Juniper Networks Patent Applications

SYSTEMS AND METHODS FOR LOAD BALANCING MULTICAST TRAFFIC

Granted: October 1, 2015
Application Number: 20150281090
A computer-implemented method for load balancing multicast traffic may include (1) identifying a plurality of switches that include at least a first switch that is connected to a second switch by a first path and a second path, (2) calculating a plurality of multicast distribution trees for distributing multicast traffic among the plurality of switches that includes (i) a first tree that includes the first path and whose root is different than the root of a second tree and (ii) the…

SYSTEMS AND METHODS FOR MULTIPATH LOAD BALANCING

Granted: October 1, 2015
Application Number: 20150281088
A computer-implemented method for multipath load balancing may include (1) identifying a plurality of paths from a source switch to a destination switch, (2) determining, for each of the plurality of paths, a limiting bandwidth of the path based at least in part on the lowest link bandwidth of one or more data links in the path, and (3) balancing network traffic that is transmitted from the source switch to the destination switch across the plurality of paths based at least in part on…

APPARATUS, SYSTEM, AND METHOD FOR RECONFIGURING POINT-TO-MULTIPOINT LABEL-SWITCHED PATHS

Granted: October 1, 2015
Application Number: 20150281045
An apparatus may include a processor and a control plane that directs the processor to (1) detect that at least a portion of an initial branch path of a point-to-multipoint label-switched path has failed over to a failover route that rejoins the initial branch path at a merge-point device and (2) establish an alternate branch path that merges with the initial branch path at the merge-point device. The apparatus may also include a network interface and a data plane that uses the network…

SELECTABLE SERVICE NODE RESOURCES

Granted: September 24, 2015
Application Number: 20150271102
In one example, a method includes receiving, by a service node, a request from an access node to establish a pseudowire to be used for sending subscriber traffic to the service node for application of services to the subscriber traffic at the service node, and, in response to receiving the request, sending a request message from the service node to a central server requesting both subscriber authentication and assignment of a forwarding component of the service node to which to anchor…

METHODS AND APPARATUS TO ROUTE FIBRE CHANNEL FRAMES USING REDUCED FORWARDING STATE ON AN FCOE-TO-FC GATEWAY

Granted: August 27, 2015
Application Number: 20150245115
In one embodiment, an apparatus includes a switching policy module configured to define a switching policy associating a Fibre Channel port with a destination Media Access Control (MAC) address. The switching module can be configured to receive a Fibre Channel over Ethernet (FCoE) frame from a network device and send a Fibre Channel frame encapsulated in the FCoE frame to the Fibre Channel port based at least in part on the switching policy and a destination MAC address of the FCoE…

METHODS AND APPARATUS FOR PATH SELECTION WITHIN A NETWORK BASED ON FLOW DURATION

Granted: August 27, 2015
Application Number: 20150244633
In some embodiments, an apparatus includes a forwarding module that is configured to receive a group of first data packets. The forwarding module is configured to modify a data flow value in response to receiving each first data packet. The forwarding module is also configured to store each first data packet in a first output queue based on the data flow value not crossing a data flow threshold after being modified. Furthermore, the forwarding module is configured to receive a second…

NEIGHBOR-LABEL DISTRIBUTION WITH LABEL DISTRIBUTION PROTOCOL

Granted: August 27, 2015
Application Number: 20150244615
Label Distribution Protocol (LDP) extensions are described that enable distribution of neighbor-label mappings for directly connected neighbor routers. A router capable of supporting the LDP extensions distributes neighbor-labels to be used by the router to label switch traffic destined for the directly connected neighbor router irrespective of a hop-by-hop Interior Gateway Protocol (IGP) path determined based on link metrics. In some examples, the neighbor-labels may increase backup…

RETENTION-EXTRACTION DEVICE FOR REMOVABLE CARDS IN A CHASSIS

Granted: August 20, 2015
Application Number: 20150237749
A retention-extraction device is provided for a removable card in a chassis. The device includes an actuation rod having a cam slot, the actuation rod configured to provide linear movement along the length of the actuation rod, and an extraction lever operatively connected to a proximal end of the actuation rod and pivotally secured to the chassis. The device also includes a bell crank with a cam follower that is configured to ride in the cam slot and a latch hook that pivots between an…

LOOP FREE ALTERNATE SELECTION FOR MULTI-HOMED NETWORKS

Granted: August 6, 2015
Application Number: 20150222545
In one example, a network device determines a set of candidate loop-free alternate (LFA) next hops for forwarding network traffic from the network device to a multi-homed network by taking into account a first cost associated with a second path from a first border router to the multi-homed network and a second cost associated with a second border router to the multi-homed network, wherein the multi-homed network is external to an interior routing domain in which the network device is…

INTERMEDIATE RESPONSES FOR NON-HTML DOWNLOADS

Granted: August 6, 2015
Application Number: 20150222650
A security device may receive an object destined for a user device. The object may be of an object type that does not describe a web page. The security device may determine that the user device is to be warned regarding the object. The security device may determine a warning object based on determining that the user device is to be warned. The warning object may include information associated with a reason for determining that the user device is to be warned regarding the object, and may…

