公开(公告)号：US09479443B2

公开(公告)日：2016-10-25

申请号：US14285843

申请日：2014-05-23

申请人： CISCO TECHNOLOGY, INC.

发明人： Hendrikus G. P. Bosch ,  Ian McDowell Campbell ,  Humberto J. La Roche ,  James N. Guichard ,  Surendra M. Kumar ,  Paul Quinn ,  Alessandro Duminuco ,  Jeffrey Napper ,  Ravi Shekhar

IPC分类号： H04L12/851 ,  H04L12/801 ,  H04W72/04 ,  H04L12/721 ,  H04W88/16

CPC分类号： H04L47/2408 ,  H04L45/38 ,  H04L47/12 ,  H04L47/14 ,  H04W72/0493 ,  H04W88/16

摘要： An example method is provided in one example embodiment and may include receiving a packet for a subscriber at a gateway, wherein the gateway includes a local policy anchor for interfacing with one or more policy servers and one or more classifiers for interfacing with one or more service chains, each service chain including one or more services accessible by the gateway; determining a service chain to receive the subscriber's packet; appending the subscriber's packet with a header, wherein the header includes, at least in part, identification information for the subscriber and an Internet Protocol (IP) address for the local policy anchor; and injecting the packet including the header into the service chain determined for the subscriber.

摘要翻译： 在一个示例性实施例中提供了示例性方法，并且可以包括在网关处接收订户的分组，其中所述网关包括用于与一个或多个策略服务器进行接口的本地策略锚点以及用于与一个或多个服务 每个服务链包括由网关可访问的一个或多个服务; 确定服务链以接收订户的分组; 用标题附加订户的分组，其中该报头至少部分地包括用户的标识信息和用于本地策略锚的因特网协议（IP）地址; 以及将包括所述头部的分组注入到为所述用户确定的服务链中。

公开(公告)号：US20160218956A1

公开(公告)日：2016-07-28

申请号：US15092117

申请日：2016-04-06

申请人： CISCO TECHNOLOGY, INC.

发明人： Surendra M. Kumar ,  Nagaraj A. Bagepalli ,  Abhijit Patra ,  Paul Quinn ,  James N. Guichard ,  Hendrikus G.P. Bosch

IPC分类号： H04L12/751 ,  H04L12/721

CPC分类号： H04L45/02 ,  H04L41/08 ,  H04L41/0813 ,  H04L41/0893 ,  H04L41/0896 ,  H04L41/12 ,  H04L45/308 ,  H04L45/38

摘要： An example method for service node originated service chains in a network environment is provided and includes receiving a packet at a service node in a network environment that includes a plurality of service nodes and a central classifier, analyzing the packet for a service chain modification or a service chain initiation, classifying the packet at the service node to a new service chain based on the analysis, initiating the new service chain at the service node if the analysis indicates service chain initiation, and modifying an existing service chain for the packet to the new service chain if the analysis indicates service chain modification. In specific embodiments, the analysis includes applying classification logic specific to the service node. Some embodiments, service node attributes and order of service nodes in substantially all service chains configured in the network may be received from a central controller.

公开(公告)号：US09197549B2

公开(公告)日：2015-11-24

申请号：US13748072

申请日：2013-01-23

申请人： Cisco Technology, Inc.

发明人： Surendra M. Kumar ,  Nagaraj A. Bagepalli ,  Wei-Chun Chao

IPC分类号： G06F15/173 ,  H04L12/721 ,  H04L12/715 ,  H04L12/803

CPC分类号： H04L45/38 ,  H04L45/64 ,  H04L47/125

摘要： A network switch comprises a load balancer steering mechanism configured to receive a service request received from a load balancer and forward the service request to a first server in a load-balanced server cluster. The service request was initiated by a client and transmitted to the load balancer. The network switch is configured to receive return traffic transmitted by the first server, and to automatically steer the return traffic to the load balancer.

摘要翻译： 网络交换机包括负载平衡器转向机制，其被配置为接收从负载均衡器接收的服务请求，并将服务请求转发到负载平衡服务器集群中的第一服务器。 服务请求由客户端启动并传输到负载均衡器。 网络交换机被配置为接收由第一服务器发送的返回流量，并且自动地将返回流量引导到负载均衡器。

公开(公告)号：US20140207968A1

公开(公告)日：2014-07-24

申请号：US13748072

申请日：2013-01-23

申请人： CISCO TECHNOLOGY, INC.

