Juniper Networks Patent Grants

Dynamic logging

Granted: July 18, 2017
Patent Number: 9710762
In general, techniques are described for dynamically modifying the extent of logging performed by logging information generators in response to events detected in logging information received by the collector. In some examples, a network device includes one or more processors and a collector executed by the processors to receive a log message that includes logging information from a generator. The network device also includes a rules engine to apply one or more rules that each specify a…

Network services resource management

Granted: July 18, 2017
Patent Number: 9712374
In general, the invention is directed to techniques for scheduling resource access within an intermediate network device. For example, as described herein, a device receives packets for a plurality of sessions that include application-layer data for the sessions. The device determines a weight for each of the plurality of sessions and, during periods of resource congestion, selects one or more sessions for additional resource allocation based on the respective weights of the sessions.…

Point-to-multipoint path computation for wide area network optimization

Granted: July 18, 2017
Patent Number: 9712447
In some examples, a controller for a network includes a path computation module configured for execution by one or more processors to obtain configuration information for at least one point-to-multipoint label switched path (P2MP LSP); obtain, from the network via at least one protocol, network topology information defining a network topology for the network; determine, based on the network topology, a first solution comprising first respective paths through the network for the at least…

Identifying applications for intrusion detection systems

Granted: July 18, 2017
Patent Number: 9712490
An intrusion detection system (“IDS”) device is described that includes a flow analysis module to receive a first packet flow from a client and to receive a second packet flow from a server. The IDS includes a forwarding component to send the first packet flow to the server and the second packet flow to the client and a stateful inspection engine to apply one or more sets of patterns to the first packet flow to determine whether the first packet flow represents a network attack. The…

PCIe-based host network accelerators (HNAS) for data center overlay network

Granted: July 11, 2017
Patent Number: 9703743
A high-performance, scalable and drop-free data center switch fabric and infrastructure is described. The data center switch fabric may leverage low cost, off-the-shelf packet-based switching components (e.g., IP over Ethernet (IPoE)) and overlay forwarding technologies rather than proprietary switch fabric. In one example, host network accelerators (HNAs) are positioned between servers (e.g., virtual machines or dedicated servers) of the data center and an IPoE core network that…

Mitigating an effect of a downstream failure in an automatic transfer switching system

Granted: July 11, 2017
Patent Number: 9705337
A system may comprise a first switch connected to an output of a first power source, a second switch connected to an output of a second power source, a first sensor connected to an output of the first switch, a second sensor connected to an output of the second switch, a third switch connected to the first sensor and the second sensor and connected to a load, and a control device connected to the first switch, the second switch, the first sensor, the second sensor, and the third switch.

Service latency monitoring using two way active measurement protocol

Granted: July 11, 2017
Patent Number: 9705769
A device may establish a communication session, with a client device, for monitoring a latency of a service. The device may receive, from the client device, a request for a monitored service list. The monitored service list may identify one or more services for which service latency monitoring is supported. The device may provide, to the client device, the monitored service list. The device may receive, from the client device, a service latency monitoring session request that may…

Multi-topology resource scheduling within a computer network

Granted: July 11, 2017
Patent Number: 9705781
In general, techniques are described for dynamically scheduling and establishing paths in a multi-layer, multi-topology network to provide dynamic network resource allocation and support packet flow steering along paths prescribed at any layer or combination of layers of the network. In one example, a multi-topology path computation element (PCE) accepts requests from client applications for dedicated paths. The PCE receives topology information from network devices and attempts to…

Bit index explicit replication (BIER)forwarding for network device components

Granted: July 11, 2017
Patent Number: 9705784
A network device receives multicast packets that include information identifying destinations in the network, identifies next hops associated with the destinations, and populates a cache with the destinations and addresses of the identified next hops. The network device receives a particular multicast packet that includes information identifying particular destinations included in the cache, identifies one or more next hops for the particular destinations from the cache, and forwards the…

Graph database for services planning and configuration in network services domain

Granted: July 11, 2017
Patent Number: 9705815
In general, techniques are described for representing services, network resources, and relationships between such services and resources in a graph database with which to validate, provision, and manage the services in near real-time. In one example, a controller device includes at least one processor; and at least one memory to store a graph database comprising a graph that represents network resources and relationships between network resources. The controller device receives, at an…

