Abstract: A network address translation (NAT) device may receive a network packet having a network address for translation. The NAT device may determine whether a translation for the network address exists on the NAT device. The NAT device may forward the network packet to a peer NAT device based on a criterion.

Abstract: A method for modifying packet data of a packet in a network device, where the method includes receiving, at an ingress pipeline of the network device, the packet, performing a lookup, in a packet translation ruleset, to compare the packet data to rule criteria of a rule in the packet translation ruleset, making a first determination that at least a portion of the packet data matches the rule criteria, and based on the first determination, adding a packet translation tag to the packet, where the packet translation tag includes a rule action, copying the packet translation tag and a portion of the packet to obtain a copied packet, modifying the copied packet as described in the rule action to obtain a modified copied packet, and forwarding the modified copied packet to an egress pipeline.

Abstract: A network with consistent hashing for packets across multi-stage lookups in the network is provided. The network members include a first network member configured to receive a packet and form a hash result from information from the packet. The first network member is further configured to look up the hash result in a first indexed table to determine a network member for routing the packet from the first network member towards a second network member of the network. The second network member is configured to receive the packet through the network and determine the hash result, and the second network member is further configured to look up the hash result in an second indexed table to determine a nexthop network member for routing the packet from the second network member, wherein the first network member and the second network member are implemented in hardware, firmware, one or more processors executing software, or combination thereof.

Abstract: A method and apparatus of a network element that processes data using a data processing pipeline with standby memory is described. In one embodiment, the network element prepares a new image for the data processing pipeline of the network element, where the data processing pipeline processes incoming network data received by the network element and the new image modifies a current set of functionalities of the data processing pipeline. The network element further writes the new image into a standby memory of the data processing pipeline, where the network element includes an active memory that programs the current set of functionalities of the data processing pipeline. In addition, the network element programs the data processing pipeline using the new image. The network element additionally processes the incoming network data received by using the data processing pipeline using modified current set of functionalities.

Abstract: A network with consistent hashing for packets across multi-stage lookups in the network is provided. The network members include a first network member configured to receive a packet and form a hash result from information from the packet. The first network member is further configured to look up the hash result in a first indexed table to determine a network member for routing the packet from the first network member towards a second network member of the network. The second network member is configured to receive the packet through the network and determine the hash result, and the second network member is further configured to look up the hash result in an second indexed table to determine a nexthop network member for routing the packet from the second network member, wherein the first network member and the second network member are implemented in hardware, firmware, one or more processors executing software, or combination thereof.

Abstract: A method for withdrawing programmed routes in network devices. The method includes receiving instructions to withdraw at least one route of a set of programmed routes, where the set of programmed routes is stored in a forwarding information base (FIB), removing the at least one route from a set of routes stored in a routing information base (RIB), notifying at least one peer network device of a set of peer network devices about the at least one route to be withdrawn, initializing a timer with a timeout value and starting the timer, before the time expires, processing a packet that uses the at least one route to be withdrawn, and after the timer expires, removing the at least one route from the FIB.

Abstract: A network with consistent hashing for packets across multi-stage lookups in the network is provided. The network members include a first network member configured to receive a packet and form a hash result from information from the packet. The first network member is further configured to look up the hash result in a first indexed table to determine a network member for routing the packet from the first network member towards a second network member of the network. The second network member is configured to receive the packet through the network and determine the hash result, and the second network member is further configured to look up the hash result in an second indexed table to determine a nexthop network member for routing the packet from the second network member, wherein the first network member and the second network member are implemented in hardware, firmware, one or more processors executing software, or combination thereof.

Abstract: A method and apparatus of a network element that processes data by a network element with a data processing pipeline is described. In an exemplary embodiment, the network element prepares a new image for the data processing pipeline of the network element, where the data processing pipeline processes network data received by the network element and the new image modifies one or more functionalities of the data processing pipeline. In addition, the network element puts the data processing pipeline into a non-forwarding mode. Furthermore, the network element writes the new image into memory of the data processing pipeline. The network element additionally puts the data processing pipeline into a forwarding mode, where the data processing pipeline processes network data received by the network element using the new image.

Abstract: A method and apparatus of a network element that processes data using a data processing pipeline with standby memory is described. In one embodiment, the network element prepares a new image for the data processing pipeline of the network element, where the data processing pipeline processes incoming network data received by the network element and the new image modifies a current set of functionalities of the data processing pipeline. The network element further writes the new image into a standby memory of the data processing pipeline, where the network element includes an active memory that programs the current set of functionalities of the data processing pipeline. In addition, the network element programs the data processing pipeline using the new image. The network element additionally processes the incoming network data received by using the data processing pipeline using modified current set of functionalities.

Abstract: A method and apparatus of a network element that processes data by a network element with a data processing pipeline is described. In an exemplary embodiment, the network element prepares a new image for the data processing pipeline of the network element, where the data processing pipeline processes network data received by the network element and the new image modifies one or more functionalities of the data processing pipeline. In addition, the network element puts the data processing pipeline into a non-forwarding mode. Furthermore, the network element writes the new image into memory of the data processing pipeline. The network element additionally puts the data processing pipeline into a forwarding mode, where the data processing pipeline processes network data received by the network element using the new image.

Abstract: A method for withdrawing programmed routes in network devices. The method includes receiving instructions to withdraw at least one route of a set of programmed routes, where the set of programmed routes is stored in a forwarding information base (FIB), removing the at least one route from a set of routes stored in a routing information base (RIB), notifying at least one peer network device of a set of peer network devices about the at least one route to be withdrawn, initializing a timer with a timeout value and starting the timer, before the time expires, processing a packet that uses the at least one route to be withdrawn, and after the timer expires, removing the at least one route from the FIB.