METHODS AND APPARATUS RELATED TO A FLEXIBLE DATA CENTER SECURITY ARCHITECTURE

• US 20130003726A1
• Filed: 09/10/2012
• Published: 01/03/2013
• Est. Priority Date: 09/11/2008
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: SINDHU, Pradeep, Aybay, Gunes, Frailong, Jean-Marc, Venkatramani, Anjan, Vohra, Quaizar
• Granted Patent: US 8,958,432 B2
• Time in Patent Office: Days
• US Class Current: 370/388
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0846 based on copy from other elements
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 41/0897 by horizontal or vertical scaling of resources, or by migrating entities, e.g. virtual resources or entities
• CPC Class Codes: H04L 49/257 Cut-through or wormhole routing
• CPC Class Codes: H04L 49/30 Peripheral units, e.g. input or output ports
• CPC Class Codes: H04L 49/35 Switches specially adapted for specific applications
• CPC Class Codes: H04L 49/356 for storage area networks
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: Y02D 30/00 Reducing energy consumption in communication networks

Abstract

In one embodiment, edge devices can be configured to be coupled to a multi-stage switch fabric and peripheral processing devices. The edge devices and the multi-stage switch fabric can collectively define a single logical entity. A first edge device from the edge devices can be configured to be coupled to a first peripheral processing device from the peripheral processing devices. The second edge device from the edge devices can be configured to be coupled to a second peripheral processing device from the peripheral processing devices. The first edge device can be configured such that virtual resources including a first virtual resource can be defined at the first peripheral processing device. A network management module coupled to the edge devices and configured to provision the virtual resources such that the first virtual resource can be migrated from the first peripheral processing device to the second peripheral processing device.

Claims

1. An apparatus, comprising:

a network management module configured to be coupled to a single logical entity defined by (1) a multi-stage switch fabric and (2) a plurality of edge devices having a first plurality of ports configured to be coupled to the multi-stage switch fabric and a second plurality of ports configured to be coupled to the plurality of peripheral processing devices; and

the network management module configured to send to the single logical entity a signal to provision a plurality of virtual resources such that a first virtual resource from the plurality of virtual resources and defined at a first peripheral processing device from the plurality of peripheral processing devices can be migrated from the first peripheral processing device to a second peripheral processing device from the plurality of peripheral processing devices.