-
公开(公告)号:US10547544B2
公开(公告)日:2020-01-28
申请号:US15855703
申请日:2017-12-27
Applicant: Cisco Technology, Inc.
Inventor: Thomas James Edsall , Navindra Yadav , Francisco M. Matus , Kit Chiu Chu , Michael R. Smith , Sameer Merchant , Krishna Doddapaneni , Satyam Sinha
IPC: H04L12/741 , H04L12/46 , H04L12/721 , H04L12/933 , G06F9/455
Abstract: Disclosed herein are methods of forwarding packets on a network, such as a leaf-spine network having leaf devices and spine devices. The methods may include receiving a packet at an ingress leaf device, and determining based, at least in part, on a header of the packet whether the packet is to be transmitted to a spine device. The methods may further include ascertaining based, at least in part, on a header of the packet whether to perform encapsulation on the packet, encapsulating the packet according to a result of the ascertaining, and then transmitting the packet to a spine device according to a result of the determining. Also disclosed herein are network apparatuses which include a processor and a memory, at least one of the processor or the memory being configured to perform some or all of the foregoing described methods.
-
公开(公告)号:US10454928B2
公开(公告)日:2019-10-22
申请号:US15333906
申请日:2016-10-25
Applicant: Cisco Technology, Inc.
Inventor: Thomas James Edsall
Abstract: Techniques are provided herein to achieve data security and integrity using the cryptographic machinery of IEEE MACSec for TCP or UDP packets, for example, VxLAN, iVxLAN, and VxLAN-GPE packet. In particular, the disclosed techniques generate InsSec packets from received VxLAN based packets, in which the generated InsSec packets include an integrity checksum that that does not cover the MAC address of the packet.
-
公开(公告)号:US09876715B2
公开(公告)日:2018-01-23
申请号:US14530550
申请日:2014-10-31
Applicant: Cisco Technology, Inc.
Inventor: Thomas James Edsall , Navindra Yadav , Francisco M. Matus , Kit Chiu Chu , Michael R. Smith , Sameer Merchant , Krishna Doddapaneni , Satyam Sinha
IPC: H04L12/741 , H04L12/46 , H04L12/721 , H04L12/933 , G06F9/455
CPC classification number: H04L45/74 , G06F9/45558 , G06F2009/45595 , H04L12/4633 , H04L45/66 , H04L49/10
Abstract: Disclosed herein are methods of forwarding packets on a network, such as a leaf-spine network having leaf devices and spine devices. The methods may include receiving a packet at an ingress leaf device, and determining based, at least in part, on a header of the packet whether the packet is to be transmitted to a spine device. The methods may further include ascertaining based, at least in part, on a header of the packet whether to perform encapsulation on the packet, encapsulating the packet according to a result of the ascertaining, and then transmitting the packet to a spine device according to a result of the determining. Also disclosed herein are network apparatuses which include a processor and a memory, at least one of the processor or the memory being configured to perform some or all of the foregoing described methods.
-
公开(公告)号:US20210184972A1
公开(公告)日:2021-06-17
申请号:US17187332
申请日:2021-02-26
Applicant: Cisco Technology, Inc.
Inventor: Sameer Merchant , Thomas James Edsall , Navindra Yadav
IPC: H04L12/741 , H04L29/12
Abstract: Disclosed herein are methods of forwarding data over an IP network. The methods may include receiving a packet from a source host connected to the IP network, identifying the IP address of a destination host designated in the packet, determining the location on the IP network where the destination host designated by the packet is connected, without reference to the MAC address specified in the packet, by using location-identification information stored on the IP network, and forwarding the packet to the location on the IP network where the destination host is connected without reference to the MAC address specified in the packet. Also disclosed herein are related network devices implementing such techniques and operations, as well as IP networks which include such network devices.
-
公开(公告)号:US10951522B2
公开(公告)日:2021-03-16
申请号:US14301239
申请日:2014-06-10
Applicant: Cisco Technology, Inc.
Inventor: Sameer Merchant , Thomas James Edsall , Navindra Yadav
IPC: H04L12/741 , H04L29/12
Abstract: Disclosed herein are methods of forwarding data over an IP network. The methods may include receiving a packet from a source host connected to the IP network, identifying the IP address of a destination host designated in the packet, determining the location on the IP network where the destination host designated by the packet is connected, without reference to the MAC address specified in the packet, by using location-identification information stored on the IP network, and forwarding the packet to the location on the IP network where the destination host is connected without reference to the MAC address specified in the packet. Also disclosed herein are related network devices implementing such techniques and operations, as well as IP networks which include such network devices.
-
6.
公开(公告)号:US10412615B2
公开(公告)日:2019-09-10
申请号:US15855620
申请日:2017-12-27
Applicant: Cisco Technology, Inc.
