Arista Networks, Inc.

Other

Kenneth James Duda

Douglas Alan Gourlay

Hugh Weber Holbrook

Adam James Sweeney

Anshul Sadana

Sudip Regmi

Udayakumar Srinivasan

Benoit Sigoure

Robert Eugene Gilligan

Anirban Sinha

Francois Labonte

Simon Francis Capper

Michael Chih-Yen Wang

Andre Henri Joseph Pech

Ryan Sherali Madsen

Venkata Ramchandra Murthy Jonnalagadda

Alexander Channing Ho

Lorenz Wolfgang Redlefsen

Tal Rusak

Hua Zhong

Ethan Barnett Rahn

Roman Olegovich Chertov

François Labonté

Prasanna Parthasarathy

Itthichok Jangjaimon

Fred Lo-Tze Hsu

Andrew Fort

Nathan D Arroyo

Pranav Choudhary

Andre Abreu Calfa

Roger S Liao

Ian O'brien

Rajat Bajaj

A method and system for maintaining persistent network policies for a virtual machine (VM) that includes determining a name of the VM executing on a first host connected to a first network device; binding the name of the VM to a network policy for the VM on the first network device; acquiring from VM management software, using the name of the VM, a universally unique identifier (UUID) of the VM; associating the UUID to the network policy on the first network device; applying the network policy for the VM on the first network device; subscribing to receive notifications from the VM management software of changes to the configuration of the VM corresponding to the UUID; receiving notification from the VM management software of a configuration change made to the VM corresponding to the UUID; and updating the network policy of the VM to reflect the configuration change of the VM.

Method and system for virtual machine aware policy management

A centralized manager in a network deployment is configured to perform periodic automated rotation of secrets used in the network and customer devices in the deployment. The centralized manager is further configured with intelligence to automatically install the rotated secrets onto the deployed devices. The centralized controller can provide high frequency rotations to improve network security.

High frequency rotation of cryptographic data

In general, the invention relates to a method for programming a network device to perform routing of data packets between and/or within networks. More specifically, the method provides a more efficient process for updating the forwarding equivalence class (FEC) table with minimal impacting of the mappings in the forward information base (FIB) of the network device.

Next hop groups

A method for processing state information updates. The method includes receiving, by a coordination point, a plurality of state information from a plurality of network elements; processing at least one of the plurality of state information to generate a result; and applying the result to at least one of the plurality of network elements in order to modify an operation of the at least one of the plurality of network elements.

Method and system for sharing state between network elements

A method for managing a network includes obtaining network flow data corresponding to a network device in the network, determining, based on the network flow data, configuration coverage associated with forwarding control configuration of the network device, identifying, using the configuration coverage and the forwarding control configuration, non-coverage, generating a plurality of synthetic packets based on the non-coverage, transmitting the plurality of synthetic packets to the network device, obtaining a set of results associated with the plurality of synthetic packets, making a determination, based on the set of results, that the network device is not implementing at least a portion of the non-coverage correctly, and based on the determination, performing a remediation action on the network device.

Using synthetic packets to validate forwarding and control implementation on network systems

A method for managing networking devices. The method includes receiving, by a second management system, first network device state information (NDSI) for a first plurality of network devices, where the first NDSI is obtained by a first management system and where the first management system manages the first plurality of network devices. The method further includes initiating performance of a management action based on a result, wherein the result is obtained by processing at least the first NDSI.

Multi-cluster management plane for network devices

A network manager manages a network topology. The network manager includes storage for storing a signature of a network device of the network topology. The network manager also includes a device state manager that obtains a signature of a device that participates in the network topology, the signature indicating that the device is operating in an undesired manner; makes a determination, based on signature, that the device should be in a quarantined state; in response to making the determination: generates a quarantine state update that indicates that the device is in the quarantined state; and sends, by the network manager, the quarantine state update to the device. The quarantine state update does not indicate how the quarantined state is implemented.

System and method for device quarantine management

In one embodiment, a method includes receiving, at a network management system (NMS) from a client, a message having an object reference embedding a query, the query requesting an operation to be performed on data stored in a data tree maintained by the NMS. The method provides for generating, by the NMS, a result of the query by performing the operation on the data. In this embodiment, the method further provides for sending, by the NMS to the client, the result of the query. In some embodiments, the object reference may include a pathname.

Pathnames with embedded queries

In general, embodiments of the invention relate to routing packets between hosts or virtual machines in different layerdomains. More specifically, embodiments of the invention relate to using overlay routing mechanisms in an Internet Protocol (IP) fabric to enable communication between hosts or virtual machines in different layerdomains to communication. The overlay routing mechanisms may include direct routing, indirect routing, naked routing, or a combination thereof (e.g., hybrid routing).

Method and system for overlay routing with VXLAN

A method and system for processing network traffic data units (NTDUs) is disclosed. The method includes establishing a virtual tunnel between a wireless access point (WAP) and a network device. A NTDU is received by the WAP from a client device, and the virtual tunnel is identified upon which to transmit the NTDU based on a header of the NTDU according to a policy. The policy maps a portion of the header to a plurality of available virtual tunnels. The NTDU is transmitted, via the virtual tunnel, to the network device.

Method and system for processing encapsulated wireless traffic

A method includes obtaining network data. The data includes a first portion of the network data obtained from a first network device of at least two network devices, and a second portion of the network data obtained from a second network device of the at least two network devices. The method also includes obtaining, using the network data, enhanced network data that indicates a presence of a network flaw of the network, the network flaw is not indicated by either of the first portion or the second portion in isolation from the other portion. The method further includes performing a network enhancement action set using the enhanced network data to remediate the network flaw.

Aggregated control-plane tables

Embodiments disclosed herein relate to method and systems for updating hardware tables. Such methods may include receiving a flexible pipeline definition from a controller at a compiler; generating, by the compiler, a hardware table update initial instruction set; and transmitting the hardware table update initial instruction set to a network device. The network device may use the hardware table initial instruction set to configure the network device to implement the flexible pipeline definition for a network chip.

Dynamic run time programming of hardware tables

A network device includes computing resources for utilization by processes hosted by the network device and a computing resources manager. The computing resources manager automatically instantiate a new instance of a first process of the processes upon termination of the first process; makes a determination that the network device has entered an out of computing resources state; and in response to the determination: performs an action set to increase a quantity of the computing resources that are available for allocation to the processes.

Growing community of inventors

Santa Clara, CA, United States of America

Kenneth James Duda