290 results about "Border Gateway Protocol" patented technology

The invention discloses a multi-path switch flow scheduling method, device and equipment based on a border gateway protocol and a storage medium, and relates to the technical field of flow scheduling, and the multi-path switch flow scheduling method based on the border gateway protocol comprises the steps: monitoring a network path in real time, and obtaining network state information, the network state information at least comprises one of bandwidth, delay and packet loss rate; according to the network state information, scoring the network path to obtain a final scoring result; determining an optimal path set according to the final scoring result; and determining a flow distribution strategy of the optimal path set according to the final scoring result so as to realize flow scheduling of the multi-path switch. According to the invention, the flow transmission efficiency of the multipath switch can be improved.

Aspects of the subject disclosure may include, for example, establishing a Layer 2 multipoint virtual private network (VPN) among a plurality of sites connected via a switched, shared or dedicated ethernet provided by a service provider, where the plurality of sites correspond to multiple locations of a target enterprise, determining a count of the plurality of sites that requires a connection to one or more cloud service providers over a common backbone network of the service provider, generating a VLAN that conforms to a Border Gateway Protocol (BGP), assigning a block of IP addresses to a network of the target enterprise, based on the determined count, assigning two or more subnets having IP addresses of both IPv4 and IPV6 address families with respect to the VLAN, and connecting the plurality of sites to the one or more cloud service providers. Other embodiments are disclosed.

Various methods and processing systems for the effective management of network traffic and facilitating data forwarding within distributed computing environments. Network components may be configured to amalgamate the Border Gateway Protocol (BGP) with Source Network Address Translation (SNAT) or network address port translation (NAPT) technologies to facilitate dynamic notification of network address accessibility and use port index identifiers to augment the precision and resilience of routing. A distributed SNAT / NAPT virtual network function (VNF) or cloud-native network function (CNF) may collaborate with LEAF switches or server aggregation devices to refine data transmission via adaptable address mapping and forwarding and enhance network scalability and resilience.

Devices, networks, systems, methods, and processes for packet forwarding and routing are described herein. A leaf switch can be in communication with a host device. The leaf switch may configure a subnet comprising the host device. The leaf switch can assign a next hop interface as a system port of the leaf switch and generate subnet information indicative of the assignment. The leaf switch may distribute the subnet information to one or more network devices through one or more internal Border Gateway Protocol sessions. A data packet destined to the host device can be transmitted to the system port of the leaf switch when a host Media Access Control (MAC) address of the host device is not resolved. The leaf switch can resolve the host MAC address and transmit the data packet to the host device based on the host MAC address.

The present disclosure relates to a routing control method, a system, and a BGP Peer. The method of the present disclosure can be executed by a first BGP Peer, including: receiving information of adding a new VPN route sent from a second BGP Peer, wherein the information of adding the new VPN route comprises: the new VPN route and an identifier of a first VPN instance; determining whether a number of VPN routes corresponding to the identifier of the first VPN instance reaches or exceeds a limit value after adding the new VPN route; and sending first instruction information to the second BGP Peer to instruct the second BGP Peer, in a case that the number of VPN routes corresponding to the identifier of the first VPN instance reaches or exceeds the limit value, wherein the first BGP Peer is an iBGP Peer inside a first AS.

A router is configured to send an advertisement of selective Ethernet Virtual Private Network (VPN) (EVPN) routes based on the Route Types. The router is configured to determine a requirement for a route refresh from a Border Gateway Protocol (BGP) peer for a subset of Route Types of all of the Route Types, send a route refresh message to the BGP peer with an indication of the subset of Route Types, and receive updated routes from the BGP peer only for the subset of Route Types. The indication can be included in a reserved field and payload of the route refresh message. The route refresh message can be defined in RFC 2918.

