公开(公告)号：US20220038365A1

公开(公告)日：2022-02-03

申请号：US17503162

申请日：2021-10-15

Applicant: Juniper Networks, Inc.

Inventor： Richard Roberts ,  Anantharamu Suryanarayana

IPC: H04L12/751 ,  H04L12/24

Abstract: Techniques for avoiding single points of failure in routing components of an SDN are disclosed. In some aspects, control nodes that provide routing management services are assigned zone identifiers. The control nodes having one zone identifier can be on separate processes and/or physical hardware from control nodes having a different zone identifier. Workloads, such as virtual machines or containers, can establish routing sessions such as Border Gateway Protocol as a Service (BGPaaS) routing sessions using different zone identifiers to ensure that separate control nodes provide routing management services for the primary and secondary compute nodes associated with a high availability service. These techniques in this way facilitate high availability by ensuring that a control node is not a single point of failure for the high availability service provided by the primary and secondary compute nodes.

公开(公告)号：US11165697B2

公开(公告)日：2021-11-02

申请号：US16235350

申请日：2018-12-28

Applicant: Juniper Networks, Inc.

Inventor： Sreelakshmi Sarva ,  Nagendra Prasath Maynattamai Prem Chandran ,  Suresh Kumar Vinapamula Venkata ,  Richard Roberts

IPC: H04L12/715 ,  H04L12/46 ,  H04L12/66 ,  H04L12/713

Abstract: The disclosure describes examples where a first data center includes a first gateway router, a first set of computing devices, and a second set of computing devices. The first set of computing devices is configured to execute a software defined networking (SDN) controller cluster to facilitate operation of one or more virtual networks within the first data center. The second set of computing devices is configured to execute one or more control nodes to exchange route information, between the first gateway router and a second gateway router of a second data center different than the first data center, for a virtual network between computing devices within the second data center, and to communicate control information for the second data center to the second set of computing devices, wherein the one or more control nodes form a subcluster of the SDN controller cluster.

公开(公告)号：US11153194B2

公开(公告)日：2021-10-19

申请号：US16396615

申请日：2019-04-26

Applicant: Juniper Networks, Inc.

Inventor： Richard Roberts ,  Anantharamu Suryanarayana

IPC: H04L12/751 ,  H04L12/24

Abstract: Techniques for avoiding single points of failure in routing components of an SDN are disclosed. In some aspects, control nodes that provide routing management services are assigned zone identifiers. The control nodes having one zone identifier can be on separate processes and/or physical hardware from control nodes having a different zone identifier. Workloads, such as virtual machines or containers, can establish routing sessions such as Border Gateway Protocol as a Service (BGPaaS) routing sessions using different zone identifiers to ensure that separate control nodes provide routing management services for the primary and secondary compute nodes associated with a high availability service. These techniques in this way facilitate high availability by ensuring that a control node is not a single point of failure for the high availability service provided by the primary and secondary compute nodes.

公开(公告)号：US20240406277A1

公开(公告)日：2024-12-05

申请号：US18399888

申请日：2023-12-29

Applicant: Juniper Networks, Inc.

Inventor： Michael Henkel ,  Mahesh Sivakumar ,  Richard Roberts

IPC: H04L67/51 ,  H04L41/0894 ,  H04L41/0895 ,  H04L45/02 ,  H04L45/745 ,  H04L47/125 ,  H04L61/4511

Abstract: Techniques are disclosed for a computing system comprising processing circuitry having access to a storage device, the processing circuitry configured to encode, by a network controller executing in a software defined network (SDN), one or more attributes with information identifying a network service, wherein the one or more attributes conform to a routing protocol. The processing circuitry is also configured to generate, by the network controller, an advertisement in a first network cluster executing within a container orchestration platform of the SDN, wherein the advertisement conforms to the routing protocol and includes the one or more attributes. The processing circuitry is also configured to broadcast, by the network controller and to a second network cluster executing within the container orchestration platform of the SDN, the advertisement in accordance with the routing protocol.

公开(公告)号：US12143353B2

公开(公告)日：2024-11-12

申请号：US18308367

申请日：2023-04-27

Applicant: Juniper Networks, Inc.

Inventor： Sangarshan Pillareddy ,  Yuvaraja Mariappan ,  James Nicholas Davey ,  Prasad Miriyala ,  Richard Roberts ,  Margarida Correia ,  Nagendra E S ,  Haji Mohamed Ashraf Ali

IPC: H04L45/745 ,  G06N20/00 ,  H04L12/46 ,  H04L61/103 ,  H04L61/5007 ,  H04L101/622

Abstract: Techniques are described for learning an unknown virtual network information, such as an virtual Internet Protocol (IP) address, of a pod in a virtual network. In some examples, a virtual router executing at a computing device may receive an Address Resolution Protocol (ARP) packet from a virtual execution element in the virtual network, the virtual execution element executing at the computing device. The virtual router may determine, based at least in part on the ARP packet, whether virtual network information for the virtual execution element in a virtual network is known to the virtual router. The virtual router may, in response to determining that the virtual network information of the virtual execution element in the virtual network is not known to the virtual router, perform learning of the virtual network information for the virtual execution element.

