Cisco Technology, Inc.

Vikram Vikas Pendharkar

Sanjay Kumar Hooda

Prakash C Jain

Satish Kumar Kondalam

Thomas Szigeti

David John Zacks

Anoop Vetteth

Solomon Thiruvarutselvan Lucas

Rex Emmanuel Fernando

Peter Geoffrey Jones

Syam Sundar Appala

Shawn Michael Wargo

Praveen T Chandra

Systems, methods, and computer-readable media for discovering silent hosts in a software-defined network and directing traffic to the silent hosts in a scalable and targeted manner include determining interfaces of a fabric device that are connected to respective one or more endpoints, where the fabric device is configured to connect the endpoints to a network fabric of the software-defined network. At least a first interface is identified, where an address of a first endpoint connected to the first interface is not available at the fabric device. A first notification is transmitted to a control plane of the software-defined network based on identifying the first interface, where the control plane may create a flood list which includes the fabric device. Traffic intended for the first endpoint from the network fabric is received by the fabric device can be based on the flood list.

Detecting and communicating with silent hosts in software-defined networks

This disclosure describes techniques to operate a control plane in a network fabric. The techniques include determining a stateless rule corresponding to communication between a first segment of the network fabric and a second segment of the network fabric. The techniques further include configuring the control plane to enforce the stateless rule.

Enforcement of inter-segment traffic policies by network fabric control plane

Network controls for application access secured by transport layer security (TLS) using single sign on (SSO) flow may be provided. An application access request for authenticating a user may be received in response to the user requesting an access to an application. User credentials associated with the user may be validated. In response to validating the user credentials, user attributes associated with the user may be determined. Network controls for a user session associated with the application access request may be determined based on the user attributes. The application access request may be redirected to a plain text user session. The plain text user session may comprise the network controls for the user session.

Network controls for application access secured by transport layer security (TLS) using single sign on (SSO) flow

Systems, methods, and computer-readable media for monitoring traffic in a network include receiving, at an analytics platform connected to the network, one or more encapsulated packet headers from one or more network nodes of the network. From the one or more encapsulated packet headers, at least one or more source addresses of the one or more network nodes which transmitted the encapsulated packet headers, and one or more timestamps at which the one or more encapsulated packet headers were transmitted from the one or more network nodes may be determined. From at least the one or more source addresses and timestamps, network traffic information such as one or more of latency or jitter of data packets transiting through the one or more network nodes may be determined, wherein the one or more encapsulated packet headers may correspond to the data packets transiting through the one or more network nodes.

Active targeted data plane traffic monitoring for wired networks

Systems and methods provide for monitoring a state of a network fabric utilizing user traffic. A fabric node (e.g., switch, router, or other network device) can receive user traffic from a node (e.g., network device, network appliance, or endpoint). The fabric node can match the user traffic to a tuple stored in a hardware counter matrix of the fabric node, the tuple corresponding to a count in the hardware counter matrix. The fabric node can increment the count. The fabric node can transmit an active probe to the node in response to the count not incrementing within a first time. The fabric node can transmit to a network management system data indicative of a disconnection between the fabric node and the node in response to the fabric node not receiving a response to the active probe within a second time.

Growing community of inventors

San Jose, CA, United States of America

Vikram Vikas Pendharkar