US8023504B2
Active / In Force
US
⏱️ 1.8 years remaining
Integrating security server policies with optimized routing control
Assignee: Cisco Technology Inc
•
Filing: 2008-08-27
•
Granted: 2011-09-20
•
Expires: 2028-08-27
Abstract
Abstract In one embodiment, a first set of one or more control policies at a control server of a network domain may be transmitted to a routing master controller of the network domain, which uses a second set of one or more traffic policies to determine optimal paths for directing traffic through the domain. The routing master controller may then generate a third set of one or more integrated policies based on the first and second sets of policies, e.g., based on the knowledge and policies of both the control server and the routing master controller.
Inventors
- 👤 Pritam Shah
- 👤 Kerry E. Lynn
- 👤 Rahul G. Patel
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 15:06
CPC Classifications
H; H04; H04L; H04L45/00; H04L45/30; H04L45/42; H04L45/70
Claims Analysis
Total Claims: 27
Claim 1
Independent Claim
120 words
A method, comprising: receiving a first set of one or more control policies, from a control server of a network domain, at a routing master controller of the network domain, the routing master controller having a second set of one or more traffic policies used to determine optimal paths for directing traffic through the network domain; generating a third set of one or more integrated policies at the routing master controller based on the first and second sets of policies; classifying one or more traffic classes at the routing master controller; and associating at least one optimal path with each of the one or more traffic classes at the routing master controller based on the third set of integrated policies.
Claim 2
Independent Claim
120 words
A method, comprising: receiving a first set of one or more control policies, from a control server of a network domain, at a routing master controller of the network domain, the routing master controller having a second set of one or more traffic policies used to determine optimal paths for directing traffic through the network domain; generating a third set of one or more integrated policies at the routing master controller based on the first and second sets of policies; classifying one or more traffic classes at the routing master controller; and associating at least one optimal path with each of the one or more traffic classes at the routing master controller based on the third set of integrated policies.
Claim 3
Dependent Claim
34 words
The method of claim 1 , further comprising: notifying one or more routers in the network domain of the at least one optimal path associated with each of the one or more traffic classes.
Claim 4
Dependent Claim
48 words
The method of claim 2 , further comprising: receiving traffic at one of the routers; determining the traffic class of the traffic at the router; and routing the traffic at the router based on the traffic class and the associated optimal path received from the routing master controller.
Claim 5
Dependent Claim
69 words
The method of claim 3 , further comprising: defining markings at the control server for traffic classes based on the first set of policies; transmitting the defined markings to one or more control agents; and marking traffic at the one or more control agents of the network domain based on the defined markings, wherein determining the traffic class at the router further comprises identifying the markings of the traffic.
Claim 6
Dependent Claim
33 words
The method of claim 1 , further comprising: defining the traffic classes at the control server; and informing the routing master controller of the traffic classes for classification by the routing master controller.
Claim 7
Dependent Claim
21 words
The method of claim 1 , wherein the at least one optimal path conforms to the third set of integrated policies.
Claim 8
Dependent Claim
19 words
The method of claim 1 , wherein the optimal path is to a particular egress of the network domain.
Claim 9
Dependent Claim
23 words
The method of claim 1 , further comprising: mapping one or more application streams to respective traffic classes at the routing master controller.
Claim 10
Dependent Claim
27 words
The method of claim 8 , further comprising: transmitting information of one or more of the application streams from the control server to the routing master controller.
Claim 11
Dependent Claim
16 words
The method of claim 9 , wherein the information identifies the one or more application streams.
Claim 12
Dependent Claim
22 words
The method of claim 8 , further comprising: learning about one or more of the application streams at the routing master controller.
Claim 13
Dependent Claim
45 words
The method of claim 1 , further comprising: associating one or more policies based on hosts of traffic with the first set of control policies, wherein the generated third set of integrated policies comprise the one or more policies based on the hosts of traffic.
Claim 14
Independent Claim
99 words
A method, comprising: receiving a first set of one or more control policies, from a control server of a network domain, at a routing master controller of the network domain, the routing master controller having a second set of one or more traffic policies used to determine optimal paths for directing traffic through the network domain; and generating a third set of one or more integrated policies at the routing master controller based on the first and second sets of policies, wherein generating the third set of integrated policies further comprises combining the first and second sets of policies.
Claim 15
Independent Claim
99 words
A method, comprising: receiving a first set of one or more control policies, from a control server of a network domain, at a routing master controller of the network domain, the routing master controller having a second set of one or more traffic policies used to determine optimal paths for directing traffic through the network domain; and generating a third set of one or more integrated policies at the routing master controller based on the first and second sets of policies, wherein generating the third set of integrated policies further comprises combining the first and second sets of policies.
Claim 16
Dependent Claim
72 words
The method of claim 13 , further comprising: determining that a particular policy of the first set of control policies conflicts with a particular policy of the second set of traffic policies; and in response, determining that the first set of control policies trump the second set of traffic policies and selecting the particular policy of the first set of control policies for use in generating the third set of integrated polices.
Claim 17
Independent Claim
112 words
A method, comprising: receiving a first set of one or more control policies, from a control server of a network domain, at a routing master controller of the network domain, the routing master controller having a second set of one or more traffic policies used to determine optimal paths for directing traffic through the network domain; generating a third set of one or more integrated policies at the routing master controller based on the first and second sets of policies; detecting a security event based on the third set of integrated policies; and in response, performing a security action associated with the security event based on the third set of integrated policies.