DYNAMIC END-TO-END NETWORK PATH SETUP ACROSS MULTIPLE NETWORK LAYERS WITH NETWORK SERVICE CHAINING

Granted: July 16, 2015
Application Number: 20150200838
In general, techniques are described for improving network path computation for requested paths that include a chain of service points that provide network services to traffic flows traversing the requested path through a network along the service chain. In some examples, a controller network device receives a request for network connectivity between a service entry point and a service exit point for a service chain for application to packet flows associated to the service chain. The…

DETECTING AND BREAKING CAPTCHA AUTOMATION SCRIPTS AND PREVENTING IMAGE SCRAPING

Granted: July 9, 2015
Application Number: 20150193631
A security device may receive a request from a client device and intended for a server device. The security device may identify the request as being associated with a malicious activity. The malicious activity may include one or more undesirable tasks directed to the server device. The security device may generate a challenge-response test based on identifying the request as being associated with the malicious activity. The challenge-response test may be generated using one or more…

METHODS AND APPARATUS FOR MONITORING AND CONTROLLING THE PERFORMANCE OF OPTICAL COMMUNICATION SYSTEMS

Granted: June 25, 2015
Application Number: 20150180570
In some embodiments, an apparatus includes an optical detector that can sample asynchronously an optical signal from an optical component that can be either an optical transmitter or an optical receiver. In such embodiments, the apparatus also includes a processor operatively coupled to the optical detector, where the processor can calculate a metric value of the optical signal without an extinction ratio of the optical signal being measured. The metric value is proportional to the…

METHODS AND APPARATUS FOR FLOW-CONTROLLABLE MULTI-STAGED QUEUES

Granted: June 18, 2015
Application Number: 20150172196
In one embodiment, a method includes sending a first flow control signal to a first stage of transmit queues when a receive queue is in a congestion state. The method also includes sending a second flow control signal to a second stage of transmit queues different from the first stage of transmit queues when the receive queue is in the congestion state.

METHODS AND APPARATUS RELATED TO A FLEXIBLE DATA CENTER SECURITY ARCHITECTURE

Granted: June 11, 2015
Application Number: 20150163171
In one embodiment, edge devices can be configured to be coupled to a multi-stage switch fabric and peripheral processing devices. The edge devices and the multi-stage switch fabric can collectively define a single logical entity. A first edge device from the edge devices can be configured to be coupled to a first peripheral processing device from the peripheral processing devices. The second edge device from the edge devices can be configured to be coupled to a second peripheral…

AUTOMATIC TRAFFIC MAPPING FOR MULTI-PROTOCOL LABEL SWITCHING NETWORKS

Granted: May 28, 2015
Application Number: 20150146536
In general, techniques are described for automated traffic mapping for multi-protocol label switching (MPLS) networks. A network device comprising a processor and an interface card may perform the techniques. The processor may generate an advertisement that conforms to a routing protocol. The advertisement may advertise a mapping between a network flow and a label switched path (LSP) tag. The processor may also generate a communication associating the label switched path tag with an LSP.…

METHODS AND APPARATUS RELATED TO A DISTRIBUTED SWITCH FABRIC

Granted: May 21, 2015
Application Number: 20150139222
A method of sending data to a switch fabric includes assigning a destination port of an output module to a data packet based on at least one field in a first header of the data packet. A module associated with a first stage of the switch fabric is selected based on at least one field in the first header. A second header is appended to the data packet. The second header includes an identifier associated with the destination port of the output module. The data packet is sent to the module…

METHODS AND APPARATUS FOR VIRTUAL SOFT HANDOFF

Granted: May 21, 2015
Application Number: 20150139193
In some embodiments, a non-transitory processor-readable medium includes code to cause a processor to receive at a tunnel server, a data unit addressed to a communication device, and define, a first instance of the data unit and a second instance of the data unit. The first instance of the data unit is sent to the communication device via a first tunnel defined between at least the tunnel server and a first base station associated with a first network. The second instance of the data…

METHODS AND APPARATUS FOR CENTRALIZED VIRTUAL SWITCH FABRIC CONTROL

Granted: May 14, 2015
Application Number: 20150131670
In some embodiments, an apparatus comprises a processing module, disposed within a first switch fabric element, configured to detect a second switch fabric element having a routing module when the second switch fabric element is operatively coupled to the first switch fabric element. The processing module is configured to define a virtual processing module configured to be operatively coupled to the second switch fabric element. The virtual processing module is configured to receive a…

UNINTERRUPTABLE POWER SUPPLY FOR DEVICE HAVING POWER SUPPLY MODULES WITH INTERNAL AUTOMATIC TRANSFER SWITCHES

Granted: May 7, 2015
Application Number: 20150123473
Techniques are described for determining whether power from a first power source is unavailable to a power supply module. In response to determining that power from the first power source is unavailable, the techniques de-couple the first power source from one or more components of an electronic device connected to an output of the power supply module with one or more de-coupling components of the power supply module that connect an automatic transfer switch (ATS) of the power supply…