TECHNOLOGIES FOR QUALITY OF SERVICE BASED THROTTLING IN FABRIC ARCHITECTURES

Technologies for quality of service based throttling in a fabric architecture include a network node of a plurality of network nodes interconnected across the fabric architecture via an interconnect fabric. The network node includes a host fabric interface (HFI) configured to facilitate the transmission of data to/from the network node, monitor quality of service levels of resources of the network node used to process and transmit the data, and detect a throttling condition based on a result of the monitored quality of service levels. The HFI is further configured to generate and transmit a throttling message to one or more of the interconnected network nodes in response to having detected a throttling condition. The HFI is additionally configured to receive a throttling message from another of the network nodes and perform a throttling action on one or more of the resources based on the received throttling message. Other embodiments are described herein.

Generating forward and reverse direction connection-tracking records for service paths at a network edge

Some embodiments provide stateful services in a chain of services identified for some data messages. The edge forwarding element receives a data message at a particular interface of the edge forwarding element that is traversing the edge forwarding element in a forward direction between two machines. The edge forwarding element identifies (1) a set of stateful services for the received data message and (2) a next hop associated with the identified set of stateful services in the forward direction and a next hop associated with the identified set of stateful services in the reverse direction. Based on the identified set of services and the next hops for the forward and reverse directions, the edge forwarding element generates and stores first and second connection tracking records for the forward and reverse data message flows, respectively used to forward data messages received subsequently for the flow.

Providing recommendations for implementing virtual networks

Some embodiments provide a novel method for deploying different virtual networks over several public cloud datacenters for different entities. For each entity, the method (1) identifies a set of public cloud datacenters of one or more public cloud providers to connect a set of machines of the entity, (2) deploys managed forwarding nodes (MFNs) for the entity in the identified set of public cloud datacenters, and then (3) configures the MFNs to implement a virtual network that connects the entity's set of machines across its identified set of public cloud datacenters. In some embodiments, the method identifies the set of public cloud datacenters for an entity by receiving input from the entity's network administrator. In some embodiments, this input specifies the public cloud providers to use and/or the public cloud regions in which the virtual network should be defined. Conjunctively, or alternatively, this input in some embodiments specifies actual public cloud datacenters to use.

Authentication Control based on Previous Actions

A system, process, and computer-readable medium for updating an application cache using a stream listening service is described. A stream listening service may monitor one or more data streams for content relating to a user. The stream listening service may forward the content along with time-to-live values to an application cache. A user may use an application to obtain information regarding the user's account, where the application obtains information from a data store and/or cached information from the application cache. The stream listening service, by forwarding current account information, obtained from listening to one or more streams, to the application cache, reduces traffic at the data store by providing current information from the data stream to the application cache.

Network fast channel construction method based on communication nodes

The invention provides a network fast channel construction method based on a communication node, which can realize efficient data forwarding and transmission when a relay communication node has communication tasks in two directions under the condition of not influencing or changing the use condition of an original mobile communication network. The problems that the data needs to be addressed when the communication switching equipment in the relay communication node forwards the data, the risk of transmission duration increase exists in the states of queuing, operation and the like of the communication switching equipment, and the abnormal risk of data loss and the like exists in the states of congestion, logic failure and the like of the communication switching equipment are solved.

INFORMATION PROCESSING APPARATUS, INFORMATION PROCESSING METHOD, AND COMPUTER-READABLE MEDIUM FOR SCHEDULING FRAME TRANSMISSIONS

System and method for low latency network switching

The invention provides a network switch and an associated method for establishing operation of a low-latency transmission path through a network. The low-latency transmission path bypasses packet queues and schedulers of a switch framework. If each of a plurality of data packets is identified as being transmitted from an inbound port to a destination outbound port over the low latency transmission path, the network switch transmits the data packets to the identified destination outbound port over a low latency transmission, and if the data packet is not identified as being transmitted from the inbound port to the destination outbound port over the low latency transmission path, the network switch transmits the data packet to the destination outbound port over the packet queue and scheduler.

Artificial intelligent enhanced data sampling

Monitoring an operational characteristic of a data communication device within a network includes sampling an operational characteristic of the data communication device at a fine-grain sample rate over a first sampling interval to produce fine-grain samples of the operational characteristic of the data communication device, training a machine learning algorithm using the fine-grain samples of the operational characteristic of the data communication device, the fine-grain sample rate, and a coarse-grain sample rate that is less than the fine-grain sample rate, sampling the operational characteristic of the data communication device at the coarse-grain sample rate over a second sampling interval to produce coarse-grain samples of the operational characteristic of the data communication device, and using the machine learning algorithm to process the coarse-grain samples of the operational characteristic of the data communication device to produce accuracy-enhanced samples of the operational ...

Programmable switching device for network infrastructures

A programmable switching device within a network infrastructure that includes at least one port; and at least one programmable filter communicatively coupled to the at least one port, wherein the at least one programmable filter is configured to permit/deny data packets being transmitted to or from a networked device connected to the at least one port based on a set of defined rules.

Traffic forwarding method and device, electronic equipment and storage medium

The invention relates to a traffic forwarding method and device, electronic equipment and a storage medium, and relates to the field of traffic control. The method comprises the following steps: in response to a received port state change signal for a target port, generating a link change signal and outputting the link change signal to a port manager state machine; reading a link state signal value output by a port manager state machine; in response to determining that the link state signal value is a first preset value, transferring the traffic output by the target port to a preset mirror image analysis port; and forwarding the traffic through the mirror image analysis port. According to the invention, the traffic input to the abnormal port can be output through the mirror image analysis port, so that the packet loss rate is reduced.

Enhanced load processing using linked hierarchical data structures

The present disclosure relates to enhancing load processing for facilitated assignment or modification of access-right data. More specifically, the present disclosure relates to enhancing load processing and data storage using hierarchical data structures that can store various iterations of resource objects. In some embodiments, a computer-implemented method, system, and/or computer-program product tangibly embodied in a non-transitory machine-readable storage medium for enhanced load processing using hierarchical data structures may be provided.

UNIVERSAL CUSTOMER PREMISES EQUIPMENT

System and method for seamlessly transitioning a network connection via a wireless dock

An information handling system includes a network interface card and a processor. The network interface card includes first and second virtual network interface cards. The processor communicates with the network interface card, and connects with an infrastructure access point via the first virtual network interface card. The processor forms multiple network connections via the infrastructure access point and the first virtual network interface card. The processor detects a wireless dock is within a predetermined proximity. In response to the wireless dock being within the predetermined proximity, the processor initiates a connection with the wireless dock via the second virtual network interface card. The processor resumes one or more of the network connections through the wireless dock via the second virtual network interface card. In response to the one or more of the network connections being resumed through the wireless dock, the processor drops the connection with the infrastructure ...

Dynamic random access response (RAR) reception termination

A device and method and system for dynamically processing a random access response (RAR) signal to perform wireless communications is disclose. In some embodiments, the device is configured to receive one or multiple random access response (RAR) signals, wherein when the processor receives multiple RAR signals, it selects a RAR signal and responses to the selected RAR signal based on a content of the one or multiple RAR signals and proceeds with subsequent wireless communication using information contained in the selected RAR signal.

