259 results about "Core router" patented technology

A data flow system, where a source 100 transmits a reservation packet to an ingress element 102. The ingress element 102 polices incoming message traffic and collects data flow information. Quality of service differentiation is realized by marking data packets of different data flows. The ingress element 102 registers the reservation packet and forwards the request to a core router 106. The core router 106 evaluates the service level required, and available resources. Based on this evaluation the core router 106 will reject, accept, or modify the received message, indicate the price for the requested level of service, and forward the reservation packet. The process is repeated until the reservation packet reaches the destination 110, which sends a feedback message to the source 100 indicating the result of the reservation packet. After establishing a reservation, source 100 transmits periodic control messages and collects information regarding resource availability, and the flow path.

A method and an apparatus is provided that is efficient in detecting network virus and worms while using only the layer-4 information that is easily extracted from core routers and also be scalable when layer-7 information is available. Entropy analysis is used to identify anomalous activity at the flow level. Thereafter, only the contents of suspicious flows are analyzed with fingerprinting extraction. By doing so, the present invention brings together the characteristics of being deployable for real-time high data to rate links and the efficiency and reliability of content fingerprinting techniques.

The invention discloses a flow cleaning framework and device and a flow lead and reinjection method. The flow lead and reinjection method comprises the steps that a flow cleaning flow table and a flow reinjection flow table are generated by an OpenFlow controller and are issued to an OpenFlow cleaning switcher; a flow lead flow table is generated and is issued to an OpenFlow core router. When a server is attacked, flow of the attacked server led according to the flow lead flow table is matched by the OpenFlow cleaning switcher according to the flow cleaning flow table to carry out flow cleaning; the cleaned clean flow is forwarded according to the flow reinjection flow table to achieve flow reinjection. According to the flow cleaning framework based on OpenFlow, flow lead and flow reinjection are achieved uniformly; an abnormal flow cleaning component is composed of the OpenFlow controller and the OpenFlow cleaning switcher to achieve separation of control over a flow cleaning system and forwarding of the flow cleaning system; when service requirements are changed, all kinds of flow tables can be updated just through the OpenFlow controller, and accordingly reconfiguration and redeploy of a network are easily and flexibly achieved.

A mechanism is provided in which multicast reverse path forwarding can be performed at a provider network egress edge router wherein core routers of the provider network are not configured to support multicast protocols or point-to-multipoint LSPs. An embodiment of the present invention provides for the creation of virtual interfaces in the egress edge router element during configuration of a multicast connection in response to a subscriber request. A virtual interface will be associated with an upstream ingress edge router element and that ingress edge router element is provided a label associated with the virtual interface. Such a label can then be included in datastream packets transmitted through the provider network. The label can then be used by reverse path forward checking at the egress edge router element to ascertain whether the multicast datastream is being received by the correct upstream interface (e.g., the virtual interface associated with the ingress edge router element). In such a manner, core network router elements of the provider's network need not be configured to process multicast transmissions as such, nor need the core router elements be configured to use the same network protocols as those used by the customer networks (e.g., customer networks can use IPv6 while the core network routers can use IPv4).

The invention discloses a customer behavior analysis and service system based on web contents, which comprises an information scheduling, analysis and display system arranged at an operator data center, an information pusher connected with a core router and a Radius processor connected with an operator accounting system, wherein the information scheduling, analysis and display system comprises a policy manager, an information display device and a user behavior analyzer. The invention does not need to install software on the client, as long as the user browses web pages during surfing on the Internet, according to a web site database, the system can do in-deep analysis, match and classify based on the analysis of visited web sites when the user uses mobile phones or broadband Internet to get online and then summarize user preference, therefore the system can individually display valuable contents on the web site for the user according to the user preference.

The present disclosure provides virtual router/switch systems and methods with a domain of optical switches operating as a single, virtualized router using a control plane design combining centralized control of higher layer packet switching functions with distributed control over transport switching functions. The virtual router systems and methods simplify and reduce cost of Internet Protocol (IP) networks by removing the core routers, replacing them with lower cost, high capacity optical switches which are Packet Optical Transport Systems (POTS). The virtual router systems and methods avoids full mesh connectivity of the edge routers and the associated need to maintain routing adjacencies to each of the other edge routers. The virtual router systems and methods include a centralized IP layer management. Further, the virtual router systems and methods include distributed control of the optical layers.

A Wavelength Division Multiplexing (WDM) multi-mode switching system and method and method provides concurrent switching in various switching modes. For example, WDM links may communicate data in various switching modes including, but not limited to, an electronic packet switching (EPS) mode, optical circuit switching (OCS) mode, and optical burst switching (OBS) mode. Edge routers and core routers in the WDM multi-mode switching systems and methods provide switching and processing necessary to handle data provided in the various switching modes. Further, the WDM multi-mode switching systems and methods can also provide dynamic reconfiguration between the various switching modes.

