-
公开(公告)号:US20240015072A1
公开(公告)日:2024-01-11
申请号:US18370824
申请日:2023-09-20
Applicant: MICROSOFT TECHNOLOGY LICENSING, LLC
Inventor: Karthick JAYARAMAN , Ryan Andrew BECKETT , Nikolaj Skallerud BJORNER
IPC: H04L41/0895 , H04L41/0894
CPC classification number: H04L41/0895 , H04L41/0894
Abstract: Techniques of network configuration verification are disclosed herein. One example process includes, upon receiving a query to determine whether a packet from a first endpoint is reachable to a second endpoint in a virtual network, identifying a network path between the first endpoint to the second endpoint in a network graph. The network graph has nodes representing corresponding enforcement points of network policies in the virtual network and edges connecting pairs of the nodes. The example process can also include generating compound function representing conjoined individual constraints of the network policies at each of the nodes in the network graph along the identified network path, compiling the generated compound function into a Boolean formula, and solving the compiled Boolean formula to determine whether an assignment of values to packet fields of the packet exists such that all the conjoined individual constraints of the compound function can be satisfied.
-
公开(公告)号:US20230300053A1
公开(公告)日:2023-09-21
申请号:US18017654
申请日:2021-04-30
Applicant: Microsoft Technology Licensing, LLC
Inventor: Ryan Andrew BECKETT , Karthick JAYARAMAN , Neha Milind RAJE , Jitendra PADHYE , Christopher Scott JOHNSTON , Steven Jeffrey BENALOH , Nikolaj BJORNER , Andrey Aleksandrovic RYBALCHENKO , Nuno CERQUEIRA AFONSO , Nuno CLAUDINO PEREIRA LOPES , Sharad AGARWAL , Hang Kwong LEE , Aniruddha PARKHI , Maik RIECHERT
CPC classification number: H04L43/50 , H04L43/06 , H04L41/145
Abstract: A network verification system uses general-purpose programming language to create network verification tests. A test orchestrator builds a model of the network only using data from the network verification test. An optimization testing manager creates symbolic packets for verification tests using assertions based on a packet library embedded into the testing manager and the general-purpose programming language.
-
公开(公告)号:US20230018685A1
公开(公告)日:2023-01-19
申请号:US17376653
申请日:2021-07-15
Applicant: Microsoft Technology Licensing, LLC
Inventor: Sharad AGARWAL , Ryan Andrew BECKETT , Abhishek UDUPA , Rachee SINGH , Paramvir BAHL
IPC: H04L12/715 , H04L12/28 , H04L29/08 , H04L12/721 , H04L12/725
Abstract: The present application relates to communications between a partner network and a wide area network (WAN) via the Internet. Although Internet service providers may act as autonomous systems, the WAN may control routing from the partner network by advertising unicast border gateway protocol (BGP) address prefixes for a plurality of front-end devices in the WAN. An agent in the partner network measures a plurality of paths to a service within the WAN. Each of the plurality of paths is associated with one of the plurality of front-end devices and a respective unicast BGP address prefix. The WAN selects a path within the WAN for the service. The WAN exports a routing rule to the agent. The agent forwards data packets for the service to the respective BGP address prefix via the Internet. The WAN receives data packets for the service of the partner network at the selected device.
-
公开(公告)号:US20240370276A1
公开(公告)日:2024-11-07
申请号:US18333930
申请日:2023-06-13
Applicant: Microsoft Technology Licensing, LLC
Inventor: Ryan Andrew BECKETT , Siva Kesava Reddy Kakarla , Yu Yan
Abstract: The present application relates to a system, apparatus, and method of detecting anomalies in configurations of computer systems. A computer may execute a configuration analyzer to infer a configuration template that is applicable to multiple configuration files. The configuration analyzer configuration uses unsupervised learning on the configuration template to score parameters within each configuration file. The configuration analyzer indicates an anomaly for a parameter of a configuration file exceeding a threshold score. Inferring a configuration template may include generating a lowest cost template that is applicable to two of the multiple configuration files based on a cost function; and combining the lowest cost template with a subsequent configuration file of the multiple configuration files to generate an updated lowest cost template until the updated lowest cost template is applicable to all of the multiple configuration files.
-
公开(公告)号:US20230208851A1
公开(公告)日:2023-06-29
申请号:US18111115
申请日:2023-02-17
Applicant: Microsoft Technology Licensing, LLC
Inventor: Ryan Andrew BECKETT , Sharad AGARWAL , Paramvir BAHL , Rachee SINGH , Abhishek UDUPA
IPC: H04L9/40 , H04L12/28 , H04L41/0893 , H04L43/10 , H04L41/0896
CPC classification number: H04L63/107 , H04L12/2869 , H04L41/0893 , H04L63/20 , H04L43/10 , H04L63/0263 , H04L41/0896
Abstract: Described are examples for providing a system for managing configuration and policies for a virtualized wide area network (vWAN) support on a wide area network (WAN). The vWAN includes a plurality of virtual network entities associated with geographic locations including the physical computing resources of the WAN and virtual connections between the virtual network entities. The system includes a network safety component for managing configurations and policies of the vWAN on the WAN. The network safety component receives a change to a policy or configuration of the vWAN from an operator of a network connected to the vWAN. The network safety component evaluates a set of safety rules for the operator based on the change and a network state of a physical WAN underlying the vWAN. The network safety component generates an error message in response to at least one of the set of safety rules failing the evaluation.
