61 results about "Border Gateway Protocol" patented technology

In one embodiment, a device determines a mapping between a network destination and Border Gateway Protocol (BGP) peers located across a plurality of autonomous systems for which the network destination is reachable. The device causes, based on the mapping, performance of probing tests along a plurality of paths to the network destination and via the BGP peers, to obtain path performance measurements for the plurality of paths. The device uses a prediction model to generate predicted performance metrics for the plurality of paths based on the path performance measurements. The device configures, based on the predicted performance metrics for the plurality of paths, the BGP peers with BGP peering policies to convey application traffic associated with the network destination via particular path from among the plurality of paths.

Techniques for implementing Border Gateway Protocol (BGP) peering status-aware hitless reboot on a network device are provided. In one set of embodiments, at the time of shutting down for a hitless reboot, the network device can collect status information regarding its BGP peerings and can write this information to a file on non-volatile storage. Then, upon booting up after the hitless reboot, the network device can retrieve the file from the non-volatile storage and use the status information included therein to restore the BGP peerings as they existed prior to the hitless reboot.

This application discloses a route selection method and a related device. A control entity determines first metric information of a first segment routing (SR) path, generates a first border gateway protocol (BGP) update message including the first metric information, and sends the first BGP update message to an ingress node of the first SR path, where the first metric information represents quality of the first SR path, the first metric information is used for route selection on a plurality of paths, each of the plurality of paths has a same IP prefix of a destination node, and the plurality of paths include the first SR path. According to the method, the control entity can send, to the ingress node of the SR path by using the BGP update message, the metric information that represents the quality of the SR path.

The invention discloses a computing power information transmission method, electronic equipment, a storage medium and a computer program product, and belongs to the technical field of communication. The method comprises: a target network device node receiving a first border gateway protocol (BGP) message, the first BGP message carrying a first computing power metric and a computing power type corresponding to the first computing power metric, the first computing power metric being a computing power metric obtained by measuring target computing power information corresponding to a target computing power service based on a computing power service type, and the target network device node receiving a first BGP message, the first BGP message carrying a first BGP message, the first BGP message carrying a first BGP message, the first BGP message carrying a second BGP message, the second BGP message carrying a second BGP message, the second BGP message carrying a second BGP message, and the second BGP message carrying a second BGP message. The target computing power information comprises computing power information which is acquired from a cloud management platform and corresponds to the target computing power service; and the target network equipment node sends a second BGP message based on the first BGP message, the second BGP message carrying a second computing power metric and a computing power type corresponding to the second computing power metric.

The invention belongs to the technical field of cross-domain network communication, and discloses a cross-system hierarchical sensing routing decision method, device and equipment and a storage medium. According to the method, a routing optimization scheme oriented to a cross-domain network is provided, hierarchical network performance collection is carried out by embedding a service level identifier and a time stamp in a detection data packet, differential thresholds are set according to different service types, and collected time delay, jitter, packet loss and bandwidth utilization data are comprehensively evaluated. And quantitatively adjusting the path priority attribute in the border gateway protocol according to the evaluation result, and driving the automatic switching of the transmission path. According to the method, the defect that data and services are disjointed in traditional detection is overcome; according to the method, a dynamic threshold value is set in combination with service requirements, multi-index comprehensive judgment is carried out, finally, a performance evaluation result and routing protocol attributes are linked, an automatic closed loop from sensing to decision making is established, and therefore the overall reliability and experience of cross-domain service transmission are improved under the condition that opposite-end cooperation is not needed.

Aspects of the subject disclosure may include, for example, offloading one or more flows or stateful sessions from a firewall to a gateway router. The flows may be qualified for offloading using any criteria. The flows may be injected into the gateway router using border gateway protocol (BGP) Flowspec route over a BGP neighborship between the gateway router and the firewall. Other embodiments are disclosed.

