公开(公告)号：US20200322266A1

公开(公告)日：2020-10-08

申请号：US16781838

申请日：2020-02-04

申请人： Cisco Technology Inc.

发明人： Francois Clad ,  Pablo Camarillo Garvia ,  Clarence Filsfils

IPC分类号： H04L12/723 ,  G06F21/60 ,  H04L12/741 ,  H04L29/06

摘要： In one embodiment, a method by an apparatus of a segment routing (SR) network includes receiving a data packet and accessing an attestation token for the apparatus. The method further includes determining a location within a header of the received data packet for the attestation token and creating an updated header by encoding the attestation token in the determined location of the header. The method further includes sending the updated header with the encoded attestation token to another apparatus of the SR network.

公开(公告)号：US20200028758A1

公开(公告)日：2020-01-23

申请号：US16037765

申请日：2018-07-17

申请人： Cisco Technology, Inc.

发明人： Jerome Tollet ,  Alain Fiocco ,  Andre Jean-Marie Surcouf ,  Pablo Camarillo Garvia ,  Clarence Filsfils

IPC分类号： H04L12/24 ,  H04L12/721 ,  H04L12/713 ,  H04L12/751 ,  H04L29/08

摘要： Systems, methods, and computer-readable media for providing multi-cloud connectivity. A method can involve adding a new virtual private cloud (VPC) to a multi-cloud environment including a private network and VPCs connected to the private network via a segment routing (SR) domain and respective virtual routers on the VPCs and the private network. The method can involve deploying a new virtual router on the new VPC, registering the new virtual router at a BGP controller in the multi-cloud environment, and receiving, at the BGP controller, topology information from the new virtual router. The method can further involve identifying routes in the multi-cloud environment based on paths computed based on the topology information, sending, to the new virtual router, routing information including the routes, SR identifiers and SR policies, and based on the routing information, providing interconnectivity between the private network, the VPCs, and the new VPC.

公开(公告)号：US20190288940A1

公开(公告)日：2019-09-19

申请号：US15922860

申请日：2018-03-15

申请人： Cisco Technology, Inc.

发明人： Clarence Filsfils ,  Francois Clad ,  Pablo Camarillo Garvia

IPC分类号： H04L12/741 ,  H04L29/06 ,  H04L12/781

摘要： In one embodiment, segment routing network processing of packets is performed on segment routing packets to use engineered segment routing reverse reply paths which provide efficiencies in communicating packets in a network. In one embodiment, a source node selects a segment identifier of a destination node, with the segment identifier specifying a function value of a dynamic return path segment routing function in order to invoke this function on the destination node. The source node then sends a segment routing packet to the destination address of this segment identifier. Reacting to receipt of this packet and the function value of the dynamic return path segment routing function in the destination address or current segment identifier of the packet, a receiving node generates a responding segment routing packet including the segment identifiers from the received packet in reverse traversal order.

公开(公告)号：US10285155B1

公开(公告)日：2019-05-07

申请号：US16140255

申请日：2018-09-24

申请人： Cisco Technology, Inc.

发明人： Aeneas Sean Dodd-Noble ,  Pablo Camarillo Garvia ,  Om Prakash Suthar

IPC分类号： H04W64/00 ,  H04W4/029 ,  H04W24/10 ,  H04L12/26 ,  H04W8/24

摘要： Aspects of the disclosed technology provide ways to report User Equipment (UE) device locations in a 5G network for the purpose of redirecting application traffic from proximately located Data Networks (DNs). In one aspect, the disclosed technology encompasses a process for conveying User Equipment (UE) information to an Application Function (AF), the process includes steps for receiving, at an intermediate-User Plane Function (I-UPF) entity, User Equipment (UE) uplink data from a Radio Access Network (RAN), determining if sharing of location information or application information associated with the UE is restricted, and encapsulating first location metadata or application metadata in an SRv6 packet if the sharing of location information or application information is not restricted. Systems and machine-readable media are also provided.

公开(公告)号：US20220303366A1

公开(公告)日：2022-09-22

申请号：US17836069

申请日：2022-06-09

申请人： Cisco Technology, Inc.

发明人： Patrice Brissette ,  Clarence Filsfils ,  Darren Dukes ,  Gaurav Dawra ,  Francois Clad ,  Pablo Camarillo Garvia

IPC分类号： H04L69/22 ,  H04L69/324 ,  H04L45/00 ,  H04L67/10 ,  H04L45/02 ,  H04L45/50 ,  H04L61/5007 ,  H04L67/63 ,  H04L12/46 ,  H04L45/74 ,  H04L49/35 ,  H04L45/741

摘要： In one embodiment, Ethernet Virtual Private Network (EVPN) is implemented using Internet Protocol Version 6 (IPv6) Segment Routing (SRv6) underlay network and SRv6-enhanced Border Gateway Protocol (BGP) signaling. A particular route associated with a particular Internet Protocol Version 6 (IPv6) Segment Routing (SRv6) Segment Identifier (SID) is advertised in a particular route advertisement message of a routing protocol (e.g., BGP). The SID includes encoding representing a particular Ethernet Virtual Private Network (EVPN) Layer 2 (L2) flooding Segment Routing end function of the particular router and a particular Ethernet Segment Identifier (ESI), with the particular SID including a routable prefix to the particular router. The particular router receives a particular packet including the particular SID; and in response, the particular router performs the particular EVPN end function on the particular packet.

