Abstract: A method for obtaining, by a first network device of a pair of network devices, a packet, wherein the packet specifies a source address corresponding to a first client device and a destination address corresponding to a second client device, making a first determination, by the first network device and using the source address and the destination address, that the first network device is not an owner of bidirectional traffic associated with the packet, based on the first determination, transmitting, by the first network device, the packet to a second network device of the pair of network devices, making a second determination, by the second network device, that the second network device is the owner of bidirectional traffic associated with the packet, performing, in response to the second determination and by the second network device, data processing on the packet to generate a processing result.

Abstract: A network element is provided. The network element includes a tunneling endpoint having a virtual address. The tunneling endpoint is configured to receive an address resolution reply that has a destination MAC (media access control) address matching the virtual address of the tunneling endpoint and is from a network device in a first network that includes the tunneling endpoint. The tunneling endpoint is further configured to send the address resolution reply via an interconnect to a further tunneling endpoint in a further network. A method for address resolution in virtual extensible networks is also provided.

Abstract: A method and system for steering network traffic towards a service device. Specifically, the disclosed method and system entail the installation of multiple service devices around a network. Service policies are cloned across the multiple service devices, and further, each service device is assigned common virtual routing and bridging addresses. Using at least these common virtual routing and bridging addresses, intercept virtual tunnel end points (VTEPs) redirect or bridge network traffic to a service device.

Abstract: In some implementations, a method is provided. The method includes receiving, by an agent of a first container of a network device from a second container of the network device, a request for a forwarding engine of the network device to perform an operation. The first container and the second container are located on a control plane of the network device. The first container comprises a set of drivers to support multiple types of forwarding engines. The first container further comprises an operating system. The method also includes providing the request to the operating system. The operating system uses a first driver of the set of drivers to communicate with the forwarding engine. The method further includes performing the operation requested by the second container. The method further includes providing a result of the operation to the second container in response to determining that the result should be provided to the second container.

Abstract: A system and method for host discovery and tracking in a network. Specifically, the disclosed system and method entail maintaining bindings pertinent to the mapping of any host in the network, by way of their host IP address, to a respective virtual tunnel end point (VTEP). More specifically, these bindings may include: (i) a host IP address to host MAC address binding or mapping; and (ii) a host MAC address to VTEP IP address binding or mapping. Further, these bindings may be especially significant towards directing network traffic to a host over virtual layer-3 (L3) protocols.

Abstract: A network element is provided. The network element includes a tunneling endpoint having a virtual address. The tunneling endpoint is configured to receive an address resolution reply that has a destination MAC (media access control) address matching the virtual address of the tunneling endpoint and is from a network device in a first network that includes the tunneling endpoint. The tunneling endpoint is further configured to send the address resolution reply via an interconnect to a further tunneling endpoint in a further network. A method for address resolution in virtual extensible networks is also provided.

Abstract: A network element is provided. The network element includes a tunneling endpoint having a virtual address. The tunneling endpoint is configured to receive an address resolution reply that has a destination MAC (media access control) address matching the virtual address of the tunneling endpoint and is from a network device in a first network that includes the tunneling endpoint. The tunneling endpoint is further configured to send the address resolution reply via an interconnect to a further tunneling endpoint in a further network. A method for address resolution in virtual extensible networks is also provided.

Abstract: A method and system for steering network traffic towards a service device. Specifically, the disclosed method and system entail the installation of multiple service devices around a network. Service policies are cloned across the multiple service devices, and further, each service device is assigned common virtual routing and bridging addresses. Using at least these common virtual routing and bridging addresses, intercept virtual tunnel end points (VTEPs) redirect or bridge network traffic to a service device.

Abstract: A method and system for steering network traffic towards a service device. Specifically, the disclosed method and system entail the installation of multiple service devices around a network. Service policies are cloned across the multiple service devices, and further, each service device is assigned common virtual routing and bridging addresses. Using at least these common virtual routing and bridging addresses, intercept virtual tunnel end points (VTEPs) redirect or bridge network traffic to a service device.

Abstract: A system and method for host discovery and tracking in a network. Specifically, the disclosed system and method entail maintaining bindings pertinent to the mapping of any host in the network, by way of their host IP address, to a respective virtual tunnel end point (VTEP). More specifically, these bindings may include: (i) a host IP address to host MAC address binding or mapping; and (ii) a host MAC address to VTEP IP address binding or mapping. Further, these bindings may be especially significant towards directing network traffic to a host over virtual layer-3 (L3) protocols.

Abstract: In general, embodiments of the disclosure relate to a method for handling media access control (MAC) frames. The method includes receiving, by a service virtual tunnel end point (VTEP) and from a source VTEP, a first virtual layer-3 (VL3) frame comprising a dedicated virtual network identifier (VNI), decapsulating the first VL3 frame to obtain a first media access control (MAC) frame comprising a dedicated virtual local area network (VLAN) tag, replacing, in the first MAC frame, the dedicated VLAN tag with an original VLAN tag, and bridging the first MAC frame to a service device directly connected to a first network element on which the service VTEP is executing.

Abstract: A method and system for steering network traffic towards a service device. Specifically, the disclosed method and system entail the installation of multiple service devices around a network. Service policies are cloned across the multiple service devices, and further, each service device is assigned common virtual routing and bridging addresses. Using at least these common virtual routing and bridging addresses, intercept virtual tunnel end points (VTEPs) redirect or bridge network traffic to a service device.

Abstract: In general, embodiments of the disclosure relate to a method for handling media access control (MAC) frames. The method includes receiving, by a service virtual tunnel end point (VTEP) and from a source VTEP, a first virtual layer-3 (VL3) frame comprising a dedicated virtual network identifier (VNI), decapsulating the first VL3 frame to obtain a first media access control (MAC) frame comprising a dedicated virtual local area network (VLAN) tag, replacing, in the first MAC frame, the dedicated VLAN tag with an original VLAN tag, and bridging the first MAC frame to a service device directly connected to a first network element on which the service VTEP is executing.