公开(公告)号：US11425030B2

公开(公告)日：2022-08-23

申请号：US17066223

申请日：2020-10-08

Applicant: Cisco Technology, Inc.

Inventor： Kyle Andrew Donald Mestery ,  Ian James Wells ,  Grzegorz Boguslaw Duraj

IPC: H04L45/24 ,  H04L45/42 ,  H04L47/125 ,  H04L45/021 ,  H04L45/00

Abstract: A method may include, with a controller of an AS, routing a data flow from a source device, through at least one front-end node to a plurality of back-end nodes, and balancing, by the controller, the data flow to the back-end nodes equally based at least in part on ECMP routing. A number of routes from the back-end nodes to endpoint devices may be determined based at least in part on a preference for a primary route from the back-end nodes to a corresponding one of the endpoint devices, and backup routes from the back-end nodes to the corresponding one of the endpoint devices. An indication of a failure of a first endpoint device is received, and the back-end nodes utilize a first backup route that is associated with a second endpoint device to rebalance the data flow from the first endpoint device to the second endpoint device.

公开(公告)号：US11388225B1

公开(公告)日：2022-07-12

申请号：US17171645

申请日：2021-02-09

Applicant: Cisco Technology, Inc.

Inventor： Grzegorz Boguslaw Duraj ,  Leonardo Rangel Augusto ,  Kyle Andrew Donald Mestery

IPC: G06F15/16 ,  H04L67/1023 ,  H04L9/40 ,  H04L67/1014 ,  H04L47/125

Abstract: Techniques for load balancing encrypted traffic based on security parameter index (SPI) values of packet headers and sets of 5-tuple values of the packet headers are described herein. Additionally, techniques for including quality of service (QoS)-type information in SPI value fields of packet headers are also described herein. The QoS-type information may indicate a particular traffic class according to which the packet is to be handled. Further, techniques for pre-configuring a backend host such that encrypted traffic may be migrated to the backend host from another backend host without causing temporary service disruptions are also described herein.

公开(公告)号：US20220116311A1

公开(公告)日：2022-04-14

申请号：US17066223

申请日：2020-10-08

Applicant: Cisco Technology, Inc.

Inventor： Kyle Andrew Donald Mestery ,  Ian James Wells ,  Grzegorz Boguslaw Duraj

IPC: H04L12/707 ,  H04L12/717 ,  H04L12/755 ,  H04L12/721 ,  H04L12/803

Abstract: A method may include, with a controller of an AS, routing a data flow from a source device, through at least one front-end node to a plurality of back-end nodes, and balancing, by the controller, the data flow to the back-end nodes equally based at least in part on ECMP routing. A number of routes from the back-end nodes to endpoint devices may be determined based at least in part on a preference for a primary route from the back-end nodes to a corresponding one of the endpoint devices, and backup routes from the back-end nodes to the corresponding one of the endpoint devices. An indication of a failure of a first endpoint device is received, and the back-end nodes utilize a first backup route that is associated with a second endpoint device to rebalance the data flow from the first endpoint device to the second endpoint device.

公开(公告)号：US11126415B1

公开(公告)日：2021-09-21

申请号：US17028566

申请日：2020-09-22

Applicant: Cisco Technology, Inc.

Inventor： Kyle Andrew Donald Mestery ,  Ian James Wells ,  Grzegorz Boguslaw Duraj

IPC: G06F9/44 ,  G06F8/41 ,  G06F8/30 ,  G06F8/76

Abstract: This disclosure describes techniques and mechanisms for using a domain-specific language (DSL) to express and compile serverless network functions, and optimizing the deployment location for the serverless network functions on network devices. In some examples, the serverless network functions may be expressed entirely in the DSL (e.g., via a text-based editor, a graphics-based editor, etc.), where the DSL is a computer language specialized to a particular domain, such as a network function domain. In additional examples, the serverless network functions may be expressed and compiled using a DSL in combination with a general-purpose language (GSL). Once the serverless network function have been expressed and/or compiled, the techniques of this disclosure further include determining an optimized network component on which the serverless network function is to execute, and deploying the serverless function to the optimized network component.

公开(公告)号：US11070621B1

公开(公告)日：2021-07-20

申请号：US16953007

申请日：2020-11-19

Applicant: Cisco Technology, Inc.

Inventor： Dominik Rene Tornow ,  Urmil Vijay Dave ,  Kyle Andrew Donald Mestery ,  Ian Wells

IPC: H04L29/08

Abstract: Systems, methods, and computer-readable media are provided for reusing execution environments and code of serverless functions while ensuring isolation in serverless computing environments. In some examples, a method can include, in response to a first request to run a serverless function, executing, at an execution environment on a network, computer-readable code configured to perform the serverless function; after the computer-readable code has executed, modifying a pointer to an area of memory used to store a first state of the serverless function to reference a different area of memory; in response to a second request to run the serverless function, reusing, at the execution environment, the computer-readable code to perform the serverless function; and based on the pointer referencing the different area of memory, using the different area of memory to store a second state of the serverless function.

公开(公告)号：US11044173B1

公开(公告)日：2021-06-22

申请号：US16741162

申请日：2020-01-13

Applicant: Cisco Technology, Inc.

