Juniper Networks, Inc.

Pranavadatta D N

Kiran K N

Prasad Miriyala

Reji Thomas

Mahesh Sivakumar

Aniket G Daptari

Fei Chen

Yuvaraja Mariappan

Jeffrey S Marshall

Shailender Sharma

Sachchidanand Vaidya

Prakash T Seshadri

Vinay K Nallamothu

Jimmy Jose

Ashutosh K Grewal

Srinivas Akkipeddi

Sangarshan Pillareddy

Jithin Girish

Narendranath Karjala Subramanyam

Pavan Kumar Kurapati

Philip M Goddard

Carlo Contavalli

Venkatesh Velpula

Prasannaa Vengatesan T S

Sivakumar Ganapathy

In general, this disclosure describes techniques for a containerized router operating within a cloud native orchestration framework. In an example, a virtualized cell site router comprises a computing device configured with a containerized router, the computing device comprising: a containerized virtual router configured to execute on the processing circuitry and configured to implement a data plane for the containerized router; a containerized routing protocol process configured to execute on the processing circuitry and configured to implement a control plane for the containerized router; and a pod comprising a containerized distributed unit, wherein the containerized routing protocol process is configured to advertise routing information comprising reachability information for the containerized distributed unit.

Containerized router with virtual networking

Techniques are disclosed for a network device to preserve packet flow information across bump-in-the-wire (BITW) firewalls. For example, a method comprises receiving, by a network device, a packet. The method also comprises determining, by the network device, that the packet matches a packet flow that is associated with an action to redirect the packet to a firewall configured as a bump-in-the-wire. The method further comprises, in response to the determination: modifying, by the network device, a Media Access Control (MAC) address field of a layer 2 (L2) packet header with a flow identifier of the packet flow; sending, by the network device, the packet to the firewall; receiving, by the network device, the packet from the firewall; and recovering, by the network device, the packet flow by modifying the packet according to the flow identifier in the packet to restore the L2 packet header of the packet.

Preserving packet flow information across bump-in-the-wire firewalls

In general, this disclosure describes techniques for a containerized router operating within a cloud native orchestration framework. In an example, a computing device comprises a containerized routing protocol process executing on processing circuitry of the computing device and configured to receive routing information; a containerized set of workloads; a data plane development kit (DPDK)-based virtual router executing on the processing circuitry and configured to forward traffic to and from the workloads based on the routing information from the containerized routing protocol; and a virtual router agent for the virtual router, the virtual router agent executing on the processing circuitry and configured to expose a generic data plane interface.

Containerized router with a generic data plane interface

Techniques are disclosed for redirecting network traffic of virtualized application workload to a host-based firewall. For example, a system comprises a software defined networking (SDN) controller of a multi-tenant virtualized data center configured to: receive a security policy expressed as one or more tags to redirect traffic of a virtualized application workload to a host-based firewall (HBF) of the multi-tenant virtualized data center; configure network connectivity to the HBF in accordance with the security policy; a security controller that manages the HBF configured to: obtain the one or more tags from the SDN controller; receive one or more firewall policies expressed in terms of the one or more tags, wherein each of the one or more firewall policies specifies a function of the HBF; and configure the function of the HBF in accordance with the one or more firewall policies.

Packet steering to a host-based firewall in virtualized environments

A network device in a network may determine a tentative network address for a network interface of the network device and may determine whether the tentative network address is duplicative of any one of the network addresses in the network. If the tentative network address is duplicative of a network address assigned to another network interface in the network, the network device may store an indication of the other network interface. In response to receiving an indication that a new network address is assigned to the other network interface, the network device may re-determine whether the tentative network address is duplicative of any one of the network addresses in the network. If the network device determines that the tentative network address is not duplicative of any one of the plurality of network addresses in the network, the network device may assign the tentative network address to the network interface.

Automatic recovery from duplicate network addresses

A device may activate a layer 3 interface of the device based on activation of a first layer 2 interface associated with the layer 3 interface. The device may detect activation of a second layer 2 interface, associated with the layer 3 interface, after activating the layer 3 interface. The device may activate a filter to prevent transfer of network traffic via the second layer 2 interface based on detecting activation of the second layer 2 interface. The device may perform duplicate address detection, in association with the second layer 2 interface, for a layer 3 network address assigned to the device. The device may determine whether the layer 3 network address is a duplicate network address based on performing the duplicate address detection. The device may selectively maintain or deactivate the filter based on determining whether the layer 3 network address is a duplicate network address.

Performing duplicate address detection for an integrated routing and bridging device

Growing community of inventors

Mysore, India

Pranavadatta D N