Recovering from virtual port channel peer failure

    公开(公告)号:US10116493B2

    公开(公告)日:2018-10-30

    申请号:US14550844

    申请日:2014-11-21

    Abstract: Systems, methods, and non-transitory computer-readable storage media for recovering from a partial failure of a virtual port chain (vPC) domain. The first and second vPC peers may be paired to create a vPC having a virtual address. An endpoint host may communicate with a network via the virtual port channel. The system may detect that the first virtual port channel peer is down. During or after the first vPC reboots, the reachability cost for the first vPC with regards to the virtual address can be set to an inflated value. The first vPC peer may also delay its bring up time while it synchronizes its vPC state information with the second vPC peer. The second vPC can continue to advertise the association between the endpoint host and the virtual address. Upon completion of the synchronization, the first vPC peer may bring up the link and restore the reachability cost.

    Policy Verification in a Network
    28.
    发明申请
    Policy Verification in a Network 有权
    网络中的策略验证

    公开(公告)号:US20160366019A1

    公开(公告)日:2016-12-15

    申请号:US14736523

    申请日:2015-06-11

    CPC classification number: H04L41/0893 H04L43/10 H04L63/101 H04L63/20

    Abstract: A determination is made at a network connected device that a network policy is to be verified. The network policy is applied to network packets sent to an endpoint within a network, and the application of the policy to network traffic can result in at least two outcomes. Another determination is made at the network connected device that a switch is provisionable to host the endpoint. The network connected device provisions a simulated endpoint version of the endpoint at the switch to host the policy. At least one packet is sent to the simulated endpoint via the network connected device for each of the at least two outcomes of the policy. At least one response is received by the network connected device from the simulated endpoint indicating how the policy was applied to each of the packets.

    Abstract translation: 在网络连接设备上确定要验证网络策略。 网络策略被应用于发送到网络中的端点的网络分组,并且策略对网络流量的应用可以产生至少两个结果。 在网络连接设备上进行另一个确定,即交换机可用于托管端点。 网络连接设备在交换机上提供端点的模拟端点版本以承载策略。 对于策略的至少两个结果中的每一个,至少一个分组经由网络连接的设备发送到模拟端点。 网络连接设备从模拟端点接收至少一个响应,指示策略如何应用于每个分组。

    On-demand learning in overlay networks
    29.
    发明授权
    On-demand learning in overlay networks 有权
    覆盖网络中的按需学习

    公开(公告)号:US09374294B1

    公开(公告)日:2016-06-21

    申请号:US14290151

    申请日:2014-05-29

    Inventor: Ayaskant Pani

    Abstract: Systems, methods, and non-transitory computer-readable storage media for on-demand learning of routing information. The system receives a first packet directed to an endpoint device in a network, the first packet including a destination address associated with the endpoint device. Next, the system determines that the destination address does not have an associated network node identified in a routing table, and lists the destination address in a pending learning cache table to yield a pending learning entry. Based on the pending learning entry, the system then modifies the routing table to identify a network address of the associated network node for the destination address, wherein modifying the routing table is performed in response to receiving a second packet from the endpoint device, and wherein the network address of the associated network node is identified based on the second packet.

    Abstract translation: 用于路由信息的按需学习的系统,方法和非暂时的计算机可读存储介质。 系统接收指向网络中的端点设备的第一分组,第一分组包括与端点设备相关联的目的地地址。 接下来,系统确定目的地地址不具有在路由表中标识的相关联的网络节点,并且列出未决学习高速缓存表中的目的地地址以产生未决学习条目。 基于未决学习条目,系统然后修改路由表以识别用于目的地地址的相关联的网络节点的网络地址,其中响应于从端点设备接收到第二分组来执行修改路由表,并且其中 基于第二分组来识别相关网络节点的网络地址。

    ANOMALY DETECTION IN PROTOCOL PROCESSES
    30.
    发明申请
    ANOMALY DETECTION IN PROTOCOL PROCESSES 审中-公开
    方案检测过程中的异常检测

    公开(公告)号:US20160149776A1

    公开(公告)日:2016-05-26

    申请号:US14551992

    申请日:2014-11-24

    Abstract: Systems, methods and transitory computer-readable storage media for constructing a loop free multicast tree. The methods include collecting data sample points to form a first data set, each of the data sample points representing a network feature variable, each network feature variable associated with a corresponding network feature, calculating a standard deviation and a mean value of the network feature variables for each network feature, performing normalization of the network feature variables to obtain normalized network feature variables, calculating, using the standard deviation and the mean value for each network feature, a probability value (p-value) for each normalized network feature variable, and determining if an anomaly exists with respect to each network feature based at least upon the p-value for each normalized network feature variable.

    Abstract translation: 用于构建无循环组播树的系统,方法和暂时计算机可读存储介质。 所述方法包括收集数据采样点以形成第一数据集,每个数据采样点表示网络特征变量,每个网络特征变量与相应的网络特征相关联,计算标准偏差和网络特征变量的平均值 对于每个网络特征,执行网络特征变量的归一化以获得归一化的网络特征变量,使用每个网络特征的标准偏差和平均值,计算每个规范化网络特征变量的概率值(p值),以及 至少基于每个规范化网络特征变量的p值来确定是否存在关于每个网络特征的异常。

Patent Agency Ranking