FAST REROUTE (FRR) PROTECTION AT THE EDGE OF A RFC 2547 NETWORK
    11.
    发明申请
    FAST REROUTE (FRR) PROTECTION AT THE EDGE OF A RFC 2547 NETWORK 有权
    快速REROUTE(FRR)保护在RFC 2547网络的边缘

    公开(公告)号:US20090245259A1

    公开(公告)日:2009-10-01

    申请号:US12481411

    申请日:2009-06-09

    IPC分类号: H04L12/56

    摘要: In one embodiment, an edge device in a first routing domain is configured to communicate with a second routing domain via a data link. The edge device receives a data packet containing a destination address that is reachable via the second routing domain and an indication that the data packet is a protected packet that was previously rerouted from another edge device in the first routing domain via a Multi-Protocol Label Switching (MPLS) Fast Reroute (FRR) backup path. The edge device determines if communication with the second routing domain is still available via the data link, and if so, removes the indication that the data packet is a protected packet and forwards the data packet to the second routing domain, and, if not, drops the data packet to prevent the data packet from being rerouted a second time in the first routing domain on another MPLS FRR backup path.

    摘要翻译: 在一个实施例中,第一路由域中的边缘设备被配置为经由数据链路与第二路由域进行通信。 边缘设备接收包含经由第二路由域可到达的目的地地址的数据分组,以及指示数据分组是先前通过多协议标签交换在第一路由域中从另一边缘设备重新路由的受保护分组的指示 (MPLS)快速重路由(FRR)备份路径。 边缘设备确定与第二路由域的通信是否仍然通过数据链路可用,如果是,则删除数据分组是受保护分组的指示,并将数据分组转发到第二路由域,如果不是, 删除数据包,以防止数据包在另一个MPLS FRR备份路径上的第一个路由域再次被重新路由。

    Fast reroute (FRR) protection at the edge of a RFC 2547 network
    12.
    发明授权
    Fast reroute (FRR) protection at the edge of a RFC 2547 network 有权
    在RFC 2547网络边缘的快速重路由(FRR)保护

    公开(公告)号:US07551551B2

    公开(公告)日:2009-06-23

    申请号:US11010225

    申请日:2004-12-10

    摘要: A fast reroute (FRR) technique that may be deployed at the edge of a network having first and second edge devices coupled to a neighboring routing domain. If the first edge device detects a node or link failure that prevents it from communicating with the neighboring domain, the first edge device reroutes at least some data packets addressed to the neighboring domain to the second edge device. The second edge device receives the rerouted packets and then forwards the packets to the neighboring domain. Notably, the second edge device is not permitted to reroute the received packets a second time, e.g., upon identifying another inter-domain node or link failure. As such, loops are avoided at the edge of the network and packets are rerouted to the neighboring routing domain faster and more efficiently than in prior implementations.

    摘要翻译: 可以部署在具有耦合到相邻路由域的第一和第二边缘设备的网络边缘的快速重路由(FRR)技术。 如果第一边缘设备检测到阻止其与相邻域通信的节点或链路故障,则第一边缘设备将寻址到相邻域的至少一些数据分组路由到第二边缘设备。 第二边缘设备接收重新路由的报文,然后将报文转发给邻近的域。 值得注意的是,第二边缘设备不允许第二次重新路由所接收的分组,例如在识别出另一个域间节点或链路故障时。 因此,在网络的边缘避免了循环,并且与先前的实现相比,分组被更快地和更有效地重新路由到相邻路由域。

    Dynamic shared risk node group (SRNG) membership discovery
    13.
    发明申请
    Dynamic shared risk node group (SRNG) membership discovery 有权
    动态共享风险节点组(SRNG)成员资格发现

    公开(公告)号:US20060227723A1

    公开(公告)日:2006-10-12

    申请号:US11101134

    申请日:2005-04-07

    IPC分类号: H04L12/28

    CPC分类号: H04L45/04 H04L45/02 H04L45/28

    摘要: A technique is provided for dynamically discovering shared risk node group (SRNG) memberships of a plurality of interconnected edge devices in a computer network. According to the technique, each edge device “learns” the identities of its directly-attached peer devices situated in neighboring routing domains, e.g., by establishing an interior or exterior gateway routing protocol session with each peer. Thereafter, each edge device advertises the identities of its learned peers to the other interconnected edge devices. Preferably, the peer identities are distributed in novel “peer-router” extended community attributes transported in Border Gateway Protocol (BGP) messages. After an edge device has learned the identity of its own peers and received the identities of the other edge devices' peers, the device can automatically detect SRNG memberships in the computer network. Specifically, edge devices that advertise the same peer are determined to participate in the same SRNG.

