Cisco Technology, Inc.

Yibin Yang

Liqin Dong

Chiajen Tsai

Chia Alex Tsai

Shyam N Kapadia

Munish Mehta

Rajagopalan Janakiraman

Yuchen Zhou

Praveen Jain

Debashis Patnala Rao

Alex Tsai

Norman William Finn

Vijay K Chander

Rick G Chang

Ronak K Desai

Rajesh Babu Nataraja

Saurabh Jain

Suran Saminda De Silva

Patnala Debashis Rao

Xinggang Zhou

Di Jin

Vipin Jain

Timothy J Kuik

Christian Sasso

Ankur Goyal

Siddharth Kasat

Pags Krishnamoorthy

Padmanabhan Krishnan

Vinay Parameswarannair

Manish Chandra Agrawal

Vijayan Ramakrishnan

Minjie Lin

Shivaranjani Sankara Krishnan

Hemanth Basappa Mallikarjunaswamy

Richard Stewart

Siu-Man Leung

Sumit Kala

Nagabhushan K Channabasappa

Weng Hong Chan

Dileep Kumar Devireddy

Lukas Krattiger

Nilesh Shah

Ashutosh Agrawal

Yuefeng Jiang

Fang Yang

Jeffrey Cai

Palathingal Frank

Xiaopu Zhang

Vijay Gopal Krishnan

Puto H Subagio

In one embodiment, a method comprises determining, by a first networking device, that a first subflow of a multipath transmission control protocol (MPTCP) connection has been established between a first internet protocol (IP) address of a first computing device and an IP address of a second computing device, wherein the first computing device is multihomed to the first networking device and a second networking device. The method also includes determining, by the first or second networking device, a request to establish a second subflow of the MPTCP connection between a second IP address of the first computing and the IP address of the second computing device. In addition, the method includes advertising, by the first networking device, a primary IP address (PIP) of the first networking device for the first subflow and advertising, by the second networking device, a PIP of the second networking device for the second subflow.

Differentiated multihomed route advertisement for multipath TCP

According to one or more embodiments of this disclosure, a network controller in a data center network establishes a translation table for in-band traffic in a data center network, the translation table resolves ambiguous network addresses based on one or more of a virtual network identifier (VNID), a routable tenant address, or a unique loopback address. The network controller device receives packets originating from applications and/or an endpoints operating in a network segment associated with a VNID. The network controller device translates, using the translation table, unique loopback addresses and/or routable tenant addresses associated with the packets into routable tenant addresses and/or unique loopback addresses, respectively.

Techniques for managing software defined networking controller in-band communications in a data center network

This disclosure describes techniques for providing virtual resources (e.g., containers, virtual machines, etc.) of a clustered application with information regarding a cluster of physical servers on which the distributed clustered application is running. A virtual resource that supports the clustered application is executed on a physical server of the cluster of physical servers. The virtual resource may receive an indication of a database instance (or other application) running on a particular physical server of the cluster of physical servers that is nearest the physical server. The database instance may be included in a group of database instances that are maintaining a common data set on respective physical servers of the group of physical servers. The virtual resource may then access the database instance on the particular physical server based at least in part on the database instance running on the particular server that is nearest the physical server.

Optimizing clustered applications in a clustered infrastructure

Aspects of the embodiments are directed to forming a virtual machine management (VMM) domain in a heterogeneous datacenter. Aspects can include mapping an endpoint group to multiple VMM domains, each VMM domain associated with one or more virtual machine management systems of a single type that each share one or more management system characteristics; instantiating a virtual switch instance, the virtual switch instance associated with a the VMM domain; and instantiating the endpoint group mapped to the VMM domain as a network component associated with the virtual switch instance.

Extending application tiers across a large-scale heterogeneous data center

A method for programming a MAC address table by a first leaf node in a network comprising a plurality of leaf nodes is provided. Each leaf node comprises one or more Virtual Tunnel End Points ('VTEPs') and instantiates a plurality of Virtual Routing and Forwarding elements ('VRFs'), with a corresponding Bridge Domain (&#x201c;BD&#x201d;) assigned to each VRF. The method includes obtaining information indicating one or more VTEP Affinity Groups (VAGs), each VAG comprising an identification of one VTEP per leaf node, obtaining information indicating assignment of each VRF to one of the VAGs, assigning each VAG to a unique Filtering Identifier (&#x201c;FID&#x201d;), thereby generating one or more FIDs, and programming the MAC address table, using FIDs instead of BDs, by populating the MAC address table with a plurality of entries, each entry comprising a unique combination of a FID and a MAC address of a leaf node.

