公开(公告)号：US12021740B2

公开(公告)日：2024-06-25

申请号：US17305117

申请日：2021-06-30

申请人： Juniper Networks, Inc.

发明人： Prasad Miriyala ,  Wen Lin ,  Suresh Palguna Krishnan ,  SelvaKumar Sivaraj ,  Kumuthini Ratnasingham

IPC分类号： G06F15/16 ,  H04L12/46 ,  H04L45/00 ,  H04L45/586 ,  H04L45/74

CPC分类号： H04L45/34 ,  H04L12/4641 ,  H04L45/566 ,  H04L45/586 ,  H04L45/74

摘要： A plurality of switches may be arranged according to a spine and leaf topology in which each spine switch is connected to all leaf switches. A leaf switch includes a memory configured to store a plurality of policies, each of the plurality of policies being associated with a respective source identifier value and a respective destination address; a network interface communicatively coupled to one of the spine switches; and a processor implemented in circuitry and configured to: receive a packet from the spine switch via the network interface, the packet being encapsulated with a Virtual Extensible Local Area Network (VXLAN) header; extract a source identifier value from the VXLAN header; determine a destination address for the packet; determine a policy of the plurality of policies to apply to the packet according to the source identifier value and the destination address; and apply the policy to the packet.

公开(公告)号：US20240080268A1

公开(公告)日：2024-03-07

申请号：US18505070

申请日：2023-11-08

申请人： Juniper Networks, Inc.

发明人： Kireeti Kompella ,  Wen Lin ,  Kevin Wang

IPC分类号： H04L45/50 ,  H04L12/46 ,  H04L45/00 ,  H04L45/18 ,  H04L69/22

CPC分类号： H04L45/507 ,  H04L12/4633 ,  H04L45/18 ,  H04L45/20 ,  H04L45/22 ,  H04L69/22

摘要： In some cases, once Fast Reroute (FRR) has taken place (e.g., for MPLS protection), a further FRR is undesirable, and even detrimental. A mechanism to prevent a further FRR, once such a further FRR is determined to be potentially harmful, is described.

公开(公告)号：US20230126279A1

公开(公告)日：2023-04-27

申请号：US18146309

申请日：2022-12-23

申请人： Juniper Networks, Inc.

发明人： Wen Lin ,  John E. Drake

IPC分类号： H04L45/16 ,  H04L45/02 ,  H04L45/00 ,  H04L45/50 ,  H04L47/32

摘要： Techniques are described for providing fast reroute for BUM traffic in EVPN. For example, a first provider edge (PE) device, elected as a designated forwarder (DF) of an Ethernet segment, configures a backup path using a label received from a second PE device of the Ethernet segment (e.g., backup DF) that identifies the second PE device as a “protector” of the Ethernet segment. For example, a routing component of the DF configures within a forwarding component a backup path to the second PE device, e.g., installing the label and operation(s) within the forwarding component to cause the forwarding component to add the label to BUM packets received from a core network. Therefore, when an access link to the local CE device has failed, the DF reroutes BUM packets from the core network via the backup path to the second PE device, which sends the BUM packets to the CE device.

公开(公告)号：US10383027B1

公开(公告)日：2019-08-13

申请号：US15934794

申请日：2018-03-23

申请人： Juniper Networks, Inc.

发明人： SelvaKumar Sivaraj ,  Wen Lin ,  Ryan Bickhart ,  Prabakaran Arumugam

IPC分类号： H04L12/46 ,  H04L12/721 ,  H04W40/14 ,  H04L29/08 ,  H04W40/28 ,  H04L12/707 ,  H04W60/00

摘要： A provider edge device may receive a first MAC/IP route advertisement that identifies a MAC route, or a MAC and IP route, relating to an endpoint device. The provider edge device may generate and provide a MAC/IP route proxy advertisement based on the MAC route or the MAC and IP route, detect a potential decrease in reliability of the MAC route or the MAC and IP route, broadcast a request to verify the reliability of the MAC and IP route, determine whether the reliability of the MAC route, or the MAC and IP route, has decreased, and perform an action to cause withdrawal of the MAC/IP route proxy advertisement, or to cause a second MAC/IP route advertisement that identifies the MAC route, or the MAC and IP route, to be provided, based on determining whether the reliability of the MAC route, or the MAC and IP route, has decreased.

