公开(公告)号：US12244514B2

公开(公告)日：2025-03-04

申请号：US17858530

申请日：2022-07-06

Applicant: Cisco Technology, Inc.

Inventor： Feng Cao ,  Harikrishnan Pillai ,  Jonathan Rosen

IPC: H04L47/762 ,  G06F11/34 ,  H04L45/00 ,  H04L47/80

Abstract: Intelligent distribution of packet flows may be provided. Compute resource data may be received. Next, packets may be classified into flows that may be persistently mapped to compute resources for a lifetime of the flows. Based on the compute resource data, the flows may then be allocated to the compute resources.

公开(公告)号：US11996949B2

公开(公告)日：2024-05-28

申请号：US17876091

申请日：2022-07-28

Applicant: Cisco Technology, Inc.

Inventor： Harikrishnan Pillai ,  Jie Zhou ,  Niels-Peder Mosegard Jensen ,  Christine Lan Yu

IPC: H04L12/46 ,  H04L12/12 ,  H04L43/0876 ,  H04L43/20 ,  G06F9/50 ,  G06F16/95 ,  G06F16/951

CPC classification number: H04L12/12 ,  H04L43/0876 ,  H04L43/20

Abstract: Presented herein are techniques to conserve power by network devices in a software define wide area network (SDWAN). A method includes monitoring operations of a software defined wide area network including a network device in the software defined wide area network, based on results of the monitoring, generating a usage model for the network device, determining, based on the usage model, an interface selection scheme for the network device, and causing the network device to execute the interface selection scheme.

公开(公告)号：US20240039743A1

公开(公告)日：2024-02-01

申请号：US17876091

申请日：2022-07-28

Applicant: Cisco Technology, Inc.

Inventor： Harikrishnan Pillai ,  Jie Zhou ,  Niels-Peder Mosegard Jensen ,  Christine Lan Yu

IPC: H04L12/12 ,  H04L43/20 ,  H04L43/0876

CPC classification number: H04L12/12 ,  H04L43/20 ,  H04L43/0876

Abstract: Presented herein are techniques to conserve power by network devices in a software define wide area network (SDWAN). A method includes monitoring operations of a software defined wide area network including a network device in the software defined wide area network, based on results of the monitoring, generating a usage model for the network device, determining, based on the usage model, an interface selection scheme for the network device, and causing the network device to execute the interface selection scheme.

公开(公告)号：US11722525B2

公开(公告)日：2023-08-08

申请号：US17230675

申请日：2021-04-14

Applicant: Cisco Technology, Inc.

Inventor： Shuxian Lou ,  Jie Chu ,  Jonathan Rosen ,  Douglas Michael Toney ,  Harikrishnan Pillai ,  Feng Cao

IPC: H04L29/06 ,  H04L9/40 ,  G06F16/2455

CPC classification number: H04L63/20 ,  G06F16/2455

Abstract: Techniques and mechanisms for IPsec processing of IPsec packets for routing platforms where IPsec is just one or more features in the middle of data path features on the packet processing path and hence, the typical, simple inline IPsec scheme does not work well for such platforms. The techniques include using a hardware look-up table for packet classification and inbound security association (SA) lookup in one pass with IP 5-tuple plus SPI as a lookup key at hardware table. The techniques provide an entry match action format and mechanism for deriving inbound SA dram addresses that may be used by a hardware (HW)/firmware (FW) crypto/IPsec engine to process inbound packet traffic. A software SA look-up table is also provided to overcome hardware look-up table resource limitations and support more IPsec session scaling than the physical hardware look-up table can handle. Additional techniques are described.

公开(公告)号：US20220337627A1

公开(公告)日：2022-10-20

申请号：US17230675

申请日：2021-04-14

Applicant: Cisco Technology, Inc.

Inventor： Shuxian Lou ,  Jie Chu ,  Jonathan Rosen ,  Douglas Michael Toney ,  Harikrishnan Pillai ,  Feng Cao

IPC: H04L29/06 ,  G06F16/2455

Abstract: Techniques and mechanisms for IPsec processing of IPsec packets for routing platforms where IPsec is just one or more features in the middle of data path features on the packet processing path and hence, the typical, simple inline IPsec scheme does not work well for such platforms. The techniques include using a hardware look-up table for packet classification and inbound security association (SA) lookup in one pass with IP 5-tuple plus SPI as a lookup key at hardware table. The techniques provide an entry match action format and mechanism for deriving inbound SA dram addresses that may be used by a hardware (HW)/firmware (FW) crypto/IPsec engine to process inbound packet traffic. A software SA look-up table is also provided to overcome hardware look-up table resource limitations and support more IPsec session scaling than the physical hardware look-up table can handle. Additional techniques are described.

公开(公告)号：US12126458B1

公开(公告)日：2024-10-22

申请号：US17838356

申请日：2022-06-13

Applicant: Cisco Technology, Inc.

Inventor： Harikrishnan Pillai ,  Ju Lin ,  Niels-Peder M. Jensen ,  David Michael Prives ,  Ping Zhang

IPC: G06F15/173 ,  H04L12/12 ,  H04L43/0876 ,  H04L43/20 ,  H04L49/60

CPC classification number: H04L12/12 ,  H04L43/0876 ,  H04L43/20 ,  H04L49/60

Abstract: Presented herein are techniques to conserve power by network devices in a software define wide area network (SDWAN). A method includes monitoring operations of a software defined wide area network including a network device in the software defined wide area network, based on results of the monitoring, generating a usage model for the network device, determining, based on the usage model, a power management scheme for a multi-core network processing unit operating on the network device, and causing the multi-core network processing unit operating on the network device to execute the power management scheme.

公开(公告)号：US20240264920A1

公开(公告)日：2024-08-08

申请号：US18165643

申请日：2023-02-07

Applicant: Cisco Technology, Inc.

Inventor： Harikrishnan Pillai ,  Niels-Peder Mosegard Jensen ,  Jeffrey C. Loo ,  Phong Hoang Ho

IPC: G06F11/30 ,  G06F21/86

CPC classification number: G06F11/3058 ,  G06F21/86 ,  G06F2221/2151

Abstract: In one embodiment, a method includes receiving airflow data from an airflow sensor installed inside of a hardware device and determining an airflow value from the airflow data. The method also includes determining that the airflow value exceeds a predetermined threshold. The method further includes determining a potential tampering event associated with the hardware device.

公开(公告)号：US20240015110A1

公开(公告)日：2024-01-11

申请号：US17858530

申请日：2022-07-06

Applicant: Cisco Technology, Inc.

Inventor： Feng Cao ,  Harikrishnan Pillai ,  Jonathan Rosen

IPC: H04L47/762 ,  H04L47/80 ,  H04L45/00 ,  G06F11/34

CPC classification number: H04L47/762 ,  H04L47/801 ,  H04L45/38 ,  G06F11/3409

Abstract: Intelligent distribution of packet flows may be provided. Compute resource data may be received. Next, packets may be classified into flows that may be persistently mapped to compute resources for a lifetime of the flows. Based on the compute resource data, the flows may then be allocated to the compute resources.