公开(公告)号：US10891147B1

公开(公告)日：2021-01-12

申请号：US15376365

申请日：2016-12-12

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Vijayan Ramakrishnan ,  Saurabh Jain ,  Vijay Chander ,  Ronak K. Desai ,  Praveen Jain ,  Munish Mehta ,  Yibin Yang

IPC: G06F9/455

Abstract: Aspects of the embodiments are directed to forming a virtual machine management (VMM) domain in a heterogeneous datacenter. Aspects can include mapping an endpoint group to multiple VMM domains, each VMM domain associated with one or more virtual machine management systems of a single type that each share one or more management system characteristics; instantiating a virtual switch instance, the virtual switch instance associated with a the VMM domain; and instantiating the endpoint group mapped to the VMM domain as a network component associated with the virtual switch instance.

公开(公告)号：US12021826B2

公开(公告)日：2024-06-25

申请号：US18069836

申请日：2022-12-21

Applicant: Cisco Technology, Inc.

Inventor： Vijay Chander ,  Yibin Yang ,  Praveen Jain ,  Munish Mehta

IPC: H04L61/2592 ,  H04L12/46 ,  H04L45/02 ,  H04L61/2514 ,  H04L61/2521

CPC classification number: H04L61/2592 ,  H04L12/4641 ,  H04L45/02 ,  H04L61/2514 ,  H04L61/2521

Abstract: According to one or more embodiments of this disclosure, a network controller in a data center network establishes a translation table for in-band traffic in a data center network, the translation table resolves ambiguous network addresses based on one or more of a virtual network identifier (VNID), a routable tenant address, or a unique loopback address. The network controller device receives packets originating from applications and/or an endpoints operating in a network segment associated with a VNID. The network controller device translates, using the translation table, unique loopback addresses and/or routable tenant addresses associated with the packets into routable tenant addresses and/or unique loopback addresses, respectively.

公开(公告)号：US20210168114A1

公开(公告)日：2021-06-03

申请号：US17174215

申请日：2021-02-11

Applicant: Cisco Technology, Inc.

Inventor： Vijay Chander ,  Yibin Yang ,  Praveen Jain ,  Munish Mehta

IPC: H04L29/12 ,  H04L12/46 ,  H04L12/751

Abstract: According to one or more embodiments of this disclosure, a network controller in a data center network establishes a translation table for in-band traffic in a data center network, the translation table resolves ambiguous network addresses based on one or more of a virtual network identifier (VNID), a routable tenant address, or a unique loopback address. The network controller device receives packets originating from applications and/or an endpoints operating in a network segment associated with a VNID. The network controller device translates, using the translation table, unique loopback addresses and/or routable tenant addresses associated with the packets into routable tenant addresses and/or unique loopback addresses, respectively.

公开(公告)号：US10171357B2

公开(公告)日：2019-01-01

申请号：US15208018

申请日：2016-07-12

Applicant: Cisco Technology, Inc.

Inventor： Vijay Chander ,  Yibin Yang ,  Praveen Jain ,  Munish Mehta

IPC: H04L12/28 ,  H04L12/741 ,  H04L12/46

Abstract: According to one or more embodiments of this disclosure, a network controller in a data center network establishes a translation table for in-band traffic in a data center network, the translation table resolves ambiguous network addresses based on one or more of a virtual network identifier (VNID), a routable tenant address, or a unique loopback address. The network controller device receives packets originating from applications and/or an endpoints operating in a network segment associated with a VNID. The network controller device translates, using the translation table, unique loopback addresses and/or routable tenant addresses associated with the packets into routable tenant addresses and/or unique loopback addresses, respectively.

公开(公告)号：US09825814B2

公开(公告)日：2017-11-21

申请号：US14809971

申请日：2015-07-27

Applicant: Cisco Technology, Inc.

Inventor： Joji Thomas Mekkattuparamban ,  Vijay Chander ,  Saurabh Jain ,  Van Lieu ,  Badhri Madabusi Vijayaraghavan ,  Praveen Jain ,  Munish Mehta ,  Michael R. Smith ,  Narender Enduri

IPC: H04L12/24 ,  H04L29/06 ,  H04L29/12

CPC classification number: H04L41/0893 ,  H04L41/0886 ,  H04L61/15 ,  H04L61/6022 ,  H04L63/101 ,  H04L63/104

Abstract: Systems, methods, and computer-readable storage media are provided for dynamically setting an end point group for an end point. An endpoint can be assigned a default end point group when added to a network. For example, the default end point group can be a baseline port/security group which is considered an untrusted group. The end point can then be dynamically assigned an end point group based on a set of group selection rules. For example, the group selection rules can identify an end point group based on the MAC address or other attributes. When the end point is added to the network, the MAC address and/or other attributes of the end point can be determined and used to assign an end point group. As another example, an end point group can be assigned based on the amount of traffic or guest operation system.

公开(公告)号：US09602331B2

公开(公告)日：2017-03-21

申请号：US13665662

申请日：2012-10-31

Applicant: Cisco Technology, Inc.

