129 results about "Border Gateway Protocol" patented technology

Various methods and processing systems for the effective management of network traffic and facilitating data forwarding within distributed computing environments. Network components may be configured to amalgamate the Border Gateway Protocol (BGP) with Source Network Address Translation (SNAT) or network address port translation (NAPT) technologies to facilitate dynamic notification of network address accessibility and use port index identifiers to augment the precision and resilience of routing. A distributed SNAT / NAPT virtual network function (VNF) or cloud-native network function (CNF) may collaborate with LEAF switches or server aggregation devices to refine data transmission via adaptable address mapping and forwarding and enhance network scalability and resilience.

The present disclosure relates to a routing control method, a system, and a BGP Peer. The method of the present disclosure can be executed by a first BGP Peer, including: receiving information of adding a new VPN route sent from a second BGP Peer, wherein the information of adding the new VPN route comprises: the new VPN route and an identifier of a first VPN instance; determining whether a number of VPN routes corresponding to the identifier of the first VPN instance reaches or exceeds a limit value after adding the new VPN route; and sending first instruction information to the second BGP Peer to instruct the second BGP Peer, in a case that the number of VPN routes corresponding to the identifier of the first VPN instance reaches or exceeds the limit value, wherein the first BGP Peer is an iBGP Peer inside a first AS.

A router is configured to send an advertisement of selective Ethernet Virtual Private Network (VPN) (EVPN) routes based on the Route Types. The router is configured to determine a requirement for a route refresh from a Border Gateway Protocol (BGP) peer for a subset of Route Types of all of the Route Types, send a route refresh message to the BGP peer with an indication of the subset of Route Types, and receive updated routes from the BGP peer only for the subset of Route Types. The indication can be included in a reserved field and payload of the route refresh message. The route refresh message can be defined in RFC 2918.

Embodiments include methods, electronic device, storage medium to prioritize Ethernet Segment(ES) route handling. In one embodiment, a method comprises, upon receiving a BGP update message with a route target (RT) membership Network Layer Reachability Information (NLRI), determining whether to prioritize the BGP update message based on existence of a flag indication within the RT membership NLRI; responsive to the flag indication being set in the RT membership NLRI, processing the RT membership NLRI to advertise a route matching the RT membership indicated in the first BGP update message without waiting on one or more periodic update timers; responsive to the flag indication not being set but the RT membership NLRI including a combination of type and subtype that indicates an ES-import RT, processing the RT membership NLRI without waiting on the timers as well; and otherwise processing the RT membership NLRI to advertise upon expiration of the timers.

In one embodiment, a device determines a mapping between a network destination and Border Gateway Protocol (BGP) peers located across a plurality of autonomous systems for which the network destination is reachable. The device causes, based on the mapping, performance of probing tests along a plurality of paths to the network destination and via the BGP peers, to obtain path performance measurements for the plurality of paths. The device uses a prediction model to generate predicted performance metrics for the plurality of paths based on the path performance measurements. The device configures, based on the predicted performance metrics for the plurality of paths, the BGP peers with BGP peering policies to convey application traffic associated with the network destination via particular path from among the plurality of paths.

A node, in a first network, includes circuitry configured to determine a next hop as decided by Border Gateway Protocol (BGP) is an anycast prefix to a Route Reflector (RR) interconnecting the first network with a second network, responsive to the next hop being the anycast prefix to the RR, create a tunnel with a destination based on the anycast prefix, and utilize the tunnel for traffic having the next hop as the anycast prefix to the RR. The anycast prefix is assigned to two or more RRs interconnecting the first network and the second network. A first path is decided by BGP based on a BGP Path Selection Algorithm that is independent of a second path determined by Interior Gateway Protocol (IGP). The first path and the second path can be different, and wherein tunnel is utilized to ensure the traffic always follows the first path.

Techniques for implementing Border Gateway Protocol (BGP) peering status-aware hitless reboot on a network device are provided. In one set of embodiments, at the time of shutting down for a hitless reboot, the network device can collect status information regarding its BGP peerings and can write this information to a file on non-volatile storage. Then, upon booting up after the hitless reboot, the network device can retrieve the file from the non-volatile storage and use the status information included therein to restore the BGP peerings as they existed prior to the hitless reboot.

This application discloses a route selection method and a related device. A control entity determines first metric information of a first segment routing (SR) path, generates a first border gateway protocol (BGP) update message including the first metric information, and sends the first BGP update message to an ingress node of the first SR path, where the first metric information represents quality of the first SR path, the first metric information is used for route selection on a plurality of paths, each of the plurality of paths has a same IP prefix of a destination node, and the plurality of paths include the first SR path. According to the method, the control entity can send, to the ingress node of the SR path by using the BGP update message, the metric information that represents the quality of the SR path.

