Juniper Networks Patent Grants

Apparatus, system, and method for mitigating deformation of spring-loaded heatsinks

Granted: May 21, 2024
Patent Number: 11991863
A disclosed apparatus may include (1) a heat-emitting component, (2) a heatsink that includes a designated area thermally coupled to the heat-emitting component, (3) a plurality of springs that apply forces that support the thermal coupling between the designated area of the heatsink and the heat-emitting component, and (4) a pressure plate that concentrates the forces applied by the springs toward the designated area of the heatsink. Various other apparatuses, systems, and methods are…

Providing cloud-aware security for an application level network device

Granted: May 21, 2024
Patent Number: 11991142
A virtual network device may identify a cloud provider associated with the virtual network device, and may provide a request for public network addresses and private network addresses associated with the cloud provider. The virtual network device may receive the public network addresses and the private network addresses from the cloud provider based on the request, and may generate a translation table that maps the public network addresses and the private network addresses. The virtual…

Hybrid data plane for a containerized router

Granted: May 21, 2024
Patent Number: 11991097
In general, this disclosure describes techniques for providing a hybrid data plane that can include a kernel-based data plane and a Data Plane Development Kit (DPDK)-based data plane. An example system includes a DPDK-based virtual router configured to send and receive packets via a physical network interface, and a kernel network stack configured to perform tunneling processing for packets destined to a containerized application and received by the DPDK-based virtual router via the…

AI-assisted WAN link selection for SD-WAN services

Granted: May 21, 2024
Patent Number: 11991084
An example method includes receiving, by a software-defined networking in a wide area network (SD-WAN) system having a first WAN link and a second WAN link for an SD-WAN service, WAN link characterization data for the first WAN link over a time period; determining, by the SD-WAN system based on processing the WAN link characterization data for the first WAN link using a machine learning model trained with historical WAN link characterization data for one or more WAN links, an indicator…

Micro SID packet processing

Granted: May 21, 2024
Patent Number: 11991081
An example first network device includes a control unit configured to execute at least one application and a forwarding unit. The forwarding unit includes an interface configured to receive packets, at least one packet processor operably coupled to a memory, and a forwarding path, wherein at least a portion of the forwarding path is stored in the memory and is executable by the at least one packet processor. The forwarding unit is configured to receive an advertisement originated by a…

Data interfaces with isolation for containers deployed to compute nodes

Granted: May 21, 2024
Patent Number: 11991077
In general, techniques are described for deploying a logically-related group of one or more containers (“pod”) that supports the Data Plane Development Kit (DPDK) to support fast path packet communication on a data channel between a virtual router and the pod. In an example, a computing device comprises a virtual router comprising processing circuitry and configured to implement, in a computing infrastructure that includes the computing device, a virtual network to enable…

Determining an organizational level network topology

Granted: May 21, 2024
Patent Number: 11991046
An example network analysis system includes a memory storing telemetry data received from a plurality of network devices, the plurality of network devices includes extract entity information and connectivity information from the received telemetry data, wherein the entity information represents one or more network devices of the plurality of network devices and the connectivity information represents network connections between one or more devices of the plurality of network devices; and…

Network system fault resolution via a machine learning model

Granted: May 14, 2024
Patent Number: 11985025
Disclosed are embodiments for automatically resolving faults in a complex network system. Some embodiments monitor one or more of system operational parameter values and message exchanges between network components. A machine learning model detects a fault in the complex network system, and an action is selected based on a cause of the fault. After the action is applied to the complex network system, additional monitoring is performed to either determine the fault has been resolved or…

Classification of unknown network traffic

Granted: May 14, 2024
Patent Number: 11985169
A network device may receive network traffic for an application. The network device may determine a first classification for the network traffic according to a first classification technique. The first classification may identify the network traffic as relating to a particular application or an unknown application. The network device may determine a second classification for the network traffic according to a second classification technique. The second classification may identify the…

Systems and methods for random connectivity association key negotiation for media access control security

Granted: May 14, 2024
Patent Number: 11985166
In some implementations, a network device may establish a secure connection between the network device and another network device based on a first set of keys generated by the network device, wherein the first set of keys are generated based on a first connectivity association key (CAK) and the secure connection is established based on a media access control security (MACsec) protocol. The network device may transmit a message to the other network device, wherein the message includes an…