Inventor： Marco Di Benedetto ,  Mario Baldi ,  Vijay Chander ,  Alessandro Salvatori

IPC: G06F15/16 ,  H04L29/10 ,  H04L29/06

CPC classification number: H04L29/10 ,  H04L69/12 ,  H04L69/22

Abstract: Providing a shared interface among a plurality of compute units is disclosed. A plurality of compute units is determined and a shared interface for the plurality of compute units is provided, wherein incoming traffic is received by any of the plurality of compute units. Also, the packet is received at the shared interface for a plurality of compute units. The packet is encapsulated using a first header, wherein the first header specifies one of the plurality of compute units, and wherein the one of the plurality of compute units is selected independent of an interface address associated with the shared interface.

公开(公告)号：US20230300105A1

公开(公告)日：2023-09-21

申请号：US18069836

申请日：2022-12-21

Applicant: Cisco Technology, Inc.

Inventor： Vijay Chander ,  Yibin Yang ,  Praveen Jain ,  Munish Mehta

IPC: H04L61/2592 ,  H04L12/46 ,  H04L45/02

CPC classification number: H04L61/2592 ,  H04L12/4641 ,  H04L45/02 ,  H04L61/2514

Abstract: According to one or more embodiments of this disclosure, a network controller in a data center network establishes a translation table for in-band traffic in a data center network, the translation table resolves ambiguous network addresses based on one or more of a virtual network identifier (VNID), a routable tenant address, or a unique loopback address. The network controller device receives packets originating from applications and/or an endpoints operating in a network segment associated with a VNID. The network controller device translates, using the translation table, unique loopback addresses and/or routable tenant addresses associated with the packets into routable tenant addresses and/or unique loopback addresses, respectively.

公开(公告)号：US11546288B2

公开(公告)日：2023-01-03

申请号：US17174215

申请日：2021-02-11

Applicant: Cisco Technology, Inc.

Inventor： Vijay Chander ,  Yibin Yang ,  Praveen Jain ,  Munish Mehta

IPC: H04L29/12 ,  H04L61/2592 ,  H04L12/46 ,  H04L45/02 ,  H04L61/2514 ,  H04L61/2521

Abstract: According to one or more embodiments of this disclosure, a network controller in a data center network establishes a translation table for in-band traffic in a data center network, the translation table resolves ambiguous network addresses based on one or more of a virtual network identifier (VNID), a routable tenant address, or a unique loopback address. The network controller device receives packets originating from applications and/or an endpoints operating in a network segment associated with a VNID. The network controller device translates, using the translation table, unique loopback addresses and/or routable tenant addresses associated with the packets into routable tenant addresses and/or unique loopback addresses, respectively.

公开(公告)号：US10320687B2

公开(公告)日：2019-06-11

申请号：US15792650

申请日：2017-10-24

Applicant: Cisco Technology, Inc.

Inventor： Joji Thomas Mekkattuparamban ,  Vijay Chander

IPC: G06F15/173 ,  H04L12/813 ,  H04L12/721 ,  H04L12/18 ,  H04L12/931 ,  H04L12/46 ,  H04L12/24 ,  H04L12/775

Abstract: Systems, methods, and computer-readable media are provided for enforcing policy for upstream (e.g., traffic from an endpoint to the physical network layer or hardware fabric of a data center) flood traffic (e.g., broadcast, unknown unicast, or multicast traffic) originating from a virtual endpoint via a network fabric. In one embodiment, upstream flood traffic can be transmitted using a special multicast group to which only elements of the data center fabric (e.g., physical switches, routers) are subscribed. That is, upstream flood traffic is assigned to the special multicast group, resulting in unintended endpoints not receiving the flood traffic. However, the hardware fabric receives the flood traffic and will then enforce applicable policies to route the packets to intended endpoints.

公开(公告)号：US09807020B2

公开(公告)日：2017-10-31

申请号：US14793301

申请日：2015-07-07

Applicant: Cisco Technology, Inc.

Inventor： Joji Thomas Mekkattuparamban ,  Vijay Chander

IPC: G06F15/173 ,  H04L12/813 ,  H04L12/721 ,  H04L12/18 ,  H04L12/931 ,  H04L12/46 ,  H04L12/24 ,  H04L12/775

CPC classification number: H04L47/20 ,  H04L12/185 ,  H04L12/4633 ,  H04L41/00 ,  H04L45/32 ,  H04L45/58 ,  H04L49/70

Abstract: Systems, methods, and computer-readable media are provided for enforcing policy for upstream (e.g., traffic from an endpoint to the physical network layer or hardware fabric of a data center) flood traffic (e.g., broadcast, unknown unicast, or multicast traffic) originating from a virtual endpoint via a network fabric. In one embodiment, upstream flood traffic can be transmitted using a special multicast group to which only elements of the data center fabric (e.g., physical switches, routers) are subscribed. That is, upstream flood traffic is assigned to the special multicast group, resulting in unintended endpoints not receiving the flood traffic. However, the hardware fabric receives the flood traffic and will then enforce applicable policies to route the packets to intended endpoints.