Control plane compression of next hop information

    公开(公告)号:US10805202B1

    公开(公告)日:2020-10-13

    申请号:US16258310

    申请日:2019-01-25

    Abstract: A method includes receiving, by processing circuitry of a first network device, an indication of a logical address associated with an interface to a second network device and adding, by the processing circuitry, an entry to a forwarding table of the first network device, the entry in the forwarding table specifying the logical address. The method further includes adding, by the processing circuitry, an entry to a resolver database of the first network device to which the entry in the forwarding table specifying the logical address points and resolving, by the processing circuitry, the logical address to a hardware address of the second network device. In response to determining an existing next hop entry of a next hop database of the first network device corresponds to the hardware address of the second network device, the method includes pointing, by the processing circuitry, the entry in the resolver database to the existing next hop entry in the next hop database without adding an additional entry to the next hop database for the second network device.

    Systems and methods for debugging network stacks based on evidence collected from selective tracing

    公开(公告)号:US10797983B1

    公开(公告)日:2020-10-06

    申请号:US16000483

    申请日:2018-06-05

    Abstract: A disclosed method may include (1) determining that a packet traversing a network device has been selected for conditional tracing by (A) comparing a characteristic of the packet against a firewall rule that calls for all packets exhibiting the characteristic to be conditionally debugged while traversing the network device and (B) determining, based at least in part on the comparison, that the firewall rule applies to the packet due at least in part to the packet exhibiting the characteristic, (2) tracing a journey of the packet within the network device in response to the determination by collecting information about the packet's journey through a network stack of the network device, and then (3) performing at least one action on the network device based at least in part on the information collected about the packet's journey through the network stack. Various other systems, methods, and computer-readable media are also disclosed.

    Method, system, and apparatus for achieving user space intervention during connection-establishment handshakes

    公开(公告)号:US10362070B1

    公开(公告)日:2019-07-23

    申请号:US15241834

    申请日:2016-08-19

    Abstract: The disclosed method may include (1) receiving a synchronize message from a computing device to initiate synchronization between the computing device and a server with respect to a communication protocol, (2) notifying an application in user space on the server of the synchronize message such that the application in user space selects at least one attribute to be applied to a communication session resulting from the synchronization between the computing device and the server, (3) sending a synchronize acknowledgment that identifies the attribute selected by the application in user space to the computing device to further the synchronization between the computing device and the server, and then (4) establishing the communication session with the attribute selected by the application in user space upon receiving an acknowledgment message from the computing device to complete the synchronization. Various other methods, systems, and apparatuses are also disclosed.

    Apparatus, system, and method for efficiently filtering packets at network devices

    公开(公告)号:US11388141B1

    公开(公告)日:2022-07-12

    申请号:US15938857

    申请日:2018-03-28

    Abstract: The disclosed apparatus may include (1) flagging, at a packet filter within a network device, a packet to be discarded instead of passed to a processing unit within the network device, (2) determining that the packet is part of a set of related packets that includes at least one additional packet destined at least intermediately for the network device, (3) identifying, by monitoring incoming packets received at the packet filter, the additional packet within the set of related packets, and then (4) discarding, due to the additional packet being included within the set of related packets, the additional packet instead of passing the additional packet to the processing unit. Various other apparatuses, systems, and methods are also disclosed.

    Apparatus, system, and method for applying firewall rules at dynamic offsets within packets in kernel space

    公开(公告)号:US11388140B1

    公开(公告)日:2022-07-12

    申请号:US16940425

    申请日:2020-07-28

    Abstract: A disclosed method may include (1) receiving a packet at a tunnel driver in kernel space on a routing engine of a network device, (2) identifying, at the tunnel driver, metadata of the packet that indicates whether at least one firewall filter had already been correctly applied to the packet before the packet arrived at the tunnel driver, (3) determining, based at least in part on the metadata of the packet, that the firewall filter had not been correctly applied to the packet before the packet arrived at the tunnel driver, and then in response to determining that the firewall filter had not been correctly applied to the packet, (4) invoking at least one firewall filter hook that applies at least one firewall rule on the packet before the packet is allowed to exit kernel space on the routing engine. Various other apparatuses, systems, and methods are also disclosed.

    Updating a traffic rate limit for policing traffic

    公开(公告)号:US11252091B1

    公开(公告)日:2022-02-15

    申请号:US16678989

    申请日:2019-11-08

    Abstract: A network device may obtain policer configuration information. The network device may determine, based on the policer configuration information, a traffic rate limit associated with a traffic protocol type. The network device may obtain, based on the traffic protocol type, networking data associated with the traffic protocol type. The network device may determine, based on the networking data, an expected traffic rate associated with the traffic protocol type. The network device may update, based on the expected traffic rate, the traffic rate limit. The network device may cause traffic associated with the traffic protocol type to be policed based on the updated traffic rate limit.

    Utilizing virtual routing and forwarding (VRF) interfaces to manage packet transmission through an internal interface

    公开(公告)号:US10742570B1

    公开(公告)日:2020-08-11

    申请号:US15447658

    申请日:2017-03-02

    Abstract: A device may receive, from the packet processing component and through an internal interface, a packet that includes a virtual routing and forwarding (VRF) interface identifier associated with a VRF interface of a virtual device. The internal interface may be associated with multiple external interfaces. The device may modify a value identifying an incoming interface via which the packet is received after receiving the packet that includes the VRF interface identifier. The modified value may be associated with the virtual device, and the modified value may allow an upper communication layer to determine that the packet is associated with the virtual device. The device may provide the packet to the upper communication layer after modifying the value identifying the incoming interface via which the packet is received to permit the upper communication layer to forward the packet to a destination.

    Apparatus, system, and method for debugging network devices based on the contents of dropped packets

    公开(公告)号:US10735282B1

    公开(公告)日:2020-08-04

    申请号:US16024496

    申请日:2018-06-29

    Abstract: A disclosed method may include (1) detecting, at a network stack of a network device, a packet that (A) is destined at least intermediately for a network interface of the network device and (B) has been flagged by the network stack to be dropped instead of forwarded to the network interface based on at least one characteristic of the packet, (2) instead of dropping the packet, forwarding the packet to an alternative network interface of the network device that analyzes content of packets, (3) identifying, at the alternative network interface, the characteristic of the packet, and then (4) executing, based on the characteristic of the packet, at least one action in connection with the packet that improves the performance of the network device. Various other apparatuses, systems, and methods are also disclosed.

    Obtaining historical information in a device core dump

    公开(公告)号:US10474518B1

    公开(公告)日:2019-11-12

    申请号:US15370369

    申请日:2016-12-06

    Abstract: A device may receive information related to an operation of the device during each of multiple time intervals. The device may store, for each time interval of the multiple time intervals, the information in a respective slot of a circular buffer that includes multiple slots. The circular buffer may be used to store a historical record of the information in one or more of the multiple slots. The historical record may be provided from the circular buffer during a dump of the device. The device may provide the historical record during the dump of the device based on storing the historical record of the information in the one or more of the multiple slots.

Patent Agency Ranking