公开(公告)号：US09705815B2

公开(公告)日：2017-07-11

申请号：US14318541

申请日：2014-06-27

Applicant: Juniper Networks, Inc.

Inventor： Geoffrey A. Mattson ,  Lei Qiu

IPC: G06F12/00 ,  G06F17/30 ,  H04L12/911 ,  H04L12/24

CPC classification number: H04L47/70 ,  G06F17/30958 ,  H04L41/145 ,  H04L41/5051

Abstract: In general, techniques are described for representing services, network resources, and relationships between such services and resources in a graph database with which to validate, provision, and manage the services in near real-time. In one example, a controller device includes at least one processor; and at least one memory to store a graph database comprising a graph that represents network resources and relationships between network resources. The controller device receives, at an application programming interface, a data-interchange formatted message that indicates a service request to configure a network service; queries, at least a portion of the plurality of the graph, to determine whether a set of the plurality of network resources can satisfy the service request to provision the network service within the network; and configures the set of the plurality of network resources to provide the network service.

公开(公告)号：US09578028B2

公开(公告)日：2017-02-21

申请号：US14318515

申请日：2014-06-27

Applicant: Juniper Networks, Inc.

Inventor： Geoffrey A. Mattson ,  Lei Qiu

IPC: H04L29/06 ,  H04L29/08 ,  H04L12/911 ,  H04L12/24

CPC classification number: H04L63/0892 ,  H04L41/5003 ,  H04L47/783 ,  H04L63/102 ,  H04L63/20 ,  H04L67/02

Abstract: A controller provides authentication, authorization, and accounting (AAA) services for a network, the controller comprising a control unit having one or more processors and a Representational State Transfer (REST) interface executed by the control unit to receive application data that specifies an interface method and a resource identifier for a resource, the resource identifier conforming to a subscriber management resource model. The REST interface determines, based on the resource identifier, a record for a subscriber management construct corresponding to the resource. The REST interface applies, to the record, an action corresponding to the interface method to modify access to the network by a subscriber.

Abstract translation: 控制器为网络提供认证，授权和计费（AAA）服务，所述控制器包括具有一个或多个处理器的控制单元和由所述控制单元执行的表示状态转移（REST）接口，以接收指定接口的应用数据 方法和资源的资源标识符，符合用户管理资源模型的资源标识符。 REST接口基于资源标识符确定与资源相对应的订户管理结构的记录。 REST界面向记录应用与接口方法对应的动作，以修改用户对网络的访问。

公开(公告)号：US10200258B2

公开(公告)日：2019-02-05

申请号：US14460320

申请日：2014-08-14

Applicant: Juniper Networks, Inc.

Inventor： Geoffrey A. Mattson ,  Lei Qiu

IPC: H04L12/24 ,  H04L29/08 ,  H04L12/801 ,  H04L12/927

Abstract: In some examples, a controller provisions services for transporting packet flows within a network. A controller service provisioning module receives a service request that comprises a definition for a service to be provided by the network for a subscriber or a customer of the network. The service provisioning module determines a plurality of network resources of at least one network device to be configured to implement the service in the network and apply the service to the packet-based network traffic of the subscriber. A locking unit of the service provisioning module acquires a lock from a network-wide coordination repository that stores a software representation for each of the network resources, the lock providing exclusive configuration access to the service provisioning module for the network resources. The service provisioning module, only upon the locking unit acquiring the lock for the network resources, configures the network resources to provision the service.

公开(公告)号：US20160050125A1

公开(公告)日：2016-02-18

申请号：US14460320

申请日：2014-08-14

Applicant: Juniper Networks, Inc.

Inventor： Geoffrey A. Mattson ,  Lei Qiu

IPC: H04L12/24 ,  H04L12/927 ,  H04L29/08 ,  H04L12/801

CPC classification number: H04L41/5051 ,  H04L41/0806 ,  H04L41/0873 ,  H04L41/5054 ,  H04L47/14 ,  H04L47/80 ,  H04L67/16

Abstract: In some examples, a controller provisions services for transporting packet flows within a network. A controller service provisioning module receives a service request that comprises a definition for a service to be provided by the network for a subscriber or a customer of the network. The service provisioning module determines a plurality of network resources of at least one network device to be configured to implement the service in the network and apply the service to the packet-based network traffic of the subscriber. A locking unit of the service provisioning module acquires a lock from a network-wide coordination repository that stores a software representation for each of the network resources, the lock providing exclusive configuration access to the service provisioning module for the network resources. The service provisioning module, only upon the locking unit acquiring the lock for the network resources, configures the network resources to provision the service.