The invention discloses an active hierarchical boundary gateway protocol routing method and system for a low-orbit giant satellite base, and the method comprises the steps: carrying out the time frame and time slot division, predicting the satellite-ground connection switching in a time frame and the throughput of each satellite, and dividing a satellite network into an entrance and exit satellite region, a backbone region and a non-backbone region; iBGP connection is carried out according to satellite partitions, and routing update is carried out under different time slots according to time slot division decisions; in a time slot in which only a hierarchical convergence mechanism is adopted, the satellites in all the partitions transmit and receive UPDATE messages in a hierarchical manner to exchange routing information so as to achieve whole-network convergence; and in a time slot in which an active routing update mechanism is adopted to assist a hierarchical convergence mechanism, the satellite actively updates routing table entries, and transmits and receives a posterior UPDATE message for verification. According to the method, a hierarchical convergence mechanism is adopted, iBGP connection between satellites can be reduced, message overhead can be reduced, the routing convergence speed can be increased, and an active routing updating mechanism is supplemented, so that the routing convergence time can be further shortened, and the satellite network stability can be improved.

Techniques for generating and utilizing overlay-based Border Gateway Protocol (BGP) Operations, Administration, and Maintenance (OAM) packets to detect issues with an underlay network. The techniques may include receiving, from a BGP peer device via a control plane path, an OAM probe indicating a forwarding path to be used for sending the traffic to a destination associated with a prefix. The techniques may also include determining, based at least in part on the OAM probe, that a next-hop device is incapable of being utilized to forward the traffic to the destination, the next-hop device determined based on an origination of the prefix. The techniques may further include performing a policy-based action based at least in part on determining that the next-hop device is incapable of being utilized to forward the traffic to the destination.

The invention discloses a BGP (Border Gateway Protocol) routing anomaly detection method. The method comprises the following steps: acquiring BGP routing data from a network and preprocessing the BGP routing data, extracting features from the preprocessed BGP routing data, and inputting the extracted features into a trained BGP routing anomaly detection network to obtain a BGP routing anomaly detection result. The training process of the detection network comprises the following steps: acquiring a training sample and positive and negative labels thereof, and preprocessing to obtain a seven-tuple file of an updated message; constructing a directed AS-level network topological graph, and generating forward and reverse adjacency matrixes and forward and reverse initial feature matrixes; inputting the forward adjacency matrix and the forward initial feature matrix into a forward branch network of the GCN, inputting the reverse adjacency matrix and the reverse initial feature matrix into a reverse branch network of the GCN, splicing and aggregating output results of the forward branch network and the reverse branch network of the GCN, and inputting a feature matrix into a graph attention mechanism layer; and calculating the classification loss of the output result, and optimizing the BGP routing anomaly detection network through the loss. The accuracy of the detection result is obviously improved.

A method performed by an ingress router of an edge cloud data center to optimize mass switching triggered by site failures or degradation at the data center. The method includes receiving a Border Gateway Protocol (BGP) UPDATE message that includes a site-reference identifier (ID) and operating capacity information, where the site-reference ID corresponds to a group of routes within a site of the cloud data center; attaching the site-reference ID to the group of routes in a routing table; selecting a path for forwarding traffic corresponding to the group of routes based on the operating capacity information; and forwarding traffic for selected services along the path.

The invention relates to the technical field of border gateway protocol anomaly detection, and discloses a border gateway protocol anomaly detection method and device and computer device.According to the border gateway protocol anomaly detection method and device, to-be-detected BGP data are obtained, the to-be-detected BGP data are each type of data in multiple types of BGP data, and the to-be-detected BGP data are formed through preprocessing; extracting the to-be-tested BGP data from the to-be-tested BGP data, and fusing the to-be-tested BGP data of the plurality of BGP data; inputting the fused to-be-detected BGP data into a BGP time convolutional network for detection, and obtaining an anomaly detection result of the to-be-detected BGP data; finally, according to the embodiment of the invention, the long-time sequence characteristics of the BGP data can be processed, and the long-term dependency relationship of the BGP data can be captured, so that the accuracy of BGP data anomaly detection is improved.