Low-voltage multi-source heterogeneous network data transmission method, device and equipment in power distribution network

The invention discloses a low-voltage multi-source heterogeneous network data transmission method, device and equipment in a power distribution network. Comprising the steps of collecting network mirror image flow data of a power distribution network; according to the network mirroring traffic data, generating each fragment sending message, the fragment sending message comprising a network mirroring traffic data fragment and a fragment number; and transmitting the fragment sending message according to the fragment number. Interference to an original data link is avoided by collecting the network mirror image flow data of the power distribution network data bypass, then the network mirror image flow data are fragmented to generate fragmented sending messages, the fragmentation mode can reduce the volume of the network mirror image flow data, the data transmission speed is higher, the data transmission efficiency is improved, and the data transmission efficiency is improved. And finally, ...

Providing measurements of public cloud connections

Some embodiments provide a novel method for deploying different virtual networks over several public cloud datacenters for different entities. For each entity, the method (1) identifies a set of public cloud datacenters of one or more public cloud providers to connect a set of machines of the entity, (2) deploys managed forwarding nodes (MFNs) for the entity in the identified set of public cloud datacenters, and then (3) configures the MFNs to implement a virtual network that connects the entity's set of machines across its identified set of public cloud datacenters. In some embodiments, the method identifies the set of public cloud datacenters for an entity by receiving input from the entity's network administrator. In some embodiments, this input specifies the public cloud providers to use and/or the public cloud regions in which the virtual network should be defined. Conjunctively, or alternatively, this input in some embodiments specifies actual public cloud datacenters to use.

METHOD FOR PRIORITIZATION OF INTERNET TRAFFIC BY FINDING APPROPRIATE INTERNET EXIT POINTS

Network traffic disruptions

Apparatus including a network switch which includes switching circuitry to switch packets, packet drop decision circuitry to identify a packet that is to be dropped, packet duplication circuitry to duplicate the packet that is to be dropped, producing a first packet and a second packet, and packet exporting circuitry to export the first packet to a memory external to the switch via direct memory access (DMA). Related apparatus and methods are also provided.

ARTIFICIAL INTELLIGENT ENHANCED DATA SAMPLING

Monitoring an operational characteristic of a data communication device within a network includes sampling an operational characteristic of the data communication device at a fine-grain sample rate over a first sampling interval to produce fine-grain samples of the operational characteristic of the data communication device, training a machine learning algorithm using the fine-grain samples of the operational characteristic of the data communication device, the fine-grain sample rate, and a coarse-grain sample rate that is less than the fine-grain sample rate, sampling the operational characteristic of the data communication device at the coarse-grain sample rate over a second sampling interval to produce coarse-grain samples of the operational characteristic of the data communication device, and using the machine learning algorithm to process the coarse-grain samples of the operational characteristic of the data communication device to produce accuracy-enhanced samples of the operational ...

Message forwarding method and device, storage medium, gateway controller and vehicle

The invention provides a message forwarding method and device, a storage medium, a gateway controller and a vehicle. The method comprises the steps that a UDS diagnosis interface is connected with an OBD diagnosis port, other CAN network interfaces are not connected with the OBD diagnosis port, and the method comprises the steps that when a service message containing a request seed sent by collection equipment is received, unlocking of the collection equipment is verified so as to unlock the access permission of the collection equipment; after the access permission of the acquisition equipment is unlocked, a service instruction sent by the acquisition equipment is received; and starting a target network segment mirroring function according to the service instruction, and forwarding the target network segment message to the acquisition equipment in a mirroring manner. According to the method, information interaction is carried out only through the UDS diagnosis interface, the gateway verifies ...

Self-adaptive heven hter detection method for programmable switch

The invention discloses a self-adaptive heavy hter detection method for a programmable switch. The self-adaptive heavy hter detection method is combined with a network measurement method based on state measurement and flow measurement to realize self-adaptive heavy hter detection. Based on the state information regularly obtained from the state measurement module, the most suitable measurement tasks for different time slices can be given, and the flow measurement module is called to dynamically select the corresponding processing logic to detect the specific head hter. In addition, through a method of adding an accurate statistical flow table, the measurement accuracy can be improved to the limit under the condition of less memory occupation, and the types of the measured head hters are further effectively distinguished. According to the method, a real network topology is established, and the feasibility of the method is verified by using a real network flow data set containing various ...

Methods and systems for network flow tracing within a packet processing pipeline

Network appliances can use packet processing pipeline circuits to implement network rules for processing network packet flows by configuring the pipeline's processing stages to execute specific policies for specific network packets in accordance with the network rules. Trace reports that indicate network rules implemented at specific processing stages can be more informative than those indicating policies implemented by the processing stages. A method implemented by a network appliance can store network rules for processing network flows by the processing stages of a packet processing pipeline circuit. The method can produce a trace report in response to receiving a trace directive for one of the network flows wherein one of the processing stages has applied a network rule to a network packet in one of the network flows. The trace report can indicate the network rule in association with the processing stage and the network flow.

CONVERGED AVIONICS DATA NETWORK

An avionics data network (24) includes a network switch core (34) configured for a time-sensitive networking (TSN) schema, a first and second set of networking end nodes (30), (32) communicatively coupled with the network switch core (34). The first set of networking end nodes (30) includes a first subset of networking end nodes (31) configured for a TSN schema and second subset of networking end nodes (35) configured for a legacy Ethernet schema. The network switch core (34) is configured to receive, from the first set of networking end nodes (30), a set of data frames (33), determine the respective schema of the set of data frames (33), forward the set of data frames (33) to a predetermined queue on an egress port (38) based on the determined respective schema, and transmit set of data frames (33) to an end node (32) having a corresponding schema.

NETWORK SERVICE INTEGRATION INTO A NETWORK FABRIC OF A DATA CENTER

Top-of-rack (TOR) switches are connected to a network fabric of a data center. Each TOR switch corresponds to a rack of the data center, and is configured to provide access to the network fabric for computing devices mounted in the rack. In one method, a client device of a user is used to select various network service options. The service options correspond to services that can be provided to computing equipment of the user that is mounted in various racks of the data center. In response to receiving the selection of one or more service options, the network fabric of the data center is configured to connect the computing equipment to the selected services. In one approach, the network fabric is configured by creating and/or configuring one or more virtual networks to provide the connection to the services.

Transport control word architecture for physical port mirroring

Aspects include receiving, at an input/output (I/O) processor, a transport control word (TCW) that includes an instruction to perform physical port mirroring. It is identified, by the I/O processor, a first port to be mirrored and a second port to perform the mirroring. The second port is a physical port on a host bus adapter (HBA). In response to outbound data being sent to the first port for transmission to a first target device and to the instruction specifying outbound port mirroring, the I/O processor sends a copy of the outbound data to a second target device via the second port. In response to receiving inbound data at the first port and to the instruction specifying inbound port mirroring, a copy of the inbound data is transmitted to the second target device via the second port.

Live socket redirection

Networking methods and systems include determining a first state of a connection on a first network based on connection buffers at a host. A first system call relating to the connection is identified. A next state of the connection that would result from the first system call is determined. The first system call is executed responsive to a determination that the next state does not move the connection farther from a safe transition state.

Stream Listening Cache Updater

A system, process, and computer-readable medium for updating an application cache using a stream listening service is described. A stream listening service may monitor one or more data streams for content relating to a user. The stream listening service may forward the content along with time-to-live values to an application cache. A user may use an application to obtain information regarding the user’s account, where the application obtains information from a data store and/or cached information from the application cache. The stream listening service, by forwarding current account information, obtained from listening to one or more streams, to the application cache, reduces traffic at the data store by providing current information from the data stream to the application cache.

