VERIFYING INTENTS IN STATEFUL NETWORKS USING ATOMIC ADDRESS OBJECTS

    公开(公告)号:US20200344171A1

    公开(公告)日:2020-10-29

    申请号:US16392160

    申请日:2019-04-23

    Abstract: Example method includes: receiving a plurality of intent-based network policies in a network, wherein each intent-based policy comprises at least a rule and an action to be performed by a network function on a network packet in response to the rule being matched; identifying a set of header address spaces comprising a plurality of addresses that match to a same set of rules and actions; creating an atomic address object representing the identified set of header address spaces; and verifying the plurality of intent-based network policies using the atomic address object.

    Resource Allocator
    2.
    发明申请
    Resource Allocator 有权
    资源分配器

    公开(公告)号:US20160173403A1

    公开(公告)日:2016-06-16

    申请号:US14908745

    申请日:2013-07-30

    CPC classification number: H04L47/70 G06F9/50 H04L41/0893 Y02D10/22

    Abstract: An example method for allocating resources in accordance with aspects of the present disclosure includes collecting proposals from a plurality of modules, the proposals assigning the resources to the plurality of modules and resulting in topology changes in a computer network environment, identifying a set of proposals in the proposals, the set of proposals complying with policies associated with the plurality of modules, instructing the plurality of modules to evaluate the set of proposals, selecting a proposal from the set of proposals, and instructing at least one module associated with the selected proposal to instantiate the selected proposal.

    Abstract translation: 根据本公开的方面的用于分配资源的示例性方法包括从多个模块收集建议,将所述资源分配给所述多个模块并导致在计算机网络环境中的拓扑变化,识别一组建议 所述提案,所述提议符合与所述多个模块相关联的策略,指示所述多个模块评估所述提议集合,从所述一组提案中选择提案,以及指示与所选择的提案相关联的至少一个模块 实例化所选提案。

    DYNAMIC NETWORK SERVICE DATA ROUTING

    公开(公告)号:US20210344587A1

    公开(公告)日:2021-11-04

    申请号:US16862629

    申请日:2020-04-30

    Abstract: An example client device includes processing circuitry and a memory including instructions that, when executed by the processing circuitry, cause the client device to undertake certain actions. Certain instructions cause the device to periodically measure active network performance data for a network, calculate expected rewards for the plurality of entry points, select an expected best entry point based on the expected rewards, route data to the selected entry point, measure passive network performance data for the selected entry point, and update a reinforcement learning algorithm, based in part on the measured passive network performance data.

    DETERMINING VIOLATION OF A NETWORK INVARIANT

    公开(公告)号:US20180331909A1

    公开(公告)日:2018-11-15

    申请号:US15775378

    申请日:2015-11-20

    Abstract: Example implementations relate to determining whether network invariants are violated by flow rules to be implemented by the data plane of a network. In an example, a verification module implemented on a device receives a flow rule transmitted from an SDN controller to a switch, the flow rule relating to an event. The module determines whether the flow rule matches any of a plurality of network invariants cached in the device. If determined that the flow rule matches one of the plurality of network invariants, the verification module determines whether the flow rule violates the matched network invariant. If determined that the flow rule does not match any of the plurality of network invariants, the verification module (1) reports the event associated with the flow rule to a policy management module, (2) receives a new network invariant related to the event from the policy management module, and (3) determines whether the flow rule violates the new network invariant. The verification module generates an alarm if determined that the flow rule violates any of the network invariants.

    RUNTIME MONITORING IN INTENT-BASED NETWORKING

    公开(公告)号:US20200351167A1

    公开(公告)日:2020-11-05

    申请号:US16398728

    申请日:2019-04-30

    Abstract: Example method includes: receiving a network topology and a plurality of network configurations in an intent-based network; determining a number of spots available for runtime monitoring of an intent-based network policy among a plurality of intent-based policy in the intent-based network; determining a plurality of runtime constraints comprising one or more of time, resource capacity, and bandwidth demand based on the network topology and the plurality of network configurations; based on the plurality of runtime constraints, generating a runtime monitoring schedule that comprises at least a flow, a spot assigned for runtime monitoring of the flow, and a runtime monitoring rule to be applied at the assigned spot; and monitoring the flow based on the runtime monitoring schedule at the assigned spot.

    VERIFYING NETWORK INTENTS
    8.
    发明申请

    公开(公告)号:US20190238410A1

    公开(公告)日:2019-08-01

    申请号:US15885202

    申请日:2018-01-31

    Abstract: A method for verifying network intents may include decomposing at least one network intent into a plurality of sub-verification tasks, generating a set of normalized configurations for a plurality of network devices in a target network based on a set of current configurations for the plurality of network devices and generating a network graph based on the set of normalized configurations and a topology of the target network. The method may further include analyzing the plurality of sub-verification tasks and the network graph to determine if the set of current configurations for the plurality of network devices satisfies the at least one network intent. If the at least one network intent is not satisfied, a report may be generated indicating that the target network is not in compliance. If the at least one network intent is satisfied, information may be provided indicating that target network is in compliance.

    Managing Virtualized Network Service Bundles

    公开(公告)号:US20190014056A1

    公开(公告)日:2019-01-10

    申请号:US15646070

    申请日:2017-07-10

    CPC classification number: H04L47/762 H04L45/30 H04L45/306

    Abstract: Examples provided herein describe a method for managing virtualized network service bundles. For example, a physical processor may implement machine readable instructions to receive a first data packet in a virtual network, determine a first type of the first data packet, determine a first active virtualized network service bundle instance associated with a first virtualized network service bundle that handles the first type of data packet, and direct the first data packet to the first active virtualized network service bundle instance. In some examples, the first virtualized network service bundle may comprise a first set of virtual network functions, and the first virtualized network service bundle may be associated with a set of active virtualized network service bundles instances, where the set of active virtualized network service bundle instances may comprise the first active virtualized network service bundle instance.

Patent Agency Ranking