Techniques for interconnection of controller- and protocol-based virtual networks

    公开(公告)号:US10476700B2

    公开(公告)日:2019-11-12

    申请号:US15228899

    申请日:2016-08-04

    Abstract: In one embodiment a method includes receiving a first message including information regarding a first host connected to a first tunnel endpoint in a first network domain, the received information being encoded in accordance with a control plane protocol of the first network domain; translating the received first message in accordance with an API and/or a database schema of a second network domain; and transmitting the translated first message to the second network domain. The method further includes receiving a second message comprising information regarding a second host connected to a second tunnel endpoint in the second network domain, the received information being encoded in accordance with the API and/or the database schema of the second network domain; translating the second received message in accordance with the control plane protocol of the first network domain; and transmitting the translated second message to the first network domain.

    INTEROPERABILITY OF DATA PLANE BASED OVERLAYS AND CONTROL PLANE BASED OVERLAYS IN A NETWORK ENVIRONMENT
    23.
    发明申请
    INTEROPERABILITY OF DATA PLANE BASED OVERLAYS AND CONTROL PLANE BASED OVERLAYS IN A NETWORK ENVIRONMENT 审中-公开
    基于数据平面的覆盖的互操作性和基于网络环境的基于平面的覆盖

    公开(公告)号:US20150188723A1

    公开(公告)日:2015-07-02

    申请号:US14644828

    申请日:2015-03-11

    Abstract: Technologies are provided in example embodiments for intercepting a packet being multicast from a first tunnel endpoint in a network, determining first address mapping information of the first tunnel endpoint and a first host, wherein the first host created the packet, generating a control protocol message with the first address mapping information, and communicating the control protocol message through a control plane in the network. In more specific example embodiments, the communicating the control protocol message includes sending the control protocol message to a network repository, where the first address mapping information is registered in the network repository. In other more specific example embodiments, the communicating the control protocol message includes pushing the control protocol message to one or more other tunnel endpoints. Further embodiments include decapsulating the packet to determine an endpoint identifier of the first host and a location of the first tunnel endpoint.

    Abstract translation: 在示例实施例中提供了技术,用于截取来自网络中的第一隧道端点的多播的分组,确定第一隧道端点和第一主机的第一地址映射信息,其中第一主机创建分组,生成具有 第一地址映射信息,并通过网络中的控制平面传送控制协议消息。 在更具体的示例实施例中,传送控制协议消息包括将控制协议消息发送到网络存储库,其中第一地址映射信息被登记在网络存储库中。 在其他更具体的示例实施例中,传达控制协议消息包括将控制协议消息推送到一个或多个其他隧道端点。 另外的实施例包括解封装分组以确定第一主机的端点标识符和第一隧道端点的位置。

    PROVIDING SWITCHPORT PROTECTED FUNCTIONALITY ACROSS ENTERPRISE ACCESS (FABRIC) NETWORKS

    公开(公告)号:US20230379270A1

    公开(公告)日:2023-11-23

    申请号:US17749930

    申请日:2022-05-20

    CPC classification number: H04L49/252 H04L67/2885 H04L47/31

    Abstract: Techniques and architecture are described that utilize switchport protected flags to provide switchport protected functionality across network devices, e.g., switches, routers, etc., in fabric networks. For example, a first port of a first network device of a fabric network receives a packet from a first host destined for a second host. The second host is onboarded to the fabric network via a second port of a second network device. It is determined (i) if a first protected flag associated with the first port of the first network device is set as true and (ii) if a second protected flag associated with the second host is set as true. Based at least in part on (i) the first protected flag associated with the first port being set as true and (ii) the second protected flag being set as true, the first network device drops the packet.

    Hybrid cloud services for enterprise fabric

    公开(公告)号:US11601496B1

    公开(公告)日:2023-03-07

    申请号:US17728657

    申请日:2022-04-25

    Abstract: This disclosure describes techniques and mechanisms for providing hybrid cloud services for enterprise fabric. The techniques include enhancing an on-demand protocol (e.g., such as LISP) and allowing simplified security and/or firewall service insertion for datacenter servers providing those services. Accordingly, the techniques described herein provide hybrid cloud services that work in disaggregated, distributed, and consistent way, while avoiding complex datacenter network devices (e.g., such running overlay on TOR), replacing and moving the functionality to on demand protocol enabled servers, which intelligently receive the required mappings as well as registers and publishes the service information to intelligently interact with the network.

    Distributed network address translation over network environments

    公开(公告)号:US11265289B2

    公开(公告)日:2022-03-01

    申请号:US16685969

    申请日:2019-11-15

    Abstract: This disclosure describes techniques for implementing network address translation as a distributed service over the nodes of a logical network fabric, such as a software-defined network fabric. A method includes registering, by an edge node of a network, an IP address of a client device. The method further includes forwarding, by the edge node, the registered IP address to a control plane of the network. The method further includes checking, by the control plane, a network address translation policy. The method further includes recording, by the control plane, translations between the registered IP address and an allocated IP address in a translation table, each of the translations being related to the edge node. The method further includes returning, by the control plane, the translations between the registered IP address and the allocated IP address to the edge node.

    Extranet connectivity in LISP networks

    公开(公告)号:US10516544B2

    公开(公告)日:2019-12-24

    申请号:US15649479

    申请日:2017-07-13

    Abstract: A Location/Identifier Separation Protocol (LISP) mapping server, including: a network interface for communicating with a LISP-enabled network; a mapping database; an extranet policy table; and a shared subnetwork mapping engine (SSME), including at least a hardware platform, configured to: receive a map request from a first endpoint serviced by a first xTR, the first endpoint on a first subnetwork, the map request for a second endpoint; determine that the second endpoint is not a member of the first subnetwork; query the extranet policy table to identify a second subnetwork that the first subnetwork subscribes to, and to determine that the second endpoint is a member of the second subnetwork; and provide to the first subnetwork a routing locator (RLOC) of an xTR servicing the second endpoint.

Patent Agency Ranking