Scalable handling of BGP route information in VXLAN with EVPN control plane

Presented herein are traffic pruning techniques that define the pruning at the group level. A software defined network (SDN) controller determines first and second endpoint groups (EPGs) of an SDN associated with the SDN controller. The SDN runs on a plurality of networking devices that interconnect a plurality of endpoints that are each attached to one or more host devices. The SDN controller determines a host-EPG mapping for the SDN, as well as a networking device-host mapping for the SDN. The SDN controller then uses the host-EPG mapping, the networking device-host mapping, and one or more group-based policies associated with traffic sent from the first EPG to the second EPG to compute hardware pruning policies defining how to prune multi-destination traffic sent from the first EPG to the second EPG. The hardware pruning policies are then installed in one or more of the networking devices or the host devices.

Group-based pruning in a software defined networking environment

The techniques presented herein use dynamic endpoint group (EPG) binding changes to facilitate cross-tenant resource sharing. A first node of a multi-tenant software defined network determines that an application on a first endpoint has initiated operation and needs temporary access to resources located at a second endpoint. The first and second endpoints are associated with first and second tenants, respectively, that are logically segregated from one another by the software defined network. The first node dynamically changes an initial EPG binding associated with the first endpoint to a second EPG binding that enables the first endpoint to temporarily directly access the resources at the second endpoint. The first node subsequently determines that the application on the first endpoint no longer needs access to the resources located at a second endpoint and, as such, changes the second EPG binding associated with the first endpoint back to the initial EPG binding.

Dynamic endpoint group binding for cross-tenant resource sharing in software defined networks

In accordance with one example embodiment, there is provided a system configured for virtual local area network (VLAN) blocking on a virtual port channel (vPC) member link to handle discrepant virtual network instance (VNI) to VLAN mappings. In other embodiments, the system can be configured for providing Virtual Switch Interface Discovery Protocol (VDP) and virtual switch enhancements to accommodate discrepant VNI to VLAN mappings. In another example embodiment, an apparatus is provided that includes a processor, and a memory coupled to the processor, where the apparatus is configured such that if a server is connected through a virtual port channel, a VDP is used to notify the server of different VNI to VLAN mappings. In another embodiment, the apparatus can extend a VDP Filter Info Field to carry a set of VLANs mapped to a VNI, keyed by leaf MAC addresses that serve as bridge identifiers.

Automatic resolution of virtual network instance to VLAN mapping conflicts in dual-homed deployments in a dynamic fabric automation network architecture

Coexistence and migration of legacy and VXLAN networks may be provided. A first anchor leaf switch and a second anchor leaf switch may detect that they can reach each other over a Virtual Extensible Local Area Network (VXLAN) overlay layer 2 network. In response to detecting that they can reach each other over the VXLAN, the second anchor leaf switch may block VLANs mapped to the VXLAN's VXLAN Network Identifier (VNI) on the second anchor leaf switch's ports connecting to spine routers. In addition, the first anchor leaf switch and the second anchor leaf switch may detect that they can reach each other over a physical layer 2 network. In response to detecting that they can reach each other over a physical layer 2 network, the second anchor leaf switch may block Virtual Extensible Local Area Network (VXLAN) segments at the second anchor leaf switch.

Coexistence and migration of legacy ethernet and overlay networks

In one embodiment, a multiple spanning tree (MST) region is defined in a network, where the MST region includes a plurality of network nodes interconnected by links. A MST cluster is defined within the MST region, where the MST cluster includes a plurality of network nodes selected from the plurality of network nodes of the MST region. A network node of the MST cluster generates one or more MST bridge protocol data units (BPDUs) that present the MST cluster as a single logical entity to network nodes of the MST region that are not included in the MST cluster, yet enables per-multiple spanning tree instance (per-MSTI) load balancing of traffic across inter-cluster links that connect network nodes included in the MST cluster and network nodes of the MST region that are not included in the MST cluster.

Level of hierarchy in MST for traffic localization and load balancing

Microsegmentation in a heterogeneous software-defined network can be performed by classifying endpoints associated with a first virtualized environment into respective endpoint groups based on respective attributes, and classifying endpoints associated with a second virtualized environment into respective security groups based on respective attributes. Each respective endpoint group can correspond to a respective security group having the same attribute. Each respective endpoint group and corresponding security group can be associated with a respective policy model defining rules for processing associated traffic. Each of the respective security groups can be used to generate a respective network attribute endpoint group, which can include the network addresses of those endpoints in the respective security group. Each respective network attribute endpoint group can inherit the policy model of the respective endpoint group corresponding to the respective security group. Traffic between the endpoints can then be processed based on the various classifications and associated rules.

Microsegmentation in heterogeneous software defined networking environments

Growing community of inventors

San Jose, CA, United States of America

Yibin Yang