Generating path usability state for different sub-paths offered by a network link

Some embodiments provide a method for quantifying quality of several service classes provided by a link between first and second forwarding nodes in a wide area network (WAN). At a first forwarding node, the method computes and stores first and second path quality metric (PQM) values based on packets sent from the second forwarding node for the first and second service classes. The different service classes in some embodiments are associated with different quality of service (QoS) guarantees that the WAN offers to the packets. In some embodiments, the computed PQM value for each service class quantifies the QoS provided to packets processed through the service class. In some embodiments, the first forwarding node adjusts the first and second PQM values as it processes more packets associated with the first and second service classes. The first forwarding node also periodically forwards to the second forwarding node the first and second PQM values that it maintains for the first and second ...

LAYER-2 NETWORKING SPAN PORT IN A VIRTUALIZED CLOUD ENVIRONMENT

METHOD AND SYSTEM FOR SERVICE SWITCHING USING SERVICE TAGS

The disclosure herein describes a system, which provides service switching in a datacenter environment. The system can include a service switching gateway, which can identify a service tag associated with a received packet. During operation, the service switching gateway determines a source client, a requested service, or both for the packet based on the service tag, identifies a corresponding service portal based on the service tag, and forwards the packet toward the service portal. The service switching gateway can optionally maintain a mapping between the service tag and one or more of: a source client, a required service, the service portal, and a tunnel encapsulation. The service switching gateway can encapsulate the packet based on an encapsulation mechanism supported by the service portal and forward the packet based on the mapping.

Messaging between remote controller and forwarding element

Some embodiments of the invention provide a forwarding element that can be configured through in-band data-plane messages from a remote controller that is a physically separate machine from the forwarding element. The forwarding element of some embodiments has data plane circuits that include several configurable message-processing stages, several storage queues, and a data-plane configurator. A set of one or more message-processing stages of the data plane are configured (1) to process configuration messages received by the data plane from the remote controller and (2) to store the configuration messages in a set of one or more storage queues. The data-plane configurator receives the configuration messages stored in the set of storage queues and configures one or more of the configurable message-processing stages based on configuration data in the configuration messages.

USING ATTRIBUTE VECTOR FOR DYNAMIC CONTENT-BASED ATTRIBUTE QOS FOR NETWORKING AND INTERCONNECT FABRICS

APPARATUS AND METHOD TO PERFORM SYNCHRONIZATION SERVICES IN A SWITCH

Switching architectures to manage mutex primitives used to control access to objects or data blocks that are being processed by two or more microservices in a data center are provided.

Method and device for acquiring equipment information across VLAN (Virtual Local Area Network), and electronic equipment

The invention provides a method and a device for acquiring equipment information across a VLAN (Virtual Local Area Network), and electronic equipment. In the application, the specified network port of the target network equipment is configured to allow the message in each VLAN accessed by the target network equipment to pass through, and the remaining network ports of the target network equipment are accessed to the VLANs of different network segments, so that after the detection message for detecting the equipment in the VLANs of the different network segments is constructed, the detection equipment sends the detection message to the network equipment through the specified network port, and the detection message is sent to the network equipment through the network port. In the embodiment of the invention, the target network equipment can forward the detection message to the target VLAN through the remaining network ports, then the target equipment in the target VLAN can return the response ...

Network micro burst flow detection method based on programmable switch and related equipment

The invention discloses a network micro burst flow detection method based on a programmable switch and related equipment, and belongs to the field of network security, and the method comprises the following steps: after a data packet enters the programmable switch, extracting the queue depth of a queue from a packet header, and if the queue depth is greater than a preset threshold value, determining that the data packet is a micro burst flow data packet; the BF and the IBLT are used for storing flow information carried in the micro burst flow data packet, the BF and the IBLT are equal in length, and the initial values of the BF and the IBLT are both 0; in the IBLT, information stored in each slot position comprises a stream id exclusive-or value of a corresponding stream, a stream count and a packet count; forwarding each data packet entering the switch according to the original forwarding path; and after each preset time interval, selecting a specified number of data packets for mirroring ...

Method and system for service switching using service tags

The disclosure herein describes a system, which provides service switching in a datacenter environment. The system can include a service switching gateway, which can identify a service tag associated with a received packet. During operation, the service switching gateway determines a source client, a requested service, or both for the packet based on the service tag, identifies a corresponding service portal based on the service tag, and forwards the packet toward the service portal. The service switching gateway can optionally maintain a mapping between the service tag and one or more of: a source client, a required service, the service portal, and a tunnel encapsulation. The service switching gateway can encapsulate the packet based on an encapsulation mechanism supported by the service portal and forward the packet based on the mapping.

NETWORK INTERFACE DEVICE

A network interface device has data path circuitry configured to cause data to be moved into and/or out of the network interface device. The data path circuitry comprises: first circuitry for providing one or more data processing operations; and interface circuitry supporting channels. The channels comprises command channels receiving command information from a plurality of data path circuitry user instances, event channels providing respective command completion information to the plurality of data path user instances; and data channels providing the associated data.

Traffic acquisition device and system of network target range

The invention discloses a traffic acquisition device and system of a network target range, the device comprises at least one computing node, at least one Leaf switch and at least one traffic analyzer, and the computing nodes are in service network interconnection through a first physical network card; the flow mirror image of the virtual host VM of each computing node is connected with a Leaf switch through a second physical network card to form a collection network, network isolation between services is completed through the vlan technology, the Leaf switch controls flow one-way access, and collected flow data is transmitted to a flow analyzer to be analyzed. The method is especially suitable for a large-scale target range, and can complete the effective and comprehensive collection of the traffic data under the condition of maintaining the interconnection and intercommunication of multiple scenes.

ENHANCED LOAD PROCESSING USING LINKED HIERARCHICAL DATA STRUCTURES

The present disclosure relates to enhancing load processing for facilitated assignment or modification of access-right data. More specifically, the present disclosure relates to enhancing load processing and data storage using hierarchical data structures that can store various iterations of resource objects. In some embodiments, a computer-implemented method, system, and/or computer-program product tangibly embodied in a non-transitory machine-readable storage medium for enhanced load processing using hierarchical data structures may be provided.

PROVIDING RECOMMENDATIONS FOR IMPLEMENTING VIRTUAL NETWORKS

Some embodiments provide a novel method for deploying different virtual networks over several public cloud datacenters for different entities. For each entity, the method (1) identifies a set of public cloud datacenters of one or more public cloud providers to connect a set of machines of the entity, (2) deploys managed forwarding nodes (MFNs) for the entity in the identified set of public cloud datacenters, and then (3) configures the MFNs to implement a virtual network that connects the entity's set of machines across its identified set of public cloud datacenters. In some embodiments, the method identifies the set of public cloud datacenters for an entity by receiving input from the entity's network administrator. In some embodiments, this input specifies the public cloud providers to use and/or the public cloud regions in which the virtual network should be defined. Conjunctively, or alternatively, this input in some embodiments specifies actual public cloud datacenters to use.

