System and methods for providing a network path verification protocol
    2.
    发明申请
    System and methods for providing a network path verification protocol 审中-公开
    提供网络路径验证协议的系统和方法

    公开(公告)号:US20060262772A1

    公开(公告)日:2006-11-23

    申请号:US11135253

    申请日:2005-05-23

    IPC分类号: H04L12/28

    摘要: A path verification protocol (PVP) which enumerates a series of messages sent to a set of nodes, or routers, along a network path identifies connectivity and transmission characteristic attributes by defining, implementing, and analyzing path verification messages (PVMs) in a VPN environment. Typical VPN environments are characterized by service level agreements (SLAs) between service providers which specify particular service level and/or bandwidth level guarantees, typically in terms of megabits per second (MB/s) or other qualitative transfer criteria. Such guarantees are often expressed in contractual terms as Quality of Service (QoS) criteria. Configurations herein provide a mechanism for determination of paths and/or routes that satisfy a QoS or other delivery speed/bandwidth guarantee. Such a mechanism may therefore be employed to perform routing decisions for QoS based traffic. Further, such a mechanism is employable to verify QoS levels and related attributes related to contractual terms between service providers and customers.

    摘要翻译: 路径验证协议(PVP),其列举沿着网络路径发送到一组节点或路由器的一系列消息,通过在VPN环境中定义,实现和分析路径验证消息(PVM)来识别连接性和传输特性属性 。 典型的VPN环境的特征在于服务提供商之间的服务级别协议(SLA),其指定特定服务级别和/或带宽级别保证,通常以兆比特每秒(MB / s)或其他定性传输标准。 这种保证通常以合同条款表示为服务质量(QoS)标准。 本文中的配置提供了用于确定满足QoS或其他传送速度/带宽保证的路径和/或路由的机制。 因此可以采用这种机制来执行基于QoS的业务的路由决策。 此外,这种机制可用于验证与服务提供商和客户之间的合同条款相关的QoS等级和相关属性。

    Methods and apparatus based on message transmission times
    3.
    发明申请
    Methods and apparatus based on message transmission times 有权
    基于消息传输时间的方法和设备

    公开(公告)号:US20060187916A1

    公开(公告)日:2006-08-24

    申请号:US11063803

    申请日:2005-02-23

    IPC分类号: H04L12/56

    CPC分类号: H04L12/56

    摘要: A data communication device (e.g., a router) originates a network configuration message in response to a network topology change or so as to refresh a configuration message. The data communication device encodes a timestamp in the network configuration message. The timestamp indicates a time of originating the network configuration message. Further, the data communication device transmits the network configuration message over the network to other network devices that, in turn, initiate further broadcast of at least a portion of contents of the network configuration message. Based on the timestamp of the network configuration message, the data communication devices receiving the network configuration message identify transmission time value indicating how long the network configuration message takes to be conveyed over the network to the other network devices. The data communication devices utilize the transmission time value as a timeout period for determining whether a data communication device failure occurs.

    摘要翻译: 数据通信设备(例如,路由器)响应于网络拓扑变化而发起网络配置消息,以便刷新配置消息。 数据通信设备对网络配置消息中的时间戳进行编码。 时间戳表示发起网络配置消息的时间。 此外,数据通信设备通过网络将网络配置消息发送到其他网络设备,其进一步发起网络配置消息的至少一部分内容的进一步广播。 基于网络配置消息的时间戳,接收网络配置消息的数据通信设备识别表示网络配置消息在网络上传送到其他网络设备多长时间的传输时间值。 数据通信设备利用传输时间值作为用于确定数据通信设备故障是否发生的超时周期。

    System and methods for network path detection
    4.
    发明申请
    System and methods for network path detection 有权
    网络路径检测的系统和方法

