公开(公告)号：US20200099611A1

公开(公告)日：2020-03-26

申请号：US16138650

申请日：2018-09-21

Applicant: Cisco Technology, Inc.

Inventor： Clarence Filsfils ,  Zafar Ali ,  Frank Brockners

IPC: H04L12/725 ,  H04L29/06 ,  H04L12/715 ,  H04L12/721

Abstract: The present technology provides a system and method for implementing targeted collection of in-situ Operation, Administration and Maintenance data from select nodes in a Segment Routing Domain. The selection is programmable and is implemented by setting an iOAM bit in the function arguments field of a Segment Identifier. In this way only the nodes associated with local Segment Identifiers (Function field of a Segment Identifier) with an iOAM argument bit are directed to generate iOAM data. The iOAM data generated by target nodes may be stored in TLV field of the segment routing header. The Segment Routing packet is then decapsulated at a Segment Routing egress node and the Header information with the collected iOAM data is sent to a controller entity for further processing, analysis and/or monitoring.

公开(公告)号：US20170111209A1

公开(公告)日：2017-04-20

申请号：US15148864

申请日：2016-05-06

Applicant: CISCO TECHNOLOGY, INC.

Inventor： David D. Ward ,  Carlos M. Pignataro ,  Frank Brockners ,  Shwetha Subray Bhandari

IPC: H04L12/24 ,  H04L29/06 ,  H04L12/54

CPC classification number: H04L41/0631 ,  H04L12/4633 ,  H04L12/4641 ,  H04L12/56 ,  H04L41/04 ,  H04L41/0677 ,  H04L41/0686 ,  H04L43/024 ,  H04L43/04 ,  H04L43/0811 ,  H04L43/0817 ,  H04L43/0829 ,  H04L43/0852 ,  H04L43/087 ,  H04L43/0876 ,  H04L43/10 ,  H04L45/50 ,  H04L69/22 ,  H04L2012/5625

Abstract: Embodiments of the disclosure pertain to activating in-band OAM based on a triggering event. Aspects of the embodiments are directed to receiving a first notification indicating a problem in a network; triggering a data-collection feature on one or more nodes in the network for subsequent packets that traverse the one or more nodes; evaluating a subsequent packet that includes data augmented by the data collection feature; and determining the problem in the network based on the data augmented to the subsequent packet.

公开(公告)号：US20250112832A1

公开(公告)日：2025-04-03

申请号：US18477476

申请日：2023-09-28

Applicant: Cisco Technology, Inc.

Inventor： Robert Edgar Barton ,  Frank Brockners ,  Jerome Henry ,  Matthias Falkner ,  Indermeet Singh Gandhi ,  Thomas Michel-Ange Feltin

IPC: H04L41/16 ,  H04L45/74 ,  H04L67/1008

Abstract: Novel techniques and mechanisms enable processing of heavy deep learning workloads on standard edge network devices to optimize the overall inference throughput of the network while meeting Service Level Agreement(s) (SLAs). The techniques can include receiving a deep learning model, determining a graph structure of the deep learning model including neurons organized in layers (the layers including an input layer, a plurality of hidden layers, and an output layer), assigning to a first IP subnet, at least a part of a first hidden layer of the plurality of hidden layers, assigning to a second IP subnet, at least a part of a second hidden layer of the plurality of hidden layers, and deploying the parts of the first and second hidden layers to edge devices as containerized applications with assigned IP addresses, which may be hidden from the user and/or third party application.

公开(公告)号：US12267357B2

公开(公告)日：2025-04-01

申请号：US17672502

申请日：2022-02-15

Applicant: Cisco Technology, Inc.

Inventor： Sujal Sheth ,  Shwetha Subray Bhandari ,  William F. Sulzen ,  Frank Brockners

IPC: H04L9/40 ,  H04L61/103

Abstract: Systems, methods, and computer-readable media for assessing reliability and trustworthiness of devices operating within a network. An ARP responder can receive an ARP request from an ARP requestor for performing address resolution between the ARP requestor and the ARP responder in a network environment. The ARP responder can build an ARP response including attestation information of the ARP responder. Further, the ARP responder can provide, to the ARP requestor, the attestation information for verifying the ARP responder using the ARP response and the attestation information of the ARP responder.

公开(公告)号：US12206581B2

公开(公告)日：2025-01-21

申请号：US18377712

申请日：2023-10-06

Applicant: Cisco Technology, Inc.

Inventor： Atri Indiresan ,  Frank Brockners ,  Shwetha Subray Bhandari

IPC: H04L45/74 ,  H04L41/0695 ,  H04L45/7453 ,  H04L47/2483 ,  H04L61/5007

Abstract: This disclosure describes various methods, systems, and devices related to identifying path changes of data flows in a network. An example method includes receiving, at a node, a packet including a first signature. The method further includes generating a second signature by inputting the first signature and one or more node details into a hash function. The method includes replacing the first signature with the second signature in the packet. The packet including the second value is forwarded by the node.

公开(公告)号：US12113663B1

公开(公告)日：2024-10-08

申请号：US18446272

申请日：2023-08-08

Applicant: Cisco Technology, Inc.

