-
公开(公告)号:US11463561B2
公开(公告)日:2022-10-04
申请号:US16948369
申请日:2020-09-15
Applicant: Cisco Technology, Inc.
Inventor: Clarence Filsfils , Francois Clad , Pablo Camarillo Garvia , David Delano Ward
IPC: H04L12/741 , H04L12/46 , H04L69/22 , H04L69/324 , H04L45/00 , H04L67/10 , H04L45/02 , H04L45/50 , H04L61/5007 , H04L67/63 , H04L45/74 , H04L49/35 , H04L45/741 , H04L61/2503 , H04L101/659 , H04L43/028 , H04L9/40 , H04L45/745
Abstract: In one embodiment, new Segment Routing capabilities are used in the steering of packets through Segment Routing nodes in a network. A Segment List includes a set of one or more Segment List (SL) Groups, each of which identifies one or more Segments contiguously or non-contiguously stored in the Segment List (or stored across multiple Segment Lists) of a Segment Routing packet. Each SL Group typically includes one Segment that is encoded as a Segment Identifier, and may include Segments that are Extended Values. The steering order of SL Groups is not required to be the same order as they are listed in the Segment List, as the value of Segments Left may be increased, remain the same, or decreased (possibly to skip a next SL Group) and possibly based on the result of an evaluation of a conditional expression.
-
公开(公告)号:US11411948B2
公开(公告)日:2022-08-09
申请号:US16574771
申请日:2019-09-18
Applicant: Cisco Technology Inc.
IPC: H04L9/40
Abstract: In one embodiment, an apparatus of a LISP environment includes one or more processors and computer-readable non-transitory storage media coupled to the one or more processors. The computer-readable non-transitory storage media include instructions that, when executed by the one or more processors, cause the one or more processors to perform operations including receiving an attestation token from a first component of the LISP environment. The operations also include encoding the attestation token using a LISP message format. The operations further include distributing the encoded attestation token with a LISP signaling message to a third component of the LISP environment.
-
公开(公告)号:US11386667B2
公开(公告)日:2022-07-12
申请号:US16708648
申请日:2019-12-10
Applicant: Cisco Technology, Inc.
Inventor: Hugo Latapie , Enzo Fenoglio , David Delano Ward , Guillaume Sauvage De Saint Marc , Carole Gridley
Abstract: In one embodiment, a video analysis service receives video data captured by one or more cameras at a particular location. The service applies a neural network-based model to portions of the video data, to identify objects within the video data. The service maps outputs of the neural network-based model to symbols using a conceptual space. The outputs of the model comprise the identified objects. The service applies a symbolic reasoning engine to the symbols, to generate an alert. The service sends the alert to a user interface in conjunction with the video data.
-
公开(公告)号:US11146620B2
公开(公告)日:2021-10-12
申请号:US15899179
申请日:2018-02-19
Applicant: Cisco Technology, Inc.
Inventor: Peter Bosch , Jeffrey Napper , Alessandro Duminuco , Michael Francis O'Gorman , Sean Chandler , Roman Sorokin , David Delano Ward , Baton Daullxhi , Florin Stelian Balus
Abstract: The present disclosure involves systems and methods for (a) model distributed applications for multi-cloud deployments, (b) derive, by way of policy, executable orchestrator descriptors, (c) model underlying (cloud) services (private, public, server-less and virtual-private) as distributed applications themselves, (d) dynamically create such cloud services if these are unavailable for the distributed application, (e) manage those resources equivalent to the way distributed applications are managed; and (f) present how these techniques are stackable. As applications may be built on top of cloud services, which themselves can be built on top of other cloud services (e.g., virtual private clouds on public cloud, etc.) even cloud services themselves may be considered applications in their own right, thus supporting putting cloud services on top of other cloud services.
-
公开(公告)号:US11075857B2
公开(公告)日:2021-07-27
申请号:US16440101
申请日:2019-06-13
Applicant: Cisco Technology, Inc.
Inventor: Kyle Mestery , Ian Wells , David Delano Ward
IPC: H04L12/28 , H04L12/947 , H04L12/931 , H04L29/12
Abstract: Techniques are described to provide a peephole optimization for processing traffic for lightweight protocols at lower layers by executing them inside a virtual switch rather than using the network stack of a host node. In one example, a method includes determining by forwarding logic of a virtual switch that a received packet is associated with a query for one of domain information or address information. Based on such a determination, the virtual switch determines whether the query is contained within a single Ethernet frame and is answerable. Based on a positive determination for both, the virtual switch determines whether a response to the query can be transmitted in a single packet within a single Ethernet frame. Based on a positive determination of a single packet response, a response packet for the query is formed and injected into the forwarding logic for the virtual switch for transmitting to a destination.
