233 results about "Border Gateway Protocol" patented technology

Various methods and processing systems for the effective management of network traffic and facilitating data forwarding within distributed computing environments. Network components may be configured to amalgamate the Border Gateway Protocol (BGP) with Source Network Address Translation (SNAT) or network address port translation (NAPT) technologies to facilitate dynamic notification of network address accessibility and use port index identifiers to augment the precision and resilience of routing. A distributed SNAT / NAPT virtual network function (VNF) or cloud-native network function (CNF) may collaborate with LEAF switches or server aggregation devices to refine data transmission via adaptable address mapping and forwarding and enhance network scalability and resilience.

Devices, networks, systems, methods, and processes for packet forwarding and routing are described herein. A leaf switch can be in communication with a host device. The leaf switch may configure a subnet comprising the host device. The leaf switch can assign a next hop interface as a system port of the leaf switch and generate subnet information indicative of the assignment. The leaf switch may distribute the subnet information to one or more network devices through one or more internal Border Gateway Protocol sessions. A data packet destined to the host device can be transmitted to the system port of the leaf switch when a host Media Access Control (MAC) address of the host device is not resolved. The leaf switch can resolve the host MAC address and transmit the data packet to the host device based on the host MAC address.

The present disclosure relates to a routing control method, a system, and a BGP Peer. The method of the present disclosure can be executed by a first BGP Peer, including: receiving information of adding a new VPN route sent from a second BGP Peer, wherein the information of adding the new VPN route comprises: the new VPN route and an identifier of a first VPN instance; determining whether a number of VPN routes corresponding to the identifier of the first VPN instance reaches or exceeds a limit value after adding the new VPN route; and sending first instruction information to the second BGP Peer to instruct the second BGP Peer, in a case that the number of VPN routes corresponding to the identifier of the first VPN instance reaches or exceeds the limit value, wherein the first BGP Peer is an iBGP Peer inside a first AS.

A router is configured to send an advertisement of selective Ethernet Virtual Private Network (VPN) (EVPN) routes based on the Route Types. The router is configured to determine a requirement for a route refresh from a Border Gateway Protocol (BGP) peer for a subset of Route Types of all of the Route Types, send a route refresh message to the BGP peer with an indication of the subset of Route Types, and receive updated routes from the BGP peer only for the subset of Route Types. The indication can be included in a reserved field and payload of the route refresh message. The route refresh message can be defined in RFC 2918.

The invention discloses a BGP (Border Gateway Protocol) routing anomaly detection method. The method comprises the following steps: acquiring BGP routing data from a network and preprocessing the BGP routing data, extracting features from the preprocessed BGP routing data, and inputting the extracted features into a trained BGP routing anomaly detection network to obtain a BGP routing anomaly detection result. The training process of the detection network comprises the following steps: acquiring a training sample and positive and negative labels thereof, and preprocessing to obtain a seven-tuple file of an updated message; constructing a directed AS-level network topological graph, and generating forward and reverse adjacency matrixes and forward and reverse initial feature matrixes; inputting the forward adjacency matrix and the forward initial feature matrix into a forward branch network of the GCN, inputting the reverse adjacency matrix and the reverse initial feature matrix into a reverse branch network of the GCN, splicing and aggregating output results of the forward branch network and the reverse branch network of the GCN, and inputting a feature matrix into a graph attention mechanism layer; and calculating the classification loss of the output result, and optimizing the BGP routing anomaly detection network through the loss. The accuracy of the detection result is obviously improved.

A method performed by an ingress router of an edge cloud data center to optimize mass switching triggered by site failures or degradation at the data center. The method includes receiving a Border Gateway Protocol (BGP) UPDATE message that includes a site-reference identifier (ID) and operating capacity information, where the site-reference ID corresponds to a group of routes within a site of the cloud data center; attaching the site-reference ID to the group of routes in a routing table; selecting a path for forwarding traffic corresponding to the group of routes based on the operating capacity information; and forwarding traffic for selected services along the path.

