Abstract: A method and apparatus of a network element that converts an indication from a multicast routing protocol is described. In an exemplary embodiment, the network element receives a multicast routing protocol indication for a multicast group, wherein the multicast group is configured for a set of one or more sources. The network element additionally converts the indication to a set of one or more source specific routing protocol messages. Furthermore, the network element determines a set of one or more network elements for the set of one or more source specific routing protocol messages and sends the set of one or more source specific routing protocol messages to the set of one or more network elements.

Abstract: Described herein are various embodiments of a network element including an access control list processing module to process an access control list of the network element. In one embodiment the access control list processing module converts the access control list into set of subsections of rules, where each rule of a subsection mutually exclusive of each other rule in the subsection. The network element may then make forwarding decisions for network data using the set of subsections of rules. In one embodiment, semantics preserving transformations can be applied to rules and data to enable more efficient processing of filtering or rules.

Abstract: Embodiments for communicating packets with a first port of a network element without the first port being communicatively coupled to another device (e.g., testing equipment) are described. In one embodiment, a packet is generated by testing equipment that is communicatively coupled to a second port of the network element. The packet includes a tag that uniquely identifies the first port. The network element communicates the packet from the second port to the first port based on the tag. The network element also removes the tag from the packet. The removal can occur before the packet is received at the first port or after the packet is received at an ingress module of the first port. In response to the removal of the tag, the network element enters the first port into a loopback mode that is internal to the first port.

Abstract: A method and apparatus of a network element that processes a packet in the network element is described. In an exemplary embodiment, the network element receives a data packet that includes a destination address. The network element receives a packet, with a packet switch unit, wherein the packet was received by the network element on an ingress interface. The network element further determines if the packet is to be stored in an external queue. In addition, the network element identifies the external queue for the packet based on one or more characteristics of the packet. The network element additionally forwards the packet to a packet storage unit, wherein the packet storage unit includes storage for the external queue. Furthermore, the network element receives the packet from the packet storage unit and forwards the packet to an egress interface corresponding to the external queue.

Abstract: Described herein are various embodiments of a network element including an access control list processing module to process an access control list of the network element. In one embodiment, the access control list processing module converts the access control list into set of subsections of rules, where each rule of a subsection mutually exclusive of each other rule in the subsection. The network element may then make forwarding decisions for network data using the set of subsections of rules. In one embodiment, semantics preserving transformations can be applied to rules and data to enable more efficient processing of filtering or rules.

Abstract: A method and apparatus of a device that determines a match for a destination address using an exact match table and a longest prefix match table of a network element is described. In an exemplary embodiment, the network element receives a data packet that includes a destination address. The network element generates a key for the destination address, wherein the key represents more addresses than the destination address. The network element further performs an address lookup using the key in an exact match table. Furthermore, a match in the address lookup indicates a first transmitting interface of the network element. The network element additionally performs an address lookup using the destination address with a longest prefix match table, wherein a match in the address lookup indicates a second transmitting interface of the network element.

Abstract: A method and apparatus of a network element that installs a control plane data rule from system memory to specialized hardware memory in a network element is described. In an exemplary embodiment, the network element receives control plane data processing statistics of control plane data that is received by the network element, where the control plane data is policed using a plurality of control plane data policing rules stored in the system memory. The network element further determines that a candidate policing rule is being utilized greater than a threshold based on at least the control plane data processing statistics, where the candidate policing rule is one of the plurality of control plane data policing rules stored in the system memory. The network element additionally installs the candidate policing rule in the specialized hardware memory, where the candidate policing rule is subsequently used by the network element to police the control plane data.

Abstract: In general, the invention relates to a method and system for probing forwarding elements of network elements.

Abstract: In general, the invention relates to a method and system for probing forwarding elements of network elements.

Abstract: A method and apparatus of a device that determines a match for a destination address using an exact match table and a longest prefix match table of a network element is described. In an exemplary embodiment, the network element receives a data packet that includes a destination address. The network element generates a key for the destination address, wherein the key represents more addresses than the destination address. The network element further performs an address lookup using the key in an exact match table. Furthermore, a match in the address lookup indicates a first transmitting interface of the network element. The network element additionally performs an address lookup using the destination address with a longest prefix match table, wherein a match in the address lookup indicates a second transmitting interface of the network element.

