Mosaddaq Hussain Turabi

US Patent:

20090059925, Mar 5, 2009

Filed:

Aug 28, 2007

Appl. No.:

11/846072

Inventors:

Russell WHITE - Holly Springs NC, US
Alvaro Retana - Raleigh NC, US
Bruce Pinsky - San Jose CA, US
John Cavanaugh - Raleigh NC, US
Mosaddaq Turabi - Peoria IL, US

International Classification:

H04L 12/28

US Classification:

370391

Abstract:

In one embodiment, a method includes receiving topology data that indicates multiple communication links and multiple intermediate network nodes in communication based on the communication links. The intermediate network nodes include multiple leaf nodes that terminate communications and multiple transit nodes that facilitate the passage of information between leaf nodes. Aggregation point data is also received, which indicates all aggregation points on the intermediate network nodes. An aggregation point is an interface between a network node and a communication link, through which is output data that is a combination of data received through multiple different interfaces upstream of the interface. A set of paths is determined for which each path in the set connects a different pair of leaf nodes. A measure of aggregation is determined based on a number of aggregated paths of the set of paths. An aggregated path passes through an aggregation point.

US Patent:

20210006545, Jan 7, 2021

Filed:

Sep 16, 2020

Appl. No.:

17/023224

Inventors:

- San Jose CA, US
Mosaddaq Hussain Turabi - San Jose CA, US
Murtuza Attarwala - Davis CA, US

International Classification:

H04L 29/06

Abstract:

In some examples, an example method to provide an IPsec anti-replay window with quality of service (QoS) at a first network endpoint may include configuring a multiple number of anti-replay windows, generating a first security association (SA), and establishing the first SA with a second network endpoint. The first SA may include a first multiple number of security parameter indexes (SPIs), where each of the first multiple number of SPIs may be assigned to a specific QoS level, and each of the first multiple number of SPIs may be assigned to one of the multiple number of anti-replay windows. Establishing the first SA with the second network endpoint may include assigning the first SA to a first encryption key, and providing the first encryption key to the second network endpoint.

US Patent:

20210006546, Jan 7, 2021

Filed:

Sep 21, 2020

Appl. No.:

17/027424

Inventors:

- San Jose CA, US
Mosaddaq Hussain Turabi - San Jose CA, US
Lars Olaf Stefan Olofsson - Dubai, AE
Atif Khan - San Jose CA, US
Praveen Raju Kariyanahalli - San Ramon CA, US

International Classification:

H04L 29/06
H04L 9/08
H04L 9/32

Abstract:

A method may include determining, by a first network device, a type of control channel to open across a transport in a software-defined network (SDN). The method may also include establishing the control channel with a control device via a control plane that is separate from a data plane. The method may further include advertising first security association parameters to the control device via the control channel. The method may include receiving, from the control device via the control channel, second security association parameters associated with a second network device. The method may also include establishing a data plane connection with the second network device using the second security association parameters.

US Patent:

20200059457, Feb 20, 2020

Filed:

Aug 17, 2018

Appl. No.:

16/104456

Inventors:

- San Jose CA, US
Mosaddaq Hussain Turabi - San Jose CA, US
Fabio Rodolfo Maino - Palo Alto CA, US
Vina Ermagan - San Francisco CA, US
Atri Indiresan - Sunnyvale CA, US

International Classification:

H04L 29/06
H04L 12/28
H04L 12/46

Abstract:

A method is performed by an access router of an enterprise network including a first edge router to communicate with a second edge router over a wide area network (WAN). The method includes receiving a packet from a first endpoint, receiving from a mapping service a network location of a second edge router for which the packet is destined and a security association (SA) to encrypt the packet from the access router to the second edge router, and generating for the first edge router one or more path selectors for WAN path selection. The method includes encrypting the packet using the SA, and adding to the encrypted IP packet, in clear text, the path selectors and outer encapsulation including the network location, to produce an encrypted tunnel packet. The method also includes forwarding the encrypted tunnel packet to the second edge router via the first edge router and the WAN.

US Patent:

20190036687, Jan 31, 2019

Filed:

Jun 28, 2018

Appl. No.:

16/021281

Inventors:

- San Jose CA, US
Mosaddaq Hussain TURABI - San Jose CA, US
Lars Olaf Stefan OLOFSSON - Dubai, AE
Atif KHAN - San Jose CA, US
Praveen Raju KARIYANAHALLI - San Ramon CA, US

International Classification:

H04L 9/08
H04L 12/715
H04L 29/12
H04L 12/717
H04L 9/32

Abstract:

A method may include determining, by a first network device, a type of control channel to open across a transport in a software-defined network (SDN). The method may also include establishing the control channel with a control device via a control plane that is separate from a data plane. The method may further include advertising first security association parameters to the control device via the control channel. The method may include receiving, from the control device via the control channel, second security association parameters associated with a second network device. The method may also include establishing a data plane connection with the second network device using the second security association parameters.