Cisco Technology, Inc.

Think Surgical, Inc.

Saurabh Jain

Ronak K Desai

Praveen Jain

Munish Mehta

Yibin Yang

Sanjay Sane

Vijay K Chander

Daniel Patrick Bonny

Tameen Khan

Vijayan Ramakrishnan

Michael R Smith

Dhananjaya Rao

Chandan Mishra

Sameer Merchant

Hasmit S Grover

Joji Thomas Mekkattuparamban

Geetha Anandakrishnan

Narender Enduri

Badhri Madabusi Vijayaraghavan

Van Lieu

Neelesh Kumar

Hari Hara Prasad Muthulingam

Techniques are described for managing network devices by defining a service chain that includes a plurality of network devices, such that the service chain identifies a position of each network device with respect to other network devices. The techniques further detect a new network device becoming active on a network and identify a logical model associated with the new network device. The new network device is programmed based on the service chain and other devices already active in the service chain.

Network device management

Systems and methods are provided to aid in planning at least a portion of a total knee arthroplasty procedure. The system and method automatically aligns the implant components and the bones according to a desired clinical alignment goal with minimum user input. The system and method further allows the user to adjust the position and orientation of the femur, tibia, or implant in a clinical direction regardless of a pre-adjusted position and orientation of the femur, tibia, or implant. The graphical user interface is provided that includes a three-dimensional (3-D) view window, a view options window, a patient information window, an implant family window, a workflow-specific tasks window, and a limb and knee alignment measures window.

Automated arthroplasty planning

Aspects of the embodiments are directed to forming a virtual machine management (VMM) domain in a heterogeneous datacenter. Aspects can include mapping an endpoint group to multiple VMM domains, each VMM domain associated with one or more virtual machine management systems of a single type that each share one or more management system characteristics; instantiating a virtual switch instance, the virtual switch instance associated with a the VMM domain; and instantiating the endpoint group mapped to the VMM domain as a network component associated with the virtual switch instance.

Extending application tiers across a large-scale heterogeneous data center

Presented herein are traffic pruning techniques that define the pruning at the group level. A software defined network (SDN) controller determines first and second endpoint groups (EPGs) of an SDN associated with the SDN controller. The SDN runs on a plurality of networking devices that interconnect a plurality of endpoints that are each attached to one or more host devices. The SDN controller determines a host-EPG mapping for the SDN, as well as a networking device-host mapping for the SDN. The SDN controller then uses the host-EPG mapping, the networking device-host mapping, and one or more group-based policies associated with traffic sent from the first EPG to the second EPG to compute hardware pruning policies defining how to prune multi-destination traffic sent from the first EPG to the second EPG. The hardware pruning policies are then installed in one or more of the networking devices or the host devices.

Group-based pruning in a software defined networking environment

The techniques presented herein use dynamic endpoint group (EPG) binding changes to facilitate cross-tenant resource sharing. A first node of a multi-tenant software defined network determines that an application on a first endpoint has initiated operation and needs temporary access to resources located at a second endpoint. The first and second endpoints are associated with first and second tenants, respectively, that are logically segregated from one another by the software defined network. The first node dynamically changes an initial EPG binding associated with the first endpoint to a second EPG binding that enables the first endpoint to temporarily directly access the resources at the second endpoint. The first node subsequently determines that the application on the first endpoint no longer needs access to the resources located at a second endpoint and, as such, changes the second EPG binding associated with the first endpoint back to the initial EPG binding.

Dynamic endpoint group binding for cross-tenant resource sharing in software defined networks

Microsegmentation in a heterogeneous software-defined network can be performed by classifying endpoints associated with a first virtualized environment into respective endpoint groups based on respective attributes, and classifying endpoints associated with a second virtualized environment into respective security groups based on respective attributes. Each respective endpoint group can correspond to a respective security group having the same attribute. Each respective endpoint group and corresponding security group can be associated with a respective policy model defining rules for processing associated traffic. Each of the respective security groups can be used to generate a respective network attribute endpoint group, which can include the network addresses of those endpoints in the respective security group. Each respective network attribute endpoint group can inherit the policy model of the respective endpoint group corresponding to the respective security group. Traffic between the endpoints can then be processed based on the various classifications and associated rules.

Microsegmentation in heterogeneous software defined networking environments

Systems, methods, and computer-readable storage media are provided for dynamically setting an end point group for an end point. An endpoint can be assigned a default end point group when added to a network. For example, the default end point group can be a baseline port/security group which is considered an untrusted group. The end point can then be dynamically assigned an end point group based on a set of group selection rules. For example, the group selection rules can identify an end point group based on the MAC address or other attributes. When the end point is added to the network, the MAC address and/or other attributes of the end point can be determined and used to assign an end point group. As another example, an end point group can be assigned based on the amount of traffic or guest operation system.

Dynamic attribute based application policy

In one embodiment, a first switch is located at a first border between first networks that utilize a STP to detect and break loops and second networks. The first switch is interconnected via the first networks with a second switch located at a second border between the first networks and the second networks. The first switch detects, via a protocol other than STP, addition of a link in the second networks that provides a new path across the second networks between the first switch and the second switch. The first switch blocks data packets from traversing through one or more network boundary ports of the first switch coupled to the first networks, while allowing STP BPDUs to traverse through the one or more network boundary ports, for a period of time sufficient for the first networks to discover the new path using STP.

Transient loop prevention in a hybrid layer-2 network

Techniques are provided for two peer edge switches in an edge switch cluster of a first data center site to actively provide traffic flow redundancy in an active-active configuration and provide multi-homing support over an overlay transport virtualization (OTV) protocol. Information is stored indicating a media access control (MAC) address of at least one endpoint device at the first site. An edge switch in the edge switch cluster at the first site sends via an OTV protocol a Layer-3 message that is configured to advertise the MAC address of the at least one endpoint at the first site to enable at least one edge switch at a second site to perform multipath routing to the endpoint device at the first site based on each of the edge switches in the edge switch cluster at the first site.

Active-active multi-homing support for overlay transport protocol

In one embodiment, a first switch at a border between a first network of a first protocol (P1 network) and a first network of a second protocol (P2 network) is interconnected via the first P1 network with a second switch between a second P1 network (interconnected with the first P1 network) and a second P2 network. In response to detecting a merge of the first and second P2 networks, the first switch may: i) block data packets from traversing P1 network boundary ports of the first switch; ii) allow protocol messages to flow between the first and second P1 networks through the P1 network boundary ports of the first switch; iii) allow the first and second P1 networks to discover each other through the protocol messages and to prevent loops; and in response, iv) unblock the P1 network boundary ports of the first switch to allow traversal of data packets.

Growing community of inventors

Fremont, CA, United States of America

Saurabh Jain