Abstract: Systems and methods provide for route optimization using real time traffic feedback. A network management system can subscribe to receive streaming telemetry (e.g., at line rate) for traffic associated with one or more managed network entities (e.g., flows, sites, networks, network devices, endpoints, applications, etc.) selected for route optimization. The network management system can determine a set of possible routes for the traffic. The network management system can compute metrics (e.g., packet loss, bit rate, throughput, delay, availability, jitter, etc.) for a set of possible routes for the traffic based on the streaming telemetry. The network management system can determine an optimal route from the set of possible routes based on the metrics. The network management system can inject the optimal route into the one or more network devices receiving the traffic to override a native route (e.g., determined by a routing protocol executed by the network devices).

Abstract: In one embodiment, a device in a network gathers characteristics of a container application on the device. The device provides the gathered characteristics of the container application for security assessment. The device receives an indication of the security assessment based on the provided characteristics of the container application. The device controls execution of the container application based on the received indication of the security assessment.

Abstract: Systems and methods provide for route optimization using real time traffic feedback. A network management system can subscribe to receive streaming telemetry (e.g., at line rate) for traffic associated with one or more managed network entities (e.g., flows, sites, networks, network devices, endpoints, applications, etc.) selected for route optimization. The network management system can determine a set of possible routes for the traffic. The network management system can compute metrics (e.g., packet loss, bit rate, throughput, delay, availability, jitter, etc.) for a set of possible routes for the traffic based on the streaming telemetry. The network management system can determine an optimal route from the set of possible routes based on the metrics. The network management system can inject the optimal route into the one or more network devices receiving the traffic to override a native route (e.g., determined by a routing protocol executed by the network devices).

Abstract: In one embodiment, a sleep proxy device identifies one or more services offered by a first node in the network. The sleep proxy device announces the one or more identified services to a second node in the network on behalf of the first node. The sleep proxy device intercepts an attempt by the second node to use the one or more services offered by the first node. The sleep proxy device causes the first node to switch from a low power state to an awake state, based on the intercepted attempt.

Abstract: In one embodiment, a device in a network gathers characteristics of a container application on the device. The device provides the gathered characteristics of the container application for security assessment. The device receives an indication of the security assessment based on the provided characteristics of the container application. The device controls execution of the container application based on the received indication of the security assessment.

Abstract: In one embodiment, a sleep proxy device identifies one or more services offered by a first node in the network. The sleep proxy device announces the one or more identified services to a second node in the network on behalf of the first node. The sleep proxy device intercepts an attempt by the second node to use the one or more services offered by the first node. The sleep proxy device causes the first node to switch from a low power state to an awake state, based on the intercepted attempt.

Abstract: In one aspect, the invention provides a layer 2 network device that implements a fast retransmission method that causes the layer 2 network device to transmit proposal messages more frequently than defined in the RSTP standard. By transmitting proposal messages (e.g., proposal RST BPDUs) more frequently, the network device can significantly reduce the duration of a network traffic outage caused by a lost proposal message or a lost agreement message.

Abstract: A method in a Layer 2 data forwarding network element deployed at an edge of a first network between the first network and a second network. The first network supports a link management protocol to provide redundant paths and avoid layer 2 loops. The second network does not support the link management protocol. The method includes determining to direct network traffic away from the network element while the network element is not operable to forward the network traffic to the second network, and responsively directing the network traffic away from the network element. The method also includes determining to cause further network traffic to come into the network element after the network element is operable to forward the further network traffic to the second network, and responsively causing the further network traffic to come into the network element. The method may help to reduce traffic loss.

Abstract: In one aspect, the invention provides a layer 2 network device that implements a fast retransmission method that causes the layer 2 network device to transmit proposal messages more frequently than defined in the RSTP standard. By transmitting proposal messages (e.g., proposal RST BPDUs) more frequently, the network device can significantly reduce the duration of a network traffic outage caused by a lost proposal message or a lost agreement message.