Adtran Gmbh

Luminous Networks, Inc.

Google Inc.

Vinay K Bannai

Jason C Fan

Prasad Prabhakar Jogalekar

Amin Vahdat

Horia Vlad Balan

Muhammad Mukarram Tariq

Andrew DeBock Ferguson

Steven Gribble

Joon Suan Ong

Robert F Kalman

Charles Barry

Jacqueline M Zoucha

Alvaro Martinez Echevarria

Zengbin Zhang

Alexander Jinhon Lin

Anvesh Komuravelli

Peter Geoffrey Jones

Arun Sastry

Sohail Mallick

Theodora Karali

Lorenzo Vicisano

Curtis W Dodd

Inwhan Choi

Robert Stillman

Warren Watts

Seshadri Srinivasan

Atul Shinde

Richard Lindquist

Raja Narayan

Henrik Boggild Kristensen

David Zats

Zhehua Wu

Methods, systems, and apparatus, for automatically changing a network system. A method includes receiving a set of first intents that describe a state of a first switch fabric; receiving a set of second intents that describe a state of a second switch fabric; computing a set of network operations to perform on the first switch fabric to achieve the second switch fabric, the set of operations also defining an order in which the operations are to be executed, and the set of operations determined based on the set of first intents, the set of second intents, and migration logic that defines a ruleset for selecting the operations based on the set of first intents and the second intents; and executing the set of network operations according to the order, to apply changes to elements within the first switch fabric to achieve the state of the second switch fabric.

Automated network change system

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for switch virtualization by a switch proxy controller. In an aspect, a method includes receiving, by a switch proxy controller, a first request from a first switch fabric, where the first request indicates a first identifier that identifies the first request from other requests from the first switch fabric, generating a second request that indicates a second identifier that identifies the second request from other requests sent from the switch proxy controller to a switch, providing the second request to the switch, receiving, by the switch proxy controller, a first reply that indicates the second identifier indicated in the second request, generating, based on the second identifier indicated in the first reply, a second reply that indicates the first identifier, and selecting the first switch fabric to receive the second reply based on the second identifier.

Switch proxy controller for switch virtualization

An optical communication system has a transmitter that generates an optical signal containing payload data and security data. The transmitter double modulates an optical signal where payload data is in-band and security data is out-of-band. If a man-in-the-middle attack occurs and the intrusion device is unable to detect the out-of-band signal, the intrusion device will not replicate the out-of-band signal thereby allowing the presence of the intrusion device to be detected.

Systems and methods for detecting network intrusion devices

Logical ports allow multiple customers to be connected to and to receive different services over a common physical port of a packet forwarding device. Such logical ports allow for customer separation and may be created based on VLAN ID and MPLS labels. In one embodiment, each service provided via a packet forwarding device is associated with a unique logical port. The logical port may span multiple physical ports.

Logical port system and method

A system and method provide transparent LAN services in a metro-WAN environment to extend enterprise LANs over metro and wide area networks. The transparent LAN services generally provide customers with a layer two Ethernet connectivity with MAC learning capabilities.

System and method for providing transparent LAN services

The disclosed network includes two rings, wherein a first ring transmits data in a clockwise direction, and the other ring transmits data in a counterclockwise direction. The traffic is removed from the ring by the destination node. During normal operations (i.e., all spans operational), data between nodes can flow on either ring. Thus, both rings are fully utilized during normal operations. The nodes periodically test the bit error rate of the links (or the error rate is constantly calculated) to detect a fault in one of the links. The detection of such a fault sends a broadcast signal to all nodes to reconfigure a routing table within the node so as to identify the optimum routing of source traffic to the destination node after the fault.

Utilizing bandwidth in ring network using path cost and protection techniques

Switch for dynamically rerouting traffic due to detection of faulty link

An automatic network topology identification technique is described herein. Each node in the network periodically or constantly transmits its unique address to its neighboring node. Once a node receives a different message from its neighbor, the node identifies a topology change in the network. In one embodiment, a current topology is associated with a session number. When a change in the topology is detected, the detecting node increments the session number and broadcasts the change in topology. The other nodes, detecting the changed session number, now know that there has been a change in the network. In response, the nodes in the network modify routing tables and other information stored at the node related to the topology. In one embodiment, the technique is used to reassign shortened addresses to each device on the network to support a dual-addressing mode of the network. The dual addressing mode substitutes reduced-length addresses (referred to as short addresses) for standard addresses (referred to as long addresses) for traffic whose source or destination is internal to a given virtual network topology. The required length of short addresses used for a given virtual topology is dependent on the number of devices reachable within the topology.

Automatic network topology identification by nodes in the network

Routing switch detecting change in session identifier before reconfiguring routing table

The disclosed network includes two rings, wherein a first ring transmits data in a clockwise direction, and the other ring transmits data in a counterclockwise direction. The traffic is removed from the ring by the destination node. During normal operations (i.e., all spans operational), data between nodes flows on the ring that would provide the minimum number of hops to the destination node. Thus, both rings are fully utilized during normal operations. The nodes periodically test the bit error rate of the links (or the error rate is constantly calculated) to detect a fault in one of the links. The detection of such a fault sends a broadcast signal to all nodes to reconfigure a routing table within the node so as to identify the optimum routing of source traffic to the destination node after the fault. Since the available links will now see more data traffic due to the failed link, traffic designated as 'unprotected' traffic is given lower priority and may be dropped or delayed in favor of the 'protected' traffic. Specific techniques are described for identifying a failed link, communicating the failed link to the other nodes, differentiating between protected and unprotected classes of traffic, and updating the routing tables.

Dynamically allocated ring protection and restoration technique

A dual addressing mode is described in which reduced-length addresses (referred to as short addresses) are substituted for standard addresses (referred to as long addresses) for traffic whose source or destination is internal to a given virtual network topology. The required length of short addresses used for a given virtual topology is dependent on the number of devices reachable within the topology. For a virtual topology with less than 256 addressable devices, for example, 8-bit short addresses can be used. When a node within the virtual network sees a packet with a short destination address in the header, the node understands the address to be within the virtual network and routes the packet accordingly. If a source address is a short address, the virtual network can identify the source within the virtual network. For packets originating in the virtual network whose destination is also in the virtual network, both the source and destination addresses can be short addresses. Thus, devices within a virtual network topology are addressable in a dual manner on the data link layer and/or network layer by traffic flowing internal to, or private to, the virtual network. Also described is a technique for automatically assigning source addresses to devices within the virtual network.

Dual-mode virtual network addressing

The disclosed network includes two rings, wherein a first ring transmits data in a clockwise direction, and the other ring transmits data in a counterclockwise direction. The traffic is removed from the ring by the destination node. During normal operations (i.e., all spans operational), data between nodes flows on the ring that would provide the minimum number of hops to the destination node. Thus, both rings are fully utilized during normal operations. The nodes periodically test the bit error rate of the links (or the error rate is constantly calculated) to detect a fault in one of the links. The detection of such a fault sends a broadcast signal to all nodes to reconfigure a routing table within the node so as to identify the optimum routing of source traffic to the destination node after the fault. Since the available links will now see more data traffic due to the failed link, traffic designated as &ldquo;unprotected&rdquo; traffic is given lower priority and may be dropped or delayed in favor of the &ldquo;protected&rdquo; traffic. Specific techniques are described for identifying a failed link, communicating the failed link to the other nodes, differentiating between protected and unprotected classes of traffic, and updating the routing tables.

Selecting a routing direction in a communications network using a cost metric

Growing community of inventors

Mountain View, CA, United States of America

Vinay K Bannai