Abstract: In one embodiment, a method includes identifying a problematic event between a first interest point and a second interest point of a network and activating, in response to identifying the problematic event between the first interest point and the second interest point, a first endpoint associated with the first interest point and a second endpoint associated with the second interest point. The method also includes receiving, from the first endpoint and the second endpoint, telemetry data associated with a problematic path between the first interest point and the second interest point. The method further includes determining the problematic path between the first interest point and the second interest point using the telemetry data received from the first endpoint and the second endpoint.

Abstract: Techniques are presented herein for providing a persistent external Internet Protocol (IP) address for extra-cluster services. One example involves initiating, in a cluster, a first pod with a label that identifies a service. The first pod is configured to provide the service to one or more network entities outside the cluster. The first pod is assigned an IP address configured for communicating outside the cluster. A mapping of the service to the IP address is stored. In response to a determination that the service has been disrupted, a second pod is initiated in the cluster with the label that identifies the service. The second pod is configured to provide the service to the one or more network entities outside the cluster. Based on the mapping and the label that identifies the service, the IP address is assigned to the second pod.

Abstract: Techniques are presented herein for providing a persistent external Internet Protocol (IP) address for extra-cluster services. One example involves initiating, in a cluster, a first pod with a label that identifies a service. The first pod is configured to provide the service to one or more network entities outside the cluster. The first pod is assigned an IP address configured for communicating outside the cluster. A mapping of the service to the IP address is stored. In response to a determination that the service has been disrupted, a second pod is initiated in the cluster with the label that identifies the service. The second pod is configured to provide the service to the one or more network entities outside the cluster. Based on the mapping and the label that identifies the service, the IP address is assigned to the second pod.

Abstract: In one embodiment, a method includes identifying a problematic event between a first interest point and a second interest point of a network and activating, in response to identifying the problematic event between the first interest point and the second interest point, a first endpoint associated with the first interest point and a second endpoint associated with the second interest point. The method also includes receiving, from the first endpoint and the second endpoint, telemetry data associated with a problematic path between the first interest point and the second interest point. The method further includes determining the problematic path between the first interest point and the second interest point using the telemetry data received from the first endpoint and the second endpoint.

Abstract: Techniques are presented herein for providing a persistent external Internet Protocol (IP) address for extra-cluster services. One example involves initiating, in a cluster, a first pod with a label that identifies a service. The first pod is configured to provide the service to one or more network entities outside the cluster. The first pod is assigned an IP address configured for communicating outside the cluster. A mapping of the service to the IP address is stored. In response to a determination that the service has been disrupted, a second pod is initiated in the cluster with the label that identifies the service. The second pod is configured to provide the service to the one or more network entities outside the cluster. Based on the mapping and the label that identifies the service, the IP address is assigned to the second pod.

Abstract: Techniques for container management and topology visualization are provided. A network topology of a data center is determined, where the network topology includes a plurality of physical servers. A plurality of containers executing in the data center is identified, and for each respective container of the plurality of containers, a respective server from the plurality of physical servers that is executing the respective container is determined. An augmented network topology is generated by correlating the network topology and the determined server executing each container, where the augmented network topology indicates relationships among the plurality of containers and physical resources in the data center.

Abstract: A source host device masks the hardware address of a hosted container from a network device to mitigate the use of resources in the network device. A virtual switch on the source host receives a frame from a hosted container. The frame includes a source hardware address of the hardware address corresponding to the hosted container. The frame also includes a source network address of the network address corresponding to the hosted container. The virtual switch replaces the source hardware address of the frame with the hardware address associated with the source host, and send the frame to the network device. The frame sent to the network device includes the host hardware address as the source hardware address and the container network address as the source network address.

Abstract: Presented herein are systems and methods to enable simultaneous interoperability with policy-aware and policy-unaware data center sites. A multi-site orchestrator (MSO) device can be configured to obtain configuration information for each of a plurality of different data center sites. The data center sites may include one or more on-premises sites and one or more off-premises sites, each of which may include one or more policy-aware sites and/or one or more policy-unaware sites. The MSO can selectively use namespace translations to create a unified fabric across the different data center sites, enabling one or more hosts and/or applications at a first of the data center sites to communicate with one or more hosts and/or applications at a second of the data center sites, regardless of the sites' respective configurations.

