6 results about "Policy-based routing" patented technology

Technologies for creating an optimized and accelerated network pipeline using a network pipeline abstraction layer (NPAL) for policy-based routing (PBR) over Service Function Chaining (SFC) are described. A DPU includes acceleration hardware engine to provide a single accelerated data plane. A processing device can generate a first virtual bridge and a second virtual bridge, the first virtual bridge to be controlled by a first network service hosted on the DPU and having a set of one or more network rules, and the second virtual bridge having a policy-based routing policy (PBR policy). The processing device can add the virtual port between the first virtual bridge and the second virtual bridge. The acceleration hardware engine, in the single accelerated data plane, can route network traffic data using the PBR policy and process the network traffic data using the set of one or more network rules.

Techniques for dynamic policy-based routing of network traffic through a split-tunnel system after session establishment and during session runtime of a secure access connection. After a secure access connection has been established by an endpoint device, processes running on the endpoint device may attempt to send traffic to a destination by generating a Domain Name Service (DNS) request. According to the techniques described herein, a capture component running in the kernel may intercept the DNS requests (and new connections / sockets) as they are being created by processes. The capture component may instead route the DNS requests to a policy engine that applies various DNS and domain-level policy to the DNS request and returns a verdict back to the endpoint device. Using dynamic, real-time policy-based routing of traffic allows for adaptation to new security threats or changing network conditions without having to update static policies on each endpoint device.

Technologies for creating an optimized and accelerated network pipeline using a Network Pipeline Abstraction Layer (NPAL) for Policy-Based Routing (PBR) over Service Function Chaining (SFC) are described. A Data Processing Unit (DPU) includes an acceleration hardware engine to provide a single, accelerated data layer. A processing device can create a first virtual bridge and a second virtual bridge. The first virtual bridge is controlled by a first network service hosted on the DPU and has a set of one or more network rules, while the second virtual bridge has a Policy-Based Routing (PBR) policy. The processing device can add the virtual port between the first and second virtual bridges.The acceleration hardware engine, located in the single accelerated data layer, can route network traffic data based on the PBR policy and process the network traffic data based on the set of one or more network rules.

One or more aspects of the present disclosure are directed to network optimization solutions provided as software agents (applications) executed on network nodes in a heterogenous multi-vendor environment to provide cross-layer network optimization and ensure availability of network resources to meet associated Quality of Experience (QoE) and Quality of Service (QoS). In one aspect, a network slicing engine is configured to receive at least one request from at least one network endpoint for access to the heterogeneous multi-vendor network for data transmission; receive information on state of operation of a plurality of communication links between the plurality of nodes; determine a set of data transmission routes for the request; assign a network slice for serving the request; determine, from the set of data transmission routes, an end-to-end route for the network slice; and send network traffic associated with the request using the network slice and over the end-to-end route.

Policy based routing in networks including software-based networks is disclosed. Packets ingested into a software defined network are altered to include a label header that identifies a source and destination of a packet. If the packets leave or egress the network, the packets are converted back to regular packets by removing the label header. Adding the label header reduces overhead. Further routing can be performed while enforcing policies.

The invention relates to hardware accelerated policy-based routing (PBR) through service function chains (SFC). Techniques are described for creating optimized and accelerated network pipelines using a network pipeline abstraction layer (NPAL) for policy-based routing (PBR) over a service function chain (SFC). The DPU includes an acceleration hardware engine for providing a single acceleration data plane. The processing device may generate a first virtual bridge for control by a first network service hosted on the DPU and having a set of one or more network rules and a second virtual bridge; and the second virtual bridge has a policy-based routing policy (PBR policy). The processing device may add a virtual port between the first virtual bridge and the second virtual bridge. An acceleration hardware engine in a single acceleration data plane may route network traffic data using a PBR policy and process the network traffic data using a set of one or more network rules.