Juniper Networks, Inc.

Rtbrick Inc.

Other

Pravin S Bhandarkar

Hannes Gredler

Santosh Pallagatti Kotrabasappa

Deepak J Gowda

Sameer Seth

Deepak J

A policy server may include a policy parser that is communicably coupled to a configuration database. The policy parser may identify a policy data model in the configuration database associated with a policy. The policy data model may include a policy object expressed in a human-readable format. The policy server may include a policy engine for constructing a dynamic acyclic graph (DAG) representing the policy data model. The policy engine may include a code generation engine for parsing the DAG to generate code in a high-level language. The policy engine may include a compiler for compiling the generated code to generate binaries for implementing the policy. The policy server may include a policy dispatcher for generating a notification to a policy client to dispatch the binaries to at least one subscriber of the policy following the code being compiled. The policy server may asynchronously update the policy for the subscribers.

Extensible plug-n-play policy decision framework for network devices using ahead of time compilation

Disclosed herein is a distributed, modular and highly available routing apparatus that is enabled to perform IP, MPLS VPN v4 and v6 services. The routing apparatus comprises a plurality of functional modules selected from the group consisting of a processor, a data storage module, an input/output module, a shared memory, and a network module. Each functional module is driven by a software architecture comprising a TCP/IP stack, a protocol serializer, a protocol de-serializer, an in-memory data store and one or more utility applications. The software architecture is stored partially or completely in the user space of the operating system of the routing apparatus.

Method to build a modular distributed network device using microservices architecture

Systems and methods of the present disclosure are directed to defining a data store format for storing state information related to border-gateway protocol (BGP) routing information base (RIB) entries, BGP Neighbor Tables, intermediate system-intermediate system (IS-IS) adjacencies, Link-State Databases, Interface information, Chassis information, etc in a binary format. A brick data store (BDS) system can define tables, table properties, objects and attributes for an application in the system using configuration files expressed in Java Script Object Notation (JSON). The data format can be uniform across inter-process communication, file and in-memory representation.

System and methods for defining object memory format in memory and store for object interactions, manipulation, and exchange in distributed network devices

A device may receive information, via one or more border gateway protocol messages, identifying a first network traffic service and a second network traffic service. The device may map the information identifying the first network traffic service and the second network traffic service to information identifying a first tier of service for the first network traffic service and a second tier of service for the second network traffic service. The device may perform a first action and a second action, respectively associated with the first network traffic service and the second network traffic service, on the incoming network traffic, based on an order of the first tier of service, for the first network traffic service, and the second tier of service, for the second network traffic service, in a priority ordering of the set of network traffic services.

Tiered services in border gateway protocol flow specification

In one example, a network device includes a plurality of interface cards to send and receive packets over a network, a primary control unit of the network device, and a secondary control unit of the network device configured to detect a failover event that causes the network device to failover from the primary control unit to the secondary control unit. An operating system of the secondary control unit may be configured to send, in response to detecting the failover event, a session maintenance message on each of a plurality of application-level communication sessions in accordance with a prioritized data structure having a plurality of hierarchically arranged nodes, each of the nodes associated with a different subset of the communication sessions having a common session timeout value.

Growing community of inventors

Bengaluru, India

Pravin S Bhandarkar