Agent for aggregation of telemetry flow data

    公开(公告)号:US12132623B2

    公开(公告)日:2024-10-29

    申请号:US18356302

    申请日:2023-07-21

    CPC classification number: H04L43/026

    Abstract: A method includes subscribing, by an agent, to telemetry flow data from each network device of a plurality of network devices and receiving, by the agent, a plurality of streams of telemetry flow data from the plurality of the network devices. Each of the plurality of streams corresponds to a different one of the plurality of network devices. The method further includes aggregating, by the agent, data from at least one stream of the plurality of streams of the telemetry flow data received over a period of time and, at the end of the period of time and/or when the data from the at least one stream exceeds a data threshold, sending, by the agent, the aggregated telemetry flow data to a network analyzer device.

    Role-based access control policy auto generation

    公开(公告)号:US12107859B2

    公开(公告)日:2024-10-01

    申请号:US18166893

    申请日:2023-02-09

    CPC classification number: H04L63/101 G06F21/6209 H04L63/20

    Abstract: In some examples, an access control policy controller in a computer network may receive a request to create an access control policy that permits a role to perform one or more functions in the computer network. The access control policy controller may determine one or more operations performed on one or more objects in the computer network to perform the one or more functions based at least in part on tracking performance of the one or more functions in the computer network. The access control policy controller may create the access control policy for the role that permits the role to perform the one or more operations on the one or more objects in the computer network.

    Network policy validation
    4.
    发明授权

    公开(公告)号:US12101227B2

    公开(公告)日:2024-09-24

    申请号:US18313131

    申请日:2023-05-05

    CPC classification number: H04L41/0894 H04L41/0681

    Abstract: In an example, a validation system comprises processing circuitry having access to a storage device and is configured to obtain flow records indicative of packet flows among workloads deployed to a cluster of one or more computing devices configured with a network policy, wherein each flow record of the flow records indicates a corresponding packet flow was allowed or denied by the cluster; receive an updated network policy; determine whether a corresponding packet flow for a flow record of the flow records has a discrepancy with the updated network policy; and in response to determining the corresponding packet flow for the flow record of the flow records has a discrepancy with the updated network policy, output an indication of an error.

    Adaptive flow monitoring
    6.
    发明授权

    公开(公告)号:US11902136B1

    公开(公告)日:2024-02-13

    申请号:US17664174

    申请日:2022-05-19

    CPC classification number: H04L43/0888 H04L43/026 H04L43/0894 H04L43/16

    Abstract: An example network device includes memory, a communication unit, and processing circuitry coupled to the memory and the communication unit. The processing circuitry is configured to receive first samples of flows from an interface of another network device sampled at a first sampling rate and determine a first parameter based on the first samples. The processing circuitry is configured to receive second samples of flows from the interface sampled at a second sampling rate, wherein the second sampling rate is different than the first sampling rate and determine a second parameter based on the second samples. The processing circuitry is configured to determine a third sampling rate based on the first parameter and the second parameter, control the communication unit to transmit a signal indicative of the third sampling rate to the another network device; and receive third samples of flows from the interface sampled at the third sampling rate.

    AGENT FOR AGGREGATION OF TELEMETRY FLOW DATA

    公开(公告)号:US20230362073A1

    公开(公告)日:2023-11-09

    申请号:US18356302

    申请日:2023-07-21

    CPC classification number: H04L43/026

    Abstract: A method includes subscribing, by an agent, to telemetry flow data from each network device of a plurality of network devices and receiving, by the agent, a plurality of streams of telemetry flow data from the plurality of the network devices. Each of the plurality of streams corresponds to a different one of the plurality of network devices. The method further includes aggregating, by the agent, data from at least one stream of the plurality of streams of the telemetry flow data received over a period of time and, at the end of the period of time and/or when the data from the at least one stream exceeds a data threshold, sending, by the agent, the aggregated telemetry flow data to a network analyzer device.

    AGENT FOR AGGREGATION OF TELEMETRY FLOW DATA

    公开(公告)号:US20230164041A1

    公开(公告)日:2023-05-25

    申请号:US17456105

    申请日:2021-11-22

    CPC classification number: H04L43/026

    Abstract: A method includes subscribing, by an agent, to telemetry flow data from each network device of a plurality of network devices and receiving, by the agent, a plurality of streams of telemetry flow data from the plurality of the network devices. Each of the plurality of streams corresponds to a different one of the plurality of network devices. The method further includes aggregating, by the agent, data from at least one stream of the plurality of streams of the telemetry flow data received over a period of time and, at the end of the period of time and/or when the data from the at least one stream exceeds a data threshold, sending, by the agent, the aggregated telemetry flow data to a network analyzer device.

Patent Agency Ranking