Abstract: A method for distributing an optimal path to a router using a route reflector, that includes obtaining, by the route reflector, a path location bitmask associated with the optimal path, obtaining a router location bitmask associated with the router, performing a bitwise AND operation on the path location bitmask and the router location bitmask to obtain a result bitmask, identifying a nonzero bit in the result bitmask, and in response to identifying the nonzero bit, sending the optimal path to the router.

Abstract: A networking system may facilitate Border Gateway Protocol (BGP) switchover between an active BGP process and a standby BGP process. A method is provided that includes using the active BGP process to establish a first communication session with a peer and a second communication session with the standby BGP process and using an active kernel associated with the active BGP process to receive a packet from the peer, to transmit the packet to the standby BGP process, and to receive the packet returning from the standby BGP process. The active kernel can optionally be used to determine whether any packets are in-flight to and from the standby BGP process.

Abstract: A networking system may facilitate Border Gateway Protocol (BGP) switchover between an active BGP process and a standby BGP process. A method is provided that includes using the active BGP process to establish a communication session with a peer, to add the peer to an outbound update group listing one or more peers sharing the same outbound policy, and to add a dummy peer corresponding to the peer to the outbound update group in response to receiving a synchronization request from the standby BGP process. The active BGP process can advertise a collection of routes to the standby BGP process in accordance with the dummy peer being listed in the outbound update group. The active BGP process can then perform outbound BGP message hairpinning operations with the standby BGP process.

Abstract: A networking system may perform border gateway protocol (BGP) switchover. In particular, the networking system may execute an active BGP process based on a set of received input states and execute a standby BGP process based on the set of received input states independently of the execution of the active BGP process based on the set of received input states.

Abstract: A method for distributing an optimal path to a router using a route reflector, that includes obtaining, by the route reflector, a path location bitmask associated with the optimal path, obtaining a router location bitmask associated with the router, performing a bitwise AND operation on the path location bitmask and the router location bitmask to obtain a result bitmask, identifying a nonzero bit in the result bitmask, and in response to identifying the nonzero bit, sending the optimal path to the router.

Abstract: Systems and methods are provided herein for a mechanism for faster convergence of network traffic after a network device's link is interrupted by leveraging the withdrawal of the ethernet virtual private network (EVPN) auto discovery (AD) route. This may be accomplished by a first device checking an ethernet segment identifier (ESI) status flag before generating an entry in the first device's forwarding table, where the entry is based on an IP route for a host received by a second network device. In response to receiving a withdrawal of an EVPN AD route from the second device, the first device may update the ESI status flag to indicate that the host on the ethernet segment (ES) is reachable only via the third device and update the entry that was based on the IP route for the host received by the second network device to prevent sending traffic to the host via the second device.

Abstract: Techniques disclosed herein provide a method for configuring a network in DCI environment. An EVPN session is established between a first gateway device of a first network, and a second gateway device of a second network that are linked by L2 DCI link. An ESI is allocated for that EVPN session. A label is created for every combination of the ESI and media access control virtual routing and forwarding table (MAC VRF) that is locally configured at the first gateway device. An EVPN path is received for a host in the first network that is associated with MAC VRF. The path in imported the first MAC VRF by the first gateway device and exported via the inter-DCI EVPN session. The second gateway device identifies a label for MAC and re-exports it in local EVPN session with the identified label.

Abstract: Techniques disclosed herein provide a method for configuring a network in DCI environment. An EVPN session is established between a first gateway device of a first network, and a second gateway device of a second network that are linked by L2 DCI link. An ESI is allocated for that EVPN session. A label is created for every combination of the ESI and media access control virtual routing and forwarding table (MAC VRF) that is locally configured at the first gateway device. An EVPN path is received for a host in the first network that is associated with MAC VRF. The path in imported the first MAC VRF by the first gateway device and exported via the inter-DCI EVPN session. The second gateway device identifies a label for MAC and re-exports it in local EVPN session with the identified label.

Abstract: Systems and methods are provided herein for a mechanism for faster convergence of network traffic after a network device's link is interrupted by leveraging the withdrawal of the ethernet virtual private network (EVPN) auto discovery (AD) route. This may be accomplished by a first device checking an ethernet segment identifier (ESI) status flag before generating an entry in the first device's forwarding table, where the entry is based on an IP route for a host received by a second network device. In response to receiving a withdrawal of an EVPN AD route from the second device, the first device may update the ESI status flag to indicate that the host on the ethernet segment (ES) is reachable only via the third device and update the entry that was based on the IP route for the host received by the second network device to prevent sending traffic to the host via the second device.

