公开(公告)号：US20130094350A1

公开(公告)日：2013-04-18

申请号：US13274230

申请日：2011-10-14

申请人： Subhasree Mandal ,  Subbaiah Venkata ,  Leon Poutievski ,  Amit Gupta ,  Min Zhu ,  Rajiv Ramanathan ,  James M. Wanderer ,  Joon Ong

发明人： Subhasree Mandal ,  Subbaiah Venkata ,  Leon Poutievski ,  Amit Gupta ,  Min Zhu ,  Rajiv Ramanathan ,  James M. Wanderer ,  Joon Ong

IPC分类号： H04L12/56 ,  H04L12/28 ,  H04L12/26

CPC分类号： H04L41/0668 ,  H04L41/12 ,  H04L45/28 ,  H04L45/38 ,  H04L45/42 ,  H04L45/64

摘要： Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for semi-centralized routing. In one aspect, a computer-implemented method receives a network protocol packet at a router adapted for routing data packets to one or more additional routers. The network protocol packet conforms to a routing protocol that provides distributed routing computation. The method also sends the network protocol packet, through a controller, to a selected one of a plurality of route control servers. The method also processes the network control packet at the selected route control server to generate a routing computation result that conforms to the routing protocol. The method also generates routing information based on the routing computation. The routing information conforms to a control protocol that provides centralized routing computation. The method also sends the routing information to the router for routing of data packets based on the control protocol.

摘要翻译： 方法，系统和装置，包括在计算机存储介质上编码的计算机程序，用于半集中式路由。 在一个方面，计算机实现的方法在适于将数据分组路由到一个或多个附加路由器的路由器处接收网络协议分组。 网络协议分组符合提供分布式路由计算的路由协议。 该方法还通过控制器将网络协议分组发送到多个路由控制服务器中的所选择的一个。 该方法还处理所选择的路由控制服务器上的网络控制分组，以生成符合路由协议的路由计算结果。 该方法还基于路由计算生成路由信息。 路由信息符合提供集中式路由计算的控制协议。 该方法还根据控制协议将路由信息发送给路由器进行路由数据包路由。

公开(公告)号：US08830820B2

公开(公告)日：2014-09-09

申请号：US13274230

申请日：2011-10-14

申请人： Subhasree Mandal ,  Subbaiah Venkata ,  Leon Poutievski ,  Amit Gupta ,  Min Zhu ,  Rajiv Ramanathan ,  James M. Wanderer ,  Joon Ong

发明人： Subhasree Mandal ,  Subbaiah Venkata ,  Leon Poutievski ,  Amit Gupta ,  Min Zhu ,  Rajiv Ramanathan ,  James M. Wanderer ,  Joon Ong

IPC分类号： H04L12/26 ,  H04L12/715

CPC分类号： H04L41/0668 ,  H04L41/12 ,  H04L45/28 ,  H04L45/38 ,  H04L45/42 ,  H04L45/64

摘要： Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for semi-centralized routing. In one aspect, a computer-implemented method receives a network protocol packet at a router adapted for routing data packets to one or more additional routers. The network protocol packet conforms to a routing protocol that provides distributed routing computation. The method also sends the network protocol packet, through a controller, to a selected one of a plurality of route control servers. The method also processes the network control packet at the selected route control server to generate a routing computation result that conforms to the routing protocol. The method also generates routing information based on the routing computation. The routing information conforms to a control protocol that provides centralized routing computation. The method also sends the routing information to the router for routing of data packets based on the control protocol.

摘要翻译： 方法，系统和装置，包括在计算机存储介质上编码的计算机程序，用于半集中式路由。 在一个方面，计算机实现的方法在适于将数据分组路由到一个或多个附加路由器的路由器处接收网络协议分组。 网络协议分组符合提供分布式路由计算的路由协议。 该方法还通过控制器将网络协议分组发送到多个路由控制服务器中的所选择的一个。 该方法还处理所选择的路由控制服务器上的网络控制分组，以生成符合路由协议的路由计算结果。 该方法还基于路由计算生成路由信息。 路由信息符合提供集中式路由计算的控制协议。 该方法还根据控制协议将路由信息发送给路由器进行路由数据包路由。

公开(公告)号：US08755389B1

公开(公告)日：2014-06-17

申请号：US13439748

申请日：2012-04-04

申请人： Leon Poutievski ,  Subhasree Mandal ,  Subbaiah Venkata ,  Amit Gupta ,  Joon Ong

发明人： Leon Poutievski ,  Subhasree Mandal ,  Subbaiah Venkata ,  Amit Gupta ,  Joon Ong

IPC分类号： H04L12/56

CPC分类号： H04L45/245 ,  H04L45/745

摘要： Methods, systems, and apparatus, including computer programs encoded on computer storage media, for semi-centralized routing. One of the methods includes receiving one or more routes and determining that a received route identifies a new set of paths different from each routing path group in a maintained set of routing path groups. A new routing path group is created that corresponds to the new set of paths. The new routing path group is assigned an identifier of the routing path group. The new routing path group is converted to a corresponding new flow path group. A flow path group that was converted from the routing path group is replaced on a network device with the converted new flow path group.

