公开(公告)号：US20230032924A1

公开(公告)日：2023-02-02

申请号：US17388754

申请日：2021-07-29

Applicant: Cisco Technology, Inc.

Inventor： Ian James Wells ,  Kyle Andrew Donald Mestery ,  Carlos M. Pignataro ,  Nagendra Kumar Nainar

IPC: H04L12/851 ,  H04L12/723

Abstract: This disclosure describes techniques for performing application-based tagging. An example method is performed by a virtual socket of a device. The method includes receiving non-packetized data from an application, generating a label based on the application, and providing the non-packetized data and the label to a kernel of the device.

公开(公告)号：US20230028646A1

公开(公告)日：2023-01-26

申请号：US17856593

申请日：2022-07-01

Applicant: Cisco Technology, Inc.

Inventor： Nagendra Kumar Nainar ,  Robert Edgar Barton ,  Carlos M. Pignataro ,  Jerome Henry ,  Olivier Pelerin ,  Shankar Vemulapalli

IPC: H04L45/00 ,  H04L12/46 ,  H04L9/40 ,  H04L47/2425 ,  H04L61/4511

Abstract: Techniques for utilizing a cloud service to compute an end-to-end SLA-aware path using dynamic software-defined cloud interconnect (SDCI) tunnels between a user device and an access point-of-presence (POP) node and inter-POP tunnels of the SDCI. The cloud service may include a performance aware path instantiation (PAPI) component including a POP database for storing performance metrics associated with the POPs of the SDCI, an enterprise policy database for storing user specific policies, and/or a path computation component. The path computation component may compute the path, based on the user specific policies, performance metrics associated with the POP nodes, and/or real-time contextual data associated with the user device and/or destination device. The path may include a first tunnel between the user device and the most optimal access POP node of the SDCI and a second tunnel between the access POP node, through the internal POP nodes, and to the destination device.

公开(公告)号：US20220417734A1

公开(公告)日：2022-12-29

申请号：US17355686

申请日：2021-06-23

Applicant: Cisco Technology, Inc.

Inventor： Shankar Ramanathan ,  Nagendra Kumar Nainar ,  Robert E. Barton ,  Jerome Henry

IPC: H04W8/26 ,  H04W4/02 ,  H04W12/12

Abstract: A network infrastructure component determines a risk measurement associated with a wireless client device's use of a device address, and provides an advisory with respect to an address rotation strategy of the wireless client device based on the risk measurement. In some embodiments, the risk measurement is based on one or more of an exposure, by the wireless client device, of information on the wireless network that identifies the wireless client device and/or a characterization of a security of the wireless network environment in which the wireless client device operates.

公开(公告)号：US20220330052A1

公开(公告)日：2022-10-13

申请号：US17225501

申请日：2021-04-08

Applicant: Cisco Technology, Inc.

Inventor： Nagendra Kumar Nainar ,  Carlos M. Pignataro ,  Jerome Henry ,  Robert E. Barton

IPC: H04W24/04 ,  H04W88/08 ,  H04W48/02 ,  H04W48/20 ,  H04W48/16

Abstract: Failure prediction signaling and cognitive user migration may be provided. A client device may receive at least a portion of failure prediction data. The client device may then analyze the at least the portion of the failure prediction data. The client device may then roam from a first computing device to a second computing device in response to analyzing the at least the portion of the failure prediction data.

公开(公告)号：US11463326B2

公开(公告)日：2022-10-04

申请号：US17183664

申请日：2021-02-24

Applicant: Cisco Technology, Inc.

Inventor： Vinay Saini ,  Nagendra Kumar Nainar ,  Hazim Hashim Dahir ,  Carlos M. Pignataro ,  Rajesh Indira Viswambharan

IPC: H04L41/00 ,  H04L12/42 ,  H04L12/43 ,  H04L41/08 ,  H04L43/08

Abstract: According to one or more embodiments of the disclosure, a particular networking device located in a ring of networking devices of a network receives an indication from a supervisory service that the particular networking device has been designated a ring manager for the ring of networking devices. The particular networking device determines that the supervisory service is unreachable by the ring of networking devices. The particular networking device obtains telemetry data regarding a new device connected to the ring of networking devices. The particular networking device onboards, based on the telemetry data, the new device to the network, when the supervisory service is unreachable by the ring of networking devices.

公开(公告)号：US20220239604A1

公开(公告)日：2022-07-28

申请号：US17157029

申请日：2021-01-25

Applicant: Cisco Technology, Inc.

