Juniper Networks, Inc.

Mohan Thangavel

Thyagarajan S Pasupathy

Radhakrishnan G

Saurav Shaw

Sarvesh K Batta

Nagaraja Manikkar Shenoy

Sankar Ramanoorthi

Elango Krishnasami

Vaibhav Belliappa

Vijay Sai Ram Paruchuri

Techniques are disclosed for computing a priority of routes advertised by nodes implementing Layer-3 (L3) Multi-Node High Availability (MNHA) for a Software-Defined Wide Area Network (SD-WAN) interconnecting a first network device and a second network device according to link adherence to performance requirements. In one example, a node computes a priority for a route to the second network device based at least in part on a comparison between (1) one or more performance measurements of a link between the node and the second network device and (2) one or more performance requirements for the link. In some examples, the computed priority for the route is further based in part on a preference for the node. The node exports, to the first network device, the route to the second network device, wherein the route comprises data specifying the computed priority for the route.

Route preference based on link performance

In general, the disclosure describes techniques for dynamic application service level agreement (SLA) metric generation, distribution, and intent-based Software-Defined Wide Area Network (SD-WAN) link selection. For instance, a network device may determine a metric associated with an application or application-group. The network device may send the metric to a controller, and in response may receive from the controller a recommended SLA metric associated with the application or application-group. The network device may also compute an intent-based SLA metric based on the recommended SLA metric, one or more characteristics of one or more links connected to the network device, and a user configured intent model that defines a tolerance level to apply the recommended SLA metric. The network device may select, based on the intent-based SLA metric, a path to send traffic from the application or application-group.

Dynamic application SLA metric generation, distribution, and intent-based SD-WAN link selection

A network device may receive a first data packet. The network device may determine that a level of available computing resources satisfies a threshold level. The network device may perform a secure socket layer (SSL) proxy function based on the level of available computing resources satisfying the threshold level. The network device may receive a second data packet. The network device may determine that the level of available computing resources fails to satisfy the threshold level. The network device may determine a security characteristic associated with the second data packet. The network device may determine a security rating associated with the second data packet based on the security characteristic. The network device may selectively perform the SSL proxy function based on the security rating.

SSL proxy whitelisting

Techniques are described for an enhanced two-way active measurement protocol (TWAMP) to measure network performance of links and/or network paths in a fully converged Software Defined Wide Area Network (SD-WAN), using a single TWAMP instance. In one example, a first network device executing a TWAMP session-sender may send a test packet embedded with one or more metrics to the TWAMP session-reflector executed by another network device, which reflects the test packet embedded with one or more metrics back to the TWAMP session-sender. The TWAMP session-sender may further reflect a test packet embedded with one or more additional metrics back to a TWAMP session-reflector to enable the network devices to independently perform network performance calculations using the metrics embedded within the test packets exchanged in a single TWAMP instance.

Growing community of inventors

Bengaluru, India

Mohan Thangavel