Node representations of packet forwarding path elements

    公开(公告)号:US10979339B2

    公开(公告)日:2021-04-13

    申请号:US16673704

    申请日:2019-11-04

    Abstract: In one example, a method comprises receiving, by a forwarding manager for an internal forwarding path executed by at least one packet processor of a forwarding unit of a network device, one or more packet processing operations from a control unit of the network device; generating, by the forwarding manager based on the one or more packet processing operations, a plurality of nodes each comprising a unique token, wherein a first node of the plurality of nodes includes a token reference set to a value for the token of a second node of the plurality of nodes; configuring, by the forwarding manager based on the nodes, the forwarding path to include respective forwarding path elements for the plurality of nodes; and processing, by the packet processor, a packet received by the forwarding unit by executing the forwarding path elements.

    Anti-spoofing techniques for overlay networks

    公开(公告)号:US10764249B1

    公开(公告)日:2020-09-01

    申请号:US15827927

    申请日:2017-11-30

    Abstract: A network device is configured to receive an inbound packet from a first server device via a network tunnel, the first inbound packet including an outer header, a virtual private network (VPN) label, an inner header, and a data payload, the inner header including an inner source IP address of a source virtual machine. The processors are also configured to determine a first tunnel identifier, determine, based on the inner source IP address, a second tunnel identifier associated with a second server device hosting the source virtual machine, compare the second tunnel identifier with the first tunnel identifier to determine whether the tunnel on which the first inbound packet was received is the same as a tunnel used for forwarding traffic to the source virtual machine, and drop the inbound packet when the second tunnel identifier does not match the first tunnel identifier.

    Connecting virtual nodes in a network device using abstract fabric interfaces

    公开(公告)号:US10511546B2

    公开(公告)日:2019-12-17

    申请号:US15844338

    申请日:2017-12-15

    Abstract: In one example, a management component executing on a single-chassis network device configures a virtual node with an abstract fabric interface having, as a destination address, identifiers of packet processors (e.g., PTFE-IDs) assigned to the virtual node on the other end of the abstract fabric interface. The management component of the single-chassis network device pre-creates an underlay network by using the fabric links at the packet processor. When the management component creates and connects an abstract fabric interface on the virtual nodes, the management component forms an overlay network and attaches the overlay network to the underlay network, e.g., by programming the forwarding plane packet processor, to connect the virtual nodes. However, users of the network device, external devices, and routing protocols will not view the abstract fabric interface as an overlay interface, but as a regular Ethernet interface (e.g., a Gigabit Ethernet interface).

    NODE REPRESENTATIONS OF PACKET FORWARDING PATH ELEMENTS

    公开(公告)号:US20190222504A1

    公开(公告)日:2019-07-18

    申请号:US15870309

    申请日:2018-01-12

    CPC classification number: H04L45/02 H04L45/38 H04L45/64 H04L67/42

    Abstract: In one example, a method comprises receiving, by a forwarding manager for an internal forwarding path executed by at least one packet processor of a forwarding unit of a network device, one or more packet processing operations from a control unit of the network device; generating, by the forwarding manager based on the one or more packet processing operations, a plurality of nodes each comprising a unique token, wherein a first node of the plurality of nodes includes a token reference set to a value for the token of a second node of the plurality of nodes; configuring, by the forwarding manager based on the nodes, the forwarding path to include respective forwarding path elements for the plurality of nodes; and processing, by the packet processor, a packet received by the forwarding unit by executing the forwarding path elements.

    Scheduling traffic over aggregated bundles of links
    7.
    发明授权
    Scheduling traffic over aggregated bundles of links 有权
    通过聚合的链接捆绑计划流量

    公开(公告)号:US08937865B1

    公开(公告)日:2015-01-20

    申请号:US13629326

    申请日:2012-09-27

    Abstract: In general, techniques are described for scheduling traffic for delivery over an aggregated bundle of links. A network device comprising an interface and a data plane may implement the techniques. The interface receives packets associated with packet flows. The data plane associates each of the packet flows with a different link of an aggregated bundle of links. The data plane monitors transmission of the packets via the links to determine a representation of an amount of data sent per link. The data plane further determines that bandwidth utilization does not conform to a desired bandwidth utilization based on the determined representation of the amount of data sent per link. The data plane then re-associates the packet flows to different links of the aggregated bundle based on the determination that the bandwidth utilization does not conform to the desired bandwidth utilization.

    Abstract translation: 一般来说,描述了用于调度流量以在聚合的链路链上传送的技术。 包括接口和数据平面的网络设备可以实现这些技术。 接口接收与数据包流相关的数据包。 数据平面将每个分组流与聚合的链路链路的不同链路相关联。 数据平面通过链路监视分组的传输,以确定每个链路发送的数据量的表示。 数据平面进一步基于所确定的每个链路发送的数据量的表示来确定带宽利用率不符合期望的带宽利用率。 然后,基于带宽利用率不符合期望的带宽利用率的确定,数据平面将分组流重新关联到聚合束的不同链路。

    NODE REPRESENTATIONS OF PACKET FORWARDING PATH ELEMENTS

    公开(公告)号:US20200067813A1

    公开(公告)日:2020-02-27

    申请号:US16673704

    申请日:2019-11-04

    Abstract: In one example, a method comprises receiving, by a forwarding manager for an internal forwarding path executed by at least one packet processor of a forwarding unit of a network device, one or more packet processing operations from a control unit of the network device; generating, by the forwarding manager based on the one or more packet processing operations, a plurality of nodes each comprising a unique token, wherein a first node of the plurality of nodes includes a token reference set to a value for the token of a second node of the plurality of nodes; configuring, by the forwarding manager based on the nodes, the forwarding path to include respective forwarding path elements for the plurality of nodes; and processing, by the packet processor, a packet received by the forwarding unit by executing the forwarding path elements.

    Anti-spoofing techniques for overlay networks

    公开(公告)号:US11706196B1

    公开(公告)日:2023-07-18

    申请号:US17007830

    申请日:2020-08-31

    Abstract: A network device is configured to receive an inbound packet from a first server device via a network tunnel, the first inbound packet including an outer header, a virtual private network (VPN) label, an inner header, and a data payload, the inner header including an inner source IP address of a source virtual machine. The processors are also configured to determine a first tunnel identifier, determine, based on the inner source IP address, a second tunnel identifier associated with a second server device hosting the source virtual machine, compare the second tunnel identifier with the first tunnel identifier to determine whether the tunnel on which the first inbound packet was received is the same as a tunnel used for forwarding traffic to the source virtual machine, and drop the inbound packet when the second tunnel identifier does not match the first tunnel identifier.

    Individual network device forwarding plane reset

    公开(公告)号:US10536375B2

    公开(公告)日:2020-01-14

    申请号:US15870148

    申请日:2018-01-12

    Abstract: In one example, a method includes detecting, by a forwarding manager for an internal forwarding path executed by at least one packet processor of a forwarding unit of a network device, that the at least one packet processor of a plurality of packet processors has become available for processing packets for forwarding; in response to the detecting, ceasing, by the forwarding manager, execution of control processing operations received from a control unit of the network device; and programming, by the forwarding manager, a plurality of forwarding path elements of the at least one packet processor based on a dependencies data structure, wherein the dependencies data structure comprises one or more dependencies that each indicates, for a node of a plurality of nodes, one or more nodes that reference the node, and wherein each node of the plurality of nodes corresponds to a single forwarding path element of the plurality of forwarding path elements.

Patent Agency Ranking