Embodiments of the present application provide a network fault diagnosis method, device, equipment and storage medium. The method comprises: receiving a first border gateway protocol (BGP) message, the first BGP message comprising a derived relationship graph of a network corresponding to a first network device, the derived relationship graph being used to indicate five-tuple information and a routing relationship of each network device, the first network device being any network device in the network; determining a target verification result, the target verification result being obtained by verifying configuration information of the first network device according to the first BGP message. The reliability of network fault diagnosis and repair is improved.

The present application relates to the technical field of communication detection, and discloses a training method and device of a border gateway protocol anomaly detection model and computer equipment, wherein the historical route statistical features and historical graph topology features corresponding to historical BGP data are extracted, and the features are trained by using the border gateway protocol anomaly detection model, the drift detection score between the historical anomaly detection result and the historical BGP data is calculated in the training process, and the drift detection threshold is used as a reference benchmark to adaptively update the multiple parameter values of the border gateway protocol anomaly detection model in combination with the drift detection score. Therefore, even if the BGP abnormal condition caused by the dynamic change of the network environment is faced, the BGP abnormal data can be accurately detected, and the high efficiency of the BGP abnormal data anomaly detection can be ensured.

Aspects of the subject disclosure may include, for example, in response to a Border Gateway Protocol (BGP) update from an egress provider edge router connected to a destination customer network, receiving a request for an end-to-end SR policy or an end-to-end path from an ingress provider edge router, where the BGP update includes a prefix of the destination customer network and a first color; using color mapping data, determining a first domain associated with the first color and determining a second color to be associated with a second domain and mapped to the first color, where a color is a numerical value associated with a network intent of a domain, the color mapping data define mappings between different colors associated with different domains, and the mapped first color and second color enable identification of a first intent and a second intent that belong to the first domain and the second domain, respectively; and generating the end-to-end path reflecting each definition of the first and the second intents identified by the first color in the first domain and the second color in the second domain. Other embodiments are disclosed.

Aspects of the subject disclosure may include, for example, network device(s) capable of on-demand virtual routing and forwarding (VRF) table creation. A network device may receive a request from a customer device requesting on-demand VRF creation, and may instantiate and provision a VRF in response. The request made by the customer device may be made by announcing an attribute in a border gateway protocol (BGP) message. Other embodiments are disclosed.

Decomposed Border Gateway Protocol (BGP) allows eBGP sessions between internal and external nodes to continue even when a failover occurs at the boundary where the eBGP session was established. eBGP control traffic is intercepted by the external router and forwarded to BGP speakers on the internal nodes via IP channels. Failover is detected in response to a change in the source address of the IP channel receiving the eBGP control traffic. The BGP speaker advertises routes to the external nodes, including a reference to the internal address of the operating external router. In response to the failover, the BGP speaker advertises the updated route reference to the backup router of the external router.

A route advertisement method and a device for improving efficiency of generating a route advertisement message are disclosed. The method is applied to a network including a first network device and a second network device, and the first network device and the second network device establish a user datagram protocol (UDP)-based border gateway protocol (BGP) connection. The method includes: The first network device obtains one or more route sending groups, where each of the one or more route sending groups includes one or more pieces of route information; the first network device separately generates at least one route advertisement message based on each of the one or more route sending groups, each of the at least one route advertisement message includes the one or more pieces of route information in the route sending group corresponding to the route advertisement message; and the first network device sends the route advertisement message to the second network device through the BGP connection.

Aspects of the subject disclosure may include, for example, a device, having: a processing system including a processor; and a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, the operations including: receiving a border gateway protocol (BGP) prefix from a first provider edge (PE) router; determining that a second PE router failed to send the BGP prefix to the device; confirming that the BGP prefix is valid; and sending the BGP prefix to the second PE router. Other embodiments are disclosed.

The application discloses a data processing method and device, equipment, a storage medium and a computer program product. The method comprises the following steps: receiving first configuration information, wherein the first configuration information is used for configuring a virtual extensible local area network tunnel end point (VTEP) address corresponding to each service in multiple services; detecting a port corresponding to each service to obtain a state of the port corresponding to each service; sending, through a border gateway protocol (BGP) message, a VTEP address corresponding to a first service in the multiple services to a corresponding computing node, wherein the first service represents a service with a normal state of the corresponding port; and revoking the sending, through the BGP message, of a VTEP address corresponding to a second service in the multiple services to the corresponding computing node, wherein the second service represents a service with an abnormal state of the corresponding port.

