Cisco Technology, Inc.

Other

Atmel Corporation

Ronak K Desai

Christian Sasso

Tameen Khan

Siddharth Kasat

Ankur Goyal

Anand Hariharan

Rajagopalan Janakiraman

Sanjay Sane

Saurabh Jain

Shekher Bulusu

Yibin Yang

Dino Farinacci

Umesh Mahajan

Ramana Mellacheruvu

Munish Mehta

Santosh Rajagopalan

Hariharan Balasubramanian

Amitkumar V Patel

Praveen Jain

Azeem Suleman

Patel Amitkumar Valjibhai

Mohammed Javed Asghar

Tejas Kokje

Thomas James Edsall

Samar Sharma

Ayan Banerjee

Maurilio Cometto

Umamaheswararao Karyampudi

Raghava Kodigenahalli Sivaramu

Varun A Shah

Vijay K Chander

Sivakumar Ganapathy

Arindam Paul

Chao Feng

Murukanandam Kamalam Panchalingam

Roy D'Cruz

Vijayan Ramakrishnan

Junyun Li

Muralidhar Annabatula

Siva Ramineni

Sanjay Kumar Hooda

Norman William Finn

Victor Manuel Moreno

Swaminathan Sundararaman

Abhay Kumar Roy

Kalyan Ghosh

Leonard Thomas Tracy

Francois Edouard Tallet

Madhav V Marathe

Diheng Qu

Smita Rai

Albert Vareljian

Bilin Wang

Balaji Muthuvarathan

Gayatri Ramachandran

Tissa Senevirathne

Madhu Grandhi

Nitesh G Soni

Robert Biskner

Prashanth Pappu

Chang Ahn

Jon Wei

Hari Balasubramanian

Vithal Shirodkar

Kenneth Michael Hyams

Satish Salagame

In one embodiment, a method comprises determining, by a first networking device, that a first subflow of a multipath transmission control protocol (MPTCP) connection has been established between a first internet protocol (IP) address of a first computing device and an IP address of a second computing device, wherein the first computing device is multihomed to the first networking device and a second networking device. The method also includes determining, by the first or second networking device, a request to establish a second subflow of the MPTCP connection between a second IP address of the first computing and the IP address of the second computing device. In addition, the method includes advertising, by the first networking device, a primary IP address (PIP) of the first networking device for the first subflow and advertising, by the second networking device, a PIP of the second networking device for the second subflow.

Differentiated multihomed route advertisement for multipath TCP

A distributed policy proxy system offloads network policy processing from an overloaded network element to policy proxy network elements. A network controller detects that policy resources are overloaded at a network element, and assigns a range of endpoints to each policy proxy network element. Each policy proxy network element is assigned to handle policy processing for traffic belonging to a corresponding assigned range of endpoints. The network controller provides instructions to the policy proxy network elements to enable each policy proxy network element to apply the network policy for its assigned range of endpoints. The network controller also provides instructions to the overloaded network element to redirect a packet from the first endpoint to a first policy proxy network element based on a destination of the packet.

Distributed policy enforcement proxy with dynamic EPG sharding

The present technology pertains to a system, method, and non-transitory computer-readable medium for orchestrating policies across multiple networking domains. The technology can receive, at a provider domain from a consumer domain, a data request; receive, at the provider domain from the consumer domain, at least one access policy for the consumer domain; translate, at the provider domain, the at least one access policy for the consumer domain into at least one translated access policy understood by the provider domain; apply, at the provider domain, the at least one translated access policy understood by the provider domain to the data request; and send, at the provider domain to the consumer domain, a response to the data request.

Multi-domain policy orchestration model

A distributed policy proxy system offloads network policy processing from an overloaded network element to policy proxy network elements. A network controller detects that policy resources are overloaded at a network element, and selects a group of policy proxy network elements. The network controller assigns an exclusive range of endpoint groups to each policy proxy network element. Each policy proxy network element is assigned to handle policy processing for its assigned range of endpoint groups. The network controller provides instructions to the policy proxy network elements to enable each policy proxy network element to apply the network policy for its assigned range of endpoint groups. The network controller also provides instructions to the overloaded network element to redirect a packet from the first endpoint group to a first policy proxy network element based on a destination of the packet.

Systems, methods, and computer-readable media for policy splitting in multi-cloud fabrics. In some examples, a method can include discovering a path from a first endpoint in a first cloud to a second endpoint in a second cloud; determining runtime policy table capacities associated with nodes in the path; determining policy distribution and enforcement for traffic from the first endpoint to the second endpoint based on the runtime policy table capacities; based on the policy distribution and enforcement, installing a set of policies for traffic from the first endpoint to the second endpoint across a set of nodes in the path; and applying the set of policies to traffic from the first endpoint in the first cloud to the second endpoint in the second cloud.

Systems and methods for on-demand flow-based policy enforcement in multi-cloud environments

Technologies for extending a subnet across on-premises and cloud-based deployments are provided. An example method may include creating a VPC in a cloud for hosting an endpoint being moved from an on-premises site. For the endpoint to retain its IP address, a subnet range assigned to the VPC, based on the smallest subnet mask allowed by the cloud, is selected to include the IP address of the endpoint. The IP addresses from the assigned subnet range corresponding to on-premises endpoints are configured as secondary IP addresses on a Layer 2 (L2) proxy router instantiated in the VPC. The L2 proxy router establishes a tunnel to a cloud overlay router and directs traffic destined to on-premises endpoints, with IP addresses in the VPC subnet range thereto for outbound transmission. The cloud overly router updates the secondary IP addresses on the L2 proxy router based on reachability information for the on-premises site.

