2103 results about "Edge node" patented technology

In a communication network constituted of relay nodes and edge nodes interconnected by communication lines and a network manager, the network manager manages relay nodes and edge nodes connected to the network manager by operation management communication lines. The network manager requests to set a logical connection between an ingress and an egress of the connection, and in response to this request, relay nodes and edge nodes set a logical connection specifying at least one of a transmission source and a destination.

This invention provides a network management equipment and a packet switching equipment which eliminate a connection setup delay time, reduce a delay and a delay variation involved in data transfer, and effectively perform connectionless data flow processing in a large data network. The network is divided into a connection-oriented core network and a plurality of connectionless access networks connected to the core network where a plurality of connections (called permanent virtual route (PVR)) are set up among a plurality of edge nodes. The network management equipment selects one route from a plurality of PVRs for connectionless data flow received from one of the access networks and transfers data along the PVR.

A virtual router network (VRN) for performing real-time flow measurements (RTFM) is provided. The VRN effectively reduces the number of traffic metering points required thereby simplifying the aggregation and exportation of flow records to a collector. The collector may be service manager in a network management system. The metering points, in a preferred embodiment, are at virtual interfaces (VI) which are edge nodes in VRN. One of the virtual interfaces is selected as a master virtual interface and act as a collector and distributor of flow related information. In one aspect of the invention the VRN is used to provide, non-invasively, per-flow delay monitoring in a communication system.

Domains (multiple collaborating service providers) create service offerings between pairs of edge nodes that interconnect with other domains in the network. The service offerings may specify the available bandwidth, quality of service, reliability, available security, price, subscriber and service contextual specific and other SLA information. When a new service is to be created, the service definition is used along with information about the available service offerings to determine a set of networks to implement the service. Information associated with the service offerings may be flooded to all other networks. Alternatively, the service offering information may be provided to a trusted third party (SLA broker) which may provide SLA services on the network to select sets of domains to implement inter-domain services, and may also proxy to set up the service for the SLA requesting party. A hybrid approach may also be used wherein some SLA information is flooded and other information is retained in secret and provided only to the SLA broker.

The present invention provides a method for interconnecting a plurality of local area networks that are each communicatively coupled to one of a plurality of provider edge nodes. The method includes forming a plurality of tunnels to communicatively connect each of the plurality of provider edge nodes with each of the other nodes in the plurality of provider edge nodes. The method also includes grouping provider nodes to form at least one first island and at least one second island. The first and second pluralities of provider nodes each include at least one of the provider edge nodes and at least one of the provider nodes is configured to function as a first island edge node. At least one inter-island tunnel is formed from the tunnels to communicatively connect each first island edge node with each second island edge node.

An end-to-end monitoring mechanism whereby edge nodes are notified that a particular path flows through a local protection tunnel along the way. The notification mechanism utilizes OAM packets which include a link protection indication that are transmitted on the Ethernet service layer. The link protection indication may be represented by one or more flags to indicate that local protection is in place along the path. The mechanism enables fast local protection to be used with slower end-to-end protection by informing the latter when local protection is activated. In an implementation in which local-protection does not preserve the CIR of the protected traffic, the invention provides minimal interruption of Committed Information Rate (CIR) connections by minimizing the time traffic is diverted through local protection tunnels. Notification of the edge node that local protection is in use occurs very quickly, thus allowing the edge node to rapidly switch to a backup path.

A method and apparatus for coordinating communication in a wireless sensor network may include a plurality of nodes, such as routers, edge nodes, data accumulators and / or gateways. Time management functions, such as determining an elapsed time, may be controlled based on a detected temperature, e.g., a temperature detected at a node, and / or based on a detected clock skew between two or more clocks in two or more different devices. Accurate time management may allow for devices to more accurately coordinate communication instances, e.g., communication that occurs at periodic wake up times. A cluster head, such as a data accumulator, may be associated with a network after its initial formation and cause nodes in the network to alter their hierarchy in the network, thereby making the cluster headaccumulator a parent to nodes in the network. Nodes having a relatively lower hop count may have a higher battery capacity than nodes having a higher hop count.

A virtual router network (VRN) for performing real-time flow measurements (RTFM) is provided. The VRN effectively reduces the number of traffic metering points required thereby simplifying the aggregation and exportation of flow records to a collector. The collector may be service manager in a network management system. The metering points, in a preferred embodiment, are at virtual interfaces (VI) which are edge nodes in VRN. One of the virtual interfaces is selected as a master virtual interface and act as a collector and distributor of flow related information. In one aspect of the invention the VRN is used to provide, non-invasively, per-flow delay monitoring in a communication system.

