Vmware, Inc.

Cisco Technology, Inc.

Nikhil Ravindra Rajguru

Aarti Lolage

Akshay Katrekar

Nilesh Ramchandra Nipane

Maheedhar Nallapareddy

Shyam Sambasivan Ramachandran

Elisa Caredio

Eitan Bennun

Maypalli Jayadev Kumar

Shamira Joshua

Richard Lin

Tanmay Kumar

Chengning Lu

Rushikesh Shashank Ghatpande

Akshay Kale

Lele Zhang Zlele

Kaustubh Naniwadekar

The disclosure provides an approach for virtual computing instance (VCI) migration. Embodiments include scanning logical segments associated with a customer gateway to identify network addresses associated with the logical segments. Embodiments include determining one or more recommended supernets based on the network addresses associated with the logical segments. Embodiments include providing output to a user based on the one or more recommended supernets. Embodiments include based on the output, receiving input from the user configuring an aggregation supernet for the customer gateway. Embodiments include advertising the aggregation supernet to one or more endpoints separate from the customer gateway.

Supporting virtual machine migration when network manager or central controller is unavailable

The disclosure provides an approach for in-place conversion of a virtual switch on a host. Techniques are provided for in-place conversion of a virtual switch from a first type of virtual switch to a destination type of virtual switch. A method includes rekeying, by a second manager agent, one or more uplink ports associated with one or more logical switches implemented by the virtual on the host with the unique identifier. The rekeying includes updating one or more existing uplink port identifiers assigned to the one or more uplink ports with the unique identifier associated with a first manager agent. The method includes removing, by the first manager agent, an association of the one or more uplink ports with the opaque network; and informing the first manager and the second manager that the virtual switch is of the destination type of virtual switch.

In-place conversion of a virtual switch on a host

The disclosure provides an approach for decentralizing control plane operations in a network environment that includes transport nodes configured to implement a logical overlay network. A method includes transmitting a global list of transport nodes to each of the plurality of transport nodes from a management plane, the global list including an ordered list of the plurality of transport nodes. The method also includes transmitting a neighbor index value to each of the plurality of transport nodes, where the transport nodes each compute a corresponding list of neighbor transport nodes based on the neighbor index value and the global list of transport nodes. The method also includes, based on determining an update to a state of the logical overlay network has occurred by a first transport node, transmitting an update message from the first transport node to each transport node in the first transport node's list of neighbor transport nodes.

Decentralized control plane

An intermediary network device participates in a secure communication session between a server and a client through a proxy client and a proxy server. The proxy client receives a first session ticket from the server that enables the proxy client to resume communications with the server in the secure communication session. The intermediary network device determines a session state of the proxy client and the proxy server. The intermediary network device encapsulates the session state of the proxy client, the session state of the proxy server, and the first session ticket as part of a second session ticket. The second session ticket enables the client to resume communications with the proxy server in the secure communication session. The intermediary network device sends the second session ticket to the client and deletes the first session ticket.

Scalable intermediate network device leveraging SSL session ticket extension

An intermediary network device receives a request for a secure communication session between an endpoint server and an endpoint client through the network device. The secure session between the endpoint server and the endpoint client is divided into a first session and a second session. The first session is between the endpoint server and the network device. The second session is between the network device and the endpoint client. The network device receives a first session ticket from the endpoint server. A session state of a proxy client in the first session, including the first session ticket, is determined. The network device also determines a session state of a proxy server in the second session. The combination of the session state of the proxy client, including the first session ticket, and the session state of the proxy server are encapsulated as part of a second session ticket.

Growing community of inventors

San Jose, CA, United States of America

Nikhil Ravindra Rajguru