公开(公告)号：US12081430B2

公开(公告)日：2024-09-03

申请号：US17860957

申请日：2022-07-08

Applicant: Cisco Technology, Inc.

Inventor： Hari Shankar ,  Eui Sun Ahn ,  Jeffery Rodd Daviss ,  Rashmi Garg ,  Jon Langemak ,  William Mark Townsley

IPC: H04L45/12 ,  H04L9/40 ,  H04L12/46 ,  H04L45/02

CPC classification number: H04L45/123 ,  H04L12/4633 ,  H04L45/02 ,  H04L63/0236

Abstract: Techniques for a hub node to, provisioned in a network site of a hub and spoke overlay network, to receive a network advertisement from the spoke, decode network routing requirements from a border gateway protocol (BGP) large community associated with the network advertisement, and store the network routing requirements in association with a route associated with the spoke. The routing requirements may indicate one or more service(s) to be applied to the packet, a trust level associated with the spoke, and/or a trust zone associated with the spoke. The hub node may receive a packet from the spoke to be transmitted to destination spoke. The hub node may then route the packet to the destination spoke, drop the packet, or send the packet to a service node configured to apply the one or more services to the packet based on the routing requirements.

公开(公告)号：US20240015091A1

公开(公告)日：2024-01-11

申请号：US17860957

申请日：2022-07-08

Applicant: Cisco Technology, Inc.

Inventor： Hari Shankar ,  Eui Sun Ahn ,  Jeffery Rodd Daviss ,  Rashmi Garg ,  Jon Langemak ,  William Mark Townsley

IPC: H04L45/12 ,  H04L45/02 ,  H04L9/40 ,  H04L12/46

CPC classification number: H04L45/123 ,  H04L45/02 ,  H04L63/0236 ,  H04L12/4633

Abstract: Techniques for a hub node to, provisioned in a network site of a hub and spoke overlay network, to receive a network advertisement from the spoke, decode network routing requirements from a border gateway protocol (BGP) large community associated with the network advertisement, and store the network routing requirements in association with a route associated with the spoke. The routing requirements may indicate one or more service(s) to be applied to the packet, a trust level associated with the spoke, and/or a trust zone associated with the spoke. The hub node may receive a packet from the spoke to be transmitted to destination spoke. The hub node may then route the packet to the destination spoke, drop the packet, or send the packet to a service node configured to apply the one or more services to the packet based on the routing requirements.