Cisco Technology, Inc.

Syed Arslan Ahmed

Rahul Ramachandran

Jegan Kumar Somi Ramasamy Subramanian

Anoop V A

Balaji Sundararajan

Ankur Bhargava

Amjad Sayedrasul Inamdar

Reetesh Kapahi

Ashish Sood

Mahalakshmi Rajaram

Nagarajan Venkatesan

Yogesh Mittal

Jegan Kumaar Somi Ramasamy Subramanian

Raj Venkatesan

Ramaswamy Rangaswamy

The present technology provides solutions for maintaining communications within a software-defined wide area network (SDWAN) when one or more devices in the SDWAN are isolated from one or more controllers. An example method includes receiving, at a static edge device associated with a static wide area network (WAN) Internet Protocol (IP) address in a data plane of the SDWAN, data from a first device communicating through an edge device of a first Internet service provider (ISP) of the SDWAN, where the first device is associated with a private IP address, associating, by the static edge device, the first device with the private IP address, and communicating, by the static edge device, with the first device at the private IP address. Systems and computer-readable media are also provided.

SDWAN data-plane resiliency for extended survivability

A method of implementing controller-based distributed remote access may include connecting a plurality of edge devices to a controller via a network. The plurality of edge devices may perform hole punching to traverse a network address translation (NAT) gateway to create a NAT hole. The method may also include connecting a client device to the controller. The client device may be directly connected to one of the plurality of edge devices via the NAT hole in the network. The method may further include directly connecting the client device to one of the plurality of edge devices by receiving a query from the client device and returning public IP/ports of a most relevant edge device to the client device, the most relevant edge device being based on attributes of the client device, attributes of the plurality of edge devices, or combinations thereof.

Controller-based distributed remote access with static public IP avoidance

This disclosure describes techniques for improving routing policy awareness in a network. The method includes detecting, by a controller, an application initiated for use at an edge node of a network. Then, generating, by an analytics engine coupled to the controller, analytical data of traffic flow at the edge node of the network wherein the traffic flow is in accordance with a routing policy for routing traffic associated with the application. Further, routing of the traffic through a path from one or more paths configured at the edge node that is in accordance with at least a Service Level Agreement (SLA) for traffic flow. Also, in response to an SLA violation during routing of the traffic, causing an action, by the controller, of routing traffic flow through another path that is in accordance with at least the SLA for traffic flow based on analytical data received of the traffic flow.

Automatic creation of adaptive application aware routing policies on a software-defined wide area network (SD-WAN)

Techniques are provided herein for determining a routing path for application traffic based on historic application telemetry and current network telemetry. The techniques comprising determining current metrics for a set of potential paths between an edge device and an application endpoint associated with an application, generating, from the current metrics, a link score for individual paths in the set of potential paths, receiving application status data generated from historic telemetry data associated with the application and the set of potential paths, generating, from the application status data, an application score for individual paths in the set of potential paths, and determining, as a function of the link score and the application score for individual paths in the set of potential paths, a selected path to be used in communications between the edge device and the application endpoint.

Method to select best path for SaaS using application and network telemetry

Techniques are described herein for retrieving application status data from a service provider and making a path selection based on that application status data. In some embodiments, the techniques may comprise receiving a request to access an application hosted by a service provider, generating a first data that includes an application programming interface (API) call to the application that includes at least an identifier for a tenant, determining a set of potential paths between the edge device and the application hosted by the service provider, providing the first data to the application endpoint via at least one path of the set of potential paths, receiving second data including an application status generated from metrics obtained in relation to the tenant, and selecting, based on the second data, a path of the set of potential paths to be used by the tenant to access the application.

Techniques for fetching application data to be used in path selection

Growing community of inventors

Bengaluru, India

Syed Arslan Ahmed