85 results about "Forwarding plane" patented technology

Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (I) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and / or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane.

The invention provides a forwarding method and device based on a geographic relative position, equipment and a medium, and the method comprises the steps: carrying out the coding according to the geographic space coordinates of producers through employing a Geohash algorithm, and distributing a unique Geohash code for each producer; distributing a Geohash code naming Dpkt to the producer based on a Geohash algorithm, and obtaining a data name of the Dpkt of the producer; performing inverse analysis on the Ipkt data name through the forwarding node to obtain a geographic space coordinate, and determining a geographic relative orientation of the forwarding node and the forwarding target according to the own coordinate of the forwarding node and the geographic space coordinate; and sending the Ipkt to the forwarding interface of the corresponding geographical orientation through the forwarding node. The method has the beneficial effects that the storage overhead of the forwarding plane and the communication overhead between the nodes are reduced, and the reliability of the network is improved.

The invention provides a service message transmission method and device, equipment and a storage medium, relates to the technical field of communication, and is used for solving the problem of poor compatibility of new and old equipment in a network. The method is applied to a first provider edge device PE, and comprises: receiving an edge-to-edge pseudo-wire simulation PWE3 service message from a source user edge device CE, the PWE3 service message comprising a target pseudo-wire PW identifier, and the target PW identifier being used for indicating a PW between the source CE and a target CE. And packaging the PWE3 service message according to the target PW identifier to obtain a segment routing SRv6 service message based on the sixth version of forwarding plane of the Internet protocol. And sending the SRv6 service message to a second PE through a target SRv6 tunnel between the first PE and the second PE, the second PE being a PE connected with the target CE.

The invention discloses an intelligent dynamic load balancing method and system based on Clico-VPP. The method comprises the following steps: acquiring a load state index of a back-end service pod; according to the load state index and a service capability coefficient corresponding to the back-end service pod, calculating a dynamic traffic allocation weight of the back-end service pod through a weighted calculation model; based on a dynamic threshold synchronization strategy, synchronizing the state of a first hash ring located in a control plane to a second hash ring located in a forwarding plane; and based on the second hash ring, determining a target pod for the input data stream through consistency lookup. A double-loop decoupling architecture is provided, hash rings of a control plane and a forwarding plane are separated, a synchronization strategy is determined through a dynamic threshold value, decision intelligence and forwarding stability are both considered, and jitter is avoided; meanwhile, a dynamic weight-driven consistent Hash algorithm is adopted, a real-time load index and Pod service capability are fused to calculate a dynamic weight, and the dynamic weight is mapped into the number of virtual nodes, so that intelligent scheduling based on capability and maximum maintenance of connection during capacity expansion and contraction are realized.

The application discloses a multicast switching method and device, electronic equipment and a storage medium, and belongs to the technical field of communication. In the method, multicast data of a multicast source is received by a network device with PIM FRR function through a main link and a backup link. When the main link fails, the backup link of the multicast is switched to the main link at a data forwarding plane, so that the multicast data from the backup link is sent, and the backup link is switched to a new main link at a control plane. Instead of sending the multicast data from the backup link after the switching at the control plane and the data forwarding plane is completed, the amount of multicast data loss during multicast switching can be greatly reduced.

The present application relates to a user backup method, apparatus, system, device, medium, and program product, and relates to the field of communications technology. In this method, in response to fault information from a target forwarding plane device, the faulty user access port on the target forwarding plane device is obtained. Based on the faulty user access port, the real-time migration priorities of multiple normal user access ports corresponding to the control plane device are then obtained. Finally, user backup of the faulty user access port is performed based on the real-time migration priorities and real-time idle ratios of each normal user access port. This method can largely prevent users on the faulty user access port from being disconnected, ensuring the normal processing of user services.

The application discloses a data transmission control method and device, a network element and a medium. The method comprises the following steps: when a data packet is received, a two-layer member link adjacency segment identifier corresponding to a segment routing based on an IPv6 forwarding plane of the data packet is acquired; a first forwarding path corresponding to the data packet is determined according to the two-layer member link adjacency segment identifier; when the first forwarding path has a fault, a processing mode corresponding to the two-layer member link adjacency segment identifier is determined, and the data packet is processed according to the processing mode. The application improves the flexibility of data packet transmission and processing.

This invention belongs to the field of computer network communication and proposes a remote mirroring scheme that is easy to operate, fine-grained, and has low resource consumption. The scheme is based on the p4 programmable data forwarding plane and can mirror the packets of interest of a specified network element to the operation and maintenance equipment, which facilitates the location of network faults.

The invention relates to providing symmetric coherency hashing in a forwarding plane of a network device. A network device may receive hash keys from a control plane of the network device, and may sort the hash keys based on a next hop address field and to generate sorted hash keys. The network device may locally store the ranked hash keys in a data plane of the network device, and may generate a ranked hash table based on the ranked hash keys. The network device may utilize the sorted hash table to route traffic symmetrically with another network device.

