公开(公告)号：US20240340220A1

公开(公告)日：2024-10-10

申请号：US18422708

申请日：2024-01-25

Applicant: Cisco Technology, Inc.

Inventor： Darren Russell Dukes ,  Jeevan Sharma ,  Fabio R. Maino ,  Alberto Rodriguez-Natal

IPC: H04L41/0823 ,  H04L67/10

CPC classification number: H04L41/0823 ,  H04L67/10

Abstract: Techniques for enabling a network access provider to make automatic Software as a Service (SaaS) optimization decisions. Among other things, the techniques may include determining a SaaS application that is being accessed by client endpoints via flows through a network access provider. The techniques may also include determining, based at least in part on a policy associated with the network access provider, whether to enable network optimizations for traffic through the network access provider to the SaaS application. Based at least in part on a determination that the network optimizations are to be enabled for the traffic to the SaaS application, the techniques may include installing a service definition associated with the SaaS application in a service policy database of the network access provider.

公开(公告)号：US20220029921A1

公开(公告)日：2022-01-27

申请号：US17494441

申请日：2021-10-05

Applicant: Cisco Technology, Inc.

Inventor： Alberto Rodriguez-Natal ,  Steven William Wood ,  Ding Bai ,  Fabio R. Maino ,  Ramanathan Lakshmikanthan

IPC: H04L12/813 ,  H04L12/851

Abstract: Techniques for obtaining application network metadata from a service registry so that a network routing policy may be derived for traffic associated with the application are described herein. The techniques may include receiving, at a service registry, network metadata associated with traffic of an application hosted by a scalable application service platform. The techniques may also include obtaining, by a controller of a network and from the service registry, the network metadata associated with the traffic of the application. Based at least in part on the network metadata, the controller may determine a routing policy that is optimized for sending the traffic through the network. Additionally, the controller may send an indication of the routing policy to a node of the network or otherwise provision the network such that the traffic of the application is sent through the network according to the routing policy.

公开(公告)号：US20240380697A1

公开(公告)日：2024-11-14

申请号：US18784457

申请日：2024-07-25

Applicant: Cisco Technology, Inc.

Inventor： Bruce McDougall ,  Jeff Byzek ,  Alberto Rodriguez-Natal ,  Saswat Praharaj ,  Fabio R. Maino ,  Steven William Wood

IPC: H04L45/74 ,  H04L45/00 ,  H04L45/24

Abstract: Techniques for steering overlay network traffic along specific paths through an underlay network. The techniques may include determining a path through an underlay network that is optimized for sending a packet from a first node of an overlay network to a second node of the overlay network. The techniques may also include determining a destination address for sending the packet along the path from the first node to the second node, the destination address including a micro segment identifier (uSID) corresponding with an underlay node that is disposed along the path through the underlay network and trailing bits representing a portion of an address that corresponds with the second node. The techniques may also include causing the packet to be modified to include the destination address such that the packet is sent from the first node to the second node along the path.

公开(公告)号：US12107740B2

公开(公告)日：2024-10-01

申请号：US18161162

申请日：2023-01-30

Applicant: Cisco Technology, Inc.

Inventor： Fabio R. Maino ,  Saswat Praharaj ,  Alberto Rodriguez-Natal ,  Pradeep K. Kathail

IPC: H04L41/5019 ,  H04L41/046

CPC classification number: H04L41/5019 ,  H04L41/046

Abstract: Provided is an infrastructure for enforcing target service level parameters in a network. In one example, a network service level agreement (SLA) registry obtains one or more input service level parameters for at least one service offered by an application. Based on the one or more input service level parameters, the network SLA registry provides one or more target service level parameters to a plurality of network controllers. Each network controller of the plurality of network controllers is configured to enforce the one or more target service level parameters in a respective network domain configured to carry network traffic associated with the application.

公开(公告)号：US20240163226A1

公开(公告)日：2024-05-16

申请号：US18421906

申请日：2024-01-24

Applicant: Cisco Technology, Inc.

Inventor： Lorand Jakab ,  Alberto Rodriguez-Natal ,  Fabio R. Maino ,  John G. Apostolopoulos

IPC: H04L47/783 ,  G06F9/54

CPC classification number: H04L47/783 ,  G06F9/547

Abstract: Techniques for tracking compute capacity of a scalable application service platform to perform dynamic bandwidth allocation for data flows associated with applications hosted by the service platform are disclosed. Some of the techniques may include allocating a first amount of bandwidth of a physical underlay of a network for data flows associated with an application. The techniques may also include receiving, from a scalable application service hosting the application, an indication of an amount of computing resources of the scalable application service that are allocated to host the application. Based at least in part on the indications, a second amount of bandwidth of the physical underlay to allocate for the data flows may be determined. The techniques may also include allocating the second amount of bandwidth of the physical underlay of the network for the data flows associated with the application.

公开(公告)号：US20230328038A1

公开(公告)日：2023-10-12

申请号：US17718634

申请日：2022-04-12

Applicant: Cisco Technology, Inc.

