Abstract: An embodiment of the present disclosure is directed a set of data centers and associated controls in which the data centers include network fabric comprises network routing devices configured to route bi-directional traffic symmetrically through insertable service, e.g., via the associated inter-site and intra-site controls, for a given set of policies or contracts using an ASIC or circuit-assisted arithmetic logic, enforcing such policies at the local network devices, to deterministically select the insertable services.

Abstract: Techniques for maintaining virtual routing and forwarding (VRF) segregation for network paths through multi-cloud fabrics that utilize shared services, e.g., application load balancers. The router of a first network of a multi-cloud fabric receives a first data packet from a source end-point group within the first network and forwards the first data packet to a service end-point group. The service end-point group may forward the first data packet to a destination end-point group of a second network of the multi-cloud fabric. The service end-point group may receive a second data packet from the destination end-point group and forward the second data packet to the router. Based on one of (i) an identity of the service end-point group or (ii) an address of the source end-point group, a VRF may be identified and the second data packet may be forwarded by the router to the source end-point group using the VRF.

Abstract: A network element includes an ingress interface, a VSP queue, and a switch fabric (SWF). The ingress interface includes a first virtual subport (VSP) and a second VSP. The first VSP is configured to receive data traffic. The VSP queue is coupled to the second VSP such that data traffic transmitted to the VSP queue is transmitted from the network element via the second VSP. The SWF is configured to receive data traffic from the first VSP, determine whether an intended recipient of the data traffic is associated with the second VSP, and hairpin the data traffic to the VSP queue when the SWF determines that the intended recipient is associated with the second VSP.

Abstract: A network element includes an ingress interface, a VSP queue, and a switch fabric (SWF). The ingress interface includes a first virtual subport (VSP) and a second VSP. The first VSP is configured to receive data traffic. The VSP queue is coupled to the second VSP such that data traffic transmitted to the VSP queue is transmitted from the network element via the second VSP. The SWF is configured to receive data traffic from the first VSP, determine whether an intended recipient of the data traffic is associated with the second VSP, and hairpin the data traffic to the VSP queue when the SWF determines that the intended recipient is associated with the second VSP.