Scalable Mechanism for Optimized Application Performance in SD-WAN

    公开(公告)号:US20220029857A1

    公开(公告)日:2022-01-27

    申请号:US17091240

    申请日:2020-11-06

    Abstract: The present disclosure is directed to a mechanism for optimized application performance in SD-WAN, and includes the steps of receiving initial traffic packets at a first site for transmission to a second site; determining whether a direct tunnel is established between the first site and the second site based on a state of the second site, the state comprising an active state indicating that a direct tunnel is established between the first and second sites or an inactive state indicating that the direct tunnel is not established between the first and second sites; and in response to determining that the direct tunnel is not established, determining that the initial packets satisfy a configured trigger; forwarding the initial packets to the second site via a backup path; establishing the direct tunnel between the first and second sites; and forwarding subsequent traffic packets to the second site via the established direct tunnel.

    Systems and methods for asymmetrical peer forwarding in an SD-WAN environment

    公开(公告)号:US12289232B2

    公开(公告)日:2025-04-29

    申请号:US18504576

    申请日:2023-11-08

    Abstract: In one embodiment, a method includes receiving, by a first node of a node cluster in a software-defined wide area network (SD-WAN), traffic from a wide area network (WAN), assigning, by the first node of the node cluster, flow ownership of the traffic to the first node, and communicating, by the first node of the node cluster, the traffic to a local area network (LAN). The method also includes receiving, by the first node of the node cluster, return traffic from a second node of the node cluster and detecting, by the first node of the node cluster, a diversion of the return traffic. The method further includes relinquishing, by the first node of the node cluster, the flow ownership and assigning, by the first node of the node cluster, the flow ownership to the second node of the node cluster.

    Optimizing IPSec for Hierarchical SD-WAN

    公开(公告)号:US20250133022A1

    公开(公告)日:2025-04-24

    申请号:US19007694

    申请日:2025-01-02

    Abstract: According to some embodiments, a method is performed by a software defined wide area network (SD-WAN) edge router in a hierarchical SD-WAN network comprising a plurality of edge routers and a plurality of border routers. The method comprises: originating a SD-WAN system route for advertising reachability to the edge router, the system route comprising an encryption key associated with the edge router; and transmitting the system route to one or more SD-WAN border routers. The method may further comprise: receiving a packet destined for the edge router from one of the one or more SD-WAN border routers, wherein the packet is at least partially encrypted with the encryption key associated with the edge router; and decrypting the received packet.

    PROACTIVE CONGESTION NOTIFICATION BASED ON SERVICE LEVEL AGREEMENT THRESHOLDS

    公开(公告)号:US20250062968A1

    公开(公告)日:2025-02-20

    申请号:US18511153

    申请日:2023-11-16

    Abstract: Techniques described herein can enable proactive congestion notifications based on service level agreement (SLA) thresholds. The disclosed techniques can be performed at a network router device. The router can monitor network traffic performance measurements of network traffic associated with an SLA. The SLA can be associated with an SLA policy, and the SLA policy can comprise performance thresholds such as loss/latency/jitter thresholds, and a congestion notification policy. The congestion notification policy can comprise a portion, e.g., a fraction or percentage, applicable to the performance thresholds to determine congestion notification thresholds. The router can send a congestion notification in response to a network traffic performance measurement exceeding a congestion notification threshold.

    Distributed routing controllers for multi-region SDWAN

    公开(公告)号:US11916786B2

    公开(公告)日:2024-02-27

    申请号:US17586204

    申请日:2022-01-27

    CPC classification number: H04L45/64 H04L41/0894 H04L45/02 H04L63/029

    Abstract: According to some embodiments, a software defined wide area network (SD-WAN) includes a first region and a second region. The first region includes multiple first routing controllers and multiple first SD-WAN edge routers. The second region includes multiple second routing controllers and multiple second SD-WAN edge routers. Each first SD-WAN edge router of the first region is configured to establish Overlay Management Protocol (OMP) peering connections with the plurality of first routing controllers of the first region but to avoid establishing OMP peering connections with the plurality of second routing controllers of the second region. Each second SD-WAN edge router of the second region is configured to establish OMP peering connections with the plurality of second routing controllers of the second region but to avoid establishing OMP peering connections with the plurality of first routing controllers of the first region.

    Systems and Methods for Stateless Symmetric Forwarding

    公开(公告)号:US20240031288A1

    公开(公告)日:2024-01-25

    申请号:US17813410

    申请日:2022-07-19

    CPC classification number: H04L45/7453

    Abstract: A system of one embodiment that provides stateless symmetric forwarding of packets in a computer network. The system includes a memory and a processor. The system is operable to determine a cluster state of a plurality of border routers in a cluster. The system is operable to communicate the cluster state to at least one branch node in the computer network. The system is operable to generate a network level consistent hash based on the cluster state. The system is operable to route a first packet through a first border router of the plurality of border routers in the cluster using the network level consistent hash. After the first packet is sent through a first border router, the system is further operable to route a second packet through the first border router of the plurality of border routers in the cluster using the network level consistent hash.

Patent Agency Ranking