Patents Assigned to Juniper Networks, Inc.
-
Patent number: 11902303Abstract: A system configured to detect a threat activity on a network. The system including a digital device configured to detect a first order indicator of compromise on a network, detect a second order indicator of compromise on the network, generate a risk score based on correlating said first order indicator of compromise on the network with the second order indicator of compromise on said network, and generate at least one incident alert based on comparing the risk score to a threshold.Type: GrantFiled: July 29, 2022Date of Patent: February 13, 2024Assignee: Juniper Networks, Inc.Inventors: Fengmin Gong, Alexander Burt, Frank Jas
-
Patent number: 11902144Abstract: A device may receive first topology information from a first network device of a network, and may receive second topology information from a second network device of the network. The device may assign a first BGP-LS identifier to the first network device, and may associate the first topology information with the first BGP-LS identifier. The device may assign a second BGP-LS identifier to the second network device, and may associate the second topology information with the second BGP-LS identifier. The device may store the first topology information, as a first route, based on the first BGP-LS identifier, and may store the second topology information, as a second route, based on the second BGP-LS identifier. The device may select the first route or the second route as a primary route, and may utilize the primary route to control routing of traffic through the network.Type: GrantFiled: December 2, 2021Date of Patent: February 13, 2024Assignee: Juniper Networks, Inc.Inventors: Balaji Rajagopalan, Jeyananth Minto Jeganathan, Tarek Saad
-
Patent number: 11902097Abstract: An example method includes receiving, by an SD-WAN system, WAN link characterization data for a plurality of WAN links of the SD-WAN system over a time period; and for each site of a plurality of sites of the SD-WAN system, generating, by the SD-WAN system, a local policy for the site, wherein generating the local policy is based on a machine learning model trained with the WAN link characterization data for the plurality of WAN links, and providing the local policy to an SD-WAN edge device of the site.Type: GrantFiled: April 24, 2023Date of Patent: February 13, 2024Assignee: Juniper Networks, Inc.Inventors: Jisheng Wang, Ruchit Rajkumar Mehta, Kaushik Adesh Agrawal, Patrick Timmons, Patrick J. MeLampy, Michael Baj
-
Patent number: 11902133Abstract: A first device may provide, periodically throughout a test session and to neighboring devices that are in a network with the first device, a message request for measuring network performance. The neighboring devices, upon receiving the request message, are to use a relay mechanism to determine network performance indicator (NPI) values. The first device may receive, from the neighboring devices and periodically throughout the test session, a response message that includes the NPI values. The first device may determine additional NPI values that measure the network performance between the first device and the neighboring devices. The first device may determine overall NPI values based on the NPI values and the additional NPI values. The first device may identify a preferred next-hop to one of the neighboring devices based on the overall NPI values, where the preferred next-hop is part of a preferred path through the network.Type: GrantFiled: June 25, 2020Date of Patent: February 13, 2024Assignee: Juniper Networks, Inc.Inventors: Peyush Gupta, Rajneesh Kumar
-
Patent number: 11902096Abstract: A network device may detect an error associated with a packet based on error information being generated from processing the packet at a layer of a network stack. The network device may determine, based on detecting the error, metadata associated with the packet. The network device may generate telemetry data to include the metadata. The network device may provide the telemetry data to a network analyzer for policy enforcement.Type: GrantFiled: October 17, 2022Date of Patent: February 13, 2024Assignee: Juniper Networks, Inc.Inventors: Vivek R., Reji Thomas, Jimmy Jose
-
Patent number: 11901898Abstract: A disclosed apparatus for accomplishing such a task may include (1) a circuit board incorporated into a module designed for insertion into slots of computing devices, (2) at least one conductive contact disposed on the circuit board, (3) a counter circuit disposed on the circuit board and communicatively coupled to the conductive contact, wherein the counter circuit comprises (A) a signal-change detector that detects signal changes as the module is inserted into one of the slots of the computing devices and (B) a counter device that maintains a dynamic count indicative of a number of times that the module has been inserted into one of the slots of the computing devices based at least in part on the signal changes, (4) a battery electrically coupled to the counter circuit, wherein the battery powers the counter device prior to the insertion. Various other apparatuses, systems, and methods are also disclosed.Type: GrantFiled: August 4, 2022Date of Patent: February 13, 2024Assignee: Juniper Networks, Inc.Inventors: John Kenney, Bo Mi, Ryan Holmes
