公开(公告)号：US09036476B2

公开(公告)日：2015-05-19

申请号：US13630458

申请日：2012-09-28

Applicant: Juniper Networks, Inc.

Inventor： Jagadish Grandhi ,  Gopi Krishna ,  Ananda Sathyanarayana ,  Arun Balasubramanian ,  Bobby Vandalore

IPC: H04L12/803 ,  H04L12/707 ,  H04L12/723 ,  H04L12/873 ,  H04L12/913 ,  H04L12/801 ,  H04L12/911

CPC classification number: H04L45/22 ,  H04L45/24 ,  H04L45/50 ,  H04L47/125 ,  H04L47/14 ,  H04L47/52 ,  H04L47/724 ,  H04L47/824

Abstract: In general, techniques are described for maintaining load balancing after service application. A network device comprising ingress and egress forwarding components and a service card may implement the techniques. An ingress forwarding component receives a packet and, in response to a determination that the service is to be applied to the packet, updates the packet to include an ingress identifier that identifies the ingress forwarding component, thereafter transmitting the updated packet to the service card. The service card applies the service to the updated packet to generate a serviced packet and transmits the serviced packet to the ingress forwarding component identified by the ingress identifier so as to maintain load balancing of packet flows across the plurality of forwarding components. The ingress forwarding component determines a next hop to which to forward the serviced packet and the egress forwarding component forwards the serviced packet to the determined next hop.

Abstract translation: 通常，描述了在维护应用后维护负载平衡的技术。 包括入口和出口转发组件和服务卡的网络设备可以实现这些技术。 入口转发组件接收分组，并且响应于确定将应用于分组的服务，更新分组以包括标识入口转发组件的入口标识符，然后将更新的分组发送到服务卡。 服务卡将服务应用于更新的分组，以生成服务分组，并将服务分组发送到由入口标识符标识的入口转发组件，以便保持跨多个转发组件的分组流的负载均衡。 入口转发组件确定转发服务分组的下一跳，并且出口转发组件将服务分组转发到确定的下一跳。

公开(公告)号：US20140092738A1

公开(公告)日：2014-04-03

申请号：US13630458

申请日：2012-09-28

Applicant: JUNIPER NETWORKS, INC.

Inventor： Jagadish Grandhi ,  Gopi Krishna ,  Ananda Sathyanarayana ,  Arun Balasubramanian ,  Bobby Vandalore

IPC: H04L12/56 ,  H04L12/24

CPC classification number: H04L45/22 ,  H04L45/24 ,  H04L45/50 ,  H04L47/125 ,  H04L47/14 ,  H04L47/52 ,  H04L47/724 ,  H04L47/824

Abstract: In general, techniques are described for maintaining load balancing after service application. A network device comprising ingress and egress forwarding components and a service card may implement the techniques. An ingress forwarding component receives a packet and, in response to a determination that the service is to be applied to the packet, updates the packet to include an ingress identifier that identifies the ingress forwarding component, thereafter transmitting the updated packet to the service card. The service card applies the service to the updated packet to generate a serviced packet and transmits the serviced packet to the ingress forwarding component identified by the ingress identifier so as to maintain load balancing of packet flows across the plurality of forwarding components. The ingress forwarding component determines a next hop to which to forward the serviced packet and the egress forwarding component forwards the serviced packet to the determined next hop.

Abstract translation: 通常，描述了在维护应用后维护负载平衡的技术。 包括入口和出口转发组件和服务卡的网络设备可以实现这些技术。 入口转发组件接收分组，并且响应于确定将应用于分组的服务，更新分组以包括标识入口转发组件的入口标识符，然后将更新的分组发送到服务卡。 服务卡将服务应用于更新的分组，以生成服务分组，并将服务分组发送到由入口标识符标识的入口转发组件，以便保持跨多个转发组件的分组流的负载均衡。 入口转发组件确定转发服务分组的下一跳，并且出口转发组件将服务分组转发到确定的下一跳。

公开(公告)号：US09674870B1

公开(公告)日：2017-06-06

申请号：US14159244

申请日：2014-01-20

Applicant: Juniper Networks, Inc.