发明人： Surendra M. Kumar ,  Nagaraj A. Bagepalli ,  Wei-Chun Chao

IPC分类号： H04L12/56

CPC分类号： H04L45/38 ,  H04L45/64 ,  H04L47/125

摘要： A network switch comprises a load balancer steering mechanism configured to receive a service request received from a load balancer and forward the service request to a first server in a load-balanced server cluster. The service request was initiated by a client and transmitted to the load balancer. The network switch is configured to receive return traffic transmitted by the first server, and to automatically steer the return traffic to the load balancer.

摘要翻译： 网络交换机包括负载平衡器转向机制，其被配置为接收从负载均衡器接收的服务请求，并将服务请求转发到负载平衡服务器集群中的第一服务器。 服务请求由客户端启动并传输到负载均衡器。 网络交换机被配置为接收由第一服务器发送的返回流量，并且自动地将返回流量引导到负载均衡器。

公开(公告)号：US09979704B2

公开(公告)日：2018-05-22

申请号：US14573564

申请日：2014-12-17

申请人： Cisco Technology, Inc.

发明人： Kevin D. Shatzkamer ,  Hendrikus G. P. Bosch ,  Warren Scott Wainner ,  James N. Guichard ,  Surendra M. Kumar

IPC分类号： H04L29/06 ,  G06F9/455 ,  G06F21/60

CPC分类号： H04L63/0428 ,  G06F9/45558 ,  G06F21/606 ,  G06F2009/45587 ,  G06F2009/45595

摘要： A first virtual machine is established in a virtual private service chain to provide a first network service to virtual private service chain traffic. A second virtual machine is also established the virtual private service chain to provide a second network service to the virtual private service chain traffic. The virtual private service chain traffic is encrypted for transmission within the virtual private service chain from the first virtual machine to the second virtual machine, wherein the encryption uses a key shared by the first and second virtual machines.

公开(公告)号：US20170359252A1

公开(公告)日：2017-12-14

申请号：US15177021

申请日：2016-06-08

申请人： CISCO TECHNOLOGY, INC.

发明人： Surendra M. Kumar ,  Alessandro Duminuco ,  Hendrikus G. P. Bosch ,  Humberto J. La Roche ,  Jeffrey Napper ,  Burjiz Pithawala

IPC分类号： H04L12/721 ,  H04L29/12 ,  H04L29/06 ,  H04L12/70

CPC分类号： H04L12/4633 ,  H04L45/306 ,  H04L45/64 ,  H04L61/2503 ,  H04L69/22 ,  H04L2012/5625

摘要： A method is provided in one example embodiment and includes receiving at a network element an encapsulated packet including an encapsulation header, in which the encapsulation header includes an Analytics Proxy Function (“APF”) flag; determining whether the APF flag is set to a first value; if the APF flag is set to the first value, forwarding the encapsulated packet to a local APF instance associated with the network element, in which the encapsulated packet is processed by the local APF instance to replicate at least a portion of the encapsulated packet, construct a record of the encapsulated packet, or both; and if the APF flag is not set to the first value, omitting forwarding the encapsulated packet to the local APF instance associated with the network element. The local APF instance is implemented as a service function anchored at the forwarding element.

公开(公告)号：US20170163531A1

公开(公告)日：2017-06-08

申请号：US15143253

申请日：2016-04-29

申请人： CISCO TECHNOLOGY, INC.

发明人： Surendra M. Kumar ,  Hendrikus G. P. Bosch ,  Kent K. Leung ,  Abhijit Patra

IPC分类号： H04L12/741 ,  H04L12/743 ,  H04L12/935

CPC分类号： H04L45/74 ,  H04L45/00 ,  H04L45/7453 ,  H04L49/3009

摘要： A method is provided in one example embodiment and includes receiving at a network element a packet including a Network Services Header (“NSH”), in which the NSH includes an Infrastructure (“I”) flag and a service path header comprising a Service Index (“SI”), and a Service Path ID (“SPI”) and determining whether the I flag is set to a first value. The method further includes, if the I flag is set to the first value, setting the I flag to a second value and forwarding the packet to the service function that corresponds to the SI for processing. The method still further includes, if the I flag is not set to the first value, decrementing the SI and making a forwarding decision based on a new value of the SI and the SPI.