Inventor: Thomas James Edsall , Satyam Sinha
Abstract: Disclosed herein are methods and related apparatuses for determining statistics descriptive of packets received at a particular location on a network out of a set of packets transmitted on the network, which include transmitting first and second groups of packets on the network, the packets in the first and second groups labeled with first and second labels, respectively (the packets in the second group not in the first group), incrementing first and second packet counters associated with the particular network location in response to packet(s) in the first and second groups, respectively, being received at the network location until all packets in the first and second groups have drained from the network, and using values read from the first and second packet counters to determine a statistic descriptive of the packets received at the particular network location out of those in the first and second groups transmitted on the network.
-
公开(公告)号:US20180139132A1
公开(公告)日:2018-05-17
申请号:US15855703
申请日:2017-12-27
Applicant: Cisco Technology, Inc.
Inventor: Thomas James Edsall , Navindra Yadav , Francisco M. Matus , Kit Chiu Chu , Michael R. Smith , Sameer Merchant , Krishna Doddapaneni , Satyam Sinha
IPC: H04L12/741 , H04L12/933 , H04L12/721 , H04L12/46 , G06F9/455
Abstract: Disclosed herein are methods of forwarding packets on a network, such as a leaf-spine network having leaf devices and spine devices. The methods may include receiving a packet at an ingress leaf device, and determining based, at least in part, on a header of the packet whether the packet is to be transmitted to a spine device. The methods may further include ascertaining based, at least in part, on a header of the packet whether to perform encapsulation on the packet, encapsulating the packet according to a result of the ascertaining, and then transmitting the packet to a spine device according to a result of the determining. Also disclosed herein are network apparatuses which include a processor and a memory, at least one of the processor or the memory being configured to perform some or all of the foregoing described methods.
-
公开(公告)号:US20180115548A1
公开(公告)日:2018-04-26
申请号:US15333906
申请日:2016-10-25
Applicant: Cisco Technology, Inc.
Inventor: Thomas James Edsall
IPC: H04L29/06
CPC classification number: H04L63/0876 , H04L12/462 , H04L12/4641 , H04L63/0272 , H04L63/0428 , H04L69/16 , H04L2012/4629
Abstract: Techniques are provided herein to achieve data security and integrity using the cryptographic machinery of IEEE MACSec for TCP or UDP packets, for example, VxLAN, iVxLAN, and VxLAN-GPE packet. In particular, the disclosed techniques generate InsSec packets from received VxLAN based packets, in which the generated InsSec packets include an integrity checksum that that does not cover the MAC address of the packet.
-
公开(公告)号:US20170346748A1
公开(公告)日:2017-11-30
申请号:US15682339
申请日:2017-08-21
Applicant: Cisco Technology, Inc.
IPC: H04L12/833 , H04L12/841
CPC classification number: H04L47/2458 , H04L47/283
Abstract: In one embodiment, a next set of packets in a first flow may be identified. A counter may be incremented, where the counter indicates a first number of initial sets of packets in first flow that have been identified. The identified next set of packets may be prioritized such that the first number of initial sets of packets in the first flow are prioritized and a sequential order of all packets in the first flow is maintained. The identifying, incrementing, and prioritizing may be repeated until no further sets of packets in the first flow remain to be identified or the first number of initial sets of packets is equal to a first predefined number.
-
公开(公告)号:US20150124826A1
公开(公告)日:2015-05-07
申请号:US14530550
申请日:2014-10-31
Applicant: Cisco Technology, Inc.
Inventor: Thomas James Edsall , Navindra Yadav , Francisco M. Matus , Kit Chiu Chu , Michael R. Smith , Sameer Merchant , Krishna Doddapaneni , Satyam Sinha
IPC: H04L12/741
CPC classification number: H04L45/74 , G06F9/45558 , G06F2009/45595 , H04L12/4633 , H04L45/66 , H04L49/10
Abstract: Disclosed herein are methods of forwarding packets on a network, such as a leaf-spine network having leaf devices and spine devices. The methods may include receiving a packet at an ingress leaf device, and determining based, at least in part, on a header of the packet whether the packet is to be transmitted to a spine device. The methods may further include ascertaining based, at least in part, on a header of the packet whether to perform encapsulation on the packet, encapsulating the packet according to a result of the ascertaining, and then transmitting the packet to a spine device according to a result of the determining. Also disclosed herein are network apparatuses which include a processor and a memory, at least one of the processor or the memory being configured to perform some or all of the foregoing described methods.
Abstract translation: 这里公开了在诸如具有叶装置和脊柱装置的叶脊网络的网络上转发分组的方法。 所述方法可以包括在入口叶设备处接收分组,以及至少部分地基于所述分组的报头确定所述分组是否要传送到脊柱设备。 所述方法可以进一步包括至少部分地基于分组的报头来确定是否对分组进行封装,根据确定的结果封装分组,然后根据所述分组将分组发送到脊柱设备 决定的结果。 本文还公开了包括处理器和存储器的网络设备,处理器或存储器中的至少一个被配置为执行前述所描述的方法中的一些或全部。
-
-
-
-
-
-
-
-
-