Abstract: Techniques to eliminate duplicate packets from a stream of packets. A method includes receiving a packet, hashing elements of the packet to obtain a packet partial signature, generating an action data value by appending, to the packet partial signature, unhashed packet information, accessing a hash store location in a hash store based on the action data value, determining, based on data stored at the hash store location, whether the packet is a duplicate of a previously-received packet, and based on whether the packet is a duplicate of a previously-received packet, one of allowing and preventing one of the packet and a copy of the packet to reach a downstream network node.

Abstract: Embodiments for handling multidestination traffic in a network are described. It is determined that a destination of a packet, received at a network device, is a multihomed destination. In response to determining that the destination of the packet is a multihomed destination, a hash value is determined from a selection of header values of the packet using a hash function. The packet is forwarded to the destination using a shadow hash forwarding table based at least in part on determining, based on the hash value and a hash forwarding table, that the network device is a designated forwarder for the packet.

Abstract: Embodiments for handling multidestination traffic in a network are described. The multidestination traffic includes packets that are in transit to a multihomed destination in the network. Upon determining the destination is multihomed, a network switch determines a hash value from a selection of header values in the network traffic and uses the hash value to determine if the network switch is a designated forwarder for the multihomed destination. The network switch handles the network traffic according to a designated forwarder status.

Abstract: A network device receives multi-destination packets from a first node and forwards at least a first of the multi-destination packets to another network device using a first multi-destination tree with respect to the network device. The network device detects that a link associated with the first multi-destination tree satisfies one or more criteria and, in response to detecting that the link satisfies the one or more criteria, selects a second multi-destination tree with respect to the network device. The network device forwards at least a second of the multi-destination packets to the other network device using the second multi-destination tree.

Abstract: Embodiments for handling multidestination traffic in a network are described. The multidestination traffic includes packets that are in transit to a multihomed destination in the network. Upon determining the destination is multihomed, a network switch determines a hash value from a selection of header values in the network traffic and uses the hash value to determine if the network switch is a designated forwarder for the multihomed destination. The network switch handles the network traffic according a designated forwarder status.

Abstract: A network device receives multi-destination packets from a first node and forwards at least a first of the multi-destination packets to another network device using a first multi-destination tree with respect to the network device. The network device detects that a link associated with the first multi-destination tree satisfies one or more criteria and, in response to detecting that the link satisfies the one or more criteria, selects a second multi-destination tree with respect to the network device. The network device forwards at least a second of the multi-destination packets to the other network device using the second multi-destination tree.

Abstract: A network device receives multi-destination packets from a first node and forwards at least a first of the multi-destination packets to another network device using a first multi-destination tree with respect to the network device. The network device detects that a link associated with the first multi-destination tree satisfies one or more criteria and, in response to detecting that the link satisfies the one or more criteria, selects a second multi-destination tree with respect to the network device. The network device forwards at least a second of the multi-destination packets to the other network device using the second multi-destination tree.

Abstract: Embodiments for handling multidestination traffic in a network are described. The multidestination traffic includes packets that are in transit to a multihomed destination in the network. Upon determining the destination is multihomed, a network switch determines a hash value from a selection of header values in the network traffic and uses the hash value to determine if the network switch is a designated forwarder for the multihomed destination. The network switch handles the network traffic according a designated forwarder status.

Abstract: A network device receives multi-destination packets from a first node and forwards at least a first of the multi-destination packets to another network device using a first multi-destination tree with respect to the network device. The network device detects that a link associated with the first multi-destination tree satisfies one or more criteria and, in response to detecting that the link satisfies the one or more criteria, selects a second multi-destination tree with respect to the network device. The network device forwards at least a second of the multi-destination packets to the other network device using the second multi-destination tree.

Abstract: Techniques for utilizing in-band telemetry (INT) in network fabrics are provided. A packet is received at a leaf node in a first logical group of nodes. Upon determining that the first packet was received from a node outside of the first logical group of nodes, the packet is encapsulated with a first header indicating an internal virtual extensible local area network (iVXLAN) identifier associated with the packet, and a second header indicating a policy group is added to the packet. Further, upon determining that a destination of the packet is associated with a second logical group of nodes, a third header is added to the first packet, where the third header stores in-band network telemetry (INT) for the packet, and telemetry data is added to the third header. The packet is transmitted to a spine node in the first logical group of devices.

