公开(公告)号：US10949557B2

公开(公告)日：2021-03-16

申请号：US16105910

申请日：2018-08-20

Applicant: Cisco Technology, Inc.

Inventor： Prashanth Patil ,  Ram Mohan Ravindranath ,  Nagendra Kumar Nainar ,  Carlos M. Pignataro

IPC: G06F21/62 ,  H04W84/04 ,  G06Q20/40 ,  H04L29/06 ,  G06F21/60

Abstract: Disclosed herein is a distributed ledger method for a fifth-generation (5G) network. A network slice is created in the 5G network and a root block is generated in response, containing parameters of the network slice and contracts between participants in the network slice. A blockID of the root block is transmitted to identified participants in the network slice, who sequentially commit a plurality of new blocks to a blockchain beginning from the root block. The plurality of new blocks comprises auditing information of the network slice, wherein the information is collected by the participants in the network slice. The blockchain is stored in a blockchain network of a plurality of disparate blockchains. Desired auditing information for the network slice is retrieved by using the blockID of the root block to traverse the blockchain beginning at the root block until all blocks with the desired auditing information have been read.

公开(公告)号：US10924369B2

公开(公告)日：2021-02-16

申请号：US16682759

申请日：2019-11-13

Applicant: Cisco Technology, Inc.

Inventor： Nagendra Kumar Nainar ,  Lionel Florit ,  Carlos M. Pignataro

IPC: H04L12/26 ,  H04L29/08 ,  H04L12/24

Abstract: Systems, methods, and computer-readable media for Operations, Administration, and Maintenance (OAM) in Internet of Things (IoT) network include an maintaining a list of one or more IoT devices connected to an IoT gateway in the IoT network. At least a subset of the one or more IoT devices are classified as belonging to an active list based on receiving traffic from at least the subset of the one or more IoT devices, and OAM probes are suppressed to at least the subset of the one or more IoT devices in the active list. A message can be received in response to the OAM probe from the at least one IoT device, and upon receiving the message, the at least one IoT device is classified as belonging to the active list.

公开(公告)号：US10924283B2

公开(公告)日：2021-02-16

申请号：US15620015

申请日：2017-06-12

Applicant: Cisco Technology, Inc.

Inventor： Rajiv Asati ,  Nagendra Kumar Nainar ,  Carlos M. Pignataro

IPC: G06F21/00 ,  H04L9/32 ,  H04L9/00 ,  H04L12/28 ,  H04L29/06 ,  G06F16/22

Abstract: Techniques for use in generating a dynamically-changing IoT device identity with robust blockchain validation are provided. When entering a communication network, an IoT device performs a procedure for registration. The procedure includes communicating, in a transaction, data associated with the IoT device to a network device (e.g. a fog router). The data includes, amongst other data items, an identity for addressing communications to and from the IoT device. A transaction number associated with the transaction is received based on a blockchain registration of the transaction. An updated identity of the IoT device is then derived based on the transaction number. In one example, the updated identity of the IoT device may be derived by combining a static address of the IoT device and the transaction number. The steps may be repeated by the device for each one of a plurality of network registrations.

公开(公告)号：US10812378B2

公开(公告)日：2020-10-20

申请号：US16252036

申请日：2019-01-18

Applicant: Cisco Technology, Inc.

Inventor： Nagendra Kumar Nainar ,  Carlos M. Pignataro ,  James N. Guichard ,  Paul Quinn

IPC: H04L12/715 ,  H04L12/46

Abstract: An apparatus having logic elements to receive an incoming packet associated with a first service function chain; identify a next hop service function for the incoming packet as a non-reactive service function; create a duplicate packet; forward the duplicate packet to the non-reactive service function; and forward the incoming packet to a next reactive service function. An apparatus having logic to receive an incoming packet associated with a first service function chain (SFC), having a first service path identifier (SPI); determine that the incoming packet has a first service index (SI), and that a next-hop SI identifies a non-reactive service function (NRSF); receive a duplicate packet of the incoming packet; rewrite a service header of the duplicate packet to identify a second SFC having a second SPI; and alter the first SI of the incoming packet to identify a next reactive service function in the first SFC.

公开(公告)号：US10805215B2

公开(公告)日：2020-10-13

申请号：US15926292

申请日：2018-03-20

Applicant: Cisco Technology, Inc.

Inventor： Nagendra Kumar Nainar ,  Carlos M. Pignataro ,  Frank Brockners ,  Shwetha Subray Bhandari

IPC: H04L12/741 ,  H04L12/721 ,  H04L12/803 ,  H04L12/26

Abstract: Presented herein are techniques for monitoring packets in a container networking environment. A method includes receiving a packet at a network node, the packet having been routed to the network node in accordance with instructions from a container orchestration system, inserting an additional field in the packet that is configured to record a path of the packet within a first POD of the host device that includes at least one container, forwarding the packet to the first POD of the host device in accordance with the instructions from the container orchestration system, updating the additional field with container networking path information as the packet transits the first POD and the at least one container therein, storing the container path information in an analytics node of the network node, removing the additional field from the packet, and transmitting the packet from the network node to the network.

