Abstract: Disclosed herein are methods of forwarding packets on a network, such as a leaf-spine network having leaf devices and spine devices. The methods may include receiving a packet at an ingress leaf device, and determining based, at least in part, on a header of the packet whether the packet is to be transmitted to a spine device. The methods may further include ascertaining based, at least in part, on a header of the packet whether to perform encapsulation on the packet, encapsulating the packet according to a result of the ascertaining, and then transmitting the packet to a spine device according to a result of the determining. Also disclosed herein are network apparatuses which include a processor and a memory, at least one of the processor or the memory being configured to perform some or all of the foregoing described methods.

Abstract: Aspects of the subject disclosure relate to methods for detecting a link failure between the first network device and a destination node, receiving a data packet addressed to the destination node, and rewriting encapsulation information of the first data packet. Subsequent to rewriting the encapsulation information of the first data packet, the first data packet is forwarded to a second network device (e.g., using updated address information in the packet header), wherein the second network device is paired with the first network device in the virtual port channel. In certain aspects, systems and computer readable media are also provided.

Abstract: The subject technology addresses the need in the art for improving utilization of network bandwidth in a multicast network environment. More specifically, the disclosed technology addresses the need in the art for extending multipathing to tenant multicast traffic in an IP overlay network, which enables the network to fully utilize available bandwidth for multicast traffic. In some examples, nodes in the overlay network may be connected by virtual or logical links, each of which corresponds to a path, perhaps through many physical links, in the underlying network.

Abstract: Systems, methods, and non-transitory computer-readable storage media for translating source addresses in an overlay network. An access switch in an overlay network, such as a VXLAN, may receive an encapsulated packet from a tunnel endpoint in the overlay network. The encapsulated packet may originate from a host associated with the tunnel endpoint and be encapsulated at the tunnel endpoint with a first source tunnel endpoint address and a destination tunnel endpoint address. The access switch may replace the first source tunnel endpoint address in the encapsulated packet with a second source tunnel endpoint address of the access switch to yield a translated packet. The access switch may then transmit the translated packet towards the destination tunnel endpoint address.

Abstract: Systems, methods, and non-transitory computer-readable storage media for managing routing information in overlay networks. A first tunnel endpoint in an overlay network may receive an encapsulated packet from a second tunnel endpoint. The encapsulated packet may have been encapsulated at the second tunnel endpoint based on another packet originating from a source host that is associated with the second tunnel endpoint. The encapsulated packet can include a source host address for the source host and a source tunnel endpoint address for the second tunnel endpoint. The first tunnel endpoint can then update a lookup table based on an association between the source host address and the source tunnel endpoint address.

Abstract: Disclosed herein are methods and related apparatuses for determining statistics descriptive of packets received at a particular location on a network out of a set of packets transmitted on the network, which include transmitting first and second groups of packets on the network, the packets in the first and second groups labeled with first and second labels, respectively (the packets in the second group not in the first group), incrementing first and second packet counters associated with the particular network location in response to packet(s) in the first and second groups, respectively, being received at the network location until all packets in the first and second groups have drained from the network, and using values read from the first and second packet counters to determine a statistic descriptive of the packets received at the particular network location out of those in the first and second groups transmitted on the network.

Abstract: Various embodiments of the present disclosure provide methods for randomly mapping entries in a suitable lookup table across multiple switch devices and/or multiple switch chipsets in each of the multiple switch devices by using two or more independent hash functions. In some embodiments, the number of entries in the lookup table is equal to be the least common multiple of all possible M (i.e., a number of switch devices) choosing R values (i.e., a desired redundancy level).

Abstract: Various examples of the present disclosure provide methods for unifying various types of end-point identifiers, such as IPv4 (e.g., Internet protocol version 4 represented by a VRF and an IPv4 address), IPv6 (e.g., Internet protocol version 6 represented by a VRF and an IPv6 address) and L2 (e.g., Layer-2 represented by a bridge domain (BD) and a media access control (MAC) address), by mapping end-point identifiers to a uniform space (e.g., a synthetic IPv4 address and a synthetic VRF) and allowing different forms of lookups to be uniformly handled. In some examples, a lookup database residing on a switch device can be sharded into a plurality of lookup table subsets, each of which resides on a different one of multiple switch chipsets (e.g., Tridents) in the switch device.

Abstract: Various embodiments provide a method and apparatus for processing incoming packets in an efficient manner. A service ID bitmap indicating available services associated with the user is established. The available services are grouped into service set. Common service set having common set of rules is determined. A user associated with common service set and incoming traffic is identified. The incoming traffic is processed according to the common set of rules indicated by the service ID bitmap. The efficient use of Ternary Content Addressable Memory (TCAM) results in faster search result, lower power consumption and chip footprint among others.

