Cisco Technology, Inc.

Smita Rai

Sanjay Sane

Kit Chiu Chu

Chandan Mishra

Gayatri Ramachandran

Krishna Doddapaneni

Ajay Kumar Modi

Thomas James Edsall

Satyam Sinha

Ravikanth Nasika

Hariharan Balasubramanian

Ashutosh Agrawal

Santosh Rajagopalan

Wanli Wu

Geetha Anandakrishnan

Ronak K Desai

Umesh Mahajan

Pirabhu Raman

Sarang M Dharmapurikar

Shekher Bulusu

Disclosed is a method for continuous in-line monitoring of data-centric traffic to guarantee application performance. The method includes, in each switch of a plurality of switches in a network fabric, grouping all packets entering each respective switch of the plurality of switches based on either 5-tuple applications or EPG based applications, collecting performance statistics at every hop in the network fabric across all flows in-line in a flow table maintained in each respective switch and periodically exporting the performance statistics to analysis module.

System and method for continuous in-line monitoring of data-center traffic

Disclosed is a method for continuous in-line monitoring of data-centric traffic to guarantee application performance. The method includes, in each switch of a plurality of switches in a network fabric, grouping all packets entering each respective switch of the plurality of switches based on either 5-tuple applications or EPG based applications, collecting performance statistics at every hop in the network fabric across all flows in&#x2014;line in a flow table maintained in each respective switch and periodically exporting the performance statistics to analysis module.

Aspects of the embodiments include receiving a packet at a network element of a packet-switched network; identifying a presence of a shared service destination address in a header of the packet; identifying a shared service destination address for the packet based, at least in part, on a destination internet protocol (IP) address stored in a forward information base; and forwarding the packet to the shared service destination address.

Shared service access for multi-tenancy in a data center fabric

Disclosed are systems, methods, and computer-readable storage media for minimizing the number of entries in network access control lists (ACLs). In some embodiments of the present technology a networking device can receive, from a first computing device, a first data transmission intended for a second computing device, the first data transmission including first transmission data. The networking device can normalize at least a subset of the first transmission data based on a predetermined normalization algorithm, yielding a first normalized data set for the first data transmission. Subsequently, the networking device can identify a first access control list entry from a set of access control list entries based on the first normalized data set, the first access control list entry identifying a first action, and implement the first action in relation to the first data transmission.

Method for improving access control for TCP connections while optimizing hardware resources

Embodiments herein achieve proxy FHRP for anycast routing services through the coordination of L2MP edge switches to allow load balancing for the use of routing services. Such embodiments may avoid duplicity and coordinate control planes between the edge switches to present a proxy interface to the rest of the network for the routing services. As such, multipathing and load-balancing for efficient use of crucial services may be provided for client nodes inside the network.

Advertising reachability in proxy FHRP for anycast routing service

Techniques are described which facilitate multi-destination forwarding in a Layer 2 Multipath (L2MP) network which includes an emulated switch. The emulated switch may correspond to two or more underlying peer link switches in the L2MP network, in which each of the peer link switches is linked to a Classical Ethernet (CE) switch over a virtual port channel (vPC). Traffic received by one of the peer link switches over the vPC is automatically forwarded to the other peer link switch (or switches). Multi-destination frames originating from the L2MP network addressed to hosts within the CE network are sent over only one of the peer link switches.

Multi-destination forwarding in network clouds which include emulated switches

A method is provided that includes configuring a first network element as a peer to a second network element. The first network element and the second network element are configured to execute a spanning-tree protocol (STP) in a network environment. The method may also include configuring a priority characteristic to be a same value for the first network element and the second network element such that both operate as root network elements for other network elements in the network environment.

System and method for managing network traffic disruption

Proxy FHRP for anycast routing service

An example method is provided and can include initiating a probe session at a source network element; identifying multiple paths from the source network element to a destination network element in a network; transmitting packets from the source network element along the multiple paths; compiling a list of network characteristics associated with the multiple paths; and selecting a particular one of the multiple paths for packet routing based on the network characteristics.

System and method for probing multiple paths in a network environment

Techniques are provided to load-balance traffic across a plurality of virtual PortChannel links (ports) at a switch device. The switch device interfaces to the plurality of virtual PortChannel links and receives packets to be routed of the plurality of links. The switch device routes the packets of the links so as to favor certain links over others based on operation conditions of the respective links.

Load-balancing traffic with virtual port channels

In one embodiment, a method includes assigning at a switch in a layer 2 multipath network, costs to a link in the network, each of the link costs associated with a different graph for forwarding traffic in the network, transmitting the link costs to other switches in the layer 2 multipath network, and receiving and forwarding traffic according to one of the graphs. An apparatus is also disclosed.

Per-graph link cost assignment in layer 2 multipath networks

In one embodiment, an apparatus includes one or more ports for connection to one or more links in communication with a network device, a multi-chassis trunk (MCT) port for connection to an MCT in communication with a switch, and an MCEC manager for creating an MCEC comprising the one or more links in communication with the network device and one or more links connecting the switch to the network device, and transmitting messages to the switch to synchronize state for the MCEC. The apparatus further includes a control plane and a data plane configured for operation independent from a control plane and a data plane at the switch. A method is also disclosed.

Growing community of inventors

Mountain View, CA, United States of America

Smita Rai