Claim 18
Independent Claim
112 words
A method, comprising: receiving a first set of one or more control policies, from a control server of a network domain, at a routing master controller of the network domain, the routing master controller having a second set of one or more traffic policies used to determine optimal paths for directing traffic through the network domain; generating a third set of one or more integrated policies at the routing master controller based on the first and second sets of policies; detecting a security event based on the third set of integrated policies; and in response, performing a security action associated with the security event based on the third set of integrated policies.
Claim 19
Independent Claim
183 words
A system, comprising: a control server of a network domain configured to determine a first set of one or more control policies; a routing master controller of the network domain configured to receive the first set of control policies from the control server, the routing master controller having a second set of one or more traffic policies used to determine optimal paths for directing traffic through the network domain, the routing master controller configured to generate a third set of one or more integrated policies based on the first and second sets of policies, classify one or more traffic classes, associate at least one optimal path with each of the one or more traffic classes based on the third set of integrated policies, and notify one or more routers in the network domain of the at least one optimal path associated with each of the one or more traffic classes; and wherein the one or more routers are configured to receive traffic, determine the traffic class of the traffic, and route the traffic based on the traffic class and the associated optimal path.
Claim 20
Independent Claim
183 words
A system, comprising: a control server of a network domain configured to determine a first set of one or more control policies; a routing master controller of the network domain configured to receive the first set of control policies from the control server, the routing master controller having a second set of one or more traffic policies used to determine optimal paths for directing traffic through the network domain, the routing master controller configured to generate a third set of one or more integrated policies based on the first and second sets of policies, classify one or more traffic classes, associate at least one optimal path with each of the one or more traffic classes based on the third set of integrated policies, and notify one or more routers in the network domain of the at least one optimal path associated with each of the one or more traffic classes; and wherein the one or more routers are configured to receive traffic, determine the traffic class of the traffic, and route the traffic based on the traffic class and the associated optimal path.
Claim 21
Independent Claim
147 words
An apparatus, comprising: one or more network interfaces configured to communicate with a control server and one or more routers of a network domain; a processor coupled to the network interfaces and configured to execute one or more processes; and a memory configured to store a routing master controller process executable by the processor, the routing master controller process, when executed, operable to: receive a first set of one or more control policies from the control server, use a second set of one or more traffic policies to determine optimal paths for directing traffic through the network domain, generate a third set of one or more integrated policies based on the first and second sets of policies, classify one or more traffic classes, and associate at least one optimal path with each of the one or more traffic classes based on the third set of integrated policies.
Claim 22
Independent Claim
147 words
An apparatus, comprising: one or more network interfaces configured to communicate with a control server and one or more routers of a network domain; a processor coupled to the network interfaces and configured to execute one or more processes; and a memory configured to store a routing master controller process executable by the processor, the routing master controller process, when executed, operable to: receive a first set of one or more control policies from the control server, use a second set of one or more traffic policies to determine optimal paths for directing traffic through the network domain, generate a third set of one or more integrated policies based on the first and second sets of policies, classify one or more traffic classes, and associate at least one optimal path with each of the one or more traffic classes based on the third set of integrated policies.
Claim 23
Dependent Claim
46 words
The apparatus as in claim 17 , wherein the routing master controller process, when executed, is further operable to: notify the one or more routers in the network domain of the at least one optimal path associated with each of the one or more traffic classes.
Claim 24
Dependent Claim
32 words
The apparatus as in claim 18 , wherein the one or more routers are configured to receive traffic and to route traffic based on a traffic class and an associated optimal path.
Claim 25
Dependent Claim
46 words
The apparatus as in claim 17 , wherein the routing master controller process, when executed, is operable to generate the third set of one or more integrated policies based on the first and second sets of policies by combining the first and second sets of policies.
Claim 26
Independent Claim
102 words
An apparatus, comprising: means for receiving a first set of one or more control policies, from a control server of a network domain; means for maintaining a second set of one or more traffic policies used to determine optimal paths for directing traffic through the network domain; means for generating a third set of one or more integrated policies based on the first and second sets of policies; means for classifying one or more traffic classes; and means for associating at least one optimal path with each of the one or more traffic classes based on the third set of integrated policies.
Claim 27
Independent Claim
102 words
An apparatus, comprising: means for receiving a first set of one or more control policies, from a control server of a network domain; means for maintaining a second set of one or more traffic policies used to determine optimal paths for directing traffic through the network domain; means for generating a third set of one or more integrated policies based on the first and second sets of policies; means for classifying one or more traffic classes; and means for associating at least one optimal path with each of the one or more traffic classes based on the third set of integrated policies.
References Cited (Backward Citations)
US6484261B1
Cited
US6700891B1
Cited
US6816973B1
Cited
US6968377B1
Cited
US6775280B1
Cited
US7346677B1
Cited
US7089211B1
Cited
US6836462B1
Cited
US7249374B1
Cited
US7296155B1
Cited
US7082531B1
Cited
US20030125021A1
Cited
US7415023B2
Cited
US7093283B1
Cited
US7284068B1
Cited
US7366894B1
Cited
US20070002862A1
Cited
US20060074899A1
Cited
US6988106B2
Cited
US7373660B1
Cited
US7237267B2
Cited
US20060253902A1
Cited
US20060271658A1
Cited
US20070002768A1
Cited
US20070160015A1
Cited
US20070165638A1
Cited
US20070195742A1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2014-09-19 | 2015-03-21 | 2015-09-20 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2018-09-19 | 2019-03-21 | 2019-09-20 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2022-09-19 | 2023-03-21 | 2023-09-20 | $7700.00 | Window Closed / Lapsed |