    摘要翻译: 提供了一种用于动态发现计算机网络中的多个互连边缘设备的共享风险节点组(SRNG)成员资格的技术。 根据该技术,每个边缘设备例如通过建立与每个对等体的内部或外部网关路由协议会​​话,“学习”其位于相邻路由域中的直接附着的对等设备的身份。 此后,每个边缘设备将其学习的对等体的标识通告给其他互连的边缘设备。 优选地,对等体身份分布在在边界网关协议(BGP)消息中传送的新颖的“对等路由器”扩展社区属性中。 在边缘设备已经学习了自己的对等体的身份并且接收到其他边缘设备的对等体的身份之后,设备可以自动检测计算机网络中的SRNG成员资格。 具体来说,宣告同一对等体的边缘设备被确定为参与相同的SRNG。

    DYNAMIC SHARED RISK NODE GROUP (SRNG) MEMBERSHIP DISCOVERY
    14.
    发明申请
    DYNAMIC SHARED RISK NODE GROUP (SRNG) MEMBERSHIP DISCOVERY 有权
    动态共享风险代码组(SRNG)会员发现

    公开(公告)号:US20120117252A1

    公开(公告)日:2012-05-10

    申请号:US13350356

    申请日:2012-01-13

    IPC分类号: G06F15/173 G06F15/16

    CPC分类号: H04L45/04 H04L45/02 H04L45/28

    摘要: In one embodiment, a network device determines identities of each peer device in a second routing domain attached to edge devices in a first routing domain. The network device associates each address prefix reachable in the second routing domain with an identity of each peer device in the second routing domain that advertised the address prefix and with an identity of one or more edge devices in the first routing domain to which that peer device is attached. The network device determines an address prefix is associated with a same identity of a peer device in the second routing domain but with different edge devices in the first routing domain. The network device assigns the different edge devices in the first routing domain associated with the determined address prefix to a shared risk node group (SRNG).

    摘要翻译: 在一个实施例中,网络设备确定连接到第一路由域中的边缘设备的第二路由域中的每个对等设备的身份。 网络设备将第二路由域中可达到的每个地址前缀与第二路由域中的每个对等设备的标识相关联,该第二路由域中的每个对等体设备通告地址前缀,并且与该对等设备的第一路由域中的一个或多个边缘设备的标识 被附上。 网络设备确定地址前缀与第二路由域中的对等设备的相同标识相关联,但与第一路由域中的不同边缘设备相关联。 网络设备将与确定的地址前缀相关联的第一路由域中的不同边缘设备分配给共享风险节点组(SRNG)。

    Dynamic shared risk node group (SRNG) membership discovery
    15.
    发明授权
    Dynamic shared risk node group (SRNG) membership discovery 有权
    动态共享风险节点组(SRNG)成员资格发现

    公开(公告)号:US08228786B2

    公开(公告)日:2012-07-24

    申请号:US11101134

    申请日:2005-04-07

    CPC分类号: H04L45/04 H04L45/02 H04L45/28

    摘要: A technique is provided for dynamically discovering shared risk node group (SRNG) memberships of a plurality of interconnected edge devices in a computer network. According to the technique, each edge device “learns” the identities of its directly-attached peer devices situated in neighboring routing domains, e.g., by establishing an interior or exterior gateway routing protocol session with each peer. Thereafter, each edge device advertises the identities of its learned peers to the other interconnected edge devices. Preferably, the peer identities are distributed in novel “peer-router” extended community attributes transported in Border Gateway Protocol (BGP) messages. After an edge device has learned the identity of its own peers and received the identities of the other edge devices' peers, the device can automatically detect SRNG memberships in the computer network. Specifically, edge devices that advertise the same peer are determined to participate in the same SRNG.