-
公开(公告)号:US20210042532A1
公开(公告)日:2021-02-11
申请号:US16708648
申请日:2019-12-10
Applicant: Cisco Technology, Inc.
Inventor: Hugo Latapie , Enzo Fenoglio , David Delano Ward , Guillaume Sauvage De Saint Marc , Carole Gridley
Abstract: In one embodiment, a video analysis service receives video data captured by one or more cameras at a particular location. The service applies a neural network-based model to portions of the video data, to identify objects within the video data. The service maps outputs of the neural network-based model to symbols using a conceptual space. The outputs of the model comprise the identified objects. The service applies a symbolic reasoning engine to the symbols, to generate an alert. The service sends the alert to a user interface in conjunction with the video data.
-
公开(公告)号:US20200322325A1
公开(公告)日:2020-10-08
申请号:US16574771
申请日:2019-09-18
Applicant: Cisco Technology Inc.
IPC: H04L29/06
Abstract: In one embodiment, an apparatus of a LISP environment includes one or more processors and computer-readable non-transitory storage media coupled to the one or more processors. The computer-readable non-transitory storage media include instructions that, when executed by the one or more processors, cause the one or more processors to perform operations including receiving an attestation token from a first component of the LISP environment. The operations also include encoding the attestation token using a LISP message format. The operations further include distributing the encoded attestation token with a LISP signaling message to a third component of the LISP environment.
-
公开(公告)号:US20200322264A1
公开(公告)日:2020-10-08
申请号:US16717717
申请日:2019-12-17
Applicant: Cisco Technology, Inc.
Inventor: Francois Clad , David Delano Ward , Clarence Filsfils
IPC: H04L12/721 , H04L12/707 , H04L12/725 , H04L29/06
Abstract: In one embodiment, a method includes a method includes receiving, by a headend node, network traffic. The method also includes determining, by the headend node, that the network traffic matches a service route. The method further includes steering, by the headend node, the network traffic into an SR-TE policy. The SR-TE policy is associated with the service route and includes a security level constraint.
-
公开(公告)号:US10778816B2
公开(公告)日:2020-09-15
申请号:US16019286
申请日:2018-06-26
Applicant: Cisco Technology, Inc.
Inventor: Clarence Filsfils , Francois Clad , Pablo Camarillo Garvia , David Delano Ward
IPC: H04L12/741 , H04L12/46 , H04L29/06 , H04L29/08 , H04L12/721 , H04L29/12 , H04L12/931 , H04L12/749 , H04L12/26
Abstract: In one embodiment, new Segment Routing capabilities are used in the steering of packets through Segment Routing nodes in a network. A Segment List includes a set of one or more Segment List (SL) Groups, each of which identifies one or more Segments contiguously or non-contiguously stored in the Segment List (or stored across multiple Segment Lists) of a Segment Routing packet. Each SL Group typically includes one Segment that is encoded as a Segment Identifier, and may include Segments that are Extended Values. The steering order of SL Groups is not required to be the same order as they are listed in the Segment List, as the value of Segments Left may be increased, remain the same, or decreased (possibly to skip a next SL Group) and possibly based on the result of an evaluation of a conditional expression.
-
100.
公开(公告)号:US10715439B2
公开(公告)日:2020-07-14
申请号:US16541931
申请日:2019-08-15
Applicant: Cisco Technology, Inc.
Inventor: Naader Hasani , Shishir Gupta , David Delano Ward , Mohammed Ismael Tatar , Shahin Habibi , Sreedhar Ravipalli , David Richard Barach
IPC: H04L12/743 , H04L12/745
Abstract: One embodiment performs longest prefix matching operations in one or more different manners that provides packet processing and/or memory efficiencies in the processing of packets. In one embodiment, a packet switching device determines a set of one or more mask lengths of a particular conforming entry of a multibit trie or other data structure that matches a particular address of a packet via a lookup operation in a mask length data structure. A conforming entry refers to an entry which has less than or equal to a maximum number of different prefix lengths, with this maximum number corresponding to the maximum number of prefix lengths which can be searched in parallel in the address space for a longest matching prefix by the implementing hardware. The packet switching device then performs corresponding hash table lookup operation(s) in parallel in determining an overall longest matching prefix for the particular address.
-
-
-
-
-
-
-
-
-