公开(公告)号：US20190068598A1

公开(公告)日：2019-02-28

申请号：US15686552

申请日：2017-08-25

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Joon-Myung Kang ,  Mario Antonio Sanchez ,  Ying Zhang ,  Anu Mercian ,  Raphael Amorim Dantas Leite ,  Sujata Banerjee

IPC: H04L29/06 ,  G06F21/57

Abstract: Example method includes: receiving, by a network device, a plurality of input policy graphs and a composed policy graph associated with the input policy graphs; dividing the composed policy graph into a plurality of sub-graphs, each sub-graph comprising a plurality of edges and a plurality of source nodes and destination nodes that the edges are connected to; selecting a first subset of sub-graphs that include, as a source node, a disjoint part of an original source EPG for each input policy graph; identifying a second subset within the first subset of sub-graphs that include, as a destination node, a disjoint part of an original destination EPG for the each input policy graph; and verifying whether connectivity in the composed policy graph reflects a corresponding policy in the plurality of input policy graphs for each sub-graph in the second subset.

公开(公告)号：US11425049B2

公开(公告)日：2022-08-23

申请号：US16685877

申请日：2019-11-15

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Ying Zhang ,  Wenfei Wu ,  Sujata Banerjee

IPC: H04L47/2425 ,  H04L41/5009 ,  H04L43/55 ,  H04L43/08 ,  H04L43/10

Abstract: In some implementations, a method includes conducting, by a network device, a query associated with a network function chain comprising a plurality of switches and middleboxes to verify whether a service performed by the network function chain complies with a Service Level Agreement (SLA); computing, by the network device, based on a result of the query, a difference in metric value between an actual performance metric of a packet passing through a path in the network function chain and an expected performance metric of the packet passing through the path; deriving, by the network device, a probability of SLA violation associated with the path based on the difference in metric value; and selectively monitoring, by the network device, a network of network function chains by monitoring the path for passive performance measurements based on the probability of SLA violation.

公开(公告)号：US20180316576A1

公开(公告)日：2018-11-01

申请号：US15581826

申请日：2017-04-28

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Joon Myung Kang ,  Anubhavnidhi Abhashkumar ,  Sujata Banerjee ,  Ying Zhang ,  Wenfei Wu

IPC: H04L12/24 ,  H04L12/26

Abstract: Example method includes: receiving, by a network device in a network, a first network policy and a second network policy configured by a network administrator, wherein the first network policy comprises a first metric and the second network policy comprises a second and different metric; detecting, by the network device, a conflict between the first network policy and the second network policy; determining, by the network device, a relationship between the first metric and the second metric; modifying, by the network device, at least one of the first network policy and the second network policy to resolve the conflict based on the relationship between the first metric and the second metric; and combining, by the network device, the first network policy and the second network policy to generate a composite network policy that is represented on a single policy graph.

公开(公告)号：US20180131621A1

公开(公告)日：2018-05-10

申请号：US15345123

申请日：2016-11-07

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Wenfei Wu ,  Ying Zhang ,  Sujata Banerjee

IPC: H04L12/851 ,  H04L12/26 ,  H04L29/06

CPC classification number: H04L43/028 ,  H04L41/145 ,  H04L67/1004

Abstract: In some examples, a method includes parsing, by a network device, a section of source code associated with a network function provided by a middlebox in a network; extracting, by the network device, a packet processing slice and a state transition slice from the section of source code; generating, by the network device, a plurality of execution paths from the packet processing slice and the state transition slice; and modeling the middlebox by inserting, by the network device, the plurality of execution paths to a match-action table that describes a packet processing model for the middlebox.

公开(公告)号：US10594574B2

公开(公告)日：2020-03-17

申请号：US15345123

申请日：2016-11-07

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Wenfei Wu ,  Ying Zhang ,  Sujata Banerjee

IPC: H04L12/26 ,  H04L29/08 ,  H04L12/24

Abstract: In some examples, a method includes parsing, by a network device, a section of source code associated with a network function provided by a middlebox in a network; extracting, by the network device, a packet processing slice and a state transition slice from the section of source code; generating, by the network device, a plurality of execution paths from the packet processing slice and the state transition slice; and modeling the middlebox by inserting, by the network device, the plurality of execution paths to a match-action table that describes a packet processing model for the middlebox.

公开(公告)号：US20180123911A1

公开(公告)日：2018-05-03

申请号：US15336495

申请日：2016-10-27

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Ying Zhang ,  Sujata Banerjee ,  Sharon Barkai

IPC: H04L12/24 ,  H04L12/26 ,  H04L12/733

CPC classification number: H04L41/5019 ,  H04L41/5009 ,  H04L43/08 ,  H04L43/0852 ,  H04L43/0876 ,  H04L43/0894 ,  H04L45/122

Abstract: In some examples, a method includes parsing, by a network device, a set of flow rules and network function configurations to identify an equivalent class of packets passing through network function chains; identifying, by the network device, a plurality of paths that packets belonging to the equivalent class pass through; computing, by the network device, a first set of Service Level Agreement (SLA) performance metrics for the equivalent class; constructing, by the network device, a set of stateful forwarding criteria comprising the first set of SLA performance metrics; and verifying, by the network device, whether the network function chains comply with a SLA based on the stateful forwarding criteria.