Cisco Technology, Inc.

Mohammed Hawari

Yoann Desmouceaux

Andre Surcouf

Andre Jean-Marie Surcouf

Aloys Augustin

Pierre Pfister

Guillaume Ruty

Aloÿs Christophe Augustin

Jacques Olivier Samain

Alberto Compagno

Jordan François Jean Augé

William Mark Townsley

Vincent E Parla

Jerome Tollet

Jordan Augé

Thierry Gruszka

Seth Mason

Jérôme Tollet

Marcel Enguehard

Nathan Roland Maryan Skrzypczak

Axel Taldir

Techniques for utilizing a portion of a communication session identifier (e.g., a Session-ID, an SPI, a CID, a DCID, and/or the like) to indicate a target routing device (e.g., a VPN and/or ZTNA termination device) for establishing control plane session(s) and/or data plane session(s) at wire-speed in a networked computing environment. The routing device(s) of a networked computing environment may generate a communication session identifier and send the communication session identifier to the client device, such that subsequent packets send from the client device may be forwarded to the proper routing device indicated by the communication session identifier for establishment of one or more data plane sessions. Additionally, data plane sessions may be established using a Resumed Handshake rather than a full handshake that is typically required, as Session Resumption utilizes the assigned communication session identifier for mapping.

Using client-hello for intelligent routing and firewalling in multipath secure access systems

Techniques are described for providing a distributed application load-balancing architecture that supports multipath transport protocol for client devices connecting to an application service. Rather than having client devices generate new network five-tuples for new subflows to the application servers, the techniques described herein include shifting the burden to the application servers to ensure that the new network five-tuples land in the same bucket in the consistent hashing table. The application servers may receive a hashing function utilized by the load balancers to generate the hash of the network five-tuple. By having the application servers generate the hashes, the load balancers are able to continue stateless, low-level processing of the packets to route them to the correct application servers. In this way, additional subflows can be opened for client devices according to a multipath transport protocol while ensuring that the subflows are routed to the correct application server.

Distributed resilient load-balancing for multipath transport protocols

Establishing an expected transmit time at which a network interface controller (NIC) is expected to transmit a next packet. Enqueuing, with the NIC and before the expected transmit time, a packet Pto be transmitted at the expected transmit time. Upon enqueuing P, incrementing the expected transmit time by an expected transmit duration of P. Transmitting at the NIC's line rate and timestamping enqueued Pwith its actual transmit time. Adjusting the expected transmit time by a difference between P's actual transmit and P's expected transmit time. Requesting, before completion of transmitting P, to transmit a Pat time t(P). Enqueuing, in sequence, zero or more P, such that the current expected transmit time plus the duration of the transmission of the Ps at the line rate equals t(P). Transmitting at the line rate each enqueued P. Upon enqueuing each P, incrementing, for each P, the expected transmit time by the expected transmit duration of the P. Enqueuing Pfor transmission directly following enqueuing the final P. Transmitting, by the NIC, enqueued Pat t(P).

Computer network packet transmission timing

An approach to establish connections between clusters having overlapping IP address ranges. A method includes receiving, at a service discovery server, from a first node in a first cluster, a service discovery request including a unique name, determining, at the service discovery server, that the unique name resolves to a destination IP address of a second node in a second cluster, determining that the destination IP address overlaps with an IP address range associated with the first cluster, in response to determining that the destination IP address overlaps with the IP address range belonging to the first cluster, configuring a gateway to expect a network connection request from the first node that includes an IP address of the gateway, and sending a service discovery response to the first node, the service discovery response including the IP address of the gateway, but not the destination IP address.

Smart service discovery to interconnect clusters having overlapping IP address space

A method is provided that is performed by a smart network interface card (SmartNIC) that is in communication with a host device that serves as a forwarder in an Hybrid Information-Centric Network (hICN). The method includes storing in a memory of the SmartNIC, mapping information that maps a subset of names of content contained in a content store that is stored in a memory of the host device to corresponding addresses of the content. The method further includes receiving at the SmartNIC, from a requester, an interest that includes a name, and determining whether the name of the interest is included in the mapping information stored in the SmartNIC. The method includes processing the interest based on whether the name of the interest is contained in the mapping information stored in the memory of the SmartNIC.

Two-level cache architecture for live video streaming through hybrid ICN

Systems, methods, and computer-readable media for reducing distributed storage operation latency using segment routing. In some examples, a method can involve receiving, from a client, a message identifying an intent to store or retrieve data on a distributed storage environment, and sending to the client a segment routing (SR) list identifying storage node candidates for storing or retrieving the data. The method can involve steering a data request from the client through a path defined by the SR list based on a segment routing header (SRH) associated with the request, the SRH being configured to steer the request through the path until a storage node from the storage node candidates accepts the request. The method can further involve sending, to the client device, a response indicating that the storage node has accepted the request and storing or retrieving the data at the storage node that accepted the request.

Reducing distributed storage operation latency using segment routing techniques

A method is provided in one example embodiment and includes, for each of a plurality of individual storage units collectively comprising a virtual storage unit, mapping an internal address of the storage unit to a unique IP address, wherein each of the storage units comprises a block of storage on one of a plurality of physical storage devices and wherein the IP address includes a virtual storage unit number identifying the virtual storage unit; receiving from a client a request to perform an operation on at least one of the data storage units, wherein the request identifies the internal address of the at least one of the data storage units; translating the internal address of the at least one of the data storage unit to the unique IP address of the at least one of the data storage units; and performing the requested operation on the at least one of the data storage units.

Techniques for implementing IPV6-based distributed storage space

Techniques and apparatus for optimizing scheduling of uplink traffic are provided. One technique includes determining, based on evaluation of a pending interest table (PIT) at an apparatus, at least one portion of an uplink traffic flow from a client device that satisfies one or more conditions for periodicity. A resource for the at least one portion of the uplink traffic flow that satisfies the one or more conditions for periodicity. An indication of the resource allocation is transmitted to the client device.

Video-call aware uplink scheduler using pending in interest table snooping

Techniques are provided for storing data in a distributed storage system. A server stores an object according to a first storage policy in the distributed storage system that includes a plurality of storage nodes. Storing the object according to the first storage policy results in a first storage overhead for the object. The server receives a triggering event associated with the object, and the triggering event changes an attribute of the object. In response to the triggering event, the server identifies a second storage policy for the object. Storing the object according to the second storage policy results in a second storage overhead for the object different from the first storage overhead.

Hybrid distributed storage system to dynamically modify storage overhead and improve access performance

Systems, methods, and computer program products relating to resilient transmission of a media stream over a communication network. A plurality of data packets are received over a communications network. The plurality of data packets relate to a first source video portion transformed using a geometric transform. The geometric transform is configured to modify a location of pixels in the first source video portion such that a plurality of adjacent pixels in the first source video portion are not adjacent after transformation. A received video portion is assembled based on the plurality of data packets. The received video portion is transformed, using an inverse of the geometric transform, to generate a second source video portion. The second source video portion and the first source video portion include a plurality of matching pixels.

Growing community of inventors

Montigny-le-Bretonneux, France

Mohammed Hawari