Inventor： Shankar Ramanathan ,  Nagendra Kumar Nainar ,  Carlos M. Pignataro

IPC: H04L12/927

Abstract: A method of orchestrating one or more radio resources among various services executing within a container. The method includes obtaining, by an orchestration engine executing on a network device, a request, from a first service of a plurality of services, for use of a physical/hardware resource that connects a container running on the network device to a network. The request from the first service has a particular priority. The plurality of services execute within the container. The method further includes determining whether to connect the first service to the network via the physical/hardware resource based on the priority and an availability status of the physical/hardware resource and establishing, at a kernel level, a connection between the first service and the physical/hardware resource based on the determining.

公开(公告)号：US11388088B2

公开(公告)日：2022-07-12

申请号：US16675083

申请日：2019-11-05

Applicant: Cisco Technology, Inc.

Inventor： Clarence Filsfils ,  Zafar Ali ,  Syed Kamran Raza ,  Ahmed Refaat Bashandy ,  Nagendra Kumar Nainar ,  Carlos M. Pignataro ,  Jaganbabu Rajamanickam ,  Rakesh Gandhi ,  Bhupendra Yadav ,  Faisal Iqbal

IPC: H04L45/00 ,  H04L43/106 ,  H04L45/02 ,  H04L41/0246 ,  H04L101/659 ,  H04L45/302 ,  H04L45/741

Abstract: In one embodiment, segment routing (SR) network processing of packets is performed which includes operations signaling and processing of packets in manners providing processing and/or memory efficiencies. One embodiment includes acquiring a segment routing particular packet by a particular router in a network. Responsive to the particular router data plane ascertained during fast path processing by a fast path processing unit that the segment routing particular packet is to be Operations, Administration, and Maintenance (OAM) processed by a different processing unit in the particular router, communicating a time stamp of a current time and the segment routing particular packet including a segment routing header that includes OAM signaling from said fast path processing to the different processing unit, with fast path processing being hardware-based packet processing by the fast path processing unit. The segment routing particular packet is OAM processing by the different processing unit.

公开(公告)号：US11356357B2

公开(公告)日：2022-06-07

申请号：US16892462

申请日：2020-06-04

Applicant: Cisco Technology, Inc.

Inventor： Nagendra Kumar Nainar ,  Pascal Thubert ,  Carlos M. Pignataro

IPC: H04L45/28 ,  H04L41/0677 ,  H04L45/00 ,  H04L45/48 ,  H04L45/748

Abstract: The present disclosure provides a proactive method of prefix disaggregation in a network fabric when one or more communication failures are detected. In one aspect, a method includes determining, by a first node of a network fabric, a corresponding prefix disaggregation policy for at least one second node of the network fabric, the corresponding prefix disaggregation policy identifying one or more network prefixes that are inaccessible via the first node when at least one communication failure is detected in association with the first node; sending the corresponding prefix disaggregation policy to the second node; and causing the second node to implement the prefix disaggregation policy upon detecting the at least one communication failure.

公开(公告)号：US11343182B2

公开(公告)日：2022-05-24

申请号：US16364468

申请日：2019-03-26

Applicant: Cisco Technology, Inc.

Inventor： Carlos Pignataro ,  Richard Furr ,  Nagendra Kumar Nainar ,  Joseph Michael Clarke

IPC: H04L45/74 ,  H04L43/028 ,  H04L43/04 ,  H04L43/10 ,  H04L45/00

Abstract: Presented herein are methods and systems that facilitate data plane signaling of a packet as a candidate for capture at various network nodes within an IPv6 network. The signaling occurs in-band, via the data plane—that is, a capture or interrogation signal is embedded within the respective packet (e.g., in the packet header) that carries a user traffic. The signaling is inserted, preferably when the packet is classified, e.g., at the ingress node of the network, to which subsequent network nodes with the IPv6 network are signaled to capture or further inspect the packet for capture.

公开(公告)号：US11336567B2

公开(公告)日：2022-05-17

申请号：US16853331

申请日：2020-04-20

Applicant: Cisco Technology, Inc.

Inventor： Nagendra Kumar Nainar ,  Carlos M. Pignataro ,  Alejandro Eguiarte ,  Rajiv Asati

IPC: H04L45/00 ,  H04L12/46 ,  H04L45/745 ,  H04L45/02

Abstract: Techniques for defining a service flow definition among container pods that provide services in a network. The techniques may include an orchestrator of a computer network platform of the network determining which container pods need to communicate with which container pods. The service flow definition thus indicates needed paths between the container pods. In configurations, a cluster topology may be determined where the cluster topology indicates corresponding nodes of the network in which each container pod is located, as well as end points of the network with which the corresponding nodes communicate. Based at least in part on the service flow definition and the cluster topology, corresponding route distribution policies may be determined for the end points. The corresponding route distribution policies may be applied to the end points.