Juniper Networks, Inc.

Jerome Pascal Moisand

Mathias Kokot

Sanjay Wadhwa

Vitali Vinokour

Karen Ruben

Rahul Aggarwal

Thomas A Lemaire

Brian Sullivan

Steven P Onishi

Linda M Cabeca

Sreenivasa R Tellakula

Thomas Gemmer

Jagadishchandra Sarnaik

Hermann J Rodler

Mohini Dukes

Ravi Nuguru

Denis Henk DeRuijter

Kurt Melden

Julius W Francis

Benjamin Hickey

Krishna Narayanaswamy

Jean-Marc Frailong

Paul James Kirner

Paul Raison

Eric Peterson

Denis deRuijter

Prasad Deshpande

Gregory M Dalle

Steve Onishi

Thomas LeMaire

David H Blease

Ujjvala Nangineni

Dilip Pillaipakkamnatt

Ivica D Bogdanovic

Ujjvala Nagineni

Kenneth E Culbert

Oren Melamud

William Coutts

Julius Francis

Techniques are described for providing session-aware, stateful network services to subscriber packet flows. Devices within a service provider network direct subscriber packets along service chains. Each tunnel is established to direct traffic according a particular ordered set of network services for the corresponding service chain. An ingress device for the tunnels encapsulate the subscriber packets and embed opaque session cookies that each uniquely identifies a collection of packet flows of a subscriber session amongst other packet flows transported by a given service tunnel. Each service node need only identify the tunnel on which a tunnel packet was received and the session cookie embedded within the tunnel packet to uniquely associate the encapsulated subscriber packet with a subscriber session, without needing to further inspect the encapsulated subscriber packet, and to index or otherwise retrieve state and statistics required to enforce the network service the service nod is programmed to deliver.

Service chaining within computer networks

Session-aware service chaining within computer networks

A network device includes an internal policy engine that makes local policy decisions for packet flows and controls policies applied by service modules and forwarding components of the network device. The policy engine interacts with an external policy server to receive policies using software defined networking (SDN) protocol as if the data plane of the network device were directly exposed to the external policy server by the SDN protocol.

Policy control using software defined network (SDN) protocol

A computer-implemented method for managing access to services provided by wireline service providers may include (1) receiving at least one request from a subscriber device to authorize access to at least one service, (2) authenticating the subscriber device with an access gateway of a wireline service provider based at least in part on the request, (3) generating a unique session identifier that uniquely identifies the subscriber device during a service-access session, (4) delivering the unique session identifier to a management server of the wireline service provider to enable the management server to authenticate the subscriber device with at least one network device that provides the service based at least in part on the unique session identifier, and then (5) facilitating access by the subscriber device to the service provided by the network device during the service-access session. Various other systems, methods, and computer-readable media are also disclosed.

Systems and methods for managing access to services provided by wireline service providers

In general, the invention is directed to techniques for offloading mobile data traffic from a mobile core network to a broadband network. For example, as described herein, a breakout gateway forwards a service request from a mobile device and addressed to a service node. The service node designates an access point name (APN) for offload such that data traffic associated with service requests specifying the designated APN is to be offloaded to an offload network. The service node receives the service requests from the breakout gateway and, if the service request specifies the designated APN, the service node sends a request to the breakout gateway. The breakout gateway receives the request and assigns a routable PDP address to the mobile device. An offload module on the breakout gateway redirects mobile data traffic to the offload network when the source PDP address of the traffic is the previously assigned PDP address.

Offloading mobile traffic from a mobile core network

Network devices, such as a router and a downstream multicast distribution device, may use multiple control channels when setting up a multicast stream for a multicast request. For example, first messages may be transmitted using a first protocol to an upstream device over a first channel, the first messages indicating when a first multicast media stream is being requested by at least one of a number of client devices. Second messages may be transmitted using a second protocol over a second channel, the second messages being transmitted on a per-client basis and each identifying a one of the client devices as requesting the first multicast media stream. By using two control channels to convey the multicast channel requests, the router may obtain visibility into the action of the subscriber and can consequently perform per-subscriber operations such as access-control, bandwidth based admission control, statistics, and QoS adjustment for multicast IPTV streams received by the subscriber.

Multiple control channels for multicast replication in a network

A network layer device controls provision of data link layer functionality by a data link layer device to provide a requested multimedia service to a subscriber. For example, the network layer device may control the performance of multicast elaboration by the data link layer device, or the queuing and forwarding of packets by the data link layer device to facilitate transmission of packets according to a Quality of Service class. The network layer device may send control messages to the data link layer device to dynamically configure a control object stored by the data link layer device, such as multicast filter information or a Quality of Service profile. The network layer device may be a service edge router, and the data link layer device may be a customer premises equipment device, e.g., a modem or wireless access point, or a switch, e.g., a digital subscriber line access multiplier.

Controlling data link layer elements with network layer elements

A network controls provision of access functionality by an access node to provide a network service to a subscriber device. For example, the network device may control the queuing and forwarding of packets by the access node to facilitate packet transmission according to, for example, a Quality of Service class. The network device may send control messages to the access node to dynamically configure a control object stored by the access node, such as a Quality of Service profile. The network device may be a router, and the access node may be a base station that wireless communicates with a subscriber device, e.g., a cellular phone. The access node may then delivery the packets in accordance with the dynamically configured control object.

Controlling access nodes with network transport devices within wireless mobile networks

Techniques for classifying and managing network flows associated with a network service using application classification information and active signaling relay are described. A network device, for example, includes a signaling interceptor and a network flow interface. The signaling interceptor monitors a communication between a customer device and an application server, and identifies a network flow associated with a network service provided to the customer device by the application server. The network flow interface applies a policy to the identified network flow. An active signaling relay module communicates with the application server using data injected within the signaling communications, and utilizes the injected data to further control the network flows and the delivery of the network service.

Managing a network flow using application classification information and active signaling relay

A network router includes a plurality of interfaces configured to send and receive packets, and a routing component comprising: (i) a routing engine that includes a control unit that executes a routing protocol to maintain routing information specifying routes through a network, and (ii) a forwarding plane configured by the routing engine to select next hops for the packets in accordance with the routing information. The forwarding plane comprises a switch fabric to forward the packets to the interfaces based on the selected next hops. The network router also includes a security plane configured to apply security functions to the packets. The security plane is integrated within the network router to share a streamlined forwarding plane of the routing component.

Streamlined packet forwarding using dynamic filters for routing and security in a shared forwarding plane

A network device may include logic to establish an IP session, establish a BFD session within the established IP session, transmit BFD packets within the established BFD session, and determine that the established IP session is active based upon reception of the BFD packets. In another embodiment, the logic may also determine that an IP session is active using an inactivity timer that may also trigger transmission of BFD packets.

Systems and methods for IP session keepalive using BFD protocols

The invention is directed towards techniques for forwarding subscriber frames through a Multi-Protocol Label Switching (MPLS) aggregation network using MPLS labels. Layer two (L2) network devices, such as access nodes, of a service provider (SP) network implement MPLS functionality in the data plane, but do not implement an MPLS signaling protocol in the control plane. The L2 network devices include an interface for configuring a static pool of labels applied in the data plane of the L2 network device to output MPLS communications to the MPLS network. The access nodes may be configured by an administrator to maintain static pools of subscriber labels and MPLS labels. The access nodes autonomously allocate the subscriber labels to subscriber devices that request broadband services from a Broadband Services Router (BSR), and distribute the subscriber labels and MPLS labels as upstream assigned labels.

Layer two (L2) network access node having data plane MPLS

Growing community of inventors

Arlington, MA, United States of America

Jerome Pascal Moisand