Patents by Inventor Deven JAGASIA
Deven JAGASIA has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Patent number: 11799785Abstract: Techniques are disclosed for processing data packets by a hardware-based networking device configured to disaggregate processing of data packets from hosts of a virtualized computing environment. The hardware-based networking device includes a hardware-based component implementing a plurality of behavioral models indicative of packet processing graphs for data flows in the virtualized computing environment. A data packet having a source from or destination to an endpoint in a virtual network of the virtualized computing environment is received. Based on determining that the data packet is a first packet of a data flow to or from the endpoint, one of the behavioral models is mapped to the data flow. The packet is modified in accordance with the mapped behavioral model. A state of the data flow is stored. Subsequent data packets of the data flow are processed based on the stored state.Type: GrantFiled: May 31, 2021Date of Patent: October 24, 2023Assignee: MICROSOFT TECHNOLOGY LICENSING, LLCInventors: Gerald Roy Degrace, Deepak Bansal, Rishabh Tewari, Michal Czeslaw Zygmunt, Deven Jagasia, Lihua Yuan
-
Patent number: 11799782Abstract: Techniques are disclosed for processing data packets and implementing policies in a software defined network (SDN) of a virtual computing environment. At least two SDN appliances are configured to disaggregate enforcement of policies of the SDN from hosts of the virtual computing environment. The hosts are implemented on servers communicatively coupled to network interfaces of the SDN appliance. The servers host a plurality of virtual machines. The servers are communicatively coupled to network interfaces of at least two top-of-rack switches (ToRs). The SDN appliance comprises a plurality of smart network interface cards (sNICs) configured to implement functionality of the SDN appliance. The sNICs have a floating network interface configured to provide a virtual port connection to an endpoint within a virtual network of the virtual computing environment.Type: GrantFiled: January 10, 2023Date of Patent: October 24, 2023Assignee: MICROSOFT TECHNOLOGY LICENSING, LLCInventors: Gerald Roy Degrace, Deepak Bansal, Rishabh Tewari, Michal Czeslaw Zygmunt, Deven Jagasia
-
Patent number: 11757782Abstract: Techniques are disclosed for processing data packets and implementing policies in a software defined network (SDN) of a virtual computing environment. At least one SDN appliance is configured to disaggregate enforcement of policies of the SDN from hosts of the virtual computing environment. The servers are communicatively coupled to network interfaces of the SDN appliance. The servers host a plurality of virtual machines The SDN appliance comprises a plurality of smart network interface cards (sNICs) configured to implement functionality of the SDN appliance.Type: GrantFiled: May 31, 2021Date of Patent: September 12, 2023Assignee: MICROSOFT TECHNOLOGY LICENSING, LLCInventors: Gerald Roy Degrace, Deepak Bansal, Rishabh Tewari, Michal Czeslaw Zygmunt, Deven Jagasia
-
Publication number: 20230155942Abstract: Techniques are disclosed for processing data packets and implementing policies in a software defined network (SDN) of a virtual computing environment. At least two SDN appliances are configured to disaggregate enforcement of policies of the SDN from hosts of the virtual computing environment. The hosts are implemented on servers communicatively coupled to network interfaces of the SDN appliance. The servers host a plurality of virtual machines. The servers are communicatively coupled to network interfaces of at least two top-of-rack switches (ToRs). The SDN appliance comprises a plurality of smart network interface cards (sNICs) configured to implement functionality of the SDN appliance. The sNICs have a floating network interface configured to provide a virtual port connection to an endpoint within a virtual network of the virtual computing environment.Type: ApplicationFiled: January 10, 2023Publication date: May 18, 2023Inventors: Gerald Roy DEGRACE, Deepak BANSAL, Rishabh TEWARI, Michal Czeslaw ZYGMUNT, Deven JAGASIA
-
Patent number: 11652749Abstract: Techniques are disclosed for processing data packets and implementing policies in a software defined network (SDN) of a virtual computing environment. At least two SDN appliances are configured to disaggregate enforcement of policies of the SDN from hosts of the virtual computing environment. The hosts are implemented on servers communicatively coupled to network interfaces of the SDN appliance. The servers host a plurality of virtual machines. The servers are communicatively coupled to network interfaces of at least two top-of-rack switches (ToRs). The SDN appliance comprises a plurality of smart network interface cards (sNICs) configured to implement functionality of the SDN appliance. The sNICs have a floating network interface configured to provide a virtual port connection to an endpoint within a virtual network of the virtual computing environment.Type: GrantFiled: May 31, 2021Date of Patent: May 16, 2023Assignee: MICROSOFT TECHNOLOGY LICENSING, LLCInventors: Gerald Roy Degrace, Deepak Bansal, Rishabh Tewari, Michal Czeslaw Zygmunt, Deven Jagasia
