Juniper Networks, Inc.

Juniper Neworks, Inc.

Rajagopalan Sivaramakrishnan

James Michael Murphy

Abhijit Kumar Choudhury

Raghavendra Mallya

Bharani Chadalavada

Shine-Chu Wang

Pranay Pogde

Anand H Krishnan

Sandip K Shah

Umesh Krishnaswamy

Sriram Raghunathan

Yung-Ching Tseng

Raj Tuplur

Ileana J Membreno

Sandeep Kumar

Sandeep Bajaj

Manoj Apte

Sameer Seth

Raghunath Balakrishna

Kaushik Das

Amit Jain

Suresh Kumar Vinapamula Venkata

Siva Madasamy

Sachin Bansal

Pranay Podge

Praveen K V

Abhiman Yashpala Karkera

Hari Prasad Killi

Sriram Rahgunathan

Techniques are disclosed for performing an In-Service Software Upgrade ('ISSU') of a first packet forwarding component (PFC) of a virtual router configured to forward traffic flows for a plurality of session instances within a cloud-based data center. The techniques described herein may retain flow state information throughout the ISSU process without interrupting network traffic flow. In one example, a processor of a plurality of compute nodes within the data center receives a request to perform an ISSU of the first PFC. The processor spawns a second virtual routing agent and a second PFC. The second virtual routing agent synchronizes flow state information with a first virtual routing agent for the virtual router. After synchronizing the flow state information, the virtual router switches from forwarding traffic flows by the first PFC to forwarding traffic flows by the second PFC. The ISSU process deactivates the first virtual router and the first PFC.

In-service software upgrade of virtual router with reduced packet loss

In some embodiments, an apparatus includes a first controller configured to be operatively coupled within a network having a set of network nodes, a forwarding gateway and a configuration entity. The first controller is configured to manage session state and node state associated with the set of network nodes independent of the forwarding gateway. The first controller is configured to fail over to a second controller when the first controller fails, without the forwarding gateway failing over and without the configuration entity failing over.

Methods and apparatus for scalable resilient networks

In one example, a server executes a virtual router configured to receive an inner packet output by a virtual machine associated with a virtual network. The virtual router is further configured to offload, to a physical network interface card of the server that executes the virtual router, segmentation of the inner packet into a plurality of outbound tunnel packets each having a tunnel header for output by the physical network interface card to a physical network underlying the virtual network.

Packet segmentation offload for virtual networks

In some examples, a computing device includes one or more processors configured to execute a plurality of virtual machines; and a network interface card (NIC) coupled to the one or more processors and configured to receive configuration data defining a plurality of receipt queues of the NIC and associated with respective virtual machines of the plurality of virtual machines. The NIC is further configured to assign, based on respective virtual machine identifiers of packets received by the NIC, the packets to the plurality of receipt queues associated with the respective virtual machines.

NIC-based packet assignment for virtual networks

In general, techniques are described for enhancing operations of virtual networks. In some examples, a network system includes a plurality of servers interconnected by a switch fabric comprising a plurality of switches interconnected to form a physical network. Each of the servers comprises an operating environment executing one or more virtual machines in communication via one or more virtual networks. The servers comprise a set of virtual routers configured to extend the virtual networks to the operating environments of the virtual machines. A virtual router of the set of virtual routers is configured to aggregate a plurality of inbound tunnel packets according to a same virtual network identifier in order to generate an aggregate tunnel packet. The virtual router is further configured to route the aggregate tunnel packet to a host associated with a virtual network identified by the same virtual network identifier.

Tunneled packet aggregation for virtual networks

In general, techniques are described for enhancing operations of virtual networks. In some examples, a network system includes a network interface card of a server configured to receive a tunnel packet associated with a virtual network. The tunnel packet comprises an outer header associated with the physical network, the outer header encapsulating an inner packet comprising an inner header associated with the virtual network and a payload. A first processing core of the server is configured to perform, based at least on one of the outer header and inner header of the tunnel packet, a first packet steering operation to identify the second processing core. The second processing core is configured to forward the inner packet to a virtual machine of the virtual machines.

Receive packet steering for virtual networks

In some embodiments, an apparatus includes a first core device configured to be disposed within a network. The network has a set of access nodes and a second core device. The first core device is configured to receive a signal designating the first core device as a master device for a virtual group identifier such that the second core device is designated as a back-up device for that virtual group identifier.

Methods and apparatus for load balancing VLAN traffic

In general, techniques are described for enhancing operations of virtual networks. In some examples, a network system includes a server that executes a virtual router configured to receive, from a switch fabric, a tunnel packet for a virtual network of the virtual networks, wherein the tunnel packet comprises an outer header and an inner packet that defines a packet flow. The virtual router is also configured to determine, based at least on the outer header, that the packet is associated with a virtual network of the one or more virtual networks, determine a packet flow defined by the inner packet does not match any flow table entry of a flow table that identifies active flows only for virtual network and, in response, add a flow table entry for a reverse packet flow of the packet flow to the flow table.

Proactive flow table for virtual networks

Growing community of inventors

Sunnyvale, CA, United States of America

Rajagopalan Sivaramakrishnan