Non-stop routing with internal session mirroring and adaptive application-level rate limiting
    1.
    发明授权
    Non-stop routing with internal session mirroring and adaptive application-level rate limiting 有权
    具有内部会话镜像和自适应应用级速率限制的不间断路由

    公开(公告)号:US09491107B1

    公开(公告)日:2016-11-08

    申请号:US14320130

    申请日:2014-06-30

    CPC classification number: H04L47/30 H04L45/16 H04L45/28 H04L45/60

    Abstract: This application describes techniques for replicating data at a primary routing engine of a network device before processing the data at a transport layer of the primary routing engine, wherein the data is to be sent to a routing peer via a routing communication session, and sending the replicated data to a secondary routing engine of the network device to be processed at a transport layer of the secondary routing engine. The secondary routing engine, in response to detecting that a socket buffer for buffering the replicated data has reached a predefined high occupancy threshold, outputs a notification to the primary routing engine. In response to receiving the notification, an application-layer routing process of the primary routing engine refrains from sending at least some of a plurality of routing updates to the routing peer, and continues to send keepalive messages for the routing communication session to the routing peer.

    Abstract translation: 该应用描述了在主路由引擎的传输层处理数据之前在网络设备的主路由引擎处复制数据的技术,其中数据将经由路由通信会话发送到路由对等体,并且发送 将复制的数据复制到要在辅助路由引擎的传输层处理的网络设备的辅助路由引擎。 辅助路由引擎响应于检测到用于缓冲复制数据的套接字缓冲器已经达到预定义的高占用阈值,将通知输出到主路由引擎。 响应于接收到通知,主路由引擎的应用层路由处理不阻止向路由对等体发送多个路由更新中的至少一些,并且继续向路由对等体发送用于路由通信会话的保持活动消息 。

    Penalty-box policers for network device control plane protection

    公开(公告)号:US10193807B1

    公开(公告)日:2019-01-29

    申请号:US15339473

    申请日:2016-10-31

    Abstract: In general, techniques are described for dynamically controlling host-bound traffic by dynamically adding and updating, within the forwarding plane of a network device, network packet policers that each constrains, for one or more packet flows, an amount of host-bound traffic of the packet flows permitted to reach the control plane in accordance with available resources. In one example, a control plane of the network device detects internal congestion in the communication path from the forwarding plane to control plane (the “host-bound path”), identifies packet flows utilizing an excessive amount of host-bound path resources, computes limits for the identified packet flows, and adds “penalty-box policers” configured with the computed limits for the identified packet flows to the forwarding plane. The forwarding plane subsequently applies the policers to the identified packet flows to constrain the amount of traffic of the packet flows allowed to reach the control plane to the computed limits.

    Penalty-box policers for network device control plane protection
    3.
    发明授权
    Penalty-box policers for network device control plane protection 有权
    用于网络设备控制平面保护的处罚机

    公开(公告)号:US09485118B1

    公开(公告)日:2016-11-01

    申请号:US13631652

    申请日:2012-09-28

    CPC classification number: H04L12/5695 H04L47/10

    Abstract: In general, techniques are described for dynamically controlling host-bound traffic by dynamically adding and updating, within the forwarding plane of a network device, network packet policers that each constrains, for one or more packet flows, an amount of host-bound traffic of the packet flows permitted to reach the control plane in accordance with available resources. In one example, a control plane of the network device detects internal congestion in the communication path from the forwarding plane to control plane (the “host-bound path”), identifies packet flows utilizing an excessive amount of host-bound path resources, computes limits for the identified packet flows, and adds “penalty-box policers” configured with the computed limits for the identified packet flows to the forwarding plane. The forwarding plane subsequently applies the policers to the identified packet flows to constrain the amount of traffic of the packet flows allowed to reach the control plane to the computed limits.

    Abstract translation: 通常,描述了通过在网络设备的转发平面内动态地添加和更新网络分组策略器来动态地控制主机绑定业务的技术,所述网络分组策略对于一个或多个分组流限制了一个或多个分组流量的主机绑定业务量 允许根据可用资源到达控制平面的分组流。 在一个示例中,网络设备的控制平面检测从转发平面到控制平面(“主机绑定路径”)的通信路径中的内部拥塞,利用过多的主机绑定路径资源来识别分组流,计算 对所标识的分组流的限制,并且将配置有所识别的分组流的计算的限制的“惩罚方框策略器”添加到转发平面。 转发平面随后将策略器应用于所识别的分组流,以将允许到达控制平面的分组流的流量约束到计算的极限。

Patent Agency Ranking