摘要翻译： 方法，系统和装置，包括在计算机存储介质上编码的计算机程序，用于半集中式路由。 其中一种方法包括接收一个或多个路由并且确定接收到的路由识别在维护的路由路由组集合中与每个路由路径组不同的新路径集合。 创建一个对应于新路径集的新路由路径组。 新路由路径组被分配了路由路径组的标识符。 新路由路径组被转换为相应的新的流路径组。 从路由路径组转换的流路径组在具有转换的新流路径组的网络设备上被替换。

公开(公告)号：US08792374B1

公开(公告)日：2014-07-29

申请号：US13314015

申请日：2011-12-07

申请人： Sushant Jain ,  Alok Kumar ,  James M. Wanderer ,  Aspi Homi Siganporia ,  Anand Raghuraman ,  Subhasree Mandal ,  Arjun Singh ,  Subbaiah Naidu Kotla Venkata

发明人： Sushant Jain ,  Alok Kumar ,  James M. Wanderer ,  Aspi Homi Siganporia ,  Anand Raghuraman ,  Subhasree Mandal ,  Arjun Singh ,  Subbaiah Naidu Kotla Venkata

IPC分类号： H04L12/26 ,  H04L12/56

CPC分类号： H04L47/10 ,  H04L45/42

摘要： Embodiments are directed towards managing network routes using a centralized service on behalf of a network of a plurality of forwarding devices. The centralized service develops a global view of the network based on information from the forwarding devices. The centralized service computes changes to the routing policy for each of the nodes. The centralized service then generates an operational command schedule that is distributed to the forwarding devices using a “make before break” sequence to ensure that transient black holes do not happen as the new routing policy is being implemented.

摘要翻译： 实施例涉及使用代表多个转发设备的网络的集中式服务来管理网络路由。 集中式业务基于转发设备的信息，构建了网络的全局视图。 集中式服务计算每个节点对路由策略的更改。 然后，集中式服务生成使用“make before break”序列分配给转发设备的操作命令调度，以确保在执行新的路由策略时不会发生暂时的黑洞。

公开(公告)号：US09716592B1

公开(公告)日：2017-07-25

申请号：US13157925

申请日：2011-06-10

申请人： Subhasree Mandal ,  Arjun Singh ,  Ashish Naik

发明人： Subhasree Mandal ,  Arjun Singh ,  Ashish Naik

IPC分类号： H04L9/32 ,  H04L29/08

CPC分类号： H04L9/3223 ,  H04L9/3242 ,  H04L45/24 ,  H04L67/1023 ,  H04L69/14

摘要： System and methods for efficiently distributing data packets in a multi-path network while maintaining flow affinity are provided. In one aspect, a system and method includes calculating hash values for distributing different flows, or sets of flows, of data packets received at a routing device. The hash value is calculated not only using information in the data packets, but also based on additional information that is determined based on an N-bit derived from the data packets. In some cases, calculating a hash value based on the additional information increases the entropy of the hashing function, thus enabling a routing device to distribute different flows of data packets over a greater number of network paths. Each routing device can derive a different, and randomly generated N-bit key while maintaining flow affinity for each received data packet in a given flow of data packets.

公开(公告)号：US08831010B1

公开(公告)日：2014-09-09

申请号：US13278107

申请日：2011-10-20

申请人： Subhasree Mandal ,  James Wanderer

发明人： Subhasree Mandal ,  James Wanderer

IPC分类号： H04L12/28

CPC分类号： H04L45/24 ,  H04L45/54 ,  H04L45/745

摘要： Techniques for multi-path routing of packets to a destination node based on multiple routing tables of a router device. In an embodiment, a router device includes port groups which each correspond to a different respective network path to the same destination node. In another embodiment, each routing engine of multiple routing engines in a router device routes packets to the destination node based on a different respective one of multiple routing tables. The routing tables may include respective entry sets which, at least with respect to routing packets to the destination node, dedicate each routing engine to a respective one of the port groups.

摘要翻译： 基于路由器设备的多个路由表将分组多路径路由到目的地节点的技术。 在一个实施例中，路由器设备包括各自对应于到相同目的地节点的不同相应网络路径的端口组。 在另一个实施例中，路由器设备中的多个路由引擎的每个路由引擎基于多个路由表中不同的相应一个路由分组到目的地节点。 路由表可以包括相应的入口集，其至少相对于到目的地节点的路由分组将每个路由引擎专用于相应的一个端口组。

公开(公告)号：US08769148B1

公开(公告)日：2014-07-01

申请号：US13192658

申请日：2011-07-28

申请人： Arjun Singh ,  Ashish Naik ,  Subhasree Mandal

发明人： Arjun Singh ,  Ashish Naik ,  Subhasree Mandal

IPC分类号： G06F15/173

CPC分类号： H04L45/24 ,  H04L45/021 ,  H04L45/54 ,  H04L45/7453 ,  H04L47/125

摘要： System and methods for efficiently distributing data packets in a multi-path network having a plurality of equal cost paths each having the same number of hops are provided. In one aspect, a system and method includes reordering the entries in the routing table of one or more peer routing devices, such that succeeding equal cost next hop routing devices that are interconnected in a Clos formation to the peer routing devices received unbiased traffic from each of the peer routing devices, thus enabling the succeeding next hop routing devices to distribute data traffic evenly over additional equal cost multiple hops further into the network.