Supporting graphQL based queries on yang based configuration data models

Granted: May 14, 2024
Patent Number: 11985023
In one example, a network management system (NMS) device manages a plurality of network devices. The device includes a memory configured to store data representing a data model for a plurality of network devices managed by the NMS, and one or more processors configured to retrieve data representing the data model, construct a GraphQL model having a plurality of nodes, each of the nodes corresponding to one of the network devices according to the data model store data representing…

Enforcing threat policy actions based on network addresses of host threats

Granted: May 7, 2024
Patent Number: 11979415
A device receives information identifying a specific host threat to a network, where the information includes a list of network addresses associated with the specific host threat. The device identifies network elements, of the network, associated with the specific host threat to the network, and determines a network control system associated with the identified network elements. The device determines a policy enforcement group of network elements, of the identified network elements, that…

Mobile network user plane with access network user plane function

Granted: May 7, 2024
Patent Number: 11979349
In an example, a method comprises executing, by an access network user plane function (ANUP) for a mobile network, an access network protocol to implement a connection with a user equipment (UE); implementing, by the ANUP, based on session data received from a control plane function of a mobile core network for the mobile network, an interface with a data network; and routing or switching, by the ANUP, packets between the connection with the UE and the interface with the data network.

Methods and apparatus for facilitating fault detection and/or predictive fault detection

Granted: May 7, 2024
Patent Number: 11979329
Methods and apparatus for automatically identifying and correcting faults relating to poor communications service in a wireless system, e.g., in real time, are described. The methods are well suited for use in a system with a variety of access points, e.g., wireless and/or wired access points, which can be used to obtain access to the Internet or another network. Access points (APs), which have been configured to monitor in accordance with received monitoring configuration information,…

Concurrent transactions on NETCONF devices across network services

Granted: May 7, 2024
Patent Number: 11979281
Techniques are disclosed for managing a network. In one example, a device configuration manager is configured to generate, in accordance with a device management protocol, a configuration change request representing a transaction having a first sub-transaction specifying a first configuration change for a network device of the network and a second sub-transaction specifying a second configuration change for the same network device. The device configuration manager is further configured…

Test system for evaluating thermal performance of a heatsink

Granted: May 7, 2024
Patent Number: 11977006
A test fixture, for a heatsink, may include a probe assembly with a thermocouple probe configured to removably contact a bottom surface of a pedestal of the heatsink, and measure a surface temperature of the heatsink. The test fixture may include an insulator housing configured to house the probe assembly and a heater block, and to insulate the probe assembly from the heater block. The heater block may be provided within the insulator housing and may be configured to provide heat to the…

Automatic deactivation and activation of configuration functionalities of a network device that are incompatible with performance of an in-service software upgrade procedure

Granted: April 30, 2024
Patent Number: 11973648
A network device may be configured to identify a first configuration data structure included in the network device and may be configured to obtain a data package associated with an ISSU procedure that includes a second configuration data structure. The network device may be configured to identify, based on the first configuration data structure and the second configuration data structure, one or more configuration functionalities of the network device that are to not be active during…

Business policy management for self-driving network

Granted: April 30, 2024
Patent Number: 11973645
A controller device manages a plurality of network devices. The controller device includes one or more processing units configured to receive an indication of a stateful intent, the data structure including a plurality of nodes and a plurality of edges, each node of the plurality of nodes being representative of a respective network device of the plurality of network devices. The one or more processing units are configured to determine, using an abstract function configured at a node of…

Physical layer issue detection based on client-side behavior assessments

Granted: April 30, 2024
Patent Number: 11973640
The network management system (NMS) assesses behavior data such as Ethernet error, speed flapping, cold restart, and/or cloud disconnect collected from a respective one of access points (APs) or other wired client-side devices at an edge of a wired network, and determines whether features of the behavior data are indicative of a bad cable issue at a particular port of a particular network device of the wired network to which the respective AP is connected via a cable. The particular…

Application session-specific network topology generation for troubleshooting the application session

Granted: April 23, 2024
Patent Number: 11968075
A network management system (NMS) is described that provides a granular troubleshooting workflow at an application session level using an application session-specific topology from a client device to a cloud-based application server. During an application session of a cloud-based application, a client device running the application exchanges data through one or more access point (AP) devices, one or more switches at a wired network edge, and one or more network nodes, e.g., switches,…