Management of the bandwidth capacity of tunnels through a network may be automated such that the network is adaptive to the stochastic nature of incoming traffic. An edge node in the network includes four main elements. Three of the elements, namely tunnel signaling, admission control and path selection, are derived from known technologies, generalized from their particular technologies and enhanced. With the addition of a fourth element, called capacity management, the four elements cooperate to accommodate the capacity needs of the traffic incoming to the network at the edge node. This accommodation is performed by estimating the traffic demand and dynamically adapting tunnels to the traffic demand.

A method and system for routing high-speed data to and from SANs (Storage Area Networks and Server Area Networks) via optical burst-switched (OBS) networks. OBS network components, including edge nodes and switching nodes, are coupled between SAN islands. In one embodiment, the OBS network comprises a photonic burst-switched (PBS) network. Under one scheme, a PBS edge node and SAN gateway are co-located at the interface to the SAN, while a plurality of PBS switching nodes are deployed between the PBS edge nodes. Under another scheme, PBS switching / edge nodes are co-located at respective SANs. This scheme employs an external gateway protocol (EGP) for routing data via selected route segments. Data going to and received from a SAN is packaged as Fibre Channel Frames. Data transmitted via the PBS network is converted into PBS frames having encapsulated Fibre Channel Frames. The schemes also support interfaces with legacy networks, such as LANs and WANs.

A method and system for protecting a service available on a broadcast domain. A sub-domain is established within the broadcast domain. The sub-domain includes a group of nodes used to provide a communication path to the service. A primary sub-domain maintenance association and a back-up sub-domain maintenance association are monitored. The primary and sub-domain maintenance associations are a set of primary and back-up paths, respectively, representing connectivity between nodes acting as edge nodes in the sub-domain. A fault is detected within the primary sub-domain maintenance association and a switch to the back-up sub-domain maintenance association occurs.

The present invention leverages an existing content delivery network infrastructure to provide a system that enhances performance for any application that uses the Internet Protocol (IP) as its underlying transport mechanism. An overlay network comprises a set of edge nodes, intermediate nodes, and gateway nodes. This network provides optimized routing of IP packets. Internet application users can use the overlay to obtain improved performance during normal network conditions, to obtain or maintain good performance where normal default BGP routing would otherwise force the user over congested or poorly performing paths, or to enable the user to maintain communications to a target server application even during network outages.

Methods and systems for providing necessary and sufficient quality-of-service (QoS), in a packet-based core transport network that utilizes dynamic setting of bandwidth management pipes or thresholds to obviate link congestion are disclosed. Congestion avoidance is a necessary and sufficient requirement in order to guarantee Quality of Service (QoS) in packet-based core networks.A typical network is composed of a plurality of backbone links connecting edge nodes where backhaul links are aggregated. The backhaul links connect the backbone links to the remote sites serving the subscribers. In order to enforce bandwidth management policies, Access Controllers, which perform traffic shaping, are situated on each remote site.In the event of a violation of certain link threshold settings, dynamic adjustment of the bandwidth management policies on affected Access Controllers is enforced. Various algorithms in determining the correlation between the link nearing congestion and the source or destination of traffic streams are also discussed. This invention implements a feedback control loop wherein probes at various points in the network checks for congestion states to guide bandwidth management threshold decisions in order to maintain the condition of non-congestion throughout the network. Capacity planning and congestion avoidance mechanisms work hand-in-hand to fulfill Service Level Agreements (SLA).

A communication resource management scheme capable of guaranteeing the communication quality with respect to the flow while not requiring the processing for each flow to nodes other than edge nodes is disclosed. The edge node stores an information for obtaining an available amount of communication resources that can be newly allocated in the network to one set of flows which share at least a route from that edge node to an egress node of the network. Then, the edge node carries out an admission control by newly receiving a request for allocation of communication resources for one flow belonging to that one set of flows, judging whether or not to accept the request according to a requested amount of communication resources and the available amount of communication resources as obtained from the information stored for that one set of flows, and allocating requested communication resources to that one flow when it is judged that the request is to be accepted, while the edge node and the core node carry out the priority control.

