公开(公告)号：US11870642B2

公开(公告)日：2024-01-09

申请号：US17657613

申请日：2022-03-31

Applicant: Juniper Networks, Inc.

Inventor： Prasad Miriyala ,  Rosh Perumpully Ramadass ,  Fnu Nadeem

IPC: H04L12/00 ,  H04L41/0813 ,  H04L45/42 ,  H04L9/40 ,  H04L41/0866 ,  H04L69/00 ,  G06F9/38 ,  G06F9/50 ,  G06F9/54 ,  H04L41/40 ,  H04L41/0803

CPC classification number: H04L41/0813 ,  G06F9/3877 ,  G06F9/505 ,  G06F9/5072 ,  G06F9/541 ,  H04L41/0803 ,  H04L41/0866 ,  H04L41/40 ,  H04L45/42 ,  H04L63/0263 ,  H04L69/03

Abstract: In an example, a method comprises obtaining, by a policy controller from a first SDN architecture system, flow metadata for packet flows exchanged among workloads of a distributed application deployed to the first SDN architecture system; identifying, using flow metadata for a packet flow of the packet flows, a source endpoint workload and a destination endpoint workload of the packet flow; generating a network policy rule to allow packet flows from the source endpoint workload to the destination endpoint workload of the packet flow; and adding the network policy rule to a configuration repository as configuration data for a second SDN architecture system to cause a deployment system to configure the second SDN architecture system with the network policy rule to allow packet flows from the source endpoint workload to the destination endpoint workload when the distributed application is deployed to the second SDN architecture system.

公开(公告)号：US12177069B2

公开(公告)日：2024-12-24

申请号：US18341186

申请日：2023-06-26

Applicant: Juniper Networks, Inc.

Inventor： Prasad Miriyala ,  Rosh Perumpully Ramadass ,  FNU Nadeem

IPC: H04L12/00 ,  G06F9/38 ,  G06F9/50 ,  G06F9/54 ,  H04L9/40 ,  H04L41/0803 ,  H04L41/0813 ,  H04L41/0866 ,  H04L41/40 ,  H04L45/42 ,  H04L69/00

Abstract: In an example, a method comprises obtaining, by a policy controller from a first SDN architecture system, flow metadata for packet flows exchanged among workloads of a distributed application deployed to the first SDN architecture system; identifying, using flow metadata for a packet flow of the packet flows, a source endpoint workload and a destination endpoint workload of the packet flow; generating a network policy rule to allow packet flows from the source endpoint workload to the destination endpoint workload of the packet flow; and adding the network policy rule to a configuration repository as configuration data for a second SDN architecture system to cause a deployment system to configure the second SDN architecture system with the network policy rule to allow packet flows from the source endpoint workload to the destination endpoint workload when the distributed application is deployed to the second SDN architecture system.

公开(公告)号：US20230336414A1

公开(公告)日：2023-10-19

申请号：US18341186

申请日：2023-06-26

Applicant: Juniper Networks, Inc.

Inventor： Prasad Miriyala ,  Rosh Perumpully Ramadass ,  FNU Nadeem

IPC: H04L45/42 ,  H04L9/40 ,  G06F9/38 ,  G06F9/50 ,  G06F9/54 ,  H04L41/0813 ,  H04L41/0866 ,  H04L41/40 ,  H04L41/0803 ,  H04L69/00

CPC classification number: H04L41/0813 ,  G06F9/3877 ,  G06F9/505 ,  G06F9/5072 ,  G06F9/541 ,  H04L41/0803 ,  H04L41/0866 ,  H04L41/40 ,  H04L45/42 ,  H04L63/0263 ,  H04L69/03

Abstract: In an example, a method comprises obtaining, by a policy controller from a first SDN architecture system, flow metadata for packet flows exchanged among workloads of a distributed application deployed to the first SDN architecture system; identifying, using flow metadata for a packet flow of the packet flows, a source endpoint workload and a destination endpoint workload of the packet flow; generating a network policy rule to allow packet flows from the source endpoint workload to the destination endpoint workload of the packet flow; and adding the network policy rule to a configuration repository as configuration data for a second SDN architecture system to cause a deployment system to configure the second SDN architecture system with the network policy rule to allow packet flows from the source endpoint workload to the destination endpoint workload when the distributed application is deployed to the second SDN architecture system.