Reliable multipath forwarding for encapsulation protocols

    公开(公告)号:US09608858B2

    公开(公告)日:2017-03-28

    申请号:US14336839

    申请日:2014-07-21

    Abstract: In one embodiment, an ingress router sends a multipath information query across a computer network toward an egress router, and builds an entropy table based on received query responses. The entropy table maps the egress router to one or more available paths to the egress router, and associated entropy information for each respective available path of the one or more available paths. The ingress router may then forward traffic to the egress router using the entropy table to load share the traffic across the one or more available paths using the associated entropy information for each respective available path. In response to detecting a failure of a particular path of the one or more available paths, however, the ingress router then removes the particular path from the entropy table, thereby ceasing forwarding of traffic over the particular path.

    Detecting failures of backup label switched paths in a network environment
    44.
    发明授权
    Detecting failures of backup label switched paths in a network environment 有权
    检测网络环境中备份标签交换路径的故障

    公开(公告)号:US09537712B2

    公开(公告)日:2017-01-03

    申请号:US14600068

    申请日:2015-01-20

    CPC classification number: H04L41/0668 H04L45/00 H04L45/22 H04L45/28 H04L45/50

    Abstract: A method is provided in one example and includes communicating a first request message to a first network element functioning as a point of local repair for a backup label switched path. The first request message includes a first network address having a predetermined value and an indication of a forwarding equivalence class associated with the backup label switched path. The method further includes receiving a first reply message from the first network element. The first reply message includes at least one backup path parameter associated with the backup label switched path.

    Abstract translation: 在一个示例中提供了一种方法,并且包括将第一请求消息传达到用作备份标签交换路径的本地修复点的第一网络元件。 第一请求消息包括具有预定值的第一网络地址和与备份标签交换路径相关联的转发等价类的指示。 该方法还包括从第一网络元件接收第一应答消息。 第一应答消息包括与备份标签交换路径相关联的至少一个备份路径参数。

    RELIABLE MULTIPATH FORWARDING FOR ENCAPSULATION PROTOCOLS
    45.
    发明申请
    RELIABLE MULTIPATH FORWARDING FOR ENCAPSULATION PROTOCOLS 有权
    可靠的多路径加密协议

    公开(公告)号:US20160020941A1

    公开(公告)日:2016-01-21

    申请号:US14336839

    申请日:2014-07-21

    Abstract: In one embodiment, an ingress router sends a multipath information query across a computer network toward an egress router, and builds an entropy table based on received query responses. The entropy table maps the egress router to one or more available paths to the egress router, and associated entropy information for each respective available path of the one or more available paths. The ingress router may then forward traffic to the egress router using the entropy table to load share the traffic across the one or more available paths using the associated entropy information for each respective available path. In response to detecting a failure of a particular path of the one or more available paths, however, the ingress router then removes the particular path from the entropy table, thereby ceasing forwarding of traffic over the particular path.

    Abstract translation: 在一个实施例中,入口路由器通过计算机网络向出口路由器发送多路径信息查询,并且基于接收到的查询响应构建熵表。 熵表将出口路由器映射到出口路由器的一个或多个可用路径,以及针对一个或多个可用路径的每个相应可用路径的相关熵信息。 入口路由器然后可以使用熵表将业务转发到出口路由器,以使用针对每个相应的可用路径的相关联的熵信息加载共享一个或多个可用路径上的流量。 然而,响应于检测到一个或多个可用路径的特定路径的故障,入口路由器然后从熵表中去除特定路径,从而停止在特定路径上的业务的转发。

    DISTRIBUTED MAPPING OF ADDRESS AND PORT (MAP) BETWEEN A PROVIDER EDGE DEVICE AND CUSTOMER PREMISE EQUIPMENT DEVICES
    46.
    发明申请
    DISTRIBUTED MAPPING OF ADDRESS AND PORT (MAP) BETWEEN A PROVIDER EDGE DEVICE AND CUSTOMER PREMISE EQUIPMENT DEVICES 有权
    提供者边缘设备和客户设备设备之间的地址和端口(MAP)的分布式映射

    公开(公告)号:US20160014071A1

    公开(公告)日:2016-01-14

    申请号:US14328296

    申请日:2014-07-10

    CPC classification number: H04L61/6059 H04L61/2015 H04L61/251 H04L61/6063

    Abstract: In one embodiment, a provider edge (PE) device in a computer network determines an IPv4 address and link-layer address for each adjacent customer premise equipment (CPE) device, and assigns each CPE device a unique IPv6 address. The PE device stores a key-pair mapping between the unique IPv6 address and combined IPv4 and link-layer address for each adjacent CPE, the mapping bound by a CPE session context, and uses the CPE session context to convert between IPv4 and IPv6 for all network traffic to and from a particular CPE device.

