Nicira, Inc.

Cisco Technology, Inc.

Brocade Communications Systems, Inc.

Avago Technologies International Sales Pte. Limited

Brocade Communication Systems LLC

Vivek Agarwal

Ganesan Chandrashekhar

Balaji Sundararajan

Ram Dular Singh

Rahul Korivi Subramaniyam

Howard Wang

Om Prakash Suthar

Nithin Bangalore Raju

Anand K Oswal

Aeneas Sean Dodd-Noble

Alexander Tessmer

Akshay Katrekar

Ankur Kumar Sharma

Subin Cyriac Mathew

Preety Mordani

Srilatha Tangirala

Gaurang Rajeev Mokashi

Mukesh Hira

Abhishek Goliya

Chandramouli Balasubramanian

Giorgio Valentini

Ajeet Pal Singh Gill

Venkatraman Venkatapathy

Rajiv Asati

Ryo Watanabe

Madhuri Kolli

Khalil A Jabr

Raghavendra Suryanarayanarao Vidyashankar

Avinash Ashok Kumar Chiganmi

Xiaohu Wang

Raghavendra Vidyashankar Suryanarayanarao

Kashyap Tavarekere Ananthapadmanabha

Samir D Thoria

Hongwei Zhu

Satish Mahadevan

Ankur Bhargava

Prabahar Radhakrishnan

Yin Lin

Bhairav Dutia

Shashank Ram

Sairam Venugopal

Anand Kumar

Sami Boutros

Pankaj K Jha

Mitri Halabi

Ravi Kiran Chintallapudi

Santanu Dasgupta

Eswara S P Chinthalapati

Arun Gunasekaran

Ramakumara Kariyappa

Rajaneesh Sudhakar Shetty

Jeevan Sharma

Sheikh Qumruzzaman

Rahul Hardikar

Subhash Kodnad

Chethan Channappa

Arvindsrinivasan Lakshminarasimhan

Ananda Rajagopal

Ananya Raval

Devendra Kumar Vishwakarma

Harish A Kapadia

Carlos M Pignataro

Jayant Jain

Pankaj Thakkar

Anirban Sengupta

Fabio Rodolfo Maino

Gangadharan Byju Pularikkal

Su Wang

Saravanan Radhakrishnan

Arghya T Mukherjee

Laxmikantha Reddy Ponnuru

Darrin Joseph Miller

Ravi Sankar Mantha

Einar Nilsen-Nygaard

Vaibhav Diwakar Kulkarni

Aditya Anil Gokhale

Saswat Praharaj

Michael Yeung

Hamzah Kardame

Alec Hothan

Elie El Ajaltouni

Ajay Kalambur

Santhosh Shenoy Panambur

Chandragupta Ganguly

Jegan Kumar Somi Ramasamy Subramanian

John Wei-I Wu

Jean-Marc Barozet

Amarnath Sury Arvind

Alberto Rodriguez Natal

Gokul Krishnan

Filipe Alexandre Da Silva Rodrigues

Aastha Verma

Yves Jean-René Do Régo

Narendra Sharma

Rompicherla Sai Pavan Kumar

Eswara SP Chinthalapati

In one embodiment, a method includes onboarding, by an edge router, a first tenant from a network management system and determining, by the edge router, a mapping of a tenant identifier associated with the first tenant to a controller identifier associated with a controller. The method also includes reserving, by the edge router, a port number in a kernel for the first tenant and inserting, by the edge router, the tenant identifier into a first control packet. The method further includes communicating, by the edge router, the first control packet to the controller via an encrypted control connection during a first peering session. The first peering session shares the encrypted control connection with a second peering session.

Systems and methods for sharing a control connection

Systems, methods, and computer-readable media for interconnecting SDWANs through segment routing. A first SDWAN and a second SDWAN of a SDWAN fabric can be identified. A segment routing domain that interconnects the first SDWAN and the second SDWAN can be formed across a WAN underlay of the SDWAN fabric. Data transmission between the first SDWAN and the second SDWAN can be controlled by performing segment routing through the segment routing domain formed between the first SDWAN and the second SDWAN.

Policy plane integration across multiple domains

Systems, methods, and computer-readable media for performing threat remediation through a switch fabric of a virtualized network environment. Data traffic passing into a virtualized network environment including a plurality of virtual machines running on a switch fabric is monitored. A network threat introduced through at a least a portion of the data traffic is identified at the switch fabric. One or more remedial measures are performed in the network environment based on the identification of the network threat in the virtualized network environment.