-
Publication number: 20230072491Abstract: Distributed computing systems, devices, and associated methods of packet processing are disclosed herein. One example method includes receiving a packet having a header with a protocol field, a source address field, a source port field, a destination address field, and a destination port field individually containing a corresponding value. The method also includes extracting the values of the protocol field, the source address field, the source port field, the destination field, and the destination port field, determining whether a first match action table (“MAT”) contains an entry indexed to the extracted values, and in response to determining that the first MAT does not contain an entry indexed to the extracted values, using a subset of the extracted values to identify an entry in a second MAT.Type: ApplicationFiled: September 9, 2021Publication date: March 9, 2023Inventors: Sumit Sharad Dhoble, Rishabh Tewari, Avijit Gupta, Madhan Sivakumar, Kedar Rajendra Gujar, Manasi Deval, Pranjal Shrivastava, Deven Jagasia, Michal Czeslaw Zygmunt
-
Patent number: 11588740Abstract: Techniques are disclosed for processing data packets and implementing policies in a software defined network (SDN) of a virtual computing environment. At least two SDN appliances are configured to disaggregate enforcement of policies of the SDN from hosts of the virtual computing environment. The hosts are implemented on servers communicatively coupled to network interfaces of the SDN appliance. The servers host a plurality of virtual machines. The servers are communicatively coupled to network interfaces of at least two top-of-rack switches (ToRs). The SDN appliance comprises a plurality of smart network interface cards (sNICs) configured to implement functionality of the SDN appliance. The sNICs have a floating network interface configured to provide a virtual port connection to an endpoint within a virtual network of the virtual computing environment.Type: GrantFiled: May 31, 2021Date of Patent: February 21, 2023Assignee: MICROSOFT TECHNOLOGY LICENSING, LLCInventors: Gerald Roy Degrace, Deepak Bansal, Rishabh Tewari, Michal Czeslaw Zygmunt, Deven Jagasia
-
Publication number: 20220337526Abstract: Techniques are disclosed for processing data packets by a hardware-based networking device configured to disaggregate processing of data packets from hosts of a virtualized computing environment. The hardware-based networking device includes a hardware-based component implementing a plurality of behavioral models indicative of packet processing graphs for data flows in the virtualized computing environment. A data packet having a source from or destination to an endpoint in a virtual network of the virtualized computing environment is received. Based on determining that the data packet is a first packet of a data flow to or from the endpoint, one of the behavioral models is mapped to the data flow. The packet is modified in accordance with the mapped behavioral model. A state of the data flow is stored. Subsequent data packets of the data flow are processed based on the stored state.Type: ApplicationFiled: May 31, 2021Publication date: October 20, 2022Inventors: Gerald Roy DEGRACE, Deepak BANSAL, Rishabh TEWARI, Michal Czeslaw ZYGMUNT, Deven JAGASIA, Lihua YUAN
-
Publication number: 20220329528Abstract: Techniques are disclosed for processing data packets and implementing policies in a software defined network (SDN) of a virtual computing environment. At least two SDN appliances are configured to disaggregate enforcement of policies of the SDN from hosts of the virtual computing environment. The hosts are implemented on servers communicatively coupled to network interfaces of the SDN appliance. The servers host a plurality of virtual machines. The servers are communicatively coupled to network interfaces of at least two top-of-rack switches (ToRs). The SDN appliance comprises a plurality of smart network interface cards (sNICs) configured to implement functionality of the SDN appliance. The sNICs have a floating network interface configured to provide a virtual port connection to an endpoint within a virtual network of the virtual computing environment.Type: ApplicationFiled: May 31, 2021Publication date: October 13, 2022Inventors: Gerald Roy DEGRACE, Deepak BANSAL, Rishabh TEWARI, Michal Czeslaw ZYGMUNT, Deven JAGASIA
-
Publication number: 20220329527Abstract: Techniques are disclosed for processing data packets and implementing policies in a software defined network (SDN) of a virtual computing environment. At least one SDN appliance is configured to disaggregate enforcement of policies of the SDN from hosts of the virtual computing environment. The servers are communicatively coupled to network interfaces of the SDN appliance. The servers host a plurality of virtual machines The SDN appliance comprises a plurality of smart network interface cards (sNICs) configured to implement functionality of the SDN appliance.Type: ApplicationFiled: May 31, 2021Publication date: October 13, 2022Inventors: Gerald Roy DEGRACE, Deepak BANSAL, Rishabh TEWARI, Michal Czeslaw ZYGMUNT, Deven JAGASIA
