Patents Assigned to Juniper Network, Inc.
  • Patent number: 9100139
    Abstract: An optical system may include: a demultiplexer to receive an optical signal and to demultiplex the optical signal into a plurality of optical channels; a detector circuit to: receive the plurality of optical channels, and identify a predetermined channel identification trace tone frequency for an optical channel of the plurality of optical channels; and a receiver to: receive the optical channel with the identified predetermined channel identification trace tone frequency from the detector circuit, and process the optical channel.
    Type: Grant
    Filed: April 30, 2012
    Date of Patent: August 4, 2015
    Assignee: Juniper Networks, Inc.
    Inventors: Theodore J. Schmidt, Roberto Marcoccia
  • Patent number: 9100323
    Abstract: In general, the invention is directed to techniques for reducing deadlocks that may arise when performing fabric replication. For example, as described herein, a network device includes packet replicators that each comprises a plurality of resource partitions. A replication data structure for a packet received by the network device includes packet replicator nodes that are arranged hierarchically to occupy one or more levels of the replication data structure. Each of the resource partitions in each of the plurality of packet replicators is associated with a different level of the replication data structure. The packet replicators replicate the packet according to the replication data structure, and each of the packet replicators handles the packet using the one of the resource partitions of the packet replicator that is associated with the level of the replication data structure occupied by the node that corresponds to that particular packet replicator.
    Type: Grant
    Filed: December 9, 2013
    Date of Patent: August 4, 2015
    Assignee: Juniper Networks, Inc.
    Inventors: Pradeep Sindhu, Jean-Marc Frailong, Sarin Thomas, Srihari Vegesna, David J. Ofelt, Chang-Hong Wu
  • Patent number: 9100328
    Abstract: Network devices provide Internet Protocol (IP) and Label Distribution Protocol (LDP) fast reroute for unicast and multicast traffic. The approach described herein for fast reroute for IP and LDP uses maximally redundant trees (MRTs). MRTs are a pair of trees where the path from any node X to the root R along the first tree and the path from the same node X to the root along the second tree share the minimum number of nodes and the minimum number of links. A network device, such as a router, computes a pair of MRTs for each destination and installs one or more MRT alternate next-hops in its forwarding plane for use in forwarding network traffic to a destination in the event a failure occurs that renders a primary next-hop unusable for reaching the destination.
    Type: Grant
    Filed: March 12, 2012
    Date of Patent: August 4, 2015
    Assignee: Juniper Networks, Inc.
    Inventor: Alia Atlas
  • Patent number: 9100342
    Abstract: A network device may receive network traffic from a first device. The network device may identify, based on the network traffic and a service level agreement, stored by the network device, that a service is to be applied to the network traffic. The network device may send the network traffic to a second device, the second device using a service plane to apply the service to the network traffic. The network device may receive the network traffic from the second device, the network traffic having the service applied by the second device; and send the network traffic, having the service applied by the second device, to a third device.
    Type: Grant
    Filed: November 29, 2012
    Date of Patent: August 4, 2015
    Assignee: Juniper Networks, Inc.
    Inventors: Satyadeva Konduru, Sameer Nanajkar, Shashidhar Patil, Sankar Ramamoorthi
  • Patent number: 9100206
    Abstract: In general techniques are described for applying differentiated services with a customer-aware network device. A network device comprising a control unit and an interface may implement the techniques. The interface receives a network packet that is associated with first and second labels. The first label uniquely identifies a Cable Modem Termination System (CMTS) within a plurality of CMTSs. The second label uniquely identifies one of a plurality of CPE devices coupled to the CMTS. The control unit determines at least one subscriber-specific service associated with the one of the plurality of CPE devices based at least in part on the first and second labels associated with the labeled network packet. The at least one subscriber-specific service comprises a service associated with the one of the plurality of CPE devices. The control unit applies the at least one subscriber-specific service to the labeled network packet received from the CMTS.