The invention relates to the technical field of border gateway protocol anomaly detection, and discloses a border gateway protocol anomaly detection method and device and computer device.According to the border gateway protocol anomaly detection method and device, to-be-detected BGP data are obtained, the to-be-detected BGP data are each type of data in multiple types of BGP data, and the to-be-detected BGP data are formed through preprocessing; extracting the to-be-tested BGP data from the to-be-tested BGP data, and fusing the to-be-tested BGP data of the plurality of BGP data; inputting the fused to-be-detected BGP data into a BGP time convolutional network for detection, and obtaining an anomaly detection result of the to-be-detected BGP data; finally, according to the embodiment of the invention, the long-time sequence characteristics of the BGP data can be processed, and the long-term dependency relationship of the BGP data can be captured, so that the accuracy of BGP data anomaly detection is improved.

The invention provides a distributed computing power network task scheduling method, device and equipment, a distributed computing power network comprises a user side edge router and a computing power side edge router, and the method comprises the steps that the user side edge router obtains a target computing power demand, determining a current computing power state corresponding to the distributed computing power network according to the multi-protocol border gateway protocol; the user side edge router inputs the target computing power demand and the current computing power state to a first agent reinforcement learning model corresponding to the user side edge router, and an initial node address corresponding to the target computing power demand is output through the first agent reinforcement learning model; the user side edge router sends the initial node address to the computing power side edge router, and the computing power side edge router judges whether the initial node address needs to be updated or not and determines a target node address according to a judgment result; and the computing power side edge router unloads the target computing power demand to a target node corresponding to the target node address.

A method implemented by a first controller in a network comprising a cluster of controllers including the first controller and a second controller, the method comprises transmitting, to a network element (NE), a first BGP message comprising a first controllers network layer reachability information (NLRI), the first controllers NLRI carrying a position of the first controller relative to other controllers in the cluster of controllers, receiving, from the NE, a second BGP message comprising a second controllers NLRI, the second controllers NLRI carrying a position of the second controller relative to the other controllers in the cluster of controllers, and determining the primary controller from the cluster of controllers based on the position of the first controller and the position of the second controller, with the primary controller being responsible for controlling the network.

A multi-instance learning and weakly supervised BGP anomaly detection framework is provided, that detects and analyzes significant statistical correlations across multiple data sources such as model driven telemetry (MDT), network messages, event data logs, and / or device configuration data for network topology. Specifically, methods are provided that involve obtaining, from a plurality of data sources, data related to operation or configuration of Border Gateway Protocol (BGP) in an enterprise network and extracting one or more BGP features based on at least one correlation among the data from the plurality of data sources. The methods further involve detecting one or more network anomalies by performing a weakly supervised machine learning of the one or more BGP features and providing information about the one or more network anomalies for performing one or more actions associated with the enterprise network.

Embodiments include methods, electronic device, storage medium to prioritize Ethernet Segment(ES) route handling. In one embodiment, a method comprises, upon receiving a BGP update message with a route target (RT) membership Network Layer Reachability Information (NLRI), determining whether to prioritize the BGP update message based on existence of a flag indication within the RT membership NLRI; responsive to the flag indication being set in the RT membership NLRI, processing the RT membership NLRI to advertise a route matching the RT membership indicated in the first BGP update message without waiting on one or more periodic update timers; responsive to the flag indication not being set but the RT membership NLRI including a combination of type and subtype that indicates an ES-import RT, processing the RT membership NLRI without waiting on the timers as well; and otherwise processing the RT membership NLRI to advertise upon expiration of the timers.

In one embodiment, a device determines a mapping between a network destination and Border Gateway Protocol (BGP) peers located across a plurality of autonomous systems for which the network destination is reachable. The device causes, based on the mapping, performance of probing tests along a plurality of paths to the network destination and via the BGP peers, to obtain path performance measurements for the plurality of paths. The device uses a prediction model to generate predicted performance metrics for the plurality of paths based on the path performance measurements. The device configures, based on the predicted performance metrics for the plurality of paths, the BGP peers with BGP peering policies to convey application traffic associated with the network destination via particular path from among the plurality of paths.