In a network of interconnected edge and core routers, where packet data flows are received at edge routers and then transmitted toward intended destinations via a path through one or more core routers, fair bandwidth sharing is achieved without per-flow state monitoring in the interior routers. Each edge router is arranged to divide each input data flow into a set of layers each having an associated level, based on rate. The division process is done without reference to the content of the flow, and can use layers of equal or unequal size. The packets in a flow are marked at an edge router with their layer level, in a globally consistent manner. Each core router maintains a layer level threshold, based upon buffer management conditions, and drops layers whose level exceeds the threshold. During congestion, the level threshold is decreased; when congestion clears, the level threshold is increased.

In one embodiment, the present invention is a method and apparatus for scalable virtual private network multicasting. In one embodiment a service network builds a new data multicast distribution tree for each high-bandwidth multicast data flow (e.g., multicast data flows that require an amount bandwidth meeting or exceeding a predefined threshold). However, if the multicast data flow is a low-bandwidth flow (e.g., if the required amount of bandwidth falls below the predefined threshold), the multicast data flow is routed over an existing multicast distribution tree in order to minimize an amount of state information that must be maintained by service provider core routers in the backbone network.

The invention discloses a cognitive network QoS (quality of service) guarantee method on the basis of service differentiation. The method takes services as the center, the information is gathered to a domain cognitive server for the purpose of being processed by collecting network QoS parameters, service information and network state information, and a processing result serves as a training sample to train a support vector machine (SVM) to obtain a classifier; the classifier predicts possible problems in a network in real time according to an information processing result collected by an edgerouter and a core router; the server issues a new strategy to the edge router according to the problems possibly happening; and the edge router distributes different priority levels to different services according to the new strategy so as to provide guarantee for network QoS. The method is combined with the existing differentiated service frame and has expandability; meanwhile, an artificial intelligence method is introduced in, so that the method can effectively make a decision before problems occur so as to realize network cognition.

A system and method for sharing access to an internet protocol (IP) network among multiple internet service providers (ISPs) uses multiprotocol label switching (MPLS). End-users are coupled to a broadband customer access network. Each end-user is also associated with at least one of the ISPs. An aggregation router interfaces the customer access network with a network backbone. The network backbone includes a border router for interfacing between the network backbone and the network of an ISP. When the border router is activated, it creates a forwarding equivalency class (FEC) corresponding to the ISP. The border router stores a label for the FEC and the interface for reaching the ISP in an FEC table. The border router advertises the label binding for the FEC to all upstream nodes. An intermediate node receiving the label binding creates its own FEC table, associates a new label with the FEC, and advertises the new label binding to its upstream nodes. The aggregation router receives and builds a FEC table containing the label bindings for all ISPs reachable over the network backbone. When the aggregation router receives a data packet from an end-user, the aggregation router determines the ISP associated with the end-user, labels the data packet with the label corresponding to the FEC for that ISP, and routes the packet on the network backbone. The packet eventually reaches the border router, which pops off the label and passes the packet to the ISP.

A storage router includes an IP network interface with IP network ports and data path processors. Each of the data path processors may control one of the IP network ports. High speed communication links couple the data path processors with a fiber channel switch. The storage router may route IP datagrams between the data path processors using the fiber channel switch. The fiber channel switch switches fiber channel packets between the data path processors and a plurality of fiber channel switch ports. The fiber channel packets may be encapsulated IP datagrams. Fiber channel packets received at a data path processor may be re-encapsulated and sent back through the fiber channel switch to another data path processor when the packets are destined for IP addresses associated with IP network ports controlled by other data path processors. Among other things, asymmetric data paths, and multiple and redundant communication paths with host systems are supported.

The invention provides a message transmission method based on double output-ports of the network and output-port routers, which are applied in a data centre network containing two output-port routers, and a connection is established between the two outlet-port routers; after receiving a request message from the (ISP) network side of a service supplier, each output-port router merely conducts the displacement of destination address, and creates a conversation information containing the source address of the request message and the destination address after the displacement, and then sends the request message; after receiving the message from the network side of the data center, by judging whether the self creates the conversation information containing the source address of the message and the destination address, if yes, the output-port router replaces the source address of the message by a public network address of the output-port routers and then transmits the public network address to the ISP gateway of the next hop; otherwise, the output-port router transmits the message to the other output-port router connected with the output-port router. The invention is favorable for realizing safety precautions of the servers in the data center network and improving the security of the data center network.

The invention discloses a method for label distribution, comprising the following steps: a label is allocated for each operator edge router in a network, wherein labels allocated for any two operator edge routers are different; and through an inner gateway protocol, the corresponding relation of the label of each operator edge router and a loopback address is notified to each operator edge router and an operator core router. Meanwhile, the invention discloses a label processing method, a label distribution device and a label processing device. The method can realize label distribution without adopting dynamic label distribution protocols such as LDP.

The invention embodiment discloses a multi-core router. The internal bus of the multi-core router is based on PCIE which connects the master control board of the multi-core router to the backboard of the multi-core router; the multi-core router further internally includes a network board and at least an interface board, wherein the network board and the interface board are respectively connected with the backboard via PCIE, thus to realize data transmission; and the master control board includes a multi-core CPU which respectively controls the network board and the interface board. The invention embodiment can effectively save hardware resources and reduce power consumption.