VIRTUAL TESTING OF NETWORK RESILIENCY
    1.
    发明公开

    公开(公告)号:US20240146643A1

    公开(公告)日:2024-05-02

    申请号:US17979640

    申请日:2022-11-02

    CPC classification number: H04L45/22 H04L43/50 H04L45/28

    Abstract: Technologies for testing resiliency of a data network with real-world accuracy without affecting the flow of production data through the network. A method according to the technologies may include receiving a production data packet and determining a preferred data route toward a destination node for the production data packet based on a first routing information base, wherein the first routing information base includes a database where routes and route metadata are stored according to a routing protocol. The method may also include, receiving a test data packet, and determining an alternate data route toward the destination node for the test data packet based on a second routing information base, wherein the second routing information base simulates an error in the preferred data route. The method may include sending the production data packet to the preferred data route and sending the test data packet to the alternate data route.

    Method using network controller to deploy virtual environment in production network

    公开(公告)号:US11863450B1

    公开(公告)日:2024-01-02

    申请号:US18063291

    申请日:2022-12-08

    CPC classification number: H04L45/76

    Abstract: A method comprises: at a network device configured to be connected to a network and having control and data planes, and interfaces configured for network operations in the network: upon receiving, from a controller, instructions to form a local twin of the network device that is a virtual replica of the network device to be used for test purposes, creating the local twin and configuring the local twin to include virtual control and data planes, and virtual interfaces, which are virtual replicas of, and operate independently from, the control and data planes, and the interfaces, of the network device, respectively; and hosting the local twin on physical resources of the network device such that the local twin is configured for virtual network operations on the network device that replicate, but are independent from, the network operations.

    PATH VALIDATION CHECKS FOR PROOF OF SECURITY

    公开(公告)号:US20230188534A1

    公开(公告)日:2023-06-15

    申请号:US17546492

    申请日:2021-12-09

    CPC classification number: H04L63/123 H04L63/0464 H04L63/205 H04L9/0838

    Abstract: According to an embodiment, a node comprises one or more processors and one or more computer-readable non-transitory storage media comprising instructions that, when executed by the one or more processors, cause one or more components of the node to perform operations. The operations comprise determining security validation information that the node associates with a packet, inserting into the packet an identifier associated with the node and the security validation information that the node associates with the packet, and transmitting the packet comprising the identifier associated with the node and the security validation information that the node associates with the packet. The security validation information comprises one or more proof of security attributes and/or one or more proof of security level attributes.

    Path validation checks for proof of security

    公开(公告)号:US11818141B2

    公开(公告)日:2023-11-14

    申请号:US17546492

    申请日:2021-12-09

    Abstract: According to an embodiment, a node comprises one or more processors and one or more computer-readable non-transitory storage media comprising instructions that, when executed by the one or more processors, cause one or more components of the node to perform operations. The operations comprise determining security validation information that the node associates with a packet, inserting into the packet an identifier associated with the node and the security validation information that the node associates with the packet, and transmitting the packet comprising the identifier associated with the node and the security validation information that the node associates with the packet. The security validation information comprises one or more proof of security attributes and/or one or more proof of security level attributes.

    LEVERAGING MACSEC KEY AGREEMENT (MKA) STATE EVENTS TO TRIGGER FAST IGP/EGP CONVERGENCE ON MACSEC ENCRYPTED LINKS

    公开(公告)号:US20200220843A1

    公开(公告)日:2020-07-09

    申请号:US16243733

    申请日:2019-01-09

    Abstract: A network device configured to communicate with a network executes a security protocol. The security protocol establishes a secure session with a security peer network device, exchanges security protected traffic with the security peer network device over a secure link, detects whether there is a security failure in the secure session, and upon detecting a security failure, signals there is a security failure. The network device also executes a routing protocol. The routing protocol maintains a routing table that includes a route to the security peer over the secure link, routes the security protected traffic along the route, and, upon receiving from the security protocol the signal that there is a security failure, removes the route from the routing table to stop the routing.

Patent Agency Ranking