Juniper Networks Patent Grants

Secure forwarding of tenant workloads in virtual networks

Granted: January 25, 2022
Patent Number: 11233778
In general, techniques are described for enhancing operations of virtual networks. In some examples, a network system includes a plurality of servers interconnected by a switch fabric comprising a plurality of switches interconnected to form a physical network. Each of the servers comprises an operating environment executing one or more virtual machines in communication via one or more virtual networks. The servers comprise a set of virtual routers configured to extend the virtual…

Bandwidth management for resource reservation label switched path of a ring network

Granted: January 25, 2022
Patent Number: 11233748
Techniques are described for managing a plurality of requests for a change in bandwidth for a resource reservation label switched path (“LSP”) of a ring network. For example, a method may include receiving, by a network device and from an egress network device of a ring network, a resource reservation request message to establish a multipoint-to-point (MP2P) ring label switched path (LSP). The method may also include modifying, by the network device, the resource reservation request…

Replication mode selection for EVPN multicast

Granted: January 25, 2022
Patent Number: 11233741
The techniques describe example network systems for adaptively determining whether to perform ingress replication or assisted replication of a multicast flow based on classification of the multicast flow. For example, a provider edge (PE) device of a plurality of PE devices participating in an EVPN comprises one or more processors operably coupled to a memory, wherein the one or more processors are configured to: receive a multicast traffic flow, determine a classification of the…

Apparatus, system, and method for facilitating electrical continuity between sockets and warped electrical components

Granted: January 18, 2022
Patent Number: 11228125
A disclosed socket may include (1) a base that is arched to match a degree of warpage experienced by an electrical component and (2) an array of contact pins arranged across the base. A first side of the contact pins may be electrically coupled to a circuit board, and a second side of the contact pins may protrude from the base opposite the circuit board to establish contact with the electrical component despite the degree of warpage experienced by the electrical component. Various other…

Apparatus, system, and method for retaining thermal interface material between electrical components and heatsinks

Granted: January 18, 2022
Patent Number: 11229120
The disclosed interference-fit frame includes (1) a border dimensioned for installation around an electrical component coupled to a circuit board, wherein (A) the border forms an opening in which the electrical component resides when the border is installed and (B) at least a portion of the border constitutes a retention dam that rises beyond the electrical component when the border is installed, and (2) at least one protuberance that extends from the border into the opening. Various…

Apparatus, system, and method for conditionally performing media delivery index measurements on streaming media

Granted: January 18, 2022
Patent Number: 11228631
A disclosed method may include (1) identifying, within a network, a media stream under consideration for a conditional MDI, (2) identifying, for the media stream, an expected packet rate at which the media stream is expected to pass through at least a portion of the network, (3) determining, for the media stream, an actual packet rate at which the media stream actually passes through the portion of the network, (4) calculating, based at least in part on the expected packet rate and the…

Learning driven dynamic threat treatment for a software defined networking environment

Granted: January 18, 2022
Patent Number: 11228603
Techniques are disclosed for providing dynamic threat treatment for a software defined networking (SDN) environment. In one example, a software defined networking controller comprises one or more processors, wherein the one or more processors are configured to: determine that a security device of a network has detected a threat; apply the threat to a threat treatment model, wherein the threat treatment model is generated based on threat treatment information that includes one or more…

Methods and apparatus for efficient use of link aggregation groups

Granted: January 18, 2022
Patent Number: 11228524
An apparatus includes a first edge device configured to receive a data unit destined to a peripheral processing device that is operatively coupled to a network interconnect via a LAG associated with a second edge device and a third edge device. The first edge device is configured to select an edge device set that includes the third edge device and excludes the second edge device, from a group of edge device sets. Each edge device set from the group of edge device sets is directly coupled…

Systems and method for replaying and debugging live states of network devices

Granted: January 18, 2022
Patent Number: 11228504
A disclosed method may include (1) collecting telemetry data that represents a state of a network device during a live operating session, (2) deriving, from the telemetry data, a set of steps for reproducing the state of the network device during the live operating session based at least in part on a set of rules, (3) generating, based at least in part on the set of steps, a playback decision tree that, upon execution, facilitates (A) reproducing the state of the network device during…

Bundling of wired and wireless interfaces in a redundant interface of a high-availability cluster

