Patents by Inventor Chandramouli Balasubramanian
Chandramouli Balasubramanian has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Publication number: 20240098535Abstract: Systems and methods for managing traffic in a hybrid environment include monitoring traffic load of a local network to determine whether the traffic load exceeds or is likely to exceed a maximum traffic load, where the maximum traffic load is a traffic load for which a service can be provided by the local network, based on a license. An excess traffic load is determined if the traffic load exceeds or is likely to exceed the maximum traffic load. One or more external networks which have a capacity to provide the service to the excess traffic load are determined, to which the excess traffic load is migrated. The local network includes one or more service instances for providing the service for up to the maximum traffic load, and the service to the excess traffic load is provided by one or more additional service instances in the one or more external networks.Type: ApplicationFiled: November 30, 2023Publication date: March 21, 2024Inventors: Balaji Sundararajan, Sanjay Kumar Hooda, Venkatesh Ramachandra Gota, Chandramouli Balasubramanian, Anand Oswal
-
Patent number: 11838779Abstract: Systems and methods for managing traffic in a hybrid environment include monitoring traffic load of a local network to determine whether the traffic load exceeds or is likely to exceed a maximum traffic load, where the maximum traffic load is a traffic load for which a service can be provided by the local network, based on a license. An excess traffic load is determined if the traffic load exceeds or is likely to exceed the maximum traffic load. One or more external networks which have a capacity to provide the service to the excess traffic load are determined, to which the excess traffic load is migrated. The local network includes one or more service instances for providing the service for up to the maximum traffic load, and the service to the excess traffic load is provided by one or more additional service instances in the one or more external networks.Type: GrantFiled: December 20, 2021Date of Patent: December 5, 2023Assignee: Cisco Technology, Inc.Inventors: Balaji Sundararajan, Sanjay Kumar Hooda, Venkatesh Ramachandra Gota, Chandramouli Balasubramanian, Anand Oswal
-
Patent number: 11722410Abstract: Systems, methods, and computer-readable media for interconnecting SDWANs through segment routing. A first SDWAN and a second SDWAN of a SDWAN fabric can be identified. A segment routing domain that interconnects the first SDWAN and the second SDWAN can be formed across a WAN underlay of the SDWAN fabric. Data transmission between the first SDWAN and the second SDWAN can be controlled by performing segment routing through the segment routing domain formed between the first SDWAN and the second SDWAN.Type: GrantFiled: November 29, 2022Date of Patent: August 8, 2023Assignee: Cisco Technology, Inc.Inventors: Balaji Sundararajan, Khalil A. Jabr, Anand Oswal, Vivek Agarwal, Chandramouli Balasubramanian
-
Publication number: 20230198868Abstract: Methods, systems, and non-transitory computer-readable media are provided for deploying intent-driving cloud branches. An example method can include obtaining, by one or more controllers in a software-defined network (SDN), a branch network design template for deploying a remote branch in the SDN, wherein the branch network design template defines networking settings for a plurality of services to be provisioned at the remote branch; obtaining, by the one or more controllers, a plurality of software packages for the plurality of services to be provisioned at the remote branch; and based on the branch network design template and the plurality of software packages, provisioning, by the one or more controllers, the plurality of services at the remote branch and a network connectivity of the plurality of services.Type: ApplicationFiled: February 9, 2023Publication date: June 22, 2023Inventors: Balaji Sundararajan, Ankush Verma, Bhavana Malhotra Bodas, Kaushik Pratap Biswas, Chandramouli Balasubramanian, Anirudh Ramnath Ramakrishna, Madhuri Kolli
-
Publication number: 20230103683Abstract: Systems, methods, and computer-readable media for interconnecting SDWANs through segment routing. A first SDWAN and a second SDWAN of a SDWAN fabric can be identified. A segment routing domain that interconnects the first SDWAN and the second SDWAN can be formed across a WAN underlay of the SDWAN fabric. Data transmission between the first SDWAN and the second SDWAN can be controlled by performing segment routing through the segment routing domain formed between the first SDWAN and the second SDWAN.Type: ApplicationFiled: November 29, 2022Publication date: April 6, 2023Inventors: Balaji Sundararajan, Khalil A. Jabr, Anand Oswal, Vivek Agarwal, Chandramouli Balasubramanian
-