The invention discloses a shared database configuration method, a traffic redirection method and related equipment, and belongs to the technical field of communication. The method comprises: according to policy configuration information in a first network device, determining a Border Gateway Protocol (BGP) message, the BGP message comprising a target color mark in the policy configuration information; and a BGP message is sent to the second network device, the BGP message is used for configuring a first shared database of the second network device, the first shared database comprises a target color mark, and the target color mark is used for indicating the second network device to determine a segment routing strategy of the target traffic according to the target color mark when determining that the target traffic is attacked. Through the mode, the configuration consistency between the network devices can be ensured, the possibility of artificial configuration errors is reduced, meanwhile, the forwarding plane of the second network device directly interacts with the first shared database, and the process interaction safety can be improved.

This application relates to a routing management method, apparatus, router, computer-readable storage medium, and computer program product, and pertains to the field of communication technology. The method applied to a first router includes: upon detecting a route cancellation message, generating a relevant route cancellation message; sending the route cancellation message to each neighboring router and starting a route cancellation timer; wherein the neighboring routers are routers that have established a border gateway protocol with the first router; and when the route cancellation timer expires and each neighboring router has updated its relevant neighbor routing table based on the route cancellation message, deleting the route entry associated with the route cancellation message from the first routing table; wherein the first routing table is the routing entry table of the first router. This method is beneficial for improving network stability and data packet transmission quality in BGP large-scale route cancellation scenarios, achieving true zero packet loss.

This application relates to a method and apparatus for verifying routing policies in an Internet routing registration system. The method includes: acquiring autonomous system paths, border gateway protocol (BGP) semantics, and routing policies of a target Internet routing registration system to construct an original dataset; verifying the routing policies of the target Internet routing registration system based on the original dataset to obtain verification results based on autonomous system paths, verification results based on routing behavior simulation, and verification results based on BGP semantics; and integrating the verification results based on autonomous system paths, the verification results based on routing behavior simulation, and the verification results based on BGP semantics to obtain a routing policy dataset that meets preset reliability conditions based on the integrated verification results. This solves the problem in related technologies where the lack of a method to verify the correctness of extracted routing policies makes it difficult to ensure the reliability of routing policy information.

Techniques for performing Border Gateway Protocol (BGP) backup path selection are provided. In one set of embodiments, a BGP speaker can select a best path for an Internet Protocol (IP) prefix and can determine that the best path is in a first fate shared group comprising a group of paths that are vulnerable to a common failure. The BGP speaker can then determine one or more candidate backup paths that are in a second fate shared group different from the first fate shared group (or are not in any fate shared group) and can select at least one of the one or more candidate backup paths as a backup path for the IP prefix.

A networking system may perform border gateway protocol (BGP) switchover. In particular, the networking system may execute an active BGP process based on a set of received input states and execute a standby BGP process based on the set of received input states independently of the execution of the active BGP process based on the set of received input states.

Systems and methods for border gateway protocol (BGP) outbound route filtering (ORF) using community attribute include, responsive to tagging one or more prefixes in border gateway protocol (BGP) with one or more community attributes for outbound route filtering (ORF) in a network, transmitting a single route refresh message with the one or more community attributes to a BGP peer router for purposes of the BGP peer router applying the ORF based on the one or more community attributes; and receiving prefixes from the BGP peer router based on the ORF applied at the BGP peer router.

In some implementations, a node may generate a first route refresh message that indicates an action request for an address family identifier (AFI) and subsequent address family identifier (SAFI) (AFI / SAFI). The node may send the first route refresh message to another node. The other node may update, based on the action request, a data structure of the other node to indicate that the other node supports or does not support the AFI / SAFI.