Inventor： Kyle Andrew Donald Mestery ,  Ian Wells

IPC: H04L12/24 ,  G06N20/00 ,  H04L12/801 ,  G06N7/00

Abstract: Systems, methods, computer-readable media are disclosed for influencing serverless function placement across hosts within a network. A method includes receiving a notification from a network component, the notification indicating a performance bottleneck in association with one or more instances of a serverless function being executed at one or more hosts of a network; initiating at least one additional instance of the serverless function in response to the performance bottleneck; and sending a message to the network component identifying the at least one additional instance of the serverless function, the network component directing network traffic based on the message.

公开(公告)号：US20210103507A1

公开(公告)日：2021-04-08

申请号：US16592613

申请日：2019-10-03

Applicant: Cisco Technology, Inc.

Inventor： Pierre Pfister ,  Ian James Wells ,  Kyle Andrew Donald Mestery ,  William Mark Townsley ,  Yoann Desmouceaux ,  Guillaume Ruty ,  Aloys Augustin

IPC: G06F11/20 ,  G06F9/455 ,  H04L29/12

Abstract: This disclosure describes techniques for providing a distributed scalable architecture for Network Address Translation (NAT) systems with high availability and mitigations for flow breakage during failover events. The NAT servers may include functionality to serve as fast-path servers and/or slow-path servers. A fast-path server may include a NAT worker that includes a cache of NAT mappings to perform stateful network address translation and to forward packets with minimal latency. A slow-path server may include a mapping server that creates new NAT mappings, depreciates old ones, and answers NAT worker state requests. The NAT system may use virtual mapping servers (VMSs) running on primary physical servers with state duplicated VMSs on different physical failover servers. Additionally, the NAT servers may implement failover solutions for dynamically allocated routeable address/port pairs assigned to new sessions by assigning new outbound address/port pairs when a session starts and broadcasting pairing information.

公开(公告)号：US09203765B2

公开(公告)日：2015-12-01

申请号：US14014742

申请日：2013-08-30

Applicant: Cisco Technology, Inc.

Inventor： Kyle Andrew Donald Mestery ,  Debojyoti Dutta ,  Edgar Francisco Magana Perdomo

IPC: H04L12/851 ,  H04L12/24 ,  H04L29/08

CPC classification number: H04L47/2408 ,  H04L12/4633 ,  H04L12/4641 ,  H04L41/12 ,  H04L41/50 ,  H04L67/10

Abstract: Techniques are provided to generate and store a network graph database comprising information that indicates a service node topology, and virtual or physical network services available at each node in a network. A service request is received for services to be performed on packets traversing the network between at least first and second endpoints. A subset of the network graph database is determined that can provide the services requested in the service request. A service chain and service chain identifier is generated for the service based on the network graph database subset. A flow path is established through the service chain by flow programming network paths between the first and second endpoints using the service chain identifier.

Abstract translation: 提供技术来生成和存储包括指示服务节点拓扑的信息和在网络中的每个节点处可用的虚拟或物理网络服务的网络图数据库。 接收对在至少第一和第二端点之间穿过网络的分组执行的服务的服务请求。 确定网络图数据库的子集，其可以提供服务请求中请求的服务。 基于网络图数据库子集为服务生成服务链和服务链标识符。 通过使用服务链标识符的第一和第二端点之间的流程编程网络路径，通过服务链建立流路径。

公开(公告)号：US12236229B2

公开(公告)日：2025-02-25

申请号：US18114708

申请日：2023-02-27

Applicant: Cisco Technology, Inc.

Inventor： Kyle Andrew Donald Mestery ,  Ian James Wells ,  Grzegorz Boguslaw Duraj

IPC: G06F9/44 ,  G06F8/65 ,  H04L67/52

Abstract: This disclosure describes techniques and mechanisms for using a domain-specific language (DSL) to express and compile serverless network functions, and optimizing the deployment location for the serverless network functions on network devices. In some examples, the serverless network functions may be expressed entirely in the DSL (e.g., via a text-based editor, a graphics-based editor, etc.), where the DSL is a computer language specialized to a particular domain, such as a network function domain. In additional examples, the serverless network functions may be expressed and compiled using a DSL in combination with a general-purpose language (GSL). Once the serverless network function have been expressed and/or compiled, the techniques of this disclosure further include determining an optimized network component on which the serverless network function is to execute, and deploying the serverless function to the optimized network component.

公开(公告)号：US12199866B2

公开(公告)日：2025-01-14

申请号：US17486546

申请日：2021-09-27

Applicant: Cisco Technology, Inc.

Inventor： Jon Langemak ,  Christopher Blair Murray ,  Kyle Andrew Donald Mestery

IPC: H04L45/74 ,  H04L12/46 ,  H04L41/0816 ,  H04L41/0853 ,  H04L45/00 ,  H04L45/02 ,  H04L45/30 ,  H04L45/42 ,  H04L45/50 ,  H04L45/586 ,  H04L45/741 ,  H04L45/745 ,  H04L67/51

Abstract: Techniques for using global virtual network instance (VNI) labels in a multi-domain network to route network data with a multi-tenant network overlay are described herein. A routing device provisioned in a network domain of the multi-domain network may register with a service discovery system of the network domain for use of network configuration data to establish routes through the multi-domain network with network nodes. Each network domain of the multi-domain network may include an application programming interface (API) server for processing API requests to make changes to configurations of a network domain. A border gateway protocol (BGP) large community may be utilized to encode global VNI labels, network addresses, local next hop nodes, and/or additional network information and sent to routing devices provisioned in separate network domains. A service chain may be signaled by global VNI labels to route network traffic through various services prior to reaching a destination endpoint.