IP Library Granted Patent US 10,038,588
Granted Patent B2
US 10,038,588 · App. 14/856,384 · Granted Jul 31, 2018

Methods and systems for detection of asymmetric network data traffic and associated network devices

Inventors: Venkataraman Anand (San Ramon, CA); Arivu Ramasamy (San Jose, CA)
Assignee: CLOUDGENIX, INC.
H04L41/0668G06F17/30598G06F17/30876H04L12/4633H04L12/4641H04L43/0817H04L45/28H04L47/781H04L47/825H04L69/40H04L43/0811H04L43/10H04L45/22H04L61/1511H04L61/1523H04L61/2503H04W84/04
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,038,588
App. No.
14/856,384
Granted
Jul 31, 2018
Kind
B2
Abstract

A method includes monitoring a plurality of network devices to collect network performance data comprising data flow records of each device on the network and to create a network topology database, accessing the network topology database comprising information on an entry and exit point of each device, the manner in which the devices are connected and a plurality of data flow records on a single data flow from multiple devices on the network and utilizing the network topology database to perform an asymmetric detection algorithm to identify one or more data flows that exited a device via a first path and returned to the device via a different second path.

Claims (26)

1. A method comprising:

monitoring, by a multi-tenant controller, a plurality of network devices to collect network performance data comprising data flow records of each device on the network and to create a network topology database that includes, for the plurality of network devices, a corresponding entry point and a corresponding exit point for each network device of the plurality of network devices, a manner in which the plurality of network devices are connected, and a plurality of data flow records on a single data flow from multiple devices on the network;

accessing the network topology database by the multi-tenant controller;

utilizing the network topology database, by the multi-tenant controller, to perform an asymmetric detection algorithm to detect an asymmetry by identifying one or more data flows between an originating source and a destination that exited a network device of the plurality of network devices via a first path and returned to the network device via a different second path; and

sending, by the multi-tenant controller, a command to the network device to permanently correct the detected asymmetry.

2. The method of claim 1 , wherein the identifying is based, at least in part, on latency attributes.

3. The method of claim 1 , further comprising performing application analysis on a per session basis.

4. The method of claim 1 , wherein the detected asymmetry is selected from the group consisting of bandwidth asymmetry, media access asymmetry, and loss rate asymmetry.

5. The method of claim 1 , wherein the network comprises connectivity selected from the group consisting of hybrid, physical, and logical.

6. The method of claim 1 , wherein a policy string defines a business policy for application to the data flows.

7. The method of claim 6 , wherein the policy string comprises a policy string format.

8. The method of claim 7 , wherein the policy string format is standardized.

9. The method of claim 1 , wherein the data flows are encrypted.

10. A system, including a multi-tenant controller, configured to:

monitor, by the multi-tenant controller, a plurality of network devices to collect network performance data comprising data flow records of each device on the network and to create a network topology database that includes, for the plurality of network devices, a corresponding entry point and a corresponding exit point for each network device of the plurality of network devices, a manner in which the plurality of network devices are connected, and a plurality of data flow records on a single data flow from multiple devices on the network;

access, by the multi-tenant controller, the network topology database;

utilize, by the multi-tenant controller, the network topology database to perform an asymmetric detection algorithm to detect an asymmetry by identifying one or more data flows between an originating source and a destination that exited a network device of the plurality of network devices via a first path and returned to the network device via a different second path; and

send, by the multi-tenant controller, a command to the network device to permanently correct the detected asymmetry.

11. The system of claim 10 , wherein the identifying is based, at least in part, on latency attributes.

12. The system of claim 10 , further configured to perform application analysis on a per session basis.

13. The system of claim 10 , wherein the detected asymmetry is selected from the group consisting of bandwidth asymmetry, media access asymmetry and loss rate asymmetry.

14. The system of claim 10 , wherein the network comprises connectivity selected from the group consisting of hybrid, physical and logical.

15. The system of claim 10 , wherein a policy string defines a business policy for application to the data flows.

16. The system of claim 15 , wherein the policy string comprises a policy string format.

17. The system of claim 16 , wherein the policy string format is standardized.

18. The system of claim 10 , wherein the data flows are encrypted.

Assignments (4)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 21, 2021
From: CLOUDGENIX INC.
To: PALO ALTO NETWORKS, INC.
Reel/Frame 058449/0010 →
RELEASE OF SECURITY INTEREST Recorded May 5, 2020
From: COMERICA BANK
To: CLOUDGENIX, INC.
Reel/Frame 052573/0502 →
SECURITY INTEREST Recorded Aug 22, 2018
From: CLOUDGENIX, INC.
To: COMERICA BANK
Reel/Frame 046668/0798 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 30, 2015
From: ANAND, VENKATARAMAN; RAMASAMY, ARIVU
To: CLOUDGENIX, INC.
Reel/Frame 036692/0075 →
Continuity (2)
Provisional Application 62051293 · Sep 16, 2014
Related Publication 20160080230A1 · Mar 17, 2016