公开(公告)号：US10455038B2

公开(公告)日：2019-10-22

申请号：US15447346

申请日：2017-03-02

Applicant: Cisco Technology, Inc.

Inventor： Sebastian Jeuk ,  Gonzalo Salgueiro

IPC: G06F13/00 ,  H04L29/08 ,  H04L12/725

Abstract: A gateway device is configured to operate as a network function in a service function chain and is connected to a plurality of network connected devices. The gateway device receives a service function chain packet that includes a request to obtain data from one or more of the plurality of network connected devices. The gateway device obtains the data from the one or more network connected devices and modifies the service function chain packet to include the data obtained from the one or more network connected devices. The gateway device sends the service function chain packet that has been modified to include that data obtained from the one or more network connected devices along the service function chain.

公开(公告)号：US10382596B2

公开(公告)日：2019-08-13

申请号：US15190641

申请日：2016-06-23

Applicant: Cisco Technology, Inc.

Inventor： Sebastian Jeuk ,  Gonzalo Salgueiro

IPC: H04L29/06 ,  H04L12/725 ,  H04L12/721 ,  H04L12/715

Abstract: A packet is received at a device configured to provide a service function within a network service chain. A network overlay and/or segmentation identifier is extracted from a header of the packet. The service function is applied to the packet according to policies specific to a network overlay and/or segmentation identified in the network overlay and/or segmentation identifier.

公开(公告)号：US20190182124A1

公开(公告)日：2019-06-13

申请号：US15834881

申请日：2017-12-07

Applicant: Cisco Technology, Inc.

Inventor： Sebastian Jeuk ,  Gonzalo Salgueiro

IPC: H04L12/24 ,  H04L12/751 ,  H04L12/721 ,  H04L12/851 ,  H04L12/26 ,  G06F15/18

Abstract: A controller device sends predictions from a machine learning module to source endpoints. The controller receives flow information and network information from a network elements in a network. The flow information is associated with source routed data flows that traverse the network in source routed network paths. The network information is associated with network characteristics of each of the network elements included in at least one of the source routed network paths. The controller analyzes the flow information and the network information with machine learning to generate a prediction of at least one metric of source routing behavior within the network. The controller sends the prediction of the at least one metric to one or more source endpoints to optimize the source routed network paths used by future source routed data flows originating from the one or more source endpoints.

公开(公告)号：US20190065278A1

公开(公告)日：2019-02-28

申请号：US15692824

申请日：2017-08-31

Applicant: Cisco Technology, Inc.

Inventor： Sebastian Jeuk ,  Gonzalo Salgueiro ,  Rajath Agasthya ,  Rohit Agarwalla

IPC: G06F9/50 ,  G06F9/455

CPC classification number: G06F9/5077 ,  G06F9/455 ,  G06F9/45558 ,  G06F21/6281 ,  G06F2009/45587 ,  H04L63/10 ,  H04L63/20

Abstract: Generating and enforcing tenant-specific policies within a container includes, applying a first policy for a specific operational parameter when a software package that is running within a container and that is utilized by a plurality of tenants is leveraged by a first tenant of the plurality of tenants. A second policy is applied for the specific operational parameter when the software package is leveraged by a second tenant of the plurality of tenants.

公开(公告)号：US20180098104A1

公开(公告)日：2018-04-05

申请号：US15284073

申请日：2016-10-03

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Matthew Duddles ,  Sebastian Jeuk ,  Gonzalo Salgueiro

IPC: H04N21/236 ,  H04L29/08 ,  H04L29/06 ,  H04N21/643 ,  H04N21/83 ,  H04N21/234

Abstract: In one embodiment, a method includes identifying at a network device, a characteristic of a video processed by a video service operating at an application layer, inserting the video characteristic into a header of a packet at the network device, and transmitting the packet on a service function path comprising a network function operable to use the video characteristic at a network layer. An apparatus and logic are also disclosed herein.

公开(公告)号：US09729406B2

公开(公告)日：2017-08-08

申请号：US14806998

申请日：2015-07-23

Applicant: Cisco Technology, Inc.