    公开(公告)号:US20060171331A1

    公开(公告)日:2006-08-03

    申请号:US11048077

    申请日:2005-02-01

    IPC分类号: H04L12/56 H04L12/28

    摘要: Customer edge (CE) to CE device verification checks initiate routes from available CEs as a set of path verification messages, destined for remote CE routes serving a remote VPN. An extended community attribute, included among the attributes of the path verification message, stores the identity of the originating CE router. The path verification message propagates across the network, and transports the identity of the originating CE router because the originator identity is not overwritten by successive routing. Upon receipt by the remote CE, the originator is determinable from the extended community attribute. A further reachability field is also included in the extended community attribute and indicates whether per CE or per prefix is appropriate for the particular route in question. In this manner, CE-CE connectivity checks identify CEs which are reachable from other CEs. Accordingly, such a mechanism allows for route reachability aggregation on a per-CE or per-prefix reachability basis.

    摘要翻译: 客户端(CE)到CE设备验证检查从可用的CE启动路由作为一组路径验证消息,目的地是服务于远程VPN的远程CE路由。 包含在路径验证消息的属性之间的扩展团体属性存储始发CE路由器的身份。 路径验证消息通过网络传播,并传输始发CE路由器的身份,因为始发方身份不会被连续路由覆盖。 远程CE收到后,发起者可以从扩展团体属性中确定。 扩展社区属性中还包括另外的可访问性字段,并指示每个CE或每个前缀是否适合所讨论的特定路由。 以这种方式,CE-CE连接检查可以识别可从其他CE接入的CE。 因此,这种机制允许基于每个CE或每个前缀可达性的路由可达性聚合。

    System and methods for identifying network path performance
    5.
    发明申请
    System and methods for identifying network path performance 审中-公开
    用于识别网络路径性能的系统和方法

    公开(公告)号:US20060215577A1

    公开(公告)日:2006-09-28

    申请号:US11086007

    申请日:2005-03-22

    IPC分类号: H04L12/28

    摘要: A system and method for aggregating performance characteristics for core network paths allows computation of message traffic performance over each of the available candidate paths through the core for identifying an optimal core network path. Particular network traffic, or messages, include attributes indicative of performance, such as transport time, delay, jitter, and drop percentage, over individual hops along the candidate path. A diagnostic processor parses these messages to identify the attributes corresponding to performance, and analyzes the resulting parsed routing information to compute an expected performance, such as available bandwidth (e.g. transport rate) over the path. Messages including such attributes may include link state attribute (LSA) messages, diagnostic probe messages specifically targeted to enumerate such attributes, or other network suitable network traffic. In a particular configuration, the messages may be Path Verification Protocol (PVP) messages.

    摘要翻译: 用于聚合核心网络路径的性能特征的系统和方法允许通过核心的每个可用候选路径计算消息业务性能,用于识别最佳核心网路径。 特定网络流量或消息包括指示性能的属性,例如沿着候选路径的单个跳跃的传输时间,延迟,抖动和丢弃百分比。 诊断处理器解析这些消息以识别与性能相对应的属性,并分析所得到的解析路由信息以计算期望的性能,例如路径上的可用带宽(例如传输速率)。 包括这些属性的消息可以包括链路状态属性(LSA)消息,专门用于枚举这样的属性的诊断探测消息,或其他网络合适的网络业务。 在特定配置中,消息可以是路径验证协议(PVP)消息。

    System and method for PE-node protection
    6.
    发明授权
    System and method for PE-node protection 有权
    PE节点保护的系统和方法

    公开(公告)号:US07693047B2

    公开(公告)日:2010-04-06

    申请号:US11287801

    申请日:2005-11-28

    IPC分类号: G01R31/08 H04L12/28

    摘要: A novel fast reroute (FRR) technique is provided for quickly and efficiently rerouting selected types of network traffic in response to a node or link failure at the edge of a computer network. According to the technique, the network includes first and second edge devices that function as “FRR mates,” such that network traffic originally destined for one FRR mate may be quickly rerouted to the other without having to wait for conventional network convergence. When an edge device receives rerouted packets originally destined for its FRR mate, the device responds by forwarding only those rerouted packets matching the selected traffic types; rerouted packets that do not match the selected traffic types are dropped or otherwise discarded. The first and second edge devices may be statically configured as FRR mates, e.g., by a network administrator, or they may be configured to automatically detect their compatibility as FRR mates.

