Securing multiprotocol label switching (MPLS) payloads

    公开(公告)号:US11882029B2

    公开(公告)日:2024-01-23

    申请号:US17663319

    申请日:2022-05-13

    CPC classification number: H04L45/50 H04L45/66 H04L63/0464 H04L63/061 H04L69/22

    Abstract: In some implementations, an ingress network device of a multiprotocol label switching (MPLS) network may receive a packet destined for a destination network device. The ingress network device may determine, based on the packet, a secure function to secure the packet and a label associated with a label-switched path (LSP) from the ingress network device to an egress network device of the MPLS network that is associated with the destination network device. The ingress network device may encrypt, using the secure function, the packet to generate an encrypted packet. The ingress network device may generate an MPLS packet comprising: an MPLS header that includes the label and a secure function indicator, a secure MPLS data header that includes information identifying the secure function, and an MPLS payload that includes the encrypted packet. The ingress network device may forward, based on the label, the MPLS packet.

    Model-based service placement
    33.
    发明授权

    公开(公告)号:US11855848B2

    公开(公告)日:2023-12-26

    申请号:US17459231

    申请日:2021-08-27

    Abstract: An example computing device is configured to receive an instance of a customer service model representative of a plurality of customer services. Each of the plurality of customer services associated with a corresponding at least one requirement and a corresponding at least one constraint. The computing device is configured to receive an instance of a resource model representative of a plurality of resources and map the instance of the customer service model and the instance of the resource model to an internal placement model. The computing device is configured to allocate the plurality of resources to the plurality of customer services such that the at least one requirement and the at least one constraint for each of the plurality of customer services are satisfied and inverse map data indicating how the plurality of resources are allocated to a format consumable by the customer device and output the inverse mapped data.

    Assignment of segment identifiers in segment routing

    公开(公告)号:US11165691B1

    公开(公告)日:2021-11-02

    申请号:US16877870

    申请日:2020-05-19

    Abstract: This disclosure describes techniques relating to assigning unique segment identifiers (SIDs) in a segment routing network. In one example, this disclosure describes a method that includes receiving, by a computing system and from a node on a network, a request to allocate a segment identifier for use in a segment routing network; allocating, by the computing system and from a block of addresses, an assigned segment identifier; responding to the request by outputting, by the computing system and over the network to the node, information about the assigned segment identifier; and maintaining the assigned segment identifier.

Patent Agency Ranking