Cisco Technology, Inc.

Arrcus Inc.

Keyur Patel

Nalinaksh Pai

Derek Man-Kit Yeung

David Delano Ward

Robert Raszuk

Kalyani Rajaraman

Vikram Ragukumar

Neeraj Malhotra

Robert Austein

Tetsuya Murakami

Ali Sajassi

Lalit Kumar

Burjiz F Pithawala

Ebben Aries

Stefano Benedetto Previdi

Chandrashekhar Appanna

Anantha Ramaiah

Alpesh Patel

Randall Bush

Clarence Filsfils

James Neil Guichard

Alvaro E Retana

Luca Martini

Lawrence Rolfe Kreeger

Gargi Nalawade

Sridhar Pitchai

Rajkumar Gurusamy

Ashutosh Shanker

Carlos M Pignataro

Samir D Thoria

Pushpasis Sarkar

Csaba Keszei

Serpil Bayraktar

Manish Bhardwaj

Harsha Vardhan Kovuru

Nitin Kumar

Samer Salam

Stewart Frederick Bryant

Russell Ivan White

John Galen Scudder

Thomas David Nadeau

Ruchi D Kapoor

Mike Shand

Satish Mynam

Roque Gagliano

Randy Bush

Arthi Ayyangar

Rajiv Asati

William Mark Townsley

Abhay Kumar Roy

Rex Emmanuel Fernando

Jim Guichard

Naiming Shen

Ole Troan

Balaji Pitta Venkatachalapathy

Ravindra Nandalal Rathi

Feng Xu

Gunter Van De Velde

Isidor Kouvelas

Arjun Sreekantiah

Ed Kern

Ting-Chi Yeh

Lakshman Swaroop Babu

Matthew Anderson

Ravindra Vaishampayan

Selma Yilmaz

Brian Eliot Weis

Yi Yang

Dhananjaya Rao

Alfred C Lindem, Iii

Alton Lo

Himanshu H Shah

Eric C Rosen

Pradosh Mohapatra

Enke Chen

Manoj Kumar Pandey

W Mark Townsley

Ryan Bickhart

Sujay Gopinathan

Manas Pati

Ashok Patrick Jude Manoharan

Robert Marcin Raszuk

Mitesh Mukesh Kanjariya

Mahesh Jethanandani

Shrirang Arvind Bage

David Andrew Sacerdote

Sreekanth Kannan

Stephen Wall

Amol Iyer

Sethuraman Ramanathan

Shitanshu Shah

Pierre Jean Rene François

Fabien Degouet

Pedro Miguel Martins Roque Marques

Burjiz Pithawala

Prevention of SIM spoofing in mobile user plane. A method includes generating a border gateway protocol (BGP) flow specification based on a range of Internet Protocol (IP) addresses associated with routes for one or more user equipment devices. The method includes, in response to receiving a packet from a node within a radio access network, verifying an inner IP packet encapsulation based on the BGP flow specification.

Prevention of subscriber identity module spoofing for mobile user plane

Systems and methods for improved data routing in network topologies. A method includes generating a configuration template for a network topology based on a topology descriptor file, wherein the network topology comprises a plurality of nodes, and wherein the topology descriptor file comprises a plurality of unique node tag identifiers that are each assigned to a node of the plurality of nodes within the network topology. The method includes resolving each of the plurality of unique node tag identifiers based on the plurality of nodes within the network topology and generating a network configuration for the network topology.

Automated scaling of network topologies using unique identifiers

Importing of a UE address into a VRF of perimeter equipment is facilitate by receiving a VPN update from the perimeter equipment including a route target of the perimeter equipment and a gNodeB address. In addition, session information is obtained by intercepting traffic between the UE address and a UPF. The session information including the UE address and address of a gNodeB to which the UE is connected. By matching the gNodeB addresses from the VPN update and the session information, the route target of the perimeter equipment to which the UE is connected may be determined. The UE address may then be imported exclusively into the VRF of the perimeter equipment.

PFCP session load balancer

Systems, methods, and devices for offloading network data to a datastore. A system includes a plurality of instances of a datastore node in a single networking device, each of the plurality of instances of the datastore node comprising: a datastore; a publisher independent of the datastore for publishing data to the datastore; a subscriber independent of the datastore for receiving information from the datastore; a replicator agent configured to connect to the datastore as a publisher or a subscriber; and a persistent storage agent configured to connect to the datastore as a publisher or a subscriber.