    Type: Grant
    Filed: March 30, 2012
    Date of Patent: August 4, 2015
    Assignee: Juniper Networks, Inc.
    Inventors: Colby Barth, David Ward, Maciek Konstantynowicz
  • Patent number: 9100289
    Abstract: In one example, a controller device includes one or more network interfaces communicatively coupled to one or more devices of a virtual network, and a processor configured to determine, for the virtual network, a set of two or more related processes executed by respective devices in the virtual network, receive via the network interfaces data for the set of two or more related processes, and aggregate the data for the set of two or more related processes to form aggregated data for the set of two or more related processes.
    Type: Grant
    Filed: March 15, 2013
    Date of Patent: August 4, 2015
    Assignee: Juniper Networks, Inc.
    Inventors: Anish Mehta, Megh Bhatt, Rajashekar Reddy
  • Patent number: 9100213
    Abstract: In general, techniques are described for synchronizing gateway layer two (L2) addresses of routers that cooperate to provide interconnectivity to multiple, separate L2 networks. In one example, a router includes a VPLS module that establishes a VPLS instance to provide L2 connectivity between a local L2 network for the router and a remote L2 network for the router, wherein the router is addressable by a gateway L2 address. A synchronization module receives a gateway L2 address synchronization message that includes an additional gateway L2 address for an additional router. An integrated routing and bridging (IRB) interface of the router receives a L2 PDU from the local L2 network on an attachment circuit for the VPLS instance attached to the interface card, and a forwarding unit routes a layer three (L3) packet carried by the PDU when the PDU has an L2 destination address that matches the additional gateway L2 address.
    Type: Grant
    Filed: June 8, 2011
    Date of Patent: August 4, 2015
    Assignee: Juniper Networks, Inc.
    Inventors: Ramasamy Ramanathan, Pankaj Shukla, Sunesh Rustagi
  • Patent number: 9100201
    Abstract: Techniques are described for supporting PIM (Protocol Independent Multicast) Dense Mode (PIM-DM) and PIM Bootstrap Router (PIM-BSR) between different VPN sites of an IP VPN. A system includes a plurality of customer sites connected to a service provider network by provider edge (PE) routers that provide an IP VPN. A first one of the PE routers receives multicast traffic from a first one of the customer sites, wherein the multicast traffic is PIM (Protocol Independent Multicast) Dense Mode (PIM-DM) traffic for which no PIM join messages have been received by the first PE router from the other PE routers via BGP messages. A tunnel setup module of the first PE router is configured to automatically signal a provider tunnel through the service provider network upon receiving the PIM-DM multicast traffic without maintaining multicast state data for a multicast group associated with the PIM-DM multicast traffic.
    Type: Grant
    Filed: August 11, 2009
    Date of Patent: August 4, 2015
    Assignee: Juniper Networks, Inc.
    Inventors: Swaminathan Pichumani, Rahul Aggarwal
  • Patent number: 9098349
    Abstract: A computer-implemented method includes detecting an actual workload representative of a pattern of access of a plurality of items of content; comparing the actual workload against a prescriptive workload to determine an occurrence of a substantial deviation from the prescriptive workload; and upon determining the occurrence of the substantial deviation, revising the prescriptive workload based at least in part on the actual workload. The plurality of items is stored on resources of a storage environment according to one of a plurality of resource allocation arrangements. The prescriptive workload including a plurality of categories, each category being associated with a respective one of the plurality of resource allocation arrangements.
    Type: Grant
    Filed: April 20, 2012
    Date of Patent: August 4, 2015
    Assignee: Juniper Networks, Inc.
    Inventors: Branko J. Gerovac, David C. Carver
  • Patent number: 9098664
    Abstract: A device may identify signal channels for connecting circuit blocks, where each circuit block is associated with a block implementation area corresponding to a substrate. The device may assign a channel priority to each of the signal channels based on at least one channel criteria. The device may allocate a channel implementation area, corresponding to the substrate, for each of a plurality of signal channels, based on the channel priority assigned to the signal channel and based on the block implementation areas. The device may generate an integrated circuit design comprising the channel implementation area allocated for each of the plurality of signal channels.