Abstract: A source host device masks the hardware address of a hosted container from a network device to mitigate the use of resources in the network device. A virtual switch on the source host receives a frame from a hosted container. The frame includes a source hardware address of the hardware address corresponding to the hosted container. The frame also includes a source network address of the network address corresponding to the hosted container. The virtual switch replaces the source hardware address of the frame with the hardware address associated with the source host, and send the frame to the network device. The frame sent to the network device includes the host hardware address as the source hardware address and the container network address as the source network address.

Abstract: A source host device masks the hardware address of a hosted container from a network device to mitigate the use of resources in the network device. A virtual switch on the source host receives a frame from a hosted container. The frame includes a source hardware address of the hardware address corresponding to the hosted container. The frame also includes a source network address of the network address corresponding to the hosted container. The virtual switch replaces the source hardware address of the frame with the hardware address associated with the source host, and send the frame to the network device. The frame sent to the network device includes the host hardware address as the source hardware address and the container network address as the source network address.

Abstract: A computer-implemented method including causing an application to execute on a private cloud computing network, collecting first performance metrics associated with the application as a result of the application executing on the private cloud computing network, generating a simulated workload based on the first performance metrics, causing the simulated workload to execute on one or more public cloud computing networks, collecting second performance metrics associated with the simulated workload as the simulated workload is executing on the one or more public clouds, and generating, based on the second performance metrics, a recommendation of one of the one or more public cloud computing networks to host the application is disclosed.

Abstract: A computer-implemented method including causing an application to execute on a private cloud computing network, collecting first performance metrics associated with the application as a result of the application executing on the private cloud computing network, generating a simulated workload based on the first performance metrics, causing the simulated workload to execute on one or more public cloud computing networks, collecting second performance metrics associated with the simulated workload as the simulated workload is executing on the one or more public clouds, and generating, based on the second performance metrics, a recommendation of one of the one or more public cloud computing networks to host the application is disclosed.

Abstract: Presented herein are techniques to enable seamless mobility of hosts (endpoints) between disaggregated Ethernet virtual private network (EVPN) domains that are connected with one another by an external network (e.g., a Wide-Area Network (WAN)). In one example, a leaf node in the first domain, which was previously connected to a host, receives updated routing information for the host. The leaf node performs a local host verification process to confirm that the host has moved and, in response to confirming that that the host has moved, the first leaf node sends a targeted host announcement message to the host in the second domain.

Abstract: A source host device masks the hardware address of a hosted container from a network device to mitigate the use of resources in the network device. A virtual switch on the source host receives a frame from a hosted container. The frame includes a source hardware address of the hardware address corresponding to the hosted container. The frame also includes a source network address of the network address corresponding to the hosted container. The virtual switch replaces the source hardware address of the frame with the hardware address associated with the source host, and send the frame to the network device. The frame sent to the network device includes the host hardware address as the source hardware address and the container network address as the source network address.

Abstract: A border leaf of a software defined computer network receives network traffic directed to a first endpoint from a second endpoint. The first endpoint is connected to the software defined network, and the second endpoint is external to the software defined network. If the border leaf determines that it does not have a stored network route for an active conversation between the first endpoint and the second endpoint, the border leaf determines a valid network route for the network traffic to reach the first endpoint. The border leaf stores the valid network route and forwards the network traffic to the first endpoint. The border leaf transmits a synchronization message to other border leaf nodes of the computer network. The synchronization message causes the other border leaf(s) to store the valid network route and an indication that the original border leaf is forwarding the network traffic in the active conversation.

Abstract: A border leaf of a software defined computer network receives network traffic directed to a first endpoint from a second endpoint. The first endpoint is connected to the software defined network, and the second endpoint is external to the software defined network. If the border leaf determines that it does not have a stored network route for an active conversation between the first endpoint and the second endpoint, the border leaf determines a valid network route for the network traffic to reach the first endpoint. The border leaf stores the valid network route and forwards the network traffic to the first endpoint. The border leaf transmits a synchronization message to other border leaf nodes of the computer network. The synchronization message causes the other border leaf(s) to store the valid network route and an indication that the original border leaf is forwarding the network traffic in the active conversation.

Abstract: Presented herein are techniques to enable seamless mobility of hosts (endpoints) between disaggregated Ethernet virtual private network (EVPN) domains that are connected with one another by an external network (e.g., a Wide-Area Network (WAN)). In one example, a leaf node in the first domain, which was previously connected to a host, receives updated routing information for the host. The leaf node performs a local host verification process to confirm that the host has moved and, in response to confirming that that the host has moved, the first leaf node sends a targeted host announcement message to the host in the second domain.