Methods and systems are described herein for reducing border gateway protocol (BGP) signaling for multi-homed devices. In one aspect, the method comprises: receiving one or more signals from one or more provider edge devices. The one or more signals include an address of a membership group associated with a multi-homed device. A router receives, from a provider edge device of the one or more provider edge devices, a service prefix. The service prefix is associated with the multi-homed device and the membership group. The router may store the service prefix and the one or more provider edge devices and connect, according to the service prefix and the one or more provider edge devices, to the multi-homed device associated with the membership group.

A node, in a first network, includes circuitry configured to determine a next hop as decided by Border Gateway Protocol (BGP) is an anycast prefix to a Route Reflector (RR) interconnecting the first network with a second network, responsive to the next hop being the anycast prefix to the RR, create a tunnel with a destination based on the anycast prefix, and utilize the tunnel for traffic having the next hop as the anycast prefix to the RR. The anycast prefix is assigned to two or more RRs interconnecting the first network and the second network. A first path is decided by BGP based on a BGP Path Selection Algorithm that is independent of a second path determined by Interior Gateway Protocol (IGP). The first path and the second path can be different, and wherein tunnel is utilized to ensure the traffic always follows the first path.

Aspects of the subject disclosure may include, for example, a device, including: a processing system including a processor; a clock; and a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations of: advertising via Border Gateway Protocol (BGP) a capability as a precision timing protocol (PTP) master clock through an Internet Protocol (IP) / Multi-Protocol Label Switching (MPLS) network, wherein the advertising includes an IP address of the device; receiving a unicast signaling mechanism from a PTP client node in the network; and sending clock messages to the PTP client node responsive to accepting the PTP client node. Other embodiments are disclosed.

The invention discloses a key negotiation method, system and device and electronic equipment. The method comprises the following steps: obtaining a quantum key generated by a quantum key service platform; key negotiation processing is carried out on the quantum key through a border gateway protocol, a target key corresponding to the first router device is generated, and the target key is a key obtained after key negotiation is carried out on the first router device and a second router device through the border gateway protocol; the first router equipment and the second router equipment are any router equipment in a network forwarding layer; a quantum key library is determined according to the target key, and the quantum key library is a key database obtained after key negotiation is carried out on all router devices in a network forwarding layer through a border gateway protocol. According to the invention, the technical problems of low point-to-point key negotiation efficiency, high cost and complex network protocol due to limited application of a quantum key distribution technology in related technologies are solved.

A networking system may perform a border gateway protocol (BGP) switchover from an active BGP process to a standby BGP process. The standby BGP process may obtain transport layer protocol state information, for a given time, of a transport layer session for the active BGP process. The standby BGP process may update the transport layer protocol state information based on BGP messages conveyed, after the given time, over the transport layer session and forwarded to the standby BGP process. Based on a BGP switchover criterion being met, a replacement transport layer session may be set up using the updated transport layer protocol state information. The replacement transport layer session continues the transport layer session after the BGP switchover.

The present application discloses a service route advertisement and determination method, a computing power route gateway, and a storage medium. The service route advertisement method comprises: acquiring service state data of a service instance connected to a cloud side computing power route gateway; obtaining a target service metric value on the basis of the service state data, wherein the target service metric value represents a service providing capability of the service instance; and by means of a border gateway protocol (BGP), advertising, to an access side computing power route gateway in a computing power network system, target service route data carrying a service identifier and the target service metric value, so that the access side computing power route gateway determines a target cloud side computing power route gateway from cloud side computing power route gateways on the basis of the target service metric value.

