Cisco Technology, Inc.

Vinay Jayant Pande

Jayesh Chokshi

Kaushik Pratap Biswas

Parameswaran Kumarasamy

Mohammed Taher Shaikh

Daniel George Wing

Kavithadevi Parameswaran

Sandeep Singh Kohli

Rong Wang

Prasad Chigurupati

Abdallah Mashargah

Eric Dale Williams

Siva S Jayasenan

Vikas Butaney

Deependra Vidyadhar Vaidya

Deepandra Vidyadhar Vaidya

Tuan Q Le

This disclosure describes an integrated management method to manage a service mesh data plane over a network fabric. The method includes determining at least one service mesh data plane policy for a microservice of a service mesh. The method further includes sending, over the network fabric, the at least one service mesh data plane policy to a virtual router associated with the microservice based at least in part on connectivity information maintained by a network fabric control plane manager of a configuration manager.

Integrated service mesh control plane management

In one embodiment, a method includes receiving non-Internet Protocol (IP) traffic from one or more non-IP traffic sources. The method also includes terminating the non-IP traffic and re-originating the non-IP traffic as first IP traffic in accordance with one or more software-defined networking in a wide area network (SD-WAN) protocols. The method further includes communicating the first IP traffic to an SD-WAN link in accordance with one or more SD-WAN policies.

Systems and methods for applying SD-WAN policies to router-generated traffic

In accordance with at least one embodiment of the present invention, a communication apparatus includes a communication unit configured to send and receive messages on a network. Each message has a message header configured to include a plurality of header fields, where the message header includes a suppression header field that indicates a request to suppress at least one header field in at least one subsequently sent or received message. The communication apparatus is configured to establish a suppressed header field message exchange session with a peer on the network so that at least one subsequent message exchanged between the communication apparatus and the peer is free of at least one suppressible header field.

Method and system to enhance performance of a session initiation protocol network and its elements

In a particular embodiment, a network device receives, from a first device, a first call request for a second device. The network device may then send the first call request to a redirect server, which can determine where to send the call. The network device receives a response from the redirect server indicating an address to redirect the call request to. The network device then determines a redirect ID for the redirect. The network device sends a message to the first device with the redirect ID where the message indicates that a redirection occurred to the third device. The network device then receives a second call request from the first device that includes the redirect ID. The network device determines if the call was part of a previous redirect. If so, the second call request is sent to the address associated with the redirect ID.

Handling redirect calls

In one embodiment, a device comprises an input port for receiving network packets that are being communicated via a computer network. A processor is in communication with the input port. The processor is configured to facilitate dynamic monitoring and updating of port addresses assigned by at least one non-ALG PAT router so as to facilitate communication of packets that are exchanged between an inside user agent and an outside user agent in a manner that mitigates a likelihood of communication interruption during a VOIP session. An output port is in communication with the processor for transmitting packets via the computer network.

Mechanisms for session border control of VOIP communication from non-symmetric port address translation device

In one embodiment, a signaling message is received from an endpoint. It is determined from the signaling message whether, prior to sending the signaling message, the endpoint performed network address translation on the body of the signaling message. If it is determined from the signaling message that, prior to sending the signaling message, the endpoint did not perform network address translation on the body of the signaling message, application layer gateway functionality is applied to the body of the signaling message such that a modified signaling message is generated.

Intelligent ALG functionality in networks supporting endpoints performing network address translation

Disclosed are apparatus and methods for managing session data in a session border controller (SBC), where the session data is sent from a first node, such as a first phone, to a second node, such as a registrar or second phone. In one example embodiment, the following operations are performed in a first intermediary node that is configured to provide network address translation (NAT) for both a header and payload of a session packet and has an inside interface coupled with a second intermediary node that is configured to perform NAT for only a header of session packets. It is determined whether an end node is sending session packets that are not used to set up a session and that result in a binding that was formed by the second intermediary node being retained. The binding associates inside and outside addresses of the end node, and an end node is defined as a node that originates a session packet. It is determined whether to inhibit a registration throttling process from being performed by the first intermediary node, that results in the binding being retained, based on whether it is determined that the end node is sending session packets that are not used to set up a session and that result in the binding being retained.

Mechanisms for providing intelligent throttling on a NAT session border controller

Disclosed are apparatus and methods for managing session data in a session border controller (SBC), where the session data is sent from a first node, such as a first phone, to a second node, such as a registrar or second phone. In general, embodiments of the present invention support SBC functionality by managing sessions through the SBC without implementing a terminate and regenerate of the sessions, but rather by intercepting packets destined to the second node and efficiently handling such functionality in the forwarding-path. Also in deployments where the endnodes require NAT (network address translation), mechanisms are provided in the SBC to perform NAT on the addresses embedded in the payload of the session data. In other aspects, mechanisms for keeping the sessions or NAT entries alive are facilitated at the SBC, even when an endnode has a expiration time that differs an expiration time of another device, such as a registar device. Other embodiments allow the actual media packets to flow through the SBC (e.g., for security, accounting, etc) while allowing two endnodes to utilize a same private address or domain.

Mechanisms for using NAT at a session border controller

Techniques for providing a bulk refresh of sessions in a network are provided. A plurality of session identifiers for sessions that were created are determined. These session identifiers may be included in a bulk refresh message. The bulk refresh message is sent to a device configured to determine if sessions associated with the plurality of session identifiers are active or inactive. The device then sends a response to the refresh requestor. The response can be used to determine which sessions are active or inactive. After the determination, actions can be taken in order to clear the hanging session. For example, the session may be torn down or a BYE message may be sent to end the session on a peer device.

Growing community of inventors

Sunnyvale, CA, United States of America

Vinay Jayant Pande