Inventor： Sebastian Jeuk ,  Gonzalo Salgueiro ,  Frederick Juergens Baker

IPC: G06F15/173 ,  H04L12/24 ,  H04L12/741 ,  H04L12/715 ,  H04L29/12

CPC classification number: H04L41/5058 ,  H04L41/5096 ,  H04L45/64 ,  H04L45/74 ,  H04L61/15 ,  H04L61/20 ,  H04L61/3065 ,  H04L61/6004 ,  H04L61/609

Abstract: A cloud provider supports cloud-based services accessible to tenants of the cloud provider over a network. In the cloud provider, classification information including a cloud-identifier to identify the cloud provider, service-identifiers each to identify a respective one of the services, and tenant-identifiers each to identify a respective one of the tenants is maintained. The classification information is distributed within the cloud provider, including to the services, and may also be distributed outside of the cloud provider, to enable a respective tenant to exchange IP packets with, and thereby access, a respective service based on the classification information, wherein each IP packet includes the cloud-identifier, the service-identifier of the respective service, and the tenant-identifier of the respective tenant.

公开(公告)号：US12224874B2

公开(公告)日：2025-02-11

申请号：US18467946

申请日：2023-09-15

Applicant: Cisco Technology, Inc.

Inventor： Zhaoyi Jin ,  Hongling Cen ,  Bhargavkumar Ghanshyamlal Pandya ,  Yasi Xi ,  Sebastian Jeuk ,  Maria Soledad Palmero ,  Gonzalo Salgueiro

IPC: G06F3/048 ,  G06F3/04815 ,  G06F3/0482 ,  H04L12/18

Abstract: Methods are provided in which a collaboration server connects at least two participants via respective user devices to a collaboration session. The collaboration server further distributes, to the respective user devices, media stream data and one or more customized graphical items that are distinguishably displayed in the collaboration session. The one or more customized graphical items are displayed in a foreground or a background associated with a collaboration space of first participant of the at least two participants. The collaboration server further detects a selection, by one of the respective user devices, of a graphical item from the one or more customized graphical items displayed in the collaboration space and performs at least one action associated with the graphical item during the collaboration session based on detecting the selection of the graphical item.

公开(公告)号：US20220360562A1

公开(公告)日：2022-11-10

申请号：US17308375

申请日：2021-05-05

Applicant: Cisco Technology, Inc.

Inventor： David Hanes ,  Gonzalo Salgueiro ,  Sebastian Jeuk ,  Robert Edgar Barton

IPC: H04L29/06

Abstract: Techniques for associating manufacturer usage description (MUD) security profiles for Internet-of-Things (IoT) device(s) with secure access service edge (SASE) solutions, providing for automated and scalable integration of IoT devices with SASE frameworks. A MUD controller may utilize a MUD uniform resource identifier (URI) emitted by an IoT device to fetch an associated MUD file from a MUD file server associated with a manufacturer of the IoT device. The MUD controller may determine that a security recommendation included in the MUD file is to be implemented by a cloud-based security service provided by the SASE service and cause the IoT device to establish a connection with a secure internet gateway associated with the cloud-based security service. Additionally, or alternatively, the MUD file may include SASE extensions indicating manufacturer recommended cloud-based security services. Further, cloud-based security services may be implemented if local services are unavailable.

公开(公告)号：US20220311709A1

公开(公告)日：2022-09-29

申请号：US17686577

申请日：2022-03-04

Applicant: Cisco Technology, Inc.

Inventor： Sebastian Jeuk ,  Gonzalo Salgueiro

IPC: H04L45/64 ,  H04L45/42 ,  H04L47/2425 ,  H04L45/12

Abstract: Disclosed is a system and method of providing a segment routing as a service application. The method includes receiving a configuration of an internet protocol environment. The configuration can be a layer 3 configuration of a single cloud environment or even across multiple cloud environments. The configuration defines routing, forwarding, and paths in the environment between different entities such as virtual machines. The method includes receiving a parameter associated with a workload of a tenant. The parameter can be a service level agreement (i.e., a best bandwidth available), a pathway requirement, a parameter associated with specific workload, and so forth. Based on the configuration and the parameter, the method includes generating tenant-defined layer 3 overlay segment routing rules that define how the workload of the tenant will route data in the internet protocol environment using segment routing.

公开(公告)号：US11336719B2

公开(公告)日：2022-05-17

申请号：US17124069

申请日：2020-12-16

Applicant: Cisco Technology, Inc.

Inventor： Sebastian Jeuk ,  Gonzalo A. Salgueiro ,  Sridar Kandaswamy ,  Bob C. Melander

IPC: H04L29/08 ,  H04L67/1021 ,  H04L41/16 ,  H04W36/00 ,  H04L41/0816 ,  H04W4/029 ,  H04L47/765 ,  H04W28/02

Abstract: Techniques for edge cloud identification. An indication of edge clouds is received. Each edge cloud is uniquely identifiable via an associated edge cloud identifier. A characteristic is received from each of the edge clouds. An edge cloud for communication is determined based on the characteristic. The edge cloud is communicated with using its associated edge cloud identifier.