequently processed by the egress switch unit, operating in accordance with a second routing protocol instance that corresponds to the output queue.

Networking system having multiple components with multiple loci of control

A system that provides communication services may include two switches for redundancy. The switches may indicate that they are independent devices to upstream devices and indicate that they are the same device to a predetermined device set. If one of the switches enters an undesired state, then the switch in a standby state may modify the upstream devices to preferentially forward packets directed toward the predetermined device set to the standby switch rather than an active switch, and after transitioning the active switch to the standby state, transition the standby switch to the active state.

Network element with dual independent sub network elements with seamless failover

A method and apparatus of a network element that processes network data using a transformed packet classification list in a network element is described. A network element receives a packet classification list and transforms a first set of the plurality of range sets corresponding to a first one of the two or more types of packet characteristics into a first set of range labels. In addition, the network element transforms a second set of the plurality of range sets corresponding to a second one of the two or more types of packet characteristics into a second set of range labels. The network element may create a set of combination labels. The network element further processes network data by performing a first lookup to derive a first combination packet label, performing a second lookup of at least the first combination packet label, and applying a rule resulting from the second lookup to the network data.

System and method of processing packet classification with range sets

A network device includes a first agent programmed to provide a functionality of the network device. The network device also includes a message bus, distinct from the first agent, that identifies an update associated with the first agent, the update includes differential state information based, at least in part, on a state of the first agent, the state of the first agent is stored in a data structure exclusively managed by the first agent; in response to identifying the update: identifies a second agent that is subscribed to the first agent; and performs an action set to provide the second agent with access to the update.

System and method for updating state information

Methods, computer readable mediums, and systems for securing network traffic data. The method of securing network traffic data may include obtaining a network traffic data unit, that includes: a payload; forwarding information, that includes: a first forwarding portion; and a second forwarding portion that indicates a network tunnel; encryption type information; and encryption location information; analyzing a first segment of the first forwarding portion to obtain a first forwarding location; modifying the network traffic data unit, based on the encryption type information and the encryption location information, to obtain a modified network traffic data unit; and transmitting the modified network traffic data unit to the first forwarding location.

Securing MPLS network traffic

Methods and systems for modifying network traffic data. The method of modifying network traffic may include receiving a network traffic data unit that includes an identifier, at a proxy port; based on the identifier, performing a proxy port action set to obtain a modified network traffic data unit; and transmitting the modified network traffic data unit towards an egress port.

Proxy ports for network device functionality

Growing community of inventors

Palo Alto, CA, United States of America

Hugh Weber Holbrook