60 results about "Forwarding plane" patented technology

The invention discloses an intelligent dynamic load balancing method and system based on Clico-VPP. The method comprises the following steps: acquiring a load state index of a back-end service pod; according to the load state index and a service capability coefficient corresponding to the back-end service pod, calculating a dynamic traffic allocation weight of the back-end service pod through a weighted calculation model; based on a dynamic threshold synchronization strategy, synchronizing the state of a first hash ring located in a control plane to a second hash ring located in a forwarding plane; and based on the second hash ring, determining a target pod for the input data stream through consistency lookup. A double-loop decoupling architecture is provided, hash rings of a control plane and a forwarding plane are separated, a synchronization strategy is determined through a dynamic threshold value, decision intelligence and forwarding stability are both considered, and jitter is avoided; meanwhile, a dynamic weight-driven consistent Hash algorithm is adopted, a real-time load index and Pod service capability are fused to calculate a dynamic weight, and the dynamic weight is mapped into the number of virtual nodes, so that intelligent scheduling based on capability and maximum maintenance of connection during capacity expansion and contraction are realized.

The application discloses a multicast switching method and device, electronic equipment and a storage medium, and belongs to the technical field of communication. In the method, multicast data of a multicast source is received by a network device with PIM FRR function through a main link and a backup link. When the main link fails, the backup link of the multicast is switched to the main link at a data forwarding plane, so that the multicast data from the backup link is sent, and the backup link is switched to a new main link at a control plane. Instead of sending the multicast data from the backup link after the switching at the control plane and the data forwarding plane is completed, the amount of multicast data loss during multicast switching can be greatly reduced.

The present application relates to a user backup method, apparatus, system, device, medium, and program product, and relates to the field of communications technology. In this method, in response to fault information from a target forwarding plane device, the faulty user access port on the target forwarding plane device is obtained. Based on the faulty user access port, the real-time migration priorities of multiple normal user access ports corresponding to the control plane device are then obtained. Finally, user backup of the faulty user access port is performed based on the real-time migration priorities and real-time idle ratios of each normal user access port. This method can largely prevent users on the faulty user access port from being disconnected, ensuring the normal processing of user services.

The application discloses a data transmission control method and device, a network element and a medium. The method comprises the following steps: when a data packet is received, a two-layer member link adjacency segment identifier corresponding to a segment routing based on an IPv6 forwarding plane of the data packet is acquired; a first forwarding path corresponding to the data packet is determined according to the two-layer member link adjacency segment identifier; when the first forwarding path has a fault, a processing mode corresponding to the two-layer member link adjacency segment identifier is determined, and the data packet is processed according to the processing mode. The application improves the flexibility of data packet transmission and processing.

This invention belongs to the field of computer network communication and proposes a remote mirroring scheme that is easy to operate, fine-grained, and has low resource consumption. The scheme is based on the p4 programmable data forwarding plane and can mirror the packets of interest of a specified network element to the operation and maintenance equipment, which facilitates the location of network faults.

The invention relates to providing symmetric coherency hashing in a forwarding plane of a network device. A network device may receive hash keys from a control plane of the network device, and may sort the hash keys based on a next hop address field and to generate sorted hash keys. The network device may locally store the ranked hash keys in a data plane of the network device, and may generate a ranked hash table based on the ranked hash keys. The network device may utilize the sorted hash table to route traffic symmetrically with another network device.

The application discloses an encrypted traffic restoration system, method and device and a storage medium, relates to the technical field of network security, and comprises a data forwarding plane, a self-defined transmission control protocol stack, a virtual service layer and a virtual service layer. The data forwarding plane is used for receiving encrypted traffic and performing data analysis on the encrypted traffic. The self-defined transmission control protocol stack is used for monitoring the analyzed traffic and determining the connection relationship between a target service end and a target client. The virtual service layer is used for constructing a virtual service end and a virtual client, determining a virtual sender and a virtual receiver, and sequentially transmitting the analyzed traffic to an actual receiver through the virtual sender and the virtual receiver. The virtual service end and the virtual client are both configured with traffic decryption and encryption functions, so that the decrypted traffic obtained through the decryption function can be subjected to data security detection. The plaintext traffic is obtained through the decryption function between the virtual service end and the virtual client, thereby avoiding the problem of changing the original network structure in the encrypted traffic restoration process.