This disclosure provides a secure packet transmission method, a method for negotiating an internet protocol security security association (IPsec SA), and a related apparatus, and is applied to a wide area network. In a scenario of crossing a plurality of segments of tunnels, an IPsec SA used for end-to-end security protection is negotiated between a first site edge and a second site edge based on a virtual routing and forwarding (VRF) granularity by extending a border gateway protocol (BGP) route. After performing security protection on a virtual private network (VPN) service packet based on the IPsec SA, the first site edge sends the packet through an overlay end-to-end tunnel between the first site edge and the second site edge, and the second site edge processes the packet based on the IPsec SA, to obtain the VPN service packet.

Methods and systems for active-standby switchover are disclosed. Embodiments of the present technology may include a method for operating a network with active and standby host nodes that involves transmitting a Border Gateway Protocol (BGP) route advertisement message from the standby host node, the BGP route advertisement message including route information and a community tag that is indicative of a graceful attract community, receiving the BGP route advertisement message at leaf nodes and spine nodes of the network, wherein the leaf nodes and the spine nodes assign higher BGP preference to the route information in the BGP route advertisement message in response to identifying the community tag in the BGP route advertisement message as being indicative of a graceful attract community, and transmitting a BGP route withdraw message from the active host node after the BGP route advertisement message is transmitted from the standby host node.

The invention provides a method and a system for detecting data exception in a border gateway protocol, and a storage medium. The method comprises the following steps: extracting features from to-be-detected data in the border gateway protocol; generating a to-be-detected time sequence and behavior information of a plurality of autonomous systems according to the features; selecting a suspicious autonomous system from a plurality of autonomous systems according to the behavior information; obtaining a historical time sequence set, and querying similar historical time sequences in the historical time sequence set; inputting a to-be-measured time sequence into the time sequence prediction model, and calculating a residual error between a predicted time sequence and an actual time sequence; inputting the to-be-detected time sequence into the anomaly detection model, and outputting an abnormal state of the to-be-detected time sequence by the anomaly detection model; integrating the to-be-detected time sequence, the suspicious autonomous system, the similar historical time sequence, the residual error and the abnormal state into a prompt, inputting the prompt into a reasoning model, and generating a comprehensive detection result and a reasoning process expressed by a natural language by the reasoning model. The accuracy of a detection result is improved.

The invention provides a route leakage detection method and device for a BGP route and a medium, and relates to the technical field of route leakage, in the method, when a BGP route notification is received, an ASN triple list corresponding to the BGP route notification is acquired; taking the ASN triple of which the autonomous domain relationship between the corresponding autonomous systems violates the valley-free principle as a key triple; when the ASPATH mapping table in the routing space-time stability database comprises all the key triads, if the key triads with the corresponding space-time stability scores smaller than a preset space-time stability threshold exist, it is determined that routing leakage exists in the BGP routing announcement; whether the BGP route announcement has the route leakage or not is determined by fusing the valley-free principle and the space-time stability, it is avoided that the route announcement which theoretically violates the valley-free principle but is actually legal and normal is misjudged as the route leakage, and the detection accuracy of route leakage detection is improved.

Provided are a method for receiving border gateway protocol (BGP)-intent route, and a method for advertising BGP-intent route. The method for receiving BGP-intent route includes: receiving the BGP-intent route advertised by a BGP speaker, where the BGP-intent route carries at least one of the following: a metric type, a metric and metric credit information.

The present application provides a method for delivering in-situ flow information telemetry (IFIT) configuration through a border gateway protocol (BGP), an electronic device and a storage medium. In an example of the present disclosure, by extending the BGP UPDATE packet in the BGP, the extended BGP UPDATE packet carries the IFIT parameters and is dynamically delivered to the headend in the SR policy, which realizes that the network device can dynamically deliver the IFIT parameters based on the BGP.

A network device may receive, from a source, a route for a destination, and may provide hierarchical error handling functionality in a border gateway protocol (BGP) MultiNexthop (MNH) attribute associated with the route. The network device may provide continuity detection functionality in the BGP MNH attribute, and may forward the route to the destination based on the hierarchical error handling functionality, the continuity detection functionality, and the BGP MNH attribute.