Cisco Technology, Inc.

Santosh Ramrao Patil

Gangadharan Byju Pularikkal

Mark Grayson

Swaminathan A Anantha

Akram Ismail Sheriff

Sourav Chakraborty

Madhusudan Nanjanagud

Anton Okmyanskiy

Gonzalo A Salgueiro

M David Hanes

Akramsheriff Ismailsheriff

Jerome Henry

Mickael James Graham

Bart A Brinckman

Kedar Krishnanand Gaonkar

Sanalkumar Thekkanath

Vishal Satyendra Desai

Robert Edgar Barton

Ziv Nuss

Abhishek Dhammawat

Sandro Grech

Andrea Giustina

Gary Kenneth Boon

Mark Allen Webb

Ravindra Narayan

Shyam Sundar Vaidyanathan

Raghavaiah Avula

Kirti Yeshwant Barve

Cristovao Correia Da Silva

Matthew Aaron Silverman

David A McGrew

Blake Harrell Anderson

Sandesh Goel

Ian James Wells

Abhishek Mukherji

Vinay Prabhu

Eric Philippe Hamel

Darrin Joseph Miller

Christopher Metz

Kevin Holcomb

Abhishek Bhattacharyya

Huaiyi Wang

Vinay S Raghuram

Viktoria Fordos

Avaneesh Anandrao Kadam

Srinivasa Reddy Irigi

Paul Wayne Bigbee

Chiragkumar P Desai

Viktor Mats Emanuel Leijon

David Lake

Shiva Prasad Maheshuni

Vandhana Somaskanthan

Pooja Vishvanath Indi

Durgaprasad Sukhadeo Pawar

Vikram Prasad Munishwar

Peter Gaspar

Anvesh Reddy Podduturi

Ganesh Kumar A

Kevin L Gorey

Meghana Mukund Amble

Scott M Saltsgaver

Ryan William Shoemaker

Shikha Jain

Padumane Kishan

Uljana Sejko

Udaya Shankara Pudukoli Subrahmanya

Girish K Kv

Michael Lui

Jay Ponce

Pranathi Mamidi

Akhtar Iqbal

Paniraja Koppa Manjunatha

Payal Bhaduri

Hari Khanal

Hema Shankar Bontha

A system and method for improved application path selection for cloud-based applications from a client device. In one embodiment, a method includes collecting metrics of a remote user's use of one or more cloud-based applications, categorizing the one or more cloud-based applications based at least in part on the collected metrics, determining one or more secure network paths based at least in part on the categorizing of the one or more cloud-based applications, establishing the one or more secure network paths between the remote user and one or more network points-of-presence, and routing data traffic for the one or more cloud-based applications through the one or more established secure network paths.

Application path selection for cloud-based applications from a client device

This disclosure describes techniques for migrating nodes from a first communication protocol to a second communication protocol. An example method is performed by a software-defined wide area network (SDWAN) controller. The example method includes identifying nodes in a network; identifying features associated with the nodes; identifying Internet Protocol version 6 (IPv6)-incompatible features among the features; and outputting, to a user, a list of the IPv6-incompatible features. The example method further includes receiving, from the user, a selection of nonessential features including at least one of the IPv6-incompatible features; identifying at least one of the nodes corresponding to the selection; and causing migration of the at least one of the nodes to IPv6.

Coordinated migration of a network to a communication protocol

Techniques and systems described herein relate to shared storage systems across network devices to use unused storage space and provide backup and additional storage for devices as needed. The techniques and systems include determining availability data describing available storage locations and amounts on network devices, compiling such data at a network controller, and communicating the availability data to the network devices. The network devices then directly communicate with each other to store data remotely as needed.

Dynamic storage sharing across network devices

A method of controlling performance of a wireless device is performed by a node that is in electronic communication with a cellular network. The node includes a processor, a non-transitory memory, and a network interface. The method includes receiving a performance value characterizing a performance of a communication channel between a wireless device and a wireless access point. In some implementations, the wireless device and the cellular network are associated with different radio access technologies (RATs). The method includes determining whether the performance value breaches a performance criterion for the wireless device. The method includes adjusting a first amount of data transmitted to the wireless device from a base station of the cellular network and a second amount of data transmitted to the wireless device from the wireless access point. In some implementations, the combined first and second amounts of data satisfy the performance criterion for the wireless device.

Controlling performance of a wireless device in a heterogeneous network

Various implementations disclosed herein enable controlling access to networks. In various implementations, a method of controlling access to a network is performed by a computing device including one or more processors, and a non-transitory memory. In various implementations, the method includes obtaining an indication that a mobile device having access to a first network utilizing a first radio access technology (RAT) has requested access to a second network utilizing a second RAT. In some implementations, the method includes determining whether the access to the first network satisfies an authentication criterion associated with the second network. In some implementations, the method includes granting the mobile device access to the second network in response to determining that the access to the first network satisfies the authentication criterion associated with the second network. In some implementations, accessing the second network via the authentication criterion satisfies an operating threshold associated with the mobile device.