The application discloses a service data flow protection method based on a multi-medium channel, and comprises the following steps: S1, forwarding plane multi-medium channel network topology sensing; S2, service multi-path planning of a control plane controller software based on the multi-medium channel; S3, switching of a protection path of a forwarding layer device based on the multi-medium channel; and S4, fault tunnel repairing of a control plane based on the multi-medium channel. The application can reduce the interruption risk of user service flow and improve the stability of a packet transmission network.

The invention discloses a shared database configuration method, a traffic redirection method and related equipment, and belongs to the technical field of communication. The method comprises: according to policy configuration information in a first network device, determining a Border Gateway Protocol (BGP) message, the BGP message comprising a target color mark in the policy configuration information; and a BGP message is sent to the second network device, the BGP message is used for configuring a first shared database of the second network device, the first shared database comprises a target color mark, and the target color mark is used for indicating the second network device to determine a segment routing strategy of the target traffic according to the target color mark when determining that the target traffic is attacked. Through the mode, the configuration consistency between the network devices can be ensured, the possibility of artificial configuration errors is reduced, meanwhile, the forwarding plane of the second network device directly interacts with the first shared database, and the process interaction safety can be improved.

A data processing system, a data processing method, and a related device, which relate to the technical field of computers. A management and control node sends first management information and first control information to a computing node on the basis of a first bus, wherein the first management information comprises information for managing a communication function of the computing node, and the first control information comprises information for controlling the communication function of the computing node; and the management and control node further sends second management information and second control information to a switching node on the basis of a second bus, wherein the second management information comprises information for managing a data forwarding function of the switching node, and the second control information comprises information for controlling the data forwarding function of the switching node. In this way, the management and control node directly sends the management information and the control information to the computing node and the switching node by means of the buses, and it is unnecessary to perform forwarding by means of the switching node, thereby realizing physical isolation of the management information and the control information from a forwarding plane, and thus improving the security of management and control for the computing node and the switching node.

The invention relates to a southbound resource management method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: acquiring a southbound resource to be processed, and acquiring a first forwarding plane label corresponding to the southbound resource to be processed; determining a resource configuration node according to the first forwarding plane label, and obtaining a large top heap corresponding to the resource configuration node; and when the large top heap comprises the resource label of the southbound resource to be processed, adding the southbound resource to be processed into the large top heap. By adopting the method, the accuracy of southbound resource management can be improved.

The invention discloses a video encryption transmission link optimization method and system based on digital twinning. The method comprises the following steps: deploying lightweight probes at a sending end, a receiving end and an intermediate node, acquiring an encryption algorithm, a key length, encryption and decryption time delay, hop-by-hop time delay and a packet loss rate in real time, and sending the information with timestamps into a message queue; after the cloud twin container reads the data, a network topological graph, an encryption state machine and a video quality attenuation model are updated, a future traffic matrix and an attacker model are input into a running diagram neural network, and multiple groups of encryption parameter and routing path combinations are output; the reinforcement learning agent selects an optimal combination, issues encryption parameters to an encryption engine through a network configuration protocol, and issues a new path to a forwarding plane through a segment routing protocol; after the strategy takes effect, the probe continues to collect performance data, a message queue is sent back to correct network weight, closed-loop optimization is formed, encryption delay and end-to-end delay are continuously reduced, and dynamic optimization of a video encryption transmission link is achieved.

The application provides a tunnel label processing method and device and network equipment, and relates to the technical field of network communication. The method comprises the following steps: in response to a label allocation operation acting on the network equipment, obtaining a tunnel label corresponding to the label allocation operation, generating a network entry containing the tunnel label according to a pre-configured association group format; saving the network entry to a preset storage location; and issuing the allocated tunnel label to a forwarding plane of the network equipment to publish the tunnel label. The tunnel label processing method, device and network equipment provided by the application can quickly find the tunnel label from the preset storage location when the network equipment is reset, which helps the network link converge quickly and effectively avoids the problem of poor communication quality caused by too long interruption time, thereby improving the user experience.

