公开(公告)号：US11283707B2

公开(公告)日：2022-03-22

申请号：US17071919

申请日：2020-10-15

Applicant: Cisco Technology, Inc.

Inventor： Giles Douglas Yorke Heron ,  Edward A. Warnicke ,  William Mark Townsley ,  Yoann Desmouceaux

IPC: H04L12/707 ,  H04L12/715 ,  H04L12/703 ,  H04L12/721 ,  H04L29/12 ,  H04L45/00 ,  H04L45/28 ,  H04L61/256 ,  H04L12/725 ,  H04L45/30

Abstract: Systems and methods provide for segment routing (SR) with fast reroute in a container network. An SR ingress can receive a packet from a first container destined for a container service. The ingress can generate an SR packet including a segment list comprising a first segment to a first container service host, a second segment to a second service host, and a third segment to the service. The ingress can forward the SR packet to a first SR egress corresponding to the first host using the first segment. The first egress can determine whether the first service and/or host is reachable. If so, the first egress can forward the SR packet to the first host or the packet to the service. If not, the first egress can perform a fast reroute and forward the SR packet to a second SR egress corresponding to the second host using the second segment.

公开(公告)号：US20210329069A1

公开(公告)日：2021-10-21

申请号：US16853048

申请日：2020-04-20

Applicant: Cisco Technology, Inc.

Inventor： Yoann Desmouceaux ,  Pierre Pfister ,  Aloys Augustin ,  Mohammed Hawari

IPC: H04L29/08 ,  H04L12/707 ,  H04L29/06

Abstract: Techniques are described for providing a distributed application load-balancing architecture that supports multipath transport protocol for client devices connecting to an application service. Rather than having client devices generate new network five-tuples for new subflows to the application servers, the techniques described herein include shifting the burden to the application servers to ensure that the new network five-tuples land in the same bucket in the consistent hashing table. The application servers may receive a hashing function utilized by the load balancers to generate the hash of the network five-tuple. By having the application servers generate the hashes, the load balancers are able to continue stateless, low-level processing of the packets to route them to the correct application servers. In this way, additional subflows can be opened for client devices according to a multipath transport protocol while ensuring that the subflows are routed to the correct application server.

公开(公告)号：US11044199B2

公开(公告)日：2021-06-22

申请号：US16003937

申请日：2018-06-08

Applicant: Cisco Technology, Inc.

Inventor： Pierre Pfister ,  W. Mark Townsley ,  Enzo Fenoglio ,  Hugo Latapie ,  Yoann Desmouceaux

IPC: H04L12/803 ,  H04L12/26 ,  G06N3/08 ,  G06N3/04 ,  H04L29/08

Abstract: In one embodiment, a traffic analysis service obtains traffic characteristics of network traffic associated with a device in a network. The traffic analysis service uses a machine learning model to infer resource usage by the device based on the obtained traffic characteristics of the network traffic associated with the device. The traffic analysis service controls traffic flows in the network based on the inferred resource usage by the device.

公开(公告)号：US10812374B2

公开(公告)日：2020-10-20

申请号：US16138595

申请日：2018-09-21

Applicant: Cisco Technology, Inc.

Inventor： Giles Douglas Yorke Heron ,  Edward A. Warnicke ,  William Mark Townsley ,  Yoann Desmouceaux

IPC: H04L12/707 ,  H04L12/715 ,  H04L12/721 ,  H04L29/12 ,  H04L12/703 ,  H04L12/725

Abstract: Systems and methods provide for segment routing (SR) with fast reroute in a container network. An SR ingress can receive a packet from a first container destined for a container service. The ingress can generate an SR packet including a segment list comprising a first segment to a first container service host, a second segment to a second service host, and a third segment to the service. The ingress can forward the SR packet to a first SR egress corresponding to the first host using the first segment. The first egress can determine whether the first service and/or host is reachable. If so, the first egress can forward the SR packet to the first host or the packet to the service. If not, the first egress can perform a fast reroute and forward the SR packet to a second SR egress corresponding to the second host using the second segment.

公开(公告)号：US20200225977A1

公开(公告)日：2020-07-16

申请号：US16829948

申请日：2020-03-25

Applicant: Cisco Technology, Inc.

Inventor： Yoann Desmouceaux ,  Pierre Pfister ,  William Mark Townsley

IPC: G06F9/455 ,  H04L12/931

Abstract: Techniques for zero-loss workload mobility with segment routing for virtual machines are presented. The techniques include receiving, by a virtual router, an electronic message destined for a first virtual machine running on a first physical machine and checking a first virtual machine state for the first virtual machine. In response to determining that it is associated with a running state indicating the first physical machine, inserting a segment routing header including an indication of the source virtual machine, the first physical machine, and the first virtual machine. In response to determining that it is associated with a migration state, inserting, by the virtual router, a segment routing header indicating the source virtual machine, an END.S for the first physical machine, the first virtual machine; and an END.SBUF for a second physical machine. The message is then routed based at least in part on the inserted segment routing header.