Abstract: Techniques described herein relate to a method for generating a table for forwarding traffic between networks that are implemented using different types of control planes. In one or more embodiments, the method comprises: receiving a first route advertisement for a first network; extracting a first next hop identifier-multiprotocol label switching (MPLS) label combination; receiving another route advertisement for the first network; and in response to determining that a local label has not been assigned to the first next hop identifier-MPLS label combination: generating a first entry and adding the first entry to a forwarding table of the gateway device.

Abstract: Virtual network identifiers are extracted from route advertisements. A table associates virtual network identifiers with provider edge devices. When a virtual network identifier extracted from a route advertisement matches a virtual network identifier in the table, the route advertisement is propagated to the provider edge devices associated with that virtual network identifier in the table. The route advertisement is not propagated to provider edge devices not associated with that virtual network identifier in the table.

Abstract: A method for operating an Ethernet virtual private network includes advertising, by a peer of the Ethernet virtual private network, virtual local area network routing information based on an integrated routing and bridging interface of the peer; making a determination that an Ethernet segment directly connecting a multi-homed host and the peer has failed; in response to the determination: withdrawing, by the peer, a first route of a first type of route associated with the Ethernet segment; maintaining, by the peer, a first route of a second type of route associated with the multi-homed host for a predetermined time after the Ethernet segment has failed; and forwarding, by the peer, a packet while the Ethernet segment has failed.

Abstract: Security policies are translated into access-control list entries and can be stored by switches in the computer network. When a new device is connected to the computer network, the device may be resolved to the group for which it is a member and an ACL entry may be created for the new device. In networks having redundant switches, the ACL entries may be stored by each redundant network switch.

Abstract: Virtual network identifiers are extracted from route advertisements. A table associates virtual network identifiers with provider edge devices. When a virtual network identifier extracted from a route advertisement matches a virtual network identifier in the table, the route advertisement is propagated to the provider edge devices associated with that virtual network identifier in the table. The route advertisement is not propagated to provider edge devices not associated with that virtual network identifier in the table.

Abstract: A method for operating an Ethernet virtual private network includes advertising, by a peer of the Ethernet virtual private network, virtual local area network routing information based on an integrated routing and bridging interface of the peer; making a determination that an Ethernet segment directly connecting a multi-homed host and the peer has failed; in response to the determination: withdrawing, by the peer, a first route of a first type of route associated with the Ethernet segment; maintaining, by the peer, a first route of a second type of route associated with the multi-homed host for a predetermined time after the Ethernet segment has failed; and forwarding, by the peer, a packet while the Ethernet segment has failed.

Abstract: In one embodiment, a method includes receiving at a first network device in a first virtual private network, a packet destined for a second network device in communication with a second virtual private network, and transmitting the packet over the second network, wherein the packet is encapsulated for transmittal on a tunnel extending from the first network device to the second network device. The first network device is in communication with a system operable to map and encapsulate the packet and provide an overlay that traverses over the second virtual private network. An apparatus and logic are also disclosed herein.

Abstract: In one embodiment, a method includes receiving at a first network device in a first virtual private network, a packet destined for a second network device in communication with a second virtual private network, and transmitting the packet over the second network, wherein the packet is encapsulated for transmittal on a tunnel extending from the first network device to the second network device. The first network device is in communication with a system operable to map and encapsulate the packet and provide an overlay that traverses over the second virtual private network. An apparatus and logic are also disclosed herein.

Abstract: In one embodiment, a method includes discovering at a first edge device in a first network that a multicast source has moved from the first network to a second network, the first edge device in communication through a core network with a plurality of edge devices belonging to a multicast group comprising the multicast source, transmitting from the first edge device to a second edge device in the second network, a join request for the multicast group comprising the multicast source at the second network, receiving multicast traffic for the multicast group at the first edge device on a transient multicast tree extending from the second edge device to the plurality of edge devices, and forwarding the multicast traffic to the plurality of edge devices. An apparatus and logic are also disclosed herein.

Abstract: In one embodiment, a method includes receiving at a first network device in a first virtual private network, a packet destined for a second network device in communication with a second virtual private network, and transmitting the packet over the second network, wherein the packet is encapsulated for transmittal on a tunnel extending from the first network device to the second network device. The first network device is in communication with a system operable to map and encapsulate the packet and provide an overlay that traverses over the second virtual private network. An apparatus and logic are also disclosed herein.

Abstract: In one embodiment, a device receives a payload encapsulated in an Internet Protocol (IP) transport header having a time-to-live (TTL) value, and decapsulates the payload while maintaining the TTL value. In response to determining that a destination of the payload is not attached to the device, the device may then re-encapsulate the payload in a new IP transport header with a new TTL value that is less than the maintained TTL value, and transmits the re-encapsulated payload toward the destination. In this manner, loops in overlay networks may be prevented based on eventual expiration of the TTL value of the IP transport header, accordingly.