Hewlett Packard Enterprise Development LP

Silver Peak Systems, Inc.

Pawan Kumar Singh

David Anthony Hughes

Damon John Ennis

Theodore Ernest Tedijanto

Rolf Muralt

Manoj Gopal Kulkarni

Santosh Bheemarajaiah

David Holt Merwin

Edward Paul Travalia

Manoj Kumar Dutta

Lokesh Lingarajan

Krishna Kumar Sadasivam

Shyh Pei Yen

Abhelaksh Thakur

Catrina A Torda

Patrick Lee Mahan

Onur Ozduygu

Kevin James Roselle

Srivathsa Sarangapani

Zhigang Yin

Gopinath Sikha

Bowen Yan

Kennedy Tjong Ki Ngo

Ganesh Lakshmanan

Ravikumar Govindarao

Timothy Robert Hefel

Jigar Chheda

Dave Holt Merwin

Disclosed herein are systems and methods for the collection, aggregation, and processing of network traffic statistics for a plurality of network appliances in a wide area network. Select network traffic statistics can be collected and associated with a hierarchical string, and aggregated over time. In this way, only information that is likely to be relevant is gathered and maintained, allowing for the maintenance of select network traffic statistics for large-scale operations.

Hierarchical aggregation of select network traffic statistics

Disclosed herein are network information collectors, methods, computer-readable media, and systems for generating network traffic statistics. For example, the network appliance is to receive, via a network, an accumulating map from a network appliance device, wherein the accumulating map comprises a condensed and aggregated version of web traffic flow information to the network appliance device; receive, via the network, additional accumulating maps from other network appliance devices; populate an accumulation map database with the accumulating map and the additional accumulating maps; and generate a report of the network traffic statistics hosted by the network appliance device and the other network appliance devices.

Aggregation of select network traffic statistics

Disclosed herein are systems and methods for the creation, management, and utilization of a multi-region virtual overlay wide area network from a plurality of special purpose network appliances. In exemplary embodiments, multiple regions are created for the virtual overlay wide area network, each region having its own network topology. At least one network appliance from each region is in communication with at least one network appliance from each other region, for inter-region connectivity within the virtual overlay wide area network. A subnet sharing protocol can be utilized to exchange routing information among each network appliance within each region, and between each region.

Multi-region virtual overlay wide area network

Disclosed herein are systems and methods for scalable and secure transmission of multicast data over a public communication network. In exemplary embodiments of the present disclosure, a virtual overlay network can be presented as a single virtual interface to a computing device, for the receipt and transfer of multicast data in a secure and scalable manner across a public insecure communication network.

Transfer of secure multicast data traffic over a computing network

Systems and methods for selectively transmitting routing information between separated local area network (LAN) interfaces are disclosed. In exemplary embodiments, a network appliance to update a local routing table with IP subnet, neighbor type, source type, and community identifier of a second network appliance; based at least on the local routing table, receive a customized routing policy and subnet exporting policy that permits the network appliance to export a subset of IP addresses from the local routing table to a permitted community of network appliances, wherein the customized routing policy and subnet exporting policy are configured by a network administrator of the network appliance; match the permitted community of network appliances to a new community identifier of a third network appliance; and export the subset of IP addresses of the local routing table to the third network appliance based on the customized routing policy and subnet exporting policy.

Selective routing

Disclosed herein are network appliances, methods, computer-readable media, and systems for aggregating network traffic statistics in a communication network. For example, the network appliance is to receive a SYN network packet; store header information from the SYN network packet in a flow data table; for each of the data packets related to the SYN network packet, store header information of the data packets in the flow table; after a predetermined amount of time or a predetermined number of rows is reached, invoke an eviction policy on the flow data table, wherein the eviction policy removes the related data packets from the flow data table; and populate an accumulating map with the flow data table.

Provided are methods, apparatus, and system for policy based wide area network. A network of network appliances is configured with a policy configuration. Each network appliance is configured to validate each wide area network packet against the policy configuration. The validation can include verifying that the packets meet the SD-WAN network segment requirements and security rules including verifying that the source and destination address of the packet meet the firewall zone requirements. Each wide area network packet contains a policy header that is checked by the sending and receiving network appliance against the policy configuration.

Method device and system for policy based packet processing

Disclosed herein are network appliances, methods, computer-readable media, and systems for aggregating network traffic statistics in a communication network. For example, the network appliance is to determine a plurality of network flow strings that are transmitted from the network appliance or received at the network appliance; extract a network metric of the plurality of network flow strings; aggregate values associated with the network metric over the plurality of network flow strings; generate an accumulating map, wherein the accumulating map comprises the values associated with the aggregated network metric; when a new network flow string is received, invoke an eviction policy on the new network flow string, wherein the eviction policy removes at least one of the plurality of network flow strings from the accumulating map; and transmit the accumulating map to a network information collector in communication with the network appliance.

Disclosed herein are systems and methods for dynamically selecting network paths for data transmission in a virtual overlay network created and maintained across multiple communication networks managed by service providers. The simple creation and management of network overlays is accomplished via a network orchestrator manager, allowing for automation of configuration of connected network devices throughout an entire organization's network, regardless of the physical location of each device. Further, error correcting information can be transferred across a different network path than a plurality of data packets, in accordance with a designated bonding policy.

Data transmission via bonded tunnels of a virtual wide area network overlay with error correction

Disclosed herein are systems and methods for the creation, maintenance and management of virtual overlay networks across multiple communication networks managed by service providers. The simple creation and management of network overlays is accomplished via a network orchestrator manager, allowing for automation of configuration of connected network devices throughout an entire organization's network, regardless of the physical location of each device.

Data transmission via bonded tunnels of a virtual wide area network overlay

Disclosed is a system and method for the dynamic monitoring of network health characteristics via a visualization platform. The platform receives collected information regarding network health characteristics and applies a rule set defining at least one threshold to classify each of the network health characteristics for each network component over a time period. The classifications can be represented visually on a graphical user interface to a network administrator, allowing the administrator to quickly discern which aspects of the network are operating properly and which aspects are not.

Growing community of inventors

Los Altos, CA, United States of America

Pawan Kumar Singh