International Business Machines Corporation

Cisco Technology, Inc.

Ravinder Reddy Amanaganti

Renato John Recio

Eran Gampel

Gal Sagi

Dean Har'el Lorenz

Etai Lev Ran

Ryan Moats

Samar Sharma

Venkatabalakrishnan Krishnamurthy

James Allan Kahle

Dhaval N Shah

Bernard Metzler

James C Sexton

Edward Swenson

Embodiments for providing enhanced endpoint multicast emulation in a computing environment. One or more multicast operations may be executed on an overlay network using endpoint multicast emulation by using an overlay layer or a virtual extensible LAN ('VXLAN') layer to maintain control over one or more multicast groups.

Enhanced endpoint multicast emulation

A secure communication tunnel between user space software and a client device can be established. A private session key can be communicated from the user space software to a network communication device in at least one User Datagram Protocol datagram. Outbound session backets can be communicated from the user space software to the network communication device. The network communication device can generate encrypted outbound session packets by encrypting the outbound session packets using the private session key; communicate, to the client device via the secured communication tunnel, the encrypted outbound session packets; receive, by the network communication device from the client device, via the secured communication tunnel, inbound session packets; generate, by the network communication device, decrypted inbound session packets by decrypting the inbound session packets using the private session key; and communicate, from the network communication device to the user space software, the decrypted inbound session packets.

Distribution of private session key to network communication device for secured communications

A secure communication tunnel between user space software and a client device can be established. A private session key can be communicated from the user space software to a network communication device via an application programming interface. Outbound session packets can be communicated from the user space software to the network communication device. The network communication device can generate encrypted outbound session packets by encrypting the outbound session packets using the private session key; communicate to the client device, via the secured communication tunnel, the encrypted outbound session packets; receive, by the network communication device from the client device, via the secured communication tunnel, inbound session packets; generate decrypted inbound session packets by decrypting the inbound session packets using the private session key; and communicate the decrypted inbound session packets.

API based distribution of private session key to network communication device for secured communications

A secure communication tunnel between user space software and a client device can be established. A private session key can be accessed from a cryptographic service. The private session key can be communicated from the user space software to a network communication device. Outbound session packets can be communicated from the user space software to the network communication device. The network communication device can be configured to generate encrypted outbound session packets by encrypting the outbound session packets using the private session key; communicate to the client device, via the secured communication tunnel, the encrypted outbound session packets; receive from the client device, via the secured communication tunnel, inbound session packets; generate decrypted inbound session packets by decrypting the inbound session packets using the private session key; and communicate the decrypted inbound session packets.

Distribution of a cryptographic service provided private session key to network communication device for secured communications

In an example, there is disclosed an example of a system and method for plug and play in a controller based network. Aspects of the embodiments are directed to a network switch of a fabric network, the network switch configured to detect a connection of a device to the network switch, the device compliant with a remote integrated services engine (RISE) protocol; receive, from the device, a programming instruction for switching compliant with the RISE protocol; and distribute the programming instruction to one or more other network switches of the fabric network.

Plug and play in a controller based network

In an example, a system and method for data plane integration is described. Aspects of the embodiments are directed to a service application connected to a switch of a network fabric and a method of data plane integration performed at a service appliance, the service appliance providing firewall functionality. The service appliance can receive a data packet from a network location; determine a flow owner of the data packet based on a hashing table; and transmit the data packet based on the determined flow owner of the data packet.

Data plane integration

A system and method according to an embodiment of the present invention for translating an electronic address is presented. The system and method comprises sending a first protocol specific address from a first device. A second protocol address is received by the first device, wherein the second protocol address has been determined to be associated with the first protocol specific address. Another system and method for translating an electronic address is also presented. The system and method comprises providing a first protocol specific address from a first device; determining a second protocol specific address associated with the first protocol specific address; and sending the second protocol address to the first device.

Growing community of inventors

San Ramon, CA, United States of America

Ravinder Reddy Amanaganti