公开(公告)号：US10187290B2

公开(公告)日：2019-01-22

申请号：US15079250

申请日：2016-03-24

申请人： Juniper Networks, Inc.

发明人： Wen Lin ,  John E. Drake

IPC分类号： H04L12/751 ,  H04L12/721

摘要： The disclosed computer-implemented method for preventing tromboning in inter-subnet traffic within data center architectures may include (1) detecting, at a leaf node of a data center, a route advertisement that advertises a route to a spine node of another data center that interfaces with the data center, (2) identifying, at the leaf node, an IP identifier of the spine node included in the route advertisement, (3) determining, at the leaf node, that the route corresponds to the spine node based at least in part on the IP identifier identified in the route advertisement, and then in response to determining that the route corresponds to the spine node, (4) rejecting the route to the spine node at the leaf node such that the leaf node does not learn the route to the spine node. Various other methods, systems, and apparatuses are also disclosed.

公开(公告)号：US09900247B2

公开(公告)日：2018-02-20

申请号：US15012057

申请日：2016-02-01

申请人： Juniper Networks, Inc.

发明人： Selvakumar Sivaraj ,  Wen Lin ,  Ravi Shekhar ,  Vasudevan Venkatraman

IPC分类号： H04L12/721 ,  H04L29/12 ,  H04W48/16

CPC分类号： H04L45/66 ,  H04L61/103 ,  H04L61/2007 ,  H04L61/6022 ,  H04W48/16

摘要： A device may receive, via a first message, first route information for directing network traffic for a network. The first route information may identify a media access control (MAC) route corresponding to a MAC address associated with a host device connecting to a subnet of the network. The first route information may fail to include Internet protocol (IP)/MAC binding information associated with the host device. The device may transmit a request for IP/MAC binding information associated with the host device. The device may receive a response, to the request for IP/MAC binding information, identifying the IP/MAC binding information. The device may advertise, via a second message, second route information for directing network traffic for the network based on receiving the response identifying the IP/MAC binding information. The second route information may identify the IP/MAC binding information associated with the host device.

公开(公告)号：US20170163530A1

公开(公告)日：2017-06-08

申请号：US15436280

申请日：2017-02-17

申请人： Juniper Networks, Inc.

发明人： John E. Drake ,  Wen Lin ,  Vasudevan Venkatraman

IPC分类号： H04L12/721 ,  H04L12/723 ,  H04L12/741 ,  H04L12/46

CPC分类号： H04L45/66 ,  H04L12/4641 ,  H04L45/04 ,  H04L45/50 ,  H04L45/74

摘要： Techniques are described for signaling aliasing capability between routers in a multi-tenant data center that uses VPNs, such as Ethernet VPNs. In the multi-tenant data center, two or more PE routers may be connected to a CE router by a multi-homed L2 segment in an all-active mode. Aliasing refers to the ability of a PE router to signal that it can reach a given multi-homed L2 segment even when the PE router has learned no MAC addresses over that multi-homed L2 segment. The PE routers on the multi-homed L2 segment advertise aliasing capability using a route advertisement on a per-L2 segment basis. When the multi-tenant data center uses global VPN identifiers, no additional information is needed by a remote PE to build an ECMP next hop to the PE routers that support aliasing, and transmission of a route advertisement on a per-VPN basis may be suppressed.

公开(公告)号：US20160134528A1

公开(公告)日：2016-05-12

申请号：US14585841

申请日：2014-12-30

申请人： Juniper Networks, Inc.

