Maintaining processing core affinity for fragmented packets in network devices

    公开(公告)号:US11949590B1

    公开(公告)日:2024-04-02

    申请号:US18169696

    申请日:2023-02-15

    摘要: Techniques are disclosed for maintaining processing unit core affinity for fragmented packets. In one example, a service physical interface card (PIC) implementing a service plane of a network device receives fragmented and/or non-fragmented packet data for a traffic flow. The service PIC comprises at least one processing unit comprising multiple cores. A routing engine operating in a control plane of the network device defines one or more core groups comprising a subset of the cores. The routing engine assigns the traffic flow to a core group and a forwarding engine operating in a forwarding plane of the network device forwards the packet data for the traffic flow to the assigned core group. A core of the assigned core group applies a network service to the fragmented and/or non-fragmented packet data for the traffic flow, and the forwarding engine forwards the packet data for the traffic flow toward a destination.

    LOAD BALANCING OF ASSISTED REPLICATION NETWORK DEVICES

    公开(公告)号:US20240098026A1

    公开(公告)日:2024-03-21

    申请号:US17946310

    申请日:2022-09-16

    摘要: A controller device receives, from a plurality of assisted replication network devices, respective utilization information associated with the plurality of assisted replication network devices. The controller device generates, based on the respective utilization information associated with the plurality of assisted replication network devices, load balancing information for a network device associated with two or more assisted replication network devices of the plurality of assisted replication network devices, and sends, to the network device, the load balancing information. The network selects, based on the load balancing information, a particular assisted replication network device of the two or more assisted replication network devices. The network device receives a traffic flow that is to be multicast and sends the traffic flow to the particular assisted replication network device, wherein sending the traffic flow to the particular assisted replication network device permits the particular assisted replication network device to multicast the traffic flow.

    STATELESS TRANSPORT LAYER SECURITY PROXY SESSION RESUMPTION

    公开(公告)号:US20240073247A1

    公开(公告)日:2024-02-29

    申请号:US17823382

    申请日:2022-08-30

    IPC分类号: H04L9/40

    摘要: A system communicates, with a client device, to establish a first TLS communication session between the system and the client device, and with a server device, to establish a second TLS communication session between the system and the server device. The system generates a first session ticket associated with the first TLS communication session, and obtains, from the server device, a second session ticket associated with the second TLS communication session. The system sends, to the client device and via the first TLS communication session, the first session ticket, with the second session ticket included in the first session ticket. The system receives, from the client device and after the first TLS communication session and the second TLS communication session terminate, the first session ticket that includes the second session ticket, which the system uses to facilitate resumption of the first TLS communication session and the second TLS communication session.

    ADAPTABLE SOFTWARE DEFINED WIDE AREA NETWORK APPLICATION-SPECIFIC PROBING

    公开(公告)号:US20240073117A1

    公开(公告)日:2024-02-29

    申请号:US18501190

    申请日:2023-11-03

    摘要: Systems, devices and techniques for an adaptive application-specific probing scheme are disclosed. An example network device includes memory configured to store a network address and probe protocol usable for probing a first network device associated with a source of an application, and one or more processors configured to determine a network address and probe protocol usable for probing the first network device, wherein the first network device comprises a server that is responsive to the probing, the server executing the application for the data flow, or a closest network device, to the server, that is responsive to the probing. The one or more processors are also configured to send to a second network device at a location serviced by the application, a message specifying the network address and probe protocol usable for probing the first network device.