    摘要翻译: 提供了一种新颖的快速重路由(FRR)技术,用于响应于计算机网络边缘的节点或链路故障,快速有效地重新路由所选类型的网络流量。 根据该技术,该网络包括用作“FRR配对”的第一和第二边缘设备,使得最初发往一个FRR配对的网络业务可能被快速重新路由到另一个,而不必等待传统的网络融合。 当边缘设备接收到最初发往FRR配置的重新路由的报文时,设备只通过转发与所选流量类型匹配的那些重新路由的报文进行响应; 与所选流量类型不匹配的重路由数据包将被丢弃或以其他方式丢弃。 第一和第二边缘设备可以被静态配置为FRR配对,例如由网络管理员,或者它们可以被配置为自动检测它们作为FRR配对的兼容性。

    System and method for PE-node protection
    7.
    发明申请
    System and method for PE-node protection 有权
    PE节点保护的系统和方法

    公开(公告)号:US20070121486A1

    公开(公告)日:2007-05-31

    申请号:US11287801

    申请日:2005-11-28

    IPC分类号: H04J1/16

    摘要: A novel fast reroute (FRR) technique is provided for quickly and efficiently rerouting selected types of network traffic in response to a node or link failure at the edge of a computer network. According to the technique, the network includes first and second edge devices that function as “FRR mates,” such that network traffic originally destined for one FRR mate may be quickly rerouted to the other without having to wait for conventional network convergence. When an edge device receives rerouted packets originally destined for its FRR mate, the device responds by forwarding only those rerouted packets matching the selected traffic types; rerouted packets that do not match the selected traffic types are dropped or otherwise discarded. The first and second edge devices may be statically configured as FRR mates, e.g., by a network administrator, or they may be configured to automatically detect their compatibility as FRR mates.

    摘要翻译: 提供了一种新颖的快速重路由(FRR)技术,用于响应于计算机网络边缘的节点或链路故障,快速有效地重新路由所选类型的网络流量。 根据该技术,网络包括用作“FRR配对”的第一和第二边缘设备,使得最初发往一个FRR配对的网络业务可以被快速地重新路由到另一个,而不必等待传统的网络融合。 当边缘设备接收到最初发往FRR配置的重新路由的报文时,设备只通过转发与所选流量类型匹配的那些重新路由的报文进行响应; 与所选流量类型不匹配的重路由数据包将被丢弃或以其他方式丢弃。 第一和第二边缘设备可以被静态配置为FRR配对,例如由网络管理员,或者它们可以被配置为自动检测它们作为FRR配对的兼容性。

    Method and apparatus for providing faster convergence for redundant sites
    8.
    发明申请
    Method and apparatus for providing faster convergence for redundant sites 有权
    为冗余站点提供更快收敛的方法和装置

    公开(公告)号:US20070008878A1

    公开(公告)日:2007-01-11

    申请号:US11159719

    申请日:2005-06-23

    IPC分类号: G06F11/00

    摘要: A method, apparatus and computer program product for providing convergence for a dual-homed site in a network is presented. An occurrence of a failure between a first Provider Edge (PE) device and a first Customer Edge (CE) device in communication with a dual-homed site is detected. A determination is made whether an alternate route exists for the dual-homed site in a routing table associated with the first PE device. When an alternate route exists then a routing entry associated with the first CE device in a routing table of said first PE device is kept from being deleted for a predetermined amount of time, the routing table is modified to reference the alternate route, the routing entry is rewritten to perform a POP and lookup in a VRF table of the first PE device, and the routing entry is deleted after the predetermined amount of time has elapsed.