Abstract: A method and system for managing a backup service gateway (SGW) associated with a primary SGW, comprising periodically receiving from the primary SGW at least a portion of corresponding UE session state information, the received portion of session state information being sufficient to enable the secondary SGW to indicate to an inquiring management entity that all user sessions associated with a group of mobile devices supported by the primary SGW are in a live state; and in response to a failure of the primary SGW, assuming management of IP addresses and paths associated with the primary SGW and causing each UE supported by the failed primary SGW to reauthorize itself to the network.

Abstract: A method, system and apparatus for managing a backup service gateway (SGW) associated with a primary SGW, the backup SGW periodically receiving from the primary SGW at least a portion of corresponding UE session state information and in response to a failure of the primary SGW, assuming management of IP addresses and paths associated with the primary SGW, and in response to receiving control or data plane traffic associated with a UE, generating a Downlink Data Notification (DDN) message adapted to inform an MME that the UE is in a live state.

Abstract: A method, system and apparatus for reversion of UE sessions from a backup SGW or protect node to an operationally restored primary SGW or working node.

Abstract: Various embodiments provide a method and apparatus for processing incoming packets in an efficient manner. A service ID bitmap indicating available services associated with the user is established. The available services are grouped into service set. Common service set having common set of rules is determined. A user associated with common service set and incoming traffic is identified. The incoming traffic is processed according to the common set of rules indicated by the service ID bitmap. The efficient use of Ternary Content Addressable Memory (TCAM) results in faster search result, lower power consumption and chip footprint among others.

Abstract: A session bundle allocation capability enables dynamic allocation of bundles of sessions being handled by a network element to modules of the network element (e.g., modules such as processing modules configured to perform one or more of traffic processing, traffic switching, and like functions). A bundle of sessions may be allocated by associating a plurality of sessions to form thereby a bundle of sessions, and assigning the bundle of sessions to a processing module group including one or more processing modules configured for processing traffic for the sessions of the bundle of sessions. A bundle of sessions may have a bundle identifier associated therewith and may be migrated from a first processing module group to a second processing module group by changing a mapping of the bundle identifier from being associated with the first processing module group to being associated with the second processing module group.

Abstract: A method, system and apparatus for reversion of UE sessions from a backup SGW or protect node to an operationally restored primary SGW or working node.

Abstract: A method, system and apparatus for managing a backup service gateway (SGW) associated with a primary SGW, the backup SGW periodically receiving from the primary SGW at least a portion of corresponding UE session state information and in response to a failure of the primary SGW, assuming management of IP addresses and paths associated with the primary SGW, and in response to receiving control or data plane traffic associated with a UE, generating a Downlink Data Notification (DDN) message adapted to inform an MME that the UE is in a live state.

Abstract: A method and system for managing a backup service gateway (SGW) associated with a primary SGW, comprising periodically receiving from the primary SGW at least a portion of corresponding UE session state information, the received portion of session state information being sufficient to enable the secondary SGW to indicate to an inquiring management entity that all user sessions associated with a group of mobile devices supported by the primary SGW are in a live state; and in response to a failure of the primary SGW, assuming management of IP addresses and paths associated with the primary SGW and causing each UE supported by the failed primary SGW to reauthorize itself to the network.

Abstract: A session bundle allocation capability is disclosed. The session bundle allocation capability enables dynamic allocation of bundles of sessions being handled by a network element to modules of the network element (e.g., modules such as processing modules configured to perform one or more of traffic processing, traffic switching, and like functions). A bundle of sessions may be allocated by associating a plurality of sessions to form thereby a bundle of sessions, and assigning the bundle of sessions to a processing module group including one or more processing modules configured for processing traffic for the sessions of the bundle of sessions. A bundle of sessions may have a bundle identifier associated therewith, and a bundle of sessions may be migrated from a first processing module group to a second processing module group by changing a mapping of the bundle identifier from being associated with the first processing module group to being associated with the second processing module group.

Abstract: Providing a network service is disclosed. A data associated with the service is received. It is determined whether a local context associated with the service is in an active state with respect to the service. The data is redirected to another chassis, via an inter-chassis backup connection, if it is determined that the local context is not in an active state with respect to the service.

Abstract: Providing a network service is disclosed. A data associated with the service is received. It is determined whether a local context associated with the service is in an active state with respect to the service. The data is redirected to another chassis, via an inter-chassis backup connection, if it is determined that the local context is not in an active state with respect to the service.