Example solutions for providing route aggregation as a service (RaaS) are disclosed. A RaaS server receives original routing tables from routers in a wide area network (WAN), aggregates the routes by identifying common prefixes, and returns more compact aggregated routing tables to the routers. The routers use the aggregated routing tables to efficiently route data traffic in the WAN. Multiple resiliency approaches are disclosed, in order to prevent the routers from flushing the aggregated routes in the event that the RaaS server experiences an outage and the border gateway protocol (BGP session between each router and the RaaS server is lost. Example resiliency measures includes the use of a long lived stale time (LLST), reaching a length of perhaps weeks, during which the routers continue to use the aggregated routing tables, and the use of mirroring the aggregated routing tables in other RaaS

Provided are a method and apparatus for processing a router advertisement message, a storage medium, and an electronic apparatus. The method includes acquiring, on a current node, a border gateway protocol (BGP) router advertisement message transmitted by a previous node, the BGP router advertisement message indicates a BGP next-hop node in a forwarding direction, and the forwarding direction is a direction from the network ingress node to the network egress node; and determining, in a case that the BGP next-hop node and the current node are two adjacent nodes on the propagation path, an underlying transport path from the current node to the BGP next-hop node according to instruction information corresponding to the current node of the information of the propagation path. According to examples of the disclosure, the technical problem that an underlying transport path cannot be flexibly determined in the related art is solved.

The invention discloses a computing power information transmission method, electronic equipment, a storage medium and a computer program product, and belongs to the technical field of communication. The method comprises: a target network device node receiving a first border gateway protocol (BGP) message, the first BGP message carrying a first computing power metric and a computing power type corresponding to the first computing power metric, the first computing power metric being a computing power metric obtained by measuring target computing power information corresponding to a target computing power service based on a computing power service type, and the target network device node receiving a first BGP message, the first BGP message carrying a first BGP message, the first BGP message carrying a first BGP message, the first BGP message carrying a second BGP message, the second BGP message carrying a second BGP message, the second BGP message carrying a second BGP message, and the second BGP message carrying a second BGP message. The target computing power information comprises computing power information which is acquired from a cloud management platform and corresponds to the target computing power service; and the target network equipment node sends a second BGP message based on the first BGP message, the second BGP message carrying a second computing power metric and a computing power type corresponding to the second computing power metric.

The invention belongs to the technical field of cross-domain network communication, and discloses a cross-system hierarchical sensing routing decision method, device and equipment and a storage medium. According to the method, a routing optimization scheme oriented to a cross-domain network is provided, hierarchical network performance collection is carried out by embedding a service level identifier and a time stamp in a detection data packet, differential thresholds are set according to different service types, and collected time delay, jitter, packet loss and bandwidth utilization data are comprehensively evaluated. And quantitatively adjusting the path priority attribute in the border gateway protocol according to the evaluation result, and driving the automatic switching of the transmission path. According to the method, the defect that data and services are disjointed in traditional detection is overcome; according to the method, a dynamic threshold value is set in combination with service requirements, multi-index comprehensive judgment is carried out, finally, a performance evaluation result and routing protocol attributes are linked, an automatic closed loop from sensing to decision making is established, and therefore the overall reliability and experience of cross-domain service transmission are improved under the condition that opposite-end cooperation is not needed.

This application provides a fault detection method, an apparatus, and a system. The method includes: A transmit end apparatus includes, when sending a border gateway protocol BGP message used for advertising a route, a bidirectional forwarding detection discriminator BFD discriminator configured by the transmit end apparatus, to trigger a receive end apparatus to automatically create an SBFD session used for detecting reachability of a target object associated with the transmit end apparatus, where the target object may be a locator address or a next-hop address of the route.

The invention discloses a route leakage detection method based on probabilistic reasoning and path scoring, and the method comprises the steps: obtaining an autonomous system path in a border gateway protocol route, and enabling the autonomous system path to comprise a plurality of autonomous system links, obtaining autonomous system business relationship probability data about the plurality of autonomous system links through an autonomous system business relationship probability inference algorithm, and obtaining autonomous system business relationship determination data about the plurality of autonomous system links through an autonomous system provider authorization object; the autonomous system business relation probability inference algorithm is set according to a valley-free rule, and the autonomous system business relation comprises provider-to-customer, customer-to-provider and peer-to-peer; according to the autonomous system business relationship probability data and the autonomous system business relationship determination data, calculating the score of the autonomous system path through a path score calculation formula; and comparing the score of the autonomous system path with a preset threshold value, and judging whether the border gateway protocol route of the autonomous system path is a leaked route or not.