Network management apparatus, network management system, and non-transitory computer-readable storage medium

A network management apparatus includes a first controller, a memory, and a second controller. The first controller configured to operate a first virtual machine including a first container monitoring the mirror packet and a virtual switch transferring the mirror packet. The memory configured to store a destination information of the mirror packet and an address corresponding to the first container in association with each other. The second controller configured to cause the virtual switch to perform an operation to transmit the address corresponding to the first container from the virtual switch and cause the virtual machine to perform an operation to transfer the mirror packet to the first container from the first virtual machine, using the address corresponding to the first container when the virtual machine receives the mirror packet from the virtual switch and requests address resolution for the destination information of the mirror packet.

Dynamically assigning service classes for a QOS aware network link

Some embodiments provide a method for quantifying quality of several service classes provided by a link between first and second forwarding nodes in a wide area network (WAN). At a first forwarding node, the method computes and stores first and second path quality metric (PQM) values based on packets sent from the second forwarding node for the first and second service classes. The different service classes in some embodiments are associated with different quality of service (QoS) guarantees that the WAN offers to the packets. In some embodiments, the computed PQM value for each service class quantifies the QoS provided to packets processed through the service class. In some embodiments, the first forwarding node adjusts the first and second PQM values as it processes more packets associated with the first and second service classes. The first forwarding node also periodically forwards to the second forwarding node the first and second PQM values that it maintains for the first and second ...

Computer-readable recording medium recording port switching program and port switching method

A non-transitory computer-readable recording medium is provided in which a port switching program for causing a computer to execute a process including: transmitting, in response to a mirror switching instruction that specifies a migration source port and a migration destination port, a first mirror switching notification to a virtual switch that has the migration destination port to request a change of mirror setting in the migration destination port; canceling mirror setting for a transmission packet to the migration destination port in the migration source port; and canceling mirror setting for a received packet from the migration destination port in the migration source port in response to a second mirror switching notification from the virtual switch, the second mirror switching notification indicating the change of the mirror setting in the migration destination port is stored.

Method for carrying out equipment blocking result detection according to front and back flow sub-data of network security defense equipment

The invention relates to the technical field of technical network security detection, in particular to a method for detecting a device blocking result according to front and back flow sub-data of a network security defense device. The method comprises the following steps: adding switches in front of and behind defense equipment, mirroring traffic of the switches in front of and behind the defense equipment to flow division equipment, judging whether traffic information of defense equipment alarm exists or not according to front flow division data, and judging whether the defense equipment is successfully blocked or not according to rear traffic. Therefore, network security personnel can carry out defense measures in the next step, the security of subsequent network equipment is improved, and the privacy and security of clients are protected.

Flexible Ethernet switching systems and methods

A switch system includes interface circuitry configured to ingress and egress clients each including a stream of encoded blocks; and switch circuitry configured to switch the clients between the interface circuitry based on block boundaries of the stream of encoded blocks. The stream of encoded blocks can include 64 b/66 b encoding. Each block in the stream of encoded blocks can be switched intact.

Intelligent substation network switch and edge calculation method

The invention discloses an intelligent substation network switch and an edge calculation method. The switch internally comprises a switch chip, an internal high-speed communication bus, a data bus, a control bus and a CPU. The switch chip is connected with the CPU through an internal high-speed communication bus; the switch chip is connected with the CPU through a data bus; the switch chip is connected with the CPU through a control bus; the switch chip comprises an ACL (Access Control List) module and a high-bandwidth CPU (Central Processing Unit) port; the ACL module can be used for realizing message matching setting and acquiring data; the high-bandwidth CPU port can meet edge computing requirements; the rate of the internal communication bus can meet the transmission requirement of a message from a CPU mirror image port of the switch chip to a CPU; mirror image message processing software and edge computing application software run on the CPU.

Systems and methods for operating system deployment and lifecycle management of a smart network interface card

An information handling system may include a processor, a smart network interface card communicatively coupled to the processor, a basic input/output system configured to be the first code executed by the processor when the information handling system is booted and configured to initialize components of the information handling system into a known state, and a management controller configured for out-of-band management of the information handling system. The management controller may further configured to communicate information regarding the smart network interface card to a provisioning server, receive parameters from the provisioning server for a network-based boot of the smart network interface card, and communicate the parameters to the smart network interface card to enable the smart network interface card to boot from an image stored at the provisioning server.

JSBridge-based interaction method and device, electronic equipment and storage medium

The embodiment of the invention provides an interaction method and device based on JSBridge, electronic equipment and a storage medium. The method is applied to the technical field of data interaction and comprises the steps that a first layer sends message data from a first system end to a first circular message queue; the second layer takes out the message data from the first circular message queue and processes the second system end according to the message data to obtain returned message data; the second layer sends the returned message data to a second circular message queue; the first layer takes out the return message data from the second circular message queue and sends the return message data to the first circular message queue; and the second layer takes the return message data from the first circular message queue and deletes the message data and the return message data from the first circular message queue. In this way, the returned data and the message data can be compared, ...

Equivalent load sharing method and device, network equipment and storage medium

The invention relates to the technical field of communication, and provides an equivalent load sharing method and device, network equipment and a storage medium. The method comprises the following steps: monitoring a plurality of member ports of an equivalent route; wherein the (i + 1) th member port in all member ports is a backup port of the ith member port, and i is a positive integer; when the target member port in the congestion state is monitored, obtaining a to-be-discarded message of the target member port; and the message to be discarded is looped back to the backup port of the target member port so as to realize equivalent load sharing. Each member of the equivalent routing is used as a backup port of a previous member, the port of each member is monitored, and the message to be discarded of the member port in the congestion state is looped back to be sent to the backup port of the member port, so that equivalent load sharing and load balancing are realized; packet loss is reduced ...

Interconnect address based QoS regulation

In various implementations, provided are systems and methods for an integrated circuit including a completer device, a requester device, and an interconnect fabric. The requester device is configured to generate transactions to the completer device, where each transaction includes a request packet that includes an attribute associated with the completer device; and the interconnect fabric is coupled to the requester device and the completer device. The integrated circuit can also include a QoS regulator configured to identify, based on a first attribute associated with the completer device, a first QoS value establishing a first priority level for a first request packet generated by the requester device, and modify the first request packet to include the first QoS value.

Data exchange method, device and system and electronic equipment

The invention discloses a data exchange method, device and system and electronic equipment. The method comprises the steps that a subscription node sends a subscription request to a center node, the subscription request comprises attribute information of to-be-subscribed data, and the to-be-subscribed data comprises multiple types of data; under the condition that the data message containing the attribute information is monitored, the subscription node synchronously obtains the data message from the data cluster, and the data message contains multiple types of data; the subscription node calculates the similarity between the attribute information contained in each type of data in the data message and the attribute information contained in each type of data to be subscribed; and the subscription node determines target type data according to the similarity and stores the target type data in a database of the subscription node. The technical problems that in the prior art, only data collection ...

Technologies for adaptive network packet egress scheduling

Technologies for adaptive network packet egress scheduling include a switch configured to configure an eligibility table for a plurality of ports of the switch, wherein the eligibility table includes a plurality of rounds. The switch is further configured to retrieve an eligible mask corresponding to a round of a plurality of rounds of the eligibility table presently being scheduled and determine a ready mask that indicates a ready status of each port. The switch is further configured to determine, for each port, whether the eligible status and the ready status indicate that port is both eligible and ready, and schedule, in response to a determination that at least one port has been determined to be both eligible and ready, each of the at least one port that has been determined to be both eligible and ready. Additional embodiments are described herein.

