公开(公告)号：US11811641B1

公开(公告)日：2023-11-07

申请号：US16826002

申请日：2020-03-20

Applicant: Juniper Networks, Inc.

Inventor： Shraddha Hegde ,  Antoni B Przygienda ,  Salih K A ,  Harsha Lakshmikanth

IPC: G06F15/173 ,  H04L45/02 ,  H04L41/12 ,  H04L45/00 ,  H04L45/28 ,  H04L9/40

CPC classification number: H04L45/02 ,  H04L41/12 ,  H04L45/04 ,  H04L45/22 ,  H04L45/28 ,  H04L45/32 ,  H04L63/1408 ,  H04L12/4604 ,  H04L45/32 ,  H04L63/1458 ,  H04L41/0654 ,  H04L63/14 ,  H04L63/1408 ,  H04L63/1416 ,  H04L63/1425 ,  H04L63/1433

Abstract: A secure IGP topology or other link state topology can be implemented by a network security unit that runs in a centralized environment on servers separate from a network associated with the IGP topology. The network security unit acquires the topology information, such as by participating in IGP or through border gateway protocol with link state (BGP-LS). The network security unit detects possible network problems, such as indicators of potential network attacks. Once an indicator of a potential network attack is detected, the network security unit identifies the node that is compromised. Once the compromised node is identified, the network security unit can report the node for manual or automated intervention. In some aspects, the network security unit can isolate the compromised node by shutting down links connected to the compromised node.

公开(公告)号：US20230066595A1

公开(公告)日：2023-03-02

申请号：US18045565

申请日：2022-10-11

Applicant: Juniper Networks, Inc.

Inventor： Shraddha HEGDE ,  Salih K A

IPC: H04L45/00 ,  H04L45/42 ,  H04L69/22 ,  H04L45/745 ,  H04L45/741 ,  H04L45/24

Abstract: A network device may receive policy data identifying a first segment routing (SR) policy and a second SR policy. The first SR policy may be associated with a first path through a network and a first next hop, and the second SR policy may be associated with a second path through the network and a second next hop. The network device may advertise, to another device, reachability associated with the first next hop and the second next hop, and may receive, from the other device, a packet with a header. The network device may determine, from the header, data identifying the first next hop or the second next hop, without performing a lookup, and may cause the packet to be routed to a destination address, via the first path or the second path, based on the policy data associated with the first next hop or the second next hop.

公开(公告)号：US11502939B2

公开(公告)日：2022-11-15

申请号：US17248905

申请日：2021-02-12

Applicant: Juniper Networks, Inc.

Inventor： Shraddha Hegde ,  Salih K A

IPC: H04L45/00 ,  H04L45/42 ,  H04L69/22 ,  H04L45/745 ,  H04L45/741 ,  H04L45/24

Abstract: A network device may receive policy data identifying a first segment routing (SR) policy and a second SR policy. The first SR policy may be associated with a first path through a network and a first next hop, and the second SR policy may be associated with a second path through the network and a second next hop. The network device may advertise, to another device, reachability associated with the first next hop and the second next hop, and may receive, from the other device, a packet with a header. The network device may determine, from the header, data identifying the first next hop or the second next hop, without performing a lookup, and may cause the packet to be routed to a destination address, via the first path or the second path, based on the policy data associated with the first next hop or the second next hop.

公开(公告)号：US20240187335A1

公开(公告)日：2024-06-06

申请号：US18442809

申请日：2024-02-15

Applicant: Juniper Networks, Inc.

Inventor： Shraddha HEGDE ,  Salih K A

IPC: H04L45/00 ,  H04L45/24 ,  H04L45/42 ,  H04L45/741 ,  H04L45/745 ,  H04L69/22

CPC classification number: H04L45/20 ,  H04L45/24 ,  H04L45/42 ,  H04L45/741 ,  H04L45/745 ,  H04L69/22

Abstract: A network device may receive policy data identifying a first segment routing (SR) policy and a second SR policy. The first SR policy may be associated with a first path through a network and a first next hop, and the second SR policy may be associated with a second path through the network and a second next hop. The network device may advertise, to another device, reachability associated with the first next hop and the second next hop, and may receive, from the other device, a packet with a header. The network device may determine, from the header, data identifying the first next hop or the second next hop, without performing a lookup, and may cause the packet to be routed to a destination address, via the first path or the second path, based on the policy data associated with the first next hop or the second next hop.

公开(公告)号：US20230327974A1

公开(公告)日：2023-10-12

申请号：US18327392

申请日：2023-06-01

Applicant: Juniper Networks, Inc

Inventor： Kiran KUSHALAD ,  Rajendra Prasad BOLLAM ,  Rajesh Shetty MANUR ,  Salih K A ,  Shraddha HEGDE ,  Sri Karthik Goud GADELA ,  Swamy Sadashivaiah KANANDA

IPC: H04L45/02 ,  H04L45/00 ,  H04L45/74

CPC classification number: H04L45/02 ,  H04L45/20 ,  H04L45/74 ,  H04L2212/00

Abstract: A first network device may receive an advertisement that includes a prefix for a second network device, wherein the advertisement is destined for a third network device. The first network device may determine, based on a network topology, whether a next hop is one hop away or multiple hops away. The first network device may selectively modify the advertisement to include a first segment identifier, based on the next hop being one hop away and to generate a first modified advertisement, or may modify the advertisement to include a second segment identifier, based on the next hop being multiple hops away and to generate a second modified advertisement. The first network device may forward the first modified advertisement or the second modified advertisement toward the third network device.

公开(公告)号：US11483242B2

公开(公告)日：2022-10-25

申请号：US16909592

申请日：2020-06-23

Applicant: Juniper Networks, Inc.