The invention provides a distributed computing power network task scheduling method, device and equipment, a distributed computing power network comprises a user side edge router and a computing power side edge router, and the method comprises the steps that the user side edge router obtains a target computing power demand, determining a current computing power state corresponding to the distributed computing power network according to the multi-protocol border gateway protocol; the user side edge router inputs the target computing power demand and the current computing power state to a first agent reinforcement learning model corresponding to the user side edge router, and an initial node address corresponding to the target computing power demand is output through the first agent reinforcement learning model; the user side edge router sends the initial node address to the computing power side edge router, and the computing power side edge router judges whether the initial node address needs to be updated or not and determines a target node address according to a judgment result; and the computing power side edge router unloads the target computing power demand to a target node corresponding to the target node address.

A method implemented by a first controller in a network comprising a cluster of controllers including the first controller and a second controller, the method comprises transmitting, to a network element (NE), a first BGP message comprising a first controllers network layer reachability information (NLRI), the first controllers NLRI carrying a position of the first controller relative to other controllers in the cluster of controllers, receiving, from the NE, a second BGP message comprising a second controllers NLRI, the second controllers NLRI carrying a position of the second controller relative to the other controllers in the cluster of controllers, and determining the primary controller from the cluster of controllers based on the position of the first controller and the position of the second controller, with the primary controller being responsible for controlling the network.

A multi-instance learning and weakly supervised BGP anomaly detection framework is provided, that detects and analyzes significant statistical correlations across multiple data sources such as model driven telemetry (MDT), network messages, event data logs, and / or device configuration data for network topology. Specifically, methods are provided that involve obtaining, from a plurality of data sources, data related to operation or configuration of Border Gateway Protocol (BGP) in an enterprise network and extracting one or more BGP features based on at least one correlation among the data from the plurality of data sources. The methods further involve detecting one or more network anomalies by performing a weakly supervised machine learning of the one or more BGP features and providing information about the one or more network anomalies for performing one or more actions associated with the enterprise network.

Embodiments include methods, electronic device, storage medium to prioritize Ethernet Segment(ES) route handling. In one embodiment, a method comprises, upon receiving a BGP update message with a route target (RT) membership Network Layer Reachability Information (NLRI), determining whether to prioritize the BGP update message based on existence of a flag indication within the RT membership NLRI; responsive to the flag indication being set in the RT membership NLRI, processing the RT membership NLRI to advertise a route matching the RT membership indicated in the first BGP update message without waiting on one or more periodic update timers; responsive to the flag indication not being set but the RT membership NLRI including a combination of type and subtype that indicates an ES-import RT, processing the RT membership NLRI without waiting on the timers as well; and otherwise processing the RT membership NLRI to advertise upon expiration of the timers.

In one embodiment, a device determines a mapping between a network destination and Border Gateway Protocol (BGP) peers located across a plurality of autonomous systems for which the network destination is reachable. The device causes, based on the mapping, performance of probing tests along a plurality of paths to the network destination and via the BGP peers, to obtain path performance measurements for the plurality of paths. The device uses a prediction model to generate predicted performance metrics for the plurality of paths based on the path performance measurements. The device configures, based on the predicted performance metrics for the plurality of paths, the BGP peers with BGP peering policies to convey application traffic associated with the network destination via particular path from among the plurality of paths.

Methods and systems are described herein for reducing border gateway protocol (BGP) signaling for multi-homed devices. In one aspect, the method comprises: receiving one or more signals from one or more provider edge devices. The one or more signals include an address of a membership group associated with a multi-homed device. A router receives, from a provider edge device of the one or more provider edge devices, a service prefix. The service prefix is associated with the multi-homed device and the membership group. The router may store the service prefix and the one or more provider edge devices and connect, according to the service prefix and the one or more provider edge devices, to the multi-homed device associated with the membership group.