公开(公告)号：US20200089526A1

公开(公告)日：2020-03-19

申请号：US16130824

申请日：2018-09-13

Applicant: Cisco Technology, Inc.

Inventor： Marcel Paul Sosthène Enguehard ,  Yoann Desmouceaux ,  Jordan Augé

IPC: G06F9/48 ,  G06F9/455 ,  G06F9/50 ,  H04L12/751

Abstract: Systems, methods, and computer-readable media for migrating an application container between nodes in a network are disclosed. An interest for an application container may be received by an origin node and, in response, the origin node may transfer a copy of the application container over the network and to a destination node. The origin node can then shut down the application container and transmit any remaining container state and received requests to the destination node. The destination node may then update a routing plane for the network to provide delivery of service requests to the migrated application.

公开(公告)号：US10511534B2

公开(公告)日：2019-12-17

申请号：US15947425

申请日：2018-04-06

Applicant: Cisco Technology, Inc.

Inventor： Pierre Pfister ,  Yoann Desmouceaux ,  William Mark Townsley

IPC: H04L12/28 ,  H04L12/803 ,  H04L12/801 ,  H04L12/911 ,  H04J1/16

Abstract: Aspects of the subject technology provide state-less load-balancing using sequence numbers to identify traffic flows. In some implementations, a process of the technology can include steps for receiving, by a load-balancer, a first packet from a source device including a request to access the service provided by a server coupled to the load-balancer, determining a load for each of the servers, wherein each server is associated with a unique set of sequence numbers, and forwarding the request to a target server selected based on its corresponding load, and wherein the request is configured to cause the target server to issue a reply to the source device. Systems and machine-readable media are also provided.

公开(公告)号：US20190357081A1

公开(公告)日：2019-11-21

申请号：US16030956

申请日：2018-07-10

Applicant: Cisco Technology, Inc.

Inventor： Guillaume Gottardi ,  William Mark Townsley ,  Eric Philippe Hamel ,  Yoann Desmouceaux ,  Pierre Pfister

IPC: H04W28/08 ,  H04L29/12 ,  H04L29/08

Abstract: A user plane selection mechanism is provided that leverages an in-band load balancing scheme, e.g., Segment Routing Load Balancing (SRLB). Information in the form of segment identifiers (complemented by metadata) is passed to the components. As a result, the effective user plane function selection can be done in-band at the transport level.

公开(公告)号：US20190310871A1

公开(公告)日：2019-10-10

申请号：US15945726

申请日：2018-04-04

Applicant: Cisco Technology, Inc.

Inventor： Yoann Desmouceaux ,  Pierre Pfister ,  William Mark Townsley

IPC: G06F9/455 ,  H04L12/931

Abstract: Techniques for zero-loss workload mobility with segment routing for virtual machines are presented. The techniques include receiving, by a virtual router, an electronic message destined for a first virtual machine running on a first physical machine and checking a first virtual machine state for the first virtual machine. In response to determining that it is associated with a running state indicating the first physical machine, inserting a segment routing header including an indication of the source virtual machine, the first physical machine, and the first virtual machine. In response to determining that it is associated with a migration state, inserting, by the virtual router, a segment routing header indicating the source virtual machine, an END.S for the first physical machine, the first virtual machine; and an END.SBUF for a second physical machine. The message is then routed based at least in part on the inserted segment routing header.

公开(公告)号：US20240106679A1

公开(公告)日：2024-03-28

申请号：US18536082

申请日：2023-12-11

Applicant: Cisco Technology, Inc.

Inventor： Pierre Pfister ,  William Mark Townsley ,  Yoann Desmouceaux ,  David Delano Ward

IPC: H04L12/46 ,  G06F16/95

CPC classification number: H04L12/46 ,  G06F16/95

Abstract: This disclosure describes methods and systems to externally manage network-to-network interconnect configuration data in conjunction with a centralized database subsystem. An example of the methods includes receiving and storing, in the centralized database subsystem, data indicative of user intent to interconnect at least a first network and a second network. The example method further includes, based at least in part on the data indicative of user intent, determining and storing, in the centralized database subsystem, a network intent that corresponds to the user intent. The example method further includes providing data indicative of the network intent from the centralized database subsystem to a first data plane adaptor, associated with the first network, and a second data plane adaptor, associated with the second network.