Providing recommendations for implementing virtual networks

Some embodiments provide a novel method for deploying different virtual networks over several public cloud datacenters for different entities. For each entity, the method (1) identifies a set of public cloud datacenters of one or more public cloud providers to connect a set of machines of the entity, (2) deploys managed forwarding nodes (MFNs) for the entity in the identified set of public cloud datacenters, and then (3) configures the MFNs to implement a virtual network that connects the entity's set of machines across its identified set of public cloud datacenters. In some embodiments, the method identifies the set of public cloud datacenters for an entity by receiving input from the entity's network administrator. In some embodiments, this input specifies the public cloud providers to use and/or the public cloud regions in which the virtual network should be defined. Conjunctively, or alternatively, this input in some embodiments specifies actual public cloud datacenters to use.

Technologies for quality of service based throttling in fabric architectures

Technologies for quality of service based throttling in a fabric architecture include a network node of a plurality of network nodes interconnected across the fabric architecture via an interconnect fabric. The network node includes a host fabric interface (HFI) configured to facilitate the transmission of data to/from the network node, monitor quality of service levels of resources of the network node used to process and transmit the data, and detect a throttling condition based on a result of the monitored quality of service levels. The HFI is further configured to generate and transmit a throttling message to one or more of the interconnected network nodes in response to having detected a throttling condition. The HFI is additionally configured to receive a throttling message from another of the network nodes and perform a throttling action on one or more of the resources based on the received throttling message. Other embodiments are described herein.

Flow collection performance optimization method based on OpenSwitch

The invention discloses a flow collection performance optimization method based on OpenSwitch, and belongs to the field of computers. The method comprises the following steps: S1, carrying out flow collection by using NetFlow; and S2, collecting the flow of the OpenStack cloud platform. The S1 specifically comprises the following steps: the VDS or a third-party virtual switch environment uses NetFlow to carry out flow collection in the VDS environment; S11, the NetFlow setting of the VDS is configured; and S12, monitoring is started on any port group needing to be monitored. According to the invention, the performance can be optimized, and high throughput is realized.

REMOTE MANAGEMENT OF A SWITCH STACK

An example network manager receives, from a conductor switch of a switch stack, an active configuration. The network manager determines, based on the active configuration, switch model types for a plurality of switches of the switch stack. The network manager determines, based on the switch model types and the active configuration, a number of ports of the plurality of switches of the switch stack and a current configuration of each port of each switch of the switch stack. The network manager updates a device configuration element of a network management user interface to display the current configuration of each port of each switch of the switch stack in a manner that indicates that the switch stack is a single logical switch.

Message broadcasting method and device

The embodiment of the invention provides a message broadcasting method and device, applied to a first OVS of a first cabinet, the method comprises the following steps: acquiring a first message to be broadcasted, the first message belonging to a target tenant network; first addresses of other OVSs in the first cabinet under the target tenant network and second addresses of broadcast agents in other cabinets are determined according to pre-recorded addresses of all OVSs in the first cabinet under the different tenant networks and addresses of broadcast agents in all the cabinets under the different tenant networks, and one broadcast agent is one OVS; and broadcasting the first message to other OVSs of the first cabinet according to the first address and the second address, and broadcasting the first message to broadcast agents in other cabinets. According to the technical scheme provided by the embodiment of the invention, when the OVS broadcasts the message, only one message needs to be ...

Method and apparatus for communication of data between NDT/NDI instrument and an external network

A non-destructive testing and inspection (NDT/NDI) system having a communication gateway removably secured to an existing NDT/NDI instrument by a clip-on clasp. The gateway comprises a processor, a network interface, a housing configured to be removably secured onto the NDT/NDI instrument, an interconnect configured to be communicatively coupled with and to carry data to or from the NDT/NDI instrument, and memory storing computer readable code which, when executed on the processor, causes the processor to communicate data with an external network over the network interface. The data includes inspection data which can be any one of the following: ultrasonic scans of A, B, C or S, eddy current strip charts.

Adaptable computing network with real time, intelligent, 4D spherical scalability, tech stack awareness, tech stack integration, automatic bi-directional communications channel switching and order equilibrium—for large enterprise, time sensitive event/transaction driven applications

Systems, methods, software and a framework are disclosed for an improved, adaptable, intelligent, real time, machine learning, AI/Robot integrated, large scale, cloud computing based synchronous communications/computing network enabled with adaptive intelligent ‘4D spherical scaling’ of databases, servers, and/or virtual servers and/or server clusters and elastically with their directly associated computer caches/storage and linked and ‘intra-scalable microservices’ and with external resources and with ‘tech stack awareness’, and ‘tech stack integration’ functionality.

Visualization of path between logical network endpoints

Some embodiments provide a method that receives a request for information regarding a path between endpoints of a logical network. The method provides, for display, a visualization of the path including (i) a set of logical network components between the endpoints and (ii) a set of physical network components that implement the logical network components. The physical network components and the logical network components are aligned in the display. In some embodiments, the method receives data regarding a packet tracing operation between the endpoints. The method generates a display including (i) a visualization of the path between the endpoints of the logical network and (ii) a representation of the received data regarding the packet tracing operation, with the packet tracing operation data is visually linked to the components of the path.

PROVIDING RECOMMENDATIONS FOR IMPLEMENTING VIRTUAL NETWORKS

Some embodiments provide a novel method for deploying different virtual networks over several public cloud datacenters for different entities. For each entity, the method (1) identifies a set of public cloud datacenters of one or more public cloud providers to connect a set of machines of the entity, (2) deploys managed forwarding nodes (MFNs) for the entity in the identified set of public cloud datacenters, and then (3) configures the MFNs to implement a virtual network that connects the entity's set of machines across its identified set of public cloud datacenters. In some embodiments, the method identifies the set of public cloud datacenters for an entity by receiving input from the entity's network administrator. In some embodiments, this input specifies the public cloud providers to use and/or the public cloud regions in which the virtual network should be defined. Conjunctively, or alternatively, this input in some embodiments specifies actual public cloud datacenters to use.

Network storm source tracing method for power system local area network

The invention discloses a network storm source tracing method for a power system local area network. The method comprises the following steps: connecting a mirror image port of a core switch; counting the ratio of the network flow in the normal operation state to the flow of single equipment in the local area network, and judging whether a network storm occurs or not; and positioning a problem area by using network loop detection and IP address conflict detection. According to the network storm source tracing method for the power system local area network provided by the invention, tracing can be carried out at the first time when the storm occurs, the data of the whole switch is dynamically obtained through the mirror port, and the calculation result is more accurate and has real-time performance; loop detection and IP address conflict detection are combined, various network storms can be processed, and the applicability is higher. According to the invention, a good assisting effect can ...

VIDEO ROUTER

The embodiments described herein provide a router control system for routing data streams from a plurality of input ports to a plurality of output ports using at least one video router. Each router in the system comprises a backplane including a plurality of backplane connections, at least one line card and at least one fabric card. Each line card comprises a plurality of input ports and output ports, each input port and output port being coupled to a respective external signal through the backplane, and a line card cross-point switch having a plurality of input switch terminals and a plurality of output switch terminals, wherein a first plurality of input and output switch terminals are coupled to a respective plurality of input and output ports and a second plurality of input and output switch terminals are coupled to a respective plurality of backplane connections. Each fabric card comprises a fabric card cross-point switch having a plurality of input switch terminals and a plurality ...

