Bulk discovery of devices behind a network address translation device

    公开(公告)号:US11784874B2

    公开(公告)日:2023-10-10

    申请号:US16669869

    申请日:2019-10-31

    CPC classification number: H04L41/0806 H04L41/0893 H04L41/12 H04L41/28

    Abstract: A network management system may discover a plurality of network devices behind a network address translation device, such as a firewall. The network management system may receive a model of N network devices, generate a bulk activation configuration for the N network devices and commit the bulk activation configuration on a seed network device. The network management system may receive a request for a first connection from a first neighboring network device and may connect to the first neighboring network device. The first neighboring network device may have received the bulk activation configuration from the seed device. The network management system may determine whether the first neighboring network device is one of the N network devices and commit a second activation configuration on the first neighboring network device if it is one of the N network devices. A plurality of neighboring network device may be configured in this fashion.

    Programmable configlets through opaque intents in graph based intent controllers

    公开(公告)号:US10897395B2

    公开(公告)日:2021-01-19

    申请号:US16551532

    申请日:2019-08-26

    Abstract: A controller device manages a plurality of network devices. The controller device is configured to receive, for a data structure, a configlet specifying a set of configuration changes to be applied to a resource of a plurality of resources of the plurality of network devices. A low level configuration for each respective owned resource of a set of owned resources of the plurality of resources includes a pointer indicating an owner for the respective owned resources. The one or more processing units are further configured to determine the set of configuration changes does not conflict in response to determining the low level configuration for the resource does not include a pointer indicating the owner for the resource is not the configlet and apply the set of configuration changes to the resource in response to determining the set of configuration changes does not conflict with the set of owned resources.

    Managing multiple semantic versions of device configuration schemas

    公开(公告)号:US11165647B2

    公开(公告)日:2021-11-02

    申请号:US16456976

    申请日:2019-06-28

    Abstract: A controller device manages a plurality of network devices. The controller device includes one or more processing units implemented in circuitry and configured to maintain a graph data structure representing device level configuration schemas for the plurality of network devices, the graph data structure including trie nodes for every first device level configuration schema element for a first model of a version of network device of the plurality of network devices; obtain corresponding second device level configuration schema elements based on a path for a second model of the version of the network device; determine a deviation between the second device level configuration schema element and the first device level configuration schema; and update the trie node to add a branch to a node representing the second device level configuration schema element.

    Efficient storage and retrieval of time series data

    公开(公告)号:US10769132B1

    公开(公告)日:2020-09-08

    申请号:US15839463

    申请日:2017-12-12

    Abstract: A device stores time series data, based on time stamps, in a compact prefix tree, and receives new time series data to be added to the compact prefix tree. The device determines whether the new time series data is different than previously stored time series data in the compact prefix tree. The device selectively stores the new time series data in the compact prefix tree by storing the new time series data in the compact prefix tree when the new time series data is different than the previously stored time series data in the compact prefix tree, and updates a last time stamp for one of the previously stored time series data, based on the new time series data, when the new time series data is not different than the one of the previously stored time series data.

    DECENTRALIZED SOFTWARE UPGRADE IMAGE DISTRIBUTION FOR NETWORK DEVICE UPGRADES

    公开(公告)号:US20230094033A1

    公开(公告)日:2023-03-30

    申请号:US17449530

    申请日:2021-09-30

    Abstract: An example method includes receiving, by a control system for a software upgrade image, respective characterization data for network devices of a network; generating, by the control system and based on the characterization data for the network devices, an image map that indicates, for each portion of a plurality of different portions of the software upgrade image, an image proxy network device selected by the control system from among the network devices to store the portion based on the characterization data; and outputting, by the control system, the image map to a network device of the network devices to cause the network device to obtain each portion of the plurality of different portions of the software upgrade image from the corresponding image proxy network device selected by the control system to store the portion.

    Bulk discovery of devices behind a network address translation device

    公开(公告)号:US11159370B2

    公开(公告)日:2021-10-26

    申请号:US16669830

    申请日:2019-10-31

    Abstract: In one example, a network management system discovers a plurality of network devices behind a network address translation device, such as a firewall. The network management system may receive a model of a seed network device, generate a first activation configuration and commit the first activation configuration on the seed network device. The network management system may connect to the seed network device and discover neighboring devices from information in the seed network device. The network management system may connect to the neighboring devices, automatically create a model of the neighboring network devices, generate s activation configurations for the neighboring network devices and commit the activation configurations on the neighboring network devices. The network management system may iterative perform these steps until it discovers all the discoverable network devices behind the network address translation device.

    BULK DISCOVERY OF DEVICES BEHIND A NETWORK ADDRESS TRANSLATION DEVICE

    公开(公告)号:US20210135935A1

    公开(公告)日:2021-05-06

    申请号:US16669869

    申请日:2019-10-31

    Abstract: A network management system may discover a plurality of network devices behind a network address translation device, such as a firewall. The network management system may receive a model of N network devices, generate a bulk activation configuration for the N network devices and commit the bulk activation configuration on a seed network device. The network management system may receive a request for a first connection from a first neighboring network device and may connect to the first neighboring network device. The first neighboring network device may have received the bulk activation configuration from the seed device. The network management system may determine whether the first neighboring network device is one of the N network devices and commit a second activation configuration on the first neighboring network device if it is one of the N network devices. A plurality of neighboring network device may be configured in this fashion.

    Decentralized software upgrade image distribution for network device upgrades

    公开(公告)号:US12210861B2

    公开(公告)日:2025-01-28

    申请号:US17449530

    申请日:2021-09-30

    Abstract: An example method includes receiving, by a control system for a software upgrade image, respective characterization data for network devices of a network; generating, by the control system and based on the characterization data for the network devices, an image map that indicates, for each portion of a plurality of different portions of the software upgrade image, an image proxy network device selected by the control system from among the network devices to store the portion based on the characterization data; and outputting, by the control system, the image map to a network device of the network devices to cause the network device to obtain each portion of the plurality of different portions of the software upgrade image from the corresponding image proxy network device selected by the control system to store the portion.

    BULK DISCOVERY OF DEVICES BEHIND A NETWORK ADDRESS TRANSLATION DEVICE

    公开(公告)号:US20220021576A1

    公开(公告)日:2022-01-20

    申请号:US17449626

    申请日:2021-09-30

    Abstract: In one example, a network management system discovers a plurality of network devices behind a network address translation device, such as a firewall. The network management system may receive a model of a seed network device, generate a first activation configuration and commit the first activation configuration on the seed network device. The network management system may connect to the seed network device and discover neighboring devices from information in the seed network device. The network management system may connect to the neighboring devices, automatically create a model of the neighboring network devices, generate s activation configurations for the neighboring network devices and commit the activation configurations on the neighboring network devices. The network management system may iterative perform these steps until it discovers all the discoverable network devices behind the network address translation device.

Patent Agency Ranking