公开(公告)号：US12166749B2

公开(公告)日：2024-12-10

申请号：US17707217

申请日：2022-03-29

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Bhaskar T. Reddy ,  Jayanthi R

IPC: H04L9/40 ,  H04L67/101

Abstract: A system determines identification information associated with an endpoint device, which is associated with a tenant of the system, and the tenant. The system generates and sends, to the endpoint device, a certificate that includes the identification information. The system receives, from the endpoint device and as part of an attempt by the endpoint device to initiate a dial-out communication session with the system, the certificate. The system causes, based on the certificate, the dial-out communication session to be established and processes the certificate to determine the identification information. The system receives, from the endpoint device and via the dial-out communication session, one or more messages; modifies the one or more messages to include the identification information; and provides the one or more modified messages to facilitate provisioning of services or resources associated with the system to the endpoint device.

公开(公告)号：US12147315B2

公开(公告)日：2024-11-19

申请号：US18070954

申请日：2022-11-29

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Premchandar N ,  Jayanthi R

IPC: G06F11/14 ,  G06F16/11 ,  G06F16/174

Abstract: A system identifies an intent policy model associated with an initial time. The system updates a data structure to cause the data structure to include one or more portions. Each portion of the data structure is associated with a start time and an end time. Each portion includes: a first delta snapshot that indicates one or more first changes to the intent policy model from the initial time to the start time associated with the portion, and one or more additional delta snapshots that respectively indicate one or more incremental changes to the intent policy model at times from the start time and to the end time associated with the portion of the data structure.

公开(公告)号：US20240179051A1

公开(公告)日：2024-05-30

申请号：US18432206

申请日：2024-02-05

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Frank Jas ,  Premchandar N ,  Amarnath B. Satyan

IPC: H04L41/0806 ,  H04L41/084 ,  H04L41/0893 ,  H04L41/12 ,  H04L41/5009

CPC classification number: H04L41/0806 ,  H04L41/0843 ,  H04L41/0893 ,  H04L41/12 ,  H04L41/5009

Abstract: A method includes receiving a plurality of configurations comprising a first configuration for provisioning a first set of network services at a first resource of an edge device and a second configuration for provisioning a second set of network services at the first resource, a first configuration group identifier identifying a configuration group for the first configuration, and a first network performance parameter for the configuration group. The method further includes determining a performance factor for the first resource providing the first set of network services to one or more client devices. The method further includes, in response to determining that the performance factor does not satisfy the first network performance parameter for the configuration group and that the first configuration group identifier identifies the configuration group for the first configuration, moving the first configuration from the first resource to a second resource of the edge device.

公开(公告)号：US11973645B1

公开(公告)日：2024-04-30

申请号：US18299016

申请日：2023-04-11

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Premchandar N ,  Jayanthi R

IPC: G06F15/177 ,  H04L9/40 ,  H04L41/082

CPC classification number: H04L41/082 ,  H04L63/0272

Abstract: A controller device manages a plurality of network devices. The controller device includes one or more processing units configured to receive an indication of a stateful intent, the data structure including a plurality of nodes and a plurality of edges, each node of the plurality of nodes being representative of a respective network device of the plurality of network devices. The one or more processing units are configured to determine, using an abstract function configured at a node of the plurality of nodes, a stateless intent for implementing the stateful intent and generate low level configuration data for the plurality of network devices based on the stateless intent. The one or more processing units are configured to interface with one or more of the plurality of network devices to configure the one or more of the plurality of network devices with the low level configuration data.

公开(公告)号：US11922162B2

公开(公告)日：2024-03-05

申请号：US18178708

申请日：2023-03-06

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Jayanthi R ,  Javier Antich

IPC: G06F8/65 ,  G06F16/901 ,  H04L41/00 ,  H04L41/082 ,  H04L41/0853 ,  H04L41/0894 ,  H04L41/12 ,  H04L67/00

CPC classification number: G06F8/65 ,  G06F16/9024 ,  H04L41/082 ,  H04L41/0856 ,  H04L41/0894 ,  H04L41/12 ,  H04L41/20 ,  H04L67/34

Abstract: A controller device manages a plurality of network devices. The controller device includes one or more processing units configured to receive an upgrade request; obtain a redundancy model indicating network device redundancies or service redundancies; determine, based on the upgrade request and the redundancy model, an update graph having nodes each representing one of the network devices or one of the services, the update graph also having at least one edge that connects two of the nodes and that indicates the network redundancy or the service redundancy; determine, based on the update graph including the at least one edge, an update schedule for performing an update of software for the network devices that ensures availability for the first network device or second network device or availability for the service; and update the software of each of the network devices according to the update schedule.

公开(公告)号：US11888679B2

公开(公告)日：2024-01-30

申请号：US17032799

申请日：2020-09-25

Applicant: Juniper Networks, Inc.