CONVERGED AVIONICS DATA NETWORK

An apparatus and method (400) for operating an avionics data network (24), (224) includes a network switch core (34), (234) configured for a time-sensitive networking (TSN) schema (31), (231), a set of ARINC 664 (A664) and a set of TSN networking end nodes (35), (235) communicatively connected with the network switch core (34), (234). The network switch core (34), (234) is configured to receive, from a first set of networking end nodes (30), (230), a set of data frames (33), determine the respective schema of the set of data frames (33), police the set of data frames (33) based on the determined respective schema using a set of predetermined rules, forward the set of data frames (33) to a predetermined queue (39) on an egress port (38) of the network switch core (34), (234) based on the determined respective schema, and transmit set of data frames (33) to an end node of the second set of networking end nodes (32), (232) having a corresponding schema.

PRP equipment with multiple redundant ports, message transmission method, equipment and medium

The invention provides PRP equipment with multiple redundant ports, a message transmission method, equipment and a medium. The PRP equipment comprises a switching module, a redundancy processing module and a plurality of Ethernet interface chips, wherein the switching module and the redundancy processing module are connected with each other, and the Ethernet interface chips are connected with the redundancy processing module. The switching module is used for receiving a message to be forwarded and forwarding the message according to an MAC table item; the redundancy processing module is used for receiving the message forwarded by the switching module, copying the message into a plurality of copies, adding PRP labels respectively, and forwarding a plurality of generated PRP messages outwards through a plurality of Ethernet interface chips; and the redundancy processing module also receives at least one PRP message of an external terminal through a plurality of Ethernet interface chips connected ...

SIGNAL TRANSFER SYSTEM, PATH CONTROL DEVICE, AND SIGNAL TRANSFER METHOD

A path control device controls a plurality of paths for transmitting signals through a network including a plurality of signal transfer devices that transfer signals while switching a first transmission period during which high-priority traffic can be transmitted and a second transmission period during which low-priority traffic can be transmitted. The path control device includes: a calculation unit that calculates a plurality of paths through which signals are transferred, based on network configuration information indicating a configuration of the network; an estimation unit that estimates paths for low-priority traffic so as to increase the number of low-priority traffic flows to be transferred during a predetermined period through the plurality of paths calculated by the calculation unit, in a case in which the plurality of signal transfer devices detect an end of high priority traffic in the first transmission period, in accordance with statistical values in the second transmission ...

Network interface architecture having a directly modifiable pre-stage packet transmission buffer

An improved network architecture for minimizing latency of preparing and sending data to a network over a physical medium. A system for communicating messages over a network may create and store ready-to-send data packets in a data buffer next to or as close as possible, either physically and/or logically, to a MAC component. The MAC component may then receive the data packet directly from the data buffer and encapsulate the data packet into a frame suitable for transmission to the network. The data packet is modifiable while being stored in the data buffer prior to transmission to the network.

Authentication control based on previous actions

A system, process, and computer-readable medium for updating an application cache using a stream listening service is described. A stream listening service may monitor one or more data streams for content relating to a user. The stream listening service may forward the content along with time-to-live values to an application cache. A user may use an application to obtain information regarding the user's account, where the application obtains information from a data store and/or cached information from the application cache. The stream listening service, by forwarding current account information, obtained from listening to one or more streams, to the application cache, reduces traffic at the data store by providing current information from the data stream to the application cache.

AT LEAST ONE MECHANISM TO PERMIT, AT LEAST IN PART, ALLOCATION AND/OR CONFIGURATION, AT LEAST IN PART, OF AT LEAST ONE NETWORK-ASSOCIATED OBJECT

In an embodiment, at least one interface mechanism may be provided. The mechanism may permit, at least in part, at least one process allocate, at least in part, and/or configure, at least in part, at least one network-associated object. Such allocation and/or configuration, at least in part, may be in accordance with at least one parameter set that may correspond, at least in part, to at least one query issued by the at least one process via the mechanism. Many modifications are possible without departing from this embodiment.

Service Process Control Method and Network Device

A service process control method includes selecting, according to an execution policy of at least one service deployed on a network device, M data processors for processing a packet received by the network device, determining a processing sequence for the selected M data processors to process the packet, and invoking the selected M data processors to sequentially process, according to the processing sequence, the packet. An execution sequence for a data processor to process the packet is dynamically generated according to a policy set corresponding to the service.

PARALLEL DATA PROCESSING FOR SERVICE FUNCTION CHAINS SPANNING MULTIPLE SERVERS

Systems, computer-readable media, and methods are disclosed for parallel data processing for service function chains with network functions spanning multiple servers. An example system includes a first server hosting a first network function of a service function chain, a second server hosting a second network function of the service function chain, a mirror function deployed in a first switch to replicate a plurality of packets received by the system and to send respective copies of the plurality of packets to the first network function and to at least one of the second network function and a third network function of the service function chain, and a merge function deployed in a second switch to merge respective outputs of the first network function and the at least one of the second network function and the third network function.

Method for shortening construction system integration time of geographic scheduling control system

The invention belongs to the technical field of power dispatching control, and discloses a method for shortening construction system integration time of a ground-level dispatching control system, which is characterized in that a step of shortening plant station data access time and a step of centralizing working positions of plant stations are added; the method comprises the following steps of: automatically checking data, using a data monitoring program, transforming a network structure of a dispatching master station, and configuring an NAT (Network Address Translation) switch of a regulation and control system; and the step of centralizing the working positions of the plant stations adopts a method of scheduling a main station system switching scheme, configuring a server and related network equipment, and configuring a regulation and control system NAT (Network Address Translation) router. The invention has the following beneficial technical effects: the expenditure of manpower, money ...

Data processing method and apparatus

The present disclosure provides a method and a device for data processing. The method includes acquiring at least two pathways of communication messages, where the at least two pathways of communication messages are messages intercepted in a bypass manner from messages transmitted by a service processing system to an external system; and the service processing system does not execute logic of record storage; processing the at least two pathways of communication messages, and determining communication messages to-be-stored from the at least two pathways of communication messages processed; and according to the at least two pathways of communication messages, storing the communication messages to-be-stored in a database.

Secure networking protocol optimization via NIC hardware offloading

Methods and apparatus for secure networking protocol optimization via NIC hardware offloading. Under a method, security offload entries are cached in a flow table or a security database offload table on a network interface coupled to a host that implements a host security database mapping flows to Security Association (SA) contexts. Each security offload entry includes information identify a flow and information, such as an offset value, to locate a corresponding entry for the flow in the host security database. Hardware descriptors for received packets that belong to flows with matching security offload entries are generated and marked with the information used to locate the corresponding entries in the host security database. The hardware descriptors are processed by software on the host and the location information is used to de-reference the location of applicable entries in the host security database.

Multicast replication method and device of cross-chip flow processing unit

The invention discloses a multicast replication method and device of a cross-chip flow processing unit, and the method comprises the steps: a source end chip flow processing unit receives a multicast message; a pre-copy engine in the source end chip flow processing unit generates index entries according to the multicast information of the multicast message and the message feature information, and matches a preset copy table to judge the distribution of effective members of the multicast message; the copy table is preset in a chip by an upper layer system according to distribution of multicast group members in each chip flow processing unit and member information of an aggregation port; and a pre-copy engine in the source end chip flow processing unit selects a copy multicast message according to the distribution information of the effective members and sends the copy multicast message to a multicast table item module in the corresponding destination end chip flow processing unit. Through ...

