Abstract: The present disclosure describes several key features of an agent deployable on a service appliance: agent architecture/design, transport and channel abstractions of the agent, new message definition components, channel switching (e.g., platform independent processing), Channel state machine, platform dependent hooks (e.g., memory, timers), Service key data store, and Secure channel infrastructure. Many of these features alleviate the vendor of the service appliance from having to provide the features. The features and standardization thereof enable the system to be more robust (and increases code quality). Speed of integration is decreased while the risk of integration issues is also decreased. Updates to the agent can be deployed in a controlled and efficient manner. Furthermore, the agent can ensure security between a switch and the agent.

Abstract: A network apparatus for providing native load balancing within a switch, including: a first network interface operable to communicatively couple to a first network; a plurality of second network interfaces operable to communicatively couple to a second network; one or more logic elements providing a switching engine operable for providing network switching or routing; and one or more logic elements providing a load balancing engine operable for: load balancing network traffic among a plurality of service nodes; probing a first service node; determining that the first service node is unavailable; and reassigning the buckets associated with the first service node to a next available service node.

Abstract: In an example, there is disclosed a network apparatus for providing native load balancing within a switch, including: a first network interface operable to communicatively couple to a first network; a plurality of second network interfaces operable to communicatively couple to a second network; one or more logic elements forming a switching engine operable for providing network switching or routing; and one or more logic elements providing a load balancing engine operable for: load balancing network traffic among a plurality of service nodes; probing a first service node; and determining that the first service node is unavailable.

Abstract: In an example, there is disclosed a computing apparatus for providing an integrated service engine on a service appliance requiring switching or routing services, including one or more logic elements providing a service appliance engine operable for performing a service appliance function; and one or more logic elements providing a protocol engine operable for: creating a route required by the service appliance; and sending an integrated service engine message (remote route programmability and distribution (RRPD) to an upstream network member comprising instructions to realize the route on the upstream network member. There is also disclosed a method of performing the foregoing operations, and one or more computer-readable mediums having stored thereon instructions for realizing the operations.

Abstract: A method for setting up standby links on a link failure may be provided. The method comprises for a set of N link ports and M standby link ports, where N and M are integers and N is not equal to M, performing the following functions. Determining the status of a link from a first link port of the N ports. After the link from the first link port has failed, determining when a standby link port from the M standby link ports has been assigned to the first link port of the N ports. After the standby link port has been assigned, determining the health of the standby link port. After the standby link port has been assigned and is healthy, redirecting traffic from the first link port to the standby link port.

Abstract: A network apparatus for providing native load balancing within a switch, including: a first network interface operable to communicatively couple to a first network; a plurality of second network interfaces operable to communicatively couple to a second network; one or more logic elements providing a switching engine operable for providing network switching or routing; and one or more logic elements providing a load balancing engine operable for: load balancing network traffic among a plurality of service nodes; probing a first service node; determining that the first service node is unavailable; and reassigning the buckets associated with the first service node to a next available service node.

Abstract: In one embodiment a forwarding policy from a first network node coupled to a network element is received. The forwarding policy specifies an address of a second network node coupled to the network element. A plurality of ports of the network element are identified, wherein the second network node is accessible from the network element through each of the plurality of ports. The forwarding policy is applied to the plurality of ports of the network element. Network traffic received at a port of the plurality of ports from the second network node is forwarded to the first network node.

Abstract: In an example, there is disclosed a computing apparatus for providing an integrated service engine on a service appliance, including one or more logic elements providing a service appliance engine operable for performing a service appliance function; and one or more logic elements providing a protocol engine operable for: detecting that a plurality of upstream network switches are connected to the service appliance in a virtual port channel configuration; and provisioning virtual port channel (VPC) services comprising replicating a routing policy to each of the plurality of upstream network switches. There is also disclosed one or more computer-readable mediums having stored thereon instructions for providing the foregoing, and a computer-implemented method of performing the foregoing operations.

Abstract: The present disclosure describes several key features of an agent deployable on a service appliance: agent architecture/design, transport and channel abstractions of the agent, new message definition components, channel switching (e.g., platform independent processing), Channel state machine, platform dependent hooks (e.g., memory, timers), Service key data store, and Secure channel infrastructure. Many of these features alleviate the vendor of the service appliance from having to provide the features. The features and standardization thereof enable the system to be more robust (and increases code quality). Speed of integration is decreased while the risk of integration issues is also decreased. Updates to the agent can be deployed in a controlled and efficient manner. Furthermore, the agent can ensure security between a switch and the agent.

Abstract: In one embodiment, a method for enabling network appliance monitoring is disclosed. The method includes establishing a remote execution channel for executing commands on a network element such as e.g. a switch. The method also includes using the remote execution channel to initiate execution of one or more commands on the network element. The method further includes receiving at least part of an output resulting from the execution of the one or more commands, wherein the received at least part of the output enables performing the network appliance monitoring.

Abstract: A method for setting up standby links on a link failure may be provided. The method comprises for a set of N link ports and M standby link ports, where N and M are integers and N is not equal to M, performing the following functions. Determining the status of a link from a first link port of the N ports. After the link from the first link port has failed, determining when a standby link port from the M standby link ports has been assigned to the first link port of the N ports. After the standby link port has been assigned, determining the health of the standby link port. After the standby link port has been assigned and is healthy, redirecting traffic from the first link port to the standby link port.

Abstract: A method, service appliance, and non-transitory media for establishing connections to virtual device contexts (VDCs) whereby a communication channel for each of the VDCs is identified based on connection data corresponding to each of the VDCs. A service appliance receives, from each of one or more VDCs located on a switch, a message containing connection data that identifies at least one communication channel between the service appliance and a corresponding one of the one or more VDCs from which the message was received. The connection data is stored in a memory accessible to the service appliance. The service appliance identifies a communication channel for each of a plurality of VDCs based on the connection data and an identifier corresponding to each of the plurality of VDCs. The service appliance establishes a connection to each of the plurality of VDCs using the communication channel for each of the plurality of VDCs.

Abstract: In one embodiment a forwarding policy from a first network node coupled to a network element is received. The forwarding policy specifies an address of a second network node coupled to the network element. A plurality of ports of the network element are identified, wherein the second network node is accessible from the network element through each of the plurality of ports. The forwarding policy is applied to the plurality of ports of the network element. Network traffic received at a port of the plurality of ports from the second network node is forwarded to the first network node.

Abstract: In one embodiment, a method for enabling network appliance monitoring is disclosed. The method includes establishing a remote execution channel for executing commands on a network element such as e.g. a switch. The method also includes using the remote execution channel to initiate execution of one or more commands on the network element. The method further includes receiving at least part of an output resulting from the execution of the one or more commands, wherein the received at least part of the output enables performing the network appliance monitoring.