Versa Networks, Inc.

Jayakrishnan V Iyer

Apurva Mehta

Fidelis Prashanth

Shiva Shenoy

Roopa Bayar

Akshay Adhikari

Vignesh Chinnakkannu

Krishna Sankaran

Ramasamy Ramanathan

Ramanarayanan Ramakrishnan

Manjunath Prabhu

Amey Gavand

Chetan Bali

Mukul Katiyar

Priyank Warkede

Prasanna Siddalingaiah

Ananda Sathyanarayana

Pani Ayyappa

A flow identifier is described for packet sequences through a secure tunnel of an SD-WAN in a tunnel-less mode. A method includes receiving from a first client packets of a same flow, facilitating a secure tunnel between the first hub and the second hub, assigning a flow identifier to the packets, associating fields of a header of a start packet with the flow identifier, sending the start packet with the flow identifier through the secure tunnel, receiving an acknowledgement of the flow identifier, updating a state of the secure tunnel, removing the associated fields from a header of a second packet to form a reduced packet in response to 10 receiving the acknowledgment, encapsulating the reduced packet in a wrapper that includes the flow identifier, and sending encapsulated reduced packet.

Method and apparatus for flow identifier of unidirectional packet sequence flow in tunnel-less SDWAN

A flow identifier is described for packet sequences through a secure tunnel of an SD-WAN in a tunnel-less mode. A method includes receiving a sequence of packets from a first client at the first hub, the sequence of packets each having a same flow, facilitating a secure tunnel between the first hub and the second hub, assigning a flow identifier to the sequence of packets, converting fields from a header of the packet to a metadata supplement to the packet to form a reduced packet, encapsulating the reduced packet in a wrapper that includes the flow identifier, and sending the packet of the sequence of packets from the first hub to the second hub the secure tunnel.

Method and apparatus for metadata conversion with a flow identifier of a packet sequence in a tunnel-less SDWAN

A flow identifier is described for packet sequences through a secure tunnel of an SD-WAN in a tunnel-less mode. A method includes receiving a sequence of packets from a first client at the first hub, the sequence of packets each having a same flow and facilitating a secure tunnel between the first hub and the second hub. A flow identifier is assigned to the sequence of packets. Fields of a header of a start packet of the sequence of packets are associated with the flow identifier and the associated fields are removed from a header of a second packet of the sequence of packets to form a reduced packet. The reduced packet is encapsulated in a wrapper that includes the flow identifier, and the encapsulated reduced packet of the sequence of packets is sent from the first hub to the second hub through the secure tunnel.

Method and apparatus for flow identifier of packet sequence in tunnel-less SDWAN

A flow identifier is described for packet sequences through a secure tunnel of an SD-WAN and an error message for recovering the flow. A method includes receiving a sequence of packets, facilitating a first secure tunnel between a first hub and a second hub, assigning a first flow identifier to the sequence of packets, encapsulating a first start packet, the wrapper including the first flow identifier, sending the encapsulated first start packet to the second hub through the first secure tunnel, receiving an error message from the second hub, the error message including the first flow identifier and an error code, facilitating a second secure tunnel, assigning a second flow identifier, encapsulating a second start packet, the wrapper including the second flow identifier, and sending the encapsulated second start packet through the second secure tunnel.

Method and apparatus to recover flow using an error message in a tunnel-less SDWAN

Embodiments herein disclose path selection for data traffic within a software-defined wide area network using traffic metrics. Some embodiments relate to a method that includes polling peers of the SD-WAN for traffic metrics, receiving traffic metrics from at least a portion of the peers, combining the received traffic metrics, calculating performance of a plurality of possible paths from a source node to a destination node, the nodes being within the SD-WAN topology, and selecting a path from the source node to the destination node based on the calculated performance.

Path selection for data traffic within a software-defined wide area network using traffic metrics

End-to-end data packet flow control is described for an overlay environment of a wide area network. A method includes detecting an active session of a specific application with a source node and a destination node within an overlay environment, detecting a traffic flow from the source node to the destination node associated with the active session, mapping the traffic flow to a dedicated service processing thread of a network services appliance, mapping an identifier to the dedicated service processing thread, and forwarding the traffic flow to the destination node through the dedicated service processing thread by applying the identifier to the traffic flow.

End-to-end data packets flow control through an overlay environment of a wide area network

An advancement over previous techniques using only certain out-of-band probe PDUs to determine loss. Packet loss statistics for a SD-WAN overlay path can be calculated for every packet transmitted by one endpoint and every packet received at the other endpoint. The roles of the positions of circular buffers can be periodically rotated from active to pre-stable to stable to post-stable. Counters in the active role can be incremented whenever a packet is transmitted. A position identifier can indicate which counter to increment when the packet is received. Counters in positions that are stable can be used to produce loss statistics for the SD-WAN overlay path.

Systems and methods for in-line loss measurement on SD-WAN overlay paths

In accordance with an embodiment of the invention, a method for routing connections in an SD-WAN is disclosed. The method involves receiving TURN server performance metrics via Border Gateway Protocol (BGP) and receiving network performance metrics from calculations made using Service Level Agreement (SLA) protocol data units (PDUs) for TURN servers in an SD-WAN, generating a score for at least one TURN server in the SD-WAN based on the received TURN server performance metrics and received network performance metrics for the at least one TURN server, selecting a TURN server based on the score generated for the at least one TURN server, and routing a connection over the selected TURN server.

Method and system for routing connections in a software-defined wide area network

A method for protecting data flows between pairs of branch nodes in a software-defined wide-area network (SD-WAN) is disclosed. In an embodiment, the method involves establishing secure connections between a SD-WAN controller and branch nodes in a plurality of branch nodes, wherein each branch node advertises a half-key to the SD-WAN controller via its secure connection, distributing advertised half-keys to branch nodes in the plurality of branch nodes via the established secure connections, wherein the advertised half-keys distributed to each branch node are the half-keys advertised by peer branch nodes of the branch node, and encrypting payloads for transmission from a first branch node in the plurality of branch nodes to a peer branch node in the plurality of branch nodes using a shared secret key, the shared secret key generated using the half-key of the first branch node and the distributed half-key of the peer branch node.

Growing community of inventors

Morgan Hill, CA, United States of America

Jayakrishnan V Iyer