Abstract:
A method, network device, and computer readable medium are disclosed. In one embodiment of the method, a data packet is received at a node within a first segment routing enabled access network. The first access network is connected, via a first area edge node, to a first area of a subdivided segment routing enabled network, and a specified destination for the data packet is reachable via a second segment routing enabled access network connected to the subdivided network. The method embodiment further includes receiving from a centralized controller a remote segment identifier stack, where the remote segment identifier stack encodes a path extending from the first area edge node to the second access network. The embodiment of the method continues with encapsulating the data packet with a full segment identifier stack comprising the remote segment identifier stack, and forwarding the encapsulated data packet toward the first area edge node.
Abstract:
Presented herein are service-function chaining techniques that enable data plane signaling of a packet as a candidate for capture at various network nodes along a service function path of a service function chain. That is, a capture signal is embedded within the respective packet that carries a user traffic. The signaling occurs in-band, via the data plane, such that classification of the packet for capture beneficially occurs, at the ingress node of the network, once to which subsequent network nodes along a service function path are signaled to capture or further inspect the packet for capture. Service function chaining treats service functions as resources with associated attributes available for scheduled consumption to which selective traffic are steered according to a policy construct to the requisite network-service resources.
Abstract:
In one embodiment, a device in a network receives a packet that includes one or more forwarding labels and a service function chaining (SFC) header. The device removes the one or more forwarding labels from the packet. The device inserts an indication of the one or more forwarding labels into metadata of the SFC header. The device forwards the packet with the inserted indication of the one or more forwarding labels to a service function.
Abstract:
A method is provided in one example and includes communicating a first request message to a first network element functioning as a point of local repair for a backup label switched path. The first request message includes a first network address having a predetermined value and an indication of a forwarding equivalence class associated with the backup label switched path. The method further includes receiving a first reply message from the first network element. The first reply message includes at least one backup path parameter associated with the backup label switched path.
Abstract:
An example method for seamless path monitoring and rapid fault isolation using bidirectional forwarding detection (BFD) in a network environment is provided and includes determining a BFD target identifier type for communicating in a BFD session in a network environment, determining a non-zero globally assigned BFD discriminator value associated with the BFD target identifier type, populating a Your Discriminator field in a BFD Control Packet with the non-zero globally assigned BFD discriminator value, with a My Discriminator field in the BFD Control Packet being populated with a locally assigned BFD Discriminator value, and initiating the BFD session by transmitting the BFD Control Packet to a target node in the network. In a specific embodiment, the BFD target identifier type is type 3, and the non-zero globally assigned BFD discriminator is an Alert Discriminator reserved by substantially all nodes in the network exclusively for BFD traceroute operations.
Abstract:
In one embodiment, a method includes receiving a packet in a service function chain at a network device located at a border of a first administrative domain, the packet comprising a service function path identifier and a service index, processing the packet at the network device, wherein processing comprises modifying the packet based on the service function path identifier and the service index to direct the packet to a second administrative domain, and forwarding the packet from the network device to the second administrative domain for processing in the service function chain. The service function chain extends over the first and second administrative domains. An apparatus and logic are also disclosed herein.
Abstract:
Methods are provided in which a network device hosts distinct network access resources that are managed by different entities. The method includes obtaining a request for partitioning one or more network resources of an on-premise network device for connecting one or more endpoints to a first network managed by a first entity. The on-premise network device connects one or more endpoints to a second network managed by a different entity. The method further involves partitioning, based on the request, the one or more network resources and connecting the one or more endpoints to the first network using the one or more network resources. The one or more network resources are managed by the first entity while at least one other network resource of the on-premise network device is managed by the different entity and is associated with connecting the one or more endpoints to the second network.
Abstract:
Aspects of the disclosure include a method and associated network device. The method includes authenticating an identity of a user of a client device after the client device is associated with an access network provider. Authenticating the identity of the user comprises receiving, from an identity provider, a credential associated with the identity, and receiving, from the identity provider, information identifying a network-based service to be applied to network traffic with the client device. The method further includes establishing, using the credential and the received information, a secure connection between the access network provider and a service provider that is capable of providing the network-based service. The method further includes receiving network traffic from the service provider. Packets of the network traffic include an assurance value that enables the client device to determine that the network-based service is being provided by the service provider.
Abstract:
Devices, systems, methods, and processes for sustainably reallocating resources based on within a plurality of computing nodes of a network, such as a managed network are described herein. Each computing node may be configured to transmit infrastructure data to an infrastructure monitor or ecosystem management tool. Additional sustainability data may also be accessed either internally or externally. The infrastructure data and sustainability data may be utilized to generate one or more scores that can be evaluated against each other. These scores may be configured to reflect various conditions or facts about the computing nodes including the overall sustainability. In order to increase sustainability levels, a variety of different resource configurations can be generated and evaluated against each other and the current configuration. When a more sustainable configuration is located, it may be applied by moving resources from originating computing nodes to destination computing nodes to achieve increased sustainability goals.
Abstract:
An authorization device obtains a registration request associated with an end device, the registration request including a new randomized media access control (MAC) address associated with the end device; determines whether the end device is authorized to use the new randomized MAC address; transmits a message to the end device with a first randomly generated number when it is determined that the end device is authorized to use the new randomized MAC address; obtains integrity information associated with the end device, the first integrity information being computed based on the first randomly generated number; transmits a request to a validation system to validate the end device based on the first integrity information; obtains an indication that the end device is validated; determines policies associated with the end device when it is determined that the end device is validated; and applies the policies to the end device.