Techniques for implementing Border Gateway Protocol (BGP) peering status-aware hitless reboot on a network device are provided. In one set of embodiments, at the time of shutting down for a hitless reboot, the network device can collect status information regarding its BGP peerings and can write this information to a file on non-volatile storage. Then, upon booting up after the hitless reboot, the network device can retrieve the file from the non-volatile storage and use the status information included therein to restore the BGP peerings as they existed prior to the hitless reboot.

This application discloses a route selection method and a related device. A control entity determines first metric information of a first segment routing (SR) path, generates a first border gateway protocol (BGP) update message including the first metric information, and sends the first BGP update message to an ingress node of the first SR path, where the first metric information represents quality of the first SR path, the first metric information is used for route selection on a plurality of paths, each of the plurality of paths has a same IP prefix of a destination node, and the plurality of paths include the first SR path. According to the method, the control entity can send, to the ingress node of the SR path by using the BGP update message, the metric information that represents the quality of the SR path.

Example solutions for providing route aggregation as a service (RaaS) are disclosed. A RaaS server receives original routing tables from routers in a wide area network (WAN), aggregates the routes by identifying common prefixes, and returns more compact aggregated routing tables to the routers. The routers use the aggregated routing tables to efficiently route data traffic in the WAN. Multiple resiliency approaches are disclosed, in order to prevent the routers from flushing the aggregated routes in the event that the RaaS server experiences an outage and the border gateway protocol (BGP session between each router and the RaaS server is lost. Example resiliency measures includes the use of a long lived stale time (LLST), reaching a length of perhaps weeks, during which the routers continue to use the aggregated routing tables, and the use of mirroring the aggregated routing tables in other RaaS

The invention relates to the technical field of network security, and discloses a network defense method, device and equipment, a storage medium and a computer program product.The method comprises the steps that whether malicious oscillation exists or not is judged according to at least one of route change information of a border gateway protocol, a time window threshold value and a route updating frequency threshold value; and analyzing the current traffic characteristics through an attack detection model, judging whether an attack behavior of distributed denial of service exists, limiting the speed of the current network traffic according to the malicious oscillation characteristics, and guiding the attack traffic of the attack behavior to a black hole address based on the extracted attack characteristics. According to the application, malicious oscillation and attack behaviors are monitored and identified in real time, when malicious oscillation is detected, the speed of the current network flow is limited according to the characteristics of the malicious oscillation, for the attack behaviors, the attack flow is guided to the black hole address based on the extracted attack characteristics, the attack source is quickly blocked, and a dual detection and response mechanism is adopted. And the timeliness and effectiveness of network defense are improved.

A process can include determining affinity information indicative of route preferences between branch routers and gateway routers. A prefix can be determined for a subnet of branch routers located at a same branch location. An affinity position of a first gateway router can be determined based on affinity information of the branch routers in the subnet. A mapping can be determined between a local preference Border Gateway Protocol (BGP) community attribute and the affinity position of the first gateway router, wherein a mapped local preference BGP community attribute and the affinity position are indicative of a same routing preference. The mapped local preference BGP community attribute can be attached to routes from the first gateway router into a cloud service provider. Affinity-based route preferences are indicated to the cloud service provider by redistributing the routes from the first gateway router with the mapped local preference BGP community attribute attached.

The invention discloses a network security state prediction method and device of a border gateway protocol, equipment and a readable storage medium, and relates to the technical field of Internet. Comprising the following steps: acquiring relevant parameters of a border gateway protocol; the related parameters comprise the attack prefix injection rate, the network defense capability and the attacked prefix importance of the border gateway protocol; determining the attack risk of the border gateway protocol based on the related parameters of the border gateway protocol; and calculating a network security state prediction result of the border gateway protocol based on the attack risk and the initial transition probability matrix of the border gateway protocol. According to the method, the accuracy of network security state prediction is improved.