LIVE SOCKET REDIRECTION

Networking methods and systems include determining a first state of a connection on a first network based on connection buffers at a host. A first system call relating to the connection is identified. A next state of the connection that would result from the first system call is determined. The first system call is executed responsive to a determination that the next state does not move the connection farther from a safe transition state.

Runtime schema for services in a switch

One embodiment of the present invention provides a switch. During operation, the switch parses a first schema of the switch. The first schema indicates initialization information for one or more services of the switch expressed based on one or more tags. The switch then identifies a tag of the one or more tags in the first schema based on the parsing and identifies information corresponding to the tag from a profile of the switch. Subsequently, the switch generates a second schema from the first schema based on the identified information.

USING SERVICE PLANES TO PERFORM SERVICES AT THE EDGE OF A NETWORK

Some embodiments provide novel methods for providing a set of services for a logical network associated with an edge forwarding element acting between a logical network and an external network. In some embodiments, the services are provided using a logical service forwarding plane that connects the edge forwarding element to a set of service nodes that each provide a service in the set of services. The service classification operation of some embodiments identifies a chain of multiple service operations that has to be performed on the data message. In some embodiments, identifying the chain of service operations includes selecting a service path to provide the multiple services. After selecting the service path, the data message is sent along the selected service path to have the services provided. The data message is returned to the edge forwarding element by a last service node in the service path that performs the last service operation and the edge forwarding element performs next hop ...

Performing service class aware load balancing to distribute packets of a flow among multiple network links

Some embodiments provide a method for quantifying quality of several service classes provided by a link between first and second forwarding nodes in a wide area network (WAN). At a first forwarding node, the method computes and stores first and second path quality metric (PQM) values based on packets sent from the second forwarding node for the first and second service classes. The different service classes in some embodiments are associated with different quality of service (QoS) guarantees that the WAN offers to the packets. In some embodiments, the computed PQM value for each service class quantifies the QoS provided to packets processed through the service class. In some embodiments, the first forwarding node adjusts the first and second PQM values as it processes more packets associated with the first and second service classes. The first forwarding node also periodically forwards to the second forwarding node the first and second PQM values that it maintains for the first and second ...

Technologies for accelerating edge device workloads

Technologies for accelerating edge device workloads at a device edge network include a network computing device which includes a processor platform that includes at least one processor which supports a plurality of non-accelerated function-as-a-service (FaaS) operations and an accelerated platform that includes at least one accelerator which supports a plurality of accelerated FaaS (AFaaS) operation. The network computing device is configured to receive a request to perform a FaaS operation, determine whether the received request indicates that an AFaaS operation is to be performed on the received request, and identify compute requirements for the AFaaS operation to be performed. The network computing device is further configured to select an accelerator platform to perform the identified AFaaS operation and forward the received request to the selected accelerator platform to perform the identified AFaaS operation. Other embodiments are described and claimed.

Remote control system of centralized management and control platform

The invention provides a remote control system of a centralized management and control platform. The control system comprises a remote control unit, a local area network switch unit and a plurality of KVM switching units. Any KVM switching unit is in communication connection with a monitoring machine room system; the plurality of KVM switching units are all in communication connection with the local area network switch unit, and the local area network switch unit is in communication connection with the remote control unit; the remote control unit is used for responding to the control operation and outputting a control signal; and the local area network switch unit is used for receiving a control signal and forwarding the control signal to the plurality of KVM switching units, and the KVM switching units forward the control signal to the monitoring machine room system. The method and the device have the effect of remotely controlling a plurality of monitoring systems.

Prepopulation of caches

A system, process, and computer-readable medium for updating an application cache using a stream listening service is described. A stream listening service may monitor one or more data streams for content relating to a user. The stream listening service may forward the content along with time-to-live values to an application cache. A user may use an application to obtain information regarding the user's account, where the application obtains information from a data store and/or cached information from the application cache. The stream listening service, by forwarding current account information, obtained from listening to one or more streams, to the application cache, reduces traffic at the data store by providing current information from the data stream to the application cache.

DYNAMIC PORT CONFIGURATION FOR NETWORK ROUTERS

A small form-factor pluggable (SFP) transceiver is detected to be plugged into an SFP port of the network router following a bootup of the network router. Information on one or more device features of the SFP transceiver is obtained from the SFP transceiver plugged into the SFP port of the network router. Subsequently, a port configuration policy that corresponds to the one or more device features of the SFP transceiver and one or more router parameters of the network router is applied to the SFP port of the network router.

Message processing method, resource allocation method and related equipment

The embodiment of the invention discloses a message processing method, a resource allocation method and related equipment, which are used for reserving a part of resources special for processing messages related to a first user or a first service and are beneficial to improving the processing efficiency of the messages of a part of users or a part of services. And thus, indexes such as time delay, jitter and packet loss rate of services of part of users are ensured, and the level of a service level agreement (SLA) of part of users is improved.

Prepopulation of Caches

A system, process, and computer-readable medium for updating an application cache using a stream listening service is described. A stream listening service may monitor one or more data streams for content relating to a user. The stream listening service may forward the content along with time-to-live values to an application cache. A user may use an application to obtain information regarding the user’s account, where the application obtains information from a data store and/or cached information from the application cache. The stream listening service, by forwarding current account information, obtained from listening to one or more streams, to the application cache, reduces traffic at the data store by providing current information from the data stream to the application cache.

Updating connection-tracking records at a network edge using flow programming

Some embodiments provide a method of performing stateful services that keeps track of changes to states of service nodes to update connection tracker records when necessary. At least one global state value indicating a state of the service nodes is maintained at the edge device. The method generates a record in a connection tracker storage including the current global state value as a flow state value for a first data message in a data message flow. Each time a data message is received for the data message flow, the stored state value (i.e., a flow state value) is compared to the relevant global state value to determine if the stored action may have been updated. After a change in the global state value relevant to the flow the method examines a flow programming table to determine if the flow has been affected by a flow programming instruction(s) that caused the global state value to change.

Information processing system, information processing apparatus, and non-transitory computer-readable recording medium storing therein information processing program

An information processing apparatus includes: a memory that stores association information associating a first address of a first container assigned beforehand with a second address of a second container assigned beforehand; and a processor coupled to the memory. The processor detects first information from one of containers; sets, when the address in the first information matches the first or second address, the container including the matching address and a port of a virtual machine specified by the first information in association with each other in the association information; duplicates second information passing through a first port associated with the first container by referring to the association information; and forwards the duplicated second information destined for a second port associated with the second container.

Method and system for service switching using service tags

The disclosure herein describes a system, which provides service switching in a datacenter environment. The system can include a service switching gateway, which can identify a service tag associated with a received packet. During operation, the service switching gateway determines a source client, a requested service, or both for the packet based on the service tag, identifies a corresponding service portal based on the service tag, and forwards the packet toward the service portal. The service switching gateway can optionally maintain a mapping between the service tag and one or more of: a source client, a required service, the service portal, and a tunnel encapsulation. The service switching gateway can encapsulate the packet based on an encapsulation mechanism supported by the service portal and forward the packet based on the mapping.

