公开(公告)号：US11943078B2

公开(公告)日：2024-03-26

申请号：US17860926

申请日：2022-07-08

Applicant: Cisco Technology, Inc.

Inventor： Hari Shankar ,  Rashmi Garg ,  Benoit Ganne ,  Jerome Tollet ,  Nathan Skrzypczak

IPC: H04L12/46 ,  H04L12/44 ,  H04L45/02 ,  H04L45/44 ,  H04L45/741

CPC classification number: H04L12/4683 ,  H04L12/44 ,  H04L45/04 ,  H04L45/44 ,  H04L45/741 ,  H04L2012/445

Abstract: Techniques for a hub node, provisioned in a site of a hub and spoke overlay network, to receive, store, and/or forward network routing information associated with a spoke, and send packets directly to spoke(s) that are remote from the hub node. A first hub node may receive a network advertisement including a border gateway protocol (BGP) large community string from a first spoke local to the first hub node. The first hub node may send the BGP large community string to a second hub node remote from the first hub node. The second hub node may decode network routing information from the BGP large community string and store the network routing information locally. The second hub node may send a packet from a second spoke local to the second hub node directly to the first spoke without the data packet being routed via the first hub node.

公开(公告)号：US20210075763A1

公开(公告)日：2021-03-11

申请号：US17099506

申请日：2020-11-16

Applicant: Cisco Technology, Inc.

Inventor： Yoann Desmouceaux ,  Marcel Paul Sosthène Enguehard ,  Jacques Olivier Samain ,  Jerome Tollet

IPC: H04L29/12 ,  H04L29/08 ,  H04L12/24 ,  H04L12/721 ,  H04L12/741

Abstract: Systems, methods, and computer-readable storage media are provided to populate databases with routing data for containers to eliminate the need for continuously accessing a global discovery service. An example method includes initiating, from a source container operating on a first machine in a first rack, a communication with a destination container operating on a second machine on a second rack, wherein a local database on the first machine does not know an address of the destination container. The method includes accessing a global discovery service to provide the address of the destination container, populating the local database on the first machine with the address of the destination container and routing a packet from the source container to the destination container according to the address of the destination container.

公开(公告)号：US10917351B2

公开(公告)日：2021-02-09

申请号：US16431617

申请日：2019-06-04

Applicant: Cisco Technology, Inc.

Inventor： Pierre Pfister ,  William Mark Townsley ,  Yoann Desmouceaux ,  Jerome Tollet ,  Andre Surcouf

IPC: H04L12/803 ,  H04L29/08 ,  H04L12/721 ,  H04L29/06 ,  H04L12/741 ,  H04L29/12

Abstract: Systems, methods, and computer-readable media for load balancing using segment routing and application monitoring. A method can involve receiving a packet including a request from a source device to an application associated with a virtual address in a network, mapping the request to a set of candidate servers hosting the application associated with the virtual address, and encoding the set of candidate servers as a list of segments in a segment routing header associated with the packet. The method can further involve determining that a first candidate server from the set of candidate servers is a next segment in the list of segments, encoding the first candidate server in a destination address field on a header of the packet, and forwarding the packet to the first candidate server.

公开(公告)号：US10764244B1

公开(公告)日：2020-09-01

申请号：US16439441

申请日：2019-06-12

Applicant: Cisco Technology, Inc.

Inventor： Kyle Andrew Donald Mestery ,  Jerome Tollet ,  Ian Wells ,  Aloÿs Christophe Augustin

IPC: H04L29/12 ,  G06F9/455 ,  H04L12/24

Abstract: A method includes, in a constellation of clients including a first client and a second client, receiving, at the first client, a connection request from the second client, retrieving endpoint reachability data associated with the second client and transmitting, to a server, a connection request based on the endpoint reachability data. The first client receives, from the server and based on the connection request, endpoint reachability information associated with the second client and starts a bidirectional connection with the second client. A direct or indirect tunnel is established between the first client and the second client. The tunnel is set up based on a table which maps a first connectivity option associated with the first client to a second connectivity option associated with the second client to determine whether to establish the direct tunnel or the indirect tunnel between the first client and the second client.

公开(公告)号：US20200036796A1

公开(公告)日：2020-01-30

申请号：US16049401

申请日：2018-07-30

Applicant: Cisco Technology, Inc.

Inventor： Jerome Tollet ,  Giles Douglas Yorke Heron ,  Keith Burns ,  Andre Jean-Marie Surcouf

IPC: H04L29/08 ,  G06F9/54

Abstract: Systems, methods, and computer-readable media for enabling container networking are disclosed. In one aspect, a method includes receiving a request from a first network container on a source server to establish a data session with a second network container on a destination server; determining a destination switch of the destination server based on the request; identifying a communication tunnel between the source server and the destination server; generating a data stream to be embedded in the pre-established communication tunnel, wherein a communication protocol associated with the request is different from a communication protocol used by the data stream; receiving a data packet to be sent to the destination container; mapping the data packet to the data stream; and sending the data packet to the destination server via the data stream over the communication tunnel.

