Arista Networks, Inc.

Cisco Technology, Inc.

Muhammad Khalid Yousuf

Francois Labonte

François Labonté

Ramakrishna Shivaramaiah Paduvalli

Adam Laurence Taylor

Sambath Kumar Balasubramanian

Kevin Martin Amiraux

James Ronald Holland, Jr

Neil McGill

Stefan J Rebaud

Sudhir Kumar Rustogi

Michael Kerby Chen

Sonny N Tran

Min H Teng

François Labonte

Chen Jia Jang

Ganesan Venkataraman

Denny Hung

Ethan R Vadai

Jr James Ronald Holland

Techniques for improving the prefix summarization scale of the longest prefix match (LPM) tables of a network device are provided. In one set of embodiments, these techniques involve deduplicating sub-tries of LPM trie data structures that the network device uses to program LPM entries into the LPM tables. This sub-trie deduplication avoids the creation of duplicate LPM entries in the LPM tables across different virtual routing and forwarding (VRF) instances, thereby increasing the LPM tables' effective capacity.

Prefix summarization scale by deduplicating longest prefix match (LPM) sub-tries

A traffic policy includes policy rules that specify branch actions in their action fields. A branch action specifies another policy rule in the traffic policy. Packet filters generated from the traffic policy represent the traffic policy rules and execution order semantics of the branch rules. The packet filters include resolved actions that are generated by resolving the original actions in the policy rules.

Merging chained actions in traffic policies having branch rules

A switching system manager programmed to obtain a base lookup data structure comprising nodes that enumerate all prefixes of a first traffic management policy of a first type and all prefixes of a second traffic management policy of a second type, modify the base lookup data structure based on a first set of inheritance rules associated with the first traffic management policy to generate an updated lookup data structure comprising first traffic management policy label allocations, modify the updated lookup data structure based on a second set of inheritance rules associated with the second traffic management policy to generate a combined lookup data structure comprising the first traffic management policy label allocations and second traffic management policy label allocations, program packet classification hardware of the switching system to adapt the switching system to process packets based on the combined lookup data structure.

System and method for programming packet forwarding hardware

Systems and methods for allocating a per-interface access control list (ACL) counter are disclosed. An ACL is applied to a data packet received at an interface of the network element. In response to matching the highest priority ACL rule, a counter value is obtained based on a combination of a base index and an expansion index value. The base index, expansion index, and counter values are stored in their respective tables. The counter value is uniquely associated with the specific ACL rule hit and the interface used to receive the data packet. Systems and methods also allocate a next set of expansion and counter tables when their storage capacity is exceeded. When the next set of tables are allocated, the older set of tables along with their index mappings and entries are preserved.

Per-interface access control list (ACL) counter

A method and system of accelerating monitoring of network traffic. The method may include receiving, at a network chip of a network device, a network traffic data unit; capturing, by the network chip, the network traffic data unit based on a traffic sampling rate; adding, by the network chip, a sampling header to the network traffic data unit to obtain a sampled network traffic data unit; sending the sampled network traffic data unit from the network chip to a sampling engine; receiving, from the sampling engine, a flow datagram that includes a network traffic data unit portion and a flow datagram header; generating a flow network data traffic unit that includes the flow datagram; and transmitting the flow network data traffic unit towards a collector.

Accelerated network traffic sampling using an accelerated line card

Accelerating monitoring of network traffic by: configuring a first network chip of a non-accelerated line card with a VOQ associated with an internal interface that is connected to a second network chip of a first accelerated line card; receiving, at the first network chip, a data unit; selecting, by the first network chip, the data unit based on a traffic sampling rate; adding information identifying the data unit as having been selected for sampling to obtain a selected data unit; and sending the selected data unit from the first network chip to the second network chip using the VOQ and the internal interface. The second network chip identifies the selected data unit and, based on the identification, appends a sampling header to the data unit to obtain a sampled data unit, and transmits the sampled data unit to the sampling engine of the first accelerated line card.

Accelerated network traffic sampling for a non-accelerated line card

A method for managing port bandwidth in network devices. The method includes determining a first and a second ingress bandwidth of a first and a second network chip, respectively, determining an egress bandwidth of an egress port of a third network chip, determining a first and a second weight for the first and the second network chip, respectively, where the first and the second weight are determined based on a bandwidth including the first and second ingress bandwidth, processing a first data packet, received by a first ingress port administrated by the first network chip, based on the first weight and the egress bandwidth, and processing a second data packet, received by a second ingress port administrated by the second network chip, based on the second weight, and the egress bandwidth, where the destination of the first and the second data packet is the egress port.

Method and system for managing port bandwidth in network devices

Grouping pseudowires based on hardware interfaces and configured control paths enables improved pseudowire failover performance. Signaling status changes (e.g., from standby to active status) is facilitated by using group IDs for the pseudowire groups, thereby enabling improved failover performance when there is disruption in the network.

Growing community of inventors

Milpitas, CA, United States of America

Muhammad Khalid Yousuf