Methods and apparatus for virtual channel flow control associated with a switch fabric

Granted: July 11, 2017
Patent Number: 9705827
A system includes a module associated with a first stage of a switch fabric directly coupled to a module associated with a second stage of the switch fabric via a single physical hop having multiple virtual channels. The module associated with the first stage is configured to assign a virtual channel identifier associated with a virtual channel with a data packet using a hash function and to send the data packet through the virtual channel based on the virtual channel identifier. The…

Routing protocol interface for generalized data distribution

Granted: July 11, 2017
Patent Number: 9706014
In general, techniques are described for defining an interface to a network router software infrastructure that allows developers to dynamically extend a routing protocol executed by the network router to distribute data throughout the routing domain for use with custom applications. In some examples, a routing protocol process executing on a control plane of a network device may expose an interface, such as an Application Programming Interface (API), that defines methods and parameters…

Virtual network optimizing a physical network

Granted: July 4, 2017
Patent Number: 9697172
One or more devices are configured to receive information regarding network devices associated with a physical network. The one or more devices are configured further to generate configuration data based on the information regarding the network devices. The one or more devices are configured further to generate a virtual network based on the configuration data. The one or more devices are configured to send information regarding the virtual network to a client device. The one or more…

Overlay tunnel and underlay path correlation

Granted: July 4, 2017
Patent Number: 9699030
A device may receive an indication to generate a probe packet associated with a tunnel included in a first network. The tunnel may include a first tunnel endpoint and a second tunnel endpoint and may correspond to a path, associated with a second network, between the first tunnel endpoint and the second tunnel endpoint. The device may generate the probe packet including information associated with the tunnel. The device may provide the probe packet, via the first tunnel endpoint, such…

Topology determination for an optical network

Granted: July 4, 2017
Patent Number: 9699035
Techniques are described for determining the topology of an optical network. A computing device receives a message on a data communication network after a first device in an optical network receives an optical pulse pattern on an optical fiber in the optical network. The computing device generates topology data using the message. The topology data indicates that a second device is physically connected in the optical network to the first device when the received optical pulse pattern…

Limiting the efficacy of a denial of service attack by increasing client resource demands

Granted: July 4, 2017
Patent Number: 9699212
A device may detect an attack. The device may receive, from a client device, a request for a resource. The device may determine, based on detecting the attack, a computationally expensive problem to be provided to the client device, where the computationally expensive problem requires a computation by the client device to solve the computationally expensive problem. The device may instruct the client device to provide a solution to the computationally expensive problem. The device may…

Concurrent forwarding plane programming for multi-protocol label switched networks

Granted: June 27, 2017
Patent Number: 9692691
In general, techniques are described for configuration of label switched paths in multi-protocol label switched networks. A router comprising a control unit and an interface may be configured to perform the techniques. The control unit may determine a label to bind to the LSP. The interface may transmit a message specifying the label that has been bound to the LSP prior to confirming that the LSP has been successfully configured within the support router to use the bound label.

High-scale data center having LSP transport hierarchy

Granted: June 27, 2017
Patent Number: 9692692
A high-performance, scalable data center switch fabric and infrastructure is described that provides a clean separation between of routing and forwarding information between a transport layer of the data center and a service layer of data center that includes the endpoint devices, such as virtual or physical machines deployed within the data center. For example, techniques are described that enable the automatic creation of a transport hierarchy of label switched paths (LSPs) across the…

Bandwidth control for ring-based multi-protocol label switched paths

Granted: June 27, 2017
Patent Number: 9692693
Techniques are described for specifying and constructing multi-protocol label switching (MPLS) rings. Routers may signal membership within MPLS rings and automatically establish ring-based label switch paths (LSPs) as components of the MPLS rings for packet transport within ring networks. In one example, a router includes a processor configured to establish an MPLS ring having a plurality of ring LSPs. Each of the ring LSPs is configured to transport MPLS packets around the ring network…

Processing data flows based on information provided via beacons

Granted: June 27, 2017
Patent Number: 9692700
A first component of a network device may provide an offload request to a second component of the network device to offload a data flow from the first component. The offload request may direct the second component to provide the data flow towards a destination device and bypass the first component. The first component may receive a beacon from the second component. The beacon may identify information regarding one or more data flows offloaded from the first component. The first component…