Inventor： Alberto Rodriguez-Natal ,  Lorand Jakab ,  Fabio R. Maino

IPC: H04L9/40 ,  H04L43/0823 ,  H04L43/0864

CPC classification number: H04L63/0407 ,  H04L63/20 ,  H04L63/0281 ,  H04L43/0847 ,  H04L43/0864

Abstract: Techniques for using proxies with overprovisioned IP addresses to demultiplex data flows, which may otherwise look the same at L7, into multiple subflows for L3 policy enforcement without having to modify an underlying L3 network. The techniques may include establishing a subflow through a network between a first proxy and a second proxy, the subflow associated with a specific policy. In some examples, the first proxy node may receive an encrypted packet that is to be sent through the network and determine, based at least in part on accessing an encrypted application layer of the packet, a specific application to which the packet is to be sent. The first proxy node may then alter an IP address included in the packet to cause the packet to be sent through the network via the subflow such that the packet is handled according to the specific policy.

公开(公告)号：US20240205094A1

公开(公告)日：2024-06-20

申请号：US18591960

申请日：2024-02-29

Applicant: Cisco Technology, Inc.

Inventor： Alberto Rodriguez-Natal ,  Saswat Praharaj ,  Lorand Jakab ,  Fabio R. Maino ,  Pradeep Kumar Kathail ,  Vivek Agarwal ,  Ram Dular Singh

IPC: H04L41/12

CPC classification number: H04L41/12

Abstract: An application monitoring system for collecting, utilizing, and/or exchanging state information (e.g., application state and network state), configuration information, and/or other information to make network optimizations for applications orchestrated by an application orchestration system. The application monitoring system may include an application orchestrator discovery component that is configured to determine a presence of an application orchestration system for orchestrating applications. The application monitoring system may also include one or more application watch components for monitoring, among other things, application state, application configuration, and/or application replicas. The application monitoring system may further include a network state propagation component configured to provide network state information to the orchestration system.

公开(公告)号：US12010001B2

公开(公告)日：2024-06-11

申请号：US18234252

申请日：2023-08-15

Applicant: Cisco Technology, Inc.

Inventor： Alberto Rodriguez-Natal ,  Edward Albert Warnicke ,  Saswat Praharaj ,  Fabio R. Maino

IPC: H04L43/026 ,  H04L43/10

CPC classification number: H04L43/026 ,  H04L43/10

Abstract: Techniques for extending network elements to inspect, extract, and complement tracing information added to L7 flows by application distributed tracing systems. The techniques may include receiving a Layer-7 (L7) message of an L7 flow associated with a distributed application and determining that the L7 message includes tracing information. In some examples, the tracing information may be mapped to a marking that is to be included in a Layer 3 (L3) or Layer-4 (L4) packet carrying the L7 message, and the L3 or L4 packet including the marking may be sent to an L3 or L4 network element. In some examples, the L3 or L4 network element may be configured to utilize the marking to determine a network decision for the L3 or L4 packet.

公开(公告)号：US12003385B2

公开(公告)日：2024-06-04

申请号：US17503660

申请日：2021-10-18

Applicant: Cisco Technology, Inc.

Inventor： Steven William Wood ,  Ding Bai ,  Ramanathan Lakshmikanthan ,  Alberto Rodriguez-Natal ,  Fabio R. Maino

IPC: H04L12/24 ,  H04L12/26 ,  H04L12/917 ,  H04L29/06 ,  H04L41/147 ,  H04L43/0811 ,  H04L47/125 ,  H04L47/76 ,  H04L67/60

CPC classification number: H04L41/147 ,  H04L43/0811 ,  H04L47/125 ,  H04L47/76 ,  H04L67/60

Abstract: Techniques for dynamic routing based on application load are described herein. The techniques may include receiving load information associated with resources of an application orchestration system that are allocated to host an application, the resources associated with different geographical regions. Based at least in part on the load information, a network controller may determine that first resources of the application orchestration system are less constrained than second resources of the application orchestration system, the first resources associated with a first geographical region and the second resources associated with a second geographical region. Based at least in part on the first resources being less constrained than the second resources, application traffic may be routed through the network to the application hosted by the first resources in the first geographical region.

公开(公告)号：US20240097998A1

公开(公告)日：2024-03-21

申请号：US18234252

申请日：2023-08-15

Applicant: Cisco Technology, Inc.

Inventor： Alberto Rodriguez-Natal ,  Edward Albert Warnicke ,  Saswat Praharaj ,  Fabio R. Maino

IPC: H04L43/026 ,  H04L43/10

CPC classification number: H04L43/026 ,  H04L43/10

Abstract: Techniques for extending network elements to inspect, extract, and complement tracing information added to L7 flows by application distributed tracing systems. The techniques may include receiving a Layer-7 (L7) message of an L7 flow associated with a distributed application and determining that the L7 message includes tracing information. In some examples, the tracing information may be mapped to a marking that is to be included in a Layer 3 (L3) or Layer-4 (L4) packet carrying the L7 message, and the L3 or L4 packet including the marking may be sent to an L3 or L4 network element. In some examples, the L3 or L4 network element may be configured to utilize the marking to determine a network decision for the L3 or L4 packet.