Patents by Inventor Junyun Li
Junyun Li has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Patent number: 11924160Abstract: Techniques for management of traffic in a network. The techniques provide application awareness in a Network Address Translation (NAT) system. In some examples, a first traffic is received at a first switch in a network from a first application hosted behind the first switch. The first switch identifies a first resource tag associated with the application from the first traffic. Further, the first switch identifies a first rule from the first resource tag indicating that the first traffic is to be routed through an intermediate device that performs network address translation. Moreover, the first switch transmits the traffic to an intermediate device, which perform NAT to translate the source IP address of the first traffic to a second IP address. Finally, the intermediate device sends the traffic to a destination device indicated by the first traffic.Type: GrantFiled: February 22, 2022Date of Patent: March 5, 2024Assignee: CISCO TECHNOLOGY, INC.Inventors: Murukanandam Panchalingam, Umamaheswararao Karyampudi, Sudhakar Chunduru, Junyun Li, Ajay Kumar Modi
-
Publication number: 20240056386Abstract: An embodiment of the present disclosure is directed a set of data centers and associated controls in which the data centers include network fabric comprises network routing devices configured to route bi-directional traffic symmetrically through insertable service, e.g., via the associated inter-site and intra-site controls, for a given set of policies or contracts using an ASIC or circuit-assisted arithmetic logic, enforcing such policies at the local network devices, to deterministically select the insertable services.Type: ApplicationFiled: August 11, 2022Publication date: February 15, 2024Inventors: Murukanandam Panchalingam, Rajagopalan Janakiraman, Muralidhar Annabatula, Junyun Li, Hari Hara Prasad Muthulingam
-
Publication number: 20230046070Abstract: Techniques for management of traffic in a network. The techniques provide application awareness in a Network Address Translation (NAT) system. In some examples, a first traffic is received at a first switch in a network from a first application hosted behind the first switch. The first switch identifies a first resource tag associated with the application from the first traffic. Further, the first switch identifies a first rule from the first resource tag indicating that the first traffic is to be routed through an intermediate device that performs network address translation. Moreover, the first switch transmits the traffic to an intermediate device, which perform NAT to translate the source IP address of the first traffic to a second IP address. Finally, the intermediate device sends the traffic to a destination device indicated by the first traffic.Type: ApplicationFiled: February 22, 2022Publication date: February 16, 2023Inventors: Murukanandam Panchalingam, Umamaheswararao Karyampudi, Sudhakar Chunduru, Junyun Li, Ajay Kumar Modi
-
Patent number: 11553006Abstract: A distributed policy proxy system offloads network policy processing from an overloaded network element to policy proxy network elements. A network controller detects that policy resources are overloaded at a network element, and assigns a range of endpoints to each policy proxy network element. Each policy proxy network element is assigned to handle policy processing for traffic belonging to a corresponding assigned range of endpoints. The network controller provides instructions to the policy proxy network elements to enable each policy proxy network element to apply the network policy for its assigned range of endpoints. The network controller also provides instructions to the overloaded network element to redirect a packet from the first endpoint to a first policy proxy network element based on a destination of the packet.Type: GrantFiled: January 31, 2022Date of Patent: January 10, 2023Assignee: CISCO TECHNOLOGY, INC.Inventors: Murukanandam Kamalam Panchalingam, Umamaheswararao Karyampudi, Junyun Li, Muralidhar Annabatula, Ronak K. Desai, Thomas J. Edsall
-
Publication number: 20220159042Abstract: A distributed policy proxy system offloads network policy processing from an overloaded network element to policy proxy network elements. A network controller detects that policy resources are overloaded at a network element, and assigns a range of endpoints to each policy proxy network element. Each policy proxy network element is assigned to handle policy processing for traffic belonging to a corresponding assigned range of endpoints. The network controller provides instructions to the policy proxy network elements to enable each policy proxy network element to apply the network policy for its assigned range of endpoints. The network controller also provides instructions to the overloaded network element to redirect a packet from the first endpoint to a first policy proxy network element based on a destination of the packet.Type: ApplicationFiled: January 31, 2022Publication date: May 19, 2022Inventors: Murukanandam Kamalam Panchalingam, Umamaheswararao Karyampudi, Junyun Li, Muralidhar Annabatula, Ronak K. Desai, Thomas J. Edsall