-
Patent number: 11902136Abstract: An example network device includes memory, a communication unit, and processing circuitry coupled to the memory and the communication unit. The processing circuitry is configured to receive first samples of flows from an interface of another network device sampled at a first sampling rate and determine a first parameter based on the first samples. The processing circuitry is configured to receive second samples of flows from the interface sampled at a second sampling rate, wherein the second sampling rate is different than the first sampling rate and determine a second parameter based on the second samples. The processing circuitry is configured to determine a third sampling rate based on the first parameter and the second parameter, control the communication unit to transmit a signal indicative of the third sampling rate to the another network device; and receive third samples of flows from the interface sampled at the third sampling rate.Type: GrantFiled: May 19, 2022Date of Patent: February 13, 2024Assignee: Juniper Networks, Inc.Inventors: Prasad Miriyala, Suresh Palguna Krishnan, SelvaKumar Sivaraj
-
Patent number: 11902256Abstract: A device may cause a Media Access Control Security (MACsec) session to be established on a first link of a link aggregation group (LAG) that includes a plurality of links with a different device. The device may cause a data structure to be updated to identify the first link as a MACsec enabled LAG link and may send traffic via the first link. The device may cause a MACsec session to be established on at least one additional link of the LAG and may cause the data structure to be updated to identify the at least one additional link as a MACsec enabled LAG link. The device may send, after causing the data structure to be updated to identify the at least one additional link as a MACsec enabled LAG link, additional traffic via the first link and the at least one additional link.Type: GrantFiled: August 12, 2021Date of Patent: February 13, 2024Assignee: Juniper Networks, Inc.Inventors: Amit Kumar Gupta, Anand Vardhan, Bavithra Gopalakrishnan
-
Patent number: 11902827Abstract: A network device may receive packets and may calculate, during a time interval, an arrival rate and a departure rate, of the packets, at one of multiple virtual output queues. The network device may calculate a current oversubscription factor based on the arrival rate and the departure rate, and may calculate a target oversubscription factor based on an average of previous oversubscription factors associated with the multiple virtual output queues. The network device may determine whether a difference exists between the target oversubscription factor and the current oversubscription factor and may calculate, when the difference exists, a scale factor based on the current oversubscription factor and the target oversubscription factor. The network device may calculate new scheduling weights based on prior scheduling weights and the scale factor, and may process packets received by the multiple virtual output queues based on the new scheduling weights.Type: GrantFiled: December 13, 2022Date of Patent: February 13, 2024Assignee: Juniper Networks, Inc.Inventors: Craig R. Frink, Anurag P. Gupta, Harshad B. Agashe, Weidong Xu
-
Patent number: 11902085Abstract: Network management techniques are described. A controller device of this disclosure manages a device group of a network. The controller device includes processing circuitry in communication with the memory, the processing circuitry being configured to receive, using a programmable diagnosis service executed by the processing circuitry, a programming input, to form, using the programmable diagnosis service, based on the programming input, a resource definition graph that models interdependencies between a plurality of resources supported by the device group, to detect, using the programmable diagnosis service, an event affecting a first resource of the plurality of resources, and to identify, using the programmable diagnosis service, based on the interdependencies modeled in the resource definition graph formed based on the programming input, a root cause event that caused the event affecting the first resource, the root cause event occurring at a second resource of the plurality of resources.Type: GrantFiled: December 15, 2022Date of Patent: February 13, 2024Assignee: Juniper Networks, Inc.Inventors: Jayanthi R, Chandrasekhar A, Javier Antich, Sri Sampath Mallipudi, Premchandar N, Harsha Lakshmikanth, Gregory A. Sidebottom, Zhifei Fang