Abstract translation: 在一些示例中，控制器提供用于在网络内传送分组流的服务。 控制器服务提供模块接收服务请求，该服务请求包括由网络为用户或网络的客户提供的服务的定义。 服务提供模块确定要配置为在网络中实现服务的至少一个网络设备的多个网络资源，并将该服务应用于订户的基于分组的网络业务。 服务提供模块的锁定单元从存储每个网络资源的软件表示的网络范围协调存储库获取锁，所述锁为网络资源提供对服务提供模块的独占配置访问。 服务提供模块仅在锁定单元获取网络资源的锁定时才配置网络资源来提供服务。

公开(公告)号：US20150381623A1

公开(公告)日：2015-12-31

申请号：US14318515

申请日：2014-06-27

Applicant: Juniper Networks, Inc.

Inventor： Geoffrey A. Mattson ,  Lei Qiu

IPC: H04L29/06 ,  H04L12/911

CPC classification number: H04L63/0892 ,  H04L41/5003 ,  H04L47/783 ,  H04L63/102 ,  H04L63/20 ,  H04L67/02

Abstract: A controller provides authentication, authorization, and accounting (AAA) services for a network, the controller comprising a control unit having one or more processors and a Representational State Transfer (REST) interface executed by the control unit to receive application data that specifies an interface method and a resource identifier for a resource, the resource identifier conforming to a subscriber management resource model. The REST interface determines, based on the resource identifier, a record for a subscriber management construct corresponding to the resource. The REST interface applies, to the record, an action corresponding to the interface method to modify access to the network by a subscriber.

Abstract translation: 控制器为网络提供认证，授权和计费（AAA）服务，所述控制器包括具有一个或多个处理器的控制单元和由所述控制单元执行的表示状态转移（REST）接口，以接收指定接口的应用数据 方法和资源的资源标识符，符合用户管理资源模型的资源标识符。 REST接口基于资源标识符确定与资源相对应的订户管理结构的记录。 REST界面向记录应用与接口方法对应的动作，以修改用户对网络的访问。

公开(公告)号：US20150381515A1

公开(公告)日：2015-12-31

申请号：US14318541

申请日：2014-06-27

Applicant: Juniper Networks, Inc.

Inventor： Geoffrey A. Mattson ,  Lei Qiu

IPC: H04L12/911 ,  G06F17/30

CPC classification number: H04L47/70 ,  G06F17/30958 ,  H04L41/145 ,  H04L41/5051

Abstract: In general, techniques are described for representing services, network resources, and relationships between such services and resources in a graph database with which to validate, provision, and manage the services in near real-time. In one example, a controller device includes at least one processor; and at least one memory to store a graph database comprising a graph that represents network resources and relationships between network resources. The controller device receives, at an application programming interface, a data-interchange formatted message that indicates a service request to configure a network service; queries, at least a portion of the plurality of the graph, to determine whether a set of the plurality of network resources can satisfy the service request to provision the network service within the network; and configures the set of the plurality of network resources to provide the network service.

Abstract translation: 一般来说，描述了用于表示服务，网络资源以及图形数据库中的这些服务和资源之间的关系的技术，其用于近似实时地验证，提供和管理服务。 在一个示例中，控制器设备包括至少一个处理器; 以及存储图形数据库的至少一个存储器，其包括表示网络资源和网络资源之间的关系的图形。 所述控制器设备在应用编程接口处接收指示配置网络服务的服务请求的数据交换格式化消息; 查询所述多个图中的至少一部分，以确定所述多个网络资源的集合是否能够满足所述服务请求以在所述网络内提供所述网络服务; 并配置多个网络资源的集合以提供网络服务。