公开(公告)号：US20150089082A1

公开(公告)日：2015-03-26

申请号：US14037143

申请日：2013-09-25

Applicant: Cisco Technology, Inc.

Inventor： Sourabh Suresh Patwardhan ,  Maithili Narasimha ,  Suraj Nellikar

IPC: H04L12/721 ,  H04L29/12

CPC classification number: H04L45/44 ,  H04L45/121 ,  H04L45/308

Abstract: An example method for path optimization in distributed service chains in a network environment is provided and includes receiving information about inter-node latency of a distributed service chain in a network environment comprising a distributed virtual switch (DVS), where the inter-node latency is derived at least from packet headers of respective packets traversing a plurality of service nodes comprising the distributed service chain, and modifying locations of the service nodes in the DVS to reduce the inter-node latency. In specific embodiments, the method further includes storing and time-stamping a path history of each packet in a network service header portion of the respective packet header. A virtual Ethernet Module (VEM) of the DVS stores and time-stamps the path history and a last VEM in the distributed service chain calculates runtime traffic latencies from the path history and sends the calculated runtime traffic latencies to a virtual supervisor module.

Abstract translation: 提供了一种在网络环境中的分布式服务链中的路径优化的示例方法，包括在包括分布式虚拟交换机（DVS）的网络环境中接收关于分布式服务链的节点间延迟的信息，其中节点间等待时间 至少从穿过包括分布式服务链的多个服务节点的各个分组的分组报头导出，以及修改DVS中的服务节点的位置以减少节点间等待时间。 在具体实施例中，该方法还包括在相应分组报头的网络服务报头部分中存储和时间戳每个分组的路径历史。 DVS的虚拟以太网模块（VEM）存储并对路径历史进行时间戳，并且分布式服务链中的最后一个VEM从路径历史中计算运行时流量延迟，并将计算的运行时流量延迟发送到虚拟主管模块。

公开(公告)号：US20210182169A1

公开(公告)日：2021-06-17

申请号：US16713650

申请日：2019-12-13

Applicant: Cisco Technology, Inc.

Inventor： Gianluca Mardente ,  Shrey Ajmera ,  Cheng Wang ,  Maithili Narasimha ,  Aleksandr Oshurkov

IPC: G06F11/34 ,  G06F9/50

Abstract: This disclosure describes a method of utilizing network controllers to store mappings between policies, dynamic operating attributes (DOA), and trigger values in a manifest and utilizing software agents in communication to monitor DOAs of respective workloads or workload groupings for trigger values associated with the DOAs to apply a corresponding policy at run-time. The method provides for flexible policy semantics and on-demand policy provisioning. The method includes receiving at a network controller, a definition of a policy, a DOA associated with a workload, and a trigger value associated with the DOA, storing a mapping between the policy, DOA and trigger value, sending the DOA and the trigger value to a datapath agent monitoring respective workloads, receiving an indication that a current value of the DOA of the workload corresponds to the trigger value from the software agent, and sending the policy to the software agent for distribution to the workload.

公开(公告)号：US20200322437A1

公开(公告)日：2020-10-08

申请号：US16375638

申请日：2019-04-04

Applicant: Cisco Technology, Inc.

Inventor： Gianluca Mardente ,  Maithili Narasimha

IPC: H04L29/08

Abstract: Systems, methods, and computer-readable media for distributing policies in a SDN environment through chunking. A policy can be chunked into a plurality of policy chunks having corresponding chunk identifications at a controller of a SDN environment. Each of the plurality of policy chunks can be hashed to create corresponding chunk hashes for each of the plurality of policy chunks. Further, the plurality of policy chunks, the chunk identifications of the plurality of policy chunks, and the chunk hashes of the plurality of policy chunks can be distributed from the controller of the SDN environment to an intermediate policy node in a fabric of the SDN environment. The chunk hashes and the chunk identifications of the plurality of policy chunks can be used to control distribution of the plurality of policy chunks to one or more edge nodes in the SDN environment.

公开(公告)号：US09781037B2

公开(公告)日：2017-10-03

申请号：US14855263

申请日：2015-09-15

Applicant: Cisco Technology, Inc.

Inventor： Suraj Nellikar ,  Maithili Narasimha

IPC: H04L12/28 ,  H04L12/741 ,  H04L12/931 ,  H04L12/721 ,  H04L12/26 ,  H04L12/24 ,  G06F9/455 ,  H04L29/12

CPC classification number: H04L45/745 ,  G06F9/45558 ,  G06F2009/4557 ,  G06F2009/45595 ,  H04L41/12 ,  H04L43/08 ,  H04L43/12 ,  H04L45/66 ,  H04L49/70 ,  H04L61/2007 ,  H04L61/2038 ,  H04L61/2076 ,  H04L61/6022

Abstract: Systems, methods, and computer-readable media provide for collection of statistics relating to network traffic between virtual machines (VMs) in a network. In an example embodiment, a virtual switch hosted on a physical server provides network address information of VMs deployed on the physical server to a virtual switch controller. The controller collects this network address information from each virtual switch under its control, and distributes the aggregate address information to each switch. In this manner, the controller and each switch within the controller's domain can learn the network address information of each VM deployed on physical servers hosting switches under the controller's control. Each virtual switch can determine a classification of a frame passing through the switch (e.g., intra-server, inter-server and intra-domain, or inter-domain traffic), and statistics relating to the traffic. In an example embodiment, the virtual switch controller can collect the statistics from each switch within its domain.

