Juniper Networks, Inc.

Qi-Zhong Cao

Ross W Callon

John Galen Scudder

Alia Karin Atlas

Jeffrey M Haas

Stu Grossman

Nitin Kumar

Nayan S Patel

A network device may include a controller and a hardware forwarding component. The hardware forwarding component may receive a network packets and assign the network packets to multiple network queues. The network device may also obtain, using a microcode engine of the hardware forwarding component, and for each of the network queues, a measurement of queue depth, each measurement of queue depth being obtained from memory of the hardware forwarding component. Based on the measurements of queue depth, the network device may generate and transmit a telemetry packet.

Monitoring network communications queues

In general, techniques are described for dynamically controlling host-bound traffic by dynamically adding and updating, within the forwarding plane of a network device, network packet policers that each constrains, for one or more packet flows, an amount of host-bound traffic of the packet flows permitted to reach the control plane in accordance with available resources. In one example, a control plane of the network device detects internal congestion in the communication path from the forwarding plane to control plane (the 'host-bound path'), identifies packet flows utilizing an excessive amount of host-bound path resources, computes limits for the identified packet flows, and adds 'penalty-box policers' configured with the computed limits for the identified packet flows to the forwarding plane. The forwarding plane subsequently applies the policers to the identified packet flows to constrain the amount of traffic of the packet flows allowed to reach the control plane to the computed limits.

Penalty-box policers for network device control plane protection

A device may determine a first aggregation level for aggregating incoming packets. The device may aggregate the incoming packets using the first aggregation level. The device may determine that a controlled packet pass rate for the incoming packets satisfies an arrival rate threshold based on aggregating the incoming packets using the first aggregation level. The device may determine a bandwidth violation trend associated with the incoming packets and the first aggregation level based on determining that the controlled packet pass rate satisfies the threshold. The device may determine that flow suppression is not effective at the first aggregation level based on the bandwidth violation trend, and may determine a second aggregation level based on determining that the flow suppression is not effective. The device may set the first aggregation level to the second aggregation level. The device may use the first aggregation level for aggregating additional incoming packets.

Trend-based flow aggregation for flow suppression

Growing community of inventors

Southborough, MA, United States of America

Qi-Zhong Cao