Rajeev Kumar

US Patent:

20220272033, Aug 25, 2022

Filed:

Feb 25, 2021

Appl. No.:

17/185279

Inventors:

- San Jose CA, US
Sanjay Kumar Hooda - Pleasanton CA, US
Rajeev Kumar - Sunnyvale CA, US
Saravanan Radhakrishnan - Bangalore, IN
Solomon T. Lucas - Sunnyvale CA, US
Ramesh Yeevani-Srinivas - Fremont CA, US

International Classification:

H04L 12/717
H04L 12/725
H04L 12/715
H04L 12/713
H04L 12/26
H04L 12/46

Abstract:

A map server/map resolver (MS/MR) of a Locator ID Separation Protocol (LISP) control plane for an enterprise private network for group-based service insertion is described. The MS/MR may facilitate communications from a first host having a first endpoint ID (EID) and located at a first tunnel router having a first routing locator (RLOC), to a second host having a second EID and located at a second tunnel router having a second RLOC. The MS/MR receives, from the first tunnel router, a map request for requesting an EID-to-RLOC mapping associated with the second EID and including a group identifier. The MS/MR selects a service insertion policy including an address of a service border router for a service that is registered with the MS/MR, and responds with a map reply including the address for populating an overlay route for forwarding communications via the service border router for insertion of the registered service.

US Patent:

20220263657, Aug 18, 2022

Filed:

Feb 2, 2022

Appl. No.:

17/649699

Inventors:

- Sunnyvale CA, US
Xia Hua - Mountain View CA, US
Woonho Jung - Cupertino CA, US
Rajeev Kumar - Sunnyvale CA, US
Douglas Qian - Mountain View CA, US
Abdul Jabbar Abdul Rasheed - San Jose CA, US

International Classification:

H04L 9/14
H04L 9/08
G06F 21/60
G06F 11/14

Abstract:

Disclosed techniques relate to security of backup data. In some embodiments, a method includes receiving, by data protection service running on a cloud computing system, a first encrypted copy of a backup of a first data store that is associated with a first account of an organization, where the first encrypted copy is encrypted using a first custodian cryptographic key that is shared between the organization and the data protection service that is different than a first production cryptographic key that is private and used by the organization to encrypt a non-backup version of the first data store. The method may include generating a second encrypted copy of the backup, including by encrypting the backup using a storage cryptographic key. The method may include storing the second encrypted copy of the backup in a second data store that is associated with the data protection service.

US Patent:

20220231915, Jul 21, 2022

Filed:

Jan 21, 2021

Appl. No.:

17/248349

Inventors:

- San Jose CA, US
Muninder S. SAMBI - Pleasanton CA, US
Sanjay K. HOODA - Pleasanton CA, US
Rajeev KUMAR - Sunnyvale CA, US
Kedar S. KARMARKAR - San Jose CA, US
Himanshu MEHRA - San Jose CA, US
Nikhil SHARMA - Fremont CA, US

International Classification:

H04L 12/24
H04L 29/12

Abstract:

Techniques for automated configuration are provided. A first device detects a new device connected by one or more new links in a network, and the first device transmits, to a dynamic host configuration protocol (DHCP) server, a request for a first new subnet. The first device then assigns a first address of the first new subnet to a first new interface of the first device. The first device additionally transmits a second address of the first new subnet to the new device, where the new device uses the second address to establish connectivity to the network.

US Patent:

20230114157, Apr 13, 2023

Filed:

Oct 10, 2022

Appl. No.:

18/045202

Inventors:

- San Jose CA, US
Sanjay Kumar Hooda - Pleasanton CA, US
Rajeev Kumar - Sunnyvale CA, US
Ramesh Yeevani-Srinivas - Fremont CA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

H04L 67/51
H04L 65/1073

Abstract:

Services with policy control may be provided. A computing device may receive registration information associated with a border device. The registration information may comprise information identifying a service provided by a server associated with the border device, information identifying the border device, and policies associated with the service. Then an address for the server may be determined. Next a request may be received comprising the information identifying the service provided by the server. In response to receiving the request comprising the information identifying the service provided by the server, the address for the server, the information identifying the border device, and the policies associated with the service may be provided.

