Cisco Technology, Inc.

Shyam N Kapadia

Nilesh Shah

Lukas Krattiger

Rajesh Babu Nataraja

Liqin Dong

Yibin Yang

Vipin Jain

Naoshad Mehta

Victor Manuel Moreno

Ming Zhang

Padmanabhan Krishnan

Jason David Notari

Rajagopalan Janakiraman

Suran Saminda De Silva

Chengelpet Ramesh

Patnala Debashis Rao

Rick G Chang

Vrishabha Sikand

Stephanie Wong

Uffaz Nathaniel

Huilong Huang

Sathish Srinivasan

Dileep Kumar Devireddy

Chia Alex Tsai

Bhushan Mangesh Kanekar

Chiajen Tsai

Vinay Parameswarannair

Murali Venkateshaiah

Viral Rajeshbhai Barot

Vrishab Sikand

Pei-chun Cheng

Aakruthi Ramkumar Gopisetty

Deepak Raykar

Richard Lam

Samir D Thoria

Javed Asghar

Putu Harry Subagio

Akshya Kumar Singh

Mehak Mahajan

Anil Bhikuayya Jangam

Nader Lahouti

Sri Goli

Vijay Kumar Devendran

Palathingal Frank

Srividya Vemulakonda

Massimiliano Ardica

Suvil Singh Deora

Sundeep Kumar Singh

Kiran Kumar Meda

Jay Ajaykumar Gheewala

Sanjay Kumar Hooda

Samar Sharma

Dhananjaya Rao

Rex Emmanuel Fernando

Lifen Tian

Munish Mehta

Neeraj Malhotra

Ashutosh Agrawal

Debashis Patnala Rao

Deepak Kumar

Manish Chandra Agrawal

Mohammed Javed Asghar

Rajesh Sharma

Abhijit V Warkhedi

Santa Dasu

Siva M Vaddepuri

Murthy N Bhetanabhotla

Rohit Mendiratta

Srinivas Siva Kanth Sattiraju

Sundeep Singam Setty

Sharanya Subramanian

Vijay Gopal Krishnan

Subhav Mital

John Lo

Lei Fu

Puto H Subagio

Sankararaman Jayaraman

Abhinandan Prativadi Bayankaram

Rex Emmauel Fernando

Ateet Kumar Krishna Shetty

Smita Nath

Deepika Sharma

Shankar Gopalkrishnan

Indrajanti Pallikala

Elyor Khakimov

Wing Hon Yeung

Upendra N Moholkar

In one embodiment, a method includes identifying a problematic event between a first interest point and a second interest point of a network and activating, in response to identifying the problematic event between the first interest point and the second interest point, a first endpoint associated with the first interest point and a second endpoint associated with the second interest point. The method also includes receiving, from the first endpoint and the second endpoint, telemetry data associated with a problematic path between the first interest point and the second interest point. The method further includes determining the problematic path between the first interest point and the second interest point using the telemetry data received from the first endpoint and the second endpoint.

Systems and methods for determining problematic paths between interest points in a multi-cloud environment

Techniques for combining the functionality of fabric interconnects and switches (e.g., Top-of-Rack (ToR) switches) into one network entity, thereby reducing the number of devices in a fabric and complexity of communications in the fabric. By collapsing FI and ToR switch functionality into one network entity, server traffic may be directly forwarded by the ToR switch and an entire tier is now eliminated from the topology hierarchy which may improve the control, data, and management plane. Further, this disclosure describes techniques for dynamically managing the number of gateway proxies running on one or more computer clusters based on a number of managed switch domains.

Managing traffic for endpoints in data center environments to provide cloud management connectivity

A system and method for providing end-to-end data flow analytics in a network flow that includes network appliances. Information regarding one or more network appliances is received by a flow collector and analyzed by an enrichment module. The network information regarding the one or more network appliances can be stored. Network flow data is received from various nodes within the network and stitched or aggregated in light of the enriched network appliance information to provide an end-to-end data flow that can be useful to understand one or more performance parameters of the unified network flow.

End-to-end flow visibility in a data network including service appliances

The present technology provides a framework for user-guided end-to-end automation of network deployment and management, that enables a user to guide the automation process for any kind of network deployment from the ground up, as well as offering network management, visibility, and compliance verification. The disclosed technology accomplishes this by creating a stateful and interactive virtual representation of a fabric using a customizable underlay fabric template instantiated with user-provided parameter values and network topology data computed from one or more connected network devices. A set of expected configurations corresponding to the user-specified underlay and overly fabric policies is then generated for deployment onto the connected network devices. Network deviations from the intended fabric policies are addressed by the provision of one or more configuration lines to be deployed onto or removed from the connected network devices to bring the network state in agreement with the set of expected configuration.

