Approach to visualize current and historical access policy of a group based policy

    公开(公告)号:US10187270B2

    公开(公告)日:2019-01-22

    申请号:US14997342

    申请日:2016-01-15

    Abstract: Systems, methods, and non-transitory computer-readable storage media for visualizing current and historical access policy of a group based policy. A first group based policy and a second group based policy are received at a computing device, where each group based policy includes policy rules defining a range of destination internet protocol addresses, a range of source internet protocol addresses and a range of access ports. The computing device renders a three dimensional representation of the first group based policy, based on the policy rules of the first group based policy. The computing device renders a three dimensional representation of the second group based policy, based on the policy rules of the second group based policy. The computing device displays the representations of the first group based policy and second group based policy on a graphical interface.

    Attribute set—ID in border gateway protocol

    公开(公告)号:US09843498B2

    公开(公告)日:2017-12-12

    申请号:US14804069

    申请日:2015-07-20

    CPC classification number: H04L45/04 H04L12/66 H04L61/25 H04L61/6068 H04L65/102

    Abstract: Present disclosure relates to methods for preparing BGP update messages for transmission and processing received update messages. The methods are based on grouping path attributes common to a plurality of IP address prefixes into respective sets identified with respective set identifiers and, instead of duplicating path attributes in each BGP update message, including a respective identifier referring to a certain set of path attributes provided in an earlier BGP update message when sending subsequent update messages. Grouping of path attributes into individual sets associated with respective identifiers provides significant advantages by enabling re-use of the results of previous processing on both the sending and receiving sides associated with transmission of BGP update messages. In addition, such an approach limits the amount of information transmitted in the control plane because duplicate sets of path attributes may only be transmitted once and merely be referred to in subsequent update messages.

    Apparatus and method to hide transit only multi-access networks in OSPF
    24.
    发明授权
    Apparatus and method to hide transit only multi-access networks in OSPF 有权
    在OSPF中隐藏只有多路访问网络的设备和方法

    公开(公告)号:US09356856B2

    公开(公告)日:2016-05-31

    申请号:US14013990

    申请日:2013-08-29

    Abstract: In one embodiment, a first router determines whether a network coupling the first router to one or more second routers is transit-only, wherein transit-only indicates connecting only routers to provide for transmission of data from router to router. When the network is transit-only, the first router generates an Open Shortest Path First (OSPF) Link State Advertisement (LSA) that includes an address for the network and a designated network mask. The designated network mast operates as a transit-only identification that indicates the address should not be installed in a Routing Information Base (RIB) upon receipt of the OSPF LSA at the one or more second routers. When the network is not transit-only, the first router generates an OSPF LSA that includes the address for the network but does not include the designated network mask, to permit installation of the address in a RIB upon receipt of the OSPF LSA at the one or more second routers.

    Abstract translation: 在一个实施例中,第一路由器确定将第一路由器耦合到一个或多个第二路由器的网络是否是仅运输,其中,传输仅指示仅连接路由器以提供从路由器到路由器的数据传输。 当网络仅传输时,第一路由器生成包括网络地址和指定网络掩码的开放最短路径优先(OSPF)链路状态通告(LSA)。 指定的网络桅杆作为仅传输标识操作,其指示在一个或多个第二路由器上接收到OSPF LSA时,该地址不应安装在路由信息库(RIB)中。 当网络不通过时,第一个路由器生成包含网络地址但不包括指定网络掩码的OSPF LSA,以便在接收到OSPF LSA时在一个RIB中安装该地址 或更多的第二路由器。

    Scaling service discovery in a micro-service environment

    公开(公告)号:US11412053B2

    公开(公告)日:2022-08-09

    申请号:US16505618

    申请日:2019-07-08

    Abstract: Systems and methods provide for scaling service discovery in a micro-service environment. A controller can inject a service discovery agent onto a host. At least one of the controller or the agent can identify a first set of micro-service containers that are dependencies of the first micro-service container and a second set of micro-service containers that are dependencies of the second micro-service container. At least one of the controller or the agent can update routing data for the first set of micro-service containers and the second set of micro-service containers. At least one of the controller or the agent can determine the second micro-service container has terminated on the host computing device. At least one of the controller or the agent can update the agent to remove the routing data for the second set of micro-service containers.

    SCALING SERVICE DISCOVERY IN A MICRO-SERVICE ENVIRONMENT

    公开(公告)号:US20190335004A1

    公开(公告)日:2019-10-31

    申请号:US16505618

    申请日:2019-07-08

    Abstract: Systems and methods provide for scaling service discovery in a micro-service environment. A controller can inject a service discovery agent onto a host. At least one of the controller or the agent can identify a first set of micro-service containers that are dependencies of the first micro-service container and a second set of micro-service containers that are dependencies of the second micro-service container. At least one of the controller or the agent can update routing data for the first set of micro-service containers and the second set of micro-service containers. At least one of the controller or the agent can determine the second micro-service container has terminated on the host computing device. At least one of the controller or the agent can update the agent to remove the routing data for the second set of micro-service containers.

    Directed acyclic graph optimization for future time instance advertised by a parent network device

    公开(公告)号:US10015075B1

    公开(公告)日:2018-07-03

    申请号:US15454991

    申请日:2017-03-09

    CPC classification number: H04L45/02 H04L12/44 H04L12/462 H04L45/48 H04W84/18

    Abstract: In one embodiment, a method comprises identifying, by a network device, a future time interval for establishment of a corresponding future tree-based topology that is to be optimized according to an identified objective function, the future tree-based topology and corresponding identified objective function distinct from a current tree-based topology optimized according to a corresponding current objective function; and generating and outputting, by the network device, a message advertising the network device offering availability of the future tree-based topology optimized at the future time interval for the identified objective function, enabling other network devices to attach to the network device during the future time interval for communications optimized according to the identified objective function.

    Attribute SET_ID in border gateway protocol

    公开(公告)号:US09942145B2

    公开(公告)日:2018-04-10

    申请号:US14812239

    申请日:2015-07-29

    CPC classification number: H04L45/745 H04L45/02 H04L45/04

    Abstract: Present disclosure relates to methods for preparing BGP update messages for transmission and processing received update messages. The methods are based on grouping path attributes common to a plurality of IP address prefixes into respective sets identified with respective set identifiers and, instead of duplicating path attributes in each BGP update message, including a respective identifier referring to a certain set of path attributes provided in an earlier BGP update message when sending subsequent update messages. Grouping of path attributes into individual sets associated with respective identifiers provides significant advantages by enabling re-use of the results of previous processing on both the sending and receiving sides associated with transmission of BGP update messages. In addition, such an approach limits the amount of information transmitted in the control plane because duplicate sets of path attributes may only be transmitted once and merely be referred to in subsequent update messages.

Patent Agency Ranking