公开(公告)号：WO2016205016A1

公开(公告)日：2016-12-22

申请号：PCT/US2016/036204

申请日：2016-06-07

Applicant: CISCO TECHNOLOGY, INC.

Inventor： CHANG, David, W. ,  PATRA, Abhijit ,  BAGEPALLI, Nagaraj A.

IPC: H04L12/721 ,  H04L12/24 ,  H04L12/46 ,  H04L29/08 ,  G06F9/455

CPC classification number: H04L49/25 ,  H04L12/1886 ,  H04L12/4633 ,  H04L12/4641 ,  H04L41/042 ,  H04L45/04 ,  H04L45/18 ,  H04L45/66 ,  H04L67/1097

Abstract: According to one aspect, a method includes an Interecloud Fabric Switch (ICS) included in a public cloud and an ICS cluster obtaining a packet, and determining if the packet is obtained from a site-to-site link that links the ICS to an enterprise datacenter. If ilie packet is obtained fiom the site-to-site link, it is determined whether the packet is an unknown unicast packet. If the packet is ah unknown unicast packet, the packet is dropped, and if not, the packet is provided to an access link that links the ICS to a virtual machine. If the packet is not obtained from the site-to-site link, it is determined whether the packet is obtained from an inter-ICS link that allows the ICS to communicate with the ICS cluster. If the packet is obtained from the inter-ICS link, the packet is dropped if it is an unknown unicast packet.

Abstract translation: 根据一个方面，一种方法包括公共云中包括的Interecloud Fabric Switch（ICS）和获取分组的ICS集群，并且确定是否从将ICS链接到企业的站点到站点链路获得分组 数据中心。 如果从站点到站点链路获得了ilie数据包，则确定数据包是否是未知的单播数据包。 如果分组是未知单播分组，则丢弃分组，如果不是，则将分组提供给将ICS链接到虚拟机的接入链路。 如果没有从站点到站点链路获得分组，则确定分组是否从允许ICS与ICS集群通信的ICS间链路获得。 如果从ICS链路获得分组，则如果是未知的单播分组，则分组被丢弃。

公开(公告)号：WO2015138767A1

公开(公告)日：2015-09-17

申请号：PCT/US2015/020242

申请日：2015-03-12

Applicant: CISCO TECHNOLOGY, INC.

Inventor： KUMAR, Surendra M. ,  BAGEPALLI, Nagaraj A. ,  PATRA, Abhijit ,  QUINN, Paul ,  GUICHARD, James N. ,  BOSCH, Hendrikus G. P.

IPC: H04L12/725 ,  H04L12/24 ,  H04L12/801

CPC classification number: H04L45/02 ,  H04L41/08 ,  H04L41/0813 ,  H04L41/0893 ,  H04L41/0896 ,  H04L41/12 ,  H04L45/308 ,  H04L45/38

Abstract: An example method for service node originated service chains in a network environment is provided and includes receiving a packet at a service node in a network environment that includes a plurality of service nodes and a central classifier, analyzing the packet for a service chain modification or a service chain initiation, classifying the packet at the service node to a new service chain based on the analysis, initiating the new service chain at the service node if the analysis indicates service chain initiation, and modifying an existing service chain for the packet to the new service chain if the analysis indicates service chain modification. In specific embodiments, the analysis includes applying classification logic specific to the service node. Some embodiments, service node attributes and order of service nodes in substantially all service chains configured in the network may be received from a central controller.

Abstract translation: 提供了一种网络环境中服务节点发起的服务链的示例方法，包括在包括多个服务节点和中心分类器的网络环境中的服务节点处接收分组，分析服务链修改的分组或 服务链启动，基于分析将服务节点处的分组分类到新的服务链，如果分析指示服务链启动，则在服务节点处启动新的服务链，并将分组的现有服务链修改为新的 服务链如果分析表明服务链修改。 在具体实施例中，分析包括应用对服务节点特定的分类逻辑。 可以从中央控制器接收一些实施例，服务节点属性和在网络中配置的基本上所有服务链中的服务节点的顺序。

公开(公告)号：WO2016196316A1

公开(公告)日：2016-12-08

申请号：PCT/US2016/034720

申请日：2016-05-27

Applicant: CISCO TECHNOLOGY, INC.