An architecture and method for performing dynamic route discovery and time slot reservation provisioning within optical-switched networks. The method employs extensions to the RSVP-TE signaling protocol, which uses various messages to reserve resources. Under a peer routing embodiment, routing trees and resource availability data are maintained by the edge nodes. A lightpath route is dynamically selected based on selection criteria applied to the routing tree data and the availability of resources along the lightpath. Link state information, including resource reservation data, is broadcast by the switching nodes to update the edge nodes of their resource availability. A resource reservation message is passed between nodes defined by an explicit route contained in the message, and resource availability is confirmed for the entire lightpath prior to confirming the resource reservations.

Methods and systems for providing necessary and sufficient quality-of-service (QoS), in a packet-based core transport network that utilizes dynamic setting of bandwidth management pipes or thresholds to obviate link congestion are disclosed. Congestion avoidance is a necessary and sufficient requirement in order to guarantee Quality of Service (QoS) in packet-based core networks.A typical network is composed of a plurality of backbone links connecting edge nodes where backhaul links are aggregated. The backhaul links connect the backbone links to the remote sites serving the subscribers. In order to enforce bandwidth management policies, Access Controllers, which perform traffic shaping, are situated on each remote site.In the event of a violation of certain link threshold settings, dynamic adjustment of the bandwidth management policies on affected Access Controllers is enforced. Various algorithms in determining the correlation between the link nearing congestion and the source or destination of traffic streams are also discussed. This invention implements a feedback control loop wherein probes at various points in the network checks for congestion states to guide bandwidth management threshold decisions in order to maintain the condition of non-congestion throughout the network. Capacity planning and congestion avoidance mechanisms work hand-in-hand to fulfill Service Level Agreements (SLA).

In a network for forwarding user packets by a tunneling protocol, an egress edge node to which tunnels concentrate from a plurality of ingress edge nodes allocates a bandwidth to each of sessions multiplexed through each of the tunnels and notifies each of the ingress edge nodes of the allocated bandwidth, and the ingress node notifies private routers or terminal devices of the allocated bandwidth.

Some embodiments provide a method for employing the management and control system of a network to dynamically recover from a split-brain condition in the edge nodes of the network. The method of some embodiments takes a corrective action to automatically recover from a split-brain failure occurred at a pair of high availability (HA) edge nodes of the network. The HA edge nodes include an active machine and a standby machine. The active edge node actively passes through the network traffic (e.g., north-south traffic for a logical network), while the standby edge node is synchronized and ready to transition to the active state, should a failure occur. Both HA nodes share the same configuration settings and only one is active until a path, link, or system failure occurs. The active edge node also provides stateful services (e.g., stateful firewall, load balancing, etc.) to the data compute nodes of the network.

A pair of aggregation switches is connected to an edge node by a multi-chassis link aggregation group, wherein the aggregation switches are connected by a virtual fabric link (VFL) for exchange of information between the Aggregation Switches. The VFL includes a plurality of subsets of VFL physical links, wherein each subset is connected to a different pair of network interface modules on the Aggregation Switches. Traffic distribution across the plurality of subsets of VFL physical links is based on destination hardware device information in a pre-pended header of packets and / or based on a load balancing identifier in the pre-pended header.

A method and architecture for secure transmission of data within optical-switched networks. In one embodiment, the optical switched network comprises a photonic burst-switched (PBS) network. Under various schemes, security keys including encryption and decryption keys are generated by edge nodes and the decryption keys are distributed to other edge nodes in a PBS network. In one embodiment, the security keys are dynamically generated by a trusted platform module (TPM). A source edge node uses its encryption key to encrypt selected data bursts to be sent to a destination edge node via a virtual lightpath coupling the source and destination edge nodes. Security data are embedded in a control burst header indicates to the destination node whether corresponding data bursts sent via the virtual lightpath are encrypted. The security data also includes the decryption key and may also identify an encryption / decryption algorithm to be used. In some embodiments, public key infrastructure facilities are used in conjunction with employment of private and public keys and digital certificates.

Routing mechanisms for routing data via a plurality of optical switched (OS) networks, such as optical burst-switched (OBS) networks. A plurality of OBS networks are connected to form an enterprise network, which may further include non-OBS networks such as LANs and the like. Each of the OBS networks is modeled as an autonomous system (AS), and one or more edge nodes of each OBS network are designated as external gateway protocol (EGP) routers. Each EGP router maintains a routing table identifying routes that may be used to reach destination networks. The routing table is dynamically updated via update messages that comprise an extension to the Border Gateway Protocol (BGP) and account for optical routing considerations particular to OBS networks. In response to a routing request, data is sent from an internal node using an internal routing protocol to a BGP router edge node. The BGP router edge node then determines a next network hop based on current routing information in its routing table, and the data is routed using an external routing protocol. At the same time, data is routed within an individual OBS network using an internal routing protocol under which data are sent as data bursts via reserved lightpaths.