The application provides a dynamic networking method of distributed edge cloud. The application realizes acquisition and synchronization of dynamic Internet IP of distributed edge cloud and IP / Mac information of virtual machine by deploying a cloud network scheduling server, and deploying dialing software and a virtual network controller on each cloud node. A distributed virtual switch and a virtual edge gateway are constructed through a virtual network forwarding plane based on eBPF, so that two-layer network intercommunication between virtual machines in the distributed edge cloud can be realized in a geographically dispersed and dynamic IP environment. Meanwhile, the virtual edge gateway realizes safe forwarding of data packets in cross-cloud access through policy control. In summary, the application effectively solves the two-layer network intercommunication and safe access problem in the dynamic address environment of the distributed edge cloud, and improves the flexibility and scalability of the system.

The invention discloses a service flow replication method, device and system based on a switch chip, and relates to the technical field of communication, and the method comprises the following steps: S001, constructing a full-link telemetering mechanism in a main data channel, collecting time delay fluctuation and packet loss tracks in real time, generating a replication pressure index heat map, and transmitting the replication pressure index heat map to a main data channel; the resource occupation range of the mirror session on the forwarding plane is represented; and S002, based on the copy pressure index heat map and in combination with port real-time statistical information, generating a conflict fingerprint in the three-state content addressing storage, and positioning a high-frequency copy hot spot, a cross-port strategy conflict and a repeated entry path by using the conflict fingerprint to provide a reference for strategy convergence. According to the method, resource occupation is perceived through a telemetering heat map, strategy partitioning is realized by utilizing conflict fingerprints and an access control list, redundant traffic is duplicated in combination with signatures and hash chains, resources are adaptively allocated by fusing a fault-tolerant and regulation mechanism, a copy closed loop is constructed, the stability and the execution efficiency are improved, the load of core equipment is reduced, and the method has engineering feasibility.

The invention provides a DPU forwarding plane monitoring index issuing method and device, and relates to the technical field of monitoring, in the invention, an index issuer is connected with a DPU forwarding plane through a control socket, and the control socket is created through a Unix domain socket when the DPU forwarding plane is started; the method comprises the following steps: sending a monitoring state query request carrying a runtime management command to a DPU forwarding plane through a control socket, so that the control socket performs authority verification on the monitoring state query request, and sending the runtime management command to the DPU forwarding plane after the verification is passed; receiving a query result returned by the DPU forwarding plane through the control socket; performing format conversion on the query result according to a plurality of dynamically defined indexes to obtain target index data; and exposing the target index data in real time through the HTTP endpoint. According to the invention, the flexibility and manageability of the system are improved, and the real-time monitoring and analysis of the state and performance of the DPU forwarding plane are realized.

The invention provides a data forwarding method and device based on an application network technology. The method is applied to a first acceleration node in an application network deployed by a physical network, and comprises the following steps: obtaining a service attribute table sent by a controller, the service attribute table comprising a tenant access identifier and a forwarding plane corresponding to the tenant access identifier, and the forwarding plane being determined based on a service quality requirement configured by a tenant corresponding to the tenant access identifier; the forwarding plane comprises at least part of acceleration nodes in the application network; acquiring a data request from a terminal, wherein the data request comprises a target tenant access identifier; determining a target forwarding plane according to the target tenant access identifier and a service attribute table; and sending the data request to a second acceleration node in the target forwarding plane. In conclusion, the physical network is divided into the virtual networks with different service quality requirements, so that the network resources of the physical network can be fully utilized, the utilization rate of the network resources is improved, diversified service quality requirements can be adapted, and the user experience is improved.

The application relates to a network device protection method, an electronic device and a computer readable storage medium. Embodiments of the application comprise the following steps: obtaining link state information of a control plane, generating feedback information according to the link state information, and sending the feedback information to a forwarding plane, so that the forwarding plane can update an access control list according to the feedback information. Through the network device protection method, the policy of the access control list can be dynamically updated, so that an attack message sender cannot send attack messages in a targeted manner, and network message attacks can be effectively prevented and the security of the network device can be ensured.

