-
公开(公告)号:US11962429B1
公开(公告)日:2024-04-16
申请号:US17979255
申请日:2022-11-02
Applicant: Cisco Technology, Inc.
Inventor: Balaji Sundararajan , Srilatha Tangirala , Ajeet Pal Singh Gill , Nithin Bangalore Raju , Ravi Kiran Chintallapudi , Pradeepan Kannawadi , Ganesh Devendrachar
Abstract: Techniques for virtualizing tenant transport interfaces configured to implement per-tenant network routing attribute differentiation in each tenant overlay of a multisite wide area network (WAN) and share the virtual transport interfaces between multi-tenant edge (MTE) devices providing transport services to tenant devices based on a defined tenant tier model. A Software-Defined Networking (SDN) controller may receive a physical transport interface and/or a device type associated with a tenant device. The SDN controller may determine a virtual transport interface for the tenant device based on a tier associated with the tenant. MTE device(s) may utilize the physical transport interface to establish sessions with other MTE device(s) in the WAN. The virtual transport interface may be utilized by MTE devices to implement and/or enforce network routing attributes when forwarding network traffic associated with the tenant via the sessions established between the MTE devices through the WAN.
-
公开(公告)号:US12095652B1
公开(公告)日:2024-09-17
申请号:US18328566
申请日:2023-06-02
Applicant: Cisco Technology, Inc.
Inventor: Balaji Sundararajan , Satish Kumar Mahadevan , Ramakumara Kariyappa , Ganesh Devendrachar , Arul Murugan Manickam , Samir D Thoria , Pritam Baruah , Deepa Rajendra Sangolli , Avinash Shah
IPC: H04L45/17 , H04L43/0817 , H04L45/24
CPC classification number: H04L45/17 , H04L43/0817 , H04L45/24
Abstract: Techniques are described for suppressing data plane traffic using a service monitoring policy for data plane control. If a service provided to a router becomes nonfunctional, preventing the router from being able to forward traffic to a next-hop device, data plane traffic from client devices on the data plane that requires the use of the nonfunctioning service is suppressed. Additionally, new communication pathways to the router that will use the nonfunctioning service are prevented from being established. Traffic is redirected to another router with a functioning service. Thus, traffic that may normally be directed to the router with the nonfunctioning service and not able to be forwarded (e.g., blackholing of data) can be forwarded to the other router.
-
公开(公告)号:US20250071060A1
公开(公告)日:2025-02-27
申请号:US18409701
申请日:2024-01-10
Applicant: Cisco Technology, Inc.
Inventor: Steven Wood , Balaji Sundararajan , Laxmikantha Reddy Ponnuru , Avinash Shah , Pritam Baruah , Venkatesh Nataraj , Ganesh Devendrachar
Abstract: Generally, Software-Defined Wide Area Networks (SD-WAN) generally do not support network segmentation. The concepts disclosed herein connects IPSec SD-WAN fabric to a Virtual Routing and Forwarding (VRF) router and make use of a Software Defined Cloud Interconnect (SDCI) Router to route traffic from IPSec SD-WAN to various cloud services from the SDCI Router in the fabric. The concepts disclosed herein also provides for tunnel multi-plexing that takes incoming and outgoing traffic and maps VPNs to any service VRF associated with the cloud based services.
-
公开(公告)号:US20240348554A1
公开(公告)日:2024-10-17
申请号:US18133975
申请日:2023-04-12
Applicant: Cisco Technology, Inc.
Inventor: Balaji Sundararajan , Ganesh Devendrachar , Avinash Shah , Preety Mordani , Satyajit Das , Michael John Moskal
Abstract: Techniques are described for avoiding data packet fragmentation in a routing device such as a router or network switch. Path Maximum Transport Unit (PMTU) values are monitored for a plurality of egress links of a networking device. A statistical analysis of fragmentation rates is performed. The statistical analysis can be performed on a per-link basis, per-flow basis or both per-link and per-flow basis. If the packet fragmentation rate of data flows through a particular egress link exceeds a determined threshold value, one or more data flows can be re-routed to a different egress link having a higher PMTU, thereby preventing data packet fragmentation.
-
公开(公告)号:US20250039089A1
公开(公告)日:2025-01-30
申请号:US18775523
申请日:2024-07-17
Applicant: Cisco Technology, Inc.
Inventor: Ganesh Devendrachar , Ajeet Pal Singh Gill , Balaji Sundararajan , Srilatha Tangirala , Satish Varadarajula , Satyajit Das
IPC: H04L45/76 , H04L45/24 , H04L47/125
Abstract: Techniques for automatically providing per tenant weighted DCMP over shared transport interfaces and automated flow has load balancing are described. The techniques may include onboarding, by an SD-WAN controller, the tenant with a resource profile to a first multi-tenant edge device, where the resource profile defines a traffic allowance per transport interface for the tenant on the first multi-tenant edge device. The SD-WAN controller receives, from the first multi-tenant edge device, information including a first weight per transport interface of the first multi-tenant edge device for the tenant. The SD-WAN controller transmits the information to a second multi-tenant device. The SD-WAN controller receives, from the second multi-tenant edge device, information including a second weight per transport interface of the second multi-tenant edge device, and transmits the information to the first multi-tenant edge device.