Aspects of the subject disclosure may include, for example, offloading one or more flows or stateful sessions from a firewall to a gateway router. The flows may be qualified for offloading using any criteria. The flows may be injected into the gateway router using border gateway protocol (BGP) Flowspec route over a BGP neighborship between the gateway router and the firewall. Other embodiments are disclosed.

A route advertisement method and a related apparatus, to avoid a packet loss caused by introduction of an aggregated route. The method includes: a first network device determines that a first route to a second network device is unreachable. The first network device sends routing information to a third network device according to border gateway protocol (BGP), where the routing information indicates that the first route is unreachable, to enable the third network device to generate the first route and mark the first route as an unreachable route.

Embodiments of the present application provide a network fault diagnosis method, device, equipment and storage medium. The method comprises: receiving a first border gateway protocol (BGP) message, the first BGP message comprising a derived relationship graph of a network corresponding to a first network device, the derived relationship graph being used to indicate five-tuple information and a routing relationship of each network device, the first network device being any network device in the network; determining a target verification result, the target verification result being obtained by verifying configuration information of the first network device according to the first BGP message. The reliability of network fault diagnosis and repair is improved.

The present application relates to the technical field of communication detection, and discloses a training method and device of a border gateway protocol anomaly detection model and computer equipment, wherein the historical route statistical features and historical graph topology features corresponding to historical BGP data are extracted, and the features are trained by using the border gateway protocol anomaly detection model, the drift detection score between the historical anomaly detection result and the historical BGP data is calculated in the training process, and the drift detection threshold is used as a reference benchmark to adaptively update the multiple parameter values of the border gateway protocol anomaly detection model in combination with the drift detection score. Therefore, even if the BGP abnormal condition caused by the dynamic change of the network environment is faced, the BGP abnormal data can be accurately detected, and the high efficiency of the BGP abnormal data anomaly detection can be ensured.

The application provides a prefix hijacking anomaly detection method based on a dynamic graph and related equipment. The method comprises the following steps: constructing a border gateway protocol heterogeneous graph based on first packet data in an acquired start time window and second packet data in a to-be-detected time window; setting different self-loop relationships for different node types in the second heterogeneous graph, and obtaining a first embedding vector matrix based on the self-loop relationships; extracting changes of the first embedding vector matrix in a time dimension to obtain a second embedding vector matrix; flattening the second embedding vector matrix as an input of a multilayer perception machine to output a detection result. By constructing a BGP heterogeneous topology graph in combination with the characteristics of prefix hijacking, the graph characteristics of the BGP network are fully mined on the basis of the characteristics of prefix hijacking. In addition, the autonomous domain network naturally has a topology characteristic, and the characteristic is effectively extracted through a BGP heterogeneous graph convolution network, so that the effectiveness of detection is ensured.

The application provides an edge device communication processing method and system, electronic equipment and a storage medium. The method comprises the following steps: a multicast receiving end PE monitors first state information of a locally stored virtual routing forwarding table in real time, and a multicast sending end PE monitors second state information of a locally stored virtual routing forwarding table in real time; the multicast receiving end PE encapsulates the first state information through a border gateway protocol module to obtain routing information, and sends the routing information to the multicast sending end PE; and the multicast sending end PE determines whether to establish a communication connection with the multicast receiving end PE according to the routing information and the second state information. The purpose of batch and rapid cutting off of multicast traffic is achieved, and the forwarding of redundant traffic in a backbone network is reduced.

Aspects of the subject disclosure may include, for example, in response to a Border Gateway Protocol (BGP) update from an egress provider edge router connected to a destination customer network, receiving a request for an end-to-end SR policy or an end-to-end path from an ingress provider edge router, where the BGP update includes a prefix of the destination customer network and a first color; using color mapping data, determining a first domain associated with the first color and determining a second color to be associated with a second domain and mapped to the first color, where a color is a numerical value associated with a network intent of a domain, the color mapping data define mappings between different colors associated with different domains, and the mapped first color and second color enable identification of a first intent and a second intent that belong to the first domain and the second domain, respectively; and generating the end-to-end path reflecting each definition of the first and the second intents identified by the first color in the first domain and the second color in the second domain. Other embodiments are disclosed.

This invention relates to the field of border gateway protocol anomaly detection technology, and discloses a border gateway protocol anomaly detection method, apparatus, and computer equipment. The invention acquires BGP data to be tested, wherein the BGP data to be tested comprises each type of data from multiple BGP data sets, and the BGP data to be tested is pre-processed; it extracts BGP data to be tested from the BGP data to be tested, and fuses the BGP data to be tested from multiple BGP data sets; it inputs the fused BGP data to be tested into a BGP temporal convolutional network for detection, and obtains the anomaly detection result of the BGP data to be tested; ultimately, the embodiments of this disclosure can process the long-term sequence features of BGP data and capture the long-term dependencies of BGP data, thereby improving the accuracy of BGP data anomaly detection.