Abstract: Methods, computer readable mediums, and systems for securing network traffic data. The method of securing network traffic data may include obtaining a network traffic data unit, that includes: a payload; forwarding information, that includes: a first forwarding portion; and a second forwarding portion that indicates a network tunnel; encryption type information; and encryption location information; analyzing a first segment of the first forwarding portion to obtain a first forwarding location; modifying the network traffic data unit, based on the encryption type information and the encryption location information, to obtain a modified network traffic data unit; and transmitting the modified network traffic data unit to the first forwarding location.

Abstract: Embodiments of the invention may relate to methods, systems, and/or non-transitory computer readable mediums for sidelining Such sidelining may include making a first determination, by a first network device, that a first network device state has degraded and making a first request, based on the first determination, to receive a first sideline token from a network controller. The network controller, in response to the first request, may make a second determination that a remaining sideline token is available. The method may also include receiving, by the first network device and based on the second determination, the remaining sideline token from the network controller and initiating, by the first network device, a graceful offlining based on receiving the remaining sideline token.

Abstract: Methods and systems for modifying network traffic data. The method of modifying network traffic may include receiving a network traffic data unit that includes an identifier, at a proxy port; based on the identifier, performing a proxy port action set to obtain a modified network traffic data unit; and transmitting the modified network traffic data unit towards an egress port.

Abstract: A method for transmitting MAC frames between remote and/or virtual machines, across network devices (i.e., switches, multilayer switches, and routers) that conventionally do not hold capacity to address MAC rewrites to any and all possible destinations within expanding data centers. More specifically, a network device retains MAC rewrite table entries corresponding to Top of Rack (ToR) switches versus to the hosts and virtual machines that reside under those ToR switches. This use of a ToR switch as an overlay routing intermediate point may reduce the number of required MAC addresses stored on a network device for the purposes of performing rewrites, thereby once again establishing the capability for packets to reach any arbitrary destination as data centers scale.

Abstract: A method and apparatus of a network element that converts an indication from a multicast routing protocol is described. In an exemplary embodiment, the network element receives a multicast routing protocol indication for a multicast group, wherein the multicast group is configured for a set of one or more sources. The network element additionally converts the indication to a set of one or more source specific routing protocol messages. Furthermore, the network element determines a set of one or more network elements for the set of one or more source specific routing protocol messages and sends the set of one or more source specific routing protocol messages to the set of one or more network elements.

Abstract: A method and apparatus of a device that determines a cause and effect of congestion in this device is described. In an exemplary embodiment, the device measures a queue group occupancy of a queue group for a port in the device, where the queue group stores a plurality of packets to be communicated through that port. In addition, the device determines if the measurement indicates a potential congestion of the queue group, where the congestion prevents a packet from being communicated within a time period. If potential congestion exists on that queue group, the device further gathers information regarding packets to be transmitted through that port. For example, the device can gather statistics packets that are stored in the queue group and/or new enqueue packets.

Abstract: A method and apparatus of a network element that processes control plane data in a network element is described. In an exemplary embodiment, the network element receives network data and determines a class of the network data. The network element additionally determines that this class of the network data is to be processed. The network element further marks the network data based on at least on an existence of an indication of whether the network element had previously processed other data in the same class as the class of the network data. Furthermore, the network element queues the network data.

Abstract: Improved utilization of connections that can be either available or blocked is provided by associating an atemporal connection state with each connection. If a connection is available, messages are transmitted on the connection normally. If a connection is blocked, the atemporal connection state is updated to reflect the changes that were made but not transmitted. In this manner, a record is kept that allows correct transmission of the information when the connection comes back up. More specifically, after a connection status changes from blocked to available, recovery messages are automatically generated from the atemporal connection state and transmitted on the connection.

Abstract: In general, the invention relates to a method and system for probing forwarding elements of network elements.

Abstract: In general, the invention relates to a method and system for probing forwarding elements of network elements.