    Type: Grant
    Filed: February 28, 2014
    Date of Patent: August 4, 2015
    Assignee: Juniper Networks, Inc.
    Inventors: Vivek Trivedi, Khalil Siddiqui
  • Patent number: 9100364
    Abstract: Methods, computer program products and apparatus for processing data packets are described. Methods include receiving the data packet, examining the data packet, determining a single flow record associated with the packet and extracting flow instructions for two or more devices from the single flow record.
    Type: Grant
    Filed: March 31, 2014
    Date of Patent: August 4, 2015
    Assignee: Juniper Networks, Inc.
    Inventor: Nir Zuk
  • Patent number: 9094299
    Abstract: A network device is described that parses configuration data of the network device in accordance with a schema, for candidate configuration parameters. The device outputs a parameter identifier of each candidate configuration parameter, and in response, receives an indication of a selection of the candidate configuration parameters and corresponding labels. Both the selected parameters and the labels conform to a platform-independent interface for a remote procedure call for provisioning a service on any one of a plurality of different devices within a network. The device generates a device-specific configuration script for modifying the configuration data of the device in accordance with the schema of the device. The device-specific configuration script can receive, via the platform-independent interface for the remote procedure call, parameterized information associated with the selected parameters and update the configuration data based on the parameterized information.
    Type: Grant
    Filed: January 8, 2013
    Date of Patent: July 28, 2015
    Assignee: Juniper Networks, Inc.
    Inventors: Satya Narsinga Rao D.S., Sri Ram Sankar
  • Patent number: 9094308
    Abstract: Techniques are described for determining latency in a physical network that includes a number of network devices over which packets travel. A virtual network controller receives a plurality of messages from a plurality of network devices in a network, each of the messages including a packet signature comprising a hash of an invariant portion of an original packet that uniquely identifies the original packet, an identifier of one of the plurality of network devices from which the respective message was received, and a timestamp indicating a time an original packet was processed by the network device from which the respective message was received. The virtual network controller determines a latency of a physical network path in the network based on analysis of contents of the identified messages having a common packet signature.
    Type: Grant
    Filed: March 15, 2013
    Date of Patent: July 28, 2015
    Assignee: Juniper Networks, Inc.
    Inventors: Tirthankar Ghose, Harshad Bhaskar Nakil, N D Ramesh
  • Patent number: 9094372
    Abstract: Systems and methods for detecting and preventing network security breaches are described. The systems and methods present a gateway-based packet-forwarding network security solution to not only detect security breaches but also prevent them by directly dropping suspicious packets and connections. The systems and methods employ multiple techniques to detect and prevent network security breaches, including stateful signature detection, traffic signature detection, and protocol anomaly detection.
    Type: Grant
    Filed: December 30, 2013
    Date of Patent: July 28, 2015
    Assignee: Juniper Networks, Inc.
    Inventors: Nir Zuk, Kowsik Guruswamy
  • Patent number: 9092048
    Abstract: This disclosure describes techniques by which power demand requests from an electronic component are synchronized by a power manager within the electronic component with control algorithms internally used by a power supply to deliver power. Timing characteristics from an internal control signal for the power supply, such as a pulse width modulated (PWM) signal, may be provided to one or more electronic components that receive power from the power supply. A power manager within an electronic component may synchronize the timing of power change requests based on timing characteristics of the control signal. This may reduce the energy and time needed to respond to dynamic load changes required by the electronic component. The faster response time may allow larger power changes from the electronic component to be processed.
    Type: Grant
    Filed: June 15, 2012
    Date of Patent: July 28, 2015
    Assignee: Juniper Networks, Inc.