Publication number: 20230077361Abstract: Systems, methods, and computer-readable media for interconnecting SDWANs through segment routing. A first SDWAN and a second SDWAN of a SDWAN fabric can be identified. A segment routing domain that interconnects the first SDWAN and the second SDWAN can be formed across a WAN underlay of the SDWAN fabric. Data transmission between the first SDWAN and the second SDWAN can be controlled by performing segment routing through the segment routing domain formed between the first SDWAN and the second SDWAN.Type: ApplicationFiled: November 21, 2022Publication date: March 16, 2023Inventors: Balaji Sundararajan, Khalil A. Jabr, Anand Oswal, Vivek Agarwal, Chandramouli Balasubramanian
-
Patent number: 11588711Abstract: Methods, systems, and non-transitory computer-readable media are provided for deploying intent-driving cloud branches. An example method can include obtaining, by one or more controllers in a software-defined network (SDN), a branch network design template for deploying a remote branch in the SDN, wherein the branch network design template defines networking settings for a plurality of services to be provisioned at the remote branch; obtaining, by the one or more controllers, a plurality of software packages for the plurality of services to be provisioned at the remote branch; and based on the branch network design template and the plurality of software packages, provisioning, by the one or more controllers, the plurality of services at the remote branch and a network connectivity of the plurality of services.Type: GrantFiled: December 14, 2020Date of Patent: February 21, 2023Assignee: Cisco Technology, Inc.Inventors: Balaji Sundararajan, Ankush Verma, Bhavana Malhotra Bodas, Kaushik Pratap Biswas, Chandramouli Balasubramanian, Anirudh Ramnath Ramakrishna, Madhuri Kolli
-
Patent number: 11533257Abstract: Systems, methods, and computer-readable media for interconnecting SDWANs through segment routing. A first SDWAN and a second SDWAN of a SDWAN fabric can be identified. A segment routing domain that interconnects the first SDWAN and the second SDWAN can be formed across a WAN underlay of the SDWAN fabric. Data transmission between the first SDWAN and the second SDWAN can be controlled by performing segment routing through the segment routing domain formed between the first SDWAN and the second SDWAN.Type: GrantFiled: February 1, 2021Date of Patent: December 20, 2022Assignee: Cisco Technology, Inc.Inventors: Balaji Sundararajan, Khalil A. Jabr, Anand Oswal, Vivek Agarwal, Chandramouli Balasubramanian
-
Publication number: 20220377053Abstract: The present disclosure is directed to systems and methods for dynamic firewall discovery on a service plane. The method includes the steps of identifying a source data packet for transmission from a source machine at a source site to a destination machine at a destination site, wherein the source data packet corresponds to a request for connection between the source machine and the destination machine over a WAN, inspecting the source data packet at a first firewall associated with the source site, marking the source data packet with a marker to indicate inspection by the first firewall, transmitting the marked source data packet to the destination site, determining at the destination site that the source data packet has been inspected based on the marker, and forwarding the source data packet to the destination machine at the destination site, without inspection of the source data packet by a second firewall associated with the destination site.Type: ApplicationFiled: August 4, 2022Publication date: November 24, 2022Inventors: Balaji Sundararajan, Venkatesh Gota B R, Sireesha Yeruva, Chandramouli Balasubramanian, Anand Oswal
-
Patent number: 11418491Abstract: The present disclosure is directed to systems and methods for dynamic firewall discovery on a service plane. The method includes the steps of identifying a source data packet for transmission from a source machine at a source site to a destination machine at a destination site, wherein the source data packet corresponds to a request for connection between the source machine and the destination machine over a WAN, inspecting the source data packet at a first firewall associated with the source site, marking the source data packet with a marker to indicate inspection by the first firewall, transmitting the marked source data packet to the destination site, determining at the destination site that the source data packet has been inspected based on the marker, and forwarding the source data packet to the destination machine at the destination site, without inspection of the source data packet by a second firewall associated with the destination site.Type: GrantFiled: February 26, 2020Date of Patent: August 16, 2022Assignee: CISCO TECHNOLOGY, INC.Inventors: Balaji Sundararajan, Venkatesh Gota B R, Sireesha Yeruva, Chandramouli Balasubramanian, Anand Oswal
-
