公开(公告)号：US20160234168A1

公开(公告)日：2016-08-11

申请号：US14619759

申请日：2015-02-11

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Kent K. Leung ,  Xun Wang ,  Andrew E. Ossipov ,  Zhijun Liu ,  Jonathan Augustine Kunder

IPC: H04L29/06 ,  H04L29/12

CPC classification number: H04L63/0254 ,  H04L61/2007 ,  H04L61/2061 ,  H04L63/0218

Abstract: An example method for facilitating hierarchical clustering in a geographically dispersed network environment is provided and includes receiving a packet at one of a plurality of adaptive security appliance (ASA) units in one of a plurality of ASA clusters in a cluster domain of a network environment, identifying the packet as matching an inter-data center live traffic profile, identifying a target ASA cluster in the plurality of ASA clusters in the cluster domain, querying a domain director in the target ASA cluster for a flow owner, and if the flow owner is identified by the domain director, forwarding the packet to the flow owner in the target cluster, and if the flow owner is not identified by the domain director, and the domain director includes a flow state for a flow to which the packet belongs, designating the ASA unit as the flow owner.

Abstract translation: 提供了一种用于促进地理上分散的网络环境中的层次聚类的示例性方法，并且包括在网络环境的集群域中的多个ASA集群之一的多个自适应安全设备（ASA）单元之一中接收分组， 将数据包识别为匹配数据中心之间的实时流量简档，识别集群域中的多个ASA集群中的目标ASA集群，查询流所有者的目标ASA集群中的域控制器，以及流所有者是否为 由域主任识别，将分组转发到目标群集中的流所有者，并且如果域所有者没有被域主管识别，并且域主管包括该分组所属的流的流状态，则指定 ASA单位作为流动所有者。

公开(公告)号：US10601961B2

公开(公告)日：2020-03-24

申请号：US15648014

申请日：2017-07-12

Applicant: Cisco Technology, Inc.

Inventor： Pradeep Patel ,  Jianxin Wang ,  Jonathan Augustine Kunder ,  Ashish Dey

IPC: H04L29/06 ,  H04L12/715 ,  H04L12/801 ,  H04L12/725 ,  H04L12/721 ,  H04L12/64

Abstract: In one example, a service function forwarder of a service function chain enabled domain receives, from a classifier of the service function chain enabled domain, network traffic assigned to a service function path that includes at least one service node configured to apply a service function to the network traffic. The service function forwarder forwards the network traffic along the service function path. The service function forwarder receives, from the at least one service node, instructions for dynamically assigning a particular service function path to predicted network traffic that the at least one service node predicts will be triggered by the network traffic. The service function forwarder forwards the instructions to the classifier.

公开(公告)号：US20190020736A1

公开(公告)日：2019-01-17

申请号：US15648014

申请日：2017-07-12

Applicant: Cisco Technology, Inc.

Inventor： Pradeep Patel ,  Jianxin Wang ,  Jonathan Augustine Kunder ,  Ashish Dey

IPC: H04L29/06 ,  H04L12/715

Abstract: In one example, a service function forwarder of a service function chain enabled domain receives, from a classifier of the service function chain enabled domain, network traffic assigned to a service function path that includes at least one service node configured to apply a service function to the network traffic. The service function forwarder forwards the network traffic along the service function path. The service function forwarder receives, from the at least one service node, instructions for dynamically assigning a particular service function path to predicted network traffic that the at least one service node predicts will be triggered by the network traffic. The service function forwarder forwards the instructions to the classifier.

公开(公告)号：US10721211B2

公开(公告)日：2020-07-21

申请号：US15783706

申请日：2017-10-13

Applicant: Cisco Technology, Inc.

Inventor： Kent K. Leung ,  Xun Wang ,  Andrew E. Ossipov ,  Zhijun Liu ,  Jonathan Augustine Kunder

IPC: H04L29/06 ,  H04L29/12

Abstract: An example method for facilitating hierarchical clustering in a geographically dispersed network environment is provided and includes receiving a packet at one of a plurality of adaptive security appliance (ASA) units in one of a plurality of ASA clusters in a cluster domain of a network environment, identifying the packet as matching an inter-data center live traffic profile, identifying a target ASA cluster in the plurality of ASA clusters in the cluster domain, querying a domain director in the target ASA cluster for a flow owner, and if the flow owner is identified by the domain director, forwarding the packet to the flow owner in the target cluster, and if the flow owner is not identified by the domain director, and the domain director includes a flow state for a flow to which the packet belongs, designating the ASA unit as the flow owner.

公开(公告)号：US20180041474A1

公开(公告)日：2018-02-08

申请号：US15783706

申请日：2017-10-13

Applicant: Cisco Technology, Inc.

Inventor： Kent K. Leung ,  Xun Wang ,  Andrew E. Ossipov ,  Zhijun Liu ,  Jonathan Augustine Kunder

IPC: H04L29/06 ,  H04L29/12

Abstract: An example method for facilitating hierarchical clustering in a geographically dispersed network environment is provided and includes receiving a packet at one of a plurality of adaptive security appliance (ASA) units in one of a plurality of ASA clusters in a cluster domain of a network environment, identifying the packet as matching an inter-data center live traffic profile, identifying a target ASA cluster in the plurality of ASA clusters in the cluster domain, querying a domain director in the target ASA cluster for a flow owner, and if the flow owner is identified by the domain director, forwarding the packet to the flow owner in the target cluster, and if the flow owner is not identified by the domain director, and the domain director includes a flow state for a flow to which the packet belongs, designating the ASA unit as the flow owner.

公开(公告)号：US09800549B2

公开(公告)日：2017-10-24

申请号：US14619759

申请日：2015-02-11

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Kent K. Leung ,  Xun Wang ,  Andrew E. Ossipov ,  Zhijun Liu ,  Jonathan Augustine Kunder

IPC: G06F15/173 ,  H04L29/06 ,  H04L29/12

CPC classification number: H04L63/0254 ,  H04L61/2007 ,  H04L61/2061 ,  H04L63/0218

Abstract: An example method for facilitating hierarchical clustering in a geographically dispersed network environment is provided and includes receiving a packet at one of a plurality of adaptive security appliance (ASA) units in one of a plurality of ASA clusters in a cluster domain of a network environment, identifying the packet as matching an inter-data center live traffic profile, identifying a target ASA cluster in the plurality of ASA clusters in the cluster domain, querying a domain director in the target ASA cluster for a flow owner, and if the flow owner is identified by the domain director, forwarding the packet to the flow owner in the target cluster, and if the flow owner is not identified by the domain director, and the domain director includes a flow state for a flow to which the packet belongs, designating the ASA unit as the flow owner.