Abstract: Techniques are described for routing traffic through an interconnect cloud gateway based on cloud traffic routing indicators. The interconnect cloud gateway can advertise the cloud traffic routing indicators, which can include cloud indicators and transport gateway indicators. The cloud indicators can include cloud tags utilized to route cloud traffic. The transport gateway indicators can include transport gateway flags utilized to identify private networks utilized to route the cloud traffic. The cloud traffic can routed during normal private network operation through private networks, which can be dynamically replaced by public networks due to occurrences of failures preventing the data traffic from being routed through the private networks and to cloud networks.

Abstract: A method of creating a connection between a controller and plurality of edge devices may include reading, by a data plane development kit (DPDK) of the controller, a plurality of packets having a common destination port from the plurality of edge devices, and demuxing, by the DPDK, a number of frames of the plurality of packets based on a hash of the plurality of packets, the hash altering the common destination port of the plurality of packets with a corresponding number of sham destination ports. The method may also include, with a TUNTAP interface, injecting the plurality of packets into a network kernel, and with the network kernel, delivering the plurality of packets to a respective one of a plurality of daemon instances.

Abstract: Disclosed are systems, apparatuses, methods, and computer-readable media for managing networks. According to at least one example, a method is provided for connecting to a network controller across different regions. The method includes identifying a first connection with a network orchestrator during establishment of a second connection with the network orchestrator from a network controller; establishing a sibling session that links the second connection and the first connection at a control plane; inserting a sibling data message that identifies the sibling session into control messages sent; receiving a message from the network orchestrator over the second connection, the message including an address of the network controller associated with the second connection; and transmitting the second address of the network controller over the first connection to the network orchestrator.

Abstract: Disclosed are systems, apparatuses, methods, and computer-readable media for managing networks. According to at least one example, a method is provided for connecting to a network controller across different regions. The method includes identifying a first connection with a network orchestrator during establishment of a second connection with the network orchestrator from a network controller; establishing a sibling session that links the second connection and the first connection at a control plane; inserting a sibling data message that identifies the sibling session into control messages sent; receiving a message from the network orchestrator over the second connection, the message including an address of the network controller associated with the second connection; and transmitting the second address of the network controller over the first connection to the network orchestrator.

Abstract: In one embodiment, a computer networking device calculates a first hash value for an identifier of a group of computing devices, as well as a second hash value for the identifier of the group of computing devices, with each hash value being at least in part on the identifier of the group of computing devices and an identifier of the respective interface. The computer networking device may also analyze the first hash value with respect to the second hash value and select the first interface for association with the identifier of the group of computing devices based at in part on the analyzing. The computer networking device may further store an indication that the identifier of the group of computing devices is associated with the first interface.

Abstract: In one embodiment, a method includes generating, by a first controller of a network, an overlay domain digest using a first domain digest associated with the first controller of the network and a second domain digest associated with a second controller of the network. The method also includes communicating, by the first controller, the overlay domain digest to an edge device of the network, updating, by the first controller, the overlay domain digest to generate an updated overlay domain digest, and communicating, by the first controller, the updated overlay domain digest to the edge device of the network. The method further includes detecting, by the edge device, a difference between the overlay domain digest and the updated overlay domain digest and re-establishing, by the edge device, a connection with an orchestrator of the network to determine a control plane domain change within the network.

Abstract: Disclosed are systems, apparatuses, methods, and computer-readable media for managing networks. According to at least one example, a method is provided for connecting to a network controller across different regions. The method includes identifying a first connection with a network orchestrator during establishment of a second connection with the network orchestrator from a network controller; establishing a sibling session that links the second connection and the first connection at a control plane; inserting a sibling data message that identifies the sibling session into control messages sent; receiving a message from the network orchestrator over the second connection, the message including an address of the network controller associated with the second connection; and transmitting the second address of the network controller over the first connection to the network orchestrator.

Abstract: In one embodiment, a computer networking device calculates a first hash value for an identifier of a group of computing devices, as well as a second hash value for the identifier of the group of computing devices, with each hash value being at least in part on the identifier of the group of computing devices and an identifier of the respective interface. The computer networking device may also analyze the first hash value with respect to the second hash value and select the first interface for association with the identifier of the group of computing devices based at in part on the analyzing. The computer networking device may further store an indication that the identifier of the group of computing devices is associated with the first interface.

Abstract: Disclosed are systems, apparatuses, methods, and computer-readable media for managing networks. According to at least one example, a method is provided for connecting to a network controller across different regions. The method includes identifying a first connection with a network orchestrator during establishment of a second connection with the network orchestrator from a network controller; establishing a sibling session that links the second connection and the first connection at a control plane; inserting a sibling data message that identifies the sibling session into control messages sent; receiving a message from the network orchestrator over the second connection, the message including an address of the network controller associated with the second connection; and transmitting the second address of the network controller over the first connection to the network orchestrator.

Abstract: Disclosed are systems, apparatuses, methods, and computer-readable media for managing networks. According to at least one example, a method is provided for connecting to a network controller across different regions. The method includes identifying a first connection with a network orchestrator during establishment of a second connection with the network orchestrator from a network controller; establishing a sibling session that links the second connection and the first connection at a control plane; inserting a sibling data message that identifies the sibling session into control messages sent; receiving a message from the network orchestrator over the second connection, the message including an address of the network controller associated with the second connection; and transmitting the second address of the network controller over the first connection to the network orchestrator.

