公开(公告)号：US20240267257A1

公开(公告)日：2024-08-08

申请号：US18418621

申请日：2024-01-22

Applicant: Juniper Networks, Inc.

Inventor： Kaliraj Vairavakkalai ,  Natrajan Venkataraman ,  Balaji Rajagopalan ,  Vasudevan Navaneetha Krishnan

IPC: H04L12/46 ,  H04L45/302 ,  H04L45/745 ,  H04L47/193 ,  H04L47/2408 ,  H04L67/75

CPC classification number: H04L12/4633 ,  H04L45/302 ,  H04L45/745 ,  H04L47/193 ,  H04L47/2408 ,  H04L67/75

Abstract: Techniques are disclosed for disseminating network service-specific mapping information across administrative domains. In one example, a network device receives an indication of a route target and one or more underlay tunnels configured to support a service route. The service route is configured to transport network traffic associated with a first network service of a plurality of network services. The network device defines, based on the indication, a first transport class of a plurality of transport classes. The network device receives a service route for the first network service and stores a correspondence between the service route and the first transport class. The network device receives network traffic associated with the first network service and forwards, based on the correspondence, the network traffic along the underlay tunnels specified by the first transport class.

公开(公告)号：US12058022B2

公开(公告)日：2024-08-06

申请号：US18146274

申请日：2022-12-23

Applicant: Juniper Networks, Inc.

Inventor： Prasad Miriyala ,  Michael Henkel ,  Sangyeong Kim ,  Senthilnathan Murugappan ,  Jeffrey S. Marshall ,  Akhilesh Pathodia

IPC: H04L12/24 ,  H04L29/08 ,  H04L41/40 ,  H04L43/20 ,  G06F11/34 ,  G06F11/36

CPC classification number: H04L43/20 ,  H04L41/40

Abstract: In general, techniques are described that provide an analysis system for analyzing a software-defined networking (SDN) architecture system. The analysis system comprising the processing circuitry configured to obtain operational data representative of one or more of configuration, operation, and maintenance of the SDN architecture system. The processing circuitry may identify dependencies between the operational data that identify dependencies between objects representative of the configuration, operation, and maintenance of the SDN architecture system. The processing circuitry may perform, while traversing the dependences between the operational data, analysis with respect to the operational data in order to identify potential issues in the SDN architecture system, and output the potential issues in the SDN architecture system.

公开(公告)号：US20240259311A1

公开(公告)日：2024-08-01

申请号：US18633311

申请日：2024-04-11

Applicant: Juniper Networks, Inc.

Inventor： Darrell Ball

IPC: H04L45/745 ,  H04L45/00

CPC classification number: H04L45/745 ,  H04L45/38

Abstract: Techniques are disclosed for providing automatic policy configuration for packet flows. For example, a computing device comprises a virtual node and one or more virtual execution elements coupled to the virtual node. The computing device may also comprise one or more processors configured to: receive a packet originating from an application workload hosted on the one or more virtual execution elements and destined for a remote destination device; determine the packet is part of a new packet flow; in response, configure, by a kernel of the computing device and without sending the packet to a user space of the computing device, a policy for a forward packet flow for the new packet flow; configure, by the kernel, a policy for a reverse packet flow associated with the forward packet flow; and send the packet toward the remote destination device in accordance with the policy for the forward packet flow.

公开(公告)号：US12052223B2

公开(公告)日：2024-07-30

申请号：US17301909

申请日：2021-04-19

Applicant: Juniper Networks, Inc.

Inventor： Naresh Chand ,  Ranjan Sinha

IPC: H04L9/40 ,  H04L47/28 ,  H04L67/1074 ,  H04L12/46

CPC classification number: H04L63/029 ,  H04L47/28 ,  H04L63/0485 ,  H04L67/1074 ,  H04L12/4633

Abstract: A network device identifies an Internet Protocol Security (IPsec) tunnel that connects the network device to a remote device and determines that dead peer detection (DPD) is enabled at the network device. The network device receives a first DPD request message from the remote device via the IPsec tunnel, and sends a first DPD response message to the remote device via the IPsec tunnel. The network device determines that a workload of the network device satisfies a threshold amount, and sends one or more encapsulating security payload (ESP) packets that include traffic flow confidentiality (TFC) payload data to the remote device via the IPsec tunnel. The network device determines that the workload of the network device does not satisfy the threshold amount. The network device receives a second DPD request message from the remote device and sends a second DPD response message to the remote device via the IPsec tunnel.

公开(公告)号：US20240250910A1

公开(公告)日：2024-07-25

申请号：US18628122

申请日：2024-04-05

Applicant: Juniper Networks, Inc.

Inventor： Jisheng Wang ,  Michael Baj ,  Patrick Timmons ,  Patrick J. MeLampy ,  Kaushik Adesh Agrawal ,  Ruchit Rajkumar Mehta

IPC: H04L47/2425

CPC classification number: H04L47/2425

Abstract: An example method includes receiving, by a software-defined networking in a wide area network (SD-WAN) system having a first WAN link and a second WAN link for an SD-WAN service, WAN link characterization data for the first WAN link over a time period; determining, by the SD-WAN system based on processing the WAN link characterization data for the first WAN link using a machine learning model trained with historical WAN link characterization data for one or more WAN links, an indicator of a predicted performance metric of the first WAN link at a future time; and reassigning, by the SD-WAN system based on the indicator, an application from the first WAN link to the second WAN link.