US Patent:

20230077101, Mar 9, 2023

Filed:

Sep 5, 2021

Appl. No.:

17/446965

Inventors:

- San Jose CA, US
Rajeev KUMAR - SUNNYVALE CA, US
Roberto Mitsuo KOBO - PLEASANTON CA, US
Vikash AGARWAL - SAN JOSE CA, US

Assignee:

Cisco Technology, Inc., a California corporation - San Jose CA

International Classification:

H04L 12/26
H04L 12/741
H04L 12/751

Abstract:

In one embodiment, network node-to-node connectivity verification is performed in a network including data path processing of packets within a packet switching device. In one embodiment, an echo request connectivity test packet, emulating an echo request connectivity test packet received from a first connected network node, is inserted by the packet switching device prior in its data processing path prior to ingress processing performed for packets received from the first connected network node. A correspondingly received echo reply connectivity test packet is intercepted by the packet switching device during data path egress processing performed for packets to be forwarded to the first connected network node.

US Patent:

20230029882, Feb 2, 2023

Filed:

Jul 30, 2021

Appl. No.:

17/390677

Inventors:

- San Jose CA, US
Anoop Vetteth - Fremont CA, US
Himanshu Mehra - Saratoga CA, US
Rajeev Kumar - Sunnyvale CA, US

International Classification:

H04L 12/721
H04L 12/26

Abstract:

Systems, methods, and computer-readable media are provided for performing secure frame encryption as a service. For instance, a network edge device can determine at least a first path and a second path for routing a data packet. The network edge device can obtain a first plurality of values for at least one network metric, wherein the first plurality of values corresponds to the first path and at least a first backup path associated with the first path. The network edge device can obtain a second plurality of values for the at least one network metric, wherein the second plurality of values corresponds to the second path and at least a second backup path associated with the second path. The network edge device can select one of the first path or the second path for routing the data packet based on a comparison of the first plurality of values and the second plurality of values.

US Patent:

20210271567, Sep 2, 2021

Filed:

Feb 26, 2021

Appl. No.:

17/187286

Inventors:

- Sunnyvale CA, US
Woonho Jung - Cupertino CA, US
Xia Hua - Mountain View CA, US
Douglas Qian - Mountain View CA, US
Rajeev Kumar - Sunnyvale CA, US
Lawrence Chang - San Jose CA, US
Karan Dhabalia - Mountain View CA, US
John Stewart - San Jose CA, US
Rolland Miller - Olathe KS, US

International Classification:

G06F 11/14

Abstract:

Techniques are disclosed relating to the storage of backup data using a time-series data lake. For example, in various embodiments, the disclosed techniques include providing a cloud-based data lake service that maintains data for a plurality of organizations and where, for a first organization, the cloud-based data lake service maintains a time-series data lake that stores a time-series representation of data associated with the first organization. In various embodiments, the data lake service may receive backup data from a plurality of data sources associated with the first organization, generate metadata associated with the backup data, and store the backup data, along with the corresponding metadata, in the time-series data lake.

US Patent:

20210271568, Sep 2, 2021

Filed:

Feb 26, 2021

Appl. No.:

17/187353

Inventors:

- Sunnyvale CA, US
Woonho Jung - Cupertino CA, US
Xia Hua - Mountain View CA, US
Douglas Qian - Mountain View CA, US
Rajeev Kumar - Sunnyvale CA, US
Lawrence Chang - San Jose CA, US
Karan Dhabalia - Mountain View CA, US
John Stewart - San Jose CA, US
Rolland Miller - Olathe KS, US

International Classification:

G06F 11/14
G06F 16/2455
G06F 16/25

Abstract:

Techniques are disclosed relating to providing data views from a time-series data lake to a data warehousing system. In various embodiments, the disclosed techniques include providing, by a cloud-based service, a data lake service that maintains a time-series data lake storing a time-series representation of data from a plurality of data sources associated with a first organization. In some embodiments, the cloud-based service may receive additional backup data, including a first backup image of a first data source, associated with the first organization as part of a backup operation. The cloud-based service may then store a logical backup of the first data source in the data lake and, in response to a query from a data warehousing system, the cloud-based service may retrieve a particular view of the backup data from the data lake and provide it to the data warehousing system.