Endpoint path assurance

• US 10,333,833 B2
• Filed: 09/25/2017
• Issued: 06/25/2019
• Est. Priority Date: 09/25/2017
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Ponnuswamy, Kannan, Yadav, Navneet, Chari, Arvind, Raytick, Paul Andrew
• Primary Examiner(s): Choudhury, Faisal
• Application Number:
  US15/713,895
• Publication Number:
  US 20190097918A1
• Time in Patent Office: 638 Days
• Field of Search: 370225
• CPC Class Codes: H04L 41/0654 using network fault recovery ring fault isolation or reconfiguration in loop networks without recovery actions by a network management system H04L12/437
• CPC Class Codes: H04L 41/145 involving simulating, designing, planning or modelling of a network
• CPC Class Codes: H04L 41/5009 Determining service level performance parameters or violations of service level contracts, e.g. violations of agreed response time or mean time between failures [MTBF]
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 45/22 Alternate routing
• CPC Class Codes: H04L 45/28 using route fault recovery

Abstract

Systems, methods, and computer-readable media for providing network assurance. In some embodiments, a method can include receiving input used to identify an endpoint. At least one logical object associated with the endpoint of logical objects in a network environment is identified based on the input. A health of the at least one logical object associated with the endpoint is determined. Additionally, a health of the network environment with respect to the endpoint operating to provide services through the network environment is determined based on the determined health of the at least one logical object associated with the endpoint.

Claims

1. A method comprising:

receiving input used to identify an endpoint;

identifying an endpoint group associated with the endpoint from a plurality of logical objects in a network environment based on the input;

determining a health of the identified endpoint group associated with the endpoint using network events generated for the network environment;

identifying a peer endpoint group for the identified endpoint group of the endpoint;

determining a health of the peer endpoint group; and

ascertaining the health of the network environment with respect to the endpoint operating to provide services through the network environment based on the health of the peer endpoint group and the health of the identified endpoint group.

2. The method of claim 1, wherein the input used to identify the endpoint specifies one or a combination of an address associated with the endpoint, an identification of the endpoint, and an endpoint group of the endpoint.

3. The method of claim 1, further comprising:

identifying at least one of a security adherence status, a tenant networking status, a policy analysis status, a hardware programming status, and a ternary content-addressable memory (TCAM) status of the identified endpoint group; and

determining the health of the identified endpoint group associated with the endpoint based on at least one of the security adherence status, the tenant networking status, the policy analysis status, the hardware programming status, and the TCAM status of the identified endpoint group.

4. The method of claim 1, wherein the network events are generated by a network assurance appliance in the network environment.

5. The method of claim 1, wherein the at least one of a respective health of the endpoints in the endpoint group is different from the health of the endpoint group.

6. The method of claim 1, wherein the peer endpoint group is identified from a policy that allows the peer endpoint group to communicate with the endpoint group.

7. The method of claim 1, wherein the peer endpoint group is identified from the input used to identify the endpoint, the input specifying either or both the peer endpoint group and a peer endpoint in the peer endpoint group.

8. The method of claim 1, further comprising:

identifying at least one logical object associated with the peer endpoint group from the plurality of logical objects in the network environment;

determining a health of the at least one logical object associated with the peer endpoint group; and

ascertaining the health of the network environment with respect to the endpoint operating to provide the services through the network environment based on the health of the at least one logical object associated with the peer endpoint group, the health of the peer endpoint group, and the health of the at least one logical object associated with the endpoint.

9. The method of claim 1, further comprising:

maintaining a connectivity health map for the endpoint indicating the health of the network environment with respect to the endpoint operating to provide services through the network environment; and

presenting the connectivity health map for the endpoint to a user.

10. A system comprising:

one or more processors; and

at least one computer-readable storage medium having stored therein instructions which, when executed by the one or more processors, cause the one or more processors to perform operations comprising;

receiving, from a user, input used to identify an endpoint;

identifying an endpoint group associated with the endpoint from a plurality of logical objects in a network environment based on the input;

determining a health of the identified endpoint group associated with the endpoint using network events generated for the network environment;

identifying a peer endpoint group for the identified endpoint group of the endpoint;

determining a health of the peer endpoint group;

ascertaining the health of the network environment with respect to the endpoint operating to provide services through the network environment based on the health of the peer endpoint group and the health of the identified endpoint group; and

presenting, to the user, the health of the network environment with respect to the endpoint operating to provide services through the network environment.

11. The system of claim 10, wherein the instructions which, when executed by the one or more processors, further cause the one or more processors to perform operations comprising:

identifying at least one of a security adherence status, a tenant networking status, a policy analysis status, a hardware programming status, and a ternary content-addressable memory (TCAM) status of the identified endpoint group; and

determining the health of the identified endpoint group associated with the endpoint based on at least one of the security adherence status, the tenant networking status, the policy analysis status, the hardware programming status, and the TCAM status of the identified endpoint group.

12. A non-transitory computer-readable storage medium having stored therein instructions which, when executed by a processor, cause the processor to perform operations comprising:

receiving input used to identify an endpoint associated with an application;

identifying an endpoint group associated with the endpoint from a plurality of logical objects in a network environment based on the input;

determining a health of the identified endpoint group associated with the endpoint using network events generated for the network environment;

identifying a peer endpoint group for the identified endpoint group of the endpoint;

determining a health of the peer endpoint group; and

ascertaining the health of the network environment with respect to the endpoint operating to provide services through the network environment based on the health of the peer endpoint group and the health of the identified endpoint group.