Inventor： Srinivasa Chaganti ,  Apurva Mehta ,  Gopi Krishna ,  Bin W. Hong ,  Santosh Gupta ,  Bobby Vandalore

IPC: G06F15/173 ,  H04W74/00

CPC classification number: H04W74/002 ,  H04L45/60 ,  H04L45/745 ,  H04L67/146

Abstract: In general, techniques are described for aggregating, within a network device, internal forwarding routes for multiple control protocols and allocating next hops for the routes among individual service units of a decentralized control plane for the network device. The techniques may also include aggregating internal forwarding routes for data protocols and allocating next hops for the routes among individual forwarding units of a decentralized data plane for the network device. In one example, a mobile gateway includes a plurality of subscriber management service units that present a uniform interface to nodes within a mobile service provider network. An allocation manager apportions a control protocol session identifier namespace into a plurality of contiguous, non-overlapping protocol session identifier ranges and allocates the ranges among the service units. The service units execute the control protocol by utilizing respective allocated ranges, which the aggregate internal forwarding routes use to identify the associated service units.

公开(公告)号：US08953592B2

公开(公告)日：2015-02-10

申请号：US13631704

申请日：2012-09-28

Applicant: Juniper Networks, Inc.

Inventor： Gopi Krishna ,  Apurva Mehta ,  Ananda Sathyanarayana ,  Bobby Vandalore ,  Dinesh Bakiaraj ,  Vignesh Chinnakkannu

IPC: H04L12/28 ,  H04L29/12 ,  H04L12/14 ,  H04W8/26

CPC classification number: H04L61/203 ,  H04L12/1407 ,  H04L29/12245 ,  H04L61/2514 ,  H04L61/2517 ,  H04L61/2567 ,  H04W8/26

Abstract: In general, techniques are described for informing services nodes of private network address information in order to apply subscriber-aware services with the services node. In some examples, a services node includes an Authentication, Authorization, and Accounting (AAA) interface to receive a AAA message, wherein the AAA message has been extended from a AAA protocol to specify a private network address of a subscriber device authenticated to an access network by the AAA server and assigned the private network address that is not routable external to the access network. A mapping module associates the public network address of subscriber data traffic with the private network address received by the AAA message. One or more service modules select one or more of a plurality of subscriber policies using the associated private network address and apply services to the subscriber data traffic in accordance with the selected subscriber policies.

Abstract translation: 通常，描述了用于向服务节点通知专用网络地址信息以便将服务节点应用订户感知服务的技术。 在一些示例中，服务节点包括用于接收AAA消息的认证，授权和计费（AAA）接口，其中所述AAA消息已经从AAA协议扩展以指定认证到接入的订户设备的专用网络地址 由AAA服务器进行网络连接，并分配在接入网络外部不可路由的专用网络地址。 映射模块将用户数据业务的公网地址与AAA消息接收到的私网地址相关联。 一个或多个服务模块使用相关联的专用网络地址选择多个订户策略中的一个或多个，并且根据所选择的订户策略将服务应用于用户数据业务。

公开(公告)号：US20140092899A1

公开(公告)日：2014-04-03

申请号：US13631704

申请日：2012-09-28

Applicant: JUNIPER NETWORKS, INC.

Inventor： Gopi Krishna ,  Apurva Mehta ,  Ananda Sathyanarayana ,  Bobby Vandalore ,  Dinesh Bakiaraj ,  Vignesh Chinnakkannu

IPC: H04L12/56

CPC classification number: H04L61/203 ,  H04L12/1407 ,  H04L29/12245 ,  H04L61/2514 ,  H04L61/2517 ,  H04L61/2567 ,  H04W8/26

Abstract: In general, techniques are described for informing services nodes of private network address information in order to apply subscriber-aware services with the services node. In some examples, a services node includes an Authentication, Authorization, and Accounting (AAA) interface to receive a AAA message, wherein the AAA message has been extended from a AAA protocol to specify a private network address of a subscriber device authenticated to an access network by the AAA server and assigned the private network address that is not routable external to the access network. A mapping module associates the public network address of subscriber data traffic with the private network address received by the AAA message. One or more service modules select one or more of a plurality of subscriber policies using the associated private network address and apply services to the subscriber data traffic in accordance with the selected subscriber policies.

Abstract translation: 通常，描述了用于向服务节点通知专用网络地址信息以便将服务节点应用订户感知服务的技术。 在一些示例中，服务节点包括用于接收AAA消息的认证，授权和计费（AAA）接口，其中所述AAA消息已经从AAA协议扩展以指定认证到接入的订户设备的专用网络地址 由AAA服务器进行网络连接，并分配在接入网络外部不可路由的专用网络地址。 映射模块将用户数据业务的公网地址与AAA消息接收到的私网地址相关联。 一个或多个服务模块使用相关联的专用网络地址选择多个订户策略中的一个或多个，并且根据所选择的订户策略将服务应用于用户数据业务。