ROUTING APPLICATION CONTROL AND DATA-PLANE TRAFFIC IN SUPPORT OF CLOUD-NATIVE APPLICATIONS

    公开(公告)号:WO2023287624A1

    公开(公告)日:2023-01-19

    申请号:PCT/US2022/036255

    申请日:2022-07-06

    Abstract: Techniques for using computer networking protocol extensions to route control‑plane traffic and data-plane traffic associated with a common application are described herein. For instance, a traffic flow associated with an application may be established such that control-plane traffic is sent to a control-plane node associated with the application and data‑plane traffic is sent to a data-plane node associated with the application. When a client device sends an authentication request to connect to the application, the control‑plane node may send an indication of a hostname to be used by the client device to send data-plane traffic to the data-node. As such, when a packet including the hostname corresponding with the data‑plane node is received, the packet may be forwarded to the data-plane node.

    CLOUD-NATIVE WORKLOAD OPTIMIZATION
    3.
    发明申请

    公开(公告)号:WO2023059416A1

    公开(公告)日:2023-04-13

    申请号:PCT/US2022/042632

    申请日:2022-09-06

    Abstract: Techniques for orchestrating workloads based on policy to operate in optimal host and/or network proximity in cloud-native environments are described herein. The techniques may include receiving flow data associated with network paths between workloads hosted by a cloud-based network. Based at least in part on the flow data, the techniques may include determining that a utilization of a network path between a first workload and a second workload is greater than a relative utilization of other network paths between the first workload and other workloads. The techniques may also include determining that reducing the network path would optimize communications between the first workload and the second workload without adversely affecting communications between the first workload and the other workloads. The techniques may also include causing at least one of a redeployment or a network path re-routing to reduce the networking proximity between the first workload and the second workload.

    IDENTIFYING EXECUTION ENVIRONMENTS FOR DEPLOYING NETWORK FUNCTIONS

    公开(公告)号:WO2022066496A1

    公开(公告)日:2022-03-31

    申请号:PCT/US2021/050619

    申请日:2021-09-16

    Abstract: This disclosure describes techniques and mechanisms for using a domain-specific language (DSL) to express and compile serverless network functions, and optimizing the deployment location for the serverless network functions on network devices. In some examples, the serverless network functions may be expressed entirely in the DSL (e.g., via a text-based editor, a graphics-based editor, etc.), where the DSL is a computer language specialized to a particular domain, such as a network function domain. In additional examples, the serverless network functions may be expressed and compiled using a DSL in combination with a general-purpose language (GSL). Once the serverless network function have been expressed and/or compiled, the techniques of this disclosure further include determining an optimized network component on which the serverless network function is to execute, and deploying the serverless function to the optimized network component.

    METHODS AND ARCHITECTURE FOR LOAD-CORRECTING REQUESTS FOR SERVERLESS FUNCTIONS

    公开(公告)号:WO2021206895A1

    公开(公告)日:2021-10-14

    申请号:PCT/US2021/023499

    申请日:2021-03-22

    Abstract: Methods and architecture for load-correcting requests for serverless functions to reduce latency of serverless computing are provided. An example technique exploits knowledge that a given server node does not have a serverless function ready to run or is overloaded. Without further processing overhead or communication, the server node shifts the request to a predetermined alternate node without assessing a current state of the alternate node, an efficient decision based on probability that a higher chance of fulfillment exists at the alternate node than at the current server, even with no knowledge of the alternate node. In an implementation, the server node refers the request but also warms up the requested serverless function, due to likelihood of repeated requests or in case the request is directed back. An example device has a front-end redirecting server and a backend serverless system in a single component.

