Google Inc.

Zhiwei Cen

Mark Lentczner

James Michael Bennett

Arivudainambi Appachi Gounder

Stephen Stuart

Joseph James Joshua Bailey

Josh James Joshua Bailey

Bolei Fu

The systems and methods described herein provide a mechanism to apply network functions to a packet. The packet received by a network switch from a host may be configured so that the packet may be transmitted and forwarded to a target destination with desired network function, such as desired security settings, traffic path control or policy enforcement. In one example, the system may include a network switch and a network controller. The packet from hosts may enter the network switch through network ports (Px). The packet may then be tunneled and further transmitted to a server insertion to add a service identifier for the packet. The packet with the service modifier is then transmitted to a service block over the network. The service block may apply specific network functions to be processed or already processed to the packets. Subsequently, the packet with the specific network functions may then routes to the target destination with the desired network functions.

Systems and methods for tunneling network traffic to apply network functions

This disclosure provides systems and methods for processing packets. A system can include first computing device, a second computing device, and a first packet forwarding device. Each of the first computing device and the second computing device can be communicatively coupled to a respective port of the first packet forwarding device. Each port of the first packet forwarding device can be assigned a unique MAC address. For a first packet received from the first computing device, the first packet forwarding device can be configured to determine that a destination MAC address of the first packet matches the MAC address assigned to the port on which the first packet was received, and to forward the first packet to the second computing device, responsive to the determination. For a second packet received from the second computing device, the first packet forwarding device can be configured to forward the second packet via the port whose MAC address matches a source MAC address of the second packet.

Systems and methods for processing packets in a computer network

The methods and systems described herein provide a mechanism to externalize network functions through a direct link between a network switch and an external packet processor. The network switch is configured to receive a packet directed to a destination node via a first network interface. The network switch is also configured to forward the received packet to a packet processor, via a second network interface, over a direct physical link between the network switch and the packet processor. The packet is forwarded with an identifier for a virtualized network function executing on the packet processor and a destination MAC address of the packet is different from a MAC address of the packet processor.

Systems and methods for externalizing network functions via packet trunking

Growing community of inventors

San Jose, CA, United States of America

Zhiwei Cen