End-to-end path delay measurements in a network

    公开(公告)号:US10892967B2

    公开(公告)日:2021-01-12

    申请号:US16229983

    申请日:2018-12-21

    摘要: Techniques are provided for determining end-to-end path delay measurements. In one embodiment, a method includes identifying equal-cost multi-path (ECMP) sections comprising at least two different ECMP paths in a network comprising a plurality of nodes. In response to receiving a request to determine a delay measurement for end-to-end paths from an ingress node to an egress node through the network, the method includes determining sets of ECMP sections that are between the ingress node and the egress node and determining a plurality of paths through each set of ECMP sections. The method includes measuring delay for each of the plurality of paths using probe packets and determining delay measurements for all end-to-end paths. The delay measurements for end-to-end paths include a first subset including measured delays from the probe packets and a second subset calculated using combinations of measured delays.

    SYSTEMS AND METHODS FOR DETERMINING SECURE NETWORK PATHS

    公开(公告)号:US20200322391A1

    公开(公告)日:2020-10-08

    申请号:US16579906

    申请日:2019-09-24

    摘要: In one embodiment, an apparatus includes one or more processors and one or more computer-readable non-transitory storage media coupled to the one or more processors. The one or more computer-readable non-transitory storage media include instructions that, when executed by the one or more processors, cause the apparatus to perform operations including determining a path through a plurality of provider nodes within a provider network and determining that the path through the plurality of provider nodes within the provider network is secure. The operations also include receiving, from a customer node, a Resource Reservation Protocol (RSVP) path message comprising an attribute for a security request. The operations further include routing the RSVP path message along the path of the plurality of provider nodes.

    SYSTEMS AND METHODS FOR DETERMINING SECURE NETWORK ELEMENTS USING FLEXIBLE ALGORITHM TECHNOLOGY

    公开(公告)号:US20200322254A1

    公开(公告)日:2020-10-08

    申请号:US16598852

    申请日:2019-10-10

    IPC分类号: H04L12/721 H04L29/06

    摘要: In one embodiment, an apparatus includes one or more processors and one or more computer-readable non-transitory storage media coupled to the one or more processors. The one or more computer-readable non-transitory storage media include instructions that, when executed by the one or more processors, cause the apparatus to perform operations including receiving a first type-length-value (TLV) associated with a winning flexible algorithm definition (FAD) from a first element of a network. The operations also include determining a security level for the winning FAD based on the TLV. The operations further include determining a data transmission route through a plurality of elements of the network based on the security level for the winning FAD.

    Applying Attestation Tokens to The Intermediate System to Intermediate System (ISIS) Routing Protocol

    公开(公告)号:US20200322150A1

    公开(公告)日:2020-10-08

    申请号:US16600856

    申请日:2019-10-14

    IPC分类号: H04L9/32 H04L12/751

    摘要: In one embodiment, a method includes receiving an ISIS hello message including an attestation token from a second network apparatus, determining that the attestation token is valid for the second network apparatus at a current time, establishing an adjacency to the second network apparatus in response to the determination, computing, based at least on the attestation token, a trust level for a first link from the first network apparatus to the second network apparatus and a trust level for first prefixes associated with the first link, and sending an LSP comprising the trust level for the first link and the trust level for the first prefixes to neighboring network apparatuses, where the trust level for the first link and the trust level for the prefixes are used by the network apparatuses in the network to compute a routing table of the network.

    SCALABLE NETWORK SLICE BASED QUEUING USING SEGMENT ROUTING FLEXIBLE ALGORITHM

    公开(公告)号:US20200244588A1

    公开(公告)日:2020-07-30

    申请号:US16825168

    申请日:2020-03-20

    摘要: The present technology is directed to a system and method for implementing network resource partitioning and Quality of Service (QoS) separation through network slicing. Embodiments of the present invention describe scalable network slicing method based on defining Segment Routing Flexible Algorithm to represent a network slice and assigning a distinct QoS policy queue to each of the Flexible Algorithms configured on a network node. Therefore, scalable network slice based queuing is implemented wherein a single packet processing queue is assigned to each Flex-Algorithm based network slice. QoS policy queue may be implemented in a hierarchical fashion by differentiation between flow packets in a single QoS policy queue based on value of experimental bits in the header.

    Segment-routing multiprotocol label switching end-to-end dataplane continuity

    公开(公告)号:US10469372B2

    公开(公告)日:2019-11-05

    申请号:US15865570

    申请日:2018-01-09

    摘要: A method is performed at a source node in a network of nodes configured with a link state protocol, and in which at least some of the nodes are enabled for multiprotocol label switching (MPLS). The node discovers and stores a link state topology representing the nodes of the network, links between the nodes, path-costs for the links, and whether each link is enabled or not enabled for MPLS. The node determines one or more shortest paths from the source node to a destination node among the nodes based on traversing the link state topology and, while the node traverses the link state topology, detects whether each shortest path supports or does not support MPLS end-to-end dataplane continuity. The node programs an IP dataplane with each shortest path, and programs an MPLS dataplane with ones of the one or more shortest paths that support the end-to-end MPLS continuity.

    Segment routing extension headers
    69.
    发明授权

    公开(公告)号:US10382334B2

    公开(公告)日:2019-08-13

    申请号:US16050180

    申请日:2018-07-31

    摘要: A system and method are disclosed for using segment routing (SR) in native IP networks. The method involves receiving a packet. The packet is an IP packet and includes an IP header. The method also involves updating the packet. Updating the packet involves writing information, including a segment routing segment identifier, to the destination address of the packet.

    SEGMENT-ROUTING MULTIPROTOCOL LABEL SWITCHING END-TO-END DATAPLANE CONTINUITY

    公开(公告)号:US20190215266A1

    公开(公告)日:2019-07-11

    申请号:US15865570

    申请日:2018-01-09

    摘要: A method is performed at a source node in a network of nodes configured with a link state protocol, and in which at least some of the nodes are enabled for multiprotocol label switching (MPLS). The node discovers and stores a link state topology representing the nodes of the network, links between the nodes, path-costs for the links, and whether each link is enabled or not enabled for MPLS. The node determines one or more shortest paths from the source node to a destination node among the nodes based on traversing the link state topology and, while the node traverses the link state topology, detects whether each shortest path supports or does not support MPLS end-to-end dataplane continuity. The node programs an IP dataplane with each shortest path, and programs an MPLS dataplane with ones of the one or more shortest paths that support the end-to-end MPLS continuity.