公开(公告)号：US20190149896A1

公开(公告)日：2019-05-16

申请号：US15923713

申请日：2018-03-16

Applicant: Juniper Networks, Inc.

Inventor： Gert Grammel ,  Antoni B Przygienda

IPC: H04Q11/00 ,  H04L12/707 ,  H04L12/703

CPC classification number: H04Q11/0003 ,  H04J14/021 ,  H04J14/0269 ,  H04J14/0272 ,  H04J14/0295 ,  H04L41/0654 ,  H04L41/0816 ,  H04L45/22 ,  H04L45/28 ,  H04Q11/0005 ,  H04Q11/0062 ,  H04Q2011/0056 ,  H04Q2011/0073 ,  H04Q2011/0081 ,  H04Q2011/0086 ,  H04Q2011/0092

Abstract: In response to a connectivity disruption in an underlying optical transport ring supporting a routing and packet switching topology, one or more of optical devices of the optical transport ring are modified to establish connectivity between spine nodes in different data centers to reroute communication between at least a subset of the leaf network devices so as to traverse an inter-spine route via the optical modified optical transport ring. That is, in response to a connectivity disruption in a portion of underlying optical transport ring, one or more optical devices within the optical transport ring are modified such that packets between at least a portion of the leaf devices are rerouted along optical paths between at least two of the spine network devices.

公开(公告)号：US11811641B1

公开(公告)日：2023-11-07

申请号：US16826002

申请日：2020-03-20

Applicant: Juniper Networks, Inc.

Inventor： Shraddha Hegde ,  Antoni B Przygienda ,  Salih K A ,  Harsha Lakshmikanth

IPC: G06F15/173 ,  H04L45/02 ,  H04L41/12 ,  H04L45/00 ,  H04L45/28 ,  H04L9/40

CPC classification number: H04L45/02 ,  H04L41/12 ,  H04L45/04 ,  H04L45/22 ,  H04L45/28 ,  H04L45/32 ,  H04L63/1408 ,  H04L12/4604 ,  H04L45/32 ,  H04L63/1458 ,  H04L41/0654 ,  H04L63/14 ,  H04L63/1408 ,  H04L63/1416 ,  H04L63/1425 ,  H04L63/1433

Abstract: A secure IGP topology or other link state topology can be implemented by a network security unit that runs in a centralized environment on servers separate from a network associated with the IGP topology. The network security unit acquires the topology information, such as by participating in IGP or through border gateway protocol with link state (BGP-LS). The network security unit detects possible network problems, such as indicators of potential network attacks. Once an indicator of a potential network attack is detected, the network security unit identifies the node that is compromised. Once the compromised node is identified, the network security unit can report the node for manual or automated intervention. In some aspects, the network security unit can isolate the compromised node by shutting down links connected to the compromised node.

公开(公告)号：US10469921B2

公开(公告)日：2019-11-05

申请号：US15923713

申请日：2018-03-16

Applicant: Juniper Networks, Inc.

Inventor： Gert Grammel ,  Antoni B Przygienda

IPC: H04B10/00 ,  H04Q11/00 ,  H04L12/707 ,  H04L12/703 ,  H04L12/24 ,  H04J14/02

Abstract: In response to a connectivity disruption in an underlying optical transport ring supporting a routing and packet switching topology, one or more of optical devices of the optical transport ring are modified to establish connectivity between spine nodes in different data centers to reroute communication between at least a subset of the leaf network devices so as to traverse an inter-spine route via the optical modified optical transport ring. That is, in response to a connectivity disruption in a portion of underlying optical transport ring, one or more optical devices within the optical transport ring are modified such that packets between at least a portion of the leaf devices are rerouted along optical paths between at least two of the spine network devices.

公开(公告)号：US20190116116A1

公开(公告)日：2019-04-18

申请号：US16015724

申请日：2018-06-22

Applicant: Juniper Networks, Inc.

Inventor： Antoni B Przygienda ,  Alia K. Atlas

IPC: H04L12/753 ,  H04L12/24

Abstract: A method includes receiving, by a first network device, messages from a plurality of network devices in a network, each of the messages indicating a level value of a respective sending network device in a network topology, determining, by the first network device and based on the respective levels indicated by the messages, a level value of the first network device in the network topology, determining, by the first network device and based on the determined level value, a mechanism by which to forward network traffic to one or more of the plurality of network devices, and forwarding the network traffic according to the determined mechanism.