Multi-fabric deployment and management platform

Techniques are presented herein for providing a persistent external Internet Protocol (IP) address for extra-cluster services. One example involves initiating, in a cluster, a first pod with a label that identifies a service. The first pod is configured to provide the service to one or more network entities outside the cluster. The first pod is assigned an IP address configured for communicating outside the cluster. A mapping of the service to the IP address is stored. In response to a determination that the service has been disrupted, a second pod is initiated in the cluster with the label that identifies the service. The second pod is configured to provide the service to the one or more network entities outside the cluster. Based on the mapping and the label that identifies the service, the IP address is assigned to the second pod.

Providing persistent external internet protocol address for extra-cluster services

Disclosed are systems, apparatuses, methods, and computer-readable media for providing interoperable heterogenous networks. A method comprises configuring a logical network with a first network and a second network; receiving a request message from a source device by the first border device in the first network, wherein the request message includes a related to a media access control (MAC) address associated with a destination device in the second network; sending a proxy message to the second border device based on the request message, the proxy message having a source address that identifies an external IP address associated with the first border device; receiving a response message including the MAC address of the destination device, wherein the response message is addressed to the external address of the first border device; and sending a border gateway protocol (BGP) update including the MAC address of the destination device.

Seamless coexistence of heterogenous networks

In one embodiment, an illustrative method herein may comprise: determining, by a network controller, physical network topology of a data center network; collecting, by the network controller, virtual machine related network topology of the data center network from a virtual machine manager for the data center network; collecting, by the network controller, virtual ethernet flow mapping information of the data center network from a blade system management software for the data center network; collecting, by the network controller, container workload information of the data center network from a container orchestrator for the data center network; and generating, by the network controller, an integrated correlated visualization mapping of containers and associated network attachment points in the data center network based on the physical network topology, the virtual machine related network topology, the virtual ethernet flow mapping information, and the container workload information.

Enhancing container workload visibility in data center environments with blade switches

Techniques for determining that a configuration change in configurations for a network device has occurred to result in changed configurations for the network device. The techniques include creating a policy for the network device by a network controller that manages one or more network devices. The network controller may obtain data from the network device, and update the network device policy based on the obtained data. In some examples, the network controller may compare the network device configurations state with the network controller intent to determine if an Out-of-Band (OOB) configuration change has occurred in the configuration of the network device. Finally, the controller may synchronize the network device to the controller based on the updated policy.

Monitoring interface configurations for network devices in fabrics

The present disclosure provides systems, methods, and non-transitory computer-readable storage media for determining container to leaf switch connectivity information in a data center in a presence of blade switches and servers. In one aspect of the present disclosure, a method of determining container to leaf switch connectivity information of a data center utilizing at least one blade switch and at least one blade server, includes receiving, at a network controller, link connectivity information that includes south-bound neighboring information between the at least one blade switch of the data center and the at least one blade server of the data center; determining, at the network controller, the container to leaf switch connectivity information of the data center, based on the link connectivity information; and generating a visual representation of a topology of the data center based on the container to leaf switch connectivity information.

Container telemetry in data center environments with blade servers and switches

Techniques for utilizing a Software-Defined-Networking (SDN) controller and/or a Data Center Network Manager (DCNM) and network border gateway switches associated with a multi-site cloud computing network to provide reachability data indicating physical links between the border gateways disposed in different sites of the multi-site network to establish secure connection tunnels utilizing the physical links and unique encryption keys. The SDN controller and/or DCNM may be configured to generate a physical underlay model representing the physical underlay, or network transport capabilities, and/or a logical overlay model representing a logical overlay, or overlay control-plane, of the multi-site network. The SDN controller may also generate an encryption key model representing the associations between the encryption keys and the physical links between the associated network border gateway switches. The SDN controller may utilize the models to determine route paths for transmitting network traffic spanning over different sites of the multi-site network at line speed.

Configuring secure connectivity between devices in separate sites of a multi-site domain

Techniques for container management and topology visualization are provided. A network topology of a data center is determined, where the network topology includes a plurality of physical servers. A plurality of containers executing in the data center is identified, and for each respective container of the plurality of containers, a respective server from the plurality of physical servers that is executing the respective container is determined. An augmented network topology is generated by correlating the network topology and the determined server executing each container, where the augmented network topology indicates relationships among the plurality of containers and physical resources in the data center.

Container workload monitoring and topology visualization in data centers

Growing community of inventors

San Jose, CA, United States of America

Shyam N Kapadia