-
Patent number: 11902146Abstract: Techniques are disclosed for identifying a maximum segment size (MSS) for a path. For example, a first router includes a routing engine and a packet forwarding engine. The routing engine is configured to identify a path maximum transmission unit (MTU) corresponding to a path between the first router and a second router; and identify a maximum packet overhead size corresponding to a session between a first client device and a second client device over the path between the first router and the second router. Additionally, the routing engine is configured to calculate, based on the path MTU and the maximum packet overhead size, a path maximum segment size (MSS), wherein the path MSS represents a maximum packet payload size corresponding to the path; and control the packet forwarding engine to output information indicative of the path MSS.Type: GrantFiled: August 31, 2021Date of Patent: February 13, 2024Assignee: Juniper Networks, Inc.Inventors: Dennis Gordon Montgomery, Anna Yungelson
-
Patent number: 11902051Abstract: Disclosed are methods for detecting misconfigured VLANs. In some embodiments, traffic on a VLAN across multiple access points is categorized. Traffic on the VLAN at a single access point is then also categorized. The categorization of the VLAN traffic at the single access point can be in response to, for example, communication errors or other conditions. The two categorizations are then compared to determine if the VLAN traffic at the AP is consistent with the VLAN traffic across a network (e.g., an enterprise network). If the VLAN traffic at the AP is generally consistent with that across the network, this may indicate that a downstream network component, such as a switch or router, is misconfigured. Thus, some embodiments programmatically reconfigure the downstream component to forward traffic for the VLAN.Type: GrantFiled: June 22, 2022Date of Patent: February 13, 2024Assignee: Juniper Networks, Inc.Inventor: Jisheng Wang
-
Patent number: 11902153Abstract: A node receives an internet protocol (IP) payload packet that includes an IPv6 transport header that has been extended with a compressed routing header (CRH). The CRH includes a list of segment identifiers (SIDs) that identify nodes that the IP payload packet is to traverse. The node determines, by referencing the list of SIDs, a next segment for the IP payload packet. The node updates a destination IP address that is included in the IPv6 transport header to a particular destination IP address of a next-hop node. The node updates a remaining segments value, included in the CRH, that identifies a number of segments left in a route of the IP payload packet. The node provides the IP payload packet to the next-hop node to allow the next-hop node to route the IP payload packet to another node in the network or to a destination device.Type: GrantFiled: December 16, 2021Date of Patent: February 13, 2024Assignee: Juniper Networks, Inc.Inventor: Ronald Bonica
-
Patent number: 11900273Abstract: Disclosed are methods and systems for determining combinations of system parameters that indicate a root cause of a system level experience deterioration (SLED). Some of the disclosed embodiments generate a decision tree from a first class of operational parameter datasets. Rules are derived from the decision tree. Filtered rule sets for feature parameters included in the system parameters are then determined. Pairs of features within a particular dataset that each satisfy their respective filtered rule sets are indicative of a root cause of the degradation, at least in some embodiments.Type: GrantFiled: July 31, 2020Date of Patent: February 13, 2024Assignee: Juniper Networks, Inc.Inventor: Ravindra Guntur
-
Patent number: 11902365Abstract: A network device, associated with peer network devices, may receive policy information for a protocol; and compute a first update message based on information regarding a route associated with the policy information. The network device may determine that an upper utilization threshold for one or more of peer queues, associated with the peer network devices, is not satisfied; and write the first update message to the peer queues based on determining that the upper utilization threshold is not satisfied. The network device may compute a second update message based on the information regarding the route; determine that the upper utilization threshold for one or more of the peer queues is satisfied; and pause writing the second update message to the peer queues based on the upper utilization threshold being satisfied. The network device may permit the peer network devices to obtain data from corresponding ones of the peer queues.Type: GrantFiled: October 4, 2022Date of Patent: February 13, 2024Assignee: Juniper Networks, Inc.Inventors: Ashutosh K. Grewal, Jaihari V. Loganathan, Kevin Wang, Sanjay Khanna
