Applying application-based policy rules using a programmable application cache
AssigneeJuniper Networks, Inc.
InventorsRajeev CHAUBEY, Ashok KUMAR
Life of this patent
Estimating the term…
Abstract
A network device receives a packet from a client device, and identifies, based on receiving the packet, a destination of the packet. The network device determines, based on information included in an application cache, an application associated with the destination of the packet, where the first network device, the client device, and the application cache are included in a first local network. The network device determines, based on the information included in the application cache, a policy rule associated with the application, and applies the policy rule to the packet.
Claims20
A first network device, comprising:
- one or more memories;
- and
- one or more processors, coupled to the one or more memories, to:
- identify, based on receiving a packet from a device of a first local network, a destination of the packet;
- determine, based on information included in a first application cache, an application associated with the destination of the packet,
- wherein the first network device and the first application cache are associated with the first local network;
- and
- transmit, based on determining that the first network device is unable to determine the application, the packet to a second network device for determining the application,
- wherein the second network device is associated with a second local network that is different from the first local network, and
- wherein transmitting the packet to the second network device causes synchronization of information in the first application cache with information in a second application cache associated with the second local network.
A method, comprising:
- identifying, by a first network device and based on receiving a packet from a device of a first local network, a destination of the packet;
- determining, by the first network device and based on information included in a first application cache, an application associated with the destination of the packet,
- wherein the first network device and the first application cache are associated with the first local network;
- and
- transmitting, by the first network device and based on determining that the first network device is unable to determine the application associated with the destination of the packet, the packet to a second network device for determining the application associated with the packet,
- wherein the second network device is associated with a second local network that is different from the first local network, and
- wherein transmitting the packet to the second network device causes synchronization of information in the first application cache with information in a second application cache associated with the second local network.
A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:
- one or more instructions that, when executed by one or more processors of a first network device, cause the first network device to:
- identify, based on receiving a packet from a device of a first local network, a destination of the packet;
- determine, based on information included in a first application cache, an application associated with the destination of the packet,
- wherein the first network device and the first application cache are associated with the first local network;
- and
- transmit, based on determining that the first network device is unable to determine the application associated with the destination of the packet, the packet to a second network device for determining the application associated with the packet,
- wherein the second network device is associated with a second local network that is different from the first local network, and
- wherein transmitting the packet to the second network device causes synchronization of information in the first application cache with information in a second application cache associated with the second local network.
Dependencies are inferred from the claim text.