Cisco Technology, Inc.

Naoshad Mehta

Shyam N Kapadia

Rajesh Babu Nataraja

Nilesh Shah

Akshya Kumar Singh

Padmanabhan Krishnan

Sri Goli

Varagur Chandrasekaran

Srinivas Pitta

Ashok Ganesan

Koussalya Balasubramanian

Rob Liston

Viral Rajeshbhai Barot

Suvil Singh Deora

Srinivas Siva Kanth Sattiraju

Sundeep Singam Setty

Ateet Kumar Krishna Shetty

Abhinandan Prativadi Bayankaram

A system and method for providing end-to-end data flow analytics in a network flow that includes network appliances. Information regarding one or more network appliances is received by a flow collector and analyzed by an enrichment module. The network information regarding the one or more network appliances can be stored. Network flow data is received from various nodes within the network and stitched or aggregated in light of the enriched network appliance information to provide an end-to-end data flow that can be useful to understand one or more performance parameters of the unified network flow.

End-to-end flow visibility in a data network including service appliances

Techniques are presented herein for providing a persistent external Internet Protocol (IP) address for extra-cluster services. One example involves initiating, in a cluster, a first pod with a label that identifies a service. The first pod is configured to provide the service to one or more network entities outside the cluster. The first pod is assigned an IP address configured for communicating outside the cluster. A mapping of the service to the IP address is stored. In response to a determination that the service has been disrupted, a second pod is initiated in the cluster with the label that identifies the service. The second pod is configured to provide the service to the one or more network entities outside the cluster. Based on the mapping and the label that identifies the service, the IP address is assigned to the second pod.

Providing persistent external internet protocol address for extra-cluster services

A source host device masks the hardware address of a hosted container from a network device to mitigate the use of resources in the network device. A virtual switch on the source host receives a frame from a hosted container. The frame includes a source hardware address of the hardware address corresponding to the hosted container. The frame also includes a source network address of the network address corresponding to the hosted container. The virtual switch replaces the source hardware address of the frame with the hardware address associated with the source host, and send the frame to the network device. The frame sent to the network device includes the host hardware address as the source hardware address and the container network address as the source network address.

Mitigating network/hardware address explosion in network devices

In one embodiment, a device obtains temperature and utilization measurements for a set of network interface transceivers in a network. The device computes, for each of the transceivers, a correlation coefficient between its temperature and utilization measurements. The device applies a k-nearest neighbor classifier to the correlation coefficients, to predict a correlation coefficient. The device uses the predicted correlation coefficient to determine an impact of temperature on utilization of a particular network interface transceiver. The device initiates a mitigation action, when the determined impact of temperature on the utilization of the particular network interface transceiver exceeds a predefined threshold.

Evaluating the impact of transceiver temperature on interface utilization

A network device is configured to establish a messaging bus with a container networking plug-in, which is associated with a container virtual network. The network device is also configured to obtain, via the messaging bus, networking information for one or more containers hosted at the at least one container-hosting computing device. Based on the networking information, the network device provides visibility of one or more containers below the network device.

Orchestrator agnostic application container visibility

Control plane analytics and policing may be provided. First, packets that traverse a port may be parsed. Next, based on the parsed packets, metrics for each of a plurality of hosts on a per-protocol basis may be created. The created metrics may then be analyzed and at least one restriction on at least one of the plurality of hosts may be applied based on the analysis.

Control plane analytics and policing

A network device includes Power-over-Ethernet PoE ports to communicate with a communication network and Universal Serial Bus (USB) devices. The network device establishes an Internet Protocol (IP) related connection with an application program, and receives downlink IP packets carrying USB transaction requests destined for the USB device from the application program over the IP connection. The network device converts the received downlink IP packets carrying the USB transaction requests to downlink bus-level USB transactions that are understandable to the USB device. The network device sends the downlink bus-level USB transactions to the USB adaptor device over a PoE connection for forwarding by the USB adaptor device to the USB device.

Growing community of inventors

San Jose, CA, United States of America

Naoshad Mehta