Apple Inc.

Cisco Technology, Inc.

Xilinx, Inc.

P.a. Semi, Inc.

Keyssa, Inc.

Sridhar Subramanian

James B Keller

Ramesh B Gunna

Sukalpa Biswas

Rajagopalan Janakiraman

Sridhar Narayanan

Hao Chen

Brian P Lilly

Ruchi Wadhawan

George Kong Yiu

Sanjay Kumar Hooda

Tim Tuan

Chaiyasit Manovit

Victor Manuel Moreno

Juan J Noguera Serra

Matthew H Klein

Pags Krishnamoorthy

Luka Bodrozic

Ian A Kyles

Roger Dwain Isaac

Vincent R Von Kaenel

Peter Geoffrey Jones

Srikanth Gondi

Priya Ananthanarayanan

Pagalavan Krishnamoorthy

Venkataraman Natham

Steve Novak

Sunderraj V Palaniraj

Robert Gries

Wanlin Cao

Vijoy A Pandey

Fabio Rodolfo Maino

Patrick J Crotty

Alberto Rodriguez Natal

Po-Yung Chang

Darrin Joseph Miller

Goran Hk Bilski

Subodh Kumar

Edward Albert Warnicke

Ismed D Hartanto

John A Joyce

Shreeram Bhide

Timothy James Swanson

Alok Kuchlous

Gerald Gras

Tse-Yuh Yeh

Juan Jose Noguera Serra

Loránd Jakab

An integrated circuit includes an interposer and a die coupled to the interposer. The die includes a first data processing engine (DPE) array and a second DPE array. The first DPE array includes a first plurality of DPEs and a first DPE interface coupled to the first plurality of DPEs. The second DPE array includes a second plurality of DPEs and a second DPE interface coupled to the second plurality of DPEs. The integrated circuit includes one or more other dies having a first die interface coupled to, and configured to communicate with, the first DPE interface via the interposer and a second die interface coupled to, and configured to communicate with, the second DPE interface via the interposer.

Multi-die integrated circuit with data processing engine array

An integrated circuit includes an interposer, a first die coupled to the interposer, a second die coupled to the interposer, and a third die coupled to the interposer and having a plurality of die interfaces. The first die includes a first data processing engine (DPE) array having a first plurality of DPEs and a first DPE interface coupled to the first plurality of DPEs therein. The second die includes a second DPE array having a second plurality of DPEs and a second DPE interface coupled to the second plurality of DPEs therein. The first DPE interface of the first die is configured to communicate with a first die interface of the plurality of die interfaces via the interposer. The second DPE interface of the second die is configured to communicate with a second die interface of the plurality of die interfaces via the interposer.

In one embodiment, a device of a software-defined wide area network (SD-WAN) receives, from a cloud-native application, contextual data for the cloud-native application that identifies microservices of the cloud-native application. The device translates the contextual data for the cloud-native application into a network policy for traffic in the SD-WAN associated with the cloud-native application. The device applies the network policy to a traffic flow in the SD-WAN between an endpoint and a particular microservice of the cloud-native application.

Fine-grained SD-WAN optimization services for cloud-native applications

Systems and methods for network authorization are described herein. An example method can include receiving a user credential from a host device connected to a network, authenticating the user credential, and in response to authenticating the user credential, determining an authorization policy associated with the host device. The method can also include polling a network overlay control plane of the network to obtain a network location information associated with the host device, identifying at least one network device of the network using the network location information, and transmitting the authorization policy to the at least one network device.

Network authorization in web-based or single sign-on authentication environments

Some examples described herein relate to programmable devices that include a data processing engine (DPE) array that permits shifting of where an application is loaded onto DPEs of the DPE array. In an example, a programmable device includes a DPE array. The DPE array includes DPEs and address index offset logic. Each of the DPEs includes a processor core and a memory mapped switch. The processor core is programmable via one or more memory mapped packets routed through the respective memory mapped switch. The memory mapped switches in the DPE array are coupled together to form a memory mapped interconnect network. The address index offset logic is configurable to selectively modify which DPE in the DPE array is targeted by a respective memory mapped packet routed in the memory mapped interconnect network.

