SYSTEMS AND METHODS FOR DETERMINING SECURE NETWORK ELEMENTS USING FLEXIBLE ALGORITHM TECHNOLOGY

    公开(公告)号:US20200322254A1

    公开(公告)日:2020-10-08

    申请号:US16598852

    申请日:2019-10-10

    Abstract: In one embodiment, an apparatus includes one or more processors and one or more computer-readable non-transitory storage media coupled to the one or more processors. The one or more computer-readable non-transitory storage media include instructions that, when executed by the one or more processors, cause the apparatus to perform operations including receiving a first type-length-value (TLV) associated with a winning flexible algorithm definition (FAD) from a first element of a network. The operations also include determining a security level for the winning FAD based on the TLV. The operations further include determining a data transmission route through a plurality of elements of the network based on the security level for the winning FAD.

    Applying Attestation Tokens to The Intermediate System to Intermediate System (ISIS) Routing Protocol

    公开(公告)号:US20200322150A1

    公开(公告)日:2020-10-08

    申请号:US16600856

    申请日:2019-10-14

    Abstract: In one embodiment, a method includes receiving an ISIS hello message including an attestation token from a second network apparatus, determining that the attestation token is valid for the second network apparatus at a current time, establishing an adjacency to the second network apparatus in response to the determination, computing, based at least on the attestation token, a trust level for a first link from the first network apparatus to the second network apparatus and a trust level for first prefixes associated with the first link, and sending an LSP comprising the trust level for the first link and the trust level for the first prefixes to neighboring network apparatuses, where the trust level for the first link and the trust level for the prefixes are used by the network apparatuses in the network to compute a routing table of the network.

    Segment-routing multiprotocol label switching end-to-end dataplane continuity

    公开(公告)号:US10469372B2

    公开(公告)日:2019-11-05

    申请号:US15865570

    申请日:2018-01-09

    Abstract: A method is performed at a source node in a network of nodes configured with a link state protocol, and in which at least some of the nodes are enabled for multiprotocol label switching (MPLS). The node discovers and stores a link state topology representing the nodes of the network, links between the nodes, path-costs for the links, and whether each link is enabled or not enabled for MPLS. The node determines one or more shortest paths from the source node to a destination node among the nodes based on traversing the link state topology and, while the node traverses the link state topology, detects whether each shortest path supports or does not support MPLS end-to-end dataplane continuity. The node programs an IP dataplane with each shortest path, and programs an MPLS dataplane with ones of the one or more shortest paths that support the end-to-end MPLS continuity.

    SEGMENT-ROUTING MULTIPROTOCOL LABEL SWITCHING END-TO-END DATAPLANE CONTINUITY

    公开(公告)号:US20190215266A1

    公开(公告)日:2019-07-11

    申请号:US15865570

    申请日:2018-01-09

    Abstract: A method is performed at a source node in a network of nodes configured with a link state protocol, and in which at least some of the nodes are enabled for multiprotocol label switching (MPLS). The node discovers and stores a link state topology representing the nodes of the network, links between the nodes, path-costs for the links, and whether each link is enabled or not enabled for MPLS. The node determines one or more shortest paths from the source node to a destination node among the nodes based on traversing the link state topology and, while the node traverses the link state topology, detects whether each shortest path supports or does not support MPLS end-to-end dataplane continuity. The node programs an IP dataplane with each shortest path, and programs an MPLS dataplane with ones of the one or more shortest paths that support the end-to-end MPLS continuity.

    Capability Aware Routing
    59.
    发明申请

    公开(公告)号:US20190097841A1

    公开(公告)日:2019-03-28

    申请号:US16202764

    申请日:2018-11-28

    Abstract: Various systems and methods for bypassing one or more non-capable nodes. For example, one method involves a capable node determining that an adjacent node is non-capable, where capable nodes are configured to implement a data plane capability and non-capable nodes are not. The method then involves identifying a downstream node that is capable. The downstream node is on a shortest path. The method also involves generating information that identifies a tunnel to the downstream node.

    MALLEABLE ROUTING FOR DATA PACKETS
    60.
    发明申请

    公开(公告)号:US20190007305A1

    公开(公告)日:2019-01-03

    申请号:US15986174

    申请日:2018-05-22

    Abstract: Various implementations disclosed herein enable malleable routing for data packets. For example, in various implementations, a method of routing a type of data packets is performed by a device. In some implementations, the device includes a non-transitory memory and one or more processors coupled with the non-transitory memory. In some implementations, the method includes determining a routing criterion to transmit a set of data packets across a network. In some implementations, the method includes identifying network nodes and communication links in the network that satisfy the routing criterion. In some implementations, the method includes determining a route for the set of data packets through the network nodes and the communication links that satisfy the routing criterion. In some implementations, the method includes configuring the network nodes that are on the route with configuration information that allows the set of data packets to propagate along the route.

Patent Agency Ranking