METHOD AND TRAFFIC PROCESSING UNIT FOR HANDLING TRAFFIC IN A COMMUNICATION NETWORK

Interface asset identification method and data security monitoring system

The invention provides an interface asset identification method and a data security monitoring system. In the identification method of the interface assets provided by the invention, the interface assets are identified by an interface message forwarded by a data security monitoring system based on mirror traffic; the mirror image traffic is the traffic of an interface message of monitored equipment forwarded by a switch to the data security monitoring system; the method comprises the steps that a first URL is analyzed from an interface message of mirror image flow, the first URL is split into a second URL and URL transmission parameters, and the second URL points to monitored data of monitoring equipment; and determining the interface assets according to the second URL.

Data exchange system supporting heterogeneous data sources

The invention discloses a data exchange system supporting heterogeneous data sources, belongs to the technical field of data processing, and aims to solve the technical problem of how to design a complete, efficient, robust, safe and easy-to-use data exchange system and establish cross-combination sharing interaction of the heterogeneous data sources. Comprising a resource management module used for carrying out classified management on information resources in a resource directory form; the data exchange management module is used for executing data exchange, file exchange and job scheduling; the data sharing management module is used for sharing the information resources in the data center library to an external system and monitoring the use condition of the information resources by the external system; the exchange monitoring module is used for monitoring and managing exchange tasks, exchange environments and exchange of information resources; the data auditing module is used for generating ...

Using applied-to field to identify connection-tracking records for different interfaces

Some embodiments configure an edge forwarding element to perform service insertion operations to identify stateful services to perform for data messages received for forwarding by the edge forwarding element at multiple virtual interfaces of the edge forwarding element. The service insertion operation, in some embodiments, includes applying a set of service insertion rules. The service insertion rules (1) specify a set of criteria and a corresponding action to take for data messages matching the criteria and (2) are associated with a set of interfaces to which the service insertion rules are applied. In some embodiments, the action is specified using a universally unique identifier (UUID) that is then used as a matching criteria for a subsequent policy lookup that identifies a type of service insertion and a set of next hop data.

TECHNOLOGIES FOR ACCELERATING EDGE DEVICE WORKLOADS

Technologies for accelerating edge device workloads at a device edge network include a network computing device which includes a processor platform that includes at least one processor which supports a plurality of non-accelerated function-as-a-service (FaaS) operations and an accelerated platform that includes at least one accelerator which supports a plurality of accelerated FaaS (AFaaS) operation. The network computing device is configured to receive a request to perform a FaaS operation, determine whether the received request indicates that an AFaaS operation is to be performed on the received request, and identify compute requirements for the AFaaS operation to be performed. The network computing device is further configured to select an accelerator platform to perform the identified AFaaS operation and forward the received request to the selected accelerator platform to perform the identified AFaaS operation. Other embodiments are described and claimed.

Reconfigurable switch forwarding engine parser capable of disabling hardware trojans

The present invention relates to a reconfigurable switch forwarding engine parser capable of disabling hardware Trojans. The parser comprises a data preprocessing unit, several cascaded basic processing units and an extraction unit, wherein a key path of a basic processing unit of the first stage extracts and shifts a key bit keyword of a key, and sends a result to a data path of the current stage and a key path of the next stage; basic processing units of other stages carry out keyword extraction and shifting on a key frame and the data frame in sequence; and the extraction unit extracts the key frame and the data frame from a basic processing unit of the last stage, and forwards same to a subsequent packet processing part. The present invention can be widely applied to the design of the switch forwarding engine parser.

Network data flow classification prediction method based on P4 hardware switch

The invention discloses a network data flow classification prediction method based on a P4 hardware switch. The method comprises the following steps: extracting data flow information and a model training algorithm offline training decision tree prediction model on a controller by using a historical data flow set; selecting a prediction model obtained by calculation in the controller and inserting a matching-action table item converted by the model; extracting and calculating related characteristics of the data flow on a P4 hardware switch assembly line in real time so as to carry out a real-time data flow classification prediction function; and performing memory management on a P4 hardware switch assembly line, and releasing space occupied by inactive data streams. According to the method, the problems that the model accuracy is low due to the fact that different types of data samples in a data set are unbalanced when a data packet classification prediction model is trained, and the memory ...

Springboard attack detection method and device, terminal equipment and computer storage medium

The invention relates to the technical field of network security, in particular to a springboard attack detection method and device, terminal equipment and a computer storage medium, and the method comprises the steps: obtaining an actual traffic time sequence sent by an initial physical system to a target physical system at a preset prediction time node, the actual traffic time sequence refers to an actual traffic change value of an intranet communication data packet sent by the initial physical system to the target physical system at the prediction time node; obtaining a predicted traffic time sequence based on a preset exponential smoothing model, the predicted traffic time sequence being a predicted traffic change value of normal interaction between the initial physical system and the target physical system at the predicted time node; and performing springboard attack detection according to the predicted traffic time sequence and the actual traffic time sequence. According to the invention ...

NETWORK CARD AND BUFFER CONTROL METHOD

A network card has a plurality of buffers each having different physical performances including a memory access speed or a storage capacity, and a buffer control circuit selects one buffer to be a packet storage destination from among the plurality of buffers on the basis of a priority or a service quality of a packet specified from header information of the packet received by a physical port and the physical performances of the plurality of buffers.

Data traffic forwarding system based on traffic mirroring processing

The invention relates to the technical field of data forwarding. The invention relates to a data traffic forwarding system based on traffic mirroring processing. The system comprises an application service unit, a vulnerability detection unit, a data analysis unit, a data exchange unit, a data storage unit and a data acquisition unit. The application service unit is used for receiving request information. According to the method, firstly, the information amount of the request information is collected, the request information is processed according to the information amount of the request information, and testing is carried out according to vulnerabilities, so that compared with a common data flow forwarding method, conversion of two modes can be carried out according to the information amount of the request information, and conversion is directly carried out by using a switch when the information amount is small; when the information amount is large, the request information is analyzed, ...

System And Methods For Transit Path Security Assured Network Slices

Systems and methods of configuring, managing and ensuring security compliance of Virtual Network Slices that transit through physical networks, virtual networks (SDN), cloud networks, radio access networks, service provider networks, and enterprise networks are identified. The methods include user side security validation methods while attempting to use a network slice for a specific service, and security validation of physical or virtual networks and the associated transit network elements. The methods disclose enriching the Security Certificates with policy parameters and the associated procedures that transit elements are required to assure for security compliance. Additionally, methods for incorporating a mobile native security platform in Wireless Mobile Network (4G/5G) that supports generating X.509 Certificates enhanced with policy requirements, validating allowed/disallowed list of transit network vendor devices, virtual network appliances are identified.

Port mirroring over EVPN VXLAN

This disclosure describes techniques for improved port mirroring over Ethernet Virtual Private Network (EVPN) Virtual eXtensible Local Area Network (VXLAN). For example, a method includes receiving, by a first network device of a plurality of network devices of a leaf and spine network configured with an Ethernet Virtual Private Network and from a second network device of the plurality of network devices, an extended routing message including information indicating the second network device is connected to an analyzer, and wherein the plurality of network devices is configured with a Virtual Local Area Network (VLAN) for which the analyzer is configured to analyze packets. The method also includes configuring, within forwarding information of the first network device and in response to receiving the extended routing message advertised by the second network device, a next hop that specifies packets associated with the VLAN are to be forwarded to the second network device.