-
公开(公告)号:US20230088681A1
公开(公告)日:2023-03-23
申请号:US17478369
申请日:2021-09-17
Applicant: MICROSOFT TECHNOLOGY LICENSING, LLC
Inventor: Rachee SINGH , Sharad AGARWAL , Ryan Andrew BECKETT , Abhishek UDUPA , Paramvir BAHL
IPC: H04L12/24
Abstract: Network capacity is provisioned in a computing environment comprising a computing service provider and an edge computing network. A cost function is applied to usage data for a number of user endpoints at the edge computing network, a number and type of workloads at the edge computing network, offload capability of the edge computing network, and resource capacities at the edge computing network. An estimated network capacity is determined, where the workloads are dynamic, and the cost function is usable to optimize the network capacity with respect to one or more criteria.
-
公开(公告)号:US20230058200A1
公开(公告)日:2023-02-23
申请号:US17405961
申请日:2021-08-18
Applicant: MICROSOFT TECHNOLOGY LICENSING, LLC
Inventor: Rachee SINGH , Sharad AGARWAL , Ryan Andrew BECKETT , Paramvir BAHL
IPC: H04L12/751 , H04L12/721 , H04L12/717 , H04L12/733 , H04L12/707
Abstract: The system disclosed herein implements an improved end-to-end network performance for data transmissions that span multiple networks operated by different organizations. The improvements are achieved as a result of exchanging routing information. For instance, the exchanged routing information can be representative of network performance factors. When different operators of different networks agree to exchange routing information, an optimal end-to-end path between two endpoint devices can be identified and selected for data transmission. This benefits both network operators as the users served by the networks are more likely to be satisfied with the user experience (e.g., faster download and upload of data).
-
公开(公告)号:US20220417102A1
公开(公告)日:2022-12-29
申请号:US17359241
申请日:2021-06-25
Applicant: Microsoft Technology Licensing, LLC
Inventor: Ryan Andrew BECKETT , Sharad AGARWAL , Paramvir BAHL , Rachee SINGH , Abhishek UDUPA
Abstract: Described are examples for providing a system for managing configuration and policies for a virtualized wide area network (vWAN) support on a wide area network (WAN). The vWAN includes a plurality of virtual network entities associated with geographic locations including the physical computing resources of the WAN and virtual connections between the virtual network entities. The system includes a network safety component for managing configurations and policies of the vWAN on the WAN. The network safety component receives a change to a policy or configuration of the vWAN from an operator of a network connected to the vWAN. The network safety component evaluates a set of safety rules for the operator based on the change and a network state of a physical WAN underlying the vWAN. The network safety component generates an error message in response to at least one of the set of safety rules failing the evaluation.
-
公开(公告)号:US20250141777A1
公开(公告)日:2025-05-01
申请号:US19011331
申请日:2025-01-06
Applicant: Microsoft Technology Licensing, LLC
Inventor: Jitendra PADHYE , Karthick JAYARAMAN , Wei BAI , Rachee SINGH , Ryan Andrew BECKETT , Sarah Elisabeth MCCLURE , Neha Milind RAJE , Steven Jeffrey BENALOH , Christopher Scott JOHNSTON
IPC: H04L43/50 , H04L45/02 , H04L45/586 , H04L45/64
Abstract: Ghost routing is a network verification technique that uses a portion of a production network itself to verify the impact of potential network changes. Ghost routing logically partitions the production network into a main network and a ghost network. The main network handles live traffic while the ghost network handles traffic generated for diagnostic purposes. The ghost network may have a network topology identical to the production network and may use the same hardware and software as the production network. An operator may implement a network configuration change on the ghost network and then use verification tools to verify that the network configuration change on the ghost network does not result in bugs. Verifying on the ghost network may not affect the main network. If the network operator verifies the network configuration change on the ghost network, the network operator may implement the network configuration change on the main network.
-
公开(公告)号:US20240039851A1
公开(公告)日:2024-02-01
申请号:US17875994
申请日:2022-07-28
Applicant: Microsoft Technology Licensing, LLC
Inventor: Rodrigo FONSECA , Sharad AGARWAL , Ryan Andrew BECKETT , Michael MARKOVITCH , Somesh CHATURMOHTA , Chuanji ZHANG , Irena ATOV
IPC: H04L47/127 , H04L43/16 , H04L43/0882 , H04L9/40
CPC classification number: H04L47/127 , H04L43/16 , H04L43/0882 , H04L63/1425 , H04L67/1093
Abstract: The present application relates to a system for ingress traffic management. The system includes a collection system within a network configured to collect traffic arrival information for peering links of the network. The system includes a training system configured to train a model based on the traffic arrival information to predict a probability of a traffic flow arriving on a peering link. The system includes a congestion mitigation system configured to predict based on the model, for traffic flows arriving on one or more peering links, other peering links to which the traffic flows would be shifted due to a condition affecting the one or more peering links. The congestion mitigation system may determine, in response to the condition, a set of prefixes to withdraw based on the other peering links to which traffic would be shifted.
-
-
-
-
-
-
-
-
-