-
Patent number: 11900096Abstract: A network device obtains a data package associated with an ISSU procedure and determines, based on the data package, that a control plane of the network device is to be rebooted to facilitate performance of the ISSU procedure. The network device causes, based on determining that the control plane is to be rebooted, a plurality of applications of the network device to stop executing on the network device and a control plane state of the network device to be frozen. The network device then causes the ISSU procedure to be performed. The network causes, based on causing the ISSU procedure to be performed, the control plane state of the network device to be restored and the plurality of applications to resume executing on the network device.Type: GrantFiled: March 21, 2022Date of Patent: February 13, 2024Assignee: Juniper Networks, Inc.Inventors: Shrish Mahishi, Ramesh Rajan, Vijay Paul, Sanjeev Anandrao Mahajan, Atit Jain, Pramod Srinivasan
-
Patent number: 11895193Abstract: Techniques for resource monitoring and managed message reordering in a data center are described. In one example, a computing system comprises an ingress engine to receive a message from a network device in a data center comprising a plurality of network devices and the computing system; and in response to receiving the message from a network device in the data center, communicate the message to an appropriate collector application corresponding to the message's protocol type in compliance with at least one requirement for data stored in a message flow communicated from one or more network devices to the computing system.Type: GrantFiled: July 20, 2020Date of Patent: February 6, 2024Assignee: Juniper Networks, Inc.Inventors: Rajenkumar Patel, Harshit Naresh Chitalia, Tarun Banka, Mithun Chakaravarrti Dharmaraj, Gauresh Dilip Vanjare, Yixiao Wei
-
Patent number: 11895086Abstract: A network device may maintain, for a user device, a pool domain into which address prefixes are allocated from a partition of an address pool management (APM) device, and may estimate, based on pool domain data, an average subscriber login rate for the pool domain by the user device. The network device may estimate, based on the pool domain data, an average response latency per apportionment alarm, and may calculate a dynamic apportionment threshold based on the average subscriber login rate for the pool domain and the average response latency per apportionment alarm. The network device may utilize the dynamic apportionment threshold for the user device.Type: GrantFiled: September 7, 2022Date of Patent: February 6, 2024Assignee: Juniper Networks, Inc.Inventor: Michael D. Carr
-
Patent number: 11895116Abstract: A network device obtains information, associated with blacklisted domains, that includes blacklisted domain identifiers, and sinkhole server identifiers associated with the blacklisted domain identifiers. The network device obtains a set of rules that specify match criteria, associated with the blacklisted domains, that include source network addresses and/or destination network addresses for comparison to packet source network addresses and/or packet destination network addresses associated with incoming packets. The set of rules specify actions to perform based on a result of comparing the match criteria and the packet source network addresses and/or the packet destination network addresses for the incoming packets.Type: GrantFiled: January 13, 2021Date of Patent: February 6, 2024Assignee: Juniper Networks, Inc.Inventors: Dilip H. Sanghavi, Rishi K. Mutnuru
-
Patent number: 11895228Abstract: A network device may establish a media access control security (MACsec) key agreement (MKA) session with another network device via a MACsec communication link; establish a fast heartbeat session via the MACsec communication link, between a first packet processing engine of the network device and a second packet processing engine of the other network device, where the fast heartbeat session is to permit the first packet processing engine and the second packet processing engine to exchange fast heartbeat messages via the fast heartbeat session and the MACsec communication link; place an MKA protocol of the MKA session in a pause state until the first packet processing engine detects a rekey event; determine that a key for the MKA session is to be regenerated based on detection of the rekey event; and perform an action based on the rekey event for the MKA session.Type: GrantFiled: November 22, 2022Date of Patent: February 6, 2024Assignee: Juniper Networks, Inc.Inventors: Baba Syed Mazaz Hussain, Sachin Mutalik Desai