-
公开(公告)号:US20240146565A1
公开(公告)日:2024-05-02
申请号:US17979255
申请日:2022-11-02
Applicant: Cisco Technology, Inc.
Inventor: Ajeet Pal Singh Gill , Balaji Sundararajan , Srilatha Tangirala , Nithin Bangalore Raju , Ravi Kiran Chintallapudi , Pradeepan Kannawadi , Ganesh Devendrachar
Abstract: Techniques for virtualizing tenant transport interfaces configured to implement per-tenant network routing attribute differentiation in each tenant overlay of a multisite wide area network (WAN) and share the virtual transport interfaces between multi-tenant edge (MTE) devices providing transport services to tenant devices based on a defined tenant tier model. A Software-Defined Networking (SDN) controller may receive a physical transport interface and/or a device type associated with a tenant device. The SDN controller may determine a virtual transport interface for the tenant device based on a tier associated with the tenant. MTE device(s) may utilize the physical transport interface to establish sessions with other MTE device(s) in the WAN. The virtual transport interface may be utilized by MTE devices to implement and/or enforce network routing attributes when forwarding network traffic associated with the tenant via the sessions established between the MTE devices through the WAN.
-
公开(公告)号:US20240414094A1
公开(公告)日:2024-12-12
申请号:US18208165
申请日:2023-06-09
Applicant: Cisco Technology, Inc.
Inventor: Avinash Shah , Ganesh Devendrachar , Arul Murugan Manickam , Laxmikantha Reddy Ponnuru , Satyajit Das , Pritam Baruah
IPC: H04L47/36
Abstract: Techniques are described for detecting a change in Path Maximum Transfer Unit (PMTU) in a network and initiating a PMTU discovery process. A Bidirectional Forwarding Detection (BFD) data packet is generated having enhanced headers configured to record a largest packet sent value and a largest packet received value. The BFD data packet is sent from a first network device (such as a first router) to a second network device (such as a second router). A largest packet sent value and a largest packet received value are each recorded in the BFD data packet. If the largest data packet sent value is larger than the largest data packet received value, then a determination can be made that a path change has resulted in a reduction in PMTU which has resulted in either a data packet being fragmented, a data packet being dropped or both. A PMTU discovery can then be performed.
-
公开(公告)号:US12068959B1
公开(公告)日:2024-08-20
申请号:US18225487
申请日:2023-07-24
Applicant: Cisco Technology, Inc.
Inventor: Ganesh Devendrachar , Ajeet Pal Singh Gill , Balaji Sundararajan , Srilatha Tangirala , Satish Varadarajula , Satyajit Das
IPC: H04L45/76 , H04L45/24 , H04L47/125
CPC classification number: H04L45/76 , H04L45/24 , H04L47/125
Abstract: Techniques for automatically providing per tenant weighted DCMP over shared transport interfaces and automated flow has load balancing are described. The techniques may include onboarding the tenant to the local multi-tenant edge device associated with a tenant, where the resource profile defines a traffic allowance per transport interface for the tenant. Local weight per transport interface is applied. Information including local weight per transport interface is transmitted to a remote device via an SD-WAN controller. Information including a remote weight per transport interface of the remote device is received via the SD-WAN controller. Traffic is routed from the tenant based on local weight per transport interface of the local device and remote weight per transport interface of the remote device.
-
公开(公告)号:US20240223397A1
公开(公告)日:2024-07-04
申请号:US18608677
申请日:2024-03-18
Applicant: Cisco Technology, Inc.
Inventor: Balaji Sundararajan , Ajeet Pal Singh Gill , Srilatha Tangirala , Nithin Bangalore Raju , Ravi Kiran Chintallapudi , Pradeepan Kannawadi , Ganesh Devendrachar
Abstract: Techniques for virtualizing tenant transport interfaces configured to implement pertenant network routing attribute differentiation in each tenant overlay of a multisite wide area network (WAN) and share the virtual transport interfaces between multi-tenant edge (MTE) devices providing transport services to tenant devices based on a defined tenant tier model. A Software-Defined Networking (SDN) controller may receive a physical transport interface and/or a device type associated with a tenant device. The SDN controller may determine a virtual transport interface for the tenant device based on a tier associated with the tenant. MTE device(s) may utilize the physical transport interface to establish sessions with other MTE device(s) in the WAN. The virtual transport interface may be utilized by MTE devices to implement and/or enforce network routing attributes when forwarding network traffic associated with the tenant via the sessions established between the MTE devices through the WAN.
-
-
-
-
-
-
-
-