    Inventor: David Owen
  • Patent number: 9088894
    Abstract: A computer-implemented method for detecting rogue client devices connected to wireless hotspots may include maintaining at least one illegitimate authentication identifier that appears to rogue client devices to facilitate authentication with an external network via a wireless hotspot. The method may also include providing the illegitimate authentication identifier to one or more client devices connected to the wireless hotspot. The method may further include receiving an authentication request to authenticate the client device with at least one external network via the wireless hotspot. The method may additionally include determining that the authentication request includes the illegitimate authentication identifier. Finally, the method may include determining that the client device is a rogue device based at least in part on the illegitimate authentication identifier being included in the authentication request. Various other methods, systems, and computer-readable media are also disclosed.
    Type: Grant
    Filed: September 25, 2013
    Date of Patent: July 21, 2015
    Assignee: Juniper Networks, Inc.
    Inventors: Anil Kaushik, Stephen Grau, Sainath Reddy Cheruvu, Sreenivas Voruganti
  • Patent number: 9088519
    Abstract: In one example, a network device receives a packet to be forwarded according to a label switching protocol, determines a service to be performed on the packet by a service network device, sends a label request message to the service network device, wherein the label request message indicates support for labels having a particular length, wherein the particular length is larger than twenty bits (e.g., forty bits), and wherein the label request message specifies the service to be performed on the packet, receives, in response to the label request message, a label mapping message defining a label of the particular length, appends the label to the packet to form a Multi-Protocol Label Switching (MPLS)-encapsulated packet, and forwards the MPLS-encapsulated packet according to the label switching protocol.
    Type: Grant
    Filed: June 15, 2012
    Date of Patent: July 21, 2015
    Assignee: Juniper Networks, Inc.
    Inventors: James Guichard, David Ward, Jan Medved, Maciek Konstantynowicz
  • Patent number: 9089073
    Abstract: A line card includes a metal frame that includes a front section, and a bottom section connected to the front section via an angled section, where the angled section results in an opening between the line card and a second line card, when the line card is installed above the second line card in a rack, and where the opening allows directed air to enter the rack from a front direction; a printed circuit board attached to the metal frame; and a group of front panel connectors attached to the front section of the metal frame.
    Type: Grant
    Filed: March 22, 2013
    Date of Patent: July 21, 2015
    Assignee: Juniper Networks, Inc.
    Inventors: Boris Reynov, Jack Kohn, Euan F Mowat, Shreeram Siddhaye, Ben Nitzan, Mahesh Nagarajan
  • Publication number: 20150200838
    Abstract: In general, techniques are described for improving network path computation for requested paths that include a chain of service points that provide network services to traffic flows traversing the requested path through a network along the service chain. In some examples, a controller network device receives a request for network connectivity between a service entry point and a service exit point for a service chain for application to packet flows associated to the service chain. The device, for each pair of the service points in the particular order and using the active topology information, computes at least one end-to-end sub-path through the sub-network connecting the pair of the service points according to a constraint and computes, using the at least one end-to-end sub-path for each pair of the service points, a service path between the service entry point and the service exit point for the service chain.
    Type: Application
    Filed: January 10, 2014
    Publication date: July 16, 2015
    Applicant: Juniper Networks, Inc.
    Inventors: Thomas D. Nadeau, Kenneth E. Gray
  • Patent number: 9083740
    Abstract: In general, techniques are described for network traffic pattern matching using adaptive deterministic finite automata (DFA). A network device may implement the techniques to promote pattern matching. The network device comprises a control unit that stores first and second data defining first and second portions of a DFA, respectively. The first data defines first states of the DFA in an uncompressed format. The second data defines second states of the DFA in a compressed format. The network device also includes an interface that receives network packets. The control unit processes the network packets to traverse the first and second states. The control unit then compares a number of times the first and second states have been traversed. Based on the comparison, the control unit dynamically reallocates the first states of the DFA in the uncompressed format and the second states of the DFA in the compressed format.
    Type: Grant
    Filed: September 28, 2009
    Date of Patent: July 14, 2015
    Assignee: Juniper Networks, Inc.
    Inventors: Qingming Ma, Bryan Burns, Krishna Narayanaswamy, Li Zheng