公开(公告)号：US12047297B2

公开(公告)日：2024-07-23

申请号：US17462036

申请日：2021-08-31

Applicant: Juniper Networks, Inc.

Inventor： Prashanth Ramaprasad ,  Madhu Byrapura Doddegowda ,  Ronald Bonica

IPC: H04L43/16 ,  H04L43/0882 ,  H04L45/12 ,  H04L47/125

CPC classification number: H04L47/125 ,  H04L43/0882 ,  H04L43/16 ,  H04L45/123

Abstract: A disclosed method may include (1) identifying a route installed in a Forwarding Information Base (FIB) of a network device included in a network, (2) identifying a plurality of active paths that lead from the network device to a destination device of the route installed in the FIB, (3) determining a load distribution of the plurality of active paths by calculating a plurality of traffic loads that represent amounts of traffic that traverse from the network device to the destination device via the plurality of active paths, and (4) making a trafficking decision in connection with the plurality of active paths based at least in part on the load distribution of the plurality of active paths. Various other apparatuses, systems, and methods are also disclosed.

公开(公告)号：US12047277B2

公开(公告)日：2024-07-23

申请号：US17932960

申请日：2022-09-16

Applicant: Juniper Networks, Inc.

Inventor： Abilash Menon ,  Anna Yungelson ,  Scott A. McCulley ,  Jacob Dionne

IPC: H04L45/24 ,  H04L12/46 ,  H04L45/00 ,  H04L45/16 ,  H04L45/42 ,  H04L45/745 ,  H04L61/103 ,  H04L67/146 ,  H04L101/622

CPC classification number: H04L45/24 ,  H04L12/4641 ,  H04L45/16 ,  H04L45/42 ,  H04L45/66 ,  H04L45/745 ,  H04L61/103 ,  H04L67/146 ,  H04L2101/622

Abstract: Techniques are disclosed for session-based routing of multipoint Open Systems Interconnection (OSI) Model Layer-2 (L2) frames of an L2 network extended over Layer-3 (L3) networks. In one example, L2 networks connect a source device to an ingress router and receiver devices to egress routers. An L3 network connects the ingress and egress routers. The ingress router receives, from the source device, a multipoint L2 frame destined for the receiver devices. The ingress router forms, for each egress router that is connected to at least one multipoint receiver device, a unicast L3 packet for the L2 frame and forwards the unicast L3 packet to the egress router. Each egress router generates, in response to receiving the unicast L3 packet, the multipoint L2 frame and forwards, to the receiver devices, the multipoint L2 frame.

公开(公告)号：US20240243974A1

公开(公告)日：2024-07-18

申请号：US18623310

申请日：2024-04-01

Applicant: Juniper Networks, Inc.

Inventor： Jonathan C. BARTH ,  Vishnu Pavan BEERAM ,  Srihari Ramachandra SANGLI ,  Chandrasekar RAMACHANDRAN

IPC: H04L41/0893 ,  H04L12/46 ,  H04L41/40 ,  H04L45/02 ,  H04L45/64

CPC classification number: H04L41/0893 ,  H04L12/4641 ,  H04L41/40 ,  H04L45/04 ,  H04L45/64

Abstract: A network device may receive a border gateway protocol (BGP) flow specification route associated with creation of an overlay network slice in a network, and may create a new routing instance based on the BGP flow specification route. The network device may associate interfaces defined by the BGP flow specification route with virtual private network (VPN) members, and may determine VPN parameters based on the BGP flow specification route. The network device may advertise the VPN parameters within the network to cause the network to generate the overlay network slice.

公开(公告)号：US12035408B2

公开(公告)日：2024-07-09

申请号：US17454200

申请日：2021-11-09

Applicant: Juniper Networks, Inc.

Inventor： Mohammad Zohoorian ,  Ebrahim Safavi ,  Shmuel Shaffer

IPC: H04W8/02 ,  H04W4/029

CPC classification number: H04W8/02 ,  H04W4/029

Abstract: A network management system (NMS) is configured to control roaming in a wireless network using a variable mobility threshold. For a first wireless device associated with a current location, the NMS obtains at least one performance metric of a first wireless signal received by the first wireless device at the current location from a first AP of a plurality of APs, compares the at least one parameter of the first wireless signal to at least one performance metric of a second wireless signal received by at least one other wireless device at the current location from a second AP of the plurality of APs, and triggers a roaming operation of the first wireless device from the first AP to the second AP if the comparison satisfies a mobility threshold that varies based on the at least one performance metric of the first wireless signal.

公开(公告)号：US12035160B1

公开(公告)日：2024-07-09

申请号：US17644280

申请日：2021-12-14

Applicant: Juniper Networks, Inc.

Inventor： Vladimir Vladimirovich Kozin ,  Scott Morgan Bowers

IPC: H04J1/16 ,  H04W24/08 ,  H04W84/12

CPC classification number: H04W24/08 ,  H04W84/12

Abstract: A computing system includes a storage device and processing circuitry having access to the storage device. The processing circuitry is configured to receive a sequence of channel state information (CSI) samples, and calculate, based on the sequence of CSI samples, frequency domain information including a set of frequency domain values for each frequency band of a plurality of frequency bands. The processing circuitry is further configured to select a set of frequency bands of the plurality of frequency bands; and calculate, based on the set of frequency domain values for each frequency band of the set of frequency bands, a set of similarity values. Additionally, the processing circuitry is configured to determine, based on the set of similarity values, information indicative of one or more characteristics of a space between a first computing device and a second computing device, and perform an action based on the information.