Inventor： Frank Brockners ,  Trevor George Smith ,  Sándor Szilárd Magyari ,  Marco Trinelli ,  Tal Maoz

IPC: H04L41/0659 ,  H04L41/0654 ,  H04L43/0811 ,  H04L67/10

CPC classification number: H04L41/0654 ,  H04L43/0811 ,  H04L67/10

Abstract: A method for unjoining and rejoining clusters of computing nodes in edge site computing networks to reduce the impact of interruption to connectivity between computing nodes is presented. The method includes accessing a cluster of computing nodes executing on an edge site computing network. The cluster of computing nodes includes a plurality of follower computing nodes and a leader computing node. The method further includes detecting an interruption to connectivity established between the leader computing node and one or more of the plurality of follower computing nodes. In response to detecting the interruption to connectivity, the method includes bifurcating the cluster of computing nodes into a first subcluster of computing nodes and a second subcluster of computing nodes. In response to detecting a restoration of connectivity, the method includes recombining the first subcluster of computing nodes and the second subcluster of computing nodes.

公开(公告)号：US20240248992A1

公开(公告)日：2024-07-25

申请号：US18601777

申请日：2024-03-11

Applicant: Cisco Technology, Inc.

Inventor： Eric Voit ,  Einar Nilsen-Nygaard ,  Frank Brockners ,  Pradeep Kumar Kathail

IPC: G06F21/57

CPC classification number: G06F21/57 ,  G06F2221/033

Abstract: This disclosure describes techniques for selectively placing and maintaining sensitive workloads in subsystems that achieve a minimum level of trustworthiness. An example method includes identifying at least one trustworthiness requirement associated with an application and transmitting, to a first subsystem, a request for at least one trustworthiness characteristic of the first subsystem and at least one second subsystem connected to the first subsystem. A response indicating the at least one trustworthiness characteristic is received from the first subsystem. The example method further includes determining that the at least one trustworthiness characteristic satisfies the at least one trustworthiness requirement; and causing the application to operate on a mesh comprising the first subsystem and the at least one second subsystem.

公开(公告)号：US12003368B1

公开(公告)日：2024-06-04

申请号：US18446021

申请日：2023-08-08

Applicant: Cisco Technology, Inc.

Inventor： Pablo Garcia del Valle ,  Frank Brockners ,  Tal Maoz ,  Benjamin William Ryder ,  Aviad Rom

IPC: H04L41/0816 ,  H04L41/0894

CPC classification number: H04L41/0816 ,  H04L41/0894

Abstract: A method for providing a symbiotic network orchestrator utilized to automatically commission edge computing devices on corporate computing networks and edge site computing networks is presented. The method includes receiving an indication of a potential connection of an edge computing device to one or more computing networks associated with the orchestrator. The one or more computing networks includes a corporate computing network and an edge site computing network. The method further includes determining, based on the corporate computing network, the edge site computing network, and a predetermined set of rules, an intent for commissioning the edge computing device, reconfiguring, based on the intent, the corporate computing network and the edge site computing network, and commissioning the edge computing device on one or more of the corporate computing network or the edge site computing network in accordance with the reconfiguring.

公开(公告)号：US11570242B2

公开(公告)日：2023-01-31

申请号：US17499731

申请日：2021-10-12

Applicant: Cisco Technology, Inc.

Inventor： Sujal Sheth ,  Shwetha Subray Bhandari ,  Eric Voit ,  William F. Sulzen ,  Frank Brockners

IPC: G06F15/173 ,  H04L67/104 ,  H04L9/40 ,  H04W24/10 ,  H04L9/32 ,  H04L61/4511 ,  H04L67/1001

Abstract: A verifier peer system transmits a request to an application of another peer system to obtain integrity data of the application. In response to the request, the verifier peer system obtains a response that includes kernel secure boot metrics of the other peer system and integrity data of the application and of any application dependencies. If the verifier peer system determines that the response is valid, the verifier peer system evaluates the integrity data and the kernel secure boot metrics against a set of Known Good Values to determine whether the integrity data and the kernel secure boot metrics are valid. If the integrity data and the kernel secure boot metrics are valid, the verifier peer system determines that the other peer system is trustworthy.

公开(公告)号：US11558288B2

公开(公告)日：2023-01-17

申请号：US16138650

申请日：2018-09-21

Applicant: Cisco Technology, Inc.

Inventor： Clarence Filsfils ,  Zafar Ali ,  Frank Brockners

IPC: H04L12/725 ,  H04L45/302 ,  H04L45/02 ,  H04L45/12 ,  H04L69/22

Abstract: The present technology provides a system and method for implementing targeted collection of in-situ Operation, Administration and Maintenance data from select nodes in a Segment Routing Domain. The selection is programmable and is implemented by setting an iOAM bit in the function arguments field of a Segment Identifier. In this way only the nodes associated with local Segment Identifiers (Function field of a Segment Identifier) with an iOAM argument bit are directed to generate iOAM data. The iOAM data generated by target nodes may be stored in TLV field of the segment routing header. The Segment Routing packet is then decapsulated at a Segment Routing egress node and the Header information with the collected iOAM data is sent to a controller entity for further processing, analysis and/or monitoring.