Embodiments of the present disclosure provide a network configuration sending method and apparatus, a storage medium, and an electronic device. The method includes: determining N rule-action pairs corresponding to Quality of Service (QoS) configuration information of each layer in Hierarchical Quality of Service (HQoS) configuration, wherein the N rule-action pairs are used for representing network configuration rules and network configuration actions corresponding to the QoS configuration information, and N is a natural number greater than or equal to 1; and sending, to a forwarding plane of a Broadband Remote Access System (BRAS), target QoS configuration information mapped with the N rule-action pairs, wherein the forwarding plane is used for configuring the target QoS configuration information into a target device to configure a network of the target device.

A service forwarding method, device and electronic equipment, the method comprising: obtaining a to-be-processed service and a control plane corresponding to the to-be-processed service; when the control plane is in a preset state, determining an initial forwarding list corresponding to the to-be-processed service from a forwarding plane associated with the control plane; adjusting the initial forwarding list to a target forwarding list based on a service type of the to-be-processed service; and forwarding the to-be-processed service according to the target forwarding list. Through the above method, the initial forwarding list is adjusted to the target forwarding list based on the service type of the to-be-processed service, the control plane is decoupled from the forwarding plane, so that the to-be-processed services of different service types correspond to different forwarding lists, and the service requirements corresponding to the to-be-processed services of different service types on the same port link can be met.

The embodiment of the application provides a method and device for elastic expansion and contraction of a virtualized forwarding plane in a vBRAS, the vBRAS comprising a control plane CP and a virtualized forwarding plane vUP, the method comprising: an MPU in each vUP sampling the load of each LPU in the vUP at a preset period to obtain a first load index of each LPU; if the first load index exceeds a preset LPU expansion threshold and a duration exceeds a preset duration, starting LPU expansion; issuing configuration data to the expanded LPU and performing load sharing based on the expanded LPU. The method can realize automatic load sharing at the LPU level of the vUP side, is more fine-grained and saves resources compared with BRAS-VM level expansion and contraction, the CP side does not need to frequently perform BRAS-VM level expansion and contraction, and the stability of the vBRAS system is improved.

The application discloses a network verification method and device, equipment, a storage medium and a program product. The method comprises the following steps: determining an abstract network element model based on an abstract network element function; wherein the abstract network element model is a network forwarding plane network element model; performing task arrangement based on a network verification task to obtain a reachable matrix; and performing network verification on the reachable matrix based on an instance of the abstract network element model to obtain a reachable path.

The invention provides a tunnel label processing method and device and network equipment, and relates to the technical field of network communication, and the method comprises the steps: responding to a label distribution operation acting on the network equipment, obtaining a tunnel label corresponding to the label distribution operation, and generating a network entry containing the tunnel label according to a pre-configured association group format; storing the network entry to a preset storage position; and issuing the distributed tunnel label to a forwarding plane of the network equipment so as to publish the tunnel label. According to the tunnel label processing method and device and the network equipment provided by the invention, the network entry containing the tunnel label is stored when the tunnel label is allocated, so that the tunnel label can be quickly found from the preset storage position when the network equipment is subjected to reset operation, a network link can be quickly converged, and the network efficiency is improved. And the problem of poor communication quality caused by overlong interruption time is effectively avoided, so that the user experience is improved.

The invention provides an SDN network structure and a communication method thereof, and belongs to the technical field of network architectures, and the network structure comprises a controller, a distributed fault detection node, a cross-domain resource interaction module and an elastic forwarding plane module. The distributed fault detection nodes collect fault information and transmit the collected fault information to the data intercommunication layer; the cross-domain resource interaction module generates a resource availability matrix, and transmits the resource availability matrix to the data intercommunication layer through a cross-domain resource description protocol; the elastic forwarding plane module collects a load-energy efficiency mapping relation and transmits the load-energy efficiency mapping relation to the data intercommunication layer; and the data intercommunication layer receives the fault information, the resource availability matrix and the load-energy efficiency mapping relation, sends the fault information and the resource availability matrix to the reinforcement learning safety-flow cooperative scheduling module, and sends the load-energy efficiency mapping relation to the fault self-healing path reconstruction module. On-demand collaboration is realized, and industrial control service time delay is reduced.

