公开(公告)号：US20190356590A1

公开(公告)日：2019-11-21

申请号：US16531549

申请日：2019-08-05

Applicant: Cisco Technology, Inc.

Inventor： Hendrikus G. P. Bosch ,  Sape Jurriën Mullender ,  Keith Burns ,  Jeffrey Napper ,  William Mark Townsley ,  Alessandro Duminuco ,  Andre Surcouf ,  Ijsbrand Wijnands ,  Humberto J. La Roche

IPC: H04L12/749 ,  H04L29/08 ,  H04L12/761 ,  H04L29/06 ,  H04L12/717

Abstract: A method is provided in one example embodiment and may include determining at a parent content node that a plurality of recipient content nodes are to receive a same content; generating, based on a determination that the same content is available at the parent content node, a multi-delivery header comprising a plurality of identifiers, wherein each identifier of the plurality of identifiers indicates each recipient content node that is to receive the same content; appending the multi-delivery header to one or more packets of an Internet Protocol (IP) flow associated with the same content; and transmitting packets for the IP flow to each of the plurality of the recipient content nodes.

公开(公告)号：US10469379B2

公开(公告)日：2019-11-05

申请号：US15436540

申请日：2017-02-17

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Hendrikus G. P. Bosch ,  Sape Jurriën Mullender ,  Keith Burns ,  Jeffrey Napper ,  William Mark Townsley ,  Alessandro Duminuco ,  Andre Surcouf ,  Ijsbrand Wijnands ,  Humberto J. La Roche

IPC: H04L12/749 ,  H04L12/717 ,  H04L29/06 ,  H04L12/761 ,  H04L29/08 ,  H04L29/12

Abstract: A method is provided in one example embodiment and may include determining at a parent content node that a plurality of recipient content nodes are to receive a same content; generating, based on a determination that the same content is available at the parent content node, a multi-delivery header comprising a plurality of identifiers, wherein each identifier of the plurality of identifiers indicates each recipient content node that is to receive the same content; appending the multi-delivery header to one or more packets of an Internet Protocol (IP) flow associated with the same content; and transmitting packets for the IP flow to each of the plurality of the recipient content nodes.

公开(公告)号：US20190158456A1

公开(公告)日：2019-05-23

申请号：US16094990

申请日：2017-04-18

Applicant: Cisco Technology, Inc.

Inventor： Andre Jean-Marie Surcouf ,  William Mark Townsley ,  Guillaume Michel Ruty ,  Yoann Desmouceaux

IPC: H04L29/12 ,  H04L29/06 ,  H04L29/08

Abstract: A method of delivering content in one or more packets over a network is described. A content request packet comprising a request for content based on a first IPv6 address is received, the first IPv6 address identifying the content. The first IPv6 address is mapped to a second IPv6 address, the second IPv6 address being associated with the content at a physical location. The content requested in the content request packet is then received from the physical location associated with the second IPv6 address for delivery to a user. A further method includes routing a packet for requesting the content from a client to a content server storing an instant of the content, based on an IPv6 address of content being requested by the client. A communication session is then set up between the client and the content server; and the requested content is transmitted from the content server.

公开(公告)号：US20190149628A1

公开(公告)日：2019-05-16

申请号：US16094982

申请日：2017-04-18

Applicant: Cisco Technology, Inc.

Inventor： Andre Jean-Marie Surcouf ,  William Mark Townsley

IPC: H04L29/08 ,  H04L12/745

Abstract: A method and apparatus for delivering requested content over a network is described. The method includes receiving, by a first network node, a request from a second network node for the requested content, the request comprising an IPv6 address associated with the requested content. A longest prefix match is then performed between the IPv6 address associated with the requested content and IPv6 addresses associated with content available at the first network node. In the event that the longest prefix match does not result in an exact match between the IPv6 address associated with the requested content and any of the IPv6 addresses associated with content available at the first network node, the request is routed towards a content variant suitable for transcoding to the requested content, the content variant being stored at the first network node.

公开(公告)号：US20190124003A1

公开(公告)日：2019-04-25

申请号：US16094949

申请日：2017-04-17

Applicant: Cisco Technology, Inc.

Inventor： Andre Jean-Marie Surcouf ,  William Mark Townsley

IPC: H04L12/749 ,  H04L29/12 ,  H04L12/721

Abstract: A method of serving a version of a piece of content from a server to a requesting node is described. A request for a piece of content is received from the requesting node. The request comprises an IP address associated with the requested content, the address including one or more portions relating to one or more parameters associated with the piece of content and at least one portion comprises anonymous bits. A plurality of versions of the requested piece of content are identified, each identified version having an IP address with portions matching the corresponding portions of the IP address of the request, except for the at least one portion comprising anonymous bits. The server then determines a version of the piece of content to send and sends the determined version to the requesting node.

公开(公告)号：US20180219783A1

公开(公告)日：2018-08-02

申请号：US15581942

申请日：2017-04-28

Applicant: Cisco Technology, Inc.