公开(公告)号：US09525703B2

公开(公告)日：2016-12-20

申请号：US14521856

申请日：2014-10-23

申请人： CISCO TECHNOLOGY, INC.

发明人： Alessandro Duminuco ,  Hendrikus G. P. Bosch ,  Surendra M. Kumar ,  Humberto J. La Roche ,  Jeffrey Napper ,  Kevin D. Shatzkamer ,  Daniel G. Wing

IPC分类号： H04L29/06 ,  H04L29/08

CPC分类号： H04L63/166 ,  H04L63/0281 ,  H04L63/0435 ,  H04L63/168 ,  H04L67/02 ,  H04L67/42

摘要： In an embodiment, a method is provided for enabling in-band data exchange between networks. The method can comprise receiving, by a first enveloping proxy located in the first network, at least one regular secure sockets layer (SSL) record for a SSL session established between a client and a server; receiving the data from a network element located in the first network; encoding the data into at least one custom SSL record; and transmitting the at least one regular SSL record and the at least one custom SSL record to an enveloping proxy. In another embodiment, a method can comprise receiving at least one regular secure sockets layer (SSL) record and at least one custom SSL record for a SSL session established between a client and a server; extracting the data from the at least one custom SSL; transmitting the at least one regular SSL record.

公开(公告)号：US09426176B2

公开(公告)日：2016-08-23

申请号：US14520118

申请日：2014-10-21

申请人： CISCO TECHNOLOGY, INC.

发明人： Alessandro Duminuco ,  Hendrikus G. P. Bosch ,  Surendra M. Kumar ,  Humberto J. La Roche ,  Jeffrey Napper ,  Kevin D. Shatzkamer ,  Daniel G. Wing

IPC分类号： H04L29/06 ,  H04L29/08

CPC分类号： H04L63/166 ,  H04L63/0281 ,  H04L63/0435 ,  H04L63/168 ,  H04L67/02 ,  H04L67/42

摘要： In an embodiment, a method is provided for enabling in-band data exchange between networks. The method can comprise receiving, by a first enveloping proxy located in the first network, at least one regular secure sockets layer (SSL) record for a SSL session established between a client and a server; receiving the data from a network element located in the first network; encoding the data into at least one custom SSL record; and transmitting the at least one regular SSL record and the at least one custom SSL record to an enveloping proxy. In another embodiment, a method can comprise receiving at least one regular secure sockets layer (SSL) record and at least one custom SSL record for a SSL session established between a client and a server; extracting the data from the at least one custom SSL; transmitting the at least one regular SSL record.

公开(公告)号：US20160182458A1

公开(公告)日：2016-06-23

申请号：US14573564

申请日：2014-12-17

申请人： Cisco Technology, Inc.

发明人： Kevin D. Shatzkamer ,  Hendrikus G.P. Bosch ,  Warren Scott Wainner ,  James N. Guichard ,  Surendra M. Kumar

IPC分类号： H04L29/06 ,  G06F9/455

CPC分类号： H04L63/0428 ,  G06F9/45558 ,  G06F21/606 ,  G06F2009/45587 ,  G06F2009/45595

摘要： A first virtual machine is established in a virtual private service chain to provide a first network service to virtual private service chain traffic. A second virtual machine is also established the virtual private service chain to provide a second network service to the virtual private service chain traffic. The virtual private service chain traffic is encrypted for transmission within the virtual private service chain from the first virtual machine to the second virtual machine, wherein the encryption uses a key shared by the first and second virtual machines.

摘要翻译： 在虚拟专用服务链中建立第一虚拟机以向虚拟专用服务链流量提供第一网络服务。 第二个虚拟机也建立了虚拟专用服务链，为虚拟私人服务链流量提供第二个网络服务。 虚拟专用服务链流量被加密以在虚拟专用服务链中从第一虚拟机到第二虚拟机的传输，其中加密使用由第一和第二虚拟机共享的密钥。