The invention relates to a traffic forwarding method and device, communication equipment, a storage medium and a program product. The method comprises the steps of obtaining a service chain SFC path template corresponding to a user when it is detected that the user has to-be-forwarded traffic; the SFC path template is a basic SFC path corresponding to the user; under the condition that the SFC path template is obtained, generating a target SFC path corresponding to the to-be-forwarded traffic according to the available condition of a preferred forwarding plane UP corresponding to a user and the SFC path template; the target SFC path is used for forwarding the to-be-forwarded traffic. By adopting the method, the generation efficiency of the target SFC path can be improved.

This invention discloses a service traffic replication method, apparatus, and system based on a switching chip, relating to the field of communication technology. The method includes the following steps: S001, by constructing a full-link telemetry mechanism on the backbone data channel, real-time collection of latency fluctuations and packet loss trajectories is achieved, and a replication pressure index heatmap is generated to characterize the resource occupancy range of the mirror session on the forwarding plane; S002, based on the replication pressure index heatmap and combined with real-time port statistics, a conflict fingerprint is generated in the three-state content addressing storage. The conflict fingerprint is used to locate high-frequency replication hotspots, cross-port policy conflicts, and repeated entry paths, providing a reference for policy convergence. This invention perceives resource occupancy through telemetry heatmaps, implements policy partitioning using conflict fingerprints and access control lists, combines signatures and hash chains to deduplicate redundant traffic, integrates fault tolerance and control mechanisms to adaptively allocate resources, constructs a replication closed loop, improves stability and execution efficiency, reduces the load on core equipment, and has engineering feasibility.

The invention provides a BIERv6 technology simulation system suitable for an IPTV platform, which comprises a data plane, a control plane and a Mininet simulation platform, and is characterized in that the data plane is used for constructing a data forwarding plane based on Mininet simulation to realize a BIERv6 forwarding router simulation function; the control surface is used for connecting a BIERv6 centralized controller to each simulated Bier router through a network to realize centralized control on the data surface; the Mininet simulation platform is used for simulating the connection condition of each routing node needing to be simulated and a network at a bottom layer, the simulation system realizes the connection of each Bier router and the transmission of a data packet based on the Mininet, and is connected with a real network through a physical network interface of the simulation host to process a real IPv4 / IPv6 multicast message so as to realize a simulation experiment of an end-to-end multicast service. The method can be used for solving the problems of complex traditional multicast protocol, weak expandability, high network overhead and the like.

Disclosed are devices, systems and methods for load balancing and operation, administration and maintenance (OAM) in service function chaining using the multiprotocol label switching (MPLS) forwarding plane. In some implementations, a packet processing method includes processing a network packet comprising a plurality of labels based on presence of an indicator label in the plurality of labels such that in case that the indicator label is present in the network packet, the indicator label is used to determine a first destination of a payload of the network packet, and in case that the indicator label is not present in the network packet, the payload is passed to a second destination selected based on a service function indicator in the plurality of labels.

The application relates to a user data recovery method and device, computer equipment, medium and product. The method is applied to a target control plane equipment in a networking system, and comprises the following steps: in the process that all control plane equipments in the networking system fail and are recovered, receiving a first data table sent by a forwarding plane equipment in the networking system, determining a client to be offline in the networking system according to the first data table, sending an offline control message to the forwarding plane equipment, configuring new user data for the client to be offline, recovering user data of a to-be-recovered data table and a second data table according to the new user data, and the number of user data in the second data table is less than that in the first data table. The above method can force some clients in the networking system to be offline, compared with the traditional technology, the time required for the forced offline processing can be shortened, the user data recovery speed is accelerated, and the user data recovery efficiency is improved.

The invention relates to a service chain SFC authentication method and device, communication equipment, a medium and a product. The method comprises the following steps: in response to a network access request of a target user, sending an access authentication request to an AAA server, and receiving user information corresponding to the target user and SFC service attribute information issued by the AAA server; under the condition that the target user has the SFC service use permission, establishing a user table corresponding to the target user locally based on the user information and the SFC service attribute information, and sending SFC service configuration information to a forwarding plane of the virtual broadband access gateway so as to store an SFC instance corresponding to the target user in the forwarding plane; the SFC instance is used for forwarding the SFC service flow of the target user arriving at the forwarding plane. According to the method provided by the invention, the blank of SFC service authentication in a forwarding and control separation scene can be filled.