Inventor： CHANG, David W. ,  PATRA, Abhijit ,  BAGEPALLI, Nagaraj ,  DEVIREDDY, Dileep Kumar ,  SADASIVAN, Ganesh

IPC: H04L29/12 ,  H04L29/08 ,  G06F9/44 ,  H04L12/46 ,  H04L12/721

CPC classification number: H04L61/6022 ,  G06F9/4416 ,  G06F9/45558 ,  G06F2009/4557 ,  G06F2009/45595 ,  H04L12/4633 ,  H04L45/66 ,  H04L47/825 ,  H04L61/103 ,  H04L63/0272 ,  H04L67/10 ,  H04L67/1097 ,  H04L67/34 ,  H04L69/324

Abstract: Many hybrid cloud topologies require virtual machines in a public cloud to use a router in a private cloud, even when the virtual machine is transmitting to another virtual machine in the public cloud. Routing data through an enterprise router on the private cloud via the internet is generally inefficient. This problem can be overcome by placing a router within the public cloud that mirrors much of the routing functionality of the enterprise router. A switch configured to intercept address resolution protocol (ARP) request for the enterprise router's address and fabricate a response using the MAC address of the router in the public cloud.

Abstract translation: 许多混合云拓扑需要公共云中的虚拟机在私有云中使用路由器，即使虚拟机正在传播到公共云中的另一个虚拟机。 通过互联网在私有云上通过企业路由器路由数据通常效率低下。 通过将路由器放置在公共云中来反映企业路由器的大部分路由功能，可以克服这个问题。 交换机被配置为拦截企业路由器地址的地址解析协议（ARP）请求，并使用公共云中的路由器的MAC地址来制定响应。

公开(公告)号：WO2017095815A1

公开(公告)日：2017-06-08

申请号：PCT/US2016/064017

申请日：2016-11-29

Applicant: CISCO TECHNOLOGY, INC.

Inventor： KUMAR, Surendra M. ,  BOSCH, Hendrikus G. P. ,  LEUNG, Kent K. ,  PATRA, Abhijit

IPC: H04L12/701

CPC classification number: H04L45/74 ,  H04L45/00 ,  H04L45/7453 ,  H04L49/3009

Abstract: A method is provided in one example embodiment and includes receiving at a network element a packet including a Network Services Header ("NSH"), in which the NSH includes an Infrastructure ("I") flag and a service path header comprising a Service Index ("SI"), and a Service Path ID ("SPI") and determining whether the I flag is set to a first value. The method further includes, if the I flag is set to the first value, setting the I flag to a second value and forwarding the packet to the service function that corresponds to the SI for processing. The method still further includes, if the I flag is not set to the first value, decrementing the SI and making a forwarding decision based on a new value of the SI and the SPI.

Abstract translation: 在一个示例实施例中提供了一种方法，并且包括在网络元件处接收包括网络服务报头（“NSH”）的分组，其中NSH包括基础设施（“I”）， 标志和包括服务索引（“SI”）和服务路径ID（“SPI”）的服务路径首标，并且确定I标志是否被设置为第一值。 该方法还包括：如果I标志被设置为第一值，则将I标志设置为第二值并且将该分组转发到对应于用于处理的SI的服务功能。 该方法还包括，如果I标志没有被设置为第一值，则递减SI并且基于SI和SPI的新值进行转发决定。

公开(公告)号：WO2015073190A1

公开(公告)日：2015-05-21

申请号：PCT/US2014/062244

申请日：2014-10-24

Applicant: CISCO TECHNOLOGY, INC.

Inventor： KUMAR, Surendra M. ,  BAGEPALLI, Nagaraj A. ,  DEVIREDDY, Dileep K. ,  PATRA, Abhijit

IPC: H04L12/721 ,  H04L12/715

CPC classification number: H04L47/2475 ,  H04L12/56 ,  H04L43/026 ,  H04L45/12 ,  H04L45/38 ,  H04L45/48 ,  H04L45/64 ,  H04L47/12 ,  H04L47/17

Abstract: A method is provided in one example embodiment and includes receiving at a network element a flow offload decision for a first service node comprising a portion of a service chain for processing a flow; recording the flow offload decision against the first service node at the network element; and propagating the flow offload decision backward on a service path to which the flow belongs if the first service node is hosted at the network element. Embodiments may also include propagating the flow offload decision backward on a service path to which the flow belongs if the flow offload decision is a propagated flow offload decision and the network element hosts a second service node that immediately precedes the service node on behalf of which the propagated flow offload decision was received and a flow offload decision has already been received by the network element from the second service node.