公开(公告)号：US10785701B2

公开(公告)日：2020-09-22

申请号：US16188627

申请日：2018-11-13

Applicant: Cisco Technology, Inc.

Inventor： Nagendra Kumar Nainar ,  Pascal Thubert ,  Carlos M. Pignataro

IPC: H04W40/26 ,  H04L12/715 ,  H04L12/753 ,  H04L12/707 ,  H04W40/04 ,  H04W40/34 ,  H04L12/741

Abstract: In one embodiment, a method is performed. A fat tree route miner (FT-RM) entity may be used to establish a control plane session with a first spine node in communication with a network. The FT-RM entity may identify a prefix that is unreachable by the first spine node. The FT-RM entity may instruct a spine node to disaggregate the prefix.

公开(公告)号：US10764076B2

公开(公告)日：2020-09-01

申请号：US16237575

申请日：2018-12-31

Applicant: Cisco Technology, Inc.

Inventor： Ijsbrand Wijnands ,  Gregory J. Shepherd ,  Nagendra Kumar Nainar

IPC: H04L12/18 ,  H04L12/741 ,  H04L12/761 ,  H04L12/721 ,  H04L12/723

Abstract: Functionality for creating a bit routing table for use in a bit-indexed explicit replication (“BIER”) environment in disclosed herein. In one embodiment, this functionality includes receiving information from a host, and determining whether the information comprises a MAC address that is a bit-indexed explicit replication (“BIER”) MAC address. In response to determining that the information comprises a BIER MAC address, this functionality creates an entry corresponding to the MAC address in a bit routing table. This functionality also analyzes the information to determine a bit position that is associated with the host, and also determines a port via which the host is reachable. The functionality updates the bit routing table by storing information identifying the bit position and the port in the entry, such that the bit position and the port both correspond to the MAC address. This functionality can be used to route packets in a BIER environment.

公开(公告)号：US10749710B2

公开(公告)日：2020-08-18

申请号：US16231247

申请日：2018-12-21

Applicant: Cisco Technology, Inc.

Inventor： Carlos M. Pignataro ,  Frank Brockners ,  Shwetha Subray Bhandari ,  Nagendra Kumar Nainar

IPC: H04L12/46 ,  H04L12/54 ,  H04L12/749 ,  H04L12/70

Abstract: In one embodiment, a service function forwarder (SFF) analyzes pre-service state and post-service state of an original packet to determine whether to initiate and perform service offload or service bypass. A service function forwarder (SFF) receives a particular packet having a service function chain (SFC) encapsulation of the original packet, the SFC encapsulation identifying a particular service function path (SFP) designating a particular service function (SF). The SFF extracts pre-service state of the original packet, typically adding it to the particular packet in an In-Situ Operations, Administration, and Maintenance (IOAM) data field (or alternatively storing locally) before sending the particular packet to the particular SF. The SFF receives the particular packet after the SF applies the particular network service. In response to analyzing pre-service state and post-service state by the SFF, the SFF may perform service bypass or service offload for subsequently received packets identifying the same particular SFP.

公开(公告)号：US10708075B2

公开(公告)日：2020-07-07

申请号：US15919552

申请日：2018-03-13

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Ijsbrand Wijnands ,  Gregory J. Shepherd ,  Nagendra Kumar Nainar ,  Christian Martin

IPC: H04L12/18 ,  H04L12/761 ,  H04L12/741 ,  H04L12/705 ,  H04L12/723

Abstract: Various systems and methods for performing bit indexed explicit replication (BIER) using IPv6. For example, one method involves receiving, at a node, a packet that includes an IP header. The packet also includes a multicast forwarding entry. The method also involves comparing the multicast forwarding entry with forwarding information stored by the node and selecting a neighbor based on the comparing. The method further includes forwarding the packet to the neighbor.

公开(公告)号：US10693777B2

公开(公告)日：2020-06-23

申请号：US16018662

申请日：2018-06-26

Applicant: Cisco Technology, Inc.

Inventor： Carlos M. Pignataro ,  Nagendra Kumar Nainar

IPC: H04L12/721 ,  H04L29/06 ,  H04L29/08

Abstract: In one embodiment, a router receives a packet from a network device in a software defined architecture (SDA) network, and obtains iOAM data from an outer header of the packet, the iOAM data inserted into the outer header by one or more network devices that previously processed the packet. The router then copies the iOAM data into a locally pertinent header, and after determining local iOAM data of the router, appends the local iOAM data to the iOAM data copied into the locally pertinent header. The router may then process the packet accordingly. In another embodiment, an SDA router may insert an indication of one or more applied policies into an iOAM header of the packet, such that an edge router can determine any unapplied policies and subsequently apply them.