Applying attestation tokens to the intermediate system to intermediate system (ISIS) routing protocol

    公开(公告)号:US11277264B2

    公开(公告)日:2022-03-15

    申请号:US16600856

    申请日:2019-10-14

    Abstract: In one embodiment, a method includes receiving an ISIS hello message including an attestation token from a second network apparatus, determining that the attestation token is valid for the second network apparatus at a current time, establishing an adjacency to the second network apparatus in response to the determination, computing, based at least on the attestation token, a trust level for a first link from the first network apparatus to the second network apparatus and a trust level for first prefixes associated with the first link, and sending an LSP comprising the trust level for the first link and the trust level for the first prefixes to neighboring network apparatuses, where the trust level for the first link and the trust level for the prefixes are used by the network apparatuses in the network to compute a routing table of the network.

    MALLEABLE ROUTING FOR DATA PACKETS
    222.
    发明申请

    公开(公告)号:US20210377162A1

    公开(公告)日:2021-12-02

    申请号:US17360283

    申请日:2021-06-28

    Abstract: Various implementations disclosed herein enable malleable routing for data packets. For example, in various implementations, a method of routing a type of data packets is performed by a device. In some implementations, the device includes a non-transitory memory and one or more processors coupled with the non-transitory memory. In some implementations, the method includes determining a routing criterion to transmit a set of data packets across a network. In some implementations, the method includes identifying network nodes and communication links in the network that satisfy the routing criterion. In some implementations, the method includes determining a route for the set of data packets through the network nodes and the communication links that satisfy the routing criterion. In some implementations, the method includes configuring the network nodes that are on the route with configuration information that allows the set of data packets to propagate along the route.

    In-band direct mode performance loss measurement in software defined networks

    公开(公告)号:US11184235B2

    公开(公告)日:2021-11-23

    申请号:US16191676

    申请日:2018-11-15

    Abstract: Mechanisms are provided for “direct mode” (in-band) performance loss measurement in computer networks where packet loss is measured directly in the data plane using techniques based on ECMP paths. Counters on each of an ingress node and an egress node are configured by a network controller to count traffic for indicators associated with different equal-cost multi-path (ECMP) paths through a network between ingress and egress nodes. Each indicator is toggled on or off during a measurement interval during which traffic is measured by the traffic counters on the ingress and egress nodes for each ECMP path. The traffic counters (measured in bytes/packets) from the ingress and egress nodes are sent via event driven telemetry to the network controller for performance loss measurement determination.

    Systems and Methods for SRv6 Micro Segment Insertion

    公开(公告)号:US20210320884A1

    公开(公告)日:2021-10-14

    申请号:US16847173

    申请日:2020-04-13

    Abstract: The present disclosure relates to methods and systems for inserting micro segments into a data packet. The methods may include the steps of receiving a packet with a destination address corresponding to a Micro Segment Identifier (uSID) carrier having one or more existing micro segments followed by one or more empty micro segment positions, receiving information relating to one or more new micro segments to be inserted into the uSID carrier, the one or more new micro segments associated with a new bit length, calculating a remaining bit length of the uSID carrier, the remaining bit length associated with the one or more empty micro segment positions in the uSID carrier, wherein, if the remaining bit length is greater than or equal to the new bit length, updating the uSID carrier by inserting the new micro segments, and forwarding the packet to destinations associated with the updated uSID carrier.

    Communicating packets across multi-domain networks using compact forwarding instructions

    公开(公告)号:US11140074B2

    公开(公告)日:2021-10-05

    申请号:US16580944

    申请日:2019-09-24

    Abstract: Techniques and mechanisms for compressing the size of SIDs to be smaller than a complete IPv6 address (or “micro SIDs”), and scaling micro SIDs across a multi-domain environment using micro SID-domain-blocks. Segment routing over IPv6 (SRv6) uses 128-bit IPv6 addresses as SIDs for segment routing. According to this disclosure, multiple SRv6 SIDs may be expressed in a compact format such that a 128-bit IPv6 address, such as the destination address field of the IPv6 header, may store multiple micro SIDs. Further, SID-domain-blocks may be assigned to each domain in a multi-domain network such that micro SIDs may be expressed in the context of a given domain, rather than being shared in the global multi-domain network. In this way, lists of domain-specific SIDs may be fully expressed in the IPv6 destination address of the packet to scale micro SID into large, multi-domain networks.

    Packet network interworking including segment routing

    公开(公告)号:US11134002B2

    公开(公告)日:2021-09-28

    申请号:US16659484

    申请日:2019-10-21

    Abstract: In one embodiment, a network comprises a first forwarding domain using a first data plane forwarding protocol and a second forwarding domain using a second data plane forwarding protocol different than the first data forwarding plane forwarding protocol. The first forwarding domain includes a first path node and a particular border node. The second forwarding domain includes a second path node and the particular border node. The particular border node performs Segment Routing or other protocol interworking between the different data plane forwarding domains, such as for transporting packets through a different forwarding domain or translating a packet to use a different data forwarding protocol. These forwarding domains typically include Segment Routing (SR) and SR-Multiprotocol Label Switching (SR-MPLS). Paths through the network are determined by a Path Computation Engine and/or based on route advertisements such associated with Binding Segment Identifiers (BSIDs) (e.g., labels, Internet Protocol version 6 addresses).

    Malleable routing for data packets
    227.
    发明授权

    公开(公告)号:US11050662B2

    公开(公告)日:2021-06-29

    申请号:US15986174

    申请日:2018-05-22

    Abstract: Various implementations disclosed herein enable malleable routing for data packets. For example, in various implementations, a method of routing a type of data packets is performed by a device. In some implementations, the device includes a non-transitory memory and one or more processors coupled with the non-transitory memory. In some implementations, the method includes determining a routing criterion to transmit a set of data packets across a network. In some implementations, the method includes identifying network nodes and communication links in the network that satisfy the routing criterion. In some implementations, the method includes determining a route for the set of data packets through the network nodes and the communication links that satisfy the routing criterion. In some implementations, the method includes configuring the network nodes that are on the route with configuration information that allows the set of data packets to propagate along the route.

    IN-SITU PASSIVE PERFORMANCE MEASUREMENT IN A NETWORK ENVIRONMENT

    公开(公告)号:US20210111999A1

    公开(公告)日:2021-04-15

    申请号:US17130336

    申请日:2020-12-22

    Abstract: Techniques for in-situ passive performance measurement are described. In one embodiment, a method includes receiving a data packet at a first network element, determining whether measurement information is to be collected for the data packet, providing one or more measurement fields for the data packet based on a determination that measurement information is to be collected for the data packet in which at least one measurement field identifies a measurement type, and forwarding the data packet to a second network element. The method further includes determining, by the second network element, the measurement type for the data packet, and performing one or more actions based on the measurement type.

    Virtualized media processing pipeline

    公开(公告)号:US10904365B2

    公开(公告)日:2021-01-26

    申请号:US15794334

    申请日:2017-10-26

    Abstract: Aspects of the disclosed technology provide virtualized solutions for processing media frames. A process of the disclosed technology can include steps for receiving unprocessed media packets, de-packetizing the unprocessed media packets to produce unprocessed media frames, and sending the unprocessed media frames to a virtual media application. In some aspects, the process may further include steps for processing the unprocessed media frames, using the virtual media application, to produce processed media frames. Systems and machine-readable media are also provided.

Patent Agency Ranking