Patent number: 11381478Abstract: In one embodiment, a method includes providing a first profile to a plurality of edge routers of the SD-WAN, the plurality of edge routers operable to interface a plurality of devices to the SD-WAN. The first profile enables the plurality of edge routers to discover which devices of the plurality of devices support a first application. The method includes receiving, from one or more of the edge routers, information indicating which devices of the plurality of devices support the first application and building a first application fabric based on the information indicating which devices of the plurality of devices support the first application.Type: GrantFiled: January 4, 2021Date of Patent: July 5, 2022Assignee: CISCO TECHNOLOGY, INC.Inventors: Balaji Sundararajan, Vamsidhar Valluri, Chandramouli Balasubramanian, Anand Oswal, Ram Dular Singh
-
Publication number: 20220116806Abstract: Systems and methods for managing traffic in a hybrid environment include monitoring traffic load of a local network to determine whether the traffic load exceeds or is likely to exceed a maximum traffic load, where the maximum traffic load is a traffic load for which a service can be provided by the local network, based on a license. An excess traffic load is determined if the traffic load exceeds or is likely to exceed the maximum traffic load. One or more external networks which have a capacity to provide the service to the excess traffic load are determined, to which the excess traffic load is migrated. The local network includes one or more service instances for providing the service for up to the maximum traffic load, and the service to the excess traffic load is provided by one or more additional service instances in the one or more external networks.Type: ApplicationFiled: December 20, 2021Publication date: April 14, 2022Inventors: Balaji Sundararajan, Sanjay Kumar Hooda, Venkatesh Ramachandra Gota, Chandramouli Balasubramanian, Anand Oswal
-
Publication number: 20220052928Abstract: Methods, systems, and non-transitory computer-readable media are provided for deploying intent-driving cloud branches. An example method can include obtaining, by one or more controllers in a software-defined network (SDN), a branch network design template for deploying a remote branch in the SDN, wherein the branch network design template defines networking settings for a plurality of services to be provisioned at the remote branch; obtaining, by the one or more controllers, a plurality of software packages for the plurality of services to be provisioned at the remote branch; and based on the branch network design template and the plurality of software packages, provisioning, by the one or more controllers, the plurality of services at the remote branch and a network connectivity of the plurality of services.Type: ApplicationFiled: December 14, 2020Publication date: February 17, 2022Inventors: Balaji Sundararajan, Ankush Verma, Bhavana Malhotra Bodas, Kaushik Pratap Biswas, Chandramouli Balasubramanian, Anirudh Ramnath Ramakrishna, Madhuri Kolli
-
Patent number: 11252590Abstract: Systems and methods for managing traffic in a hybrid environment include monitoring traffic load of a local network to determine whether the traffic load exceeds or is likely to exceed a maximum traffic load, where the maximum traffic load is a traffic load for which a service can be provided by the local network, based on a license. An excess traffic load is determined if the traffic load exceeds or is likely to exceed the maximum traffic load. One or more external networks which have a capacity to provide the service to the excess traffic load are determined, to which the excess traffic load is migrated. The local network includes one or more service instances for providing the service for up to the maximum traffic load, and the service to the excess traffic load is provided by one or more additional service instances in the one or more external networks.Type: GrantFiled: November 1, 2019Date of Patent: February 15, 2022Assignee: CISCO TECHNOLOGY, INC.Inventors: Balaji Sundararajan, Sanjay Kumar Hooda, Venkatesh Ramachandra Gota, Chandramouli Balasubramanian, Anand Oswal
-
Patent number: 11108763Abstract: In one embodiment, a method by a first network apparatus includes receiving a request to access a resource from a client device associated with a user, determining that the request does not comprise a session cookie, sending an authorization request to a second network apparatus, receiving an authorization response including a resource authorization token from the second network apparatus, determining that the user is authorized to access the resource using the client device based on the received resource authorization token, establishing a first communication session with the client device by sending a message to the client device, and establishing a second communication session with a resource server that provides the resource, where the first network apparatus relays traffic between the client device and the resource server.Type: GrantFiled: January 9, 2020Date of Patent: August 31, 2021Assignee: CISCO TECHNOLOGY, INC.Inventors: Balaji Sundararajan, Vivek Agarwal, Darrin Joseph Miller, Anand Oswal, Chandramouli Balasubramanian
