Cisco Technology, Inc.

Nutanix, Inc.

Ravikanth Samprathi

Rodney Fong

Suran Saminda De Silva

Bruce D Moon

Srinivas Bandi Ramesh Babu

Sridhar J Devarapalli

Aroosh Sohi

Rajesh P Bhatt

Milton Y Xu

Hemanth Kumar Mantri

Ken Chen

Viraj Sapre

Akshay Khole

Uzui Li

Julie Ni

Thomas Jason Hill

Dar-Hsin Dustin Wu

Hien Nguyen

Steven Poitras

Stanley Tang

Ashish Bhat

Chhavi Upadhyay

James Sodini

Ray Xie

A request to create a set of security policies for an application is received at a graphical user interface. Information identifying a set of source VMs, a set of destination VMs, and a set of target VMs also are received, wherein the target VMs are executing the application and are supported by (a) node(s) in a clustered virtualization environment. A set of inbound rules identifying (a) category(ies) of source VMs permitted to initiate connections with a subset of target VMs and a set of outbound rules identifying (a) category(ies) of destination VMs to which the subset of target VMs are permitted to initiate connections are received at the graphical user interface. Upon receiving a request to apply the security policies, the policies are configured based at least in part on the inbound and outbound rules and a visual representation of the security policies is presented in the graphical user interface.

Creation of security policies using a visual approach

Disclosed herein are related to a method, a system, and a non-transitory computer readable medium for backing up a virtual machine. In one aspect, an instruction to store a requested state of a virtual machine is received. Configurations of the virtual machine in the requested state are determined, and a configuration data indicative of the determined configurations of the virtual machine is generated. The configuration data is stored. Another instruction to load the virtual machine in the requested state from a plurality of states of the virtual machine may be received. The stored configuration data indicative of the configurations of the virtual machine in the requested state may be retrieved. The configurations of the virtual machine in the requested state may be identified based on the retrieved configuration data, and the virtual machine in the requested state may be loaded according to the identified configurations.

Virtual machine state recorder

Disclosed herein are related to a method, a system, and a non-transitory computer readable medium for providing a consolidated cloud system. The consolidated cloud system includes a plurality of cloud systems. A user request to access content in the consolidated cloud system is received, where the content is stored by a target cloud system of the plurality of cloud systems. The content from the target cloud system is retrieved, and the content is provided as part of the consolidated cloud system. The device generating the user request may be unaware of which cloud system stores the content.

Consolidated cloud system for virtual machine

A method of eliminating false positives when testing a device management platform for controlling endpoints. The method includes sending, by a computing device, a request to a cloud controller to create an entity. The request causes operations including i) creating, by an endpoint responsive to a receipt of an interface request from the cloud controller, the entity, ii) receiving, by the cloud controller from the endpoint, response data generated by the entity, the response data indicating the creation of the entity, and iii) generating, by the cloud controller, control data based on the response data. The method includes receiving the control data from the cloud controller; sending, responsive to the receipt of the control data, a call to the endpoint for entity data; receiving entity data from the endpoint; comparing, the response data to the entity data to validate the response data; and generating a test status.

Verification for device management

A system and method include receiving a request to call a requested application programming interface (API) at a target cloud computing platform. The system and method further include determining that the requested API is unsupported by the target cloud platform. The system and method further include generating a set of workflows associated with the requested API. The system and method also include generating a set of tasks common to the plurality of cloud platforms including the target cloud platform based on the set of workflows. The system and method also include generating a set of target APIs associated with the target cloud platform based on the set of tasks and an identity of the target cloud platform. The system and method also include communicating the set of target APIs t to the target cloud platform.