-
Publication number: 20220329520Abstract: Techniques are disclosed for processing data packets and implementing policies in a software defined network (SDN) of a virtual computing environment. At least two SDN appliances are configured to disaggregate enforcement of policies of the SDN from hosts of the virtual computing environment. The hosts are implemented on servers communicatively coupled to network interfaces of the SDN appliance. The servers host a plurality of virtual machines. The servers are communicatively coupled to network interfaces of at least two top-of-rack switches (ToRs). The SDN appliance comprises a plurality of smart network interface cards (sNICs) configured to implement functionality of the SDN appliance. The sNICs have a floating network interface configured to provide a virtual port connection to an endpoint within a virtual network of the virtual computing environment.Type: ApplicationFiled: May 31, 2021Publication date: October 13, 2022Inventors: Gerald Roy DEGRACE, Deepak BANSAL, Rishabh TEWARI, Michal Czeslaw ZYGMUNT, Deven JAGASIA
-
Patent number: 11310241Abstract: The disclosed system implements techniques to enable a tenant of a cloud-based platform to effectively and efficiently apply a policy that copies data packets communicated to or from a virtual machine in the tenant's own virtual network. When applied, the policy mirrors data traffic associated with a workload executing on a virtual machine in the tenant's virtual network. To mirror the data traffic, a copy of a data packet is streamed to another virtual machine so that network analytics can be performed (e.g., performance analytics, security analytics, etc.). In various examples, the policy can be a role-based mirroring policy that defines a plurality of roles in association with a role-based access model that scales operations and that provides improved security for a tenant's virtual network.Type: GrantFiled: December 27, 2018Date of Patent: April 19, 2022Assignee: MICROSOFT TECHNOLOGY LICENSING, LLCInventors: Chandrasekar Srinivasan, Neha Aggarwal, Deven Jagasia, Fengfen Liu, Karthik Ananthakrishnan, Avijit Gupta, Ganesh Srinivasan, Nisheeth Srivastava, Rishabh Tewari, Michal Czeslaw Zygmunt, Harish Kumar Chandrappa, Gabriel Silva, Naveen Prabhat, Sumit Sharad Dhoble, Xinyan Zan, Maitrey Kumar, Wei Xia
-
Publication number: 20200159556Abstract: Techniques are disclosed for communicating data in a virtualized environment comprising virtual machines executing on one or more computing devices. An underlying physical destination address of a virtual machine executing on a virtual network is changed from a first physical address to a second physical address. A traffic forwarder function is executed on a virtual switch within the virtual network. The traffic forwarder function is executed during a time threshold determined based on a reprogramming time for network devices in the virtualized environment to update the underlying physical destination address. A data packet addressed to the first physical address is by the traffic forwarder function on a network external to the virtual network. A destination address of the data packet is updated from the first physical address to the second physical address. The data packet is forwarded to the updated destination address.Type: ApplicationFiled: November 21, 2018Publication date: May 21, 2020Inventors: Harish Kumar CHANDRAPPA, Vishal TANEJA, Deven JAGASIA, Milan DASGUPTA, Xinyan ZAN, Deepak BANSAL, Daniel FIRESTONE, Michal Czeslaw ZYGMUNT, Rishabh TEWARI
-
Publication number: 20200092299Abstract: The disclosed system implements techniques to enable a tenant of a cloud-based platform to effectively and efficiently apply a policy that copies data packets communicated to or from a virtual machine in the tenant's own virtual network. When applied, the policy mirrors data traffic associated with a workload executing on a virtual machine in the tenant's virtual network. To mirror the data traffic, a copy of a data packet is streamed to another virtual machine so that network analytics can be performed (e.g., performance analytics, security analytics, etc.). In various examples, the policy can be a role-based mirroring policy that defines a plurality of roles in association with a role-based access model that scales operations and that provides improved security for a tenant's virtual network.Type: ApplicationFiled: December 27, 2018Publication date: March 19, 2020Inventors: Chandrasekar SRINIVASAN, Neha AGGARWAL, Deven JAGASIA, Fengfen LIU, Karthik ANANTHAKRISHNAN, Avijit GUPTA, Ganesh SRINIVASAN, Nisheeth SRIVASTAVA, Rishabh TEWARI, Michal Czeslaw ZYGMUNT, Harish Kumar CHANDRAPPA, Gabriel SILVA, Naveen PRABHAT, Sumit Sharad DHOBLE, Xinyan ZAN, Maitrey KUMAR, Wei XIA