A node, in a first network, includes circuitry configured to determine a next hop as decided by Border Gateway Protocol (BGP) is an anycast prefix to a Route Reflector (RR) interconnecting the first network with a second network, responsive to the next hop being the anycast prefix to the RR, create a tunnel with a destination based on the anycast prefix, and utilize the tunnel for traffic having the next hop as the anycast prefix to the RR. The anycast prefix is assigned to two or more RRs interconnecting the first network and the second network. A first path is decided by BGP based on a BGP Path Selection Algorithm that is independent of a second path determined by Interior Gateway Protocol (IGP). The first path and the second path can be different, and wherein tunnel is utilized to ensure the traffic always follows the first path.

Aspects of the subject disclosure may include, for example, a device, including: a processing system including a processor; a clock; and a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations of: advertising via Border Gateway Protocol (BGP) a capability as a precision timing protocol (PTP) master clock through an Internet Protocol (IP) / Multi-Protocol Label Switching (MPLS) network, wherein the advertising includes an IP address of the device; receiving a unicast signaling mechanism from a PTP client node in the network; and sending clock messages to the PTP client node responsive to accepting the PTP client node. Other embodiments are disclosed.

The invention discloses a key negotiation method, system and device and electronic equipment. The method comprises the following steps: obtaining a quantum key generated by a quantum key service platform; key negotiation processing is carried out on the quantum key through a border gateway protocol, a target key corresponding to the first router device is generated, and the target key is a key obtained after key negotiation is carried out on the first router device and a second router device through the border gateway protocol; the first router equipment and the second router equipment are any router equipment in a network forwarding layer; a quantum key library is determined according to the target key, and the quantum key library is a key database obtained after key negotiation is carried out on all router devices in a network forwarding layer through a border gateway protocol. According to the invention, the technical problems of low point-to-point key negotiation efficiency, high cost and complex network protocol due to limited application of a quantum key distribution technology in related technologies are solved.

A networking system may perform a border gateway protocol (BGP) switchover from an active BGP process to a standby BGP process. The standby BGP process may obtain transport layer protocol state information, for a given time, of a transport layer session for the active BGP process. The standby BGP process may update the transport layer protocol state information based on BGP messages conveyed, after the given time, over the transport layer session and forwarded to the standby BGP process. Based on a BGP switchover criterion being met, a replacement transport layer session may be set up using the updated transport layer protocol state information. The replacement transport layer session continues the transport layer session after the BGP switchover.

The present application discloses a service route advertisement and determination method, a computing power route gateway, and a storage medium. The service route advertisement method comprises: acquiring service state data of a service instance connected to a cloud side computing power route gateway; obtaining a target service metric value on the basis of the service state data, wherein the target service metric value represents a service providing capability of the service instance; and by means of a border gateway protocol (BGP), advertising, to an access side computing power route gateway in a computing power network system, target service route data carrying a service identifier and the target service metric value, so that the access side computing power route gateway determines a target cloud side computing power route gateway from cloud side computing power route gateways on the basis of the target service metric value.

Techniques for implementing Border Gateway Protocol (BGP) peering status-aware hitless reboot on a network device are provided. In one set of embodiments, at the time of shutting down for a hitless reboot, the network device can collect status information regarding its BGP peerings and can write this information to a file on non-volatile storage. Then, upon booting up after the hitless reboot, the network device can retrieve the file from the non-volatile storage and use the status information included therein to restore the BGP peerings as they existed prior to the hitless reboot.

This application discloses a route selection method and a related device. A control entity determines first metric information of a first segment routing (SR) path, generates a first border gateway protocol (BGP) update message including the first metric information, and sends the first BGP update message to an ingress node of the first SR path, where the first metric information represents quality of the first SR path, the first metric information is used for route selection on a plurality of paths, each of the plurality of paths has a same IP prefix of a destination node, and the plurality of paths include the first SR path. According to the method, the control entity can send, to the ingress node of the SR path by using the BGP update message, the metric information that represents the quality of the SR path.