Programmable device having a data processing engine (DPE) array

A multi-die integrated circuit (IC) can include an interposer and a first die coupled to the interposer. The first die can include a data processing engine (DPE) array, wherein the DPE array includes a plurality of DPEs and a DPE interface coupled to the plurality of DPEs. The DPE interface has a logical interface and a physical interface. The multi-die IC also can include a second die coupled to the interposer. The second die can include a die interface. The DPE interface and the die interface are configured to communicate through the interposer.

EHF communication systems described herein can selectively implement any one of the USB standards by mapping appropriate USB signal conditions over an EHF contactless communication link. The EHF contactless communication link may serve as an alternative to conventional board-to-board and device-to-device connectors, and as such enables wired connection USB signaling protocols to be used in a non-wired environment provided by the EHF contactless communications link. Use of a USB protocol over the EHF communications link can be accomplished by establishing the EHF link between counterpart EHF communication units, and then by establishing the appropriate USB protocol over the link.

Extremely high frequency systems and methods of operating the same to establish USB data transport protocols

Changes are made to a virtual network for an endpoint based on the authenticated user identity of the endpoint. The system includes a server and a controller associated with a network fabric to which the endpoint is connected. The network fabric includes network elements to carry network traffic for the endpoint. The server authenticates the endpoint associated with a network address and determines a user identity of the endpoint based on the authentication. The server determines a first virtual network associated with the user identity. The controller receives a notification from the server that the network traffic for the endpoint associated with the network address is to be routed over the first virtual network. The controller updates routing information to associate the network address with the first virtual network and sends the updated routing information to the network elements of the network fabric.

Network address transparency through user role authentication

A system, computer-readable media, and methods for network resource sharing of routing and forwarding information are disclosed. The method may include receiving a first address for a device connected to a network and receiving one or more second addresses for the device. The method may also include identifying a first switch through which the device connects to the network and identifying a second switch for storing the first address and the one or more second addresses. Further, the method may include storing the first address in the first switch and storing the first address and the one or more second addresses in the second switch.

Network resource sharing for routing and forwarding information

The methods and devices discussed herein provide service clustering within a TRILL network without relying on an additional service insertion framework. A TRILL network can include one or more flow distribution RBridges for distributing flows to service nodes. Each flow distribution RBridge can have a virtual base identifier and one or more virtual cluster identifiers. An example method can include maintaining service cluster load balancing structures and receiving a packet that is encapsulated with an inner header and an outer header. The method can include determining whether the egress RBridge identifier is a virtual cluster identifier, and if so, selecting a service node from one of the service cluster load balancing structures. The method can include forwarding the packet to the selected service node.

Methods and devices for providing service insertion in a TRILL network

A method, system, and computer readable medium is disclosed which utilizes the LISP control plane to increase communications and access to enterprise resources in a network with multiple subnetworks, such as a university setting. As a result, the various embodiments of the present invention provide a routing and services dimension to enterprise discovery protocol traffic, such as Apple Bonjour traffic. A LISP instance ID, which is carried in the LISP header, is used to associate one or more end user devices with specific enterprise resources in a particular subnetwork or a service domain, wherein these resources may be accessed by the end user device even if the end user device migrates to another subnetwork. Another embodiment of the invention limits routing services advertisements from enterprise services to a subset of end user devices associated with particular user EIDs by using L2-LISP multicast techniques.

Method and system for extending network resources campus-wide based on user role and location

Accelerating network convergence may be provided. Consistent with embodiments of the disclosure, a mapping server may be configured to map an interconnection of various network elements comprising at least the following: a wireless host, at least two access switches, a plurality of distribution switches, a core switch, a mobility controller, and a mapping database. The mapping server may then receive an indication from the mobility controller that the wireless host has roamed from a first access switch to a second access switch. In response to the indication, the mapping server may remap the interconnection of network elements in the mapping database to update network routing information associated with the wireless host.

Accelerating network convergence for layer 3 roams in a next generation network closet campus

Growing community of inventors

Cupertino, CA, United States of America

Sridhar Subramanian