公开(公告)号：US20210037057A1

公开(公告)日：2021-02-04

申请号：US16525362

申请日：2019-07-29

Applicant: Cisco Technology, Inc.

Inventor： Azeem M. SULEMAN ,  Rajagopalan JANAKIRAMAN ,  Pramila Deshraj SINGH ,  Sree Balaji VARADHARAJAN ,  Javed ASGHAR ,  Sachin GUPTA

IPC: H04L29/06 ,  H04L12/46

Abstract: The present disclosure provides for system resource management in self-healing networks by grouping End Point Groups (EPGs) into a plurality of policy groups based on shared security policies; identifying a first policy group with a highest resource demand; assigning a first security policy corresponding to the first policy group to a first switch of a plurality of switches; identifying a second plurality of EPGs from the remaining EPGs that were not included in the first policy group; grouping the second plurality of EPGs into a second plurality of policy groups based on shared security policies; identifying a second policy group with a highest resource demand of the second plurality of policy groups; and assigning a second security policy corresponding to the second policy group to a second switch of the plurality of switches.

公开(公告)号：US20240340317A1

公开(公告)日：2024-10-10

申请号：US18297253

申请日：2023-04-07

Applicant: Cisco Technology, Inc.

Inventor： Rajagopalan JANAKIRAMAN ,  Kiran SASIDHARAN PILLAI ,  Muralidhar ANNABATULA ,  Murukanandam K. PANCHALINGAM

IPC: H04L9/40 ,  H04L12/46

CPC classification number: H04L63/20 ,  H04L12/4641 ,  H04L2212/00

Abstract: Techniques for using policies in an overlay communication network are disclosed. These techniques include deriving a plurality of source tags for a flow relating to an overlay communication network, the plurality of source tags relating to one or more policies for the flow. The techniques further include deriving a tag pointer for the flow, the tag pointer corresponding to all of the plurality of source tags, encapsulating the tag pointer in the flow, and transmitting the flow over the overlay communication network, wherein the tag pointer is configured to be used to identify a plurality of policies for the flow on egress from the overlay communication network.