Example solutions for providing route aggregation as a service (RaaS) are disclosed. A RaaS server receives original routing tables from routers in a wide area network (WAN), aggregates the routes by identifying common prefixes, and returns more compact aggregated routing tables to the routers. The routers use the aggregated routing tables to efficiently route data traffic in the WAN. Multiple resiliency approaches are disclosed, in order to prevent the routers from flushing the aggregated routes in the event that the RaaS server experiences an outage and the border gateway protocol (BGP session between each router and the RaaS server is lost. Example resiliency measures includes the use of a long lived stale time (LLST), reaching a length of perhaps weeks, during which the routers continue to use the aggregated routing tables, and the use of mirroring the aggregated routing tables in other RaaS

The invention relates to the technical field of network security, and discloses a network defense method, device and equipment, a storage medium and a computer program product.The method comprises the steps that whether malicious oscillation exists or not is judged according to at least one of route change information of a border gateway protocol, a time window threshold value and a route updating frequency threshold value; and analyzing the current traffic characteristics through an attack detection model, judging whether an attack behavior of distributed denial of service exists, limiting the speed of the current network traffic according to the malicious oscillation characteristics, and guiding the attack traffic of the attack behavior to a black hole address based on the extracted attack characteristics. According to the application, malicious oscillation and attack behaviors are monitored and identified in real time, when malicious oscillation is detected, the speed of the current network flow is limited according to the characteristics of the malicious oscillation, for the attack behaviors, the attack flow is guided to the black hole address based on the extracted attack characteristics, the attack source is quickly blocked, and a dual detection and response mechanism is adopted. And the timeliness and effectiveness of network defense are improved.

A process can include determining affinity information indicative of route preferences between branch routers and gateway routers. A prefix can be determined for a subnet of branch routers located at a same branch location. An affinity position of a first gateway router can be determined based on affinity information of the branch routers in the subnet. A mapping can be determined between a local preference Border Gateway Protocol (BGP) community attribute and the affinity position of the first gateway router, wherein a mapped local preference BGP community attribute and the affinity position are indicative of a same routing preference. The mapped local preference BGP community attribute can be attached to routes from the first gateway router into a cloud service provider. Affinity-based route preferences are indicated to the cloud service provider by redistributing the routes from the first gateway router with the mapped local preference BGP community attribute attached.

Provided are a method for receiving border gateway protocol (BGP)-intent route, and a method for advertising BGP-intent route. The method for receiving BGP-intent route includes: receiving the BGP-intent route advertised by a BGP speaker, where the BGP-intent route carries at least one of the following: a metric type, a metric and metric credit information.

The invention discloses a network security state prediction method and device of a border gateway protocol, equipment and a readable storage medium, and relates to the technical field of Internet. Comprising the following steps: acquiring relevant parameters of a border gateway protocol; the related parameters comprise the attack prefix injection rate, the network defense capability and the attacked prefix importance of the border gateway protocol; determining the attack risk of the border gateway protocol based on the related parameters of the border gateway protocol; and calculating a network security state prediction result of the border gateway protocol based on the attack risk and the initial transition probability matrix of the border gateway protocol. According to the method, the accuracy of network security state prediction is improved.

Provided are a method and apparatus for processing a router advertisement message, a storage medium, and an electronic apparatus. The method includes acquiring, on a current node, a border gateway protocol (BGP) router advertisement message transmitted by a previous node, the BGP router advertisement message indicates a BGP next-hop node in a forwarding direction, and the forwarding direction is a direction from the network ingress node to the network egress node; and determining, in a case that the BGP next-hop node and the current node are two adjacent nodes on the propagation path, an underlying transport path from the current node to the BGP next-hop node according to instruction information corresponding to the current node of the information of the propagation path. According to examples of the disclosure, the technical problem that an underlying transport path cannot be flexibly determined in the related art is solved.