公开(公告)号：US11445048B2

公开(公告)日：2022-09-13

申请号：US16990030

申请日：2020-08-11

申请人： Cisco Technology, Inc.

发明人： Clarence Filsfils ,  Francois Clad ,  Pablo Camarillo Garvia ,  Siva Sivabalan ,  Syed Kamran Raza

IPC分类号： H04L69/04 ,  H04L45/74

摘要： In one embodiment, a method includes identifying, by a network component, a first segment identifier (SID) within a SID list. The first SID includes a first SID block and a first micro SID (uSID). The method also includes initializing, by the network component, a packing list of a uSID carrier with the first uSID of the first SID and initializing, by the network component, a packing block of the uSID carrier with the first SID block of the first SID. The method further includes initializing, by the network component, a remaining packing capacity of the packing list with a carrier capacity of the first SID and initializing, by the network component, an empty compressed SID list.

公开(公告)号：US11424986B2

公开(公告)日：2022-08-23

申请号：US16663186

申请日：2019-10-24

申请人： Cisco Technology, Inc.

发明人： Clarence Filsfils ,  Francois Clad ,  Pablo Camarillo Garvia ,  Ahmed Mohamed Ahmed Abdelsalam

IPC分类号： H04L1/00 ,  H04L41/0893 ,  H04W76/12 ,  H04L41/0896 ,  H04L47/2441 ,  H04W28/10

摘要： In one embodiment, a method, by a network apparatus of a first domain network, includes receiving one or more packets from an access network, determining a classification for the packets based on the accounting information, selecting, based on the determined classification, a policy configuration from a plurality of policy configurations for processing the packets, encapsulating the packets with one or more segment identifiers in accordance with the selected policy configuration, and sending the encapsulated packets to a network slice or a second network slice in a second domain network based on the one or more segment identifiers.

公开(公告)号：US11418435B2

公开(公告)日：2022-08-16

申请号：US16860896

申请日：2020-04-28

申请人： Cisco Technology, Inc.

发明人： Clarence Filsfils ,  Ahmed Mohamed Ahmed Abdelsalam ,  Francois Clad ,  Pablo Camarillo Garvia ,  Kiran Sasidharan Pillai

IPC分类号： H04L45/50 ,  H04L12/46 ,  H04L45/74 ,  H04L45/28 ,  H04L69/22

摘要： The present technology pertains to a group-based network policy using Segment Routing over an IPv6 dataplane (SRv6). After a source application sends a packet, an ingress node can receive the packet, and if the source node is capable, it can identify an application policy and apply it. The ingress node indicates that the policy has been applied by including policy bits in the packet encapsulation. When the packet is received by the egress node, it can determine whether the policy was already applied, and if so, the packet is forward to the destination application. If the egress node determines that the policy has not be applied the destination application can apply the policy. Both the ingress node and egress nodes can learn of source application groups, destination application groups, and applicable policies through communication with aspects of the segment routing fabric.

公开(公告)号：US11283906B2

公开(公告)日：2022-03-22

申请号：US16697134

申请日：2019-11-26

申请人： Cisco Technology, Inc.

发明人： Patrice Brissette ,  Clarence Filsfils ,  Darren Dukes ,  Gaurav Dawra ,  Francois Clad ,  Pablo Camarillo Garvia

IPC分类号： H04L29/06 ,  H04L69/22 ,  H04L69/324 ,  H04L45/00 ,  H04L67/10 ,  H04L45/50 ,  H04L12/46 ,  H04L45/74 ,  H04L61/5007 ,  H04L49/35 ,  H04L67/63 ,  H04L45/741 ,  H04L101/659 ,  H04L61/2503 ,  H04L43/028 ,  H04L45/745

摘要： In one embodiment, Ethernet Virtual Private Network (EVPN) is implemented using Internet Protocol Version 6 (IPv6) Segment Routing (SRv6) underlay network and SRv6-enhanced Border Gateway Protocol (BGP) signaling. A particular route associated with a particular Internet Protocol Version 6 (IPv6) Segment Routing (SRv6) Segment Identifier (SID) is advertised in a particular route advertisement message of a routing protocol (e.g., BGP). The SID includes encoding representing a particular Ethernet Virtual Private Network (EVPN) Layer 2 (L2) flooding Segment Routing end function of the particular router and a particular Ethernet Segment Identifier (ESI), with the particular SID including a routable prefix to the particular router. The particular router receives a particular packet including the particular SID; and in response, the particular router performs the particular EVPN end function on the particular packet.

公开(公告)号：US20220029916A1

公开(公告)日：2022-01-27

申请号：US17492532

申请日：2021-10-01

申请人： Cisco Technology, Inc.

发明人： Clarence Filsfils ,  Pablo Camarillo Garvia

IPC分类号： H04L12/741 ,  H04L12/26 ,  H04L12/751 ,  H04L29/06

摘要： The present disclosure provides a packet tracing mechanism will be described that provides packet tracing information to a mobile network controller. In one aspect, a method includes receiving a data packet sent from a source node to a destination node; determining if the data packet is to be updated with packet tracing information; and upon determining that the data packet is to be updated, updating the packet tracing information of the data packet to include identification of the network device and an ingress timestamp of the data packet at the network device for a corresponding network controller to determining network routing policies.