Inventor： Salih K A ,  Shraddha Hegde

IPC: H04L45/745 ,  H04L45/02 ,  H04L45/12 ,  H04L45/50

Abstract: Techniques are described for providing end-to-end segment routing paths across metropolitan area networks. For example, a method comprises receiving, by an area border router (ABR) connected to one or more metropolitan area networks and a core network, a packet including a segment routing label stack including at least a label of the ABR, a context label associated with a routing instance of the ABR, and a subsequent label identifying a device in the segment routing path, determining, from a lookup of the context label in the metro routing table, a table next hop to the core routing table (or metro routing table); in response to determining the table next hop, determining, from a lookup of the subsequent label in the core routing table (or metro routing table), a next hop in the segment routing path; and sending, by the ABR, the packet toward the device in the segment routing path.

公开(公告)号：US11909629B2

公开(公告)日：2024-02-20

申请号：US18045565

申请日：2022-10-11

Applicant: Juniper Networks, Inc.

Inventor： Shraddha Hegde ,  Salih K A

IPC: H04L45/00 ,  H04L45/42 ,  H04L69/22 ,  H04L45/745 ,  H04L45/741 ,  H04L45/24

CPC classification number: H04L45/20 ,  H04L45/24 ,  H04L45/42 ,  H04L45/741 ,  H04L45/745 ,  H04L69/22

Abstract: A network device may receive policy data identifying a first segment routing (SR) policy and a second SR policy. The first SR policy may be associated with a first path through a network and a first next hop, and the second SR policy may be associated with a second path through the network and a second next hop. The network device may advertise, to another device, reachability associated with the first next hop and the second next hop, and may receive, from the other device, a packet with a header. The network device may determine, from the header, data identifying the first next hop or the second next hop, without performing a lookup, and may cause the packet to be routed to a destination address, via the first path or the second path, based on the policy data associated with the first next hop or the second next hop.

公开(公告)号：US11706121B2

公开(公告)日：2023-07-18

申请号：US17448117

申请日：2021-09-20

Applicant: Juniper Networks, Inc.

Inventor： Kiran Kushalad ,  Rajendra Prasad Bollam ,  Rajesh Shetty Manur ,  Salih K A ,  Shraddha Hegde ,  Sri Karthik Goud Gadela ,  Swamy Sadashivaiah Kananda

IPC: H04L45/02 ,  H04L45/12 ,  H04L45/42 ,  H04L45/00 ,  H04L45/74

CPC classification number: H04L45/02 ,  H04L45/20 ,  H04L45/74 ,  H04L2212/00

Abstract: A first network device may receive an advertisement that includes a prefix for a second network device, wherein the advertisement is destined for a third network device. The first network device may determine, based on a network topology, whether a next hop is one hop away or multiple hops away. The first network device may selectively modify the advertisement to include a first segment identifier, based on the next hop being one hop away and to generate a first modified advertisement, or may modify the advertisement to include a second segment identifier, based on the next hop being multiple hops away and to generate a second modified advertisement. The first network device may forward the first modified advertisement or the second modified advertisement toward the third network device.

公开(公告)号：US20230091393A1

公开(公告)日：2023-03-23

申请号：US17448117

申请日：2021-09-20

Applicant: Juniper Networks, Inc.

Inventor： Kiran KUSHALAD ,  Rajendra Prasad BOLLAM ,  Rajesh Shetty MANUR ,  Salih K A ,  Shraddha HEGDE ,  Sri Karthik Goud GADELA ,  Swamy Sadashivaiah KANANDA

IPC: H04L12/751 ,  H04L12/741 ,  H04L12/733

Abstract: A first network device may receive an advertisement that includes a prefix for a second network device, wherein the advertisement is destined for a third network device. The first network device may determine, based on a network topology, whether a next hop is one hop away or multiple hops away. The first network device may selectively modify the advertisement to include a first segment identifier, based on the next hop being one hop away and to generate a first modified advertisement, or may modify the advertisement to include a second segment identifier, based on the next hop being multiple hops away and to generate a second modified advertisement. The first network device may forward the first modified advertisement or the second modified advertisement toward the third network device.

公开(公告)号：US20160261506A1

公开(公告)日：2016-09-08

申请号：US14657147

申请日：2015-03-13

Applicant: Juniper Networks, Inc.

Inventor： Shraddha Hegde ,  Salih K A

IPC: H04L12/803 ,  H04L12/751

CPC classification number: H04L47/125 ,  H04L45/02 ,  H04L45/025 ,  H04L45/04

Abstract: In general, techniques are described for managing routing information in a hub-and-spoke network in a manner that reduces flooding of link information. A hub router of the hub-and-spoke network including a memory and a processor may perform the techniques. The memory may be configured to store a representation of a topology of the hub-and-spoke network. The processor may be configured to utilize a separate instance of a multi-instance version of a link state protocol to communicate with each of a plurality of spoke routers of the hub-and-spoke network. Each separate instance of the multi-instance version of the link state protocol may include the hub router and a different one of the plurality of spoke routers. The processor may process link state advertisements from the separate instances of the multi-instance version of the link state protocol to maintain the representation of the topology of the hub-and-spoke network.

Abstract translation: 通常，描述了以减少链接信息的洪泛的方式在中心和分支网络中管理路由信息的技术。 包括存储器和处理器的中心辐射网络的集线器路由器可以执行这些技术。 存储器可以被配置为存储中心辐射网络的拓扑的表示。 处理器可以被配置为利用链路状态协议的多实例版本的单独实例来与中心辐射网络的多个分支路由器中的每一个进行通信。 链路状态协议的多实例版本的每个单独的实例可以包括集线器路由器和多个辐条路由器中的不同的一个。 处理器可以处理来自链路状态协议的多实例版本的单独实例的链路状态通告，以维护中心辐射网络的拓扑的表示。