Service chaining in fabric networks

    公开(公告)号:US12170614B2

    公开(公告)日:2024-12-17

    申请号:US18545931

    申请日:2023-12-19

    Abstract: Techniques are described herein for service chaining in fabric networks such that hardware resources can be preserved without service nodes needing additional capabilities. The techniques may include storing a first configuration associated with a first VRF instance of a service forwarding node that is connected to a first service of a service chain sequence. The first configuration may indicate an identifier and a type associated with a second service of the service chain sequence where traffic is to be sent after the first service. Additionally, the techniques may also include storing a second configuration associated with a second VRF instance of the service forwarding node that is connected to the second service. The second configuration may indicate that the second service is a last service of the service chain sequence. When traffic is received at the service forwarding node, the service forwarding node can determine whether the traffic is pre-service traffic or post-service traffic.

    DATA SOVEREIGNTY AND SERVICE INSERTION IN MULTISITE NETWORK FABRIC

    公开(公告)号:US20240073127A1

    公开(公告)日:2024-02-29

    申请号:US17897634

    申请日:2022-08-29

    CPC classification number: H04L45/38 H04L45/126 H04L45/22

    Abstract: Techniques for a Software-Defined Networking (SDN) controller associated with a multisite network to implement jurisdictional data sovereignty polices in a multisite network, route network traffic flows between user sites and destination services over one or more provider sites, and/or perform a routing operation on the network traffic flow(s) based on the jurisdictional data sovereignty policies. The jurisdictional data sovereignty polices may be implemented using destination group tags (DGTs) and/or source group tags (SGTs). A secure access service edge (SASE) associated with the network controller may generate, store, and distribute the DGTs to provider sites and/or the SGTs to user sites. Based on the SGT and/or DGT associated with a network traffic flow, one or more services may be applied to the network traffic flow, and the network traffic flow may be routed through a particular region of a software-defined access (SDA) transit.

    METHODS FOR SEAMLESS SESSION TRANSFER WITHOUT RE-KEYING

    公开(公告)号:US20230254698A1

    公开(公告)日:2023-08-10

    申请号:US18188934

    申请日:2023-03-23

    CPC classification number: H04W12/50 H04L9/14 H04L9/0819 H04W12/63

    Abstract: A method for a seamless transfer of a secure multimedia conference session from one endpoint device to another without a need to rekey the session is provided. In this method, a first endpoint device connects a participant to a multimedia conference session to which at least one other participant is connected and based on detecting one or more second endpoint devices within a predetermined location proximity of the first endpoint device, determines whether to transfer the multimedia conference session to a target endpoint device. Based on determining that the session is to be transferred, the first endpoint device establishes a secure pairing connection directly with the target endpoint device and provides, via the secure pairing connection, information about the multimedia conference session based on which the multimedia conference session is transferred to the target endpoint device without rekeying the multimedia conference session.

    GROUPING ENDPOINTS OF A NETWORK FOR NAT TO ORGANIZE IP ADDRESS SPACE FOR POLICY APPLICATIONS

    公开(公告)号:US20230254250A1

    公开(公告)日:2023-08-10

    申请号:US17665868

    申请日:2022-02-07

    CPC classification number: H04L45/745

    Abstract: Techniques and architecture are described that utilize network address translation (NAT) based on a group tag such that legacy and third-party devices may utilize and apply “subnet” based policies, thereby allowing the subnet based policies to be as effective as “group” based policies. In particular, a subnet may be applied to a group tag where the group tag is not understandable outside an access network such as, for example, a fabric network. Thus, when a packet originates from a fabric network utilizing group tags representing source groups of endpoints and is destined for a legacy or a third-party device-based network that does not utilize and/or understand group tags, then the group is converted into a subnet. Since that subnet is different from the source host within the fabric network, network address translation (NAT) is utilized.

Patent Agency Ranking