Abstract: In one embodiment, a computer networking device calculates a first hash value for an identifier of a group of computing devices, as well as a second hash value for the identifier of the group of computing devices, with each hash value being at least in part on the identifier of the group of computing devices and an identifier of the respective interface. The computer networking device may also analyze the first hash value with respect to the second hash value and select the first interface for association with the identifier of the group of computing devices based at in part on the analyzing. The computer networking device may further store an indication that the identifier of the group of computing devices is associated with the first interface.

Abstract: In one embodiment, a computer networking device calculates a first hash value for an identifier of a group of computing devices, as well as a second hash value for the identifier of the group of computing devices, with each hash value being at least in part on the identifier of the group of computing devices and an identifier of the respective interface. The computer networking device may also analyze the first hash value with respect to the second hash value and select the first interface for association with the identifier of the group of computing devices based at in part on the analyzing. The computer networking device may further store an indication that the identifier of the group of computing devices is associated with the first interface.

Abstract: In one embodiment, a computer networking device calculates a first hash value for an identifier of a group of computing devices, as well as a second hash value for the identifier of the group of computing devices, with each hash value being at least in part on the identifier of the group of computing devices and an identifier of the respective interface. The computer networking device may also analyze the first hash value with respect to the second hash value and select the first interface for association with the identifier of the group of computing devices based at in part on the analyzing. The computer networking device may further store an indication that the identifier of the group of computing devices is associated with the first interface.

Abstract: The present disclosure describes several key features of an agent deployable on a service appliance: agent architecture/design, transport and channel abstractions of the agent, new message definition components, channel switching (e.g., platform independent processing), Channel state machine, platform dependent hooks (e.g., memory, timers), Service key data store, and Secure channel infrastructure. Many of these features alleviate the vendor of the service appliance from having to provide the features. The features and standardization thereof enable the system to be more robust (and increases code quality). Speed of integration is decreased while the risk of integration issues is also decreased. Updates to the agent can be deployed in a controlled and efficient manner. Furthermore, the agent can ensure security between a switch and the agent.

Abstract: Embodiments of the present disclosure enable monitoring network traffic on multiple Virtual Device Context (VDC) elements of a switch using a single NAM module. To that end, if a monitored network element supports contexts (i.e. VDC elements), a NAM module could be configured to seamlessly drive the move of the data port interfaces (at the managed device) from one context to the other. After the move of the data ports that support SPAN destination traffic flow to the target VDC is complete, these SPAN destination ports may be configured to be able to receive SPAN data traffic.

Abstract: A method is provided in one example embodiment and includes transmitting from an appliance connected to a first virtual device context (“VDC”) instantiated on a network device a request for statistics associated with selected ones of a plurality of VDCs implemented on the network device, wherein the plurality of VDCs includes the first VDC and wherein the appliance is connected to the first VDC via a management link; and receiving at the appliance the requested statistics associated with the plurality of VDCs. The method may further comprise receiving at the appliance a configuration message, wherein the configuration message identifies at least one of the selected ones of the plurality of VDCs for which statistics are to be provided, at least one type of statistic to be provided for the selected ones of the VDCs, and a polling interval at which statistics are to be collected from the selected VDCs.

Abstract: The present disclosure describes several key features of an agent deployable on a service appliance: agent architecture/design, transport and channel abstractions of the agent, new message definition components, channel switching (e.g., platform independent processing), Channel state machine, platform dependent hooks (e.g., memory, timers), Service key data store, and Secure channel infrastructure. Many of these features alleviate the vendor of the service appliance from having to provide the features. The features and standardization thereof enable the system to be more robust (and increases code quality). Speed of integration is decreased while the risk of integration issues is also decreased. Updates to the agent can be deployed in a controlled and efficient manner. Furthermore, the agent can ensure security between a switch and the agent.

Abstract: In one embodiment, a method for enabling network appliance monitoring is disclosed. The method includes establishing a remote execution channel for executing commands on a network element such as e.g. a switch. The method also includes using the remote execution channel to initiate execution of one or more commands on the network element. The method further includes receiving at least part of an output resulting from the execution of the one or more commands, wherein the received at least part of the output enables performing the network appliance monitoring.

Abstract: A method, service appliance, and non-transitory media for establishing connections to virtual device contexts (VDCs) whereby a communication channel for each of the VDCs is identified based on connection data corresponding to each of the VDCs. A service appliance receives, from each of one or more VDCs located on a switch, a message containing connection data that identifies at least one communication channel between the service appliance and a corresponding one of the one or more VDCs from which the message was received. The connection data is stored in a memory accessible to the service appliance. The service appliance identifies a communication channel for each of a plurality of VDCs based on the connection data and an identifier corresponding to each of the plurality of VDCs. The service appliance establishes a connection to each of the plurality of VDCs using the communication channel for each of the plurality of VDCs.

Abstract: A method is provided in one example embodiment and includes transmitting from an appliance connected to a first virtual device context (“VDC”) instantiated on a network device a request for statistics associated with selected ones of a plurality of VDCs implemented on the network device, wherein the plurality of VDCs includes the first VDC and wherein the appliance is connected to the first VDC via a management link; and receiving at the appliance the requested statistics associated with the plurality of VDCs. The method may further comprise receiving at the appliance a configuration message, wherein the configuration message identifies at least one of the selected ones of the plurality of VDCs for which statistics are to be provided, at least one type of statistic to be provided for the selected ones of the VDCs, and a polling interval at which statistics are to be collected from the selected VDCs.