    摘要翻译: 提出了一种用于为网络中的双归位点提供融合的方法,装置和计算机程序产品。 检测到与双归位置通信的第一提供商边缘(PE)设备和第一客户边缘(CE)设备之间的故障的发生。 确定在与第一PE设备相关联的路由表中是否存在用于双归属站点的备用路由。 当存在替代路由时,在所述第一PE设备的路由表中与第一CE设备相关联的路由条目不被删除预定的时间量,所述路由表被修改以引用所述替代路由,所述路由条目 被重写以在第一PE设备的VRF表中执行POP和查找,并且在经过预定时间量之后删除路由条目。

    System and methods for network reachability detection
    9.
    发明申请
    System and methods for network reachability detection 有权
    网络可达性检测的系统和方法

    公开(公告)号:US20060198321A1

    公开(公告)日:2006-09-07

    申请号:US11072082

    申请日:2005-03-04

    IPC分类号: H04L12/56 H04L12/28

    摘要: A mechanism for ASBRs to identify the originating node, or router, in an LSP conversant autonomous system (AS), such as an MPLS VPN environment, maintains the identity of the originating node and successive nodes in subsequent autonomous systems along the path to the node to be pinged. The identity of the transporting nodes is stored in a stack or other object associated with the ping request (ping), such that the pinged node may employ the stored identity as a set of return path routing information. Successive ASBRs store their identity on the stack, in an ordered manner, along the path to the destination. Upon reaching the destination (ping) node, the destination node employs the identity of the first node on the stack to send the acknowledgment, or ping response. Each successive ASBR, therefore, pops (retrieves) the next node identity from the stack and redirects (sends) the ping response to the retrieved node.

    摘要翻译: 用于识别LSP熟练自治系统(AS)(例如MPLS VPN环境)中的始发节点或路由器的机制在沿着节点的路径的后续自治系统中维护始发节点和连续节点的身份 要ping 传输节点的身份存储在与ping请求(ping)相关联的堆栈或其他对象中,使得被ping过的节点可以将所存储的身份用作一组返回路径路由信息。 连续的ASBR将按照有序的方式将其身份存储在堆栈中,沿着目的地的路径。 在到达目的地(ping)节点时,目的地节点采用栈上的第一个节点的身份来发送确认或ping响应。 因此,每个连续的ASBR从堆栈中弹出(检索)下一个节点标识,并将ping响应重定向(发送)到检索到的节点。

    Methods and apparatus for error recovery in opaque networks using encrypted error locations
    10.
    发明申请
    Methods and apparatus for error recovery in opaque networks using encrypted error locations 审中-公开
    使用加密错误位置的不透明网络中的错误恢复方法和装置

    公开(公告)号:US20060274645A1

    公开(公告)日:2006-12-07

    申请号:US11146520

    申请日:2005-06-07

    IPC分类号: H04L12/26

    摘要: In response to a failure within a sub-network of a heterogeneous network, an external device is signaled that the failure has occurred by inclusion of an encoded identifier of the failure location with the signaling. The encoded identifier enables identification of the failure location within the sub-network while masking the identity of the failure location to the external device, and may be realized by using an encrypted sub-object or a token that is associated with the failure location information, which remains stored within the sub-network. The external device responds by issuing a path-establishment message indicating that a new communications path should be established and should exclude the failure location as identified by the encoded identifier, which is included in the path-establishment message. A device within the sub-network responds by determining whether a path segment for the new communications path can be provided while excluding the failure location as identified by the encoded identifier from the path-establishment message, and further path-setup functions are performed based on the determination.

    摘要翻译: 响应于异构网络的子网内的故障,外部设备被发信号通知包含失败位置的编码标识符与信令发生故障。 编码的标识符能够识别子网内的故障位置,同时屏蔽到外部设备的故障位置的身份,并且可以通过使用加密的子对象或与故障位置信息相关联的令牌来实现, 其保持在子网内。 外部设备通过发出指示应该建立新的通信路径的路径建立消息来进行响应,并且应当排除由包含在路径建立消息中的编码标识符标识的故障位置。 子网内的设备通过确定是否可以提供用于新通信路径的路径段,同时从路径建立消息中排除由编码标识符识别的故障位置,并且基于 决心。