Inventor： Gert Grammel ,  Jayanthi R ,  Chandrasekhar A

IPC: H04L41/0631 ,  H04L41/069

CPC classification number: H04L41/0631 ,  H04L41/069

Abstract: An example method includes obtaining, by one or more processors, data indicating resource dependencies between a plurality of resources in a network and event dependencies between a plurality of network events and one or more of the plurality of resources; generating a Bayesian model based on resource types of the plurality of resources and event types of the plurality of network events; receiving an indication of a fault in the network; collecting fault data and generating, based on the Bayesian model and the fault data, a plurality of root cause hypotheses for the fault; ordering the plurality of root cause hypotheses based on respective root cause probabilities associated with the plurality of root cause hypotheses; and outputting the ordered plurality of root cause hypotheses.

公开(公告)号：US11805011B2

公开(公告)日：2023-10-31

申请号：US17449626

申请日：2021-09-30

Applicant: Juniper Networks, Inc.

Inventor： Pradeep H. Krishnamurthy ,  Chandrasekhar A ,  Rahamath Sharif ,  Raviraj Satish Deshmukh

IPC: H04L41/0806 ,  H04L12/46 ,  H04L41/12 ,  H04L61/2567 ,  H04W8/00 ,  H04L101/622

CPC classification number: H04L41/0806 ,  H04L12/4633 ,  H04L41/12 ,  H04L61/2567 ,  H04L2101/622 ,  H04W8/005

Abstract: In one example, a network management system discovers a plurality of network devices behind a network address translation device, such as a firewall. The network management system may receive a model of a seed network device, generate a first activation configuration and commit the first activation configuration on the seed network device. The network management system may connect to the seed network device and discover neighboring devices from information in the seed network device. The network management system may connect to the neighboring devices, automatically create a model of the neighboring network devices, generate s activation configurations for the neighboring network devices and commit the activation configurations on the neighboring network devices. The network management system may iterative perform these steps until it discovers all the discoverable network devices behind the network address translation device.

公开(公告)号：US11658872B1

公开(公告)日：2023-05-23

申请号：US17822617

申请日：2022-08-26

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Premchandar N ,  Jayanthi R

IPC: G06F15/177 ,  H04L41/082 ,  H04L9/40

CPC classification number: H04L41/082 ,  H04L63/0272

Abstract: A controller device manages a plurality of network devices. The controller device includes one or more processing units configured to receive an indication of a stateful intent, the data structure including a plurality of nodes and a plurality of edges, each node of the plurality of nodes being representative of a respective network device of the plurality of network devices. The one or more processing units are configured to determine, using an abstract function configured at a node of the plurality of nodes, a stateless intent for implementing the stateful intent and generate low level configuration data for the plurality of network devices based on the stateless intent. The one or more processing units are configured to interface with one or more of the plurality of network devices to configure the one or more of the plurality of network devices with the low level configuration data.

公开(公告)号：US11533215B2

公开(公告)日：2022-12-20

申请号：US16821745

申请日：2020-03-17

Applicant: Juniper Networks, Inc.

Inventor： Jayanthi R ,  Chandrasekhar A ,  Javier Antich ,  Sri Sampath Mallipudi ,  Premchandar N ,  Harsha Lakshmikanth ,  Gregory A. Sidebottom ,  Zhifei Fang

IPC: H04L41/0631 ,  H04L41/0604 ,  H04L43/16 ,  H04L41/0806 ,  H04L43/0823 ,  H04L41/22

Abstract: Network management techniques are described. A controller device of this disclosure manages a device group of a network. The controller device includes processing circuitry in communication with the memory, the processing circuitry being configured to receive, using a programmable diagnosis service executed by the processing circuitry, a programming input, to form, using the programmable diagnosis service, based on the programming input, a resource definition graph that models interdependencies between a plurality of resources supported by the device group, to detect, using the programmable diagnosis service, an event affecting a first resource of the plurality of resources, and to identify, using the programmable diagnosis service, based on the interdependencies modeled in the resource definition graph formed based on the programming input, a root cause event that caused the event affecting the first resource, the root cause event occurring at a second resource of the plurality of resources.

公开(公告)号：US11528190B2

公开(公告)日：2022-12-13

申请号：US17247947

申请日：2020-12-31

Applicant: Juniper Networks, Inc.

Inventor： Sri Sampath Mallipudi ,  Shivaprasad Gali ,  Chandrasekhar A

IPC: H04L12/24 ,  H04L41/0853 ,  H04L12/44 ,  H04L41/082 ,  G06F8/65 ,  H04L67/10 ,  H04L41/12 ,  H04L67/51

Abstract: Techniques are described for in-service configuration data migration for distributed micro service-based applications. In one example, a network device comprises a plurality of legacy data repositories comprising configuration data in key-value pair format that specifies a plurality of parameters and corresponding values for operation of the network device, and a hierarchical configuration data model having a plurality of nodes arranged in a hierarchical organization having a root node and a plurality of leaf nodes. Each of the nodes of the configuration data model is configured to store a set of configuration data parameters for the network device. One or more of the nodes includes a plurality of external references to respective parameters of the plurality of parameters stored within the plurality of legacy data repositories. Process circuitry is configured to perform a migration of the configuration data from the legacy data repositories to the hierarchical data model.