Cloud-native workload optimization
    142.
    发明授权

    公开(公告)号:US11924107B2

    公开(公告)日:2024-03-05

    申请号:US17493398

    申请日:2021-10-04

    Abstract: Techniques for orchestrating workloads based on policy to operate in optimal host and/or network proximity in cloud-native environments are described herein. The techniques may include receiving flow data associated with network paths between workloads hosted by a cloud-based network. Based at least in part on the flow data, the techniques may include determining that a utilization of a network path between a first workload and a second workload is greater than a relative utilization of other network paths between the first workload and other workloads. The techniques may also include determining that reducing the network path would optimize communications between the first workload and the second workload without adversely affecting communications between the first workload and the other workloads. The techniques may also include causing at least one of a redeployment or a network path re-routing to reduce the networking proximity between the first workload and the second workload.

    POLICY-BASED CONNECTION PROVISIONING USING DOMAIN NAME SYSTEM (DNS) REQUESTS

    公开(公告)号:US20230262132A1

    公开(公告)日:2023-08-17

    申请号:US18124435

    申请日:2023-03-21

    CPC classification number: H04L61/4511 H04L41/0894 H04L41/5058 H04L2101/668

    Abstract: Techniques for policy-based connection provisioning using Domain Name System (DNS) requests are described herein. The techniques may include receiving policy data associated with one or more headend nodes that manage connections to computing resources. Additionally, the techniques may include receiving a DNS request from a client device to establish a connection between the client device and a first headend node of the one or more headend nodes. The DNS request may include an attribute associated with the client device. A provisioning service may determine that the connection should be established between the client device and the first headend node based at least in part on evaluating the attribute with respect to the policy data. Additionally, the techniques may include sending an internet protocol (IP) address, which is associated with the first headend node, to the client device to facilitate establishment of the connection.

    Routing application control and data-plane traffic in support of cloud-native applications

    公开(公告)号:US11689642B2

    公开(公告)日:2023-06-27

    申请号:US17376646

    申请日:2021-07-15

    CPC classification number: H04L67/63 H04L45/74 H04L47/2475 H04L67/1001

    Abstract: Techniques for using computer networking protocol extensions to route control-plane traffic and data-plane traffic associated with a common application are described herein. For instance, a traffic flow associated with an application may be established such that control-plane traffic is sent to a control-plane node associated with the application and data-plane traffic is sent to a data-plane node associated with the application. When a client device sends an authentication request to connect to the application, the control-plane node may send an indication of a hostname to be used by the client device to send data-plane traffic to the data-node. As such, when a packet including the hostname corresponding with the data-plane node is received, the packet may be forwarded to the data-plane node.

    ADAPTIVE CLOUD-NATIVE SERVICE CHAINING
    146.
    发明公开

    公开(公告)号:US20230155941A1

    公开(公告)日:2023-05-18

    申请号:US17529098

    申请日:2021-11-17

    CPC classification number: H04L47/125 H04L47/29 H04L47/2466 H04L43/0852

    Abstract: Techniques for a computing resource network to send a packet through a processing flow (e.g., a service chain) according to an order of processing workloads (e.g., services) included in the processing flow, configured as an optimized service chain. In some examples, the computing resource network may include a policy evaluation engine configured to determine the best probabilistic outcome of an order of routing between the services that results in the lowest computational costs based on the probability that a given packet will be terminated/modified at one of the earlier processing workloads in the service chain, a prediction engine configured to determine the order of the processing workloads included in the processing flow based on a policy and/or telemetry data associated with the processing workloads, and/or an intelligent routing engine configured to route a packet between the one or more processing workloads included in a processing flow according to the order.

    OBSERVABILITY BASED WORKLOAD PLACEMENT
    147.
    发明公开

    公开(公告)号:US20230153161A1

    公开(公告)日:2023-05-18

    申请号:US17529978

    申请日:2021-11-18

    CPC classification number: G06F9/505 G06F9/4818

    Abstract: Techniques are described for using observability to allocate and deploy workloads for execution by computing resources in a cloud network. The workloads may be allocated and deployed to the computing resources based on metrics. The workloads may be deployed to the computing resources, based on the computing resources providing a number of types of observability that matches the number of metrics. The workloads may be deployed to the computing resources, further based on each of the computing resources matching a corresponding one of the metrics. Deployment of the workloads may be further based on availability of the computing resources. The workloads may be redeployed to other computing resources that provide different types of observability associated with the metrics, in comparison to the initial computing resources. The workloads may be allocated and deployed based on intent based descriptions indicating characteristics utilized to determine types of metrics for providing observability.

    Identifying execution environments for deploying network functions

    公开(公告)号:US11625230B2

    公开(公告)日:2023-04-11

    申请号:US17028715

    申请日:2020-09-22

    Abstract: This disclosure describes techniques and mechanisms for using a domain-specific language (DSL) to express and compile serverless network functions, and optimizing the deployment location for the serverless network functions on network devices. In some examples, the serverless network functions may be expressed entirely in the DSL (e.g., via a text-based editor, a graphics-based editor, etc.), where the DSL is a computer language specialized to a particular domain, such as a network function domain. In additional examples, the serverless network functions may be expressed and compiled using a DSL in combination with a general-purpose language (GSL). Once the serverless network function have been expressed and/or compiled, the techniques of this disclosure further include determining an optimized network component on which the serverless network function is to execute, and deploying the serverless function to the optimized network component.

    WIRE-SPEED ROUTING AND POLICY ENFORCEMENT WITHOUT DPI OR DECRYPTION

    公开(公告)号:US20230097734A1

    公开(公告)日:2023-03-30

    申请号:US17491163

    申请日:2021-09-30

    Abstract: A system and computer-implemented method for routing an encrypted packet through a cloud enforcement network based on a metadata tag. The cloud enforcement network applies policy and routing attributions or tags outside of the encrypted packet payload in such a way as to not require an inner packet to first be decrypted. Traffic prioritization, data protection, and per application policies are achieved by using such metadata tags for internode routing without the need for DPI or decryption. Furthermore, the metadata itself can also be signed or encrypted depending on the provenance of the data. As such, applying meta-tagging external to an encrypted packet, the payload would not be needed to be decrypted during transit of the packet to express end-to-end policy and routing decisions.

Patent Agency Ranking