Abstract translation: 在一个示例实施例中提供了一种方法，并且包括在网络元件处接收包括用于处理流的服务链的一部分的第一服务节点的流卸载决定; 记录网元上的第一服务节点的流量卸载决定; 并且如果第一服务节点驻留在网络元件处，则在流所属的服务路径上向后传播流卸载决策。 实施例还可以包括：如果流卸载决定是传播的流卸载决定，并且网络主机驻留在服务节点之前的第二服务节点，则在流所属的服务路径上向后传播流卸载决策， 接收到传播流卸载决定，网元从第二服务节点已经接收到流卸载决定。

公开(公告)号：WO2014200778A1

公开(公告)日：2014-12-18

申请号：PCT/US2014/040932

申请日：2014-06-04

Applicant: CISCO TECHNOLOGY, INC.

Inventor： CHANG, David Wei-Shen ,  PATRA, Abhijit ,  EPSTEIN, Joseph Alan ,  PUTHIYAPARAMBIL, Aravindh ,  DEBROY, Deep ,  CIVILINI, Massimo

IPC: G06F21/60 ,  G06F9/455 ,  H04L12/64

CPC classification number: G06F21/10 ,  G06F9/45558 ,  G06F21/606 ,  G06F2009/45579 ,  H04L9/0894 ,  H04L67/1097 ,  H04L2209/76

Abstract: A system and a method implement a cloud storage gateway configured to provide secure storage services in a cloud environment. A method can include implementing storage provisioning for a virtual machine (VM) in a hybrid cloud environment that includes an enterprise network in communication with a cloud. Enterprise network includes enterprise storage, and cloud includes cloud storage. The storage provisioning is implemented by deploying a cloud storage gateway in the cloud that facilitates secure migration of data associated with the VM between enterprise storage and cloud storage. A nested virtual machine container (NVC) is also deployed in the cloud, where NVC abstracts an interface that is transparent to a cloud infrastructure of the cloud. Cloud storage gateway can then be executed as a virtual machine within NVC. Such storage provisioning is further implemented by deploying the VM in a NVC in the cloud and directly attaching storage to the VM.

Abstract translation: 系统和方法实施云存储网关，其被配置为在云环境中提供安全存储服务。 一种方法可以包括在包括与云通信的企业网络的混合云环境中为虚拟机（VM）实施存储配置。 企业网络包括企业存储，云包括云存储。 通过在云中部署云存储网关来实现存储配置，有助于在企业存储和云存储之间安全迁移与VM相关联的数据。 云中也部署了一个嵌套虚拟机容器（NVC），其中NVC提取对云的云基础架构透明的接口。 云存储网关可以作为NVC内的虚拟机执行。 通过在云中的NVC中部署VM并将存储直接附加到VM来进一步实现这种存储配置。

公开(公告)号：WO2013163216A1

公开(公告)日：2013-10-31

申请号：PCT/US2013/037842

申请日：2013-04-23

Applicant: CISCO TECHNOLOGY, INC.

Inventor： CHANG, David, W. ,  PATRA, Abhijit ,  BAGEPALLI, Nagaraj, A. ,  MESTERY, Kyle

IPC: H04L12/931

CPC classification number: H04L49/70 ,  G06F9/45558 ,  G06F2009/4557 ,  G06F2009/45595 ,  H04L12/462 ,  H04L12/4625 ,  H04L12/4633 ,  H04L12/4641 ,  H04L2012/5617

Abstract: In one embodiment, a secure transport layer tunnel may be established over a public network between a first cloud gateway in a private cloud and a second cloud gateway in a public cloud, where the secure transport layer tunnel is configured to provide a link layer network extension between the private cloud and the public cloud. In addition, a cloud virtual Ethernet module (cVEM) may be executed (instantiated) within the public cloud, where the cVEM is configured to switch inter- virtual-machine (VM) traffic between the private cloud and one or more private application VMs in the public cloud connected to the cVEM.

Abstract translation: 在一个实施例中，可以通过私有云中的第一云网关和公共云中的第二云网关之间的公共网络建立安全传输层隧道，其中安全传输层隧道被配置为提供链路层网络扩展 在私有云和公共云之间。 此外，云虚拟以太网模块（cVEM）可以在公共云内执行（实例化），其中cVEM被配置为在私有云和一个或多个私有应用VM之间切换虚拟机（VM）流量 公共云连接到cVEM。