    摘要翻译: 提供了一种用于动态发现计算机网络中的多个互连边缘设备的共享风险节点组(SRNG)成员资格的技术。 根据该技术,每个边缘设备例如通过建立与每个对等体的内部或外部网关路由协议会​​话,“学习”其位于相邻路由域中的直接附着的对等设备的身份。 此后,每个边缘设备将其学习的对等体的标识通告给其他互连的边缘设备。 优选地,对等体身份分布在在边界网关协议(BGP)消息中传送的新颖的“对等路由器”扩展社区属性中。 在边缘设备已经学习了自己的对等体的身份并且接收到其他边缘设备的对等体的身份之后,设备可以自动检测计算机网络中的SRNG成员资格。 具体来说,宣告同一对等体的边缘设备被确定为参与相同的SRNG。

    Dynamic shared risk node group (SRNG) membership discovery
    16.
    发明授权
    Dynamic shared risk node group (SRNG) membership discovery 有权
    动态共享风险节点组(SRNG)成员资格发现

    公开(公告)号:US08824334B2

    公开(公告)日:2014-09-02

    申请号:US13350356

    申请日:2012-01-13

    IPC分类号: H04L12/28

    CPC分类号: H04L45/04 H04L45/02 H04L45/28

    摘要: In one embodiment, a network device determines identities of each peer device in a second routing domain attached to edge devices in a first routing domain. The network device associates each address prefix reachable in the second routing domain with an identity of each peer device in the second routing domain that advertised the address prefix and with an identity of one or more edge devices in the first routing domain to which that peer device is attached. The network device determines an address prefix is associated with a same identity of a peer device in the second routing domain but with different edge devices in the first routing domain. The network device assigns the different edge devices in the first routing domain associated with the determined address prefix to a shared risk node group (SRNG).

    摘要翻译: 在一个实施例中,网络设备确定连接到第一路由域中的边缘设备的第二路由域中的每个对等设备的身份。 网络设备将第二路由域中可达到的每个地址前缀与第二路由域中的每个对等设备的标识相关联,该第二路由域中的每个对等体设备通告地址前缀,并且与该对等设备的第一路由域中的一个或多个边缘设备的标识 被附上。 网络设备确定地址前缀与第二路由域中的对等设备的相同标识相关联,但与第一路由域中的不同边缘设备相关联。 网络设备将与确定的地址前缀相关联的第一路由域中的不同边缘设备分配给共享风险节点组(SRNG)。

    Differentiated routing using tunnels in a computer network
    17.
    发明授权
    Differentiated routing using tunnels in a computer network 有权
    在计算机网络中使用隧道的差分路由

    公开(公告)号:US07945696B2

    公开(公告)日:2011-05-17

    申请号:US11947876

    申请日:2007-11-30

    IPC分类号: G06F15/173

    CPC分类号: H04L45/04 H04L45/02 H04L45/30

    摘要: In one embodiment, one or more tunnel mesh groups may be established in at least a portion of a computer network, where each tunnel mesh group corresponds to a differentiated routing profile. Traffic may then be received at the portion of the computer network, the traffic indicating a particular differentiated routing profile (e.g., based on a received label corresponding to the differentiated routing profile as advertised by the portion of the computer network). Accordingly, the traffic may be routed through the portion of the computer network along a tunnel of a particular tunnel mesh group corresponding to the particular differentiated routing profile traffic.

    摘要翻译: 在一个实施例中,可以在计算机网络的至少一部分中建立一个或多个隧道网格组,其中每个隧道网格组对应于不同的路由简档。 然后可以在计算机网络的部分处接收业务,该业务指示特定差分路由配置文件(例如,基于与该计算机网络的部分所通告的差分路由配置文件对应的接收到的标签)。 因此,业务可以沿着与特定差异化路由选择业务对应的特定隧道网状组的隧道路由到计算机网络的部分。

    Path diversity for customer-to-customer traffic
    18.
    发明申请
    Path diversity for customer-to-customer traffic 有权
    客户到客户流量的路径多样性

    公开(公告)号:US20080123651A1

    公开(公告)日:2008-05-29

    申请号:US11604624

    申请日:2006-11-27

    IPC分类号: H04L12/56

    摘要: In one embodiment, egress provider edge devices (PEs) send advertisements to ingress PEs for address prefixes of a first multi-homed customer network that desires path diversity through a service provider network to a second customer network. A first ingress PE receives the advertisements, and determines whether a second ingress PE is multi-homed with the first ingress PE to the second customer network. If so, the first ingress PE computes a plurality of diverse paths within the service provider network from the first and second multi-homed ingress PEs to a corresponding egress PE. If a plurality of diverse paths exists, the first ingress PE employs one of those paths to establish a first tunnel from itself to a first egress PE, and the second ingress PE employs another of the paths to establish a second tunnel from itself to a second egress PE that is diverse from the first tunnel.