Provided are a method and apparatus for processing a router advertisement message, a storage medium, and an electronic apparatus. The method includes acquiring, on a current node, a border gateway protocol (BGP) router advertisement message transmitted by a previous node, the BGP router advertisement message indicates a BGP next-hop node in a forwarding direction, and the forwarding direction is a direction from the network ingress node to the network egress node; and determining, in a case that the BGP next-hop node and the current node are two adjacent nodes on the propagation path, an underlying transport path from the current node to the BGP next-hop node according to instruction information corresponding to the current node of the information of the propagation path. According to examples of the disclosure, the technical problem that an underlying transport path cannot be flexibly determined in the related art is solved.

A method performed by an ingress router of an edge cloud datacenter for optimizing large scale handover triggered by site failure or degradation at the datacenter. The method comprises: receiving a border gateway protocol (BGP) UPDATE message, the BGP UPDATE message comprising a site reference identifier (ID) and operation capacity information, the site reference identifier (ID) corresponding to a set of routes within a site of a cloud data center; attaching the site reference ID to the group of routes in the routing table; selecting a path for forwarding traffic corresponding to the group of routes based on the operation capacity information; and forwarding the flow of the selected service along the path.

The invention discloses a computing power information transmission method, electronic equipment, a storage medium and a computer program product, and belongs to the technical field of communication. The method comprises: a target network device node receiving a first border gateway protocol (BGP) message, the first BGP message carrying a first computing power metric and a computing power type corresponding to the first computing power metric, the first computing power metric being a computing power metric obtained by measuring target computing power information corresponding to a target computing power service based on a computing power service type, and the target network device node receiving a first BGP message, the first BGP message carrying a first BGP message, the first BGP message carrying a first BGP message, the first BGP message carrying a second BGP message, the second BGP message carrying a second BGP message, the second BGP message carrying a second BGP message, and the second BGP message carrying a second BGP message. The target computing power information comprises computing power information which is acquired from a cloud management platform and corresponds to the target computing power service; and the target network equipment node sends a second BGP message based on the first BGP message, the second BGP message carrying a second computing power metric and a computing power type corresponding to the second computing power metric.

The invention belongs to the technical field of cross-domain network communication, and discloses a cross-system hierarchical sensing routing decision method, device and equipment and a storage medium. According to the method, a routing optimization scheme oriented to a cross-domain network is provided, hierarchical network performance collection is carried out by embedding a service level identifier and a time stamp in a detection data packet, differential thresholds are set according to different service types, and collected time delay, jitter, packet loss and bandwidth utilization data are comprehensively evaluated. And quantitatively adjusting the path priority attribute in the border gateway protocol according to the evaluation result, and driving the automatic switching of the transmission path. According to the method, the defect that data and services are disjointed in traditional detection is overcome; according to the method, a dynamic threshold value is set in combination with service requirements, multi-index comprehensive judgment is carried out, finally, a performance evaluation result and routing protocol attributes are linked, an automatic closed loop from sensing to decision making is established, and therefore the overall reliability and experience of cross-domain service transmission are improved under the condition that opposite-end cooperation is not needed.

Embodiments of the disclosure relate to providing border gateway protocol deterministic path forwarding. A network device may initiate a route, and may specify the route as a first colored route having a first color. The network device may advertise the first colored route to the first intermediate network device to cause the first intermediate network device to propagate the first colored route to the ingress network device over the first colored border gateway protocol session. The network device may specify the route as a second colored route having a second color, and may advertise the second colored route to a second intermediate network device to cause the second intermediate network device to propagate the second colored route to the ingress network device over a second colored border gateway protocol session.

This application provides a fault detection method, an apparatus, and a system. The method includes: A transmit end apparatus includes, when sending a border gateway protocol BGP message used for advertising a route, a bidirectional forwarding detection discriminator BFD discriminator configured by the transmit end apparatus, to trigger a receive end apparatus to automatically create an SBFD session used for detecting reachability of a target object associated with the transmit end apparatus, where the target object may be a locator address or a next-hop address of the route.