Layer 2 mobility for hybrid multi-cloud deployments without host-overlay

Aspects of the embodiments are directed to forming a virtual machine management (VMM) domain in a heterogeneous datacenter. Aspects can include mapping an endpoint group to multiple VMM domains, each VMM domain associated with one or more virtual machine management systems of a single type that each share one or more management system characteristics; instantiating a virtual switch instance, the virtual switch instance associated with a the VMM domain; and instantiating the endpoint group mapped to the VMM domain as a network component associated with the virtual switch instance.

Extending application tiers across a large-scale heterogeneous data center

Systems, methods, circuits and computer-readable mediums for regulators, e.g., low-dropout (LDO) regulators, with load-insensitive compensations are provided. An example regulator includes an amplifier operable to receive an input voltage and a feedback voltage, a follower responsive to an output voltage of the amplifier and operable to supply a regulated voltage to a load coupled to the follower, and a feedback circuit coupled to the load and the amplifier and operable to provide the feedback voltage. The amplifier is operable to have a substantially unity gain beyond a resonant frequency of the amplifier.

Regulators with load-insensitive compensation

Presented herein are traffic pruning techniques that define the pruning at the group level. A software defined network (SDN) controller determines first and second endpoint groups (EPGs) of an SDN associated with the SDN controller. The SDN runs on a plurality of networking devices that interconnect a plurality of endpoints that are each attached to one or more host devices. The SDN controller determines a host-EPG mapping for the SDN, as well as a networking device-host mapping for the SDN. The SDN controller then uses the host-EPG mapping, the networking device-host mapping, and one or more group-based policies associated with traffic sent from the first EPG to the second EPG to compute hardware pruning policies defining how to prune multi-destination traffic sent from the first EPG to the second EPG. The hardware pruning policies are then installed in one or more of the networking devices or the host devices.

Group-based pruning in a software defined networking environment

Heterogeneous capabilities in an overlay fabric may be provided. First, it may be determined that a first link and a second link support a feature. Then the first link and the second link may be traversed with traffic between a host in a first Endpoint Group (EPG) connected to a first leaf switch and a second host in a second EPG connected to a second leaf switch when a topology preference for the feature is indicated for the traffic.

Heterogeneous capabilities in an overlay fabric

The techniques presented herein use dynamic endpoint group (EPG) binding changes to facilitate cross-tenant resource sharing. A first node of a multi-tenant software defined network determines that an application on a first endpoint has initiated operation and needs temporary access to resources located at a second endpoint. The first and second endpoints are associated with first and second tenants, respectively, that are logically segregated from one another by the software defined network. The first node dynamically changes an initial EPG binding associated with the first endpoint to a second EPG binding that enables the first endpoint to temporarily directly access the resources at the second endpoint. The first node subsequently determines that the application on the first endpoint no longer needs access to the resources located at a second endpoint and, as such, changes the second EPG binding associated with the first endpoint back to the initial EPG binding.

Dynamic endpoint group binding for cross-tenant resource sharing in software defined networks

In an embodiment, a method comprises: detecting a change in a multiple-switch configuration in a data communications network comprising a plurality of packet data switches configured as roots of multicast trees. In response to detecting that the multiple-switch configuration has changed, a first value, a second value and a third value representing limits on a number of multicast trees supported in the network and prioritization of the switches are retrieved. The method further comprises determining a type of the multiple-switch configuration change. In response to determining that the type indicates that a first switch was added to the multiple-switch configuration, using at least the first, second and third values, it is determined whether to configure the first switch as a first root in the multiple-switch configuration. The method is performed by one or more computing devices.

Determining multicast root nodes in a telecommunications network

Method and system for providing distributed domains in a fiber channel fabric including determining a domain configuration of a resource, retrieving one or more current domain configuration parameters, determining a list of domains in a fiber channel fabric, and generating an updated domain list for the resource in the fabric is disclosed.

Method and system for providing distributed allowed domains in a data network

In one embodiment, a solution is provided wherein a volume hierarchy may be received at a network device in a storage area network. Once the network device is ready to apply the volume hierarchy, a message so indicating may be sent. Later, a command to apply the volume hierarchy may be received and the volume hierarchy may be applied so that the network device processes IOs using the volume hierarchy.

Volume hierarchy download in a storage area network

Certain embodiments of the present disclosure generally relate to allocating a sub-area of Fiber Channel addresses (FCIDs) to a device. A range of addresses may be assigned to the device using a mask address, where the most significant bits represent a mask and the least significant bits represent a sub-range of FCIDs available to be assigned to the device. Therefore, routing information may be stored efficiently in a Ternary Content Addressable Memory (TCAM) by storing a single entry in the TCAM for each sub-area of FCIDs allocated to a device, instead of storing an entry for each FCID. The single entry may indicate the mask address and the width of the mask.

Sub-area FCID allocation scheme

Growing community of inventors

Fremont, CA, United States of America

Ronak K Desai