公开(公告)号：US20170078198A1

公开(公告)日：2017-03-16

申请号：US14855263

申请日：2015-09-15

Applicant: Cisco Technology, Inc.

Inventor： Suraj Nellikar ,  Maithili Narasimha

IPC: H04L12/741 ,  H04L12/721 ,  G06F9/455 ,  H04L29/12 ,  H04L12/24 ,  H04L12/931 ,  H04L12/26

CPC classification number: H04L45/745 ,  G06F9/45558 ,  G06F2009/4557 ,  G06F2009/45595 ,  H04L41/12 ,  H04L43/08 ,  H04L43/12 ,  H04L45/66 ,  H04L49/70 ,  H04L61/2007 ,  H04L61/2038 ,  H04L61/2076 ,  H04L61/6022

Abstract: Systems, methods, and computer-readable media provide for collection of statistics relating to network traffic between virtual machines (VMs) in a network. In an example embodiment, a virtual switch hosted on a physical server provides network address information of VMs deployed on the physical server to a virtual switch controller. The controller collects this network address information from each virtual switch under its control, and distributes the aggregate address information to each switch. In this manner, the controller and each switch within the controller's domain can learn the network address information of each VM deployed on physical servers hosting switches under the controller's control. Each virtual switch can determine a classification of a frame passing through the switch (e.g., intra-server, inter-server and intra-domain, or inter-domain traffic), and statistics relating to the traffic. In an example embodiment, the virtual switch controller can collect the statistics from each switch within its domain.

Abstract translation: 系统，方法和计算机可读介质提供了与网络中的虚拟机（VM）之间的网络流量相关的统计信息的收集。 在示例实施例中，托管在物理服务器上的虚拟交换机将部署在物理服务器上的VM的网络地址信息提供给虚拟交换机控制器。 控制器从其控制下的每个虚拟交换机收集该网络地址信息，并将聚合地址信息分配给每个交换机。 以这种方式，控制器域内的控制器和每个交换机可以在控制器控制下学习托管交换机的物理服务器上部署的每个VM的网络地址信息。 每个虚拟交换机可以确定通过交换机的帧的分类（例如，服务器内部，服务器间和域内或域间流量）以及与业务有关的统计。 在示例实施例中，虚拟交换机控制器可以从其域内的每个交换机收集统计信息。

公开(公告)号：US20150085870A1

公开(公告)日：2015-03-26

申请号：US14037210

申请日：2013-09-25

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Maithili Narasimha ,  Suraj Nellikar ,  Sourabh Suresh Patwardhan ,  Srinivas Sardar

IPC: H04L12/931 ,  H04L12/721

CPC classification number: H04L49/70 ,  H04L45/44 ,  H04L45/54 ,  H04L49/50

Abstract: An example method for co-operative load sharing and redundancy in distributed service chains is provided and includes deriving a service chain comprising a plurality of services in a distributed virtual switch (DVS) network environment, where a first service node provides a first portion of a specific service in the plurality of services to a packet traversing the network, and a second service node provides a second portion of the specific service to the packet, and configuring service forwarding tables at virtual Ethernet Modules associated with respective service nodes in the service chain. In a specific embodiment, the first service node and the second service node provide substantially identical service functions to the packet, wherein the specific service comprises the service functions. In various embodiments, each service node tags each packet to indicate a service completion history of service functions performed on the packet at the service node.

Abstract translation: 提供了一种用于分布式服务链中的合作负载共享和冗余的示例性方法，包括在分布式虚拟交换机（DVS）网络环境中导出包括多个服务的服务链，其中第一服务节点提供第一部分 所述多个业务中的特定服务是通过所述网络的分组，第二服务节点向所述分组提供所述特定服务的第二部分，以及在与所述服务链中的相应服务节点相关联的虚拟以太网模块处配置服务转发表。 在具体实施例中，第一服务节点和第二服务节点为分组提供基本上相同的服务功能，其中特定服务包括服务功能。 在各种实施例中，每个服务节点标记每个分组以指示在服务节点处对分组执行的服务功能的服务完成历史。

公开(公告)号：US20150012621A1

公开(公告)日：2015-01-08

申请号：US13936966

申请日：2013-07-08

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Sourabh Suresh Patwardhan ,  Maithili Narasimha ,  Shankar Ramachandran

IPC: H04L12/24

CPC classification number: H04L41/0803

Abstract: An example method for network-assisted configuration and programming of gateways in a network environment is provided and includes registering a non-Virtual eXtensible Local Area Network (VXLAN) device with a central controller, for example, by generating registration information associating the non-VXLAN device with a virtual local area network (VLAN) in a network environment, receiving a communication request from a VXLAN enabled device to communicate with the non-VXLAN device, mapping, based on the registration information, a VXLAN segment corresponding to the VXLAN enabled device with the VLAN associated with the non-VXLAN device, and configuring a gateway with the mapping through a suitable application programming interface exposed at the gateway.

Abstract translation: 提供了网络环境中的网络辅助配置和网关编程的示例方法，包括例如通过产生将非VXLAN相关联的注册信息，将非虚拟可扩展局域网（VXLAN）设备注册到中央控制器 在网络环境中具有虚拟局域网（VLAN）的设备，接收来自启用VXLAN的设备的通信请求以与非VXLAN设备进行通信，基于注册信息，映射与启用VXLAN的设备相对应的VXLAN段 其中与非VXLAN设备关联的VLAN，以及通过在网关上公开的合适的应用程序编程接口进行映射来配置网关。