Intelligent quarantine on switch fabric for physical and virtualized infrastructure

Systems and methods provide for creating a network device hierarchy among a plurality of nodes. The network device hierarchy may include a plurality of geography-based groups defined by a corresponding number of geolocations. The operations further include associating each of the plurality of geography-based groups with a plurality of different configuration intents, associating each of the plurality of nodes with one of the plurality of geography-based groups, and deploying the plurality of nodes based on their respective one of the geolocations.

Geolocation-based automatic configuration of network devices

In one example, a first connectivity request for a first network connection between a user equipment and a first network is obtained. A control plane serving gateway node for the first network connection is selected. The control plane serving gateway node is co-located with a control plane packet data network gateway node configured to support a second network connection between the user equipment and a second network that is different from the first network. A second connectivity request for the second network connection is obtained. The second network connection is established with the control plane serving gateway node and the control plane packet data network gateway node.

Optimized serving gateway node selection for interworking networks

Techniques for providing a standardized interface that is configured to provide application developers with ways for interacting with different wide area network controllers. A standardized interface may include an application programming interface (API) server that can receive a connectivity request associated with an application that is to be hosted on an application orchestration system. The API server may determine, based at least in part on the connectivity request, a vendor network to be used by the application to send traffic to a remote service. Based at least in part on determining the vendor network, the API server may translate the connectivity request into a first format that is understandable by a controller of the vendor network. The API server may also provide the connectivity request in the first format to the controller of the vendor network such that a path through the vendor network can be determined.

Standardized interface for wide area network programming

A method for allocating resources of a virtual controller is disclosed. The method comprises: allocating resources of a virtual controller to a first tenant, wherein the first tenant is allocated a first tenant quantity of guaranteed resources of the virtual controller and a second tenant is allocated a second tenant quantity of guaranteed resources of the virtual controller; determining that resources requested by the first tenant are greater than the first tenant quantity of guaranteed resources; determining that the virtual controller has unutilized resources sufficient to at least partially provide additional resources beyond the first tenant quantity of guaranteed resources to the first tenant; and temporarily provisioning the additional resources to the first tenant, wherein the additional resources are greater than the first tenant quantity of guaranteed resources.

Tenant fairness in a multi-tenant environment

In one embodiment, a method includes receiving one or more 5G software-defined wide area network (SD-WAN) policies, identifying one or more identity-based policies from the one or more 5G SD-WAN policies, communicating the identified one or more identity-based policies to one or more WAN routers, communicating one or more 5G bindings to the one or more WAN routers, and applying the identified one or more identity-based policies to one or more flows between the one or more WAN routers.

System and method for mapping policies to SD-WAN data plane

Symmetric networking techniques disclosed herein can be applied by gateway routers in cloud networks. The techniques can ensure that both outbound traffic received at a cloud from a branch device and return traffic directed from the cloud back to the branch device are processed by a same gateway router. The gateway router can use network address translation to insert IP addresses from an inside pool and an outside pool assigned to the router.

Symmetric networking for orphan workloads in cloud networks

The present technology pertains to receiving a tag associating at least one routing domain in an on-premises site with at least one virtual network in a cloud environment associated with a cloud service provider. The present technology also pertains to the automation of populating route and propagation tables with the cloud service provider.

Automated connectivity to cloud resources

Techniques for sharing the probing of software-as-a-service clouds among a cluster of routers are described herein. The techniques may include establishing a first path between a cluster of routers and an application infrastructure. Establishing a second path between the cluster of routers and the application infrastructure. Designating a first router in the cluster of routers to send probes over the first path to the application infrastructure. Designating a second router in the cluster of routers to send probes over the second path to the application infrastructure. Distributing, by the first router and to the cluster of routers, first routing performance data indicating a performance of the first path when communicating with the application infrastructure over the first path, distributing, by the second router and to the cluster of routers, second routing performance data indicating a performance of the second path when communicating with the application infrastructure over the second path.

Software-as-a-service probe aggregation in networks

A logical routing element (LRE) having multiple designated instances for routing packets from physical hosts (PH) to a logical network is provided. A PH in a network segment with multiple designated instances can choose among the multiple designated instances for sending network traffic to other network nodes in the logical network according to a load balancing algorithm. Each logical interface (LIF) of an LRE is defined to be addressable by multiple identifiers or addresses, and each LIF identifier or address is assigned to a different designated instance.

Address resolution using multiple designated instances of a logical router

Growing community of inventors

Campbell, CA, United States of America

Vivek Agarwal