摘要翻译： 提供了一种用于在具有多个具有相同跳数的等价成本路径的多路径网络中有效分配数据分组的系统和方法。 一方面，系统和方法包括重新排序一个或多个对等路由设备的路由表中的条目，使得在Clos形式中互连到对等路由设备的成功的等价成本下一跳路由设备从每个路由设备接收到无偏差业务 的对等路由设备，从而使后续的下一跳路由设备能够将数据流量均匀地分布到进一步进入网络的额外的等成本多跳中。

公开(公告)号：US20070011725A1

公开(公告)日：2007-01-11

申请号：US11320603

申请日：2005-12-30

申请人： Vasant Sahay ,  Biju Kunjukunju ,  Nirmalendu Das ,  Subhasree Mandal ,  David Levi ,  Manoj Guglani ,  Philippe Michelet ,  Ravi Kumar

发明人： Vasant Sahay ,  Biju Kunjukunju ,  Nirmalendu Das ,  Subhasree Mandal ,  David Levi ,  Manoj Guglani ,  Philippe Michelet ,  Ravi Kumar

IPC分类号： H04L9/32

CPC分类号： G06F21/00 ,  H04L63/0227 ,  H04L63/0272 ,  H04L63/08 ,  H04L63/102 ,  H04L63/105 ,  H04L63/145 ,  H04W12/06 ,  H04W12/08 ,  H04W12/12

摘要： A technique for providing secure network access is disclosed. In one particular exemplary embodiment, the technique may be realized as a method for providing secure network access. The method may comprise establishing a plurality of access zones in a network, wherein client devices assigned to different access zones have different access privileges and are isolated from one another. The method may also comprise assigning a client device to one of the plurality of access zones based on an assessment of a security context associated with the client device and a connection of the client device to the network.

摘要翻译： 公开了一种用于提供安全网络访问的技术。 在一个特定的示例性实施例中，该技术可以被实现为用于提供安全网络访问的方法。 该方法可以包括在网络中建立多个接入区域，其中分配给不同接入区域的客户端设备具有不同的访问特权并且彼此隔离。 该方法还可以包括基于与客户端设备相关联的安全上下文的评估和客户端设备到网络的连接来将客户端设备分配给多个接入区域中的一个。

公开(公告)号：US09166913B1

公开(公告)日：2015-10-20

申请号：US13586393

申请日：2012-08-15

申请人： Subhasree Mandal ,  Arjun Singh ,  Emilie Jeanne Anne Danna

发明人： Subhasree Mandal ,  Arjun Singh ,  Emilie Jeanne Anne Danna

IPC分类号： G06F15/173 ,  H04L12/801 ,  H04W28/02

CPC分类号： H04L47/10 ,  H04L47/29 ,  H04W28/02

摘要： Systems and methods are provided for allocating resources of a network among a plurality of traffic demands to optimize fairness and throughput. Fairness constraints and traffic commodity importance can be specified to control allocation.

摘要翻译： 提供了用于在多个业务需求中分配网络的资源以优化公平性和吞吐量的系统和方法。 可以指定公平约束和交通商品重要性来控制分配。

公开(公告)号：US08873567B1

公开(公告)日：2014-10-28

申请号：US13278111

申请日：2011-10-20

申请人： Subhasree Mandal ,  James Wanderer

发明人： Subhasree Mandal ,  James Wanderer

IPC分类号： H04L12/28 ,  H04L12/26 ,  G06F15/173

CPC分类号： H04L12/26 ,  G06F15/173 ,  H04L43/00 ,  H04L43/0876 ,  H04L49/50

摘要： Techniques for providing routing information of a first router device supporting multi-path routing from a second router device to a destination node. In an embodiment, multiple egress ports of the first router device are coupled to a second router device, where port groups of the second router device correspond to multiple network paths to the destination node. A routing engine of the first router device may forward packets to the destination node based on a set of entries in a routing table. In another embodiment, the set of entries defines for each of the multiple egress ports of the first router device a correspondence to only a respective one of the port groups of the second router device.

摘要翻译： 用于提供支持从第二路由器设备到目的地节点的多路径路由的第一路由器设备的路由信息​​的技术。 在一个实施例中，第一路由器设备的多个出口端口耦合到第二路由器设备，其中第二路由器设备的端口组对应于到目的地节点的多个网络路径。 第一路由器设备的路由引擎可以基于路由表中的一组条目将分组转发到目的地节点。 在另一个实施例中，该组条目为第一路由器设备的多个出口端口中的每一个定义与仅第二路由器设备的相应一个端口组的对应关系。