    Abstract translation: 在一个实施例中,计算机网络中的提供商边缘(PE)设备为每个相邻的客户驻地设备(CPE)设备确定IPv4地址和链路层地址,并为每个CPE设备分配唯一的IPv6地址。 PE设备存储唯一的IPv6地址和每个相邻CPE的组合IPv4和链路层地址之间的密钥对映射,映射由CPE会话环境绑定,并且使用CPE会话上下文在IPv4和IPv6之间转换所有 到特定CPE设备的网络流量。

    Dynamic EQAM discovery in M-CMTS architecture
    47.
    发明授权
    Dynamic EQAM discovery in M-CMTS architecture 有权
    M-CMTS架构中的动态EQAM发现

    公开(公告)号:US09112816B2

    公开(公告)日:2015-08-18

    申请号:US13899610

    申请日:2013-05-22

    Abstract: In one example, an Edge Quadrature Amplitude Modulation (EQAM) communicates EQAM information to a Modular Cable Modem Termination System (M-CMTS) core using a routing protocol that is configured on a packet switched network coupling the EQAM to the M-CMTS core. The EQAM generates a routing message according to the routing protocol and inserts EQAM information, such as a description of a modulated channel extending from the EQAM, the service-group information, etc., into the routing message. The EQAM then floods the EQAM information over at least portions of a routing domain by transmitting the routing message to an adjacent intermediary device.

    Abstract translation: 在一个示例中,边缘正交幅度调制(EQAM)使用配置在将EQAM耦合到M-CMTS核心的分组交换网络上的路由协议将EQAM信息传送到模块化电缆调制解调器终端系统(M-CMTS)核心。 EQAM根据路由协议生成路由消息,并将EQAM信息(例如从EQAM扩展的调制信道的描述,业务组信息等)插入到路由消息中。 然后,EQAM通过将路由消息发送到相邻的中间设备来在路由域的至少部分上泛洪EQAM信息。

    LOCAL REROUTE PROTECTION FOR MULTICAST MULTIPROTOCOL LABEL SWITCHING
    48.
    发明申请
    LOCAL REROUTE PROTECTION FOR MULTICAST MULTIPROTOCOL LABEL SWITCHING 有权
    多媒体多媒体标签切换的本地防雷

    公开(公告)号:US20140280711A1

    公开(公告)日:2014-09-18

    申请号:US13839764

    申请日:2013-03-15

    Abstract: In one embodiment, a merge process can determine a primary tree among nodes in a communication network, determine a backup tree for a protected segment of the primary tree, the backup tree having at least a portion of overlap with the primary tree, and stitch the backup tree to the primary tree for each node of the portion of overlap such that when a message is transmitted for a group according to the backup tree, each node of the portion of overlap receives a single instance of the message of the group.

    Abstract translation: 在一个实施例中,合并过程可以确定通信网络中的节点之间的主树,确定主树的受保护段的备份树,备份树具有与主树重叠的至少一部分,并且将 备份树到重叠部分的每个节点的主树,使得当根据备份树发送用于组的消息时,重叠部分的每个节点接收该组的消息的单个实例。

    Mitigating security threats in daisy chained serverless FaaS functions

    公开(公告)号:US12063228B2

    公开(公告)日:2024-08-13

    申请号:US17559164

    申请日:2021-12-22

    CPC classification number: H04L63/1416 H04L41/22 H04L63/1425 H04L63/1466

    Abstract: In one embodiment, a method comprises: receiving, by a process, an executed function flow of a daisy chained serverless function-as-a-service (FaaS) function, the executed function flow having been injected with a particular trace identifier in response to an initial event trigger and span identifiers having been injected by each service that was executed; generating, by the process, a serverless flow graph associated with the particular trace identifier based on linking a path of serverless functions according to correlation of the span identifiers between the serverless functions; performing, by the process, a trace-based analysis of the serverless flow graph through comparison to a baseline of expectation; detecting, by the process, one or more anomalies in the serverless flow graph according to the trace-based analysis; and mitigating, by the process, the one or more anomalies in the serverless flow graph.

    In situ triggered function as a service within a service mesh

    公开(公告)号:US11716264B2

    公开(公告)日:2023-08-01

    申请号:US16102395

    申请日:2018-08-13

    CPC classification number: H04L43/028 G06F8/4441 G06F9/4881

    Abstract: The present technology is directed to a system and method for automatic triggering of relevant code segments corresponding to a sequence of code segments or function codes having a preferred execution order. The automatic triggering action is based on the snooping of a response generated from an execution of a previous code segment. Information with respect to the next code segment in the preferred execution order may be obtained by directing a network proxy, such as Envoy to snoop the Uniform Resource Identifier (URI) field of a response packet being forwarded to a client entity. In this way, a network proxy may preemptively spawn and instantiate the following function codes (pointed to by the snooped Uniform Resource Identifier) prior to receiving the corresponding client request. As such, by the time a client request for the subsequent function code is received the code ready for execution.

Patent Agency Ranking