公开(公告)号：US20240364632A1

公开(公告)日：2024-10-31

申请号：US18766220

申请日：2024-07-08

Applicant: Juniper Networks, Inc.

Inventor： Michael Henkel ,  Mahesh Sivakumar ,  Richard Roberts

IPC: H04L45/76 ,  H04L45/02 ,  H04L47/125

CPC classification number: H04L45/76 ,  H04L45/04 ,  H04L47/125

Abstract: Techniques are disclosed for a computing system comprising processing circuitry having access to a storage device, the processing circuitry configured to: generate, by a network controller executing in a software defined network (SDN), an advertisement in a first network cluster executing within a container orchestration platform of the SDN, wherein the advertisement conforms to a routing protocol and comprises information identifying a network service executing in the first network cluster, wherein the network service exposes a backend of a network application to the container orchestration platform of the SDN; and broadcast, by the network controller and to a second network cluster executing within the container orchestration platform of the SDN, the advertisement in accordance with the routing protocol.

公开(公告)号：US20220210113A1

公开(公告)日：2022-06-30

申请号：US17247957

申请日：2020-12-31

Applicant: Juniper Networks, Inc.

Inventor： Sangarshan Pillareddy ,  Yuvaraja Mariappan ,  James Nicholas Davey ,  Prasad Miriyala ,  Richard Roberts ,  Margarida Correia ,  Nagendra E S ,  Haji Mohamed Ashraf Ali

IPC: H04L29/12 ,  H04L12/46 ,  H04L12/741 ,  G06N20/00

Abstract: Techniques are described for learning an unknown virtual network information, such as an virtual Internet Protocol (IP) address, of a pod in a virtual network. In some examples, a virtual router executing at a computing device may receive an Address Resolution Protocol (ARP) packet from a virtual execution element in the virtual network, the virtual execution element executing at the computing device. The virtual router may determine, based at least in part on the ARP packet, whether virtual network information for the virtual execution element in a virtual network is known to the virtual router. The virtual router may, in response to determining that the virtual network information of the virtual execution element in the virtual network is not known to the virtual router, perform learning of the virtual network information for the virtual execution element.

公开(公告)号：US20210385155A1

公开(公告)日：2021-12-09

申请号：US16893183

申请日：2020-06-04

Applicant: Juniper Networks, Inc.

Inventor： Anantharamu Suryanarayana ,  Richard Roberts

IPC: H04L12/703 ,  H04L12/715 ,  H04L12/803 ,  H04L12/707

Abstract: This disclosure describes techniques for improving speed of network convergence after node failure. In one example, a method includes storing, by a virtual router agent of a compute node managed by a Software Defined Networking (SDN) controller, a forwarding information data structure with a shared liveness vector orthogonal to the forwarding path to indicate a liveness state of a plurality of overlay network tunnel endpoint next hops, wherein the shared liveness vector is shared by each of a plurality of members for a plurality of composite next hops that share a common list of the plurality of overlay network tunnel endpoint next hops; and in response to determining, by the virtual router agent, that the orthogonal liveness vector indicates that each of the plurality of overlay network tunnel endpoint next hops are reachable, distributing network traffic to one or more of the plurality of overlay network tunnel endpoint next hops.

公开(公告)号：US20200344166A1

公开(公告)日：2020-10-29

申请号：US16457246

申请日：2019-06-28

Applicant: Juniper Networks, Inc.

Inventor： Richard Roberts ,  Anand Narayanan Rao

IPC: H04L12/745 ,  H04L29/12 ,  H04L12/721 ,  H04L12/931

Abstract: A network device includes one or more processors configured to use a fat flow rule that specifies at least one of a mask to be applied to source Internet protocol (IP) addresses or to destination IP addresses, or that source ports or destination ports are to be ignored. The one or more processors may further be configured to receive packets having different source or destination IP addresses and/or different source or destination ports, and nevertheless assign the packets to the same fat flow according to the fat flow rule, e.g., by masking the source or destination IP addresses and/or ignoring the source or destination ports of the packets. In this manner, the network device may aggregate two or more different flows into a single fat flow.

公开(公告)号：US12068958B1

公开(公告)日：2024-08-20

申请号：US18193583

申请日：2023-03-30

Applicant: Juniper Networks, Inc.

Inventor： Michael Henkel ,  Mahesh Sivakumar ,  Richard Roberts

IPC: H04L45/76 ,  H04L45/02 ,  H04L47/125

CPC classification number: H04L45/76 ,  H04L45/04 ,  H04L47/125

Abstract: Techniques are disclosed for a computing system comprising processing circuitry having access to a storage device, the processing circuitry configured to: generate, by a network controller executing in a software defined network (SDN), an advertisement in a first network cluster executing within a container orchestration platform of the SDN, wherein the advertisement conforms to a routing protocol and comprises information identifying a network service executing in the first network cluster, wherein the network service exposes a backend of a network application to the container orchestration platform of the SDN; and broadcast, by the network controller and to a second network cluster executing within the container orchestration platform of the SDN, the advertisement in accordance with the routing protocol.