发明人： Wen Lin ,  Vasudevan Venkatraman ,  John E. Drake

IPC分类号： H04L12/721 ,  H04L12/715 ,  H04L29/12 ,  H04L12/46

CPC分类号： H04L45/66 ,  H04L12/4641 ,  H04L45/04 ,  H04L45/50 ,  H04L45/74

摘要： Techniques are described for signaling aliasing capability between routers in a multi-tenant data center that uses VPNs, such as Ethernet VPNs. In the multi-tenant data center, two or more PE routers may be connected to a CE router by a multi-homed L2 segment in an all-active mode. Aliasing refers to the ability of a PE router to signal that it can reach a given multi-homed L2 segment even when the PE router has learned no MAC addresses over that multi-homed L2 segment. The PE routers on the multi-homed L2 segment advertise aliasing capability using a route advertisement on a per-L2 segment basis. When the multi-tenant data center uses global VPN identifiers, no additional information is needed by a remote PE to build an ECMP next hop to the PE routers that support aliasing, and transmission of a route advertisement on a per-VPN basis may be suppressed.

摘要翻译： 描述了用于在使用VPN的多租户数据中心（例如以太网VPN）中的路由器之间的信号混叠能力的技术。 在多租户数据中心中，两个或多个PE路由器可以以全主动模式通过多宿主L2段连接到CE路由器。 混淆是指PE路由器发信号通知其能够达到给定的多宿主L2段的能力，即使PE路由器在该多宿主L2段上没有学到MAC地址。 多宿主L2段上的PE路由器通过基于每个L2段的路由通告来通告混叠能力。 当多租户数据中心使用全球VPN标识符时，远程PE不需要额外的信息来构建支持混叠的PE路由器的ECMP下一跳，并且可以抑制基于每个VPN的路由通告的传输 。

公开(公告)号：US20240291753A1

公开(公告)日：2024-08-29

申请号：US18657426

申请日：2024-05-07

申请人： Juniper Networks, Inc.

发明人： Prasad Miriyala ,  Wen Lin ,  Suresh Palguna Krishnan ,  SelvaKumar Sivaraj ,  Kumuthini Ratnasingham

IPC分类号： H04L45/00 ,  H04L12/46 ,  H04L45/586 ,  H04L45/74

CPC分类号： H04L45/34 ,  H04L12/4641 ,  H04L45/566 ,  H04L45/586 ,  H04L45/74

摘要： A plurality of switches may be arranged according to a spine and leaf topology in which each spine switch is connected to all leaf switches. A leaf switch includes a memory configured to store a plurality of policies, each of the plurality of policies being associated with a respective source identifier value and a respective destination address; a network interface communicatively coupled to one of the spine switches; and a processor implemented in circuitry and configured to: receive a packet from the spine switch via the network interface, the packet being encapsulated with a Virtual Extensible Local Area
Network (VXLAN) header; extract a source identifier value from the VXLAN header; determine a destination address for the packet; determine a policy of the plurality of policies to apply to the packet according to the source identifier value and the destination address;
and apply the policy to the packet.

公开(公告)号：US20230095253A1

公开(公告)日：2023-03-30

申请号：US18060521

申请日：2022-11-30

申请人： Juniper Networks, Inc.

发明人： Wen Lin ,  Yi Zheng ,  Mukesh Kumar ,  Xichun Hong ,  SelvaKumar Sivaraj ,  Vamshi Krishna Voruganti ,  John E. Drake

IPC分类号： H04L45/28 ,  H04L12/46 ,  H04L41/0668

摘要： Techniques are described for providing fast reroute for traffic in EVPN-VXLAN. For example, a backup PE device of an Ethernet segment is configured with an additional tunnel endpoint address (“reroute tunnel endpoint address”) for a backup path associated with a second split-horizon group that is different than a tunnel endpoint address and first split-horizon group for another path used for normal traffic forwarding. The backup PE device sends the reroute tunnel endpoint address to a primary PE device of the Ethernet segment, which uses the reroute tunnel endpoint address to configure a backup path to the backup PE device over the core network. For example, the primary PE device may install the reroute tunnel endpoint address within its forwarding plane and one or more operations to cause the primary PE device to encapsulate a VXLAN header including the reroute tunnel endpoint address when rerouting the packet along the backup path.