System and method for translating affliction programming interfaces for cloud platforms

A system for tracking resource usage in network. In a specific embodiment, the system includes a memory in a distributed-forwarding switch that maintains resource evolution information. A module, which communicates with the memory, is adapted to update the resource evolution information when the resource changes or information associated with the resource changes. In a more specific embodiment, the memory is implemented via plural resource-tracking hash tables associated with forwarding engines in switches connected to a network. Each hash table communicates with a corresponding resource-tracking module that monitors changes in accompanying forwarding engines and updates the hash tables in response thereto. The resource-tracking modules may also selectively provide information in the resource-tracking modules to a user interface in response to queries or control signals originating from a user interface. The changes in one forwarding engine may propagate to other resource-tracking hash tables associated with other forwarding engines located in a given switch or in different switches across the network.

System and method for tracking network resources

In one embodiment, entries in an address table of the forwarding engine in a linecard or supervisor are updated to a current time value when the MAC address in the entry matches the destination MAC address of a received packet to prevent flooding if the linecard or supervisor is a non-ingress linecard or supervisor of an asymmetrically routed flow.

Destination MAC aging of entries in a Layer 2 (L2) forwarding table

A method and apparatus for tracking at least one Layer-2 (L2) resource of a network device is provided. The method includes monitoring software operations on the L2 resource. The method further includes monitoring the state of the L2 resource in a corresponding hardware device (e.g., the network device). The L2 resource may be at least one of a Media Access Control (MAC) address, a Virtual Local Area Network (VLAN) identifier, a MAC address, and a VLAN identifier pair.

Method and apparatus for tracking layer-2 (L2) resource of a switch

In one embodiment, a load-balancing algorithm ensures that both network nodes at endpoints of a group of physical links aggregated into a logical channel are using the same load-sharing algorithm and also ensures that the load-sharing algorithm is normalized so that the same flow traverses the same physical link in both directions.

Multinode symmetric load sharing

A method and system has been provided for identifying and processing secure data frames flowing between a source port and a switch port in a network. A data frame from the source port is received at the switch port. The network address of the source port is detected from the data frame. An entry corresponding to the network address of the source port is searched for in a forwarding table. The data frame is identified as a secure or a non-secure data frame on the basis of the entry in the forwarding table. Non-secure data frames are redirected and processed.

Method and system for identifying and processing secure data frames

Disclosed are methods and apparatus for efficiently and reliably handling DNS (domain name service) queries and responses. In general terms, mechanisms are provided for forwarding only one DNS response to a DNS client when two DNS responses having different protocols (IPv4 or IPv6) may be received, e.g., within a DNS handling device for a particular DNS query. The DNS handling device determines whether to forward or hold a first received DNS response based on a number of criteria. The DNS handling device also determines whether to forward a first or second received response to the DNS client when a first and second response for a particular query is received. In certain cases, a first received DNS response for a particular DNS query may be held until a second better response is received or a timer expires.

Stateful IPv4-IPv6 DNS application level gateway for handling topologies with coexisting IPv4-only, Ipv6-only and dual-stack devices

Potential forwarding loops in bridged networks are detected. A switch monitors the movement of packet addresses in the forwarding table to different ports. If the port associated with an address changes multiple times in a short time duration, then a potential forwarding loop is detected, and a loop corrector is notified to take appropriate action to correct the problem, such as, but not limited to changing the state of a port to a blocking state or disabling an interface, etc. If there are multiple movements outside the short time duration, they may be correct movements adjusting to the actual reconfiguration of a network, and thus, these movements are effectively filtered out of consideration.

Detection of potential forwarding loops in bridged networks

Disclosed are methods and apparatus for handling FTP (file transfer protocol) control packets. In general terms, mechanisms are provided for facilitating FTP sessions between devices utilizing different protocols, such as IPv4 and IPv6. For example, FTP control packets from an IPv6 client to an IPv4 server are handled to facilitate such communication. Likewise, FTP control packets from an IPv4 client to an IPv6 server are handled to facilitate such communication. Communication is also facilitated when either or both of the client or server is in the form of a dual-stack device. To facilitate FTP session between devices having different protocols, FTP control packets between two different protocol devices are translated from one protocol to another protocol when required, e.g., from an IPv6 to an IPv4 format or visa versa.

Growing community of inventors

San Jose, CA, United States of America

Ravikanth Samprathi