Abstract: A network device receives multi-destination packets from a first node and forwards at least a first of the multi-destination packets to another network device using a first multi-destination tree with respect to the network device. The network device detects that a link associated with the first multi-destination tree satisfies one or more criteria and, in response to detecting that the link satisfies the one or more criteria, selects a second multi-destination tree with respect to the network device. The network device forwards at least a second of the multi-destination packets to the other network device using the second multi-destination tree.

Abstract: Aspects of the embodiments include receiving a packet at a network element of a packet-switched network; identifying a presence of a shared service destination address in a header of the packet; identifying a shared service destination address for the packet based, at least in part, on a destination internet protocol (IP) address stored in a forward information base; and forwarding the packet to the shared service destination address.

Abstract: Techniques for utilizing in-band telemetry (INT) in network fabrics are provided. A packet is received at a leaf node in a first logical group of nodes. Upon determining that the first packet was received from a node outside of the first logical group of nodes, the packet is encapsulated with a first header indicating an internal virtual extensible local area network (iVXLAN) identifier associated with the packet, and a second header indicating a policy group is added to the packet. Further, upon determining that a destination of the packet is associated with a second logical group of nodes, a third header is added to the first packet, where the third header stores in-band network telemetry (INT) for the packet, and telemetry data is added to the third header. The packet is transmitted to a spine node in the first logical group of devices.

Abstract: A network device receives multi-destination packets from a first node and forwards at least a first of the multi-destination packets to another network device using a first multi-destination tree with respect to the network device. The network device detects that a link associated with the first multi-destination tree satisfies one or more criteria and, in response to detecting that the link satisfies the one or more criteria, selects a second multi-destination tree with respect to the network device. The network device forwards at least a second of the multi-destination packets to the other network device using the second multi-destination tree.

Abstract: Disclosed are systems, methods, and computer-readable storage media for minimizing the number of entries in network access control lists (ACLs). In some embodiments of the present technology a networking device can receive, from a first computing device, a first data transmission intended for a second computing device, the first data transmission including first transmission data. The networking device can normalize at least a subset of the first transmission data based on a predetermined normalization algorithm, yielding a first normalized data set for the first data transmission. Subsequently, the networking device can identify a first access control list entry from a set of access control list entries based on the first normalized data set, the first access control list entry identifying a first action, and implement the first action in relation to the first data transmission.

Abstract: Aspects of the embodiments include receiving a packet at a network element of a packet-switched network; identifying a presence of a shared service destination address in a header of the packet; identifying a shared service destination address for the packet based, at least in part, on a destination internet protocol (IP) address stored in a forward information base; and forwarding the packet to the shared service destination address.

Abstract: Systems, methods and computer-readable storage devices each provide, for a given flow entry in a flow table associated with a packet flow, a first atomic counter associated with a first color and a second atomic counter associated with a second color. The system, for a first coloring interval, marks traffic in the packet flow from a tenant to a fabric as the first color and increments the first atomic counter. At a conclusion of the first coloring interval and for a second coloring interval, the system marks the traffic in the packet flow from the tenant to the fabric as the second color and increments the second atomic counter. The system compares first packet counts associated with the first color at an ingress point with second packet counts associated with the first color at an egress point to the fabric.

Abstract: Aspects of the embodiments include receiving a packet at a network element of a packet-switched network; identifying a presence of a shared service destination address in a header of the packet; identifying a shared service destination address for the packet based, at least in part, on a destination internet protocol (IP) address stored in a forward information base; and forwarding the packet to the shared service destination address.

Abstract: Systems, methods and computer-readable storage devices each provide, for a given flow entry in a flow table associated with a packet flow, a first atomic counter associated with a first color and a second atomic counter associated with a second color. The system, for a first coloring interval, marks traffic in the packet flow from a tenant to a fabric as the first color and increments the first atomic counter. At a conclusion of the first coloring interval and for a second coloring interval, the system marks the traffic in the packet flow from the tenant to the fabric as the second color and increments the second atomic counter. The system compares first packet counts associated with the first color at an ingress point with second packet counts associated with the first color at an egress point to the fabric.

Abstract: Aspects of the embodiments include receiving a packet at a network element of a packet-switched network; identifying a presence of a shared service destination address in a header of the packet; identifying a shared service destination address for the packet based, at least in part, on a destination internet protocol (IP) address stored in a forward information base; and forwarding the packet to the shared service destination address.