公开(公告)号：US10884728B2

公开(公告)日：2021-01-05

申请号：US16414447

申请日：2019-05-16

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Jayanthi R ,  Javier Antich

IPC: G06F8/65 ,  H04L29/08 ,  G06F16/901 ,  H04L12/24

Abstract: A controller device manages a plurality of network devices. The controller device includes one or more processing units configured to receive an upgrade request; determine an upgrade graph having nodes each representing one of the network devices or a network service provided by the network, and also having one or more edges each connecting two of the nodes and representing a network redundancy or service dependency; compute and assign, an edge weight to each edge by combining results of at least one objective function, each of the at least one objective functions having a minimum objective or maximum objective for the network; partition the upgrade graph into a plurality of sub-groups based on the edge weights; determine an upgrade schedule; and upgrade software of each of the plurality of network devices according to the upgrade schedule.

公开(公告)号：US20200313957A1

公开(公告)日：2020-10-01

申请号：US16370243

申请日：2019-03-29

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Jayanthi R

IPC: H04L12/24 ,  H04L12/26

Abstract: A controller device manages a plurality of network devices. The controller device includes one or more processing units implemented in circuitry and configured to determine that one or more stateless intents of a deployed graph model including a first set of stateless intents used to manage the plurality of network devices have changed, wherein stateless intents comprise fully declarative descriptions of an intended state of a network including the network devices, state of one or more of the network devices, or state of storage for the network; maintain both the deployed graph model and an undeployed graph model including a second set of stateless intents including the one or more changed stateless intents; compile the changed stateless intents of the undeployed graph model to generate low-level configuration data for the network devices; and configure the network devices using the low-level configuration data.

公开(公告)号：US10558542B1

公开(公告)日：2020-02-11

申请号：US15475942

申请日：2017-03-31

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Nirmal Anburose

IPC: H04L12/24 ,  G06F11/30 ,  H04L12/26 ,  G06N20/00

Abstract: In one example, a network management system (NMS) and method models services in a network. The NMS identifies externally mapped attributes in a vendor neutral yang model of a network service, assigns an attribute type to one or more of the externally mapped attributes, wherein assigning includes determining, by a learning system, the attribute type of one or more of the externally mapped attributes based on an analysis of attribute types assigned to the externally mapped attributes of other network services, constructs a separate dependency graph for each of the externally mapped attributes and builds a separate hidden service model for each of the externally mapped attributes, wherein the externally mapped attribute for each hidden service model is a merge attribute for that hidden service model.

公开(公告)号：US20200036589A1

公开(公告)日：2020-01-30

申请号：US16116725

申请日：2018-08-29

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Nirmal Anburose ,  Jayanthi R

IPC: H04L12/24

Abstract: Techniques are disclosed for managing a network. In one example, a device configuration manager is configured to generate, in accordance with a device management protocol, a configuration change request representing a transaction having a first sub-transaction specifying a first configuration change for a network device of the network and a second sub-transaction specifying a second configuration change for the same network device. The device configuration manager is further configured to output the configuration change request to the network device and receive a reply message from the network device. The reply message includes a first response element specifying whether the first configuration change is successfully committed at the network device and a second response element specifying whether the second configuration change is successfully committed at the network device.

公开(公告)号：US10516761B1

公开(公告)日：2019-12-24

申请号：US15462465

申请日：2017-03-17

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Nirmal Anburose

IPC: G06F15/173 ,  H04L29/08 ,  H04L12/26

Abstract: In one example, a network management system (NMS) device manages a plurality of network devices. The NMS device includes one or more processing units, implemented using digital logic circuitry, configured to receive configuration data for a plurality of network devices managed by the NMS device, construct a graph database representing the configuration data, wherein to construct the graph database, the one or more processing units are configured to construct a plurality of vertices representing respective elements of the configuration data, and connect related vertices of the plurality of vertices with edges. The one or more processing units are further configured to manage the plurality of network devices using the graph database.

公开(公告)号：US10476755B1

公开(公告)日：2019-11-12

申请号：US16212150

申请日：2018-12-06

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Nirmal Anburose

IPC: G06F15/173 ,  H04L12/24 ,  H04L12/26 ,  H04L29/08

Abstract: In one example, a network management system (NMS) is configured to enable a target network device to support a particular network service based on service configuration information for the particular network service. The service configuration information may include information about nodes in a vendor neutral model that need to be added or modified in order to support the particular network service. The NMS determines similarity scores between nodes in a vendor neutral model and nodes in a target device specific model. Based on the similarity scores, the NMS generates a mapping from the vendor neutral model to the target device specific model. Using the mapping, the NMS may configure a target device to support the particular service.

公开(公告)号：US10148506B1

公开(公告)日：2018-12-04

申请号：US15195960

申请日：2016-06-28

Applicant: Juniper Networks, Inc.

Inventor： Nirmal Anburose ,  Chandrasekhar A

IPC: G06F15/16 ,  H04L12/24 ,  H04L29/08 ,  H04L12/46 ,  G06F17/30

Abstract: A system and method for service discovery. A network management system fetches, from a first network device, configuration data associated with a service executing on the first network device. In response to determining that the service extends across multiple network devices, the network management system constructs, based on the configuration data, a first partial service instance associated with the service executing on the first network device. The network management system merges a plurality of partial service instances to form a merged partial service instance, the plurality of partial service instances including the first partial service instance and a second partial service instance associated with the service executing on a different network device. The network management system promotes the merged partial service instance as a service instance.

公开(公告)号：US12284218B2

公开(公告)日：2025-04-22

申请号：US18070948

申请日：2022-11-29

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Jayanthi R

IPC: H04L9/40

Abstract: A system may identify a security intent policy model associated with an initial time. The system may generate one or more delta snapshots that respectively indicate one or more incremental changes to the security intent policy model at times subsequent to the initial time. The system may determine that the system is to deploy an updated version of the security intent policy model to a device and may thereby determine a previous deployment time at which the system deployed a previous version of the security intent policy model to the device. The system may generate, based on the one or more delta snapshots and the previous deployment time, a cumulative delta snapshot, and may thereby update a low-level security intent policy model associated with the device. The system may generate, based on the low-level security intent policy model, device-level security configuration information for the device.

公开(公告)号：US12231290B2

公开(公告)日：2025-02-18

申请号：US18432206

申请日：2024-02-05

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Frank Jas ,  Premchandar N ,  Amarnath B. Satyan

IPC: H04L41/0806 ,  H04L41/084 ,  H04L41/0893 ,  H04L41/12 ,  H04L41/5009

Abstract: A method includes receiving a plurality of configurations comprising a first configuration for provisioning a first set of network services at a first resource of an edge device and a second configuration for provisioning a second set of network services at the first resource, a first configuration group identifier identifying a configuration group for the first configuration, and a first network performance parameter for the configuration group. The method further includes determining a performance factor for the first resource providing the first set of network services to one or more client devices. The method further includes, in response to determining that the performance factor does not satisfy the first network performance parameter for the configuration group and that the first configuration group identifier identifies the configuration group for the first configuration, moving the first configuration from the first resource to a second resource of the edge device.

公开(公告)号：US20250055647A1

公开(公告)日：2025-02-13

申请号：US18490681

申请日：2023-10-19

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Jayanthi R

IPC: H04L5/00 ,  H04L1/1812

Abstract: In some implementations, one or more network devices may receive, by one or more network devices associated with a first point of presence (POP) in a first cloud deployment, a message associated with a tenant. The one or more network devices may identify based at least in part on the message, one or more second POPs, associated with the tenant, in one or more second cloud deployments. The one or more network devices may transmit the message to the one or more second POPs.