Aspects of the subject disclosure may include, for example, network device(s) capable of on-demand virtual routing and forwarding (VRF) table creation. A network device may receive a request from a customer device requesting on-demand VRF creation, and may instantiate and provision a VRF in response. The request made by the customer device may be made by announcing an attribute in a border gateway protocol (BGP) message. Other embodiments are disclosed.

Decomposed Border Gateway Protocol (BGP) allows eBGP sessions between internal and external nodes to continue even when a failover occurs at the boundary where the eBGP session was established. eBGP control traffic is intercepted by the external router and forwarded to BGP speakers on the internal nodes via IP channels. Failover is detected in response to a change in the source address of the IP channel receiving the eBGP control traffic. The BGP speaker advertises routes to the external nodes, including a reference to the internal address of the operating external router. In response to the failover, the BGP speaker advertises the updated route reference to the backup router of the external router.

An improved mechanism is disclosed for advertising Segment Routing over IPv6 (SRv6)- based Border Gateway Protocol (BGP) services in networks supporting multiple Segment Identifier (SID) types (14). A Provider Edge (PE) router (100), acting as a BGP speaker (38), operates an SRv6-based BGP service and advertises it via BGP Update messages. These messages include Service SID information encoded as a Service SID Type- Length-Value (TLV) (12), and multiple Service SID Structure information (14), each corresponding to different SID types, such as uncompressed SIDs or micro SIDs (uSIDs). Upon receiving these messages, ingress PE routers select appropriate SID types based on capabilities or local policies, enhancing interoperability and reducing control-plane overhead. The solution uses a new Service SID TLV type (18) to indicate support for multiple SID structures, promoting efficient resource utilization and seamless multi¬ vendor deployment within SRv6 environments. This approach simplifies transitions between SID types and optimizes network scalability and flexibility.

Prevention of SIM spoofing in mobile user plane. A method includes generating a border gateway protocol (BGP) flow specification based on a range of Internet Protocol (IP) addresses associated with routes for one or more user equipment devices. The method includes, in response to receiving a packet from a node within a radio access network, verifying an inner IP packet encapsulation based on the BGP flow specification.

A route advertisement method and a device for improving efficiency of generating a route advertisement message are disclosed. The method is applied to a network including a first network device and a second network device, and the first network device and the second network device establish a user datagram protocol (UDP)-based border gateway protocol (BGP) connection. The method includes: The first network device obtains one or more route sending groups, where each of the one or more route sending groups includes one or more pieces of route information; the first network device separately generates at least one route advertisement message based on each of the one or more route sending groups, each of the at least one route advertisement message includes the one or more pieces of route information in the route sending group corresponding to the route advertisement message; and the first network device sends the route advertisement message to the second network device through the BGP connection.

The invention discloses a data processing method and device, equipment, a storage medium and a computer program product, and the method comprises the steps: receiving first configuration information which is used for configuring a virtual extensible local area network tunnel endpoint VTEP address corresponding to each business in a plurality of businesses; detecting the port corresponding to each service to obtain the state of the port corresponding to each service; sending a VTEP address corresponding to a first service in the plurality of services to a corresponding computing node through a BGP (Border Gateway Protocol) message, wherein the first service represents a service of which the state of a corresponding port is a normal state; and cancelling the sending of the VTEP address corresponding to the second service in the plurality of services to the corresponding computing node through the BGP message, wherein the second service represents the service of which the state of the corresponding port is an abnormal state.

Aspects of the subject disclosure may include, for example, a device, having: a processing system including a processor; and a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, the operations including: receiving a border gateway protocol (BGP) prefix from a first provider edge (PE) router; determining that a second PE router failed to send the BGP prefix to the device; confirming that the BGP prefix is valid; and sending the BGP prefix to the second PE router. Other embodiments are disclosed.

The application discloses a data processing method and device, equipment, a storage medium and a computer program product. The method comprises the following steps: receiving first configuration information, wherein the first configuration information is used for configuring a virtual extensible local area network tunnel end point (VTEP) address corresponding to each service in multiple services; detecting a port corresponding to each service to obtain a state of the port corresponding to each service; sending, through a border gateway protocol (BGP) message, a VTEP address corresponding to a first service in the multiple services to a corresponding computing node, wherein the first service represents a service with a normal state of the corresponding port; and revoking the sending, through the BGP message, of a VTEP address corresponding to a second service in the multiple services to the corresponding computing node, wherein the second service represents a service with an abnormal state of the corresponding port.