Controlling access to networks in a heterogeneous network environment

A method of configuring network devices. The method may include, with a network orchestrator, measuring at least one characteristic of a quality of a link between a network device and the network orchestrator during a first measurement window, categorizing the link into a connection type based on the at least one characteristic, and tuning a configuration of the network device based at least in part on the connection type identified by the network orchestrator.

Network device configuration

Systems, methods, and computer-readable media for radio resource management in a Citizens Broadband Radio Service (CBRS) network include one or more CBRS devices (CBSDs) which can obtain a group type associated with the CBSDs and their associated Radio Environment Map (REM) reports of one or more frequency channels of the CBRS network. The group type and the REM reports may be provided to a Self-Organizing Network (SON) manager of the CBRS network, where the SON manager may determine and provide to the CBSDs, one or more of a channel utilization information, transmission power, or mobility load management information for the CBSD, based on the group type and the REM reports.

Reducing interference in CBRS networks

Systems, methods, and devices are disclosed for providing a quality of service between nodes. A service provider can receive, from a first node of a customer network to an ingress node of a service provider network, packets bound for a second node on the customer network that is remote from the first node. The packets are mapped to a network segment according to a traffic type based on an identifier associated with the packets that identifies the traffic type of the packets. The packets are sent via their mapped network segment to an egress node with connectivity to the second node of the customer network according to a quality of service associated with the traffic type identified by the identifier.

Mechanism to coordinate end to end quality of service between network nodes and service provider core

Systems and methods provide for Selective Tracking of Acknowledgments (STACKing) to improve buffer utilization and traffic shaping for one or more network devices. A network device can identify a first flow that corresponds to a predetermined traffic class and a predetermined congestion state. The device can determine a current window size and congestion threshold of the first flow. In response to a determination to selectively track a portion of acknowledgments of the first flow, the device can track, in main memory, information of a first portion of acknowledgments of the first flow. The device can exclude, from one or more buffers, a second portion of acknowledgments of the first flow. The device can re-generate and transmit segments corresponding to the second portion of acknowledgments at a target transmission rate based on traffic shaping policies for the predetermined traffic class and congestion state.

Selective tracking of acknowledgments to improve network device buffer utilization and traffic shaping

In one embodiment, an IoT server includes: processing circuitry, an I/O module operative to communicate with at least an IoT device and a vendor network server, and an onboarding application and operative to at least: receive an onboarding request from the IoT device via the I/O module, send a confirmation request to the vendor network server via the I/O module, where the confirmation request indicates a request to confirm an identity of the IoT device according to a connection to a network device authenticated by the vendor network server, receive a confirmation response from the vendor network server via the I/O module, where the confirmation response indicates whether the IoT device is connected to the network device, and if the confirmation response is a positive confirmation response that indicates that the IoT device is connected to the network device, onboard the IoT device for participation in an IoT-based system.

Expended trust for onboarding

Systems and methods provide for generating traffic class-specific congestion signatures and other machine learning models for improving network performance. In some embodiments, a network controller can receive historical traffic data captured by a plurality of network devices within a first period of time that the network devices apply one or more traffic shaping policies for a predetermined traffic class and a predetermined congestion state. The controller can generate training data sets including flows of the historical traffic data labeled as corresponding to the predetermined traffic class and predetermined congestion state. The controller can generate, based on the training data sets, traffic class-specific congestion signatures that receive input traffic data determined to correspond to the predetermined traffic class and output an indication whether the input traffic data corresponds to the predetermined congestion state. The controller can adjust, based on the congestion signatures, traffic shaping operations of the plurality of network devices.

Traffic class-specific congestion signatures for improving traffic shaping and other network operations

Techniques for improved wireless ranging are provided. A first communication from a first client device is received at a first network device. A predefined minimum distance is determined for the first access point, where the predefined minimum distance corresponds to a distance at which the vertical location of the first network device causes time of flight ranging techniques to result in inaccurate location estimations. A first distance of the first client device from the first network device is estimated. Upon determining that the first distance of the first client device is below the predefined minimum distance, ToF ranging requests from the first client device are declined.

Regulation of airtime for ranging requests

In one embodiment, a gateway to a zero trust network applies an access control policy to an endpoint device attempting to access a cloud-based application hosted by the zero trust network. The gateway acts as a reverse proxy between the endpoint device and the cloud-based application, based on the access control policy applied to the endpoint device. The gateway captures telemetry data regarding application traffic reverse proxied by the gateway between the endpoint device and the cloud-based application. The gateway detects an anomalous behavior of the application traffic by comparing the captured telemetry data to a machine learning-based behavioral model for the application. The gateway initiates a mitigation action for the detected anomalous behavior of the application traffic.

Machine learning-based application posture for zero trust networking

The present technology pertains to a system that routes application flows. The system can receive an application flow from a device by an active threat detection agent; analyze the application flow for user context, device context, and application context; classify the application flow based on the analysis of the application flow; and direct the application flow according to the classification of the application flow and an application access policy.

Threat detection of application traffic flows

Growing community of inventors

Santa Clara, CA, United States of America

Santosh Ramrao Patil