Abstract: A method for monitoring flow attributes at a network node comprises detecting first information indicative of transmission of a packet through the network node. The first information is discernible from information contained within the packet. The method also comprises determining that the packet is not part of an existing flow and generating, in a flow cache memory, a new flow entry corresponding to the packet. The method further comprises receiving second information associated with the transmission of the packet through the network node. The second information is contained in a forwarding information base (FIB) stored in the network node and cannot be discerned from information contained within the packet. The method also comprises writing, in the flow cache memory, at least a portion of the second information to the new flow entry corresponding to the packet.

Abstract: In some embodiments, a virtual device context (vDC) domain may be advertised to other network devices. If at least a partition of each device is determined to belong to the same vDC domain, the network interface communicating with the at least one device may be activated.

Abstract: An example method for zero touch configuration and synchronization of a service appliance in a network environment includes receiving, at an appliance port on a service appliance, an indication that a switch port on a switch changed from an inactive status to an active status, the appliance port being connected over a network to the switch port, starting a bootstrap protocol, including by receiving at the service appliance from the switch, a bootstrap message from a service executing in the switch, creating, by the service appliance, an empty port channel at the service appliance, adding, by the service appliance, the appliance port to the port channel, and associating, by the service appliance, the service to the port channel in a cache.

Abstract: An example method is provided and includes configuring a service appliance to offload network control plane and network data plane operations to a switch; establishing a communication channel between the service appliance and the switch; and communicating control messages between the service appliance and the switch over the communication channel. In more particular embodiment, the method can include communicating data messages between the service appliance and the switch over the communication channel.

Abstract: In some embodiments, a virtual device context (vDC) domain may be advertised to other network devices. If at least a partition of each device is determined to belong to the same vDC domain, the network interface communicating with the at least one device may be activated.

Abstract: Methods and apparatus are provided for virtual device context (VDC) integration for network services. VDC integration for network services generally includes mapping a virtual switch, physical ports on the network switch assigned to the virtual switch, a service node and a physical port on a service node to share a common VDC associated with a configuration of the virtual switch. In this manner, the VDC concept is extended to the service node and the network may be easily managed, with a network switch and associated service nodes configured through a single processing system on the network switch or service node.

Abstract: Methods and apparatus for providing one-arm node clustering using a port channel are provided herein. An example application node may be communicatively connected to at least one application node, and the application node may be connected to a network through a port channel. The application node may include: a link included in the port channel for accommodating the network data being communicated between the remote client and server; and a processor configured to send/receive a cluster control packet to/from the at least one application node through the link included in the port channel.

Abstract: A method for monitoring flow attributes at a network node comprises detecting first information indicative of transmission of a packet through the network node. The first information is discernible from information contained within the packet. The method also comprises determining that the packet is not part of an existing flow and generating, in a flow cache memory, a new flow entry corresponding to the packet. The method further comprises receiving second information associated with the transmission of the packet through the network node. The second information is contained in a forwarding information base (FIB) stored in the network node and cannot be discerned from information contained within the packet. The method also comprises writing, in the flow cache memory, at least a portion of the second information to the new flow entry corresponding to the packet.

Abstract: An example method includes disengaging a target node from a cluster, where the disengaging comprises: selecting an inheritor; migrating flows from the target node to the inheritor; informing a migration manager that the target node is disengaged from the cluster; and broadcasting to peer nodes of the target node that the target node is replaced by the inheritor. In particular implementations of the present disclosure, the cluster can include a first layer of a network topology including a forwarding engine that implements hash-based packet forwarding; a second layer of the network topology comprising the target node and the inheritor, where the target node and the inheritor implement flow-based packet forwarding; and a third layer including service nodes configured for packet processing in a network.

Abstract: Methods and apparatus for providing one-arm node clustering using a port channel are provided herein. An example application node may be communicatively connected to at least one application node, and the application node may be connected to a network through a port channel. The application node may include: a link included in the port channel for accommodating the network data being communicated between the remote client and server; and a processor configured to send/receive a cluster control packet to/from the at least one application node through the link included in the port channel.

Abstract: A technique is provided for implementing online mirroring of a volume in a storage area network. A first instance of the volume is instantiated at a first port of the fiber channel fabric for enabling I/O operations to be performed at the volume. One or more mirroring procedures may be performed at the volume. In at least one implementation, the first port is able to perform first I/O operations at the volume concurrently while the mirroring procedures are being performed at the first volume. In one implementation, the mirroring procedures may be implemented at a fabric switch of the storage area network. Additionally, in at least one implementation, multiple hosts may be provided with concurrent access to the volume during the mirroring operations without serializing the access to the volume.

