Foundry Networks, Inc.

Arris Enterprises LLC

Brocade Communications Systems, Inc.

Nitin Jain

Lee Chen

Min Zhu

Earl Ferguson

Rajkumar Ramniranjan Jalan

Philip Kwan

Ronald W Szeto

Ravindran Suresh

Wing-Keung Adam Yeung

Aseem Rastogi

Techniques for intelligent designated forwarder (DF) and master router selection (for router redundancy) are provided. In one embodiment, a network router that is part of a set of network routers connected to a common LAN segment can retrieve a priority value adapted for use by the network router in electing a DF for multicast traffic. The network router can further check for the presence or absence of one or more routes to one or more multicast sources in a routing table of the network router. The network router can then modify the priority value based on the presence or the absence of the one or more routes and can transmit a multicast routing protocol control packet including the modified first priority value to one or more other network routers in the set of network routers.

Intelligent selection of a designated forwarder and a master router for router redundancy

One embodiment of the present invention provides a computing system. The computing system includes a discovery module, a high-availability management module, and a controlling module. The discovery module determines local switch-specific information associated with a switch based on a discovery response packet. The high-availability management module determines remote switch-specific information about the same switch with respect to a remote computing system. The controlling module determines whether the computing system is to manage the switch based on a metric derived from the local and remote switch-specific information.

Managing a cluster of switches using multiple controllers

One embodiment of the present invention provides a computing system. The switch includes a discovery module, a device management module, and a logical group management module. The discovery module constructs a multicast query message for a first multicast group to which the computing system is registered. The device management module extracts information about a remote switch from a query response message from the remote switch and constructs a client database, wherein a first entry in the client database contains the information extracted from the query response message. The logical group management module associates the remote switch with a second multicast group.

Managing a large network using a single point of configuration

One embodiment of the present invention provides a layer-3 forwarding device. The layer-3 forwarding device includes a processor and a computer-readable storage medium. The computer-readable storage medium stores instructions which when executed by the processor cause the processor to perform a method. The method comprises determining whether the layer-3 forwarding device is a leaf layer-3 forwarding device of a multicast distribution tree of a multicast group in a routed network based on a multicast topology discovery message from a root layer-3 forwarding device of the multicast distribution tree. If the layer-3 forwarding device is the leaf layer-3 forwarding device, the method comprises constructing a multicast topology report message. This multicast topology report message includes topology information of the multicast group in the routed network associated with the layer-3 forwarding device.

Efficient multicast topology construction in a routed network

One embodiment of the present invention provides a switch. The switch includes a processor and a computer-readable storage medium. The computer-readable storage medium stores instructions which when executed by the processor cause the processor to perform a method. The method comprises determining whether the switch is a leaf switch of a multicast distribution tree of a multicast group based on a multicast topology query message from a root switch of the multicast distribution tree. If the switch is a leaf switch, the method further comprises constructing a multicast topology report message comprising layer-2 topology information of the multicast group associated with the switch.

Efficient layer-2 multicast topology construction

A routing system utilizes a layer 2 switch interconnecting several routers to intelligently forward multicast packets throughout an interne exchange carrying multicast content. The layer 2 switch performs protocol snooping to extract a lookup key that is based on network layer protocol information. The lookup key is uniquely formulated to support either shared or explicit source distribution trees. The lookup key is used to query a forwarding memory that returns an outgoing port index. The outgoing port index points to one or more outgoing ports that are eligible to receive the multicast packet. The outgoing ports are also connected to the neighboring device(s) that are designated to receive the multicast packet. The routing system also supports real time maintenance and updating of the forwarding memory based on the periodic exchange of control messages. The routing system is configured to support PIM routers operating in PIM SM or PIM SSM modes. However, the routing system can also support other multicast protocols and/or standards.

Method and system for intelligently forwarding multicast packets

Solutions are provided that allow a network device to apply flow control on the MAC layer while taking into account the priority of the frame of traffic. This may be accomplished by generating a frame indicating that traffic flow should be paused, while utilizing a new opcode value, or alternatively by utilizing a new type/length value (possibly combined with a new opcode value). A receiving device may then examine the fields of the frame to determine whether it should use priority-based pausing, and then examine other fields to determine which priority-levels to pause and for how long. This allows for improved efficiency in flow control at the MAC layer. Additionally, the tagged pause frames can be forwarded over multiple hops on Local Area Networks across a Metropolitan Area Network or Wide Area Network.

Flow control for multi-hop networks

Solutions are provided that allow a network device to apply flow control on the MAC layer while taking into account the priority of the frame of traffic. This may be accomplished by generating a frame indicating that traffic flow should be paused, while utilizing a new opcode value, or alternatively by utilizing a new type/length value (possibly combined with a new opcode value). A receiving device may then examine the fields of the frame to determine whether it should use priority-based pausing, and then examine other fields to determine which priority-levels to pause and for how long. This allows for improved efficiency in flow control on the MAC layer.

Priority aware MAC flow control

A system and method that provides for using source IP addresses and MAC addresses in a network to provide security against attempts by users of the network to use false source IP addresses in data packets. The system and method provide for analyzing MAC addresses and source IP addresses at the datalink (layer 2) level, and to use the information derived from such analysis to block access through a port where a host device is using a false, or spoofed, source IP address in transmitted data packets. Further, the system and method provide for validating initially learned source IP addresses, and for determining whether the number of unsuccessful attempts to validate new source IP addresses exceeds a threshold level, and where the number does exceed the threshold number the system and method can provide for operation in a possible attack mode.

System and method for source IP anti-spoofing security

A routing system utilizes a layer 2 switch interconnecting several routers to intelligently forward multicast packets throughout an internet exchange carrying multicast content. The layer 2 switch performs protocol snooping to extract a lookup key that is based on network layer protocol information. The lookup key is uniquely formulated to support either shared or explicit source distribution trees. The lookup key is used to query a forwarding memory that returns an outgoing port index. The outgoing port index points to one or more outgoing ports that are eligible to receive the multicast packet. The outgoing ports are also connected to the neighboring device(s) that are designated to receive the multicast packet. The routing system also supports real time maintenance and updating of the forwarding memory based on the periodic exchange of control messages. The routing system is configured to support PIM routers operating in PIM SM or PIM SSM modes. However, the routing system can also support other multicast protocols and/or standards.

Solutions are provided that allow a network device to apply flow control on the MAC layer while taking into account the priority of the frame of traffic. This may be accomplished by generating a frame indicating that traffic flow should be paused, while utilizing a new opcode value, or alternatively by utilizing a new type/length value (possibly combined with a new opcode value). A receiving device may then examine the fields of the frame to determine whether it should it should use priority-based pausing, and then examine other fields to determine which priority-levels to pause and for how long. This allows for improved efficiency in flow control at the MAC layer. Additionally, the tagged pause frames can be forwarded over multiple hops on Local Area Networks across a Metropolitan Area Network or Wide Area Network.

Solutions are provided that allow a network device to apply flow control on the MAC layer while taking into account the priority of the frame of traffic. This may be accomplished by generating a frame indicating that traffic flow should be paused, while utilizing a new opcode value, or alternatively by utilizing a new type/length value (possibly combined with a new opcode value). A receiving device may then examine the fields of the frame to determine whether it should it should use priority-based pausing, and then examine other fields to determine which priority-levels to pause and for how long. This allows for improved efficiency in flow control on the MAC layer.

Growing community of inventors

Saratoga, CA, United States of America

Nitin Jain