-
公开(公告)号:US20200319875A1
公开(公告)日:2020-10-08
申请号:US16377148
申请日:2019-04-05
Applicant: Arista Networks, Inc.
Inventor: Prasanna Parthasarathy , Kenneth James Duda , Simon Francis Capper
Abstract: Embodiments disclosed herein relate to method and systems for updating hardware tables. Such methods may include receiving a flexible pipeline definition from a controller at a compiler; generating, by the compiler, a hardware table update initial instruction set; and transmitting the hardware table update initial instruction set to a network device. The network device may use the hardware table initial instruction set to configure the network device to implement the flexible pipeline definition for a network chip.
-
公开(公告)号:US20200213908A1
公开(公告)日:2020-07-02
申请号:US16793420
申请日:2020-02-18
Applicant: Arista Networks, Inc.
Inventor: Kenneth James Duda , Michael Chih-Yen Wang
Abstract: A method and apparatus of a device that triggers a pause watchdog is described. In an exemplary embodiment, the device receives a pause message from a second network element on a first network element, where the pause message indicates that data should not be transmitted by the first network element. The device additionally triggers a pause watchdog on the first network element if the pause message is above a pause watchdog threshold, where the pause watchdog reduces the effect of the pause message.
-
公开(公告)号:US10693705B2
公开(公告)日:2020-06-23
申请号:US15078457
申请日:2016-03-23
Applicant: Arista Networks, Inc.
Inventor: Kenneth James Duda
IPC: H04L12/58 , H04L29/08 , G06F16/9535 , H04L12/24 , A63F13/86 , H04N21/478
Abstract: A method for accessing operational information of a deployed network device through non-preprogrammed command line interface instructions. More specifically, a show command service is disclosed, which enables the procurement of additional configuration and/or state information on a network device through a coordination point.
-
公开(公告)号:US20190222466A1
公开(公告)日:2019-07-18
申请号:US16362608
申请日:2019-03-23
Applicant: Arista Networks, Inc.
Inventor: Kenneth James Duda
IPC: H04L12/24 , H04L12/775 , H04L12/751
CPC classification number: H04L41/00 , H04L41/0816 , H04L45/02 , H04L45/58 , H04L45/74 , H04L49/3009 , H04L49/602
Abstract: A method for processing state information updates. The method includes receiving, by a coordination point, a plurality of state information from a plurality of network elements; processing at least one of the plurality of state information to generate a result; and applying the result to at least one of the plurality of network elements in order to modify an operation of the at least one of the plurality of network elements.
-
公开(公告)号:US10263957B2
公开(公告)日:2019-04-16
申请号:US15169527
申请日:2016-05-31
Applicant: Arista Networks, Inc.
Inventor: Kenneth James Duda
IPC: H04L29/06
Abstract: A method and apparatus of a device that installs a new access control list for a port of a network element is described. In an exemplary embodiment, a network element receives an indication that the first access control list for the port is to be updated with a second access control list and the port processes data communicated with port with the first access control list. In addition, the network element configures the port to use a fallback access control list, where the fallback access control list includes a plurality of rules and the port uses the fallback access control list to process data communicated with the port. Furthermore, the network element loads the second access control list for the port. The network element additionally configures the port to use the second access control list, wherein the port uses the second access control list to process data communicated with the port.
-
公开(公告)号:US10216853B2
公开(公告)日:2019-02-26
申请号:US14317713
申请日:2014-06-27
Applicant: Arista Networks, Inc.
Inventor: Kenneth James Duda
Abstract: A method for distributing VXLAN information that includes receiving, from a first leaf network device and by a first intermediate network device, first VXLAN information associated with a first computing device. The first leaf network device is connected to the first computing device and includes a first database server. The first intermediate network device includes a first database client and a second database server. The method also includes storing the first VXLAN information in a first database entry on the first intermediate network device; sending, by a second database server, a first copy of the first database entry to a higher-tier network device, and sending, by the first database client, a second copy of the first database entry to a third database server. The third database server is executing on a second leaf network device.
-
公开(公告)号:US20180246731A1
公开(公告)日:2018-08-30
申请号:US15626030
申请日:2017-06-16
Applicant: Arista Networks, Inc.
Inventor: Sudip Regmi , Udayakumar Srinivasan , Kenneth James Duda , Anirban Sinha
Abstract: A method and apparatus of a network element that installs a device driver used to manage hardware of the network element is described. In an exemplary embodiment, the network element detects, with a functionality of a network element operating system, the hardware of a data plane of the network element, where at least one component of the network element operating system is executing in a first container as a first set of processes. The network element further determines a device driver for the hardware and installs the device driver in a kernel of the host operating system. The network element additionally manages the data, with the network element operating system, using the device driver.
-
公开(公告)号:US20170359182A1
公开(公告)日:2017-12-14
申请号:US15469437
申请日:2017-03-24
Applicant: Arista Networks, Inc.
Inventor: Alexander Channing Ho , Kenneth James Duda , Lorenz Wolfgang Redlefsen
CPC classification number: H04L9/3247 , G06F21/44 , G06F2221/2129 , H04L9/3242 , H04L63/126
Abstract: A method and apparatus of a network element that authenticates a field replaceable unit of the network element is described. The network element authenticates a field replaceable unit of the network element by generating a nonce. In addition, the network element generates a signature using a nonce and a private encryption key that is securely stored in the field replaceable unit. The network element further verifies the signature using a public encryption key that is a pair to the private encryption key and is not securely stored in the field replaceable unit. If the field replaceable unit is verified, the network element uses the field replaceable unit to operate the network element. Otherwise, the network element disables the field replaceable unit.
-
公开(公告)号:US20170223575A1
公开(公告)日:2017-08-03
申请号:US15060518
申请日:2016-03-03
Applicant: Arista Networks, Inc.
Inventor: Kenneth James Duda , Michael Chih-Yen Wang
Abstract: A method and apparatus of a device that triggers a pause watchdog is described. In an exemplary embodiment, the device receives a pause message from a second network element on a first network element, where the pause message indicates that data should not be transmitted by the first network element. The device additionally triggers a pause watchdog on the first network element if the pause message is above a pause watchdog threshold, where the pause watchdog reduces the effect of the pause message.
-
公开(公告)号:US20160323319A1
公开(公告)日:2016-11-03
申请号:US15155936
申请日:2016-05-16
Applicant: Arista Networks, Inc.
Inventor: Douglas Alan Gourlay , Kenneth James Duda
IPC: H04L29/06 , H04L12/741 , H04L12/931 , H04L12/24 , H04L12/813
CPC classification number: H04L63/20 , H04L41/0816 , H04L41/0893 , H04L45/72 , H04L45/74 , H04L47/20 , H04L47/80 , H04L49/354 , H04L49/70 , H04L63/0876 , H04L63/10 , H04L63/123
Abstract: A method and system for securing a VXLAN environment, including configuring a default network policy, associated with interfaces of the network device, for dropping all VXLAN frames including a VXLAN attribute; obtaining, by the network device, registered VTEP identifiers; determining, using the registered VTEP identifiers, that an interface of the network device is operatively connected to a registered VTEP associated with a registered VTEP identifier; disassociating the default network policy from the interface based on the determination; receiving, at the interface, a frame; performing a first verification that the frame is a VXLAN frame by examining the frame to determine that the frame includes the VXLAN attribute; performing a second verification to determine that the VXLAN frame includes a registered VTEP identifier; allowing, based on the first verification and the second verification, the network device to process the VXLAN frame; and processing the VXLAN frame.
-
-
-
-
-
-
-
-
-