Abstract: Techniques and a network appliance apparatus are provided herein to extend local area networks (LANs) and storage area networks (SANs) beyond a data center while converging the associated local area network and storage area network host layers. A service flow is received at a device in a network. It is determined if the service flow is associated with storage area network or with local area network traffic. In response to determining that the service flow is storage area network traffic, storage area network extension services are performed with respect to the service flow in order to extend the storage area network on behalf of a remote location. In response to determining that the service flow is local area network traffic, local area network extension services are performed with respect to the service flow in order to extend the local area network on behalf of the remote location.

Abstract: Methods and apparatuses for automating return traffic redirection to a service appliance by injecting forwarding policies in a packet-forwarding element are disclosed herein. An example method for automating return traffic redirection can include: establishing a communication channel between a service appliance and a packet-forwarding element; and transmitting an out-of-band message over the communication channel to the packet-forwarding element. The message can include a forwarding policy that requests the packet-forwarding element to forward predetermined packets to the service appliance.

Abstract: Methods and apparatuses for automating return traffic redirection to a service appliance by injecting forwarding policies in a packet-forwarding element are disclosed herein. An example method for automating return traffic redirection can include: establishing a communication channel between a service appliance and a packet-forwarding element; and transmitting an out-of-band message over the communication channel to the packet-forwarding element. The message can include a forwarding policy that requests the packet-forwarding element to forward predetermined packets to the service appliance.

Abstract: Methods and apparatus for performing SPAN for a virtual port are disclosed. Specifically, a frame is received from a first port. The frame or a copy thereof is transmitted to a second port, where the second port is identified in a header of the frame. At least one of the first port and the second port is a virtual port. The frame or a copy thereof is also transmitted to a third port, thereby enabling an analyzer coupled to the third port to analyze traffic received by the third port.

Abstract: Methods and apparatus are provided for virtual device context (VDC) integration for network services. VDC integration for network services generally includes mapping a virtual switch, physical ports on the network switch assigned to the virtual switch, a service node and a physical port on a service node to share a common VDC associated with a configuration of the virtual switch. In this manner, the VDC concept is extended to the service node and the network may be easily managed, with a network switch and associated service nodes configured through a single processing system on the network switch or service node.

Abstract: In some embodiments, a virtual device context (vDC) domain may be advertised to other network devices. If at least a partition of each device is determined to belong to the same vDC domain, the network interface communicating with the at least one device may be activated.

Abstract: The disclosed embodiments support improvements in network performance in networks such as storage area networks. This is particularly important in networks such as those implementing virtualization. These improvements, therefore, support improved mechanisms for performing processing in network devices such as switches, routers, or hosts. These improvements include various different mechanisms which may be used separately or in combination with one another. These mechanisms include methods and apparatus for processing traffic in an arbitrated loop, performing striping to support fairness and/or loop tenancy, performing configuration of network devices such as switches to enable virtualization to be performed closest to the storage device (e.g., disk), ascertaining a CPU efficiency that quantifies the impact of virtualization on a processor, and configuring or accessing a striped volume to account for metadata stored in each storage partition.

Abstract: Methods and apparatuses for automating return traffic redirection to a service appliance by injecting forwarding policies in a packet-forwarding element are disclosed herein. An example method for automating return traffic redirection can include: establishing a communication channel between a service appliance and a packet-forwarding element; and transmitting an out-of-band message over the communication channel to the packet-forwarding element. The message can include a forwarding policy that requests the packet-forwarding element to forward predetermined packets to the service appliance.

Abstract: Disclosed is a data recovery mechanism associated with a data writing process in a storage area network (SAN). In general, a data writing mechanism is provided so that a particular host can write data to a storage device in a particular SAN session. One specific example of a data writing mechanism is a data tapping mechanism that provides a copy of this data to an appliance. The data recovery mechanism allows the appliance to recover data from the particular target, for example, when the data was unsuccessfully mirrored to the appliance during the data tapping or when the appliance needs to obtain the data that was written prior to a data tapping procedure being initiated. In one embodiment, the data recovery mechanism is set up so that the appliance can recover data from the target by mimicking the particular host.