Inventor： Pierre Pfister ,  William Mark Townsley ,  Yoann Desmouceaux ,  Jerome Tollet ,  Andre Surcouf

IPC: H04L12/803 ,  H04L12/741

CPC classification number: H04L47/125 ,  H04L45/34 ,  H04L45/745 ,  H04L61/6059 ,  H04L67/1002 ,  H04L67/1004 ,  H04L67/1023 ,  H04L67/1027 ,  H04L69/22

Abstract: Systems, methods, and computer-readable media for load balancing using segment routing and application monitoring. A method can involve receiving a packet including a request from a source device to an application associated with a virtual address in a network, mapping the request to a set of candidate servers hosting the application associated with the virtual address, and encoding the set of candidate servers as a list of segments in a segment routing header associated with the packet. The method can further involve determining that a first candidate server from the set of candidate servers is a next segment in the list of segments, encoding the first candidate server in a destination address field on a header of the packet, and forwarding the packet to the first candidate server.

公开(公告)号：US20180203866A1

公开(公告)日：2018-07-19

申请号：US15408129

申请日：2017-01-17

Applicant: Cisco Technology, Inc.

Inventor： Andre Surcouf ,  Guillaume Ruty ,  William Mark Townsley

IPC: G06F17/30 ,  H04L29/08

Abstract: The disclosure provides a system, method and computer-readable storage device embodiments. Some embodiments can include an IPv6-centric distributed storage system. An example method includes receiving, at a computing device, a request to create metadata associated with an object from a client, creating the metadata based on the request and transmitting the metadata and an acknowledgment to the client, wherein the metadata contains an address in a storage system for each replica of the object and wherein the metadata can be used to write data to the storage system and read the data from the storage system. There is no file system layer between an application layer and a storage system layer.

公开(公告)号：US20240364669A1

公开(公告)日：2024-10-31

申请号：US18139871

申请日：2023-04-26

Applicant: Cisco Technology, Inc.

Inventor： William Mark Townsley ,  Edward Albert Warnicke ,  Jerome Tollet ,  Aloys Augustin ,  Andrew Yourtchenko ,  Giles Douglas Yorke Heron

IPC: H04L9/40 ,  H04L45/24 ,  H04L45/745

CPC classification number: H04L63/0485 ,  H04L45/24 ,  H04L45/745

Abstract: Techniques for routing Internet Protocol security (IPsec) data packets. An index is assigned to a Security Parameter Index (SPI) header of the IPsec data packet. The index includes information for routing the data packet to a particular Encapsulating Security Payload (ESP) processor. The data packet can be routed using techniques that are analogous to conventional routing protocols such as IPv4 routing protocol. This allows the data packet to be routed using less expensive routing protocols rather than relying solely on more expensive load balancing techniques to route the data packet. This also advantageously allows the data packet to be routed employing routing techniques developed over decades of routing protocol development.

公开(公告)号：US20230269228A1

公开(公告)日：2023-08-24

申请号：US17585204

申请日：2022-01-26

Applicant: Cisco Technology, Inc.

Inventor： Kyle Andrew Donald Mestery ,  Mark A. Bakke ,  William Mark Townsley

IPC: H04L9/40 ,  H04L45/00 ,  H04L45/42

CPC classification number: H04L63/0263 ,  H04L45/38 ,  H04L45/42 ,  H04L63/0236

Abstract: The present disclosure is directed to managing network traffic in a cloud-based secure access service. In one aspect, a method includes determining, by a controller of a cloud-based secure access service, that data packets from a user device should be dropped, a plurality of user devices, including the user device, being remotely connected to the controller for access to the cloud-based secure access service; determining, by the controller, a type of remote connection through which the user device is connected to the controller, each type of remote connection having a corresponding communication prototype; and transmitting a message, by the controller, to the user device, over a control protocol corresponding to the type of remote connection through which the user device is connected to the controller, the message providing a signal to the user device to drop packets at the user device prior to sending the packets to the controller.

公开(公告)号：US20220413975A1

公开(公告)日：2022-12-29

申请号：US17902677

申请日：2022-09-02

Applicant: Cisco Technology, Inc.

Inventor： Pierre Pfister ,  Ian James Wells ,  Kyle Andrew Donald Mestery ,  William Mark Townsley ,  Yoann Desmouceaux ,  Guillaume Ruty ,  Aloys Augustin

IPC: G06F11/20 ,  G06F9/455 ,  H04L61/2503 ,  H04L61/58 ,  H04L101/00

Abstract: This disclosure describes techniques for providing a distributed scalable architecture for Network Address Translation (NAT) systems with high availability and mitigations for flow breakage during failover events. The NAT servers may include functionality to serve as fast-path servers and/or slow-path servers. A fast-path server may include a NAT worker that includes a cache of NAT mappings to perform stateful network address translation and to forward packets with minimal latency. A slow-path server may include a mapping server that creates new NAT mappings, depreciates old ones, and answers NAT worker state requests. The NAT system may use virtual mapping servers (VMSs) running on primary physical servers with state duplicated VMSs on different physical failover servers. Additionally, the NAT servers may implement failover solutions for dynamically allocated routeable address/port pairs assigned to new sessions by assigning new outbound address/port pairs when a session starts and broadcasting pairing information.