公开(公告)号：US20180219783A1

公开(公告)日：2018-08-02

申请号：US15581942

申请日：2017-04-28

Applicant: Cisco Technology, Inc.

Inventor： Pierre Pfister ,  William Mark Townsley ,  Yoann Desmouceaux ,  Jerome Tollet ,  Andre Surcouf

IPC: H04L12/803 ,  H04L12/741

CPC classification number: H04L47/125 ,  H04L45/34 ,  H04L45/745 ,  H04L61/6059 ,  H04L67/1002 ,  H04L67/1004 ,  H04L67/1023 ,  H04L67/1027 ,  H04L69/22

Abstract: Systems, methods, and computer-readable media for load balancing using segment routing and application monitoring. A method can involve receiving a packet including a request from a source device to an application associated with a virtual address in a network, mapping the request to a set of candidate servers hosting the application associated with the virtual address, and encoding the set of candidate servers as a list of segments in a segment routing header associated with the packet. The method can further involve determining that a first candidate server from the set of candidate servers is a next segment in the list of segments, encoding the first candidate server in a destination address field on a header of the packet, and forwarding the packet to the first candidate server.

公开(公告)号：US20250119471A1

公开(公告)日：2025-04-10

申请号：US18376676

申请日：2023-10-04

Applicant: Cisco Technology, Inc.

Inventor： Vincent E. Parla ,  Jerome Tollet ,  Aloys Christophe Augustin ,  Mohammed Hawari

IPC: H04L67/141 ,  H04L9/40

Abstract: Techniques for utilizing a portion of a communication session identifier (e.g., a Session-ID, an SPI, a CID, a DCID, and/or the like) to indicate a target routing device (e.g., a VPN and/or ZTNA termination device) for establishing control plane session(s) and/or data plane session(s) at wire-speed in a networked computing environment. The routing device(s) of a networked computing environment may generate a communication session identifier and send the communication session identifier to the client device, such that subsequent packets send from the client device may be forwarded to the proper routing device indicated by the communication session identifier for establishment of one or more data plane sessions. Additionally, data plane sessions may be established using a Resumed Handshake rather than a full handshake that is typically required, as Session Resumption utilizes the assigned communication session identifier for mapping.

公开(公告)号：US11558345B2

公开(公告)日：2023-01-17

申请号：US17099506

申请日：2020-11-16

Applicant: Cisco Technology, Inc.

Inventor： Yoann Desmouceaux ,  Marcel Paul Sosthène Enguehard ,  Jacques Olivier Samain ,  Jerome Tollet

IPC: H04L61/4541 ,  H04L45/00 ,  H04L41/0816 ,  H04L45/745 ,  H04L67/51

Abstract: Systems, methods, and computer-readable storage media are provided to populate databases with routing data for containers to eliminate the need for continuously accessing a global discovery service. An example method includes initiating, from a source container operating on a first machine in a first rack, a communication with a destination container operating on a second machine on a second rack, wherein a local database on the first machine does not know an address of the destination container. The method includes accessing a global discovery service to provide the address of the destination container, populating the local database on the first machine with the address of the destination container and routing a packet from the source container to the destination container according to the address of the destination container.

公开(公告)号：US10862857B2

公开(公告)日：2020-12-08

申请号：US16366466

申请日：2019-03-27

Applicant: Cisco Technology, Inc.

Inventor： Yoann Desmouceaux ,  Marcel Paul Sosthène Enguehard ,  Jacques Olivier Samain ,  Jerome Tollet

IPC: G06F15/177 ,  H04L29/12 ,  H04L29/08 ,  H04L12/24 ,  H04L12/721 ,  H04L12/741

Abstract: Systems, methods, and computer-readable storage media are provided to populate databases with routing data for containers to eliminate the need for continuously accessing a global discovery service. An example method includes initiating, from a source container operating on a first machine in a first rack, a communication with a destination container operating on a second machine on a second rack, wherein a local database on the first machine does not know an address of the destination container. The method includes accessing a global discovery service to provide the address of the destination container, populating the local database on the first machine with the address of the destination container and routing a packet from the source container to the destination container according to the address of the destination container.

公开(公告)号：US20200314056A1

公开(公告)日：2020-10-01

申请号：US16366466

申请日：2019-03-27

Applicant: Cisco Technology, Inc.

Inventor： Yoann Desmouceaux ,  Marcel Paul Sosthène Enguehard ,  Jacques Olivier Samain ,  Jerome Tollet

IPC: H04L29/12 ,  H04L29/08 ,  H04L12/741 ,  H04L12/721 ,  H04L12/24

Abstract: Systems, methods, and computer-readable storage media are provided to populate databases with routing data for containers to eliminate the need for continuously accessing a global discovery service. An example method includes initiating, from a source container operating on a first machine in a first rack, a communication with a destination container operating on a second machine on a second rack, wherein a local database on the first machine does not know an address of the destination container. The method includes accessing a global discovery service to provide the address of the destination container, populating the local database on the first machine with the address of the destination container and routing a packet from the source container to the destination container according to the address of the destination container.