    ORCHESTRATED RECONNECT FOR CLIENT-UNAWARE ROLLING OF NETWORK NODES

    公开(公告)号:WO2023034058A1

    公开(公告)日:2023-03-09

    申请号:PCT/US2022/041054

    申请日:2022-08-22

    Abstract: Techniques for the transparent rolling of nodes in a cloud-delivered headend service without disrupting client traffic or making users aware of the various nodes in the system being rolled are described herein. The techniques may include receiving an indication that a first node of a network is to be rolled. Based at least in part on the indication, new connection requests may not be sent to the first intermediate node. Additionally, a client device having an existing connection through the first node may be identified. In some examples, a request may be sent to the client device to prompt the client device to establish a new connection. After determining that the new connection has been established such that the new connection flows through a second node of the network, the first node may be rolled.

    USING GLOBAL VIRTUAL NETWORK INSTANCE (VNI) LABELS TO SIGNAL A SERVICE CHAIN

    公开(公告)号:WO2022251307A1

    公开(公告)日:2022-12-01

    申请号:PCT/US2022/030845

    申请日:2022-05-25

    Abstract: Techniques for using global virtual network instance (VNI) labels in a multi-domain network to route network data with a multi-tenant network overlay are described herein. A routing device provisioned in a network domain of the multi-domain network may register with a service discovery system of the network domain for use of network configuration data to establish routes through the multi-domain network with network nodes. Each network domain of the multi-domain network may include an application programming interface (API) server for processing API requests to make changes to configurations of a network domain. A border gateway protocol (BGP) large community may be utilized to encode global VNI labels, network addresses, local next hop nodes, and/or additional network information and sent to routing devices provisioned in separate network domains. A service chain may be signaled by global VNI labels to route network traffic through various services prior to reaching a destination endpoint.

    MANAGEMENT OF SERVERLESS FUNCTION DEPLOYMENTS IN COMPUTING NETWORKS

    公开(公告)号:WO2021146055A1

    公开(公告)日:2021-07-22

    申请号:PCT/US2020/067559

    申请日:2020-12-30

    Abstract: Systems, methods, computer-readable media are disclosed for influencing serverless function placement across hosts within a network. A method includes receiving a notification from a network component, the notification indicating a performance bottleneck in association with one or more instances of a serverless function being executed at one or more hosts of a network; initiating at least one additional instance of the serverless function in response to the performance bottleneck; and sending a message to the network component identifying the at least one additional instance of the serverless function, the network component directing network traffic based on the message.

    AUTOMATIC ENCRYPTION FOR CLOUD-NATIVE WORKLOADS

    公开(公告)号:WO2023076371A1

    公开(公告)日:2023-05-04

    申请号:PCT/US2022/047867

    申请日:2022-10-26

    Abstract: Techniques for routing service mesh traffic based on whether the traffic is encrypted or unencrypted are described herein. The techniques may include receiving, from a first node of a cloud-based network, traffic that is to be sent to a second node of the cloud-based network and determining whether the traffic is encrypted or unencrypted. If it is determined that the traffic is encrypted, the traffic may be sent to the second node via a service mesh of the cloud‑based platform. Alternatively, or additionally, if it is determined that the traffic is unencrypted, the traffic may be sent to the second node via an encrypted tunnel. In some examples, the techniques may be performed at least partially by a program running on the first node of the cloud-based network, such as an extended Berkeley Packet Filter (eBPF) program, and the like.

    APPLICATION PROGRAMMING INTERFACE (API)-BASED MULTI-TENANT ROUTING CONTROL PLANE

    公开(公告)号:WO2022251295A1

    公开(公告)日:2022-12-01

    申请号:PCT/US2022/030828

    申请日:2022-05-25

    Abstract: Techniques for using global virtual network instance (VNI) labels in a multi-domain network to route network data with a multi-tenant network overlay are described herein. A routing device provisioned in a network domain of the multi-domain network may register with a service discovery system of the network domain for use of network configuration data to establish routes through the multi-domain network with network nodes. Each network domain of the multi-domain network may include an application programming interface (API) server for processing API requests to make changes to configurations of a network domain. A border gateway protocol (BGP) large community may be utilized to encode global VNI labels, network addresses, local next hop nodes, and/or additional network information and sent to routing devices provisioned in separate network domains. A service chain may be signaled by global VNI labels to route network traffic through various services prior to reaching a destination endpoint.

Patent Agency Ranking