Illumio, Inc.

Cisco Technology, Inc.

Jerry B Scott

Daniel Richard Cook

Paul James Kirner

Mukesh Gupta

Matthew Kirby Glenn

Juraj George Fandli

Andrew S Rubin

Thukalan V Verghese

Sehyo Chang

Alan B Stokol

Alex Van Truong

Matthew K Glenn

Monica I Morogan

Christopher J White

Paul J Kirner

Juraj G Fandli

Ming Li

Chandrasekar Krishnamurthy

Krishna Sundaresan

Sanjeev Chhabria

Bhaskar Bhar

Alan B Stokel

A managed server (MS) within an administrative domain is quarantined. The administrative domain includes multiple MSs that use management instructions to configure management modules so that the configured management modules implement an administrative domain-wide management policy that comprises a set of one or more rules. The quarantined MS is isolated from other MSs. A description of the MS is modified to indicate that the MS is quarantined, thereby specifying a description of the quarantined MS. Cached actor-sets are updated to indicate the quarantined MS's changed state, thereby specifying updated actor-sets. A determination is made regarding which updated actor-sets are relevant to an other MS, thereby specifying currently-relevant updated actor-sets. A determination is made regarding whether the currently-relevant updated actor-sets differ from actor-sets previously sent to the other MS. Responsive to determining that the currently-relevant updated actor-sets are identical to the previously-sent actor-sets, no further action is taken.

Distributed network security using a logical multi-dimensional label-based policy model

A change to a state of a particular managed server within an administrative domain is processed. The administrative domain includes a plurality of managed servers that use management instructions to configure management modules so that the configured management modules implement an administrative domain-wide management policy that comprises a set of one or more rules. A first description of the particular managed server is modified to indicate the particular managed server's changed state, thereby specifying a second description of the particular managed server. The unmodified first description is compared to the second description, thereby specifying a description change. A determination is made, based on the description change, regarding whether to update management instructions previously sent to the particular managed server.

Handling changes in a distributed network management system that uses a logical multi-dimensional label-based policy model

Management instructions for a particular managed server within an administrative domain are generated according to an administrative domain-wide management policy that comprises a set of one or more rules. The administrative domain includes a plurality of managed servers. A determination is made regarding which rules within the set of rules are relevant to the particular managed server. Function-level instructions are generated based on the rules that were determined to be relevant. A determination is made regarding which managed servers within the plurality of managed servers are relevant to the particular managed server. The function-level instructions and information regarding the managed servers that were determined to be relevant are sent to the particular managed server. The particular managed server uses the function-level instructions and information regarding the managed servers to configure a management module so that the configured management module implements the administrative domain-wide management policy.

Distributed network management using a logical multi-dimensional label-based policy model

A server is paired. A pairing request that includes a pairing key is received from an unpaired server. A determination is made regarding whether to approve or reject the pairing request. Making the determination comprises attempting to validate the pairing key in the pairing request. Responsive to determining to approve the pairing request: the unpaired server is notified that the unpaired server is now a managed server; a description of the managed server is generated, wherein the managed server description includes a set of one or more labels that describe the managed server; management instructions are generated for the managed server based on the managed server description and based on an administrative domain-wide management policy that includes a rule that refers to managed servers using a label; and the management instructions are sent to the managed server.

Managing servers based on pairing keys to implement an administrative domain-wide policy

A determination is made regarding whether a firewall will block a network packet. The network packet indicates a set of one or more characteristics. A test packet is generated that indicates the set of characteristics. The test packet is sent to the firewall without using a network. A test result is received from the firewall. The test result is stored.

Determining, without using a network, whether a firewall will block a particular network packet

A method is provided in one example embodiment and includes evaluating an active state of a media server configured to capture a media stream from one or more media sources. The method also includes determining a failure associated with the media server, and activating a failover media server to receive the media stream based on the failure. The method further includes replicating configuration data associated with the media server that experienced the failure. The configuration data can be provisioned in a suitable database. The failover media server is configured using the configuration data.

System and method for providing media server redundancy in a network environment

A method is provided in one example embodiment and includes evaluating a first plurality of messages from a media server configured to receive a media stream. The first plurality of messages is indicative of an active state for the media server. The method also includes detecting an anomaly associated with a portion of the first plurality of messages. The anomaly is associated with a failure of the media server. The method can also include activating a failover media server to receive the media stream based on the anomaly, and evaluating a second plurality of messages. The second plurality of messages is indicative of a resumed active state for the media server that experienced the failure. The failover media server can be deactivated based on the resumed active state. Media metadata can be communicated from the failover media server to the media server that experienced the failure.

One embodiment in accordance with the invention is a method. For example, the method can include receiving a plurality of control plane messages. A determination can be made as to whether a processor card of a router is experiencing sustained congestion from the plurality of control plane messages. Provided the processor card is experiencing sustained congestion, a source of the sustained congestion can be identified. A correction phase can be entered in order to respond to the source of the sustained congestion.

Detection and recovery from control plane congestion and faults

A system and method to provide node-to-node connectivity in a communications network are disclosed. A virtual connection is established between a source node coupled to a client and a destination node within the connection-oriented network using standards-based signaling. A communication session is then activated between the client and the destination node on the virtual connection.

Growing community of inventors

Los Altos, CA, United States of America

Jerry B Scott