-
Publication number: 20210266291Abstract: The present disclosure is directed to systems and methods for dynamic firewall discovery on a service plane. The method includes the steps of identifying a source data packet for transmission from a source machine at a source site to a destination machine at a destination site, wherein the source data packet corresponds to a request for connection between the source machine and the destination machine over a WAN, inspecting the source data packet at a first firewall associated with the source site, marking the source data packet with a marker to indicate inspection by the first firewall, transmitting the marked source data packet to the destination site, determining at the destination site that the source data packet has been inspected based on the marker, and forwarding the source data packet to the destination machine at the destination site, without inspection of the source data packet by a second firewall associated with the destination site.Type: ApplicationFiled: February 26, 2020Publication date: August 26, 2021Inventors: Balaji Sundararajan, Venkatesh Gota B R, Sireesha Yeruva, Chandramouli Balasubramanian, Anand Oswal
-
Publication number: 20210218726Abstract: In one embodiment, a method by a first network apparatus includes receiving a request to access a resource from a client device associated with a user, determining that the request does not comprise a session cookie, sending an authorization request to a second network apparatus, receiving an authorization response including a resource authorization token from the second network apparatus, determining that the user is authorized to access the resource using the client device based on the received resource authorization token, establishing a first communication session with the client device by sending a message to the client device, and establishing a second communication session with a resource server that provides the resource, where the first network apparatus relays traffic between the client device and the resource server.Type: ApplicationFiled: January 9, 2020Publication date: July 15, 2021Inventors: Balaji Sundararajan, Vivek Agarwal, Darrin Joseph Miller, Anand Oswal, Chandramouli Balasubramanian
-
Publication number: 20210160179Abstract: Systems, methods, and computer-readable media for interconnecting SDWANs through segment routing. A first SDWAN and a second SDWAN of a SDWAN fabric can be identified. A segment routing domain that interconnects the first SDWAN and the second SDWAN can be formed across a WAN underlay of the SDWAN fabric. Data transmission between the first SDWAN and the second SDWAN can be controlled by performing segment routing through the segment routing domain formed between the first SDWAN and the second SDWAN.Type: ApplicationFiled: February 1, 2021Publication date: May 27, 2021Inventors: Balaji Sundararajan, Khalil A. Jabr, Anand Oswal, Vivek Agarwal, Chandramouli Balasubramanian
-
Publication number: 20210152442Abstract: In one embodiment, a method includes providing a first profile to a plurality of edge routers of the SD-WAN, the plurality of edge routers operable to interface a plurality of devices to the SD-WAN. The first profile enables the plurality of edge routers to discover which devices of the plurality of devices support a first application The method includes receiving, from one or more of the edge routers, information indicating which devices of the plurality of devices support the first application and building a first application fabric based on the information indicating which devices of the plurality of devices support the first application.Type: ApplicationFiled: January 4, 2021Publication date: May 20, 2021Inventors: Balaji Sundararajan, Vamsidhar Valluri, Chandramouli Balasubramanian, Anand Oswal, Ram Dular Singh
-
Publication number: 20210136607Abstract: Systems and methods for managing traffic in a hybrid environment include monitoring traffic load of a local network to determine whether the traffic load exceeds or is likely to exceed a maximum traffic load, where the maximum traffic load is a traffic load for which a service can be provided by the local network, based on a license. An excess traffic load is determined if the traffic load exceeds or is likely to exceed the maximum traffic load. One or more external networks which have a capacity to provide the service to the excess traffic load are determined, to which the excess traffic load is migrated. The local network includes one or more service instances for providing the service for up to the maximum traffic load, and the service to the excess traffic load is provided by one or more additional service instances in the one or more external networks.Type: ApplicationFiled: November 1, 2019Publication date: May 6, 2021Inventors: Balaji Sundararajan, Sanjay Kumar Hooda, Venkatesh Ramachandra Gota, Chandramouli Balasubramanian, Anand Oswal