    摘要翻译: 在一个实施例中,出口提供商边缘设备(PE)向用于向通过服务提供商网络到第二客户网络的路径分集的第一多归属客户网络的地址前缀的入口PE发送广告。 第一入口PE接收广告,并且确定第二入口PE是否与第一入口PE多宿主到第二客户网络。 如果是,则第一入口PE将服务提供商网络内的多个不同路径从第一和第二多归位进入PE计算到对应的出口PE。 如果存在多个不同的路径,则第一入口PE使用这些路径之一来建立自己到第一出口PE的第一隧道,并且第二入口PE采用另一路径来建立从其自身到第二隧道的第二隧道 出口PE从第一个隧道是多样的。

    Scaling virtual private networks using service insertion architecture
    19.
    发明授权
    Scaling virtual private networks using service insertion architecture 有权
    使用服务插入架构扩展虚拟专用网

    公开(公告)号:US08675656B2

    公开(公告)日:2014-03-18

    申请号:US11676800

    申请日:2007-02-20

    IPC分类号: H04L12/28

    CPC分类号: H04L12/4675 H04L45/02

    摘要: In one embodiment, service routers may register their serviced VPNs with a service directory/broker (SDB), and edge routers may register their attached VPNs. The SDB may then return service headers, each corresponding to a particular VPN, and also returns an address of a service router corresponding to each service header to the edge routers. An edge router may then push an appropriate service header onto a received packet, and forward the packet to the corresponding service router, which forwards the packet based on a maintained VRF for a VPN according to the service header (e.g., thus the edge routers need only maintain limited/reduced VRFs). Also, services provided by the service routers may be distinguished using service headers accordingly. In this manner, the edge routers may forward packets requiring one or more desired services to service routers configured to perform such services.

    摘要翻译: 在一个实施例中,服务路由器可以向服务目录/代理(SDB)注册其服务的VPN,并且边缘路由器可以注册其附接的VPN。 然后,SDB可以返回各自对应于特定VPN的服务头部,并且还将与每个服务头部对应的服务路由器的地址返回给边缘路由器。 边缘路由器然后可以将适当的服务头部推送到接收到的分组上,并将分组转发到相应的服务路由器,该服务路由器根据服务头部(例如,因此边缘路由器需要)基于用于VPN的维护的VRF转发分组 只保留有限/减少的VRF)。 此外,服务路由器提供的服务可以相应地使用服务头来区分。 以这种方式,边缘路由器可以将需要一个或多个所需服务的分组转发到被配置为执行这样的服务的服务路由器。

    Path diversity for customer-to-customer traffic
    20.
    发明授权
    Path diversity for customer-to-customer traffic 有权
    客户到客户流量的路径多样性

    公开(公告)号:US07710902B2

    公开(公告)日:2010-05-04

    申请号:US11604624

    申请日:2006-11-27

    IPC分类号: H04L12/56 H04J1/16

    摘要: In one embodiment, egress provider edge devices (PEs) send advertisements to ingress PEs for address prefixes of a first multi-homed customer network that desires path diversity through a service provider network to a second customer network. A first ingress PE receives the advertisements, and determines whether a second ingress PE is multi-homed with the first ingress PE to the second customer network. If so, the first ingress PE computes a plurality of diverse paths within the service provider network from the first and second multi-homed ingress PEs to a corresponding egress PE. If a plurality of diverse paths exists, the first ingress PE employs one of those paths to establish a first tunnel from itself to a first egress PE, and the second ingress PE employs another of the paths to establish a second tunnel from itself to a second egress PE that is diverse from the first tunnel.

    摘要翻译: 在一个实施例中,出口提供商边缘设备(PE)向用于向通过服务提供商网络到第二客户网络的路径分集的第一多归属客户网络的地址前缀的入口PE发送广告。 第一入口PE接收广告,并且确定第二入口PE是否与第一入口PE多宿主到第二客户网络。 如果是,则第一入口PE将服务提供商网络内的多个不同路径从第一和第二多归位进入PE计算到对应的出口PE。 如果存在多个不同的路径,则第一入口PE使用这些路径之一来建立自己到第一出口PE的第一隧道,并且第二入口PE采用另一路径来建立从其自身到第二隧道的第二隧道 出口PE从第一个隧道是多样的。