Single node and multiple node datastore architecture in a network routing environment

Telemetry monitoring of BGP prefixes in a network topology. A system includes a plurality of input topic streams and a plurality of processors, wherein each of the plurality of processors is dedicated to one or more of the plurality of input topic streams. The system includes a plurality of stream stores for storing data, wherein each of the plurality of stream stores is dedicated to one or more of the plurality of input topic streams. The system includes a route processor in communication with each of the plurality of stream stores, wherein the route processor determines whether a route for a network topology corresponds with an existing route stored on at least one of the plurality of stream stores.

Method and apparatus for telemetry monitoring of BGP prefixes in a network topology

Systems, methods, and devices for offloading best path computations in a networked computing environment. A method includes storing in memory, by a best path controller, a listing of a plurality of paths learnt by a device, wherein each of the plurality of paths is a route for transmitting data from the device to a destination device. The method includes receiving, by the best path controller, a message from the device. The method includes processing, by the best path controller, a best path computation to identify one or more best paths based on the message such that processing of the best path computation is offloaded from the device to the best path controller. The method includes sending the one or more best paths to the device.

Best path computation offload in a network computing environment

Systems, methods, and devices for improved routing operations in a network computing environment. A system includes a virtual customer edge router and a host routed overlay comprising a plurality of host virtual machines. The system includes a routed uplink from the virtual customer edge router to one or more of the plurality of leaf nodes. The system is such that the virtual customer edge router is configured to provide localized integrated routing and bridging (IRB) service for the plurality of host virtual machines of the host routed overlay.

Host routed overlay with deterministic host learning and localized integrated routing and bridging

Telemetry monitoring of BGP prefixes in a network topology. A method includes receiving a route for a network topology and determining whether the route corresponds with an existing route stored on a route store. The method includes determining whether any network routing paths have been modified between the existing route and the route in response to determining the route corresponds with the existing route. The method includes generating a path configuration key for each of the at least one network routing path in response to determining at least one network routing path was modified between the existing route and the route.

Selective importing of UE addresses to VRF in 5G networks

Systems, methods, and devices for improved routing operations in a network computing environment. A system includes a first switch and a second switch in a network topology. The system includes a host virtual machine in communication with at least one of the first switch and the second switch. The system includes a routed peer link connecting the first switch to the second switch. The system is such that the first switch and the second switch have the same Internet protocol (IP) address and media access control (MAC) address.

First hop gateway redundancy in a network computing environment

A cellular data communication network includes a gNodeB connected to a UPF by an IP network. A first translation module translates GFP packets into IP packets transmitted over the IP network. A second translation module translates the IP packets back into IP packets and forwards the IP packets to the UPF. A PFCP proxy snoops information and provides it to a BGP module that programs the translation modules and a routing module to perform routing of packets in bypass of the UPF. The BGP module may program the first translation module with an SR policy associated with a binding SID that is bound to an interface to the gNodeB. The SR policy may invoke translation according to a function. The routing module may be programmed to embed GTP information in an SRH header that is used by the first translation module. BGP module may also distribute routing and VPN updates.

Use of IP networks for routing of cellular data packets

Systems, methods, and devices for improved routing operations in a network computing environment. A system includes a network topology comprising a plurality of spine nodes and a plurality of leaf nodes, wherein a link between a first spine node and a first leaf node is inactive. The first spine node includes one or more processors configurable to execute instructions stored in non-transitory computer readable storage media. The instructions include receiving a packet to be transmitted to the first leaf node. The instructions include identifying an alternative spine node at a same level in the network topology. The instructions include attaching a tunnel label to the packet, wherein the tunnel label indicates the packet should be transmitted to the alternative spine node.

Loop conflict avoidance in a network computing environment

A computing environment, such as a cloud computing environment, may include nodes performing NAT for a plurality of workloads. An active node performs NAT for the workloads, including maintaining a NAT table. The active node may create sub-interfaces for the workloads and function as a DHCP server. The NAT table and sub-interfaces may be recreated on a standby node. Upon detecting failure, a routing table is updated to direct workloads to connect to the standby node and traffic may continue to be processed by the standby node without disrupting network or application sessions.

High availability network address translation

Systems, methods, and devices for improved routing operations in a network computing environment. A system includes a network topology comprising a spine node and a plurality of leaf nodes. The system is such that at least one of the plurality of leaf nodes is associated with one or more networking prefixes. The spine node stores a prefix table. The prefix table includes a listing of networking prefixes in the network topology. The prefix table includes an indication of at least one equal-cost multipath routing (ECMP) group associated with each of the networking prefixes in the network topology. The prefix table includes an indication of at least one leaf node of the plurality of leaf nodes associated with each of the networking prefixes in the network topology.

Routing optimizations in a network computing environment

Growing community of inventors

San Jose, CA, United States of America

Keyur Patel