Granted: January 18, 2022
Patent Number: 11228495
A system may include a first node in a high-availability cluster; a second node in the high-availability cluster; a redundant interface between a network device and both the first node and the second node, wherein the redundant interface is associated with a redundancy group that designates one of the first node or the second node as a primary node in the high-availability cluster and that designates the other of the first node or the second node as a backup node in the high-availability…

Estimating user risk based on wireless location determination

Granted: January 18, 2022
Patent Number: 11226392
Disclosed are embodiments for estimating risk associated with a user of a wireless device. In some embodiments, the risk relates to a risk of infection by a contagious disease. For example, in some embodiments, the contagious disease is Coronavirus 2019. In some embodiments, locations of multiple wireless devices are estimated based on signal strengths of signals associated with the devices. Neighboring devices are identified based on highest probability regions of the devices that are…

Variable timeouts for network device management queries

Granted: January 11, 2022
Patent Number: 11223548
An example device includes a control unit that provides an execution environment for a network management application and a network interface. The network management application generates a request message based at least in part on a predicted amount of time required for the device to receive a response to a request message, wherein the predicted amount of time is based at least in part on object identifier processing time information, and wherein the predicted amount of time satisfies a…

Access enforcement at a wireless access point

Granted: January 4, 2022
Patent Number: 11218488
A first set of access rules is received from an access configuration service. The first set of access rules specifies addresses of devices authorized for a first user. A second set of access rules is received from the access configuration service. The second set of the access rules specifies addresses of devices authorized for a second user. At a wireless access point, a network packet associated with the first user is received. The first set of access rules is applied to filter the…

Using multidimensional metadata tag sets to determine resource allocation in a distributed computing environment

Granted: January 4, 2022
Patent Number: 11216309
An example method includes receiving a resource request for at least one compute and/or storage resource from a distributed computing system distributed among multiple data centers, determining a resource policy that is associated with the resource request, wherein the resource policy includes a rule specifying at least one metadata tag and at least one criterion associated with the at least one metadata tag, identifying at least one object included in a resource object model that…

Fabrication-tolerant non-linear waveguide taper

Granted: January 4, 2022
Patent Number: 11215758
A fabrication-tolerant non-linear waveguide taper for a waveguide transition can be designed by computing the scattering rate associated with the waveguide transition as a function of waveguide width of the waveguide taper for each of multiple sets of parameter values characterizing the waveguide transition (e.g., a set of nominal parameter values and sets of parameter values associated with process corners representing process variations from the nominal parameter values), determining…

Employing machine learning to predict and dynamically tune static configuration parameters

Granted: December 28, 2021
Patent Number: 11212229
A system and method for dynamically altering static parameters on a live network device is disclosed. The system includes a live network device having a plurality of parameters configured thereon that control the application of services to subscriber packet flows and a machine learning device operable to monitor the subscriber packet flows and apply a machine learned model to identify patterns in the monitored subscriber pack flows. The machine learning device is further operable to…

Systems and methods for deadlock avoidance within MPLS networks

Granted: December 28, 2021
Patent Number: 11212163
The disclosed method may include (1) detecting, within at least one interface of a first endpoint device, a connectivity failure that disrupts a Layer 2 service based on an MPLS connection between the interface of the first endpoint device and at least one interface of a second endpoint device, (2) in response to detecting the connectivity failure, sending, to the second endpoint device, a first bidirectional BFD packet that prompts the second endpoint device to at least partially…

Dashboard for graphic display of computer network topology

Granted: December 21, 2021
Patent Number: 11206200
A policy controller executes algorithms to operate on a list of devices forming a computer network to generate outputs including one or more graphic user interfaces. The graphic user interfaces, when displayed on a display device, provide various versions of a visual representation of a network topology for the actual computer network or a computer network being modeled. The graphic user interfaces include graphic symbols representative of various devices included in the computer network…

Rules driven software deployment agent

Granted: December 21, 2021
Patent Number: 11206185
The disclosed embodiments provide for rules-based deployment of software installations. In some aspects, operational parameters for a computer system are monitored over time to generate a historical database of values for the operational parameters. The computer system may include multiple instances of a software installation. A portion of the multiple instances is updated with a new version of software. The operational parameters are then monitored to quantify whether the new version…

Intelligent device role discovery

Granted: December 14, 2021
Patent Number: 11200133
In one example, a network management system (NMS) and method discovers device roles for network devices. The NMS includes a learning module configured to include a learning model, the learning model trained to associate configuration segments for each of a plurality of network devices with device roles performed by the network devices. The NMS discovers a network service on a network, receives configuration information from the discovered network service and splits the configuration…