-
Patent number: 11277447Abstract: A distributed policy proxy system offloads network policy processing from an overloaded network element to policy proxy network elements. A network controller detects that policy resources are overloaded at a network element, and selects a group of policy proxy network elements. The network controller assigns an exclusive range of endpoint groups to each policy proxy network element. Each policy proxy network element is assigned to handle policy processing for its assigned range of endpoint groups. The network controller provides instructions to the policy proxy network elements to enable each policy proxy network element to apply the network policy for its assigned range of endpoint groups. The network controller also provides instructions to the overloaded network element to redirect a packet from the first endpoint group to a first policy proxy network element based on a destination of the packet.Type: GrantFiled: July 17, 2020Date of Patent: March 15, 2022Assignee: CISCO TECHNOLOGY, INC.Inventors: Murukanandam Kamalam Panchalingam, Umamaheswararao Karyampudi, Junyun Li, Muralidhar Annabatula, Ronak K. Desai, Thomas J. Edsall
-
Publication number: 20220021707Abstract: A distributed policy proxy system offloads network policy processing from an overloaded network element to policy proxy network elements. A network controller detects that policy resources are overloaded at a network element, and selects a group of policy proxy network elements. The network controller assigns an exclusive range of endpoint groups to each policy proxy network element. Each policy proxy network element is assigned to handle policy processing for its assigned range of endpoint groups. The network controller provides instructions to the policy proxy network elements to enable each policy proxy network element to apply the network policy for its assigned range of endpoint groups. The network controller also provides instructions to the overloaded network element to redirect a packet from the first endpoint group to a first policy proxy network element based on a destination of the packet.Type: ApplicationFiled: July 17, 2020Publication date: January 20, 2022Inventors: Murukanandam Kamalam Panchalingam, Umamaheswararao Karyampudi, Junyun Li, Muralidhar Annabatula, Ronak K. Desai, Thomas J. Edsall
-
Patent number: 11184325Abstract: The present disclosure provides for application-centric enforcement for multi-tenant workloads with multi-site data center fabrics by: receiving, at a local switch at a first site, a packet from a first host at the first site intended for a second host located at a second site; identifying class identifiers (ID) for the hosts; determining, based on the class IDs, a security policy for transmitting data between the hosts; in response to determining that the security policy indicates that the second site exclusively manages security policies for the hosts' network: setting a policy applied indicator on the packet indicating that enforcement of the security policy is delegated from the first switch to a second switch connected to the second host; including the class IDs in the packet; and transmitting the packet to the second site.Type: GrantFiled: June 4, 2019Date of Patent: November 23, 2021Assignee: Cisco Technology, Inc.Inventors: Murukanandam K. Panchalingam, Umamaheswararao Karyampudi, Muralidhar Annabatula, Darpan R. Kathoke, Junyun Li
-
Publication number: 20200389432Abstract: The present disclosure provides for application-centric enforcement for multi-tenant workloads with multi-site data center fabrics by: receiving, at a local switch at a first site, a packet from a first host at the first site intended for a second host located at a second site; identifying class identifiers (ID) for the hosts; determining, based on the class IDs, a security policy for transmitting data between the hosts; in response to determining that the security policy indicates that the second site exclusively manages security policies for the hosts' network: setting a policy applied indicator on the packet indicating that enforcement of the security policy is delegated from the first switch to a second switch connected to the second host; including the class IDs in the packet; and transmitting the packet to the second site.Type: ApplicationFiled: June 4, 2019Publication date: December 10, 2020Inventors: Murukanandam K. PANCHALINGAM, Umamaheswararao KARYAMPUDI, Muralidhar ANNABATULA, Darpan R. KATHOKE, Junyun LI
-
Patent number: 6357912Abstract: A current sensing noise thermometer is described, in which a low noise amplifier is used to measure the noise current in a sensor resistor and the sensor resistor is connected in series with a superconducting coil, or a coil assembly including at least one superconductor. The superconductor of the coil assembly is preferably positioned inside the coil, and the superconducting transition temperature of the superconductor is used to calibrate the thermometer. Preferably, the sensor resistor is grounded to enable particularly low temperatures to be achieved.Type: GrantFiled: August 30, 1999Date of Patent: March 19, 2002Assignee: Royal Holloway & Bedford New CollegeInventor: Junyun Li