The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Mar. 12, 2024

Filed:

Feb. 25, 2020
Applicant:

Juniper Networks, Inc., Sunnyvale, CA (US);

Inventors:

Pranavadatta D N, Bangalore, IN;

Aniket G. Daptari, San Jose, CA (US);

Carlo Contavalli, Redwood City, CA (US);

Prasad Miriyala, San Jose, CA (US);

Kiran K N, Bangalore, IN;

Prasannaa Vengatesan T S, Bangalore, IN;

Venkatesh Velpula, Bangalore, IN;

Assignee:

Juniper Networks, Inc., Sunnyvale, CA (US);

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
H04L 9/40 (2022.01); G06F 9/455 (2018.01); H04L 49/25 (2022.01); H04L 61/5007 (2022.01); H04L 69/22 (2022.01); H04L 69/324 (2022.01); H04L 101/622 (2022.01);
U.S. Cl.
CPC ...
H04L 63/0272 (2013.01); G06F 9/45558 (2013.01); H04L 49/25 (2013.01); H04L 61/5007 (2022.05); H04L 69/22 (2013.01); H04L 69/324 (2013.01); G06F 2009/45595 (2013.01); H04L 2101/622 (2022.05);
Abstract

Techniques are disclosed for a network device to preserve packet flow information across bump-in-the-wire (BITW) firewalls. For example, a method comprises receiving, by a network device, a packet. The method also comprises determining, by the network device, that the packet matches a packet flow that is associated with an action to redirect the packet to a firewall configured as a bump-in-the-wire. The method further comprises, in response to the determination: modifying, by the network device, a Media Access Control (MAC) address field of a layer 2 (L2) packet header with a flow identifier of the packet flow; sending, by the network device, the packet to the firewall; receiving, by the network device, the packet from the firewall; and recovering, by the network device, the packet flow by modifying the packet according to the flow identifier in the packet to restore the L2 packet header of the packet.


Find Patent Forward Citations

Loading…