Some embodiments provide a method for employing the management and control system of a network to dynamically recover from a split-brain condition in the edge nodes of the network. The method of some embodiments takes a corrective action to automatically recover from a split-brain failure occurred at a pair of high availability (HA) edge nodes of the network. The HA edge nodes include an active machine and a standby machine. The active edge node actively passes through the network traffic (e.g., north-south traffic for a logical network), while the standby edge node is synchronized and ready to transition to the active state, should a failure occur. Both HA nodes share the same configuration settings and only one is active until a path, link, or system failure occurs. The active edge node also provides stateful services (e.g., stateful firewall, load balancing, etc.) to the data compute nodes of the network.

Some embodiments provide a method for providing redundancy and fast convergence for modules operating in a network. The method configures modules to use a same anycast inner IP address, anycast MAC address, and to associate with a same anycast VTEP IP address. In some embodiments, the modules are operating in an active-active mode and all nodes running modules advertise the anycast VTEP IP addresses with equal local preference. In some embodiments, modules are operating in active-standby mode and the node running the active module advertises the anycast VTEP IP address with higher local preference.

Systems and methods providing a route optimization mechanism for transmitting data traffic across different autonomous systems based on real-time route performance detection. Regarding a request for routing data between a source node that is coupled to a first autonomous system and a destination node located in a second autonomous system, each of a plurality of edge nodes in the first autonomous system operates to detect and evaluate real-time route performance. The evaluation results are compared and used to select an edge node and an associated link for transporting data between the source node and the destination node. The route optimization mechanism can be adopted in an SDN-based or other virtual network autonomous system.

Some embodiments establish for an entity a virtual network over several public clouds of several public cloud providers and / or in several regions. In some embodiments, the virtual network is an overlay network that spans across several public clouds to interconnect one or more private networks (e.g., networks within branches, divisions, departments of the entity or their associated datacenters), mobile users, and SaaS (Software as a Service) provider machines, and other web applications of the entity. The virtual network in some embodiments can be configured to optimize the routing of the entity's data messages to their destinations for best end-to-end performance, reliability and security, while trying to minimize the routing of this traffic through the Internet. Also, the virtual network in some embodiments can be configured to optimize the layer 4 processing of the data message flows passing through the network.

Aggregation switches are connected to an edge node by a multi-chassis link aggregation group and a virtual fiber link provides a connection for exchange of information between the aggregation switches regarding MAC addressing to synchronize MAC address tables across the aggregation switches. When failure of the virtual fiber link is detected, the multi-chassis link aggregation group is reconfigured into two or more link aggregates with each link aggregate connecting the edge node to one of the aggregation switches. A spanning tree protocol is initiated over the link aggregates to prevent loops in the network. MAC address tables are flushed and relearned with the two or more link aggregates.

A method for configuring an edge MHFE for a logical network to communicate with other networks is described. The method receives data for the logical network that defines a logical router and a set of logical switches for logically connecting several end machines that operate on different host machines. The method, based on the received logical network data, identifies a physical port of the MHFE to bind a logical uplink port of the logical router to the identified physical port. The uplink port is for connecting the logical router to the external network. The method then binds the logical uplink port to the identified physical port by defining an uplink logical switch with a logical port that is associated with the identified physical port and assigning network and data link addresses of the logical uplink port to the logical port of the uplink logical switch.

A mechanism for recovering reserved resources in a wavelength-division-multiplexed based photonic burst switched (PBS) network in response to resource non-availability. The PBS network includes edge and switching nodes, which optically communicate information formatted into PBS control and data burst frames. Each PBS data burst frame is associated with a PBS control burst frame. A PBS control burst is sent to reserve resources along a lightpath comprising a concatenation of lightpath segments linked between in ingress edge nodes, switching nodes and egress edge nodes. During a subsequent data burst, an unavailable resource is detected at one of the switching nodes. In response, a resource cancellation message (RCM) comprising a control burst is sent to upstream and / or downstream nodes along the lightpath. Upon receiving the RCM, the corresponding resource reservation is cancelled, freeing the network resources for subsequent bandwidth reservations and access.