7 results about "Peering" patented technology

In one embodiment, a device determines a mapping between a network destination and Border Gateway Protocol (BGP) peers located across a plurality of autonomous systems for which the network destination is reachable. The device causes, based on the mapping, performance of probing tests along a plurality of paths to the network destination and via the BGP peers, to obtain path performance measurements for the plurality of paths. The device uses a prediction model to generate predicted performance metrics for the plurality of paths based on the path performance measurements. The device configures, based on the predicted performance metrics for the plurality of paths, the BGP peers with BGP peering policies to convey application traffic associated with the network destination via particular path from among the plurality of paths.

Establishing proxy-less connectivity from logically isolated virtual private clouds (VPC)within a cloud environment without the use of VPN or VPC peering is provided. Establishing a service attachment in one VPC, related to a service which is to be accessed, and a service endpoint in another VPC allows for private communication between the two networks without exposing the service to other VPCs in the cloud environment.

Methods and apparatus for interfaces to manage direct network peerings. A system may include a data center, endpoint routers and a connectivity coordinator. The coordinator implements a programmatic interface defining connectivity operations. The coordinator receives a request for dedicated connectivity to data center resources, formatted according to the interface. The coordinator selects a target endpoint router at which to establish a physical link to implement the dedicated connectivity, and transmits a response identifying the target endpoint router and including configuration instructions for setting up a physical link for the dedicated connectivity.

This application provides a communication method and apparatus applied to a first network device. The method includes: obtaining at least one first address, each first address being the address of a second network device and each second network device being a network device that has performed capability negotiation with the first network device; and, based on each first address, performing dynamic capability negotiation for a first service with the corresponding second network device; wherein the at least one first address is an address of the first network device under the enabled dynamic peering function.

In one embodiment, a device identifies available resources of a tunnel in a first software defined network. The device provides, based on the available resources, an indication that the tunnel is available to convey traffic sent by a second software defined network. The device receives, based on the indication, a request to convey traffic sent by the second software defined network via the tunnel in the first software defined network. The device configures a peering node in the first software defined network to connect the second software defined network to the tunnel to allow the traffic sent by the second software defined network to be conveyed via the tunnel.

A conditional high availability peering among all members of an all-active NGFW cluster is established. Data paths are monitored via a dynamic routing protocol capable of conditional advertisement, such as BGP, to detect network isolation failures. Peering can be temporarily suspended with the remote NGFWs by withdrawing the local IP address used for high availability peering to the remote NGFWs, responsive to the detected data path failure. Responsive to detecting a cure of the failed data path using said dynamic routing protocol, the high availability peering to remote NGFW nodes is automatically restored by resuming advertisement of the local peering IP address of the NGFW, wherein the high availability peering is reactivated for all remote NGFW nodes.

Methods are provided for ensuring that a service node selects a local leaf node to reach remote destinations by leveraging reverse metric to inform the active service node of the topology of the leaf nodes. The methods involve obtaining connection information about a service node. The connection information indicates whether the service node is locally connected or connected via a virtual private network (VPN) tunnel. The methods further involve generating a reverse metric signaling based on the connection information. The reverse metric signaling includes a different metric value for the service node when the service node is locally connected than when the service node is connected via the VPN tunnel. The methods further involve providing the reverse metric signaling to the service node to cause the service node to select an intermediate network device from among a plurality of intermediate network devices to forward data traffic to a destination.