The invention discloses a hardware-based mutual exclusion lock device and a control method thereof, and belongs to the technical field of data processing, the hardware-based mutual exclusion lock device comprises hardware and software, and the hardware is connected with the software; the hardware comprises a first register, a second register and a first counter, and the first register is connected with the first counter; the software comprises a locking interface and a release locking interface, the locking interface is connected with the release locking interface, the first register and the second register, and the release locking interface is connected with the second register. According to the mutual exclusion lock device realized based on hardware, a high-speed mutual exclusion scheme for verifying mutual exclusion in current different address spaces in an operating system is not needed, and the mutual exclusion requirements of different address spaces in current high-performance application scenes such as a high-speed data forwarding plane and the like are met.

The application discloses an encrypted traffic restoration system, method and device and a storage medium, relates to the technical field of network security, and comprises a data forwarding plane, a self-defined transmission control protocol stack, a virtual service layer and a virtual service layer. The data forwarding plane is used for receiving encrypted traffic and performing data analysis on the encrypted traffic. The self-defined transmission control protocol stack is used for monitoring the analyzed traffic and determining the connection relationship between a target service end and a target client. The virtual service layer is used for constructing a virtual service end and a virtual client, determining a virtual sender and a virtual receiver, and sequentially transmitting the analyzed traffic to an actual receiver through the virtual sender and the virtual receiver. The virtual service end and the virtual client are both configured with traffic decryption and encryption functions, so that the decrypted traffic obtained through the decryption function can be subjected to data security detection. The plaintext traffic is obtained through the decryption function between the virtual service end and the virtual client, thereby avoiding the problem of changing the original network structure in the encrypted traffic restoration process.

Embodiments of the present application disclose a message transmission method and an access gateway device. Embodiments of the present application can be applied to a system architecture with separated control plane and forwarding plane, and can be specifically implemented on an access gateway device. The method includes: The access gateway device determines the CAR channel corresponding to the message according to the user host characteristic information and the changed salt value or the characteristic sequence after random sorting of the bit positions of the user host characteristic information, so that messages sent by the same user host at different time periods can enter different CAR channels for transmission. Therefore, a legitimate user host can avoid the attack of an illegal user host and complete the process of establishing a session.

The embodiment of the invention provides a data processing method and device, equipment and a readable medium. The method comprises the following steps: in response to a failure of a first BGP process in a control plane of network equipment, enabling the control plane to stop receiving and transmitting a data packet with a forwarding plane of the network equipment; enabling the IO thread in the first BGP process to continuously process the received data packet; in response to completion of processing of the data packet in the IO thread, reconstructing a second BGP process in the control plane based on BGP peer information and BGP routing information associated with the first BGP process; reconstructing a first socket interface of the BGP peer associated with the second BGP process based on the socket information of the BGP peer; and in response to the completion of the reconstruction of the second BGP process and the first socket interface, recovering the transceiving of the data packet between the control plane and the forwarding plane.

The application discloses a service data flow protection method based on a multi-medium channel, and comprises the following steps: S1, forwarding plane multi-medium channel network topology sensing; S2, service multi-path planning of a control plane controller software based on the multi-medium channel; S3, switching of a protection path of a forwarding layer device based on the multi-medium channel; and S4, fault tunnel repairing of a control plane based on the multi-medium channel. The application can reduce the interruption risk of user service flow and improve the stability of a packet transmission network.

The invention discloses a shared database configuration method, a traffic redirection method and related equipment, and belongs to the technical field of communication. The method comprises: according to policy configuration information in a first network device, determining a Border Gateway Protocol (BGP) message, the BGP message comprising a target color mark in the policy configuration information; and a BGP message is sent to the second network device, the BGP message is used for configuring a first shared database of the second network device, the first shared database comprises a target color mark, and the target color mark is used for indicating the second network device to determine a segment routing strategy of the target traffic according to the target color mark when determining that the target traffic is attacked. Through the mode, the configuration consistency between the network devices can be ensured, the possibility of artificial configuration errors is reduced, meanwhile, the forwarding plane of the second network device directly interacts with the first shared database, and the process interaction safety can be improved.

The invention discloses a broadband core network deployment method based on forwarding and control separation. A broadband core network control plane is deployed in a provincial centralized manner and is deployed in a different-address or different-place 1 + 1 hot standby manner; broadband core network user planes are deployed in a centralized manner according to cities and different local addresses are in 3 + 1 warm standby; control planes of the broadband core network communicate with each other through MER equipment, are borne by using L3VPN, and are connected to an intelligent metropolitan area network by using the MER equipment to communicate with CR equipment; the broadband core network user plane double-uplink different-local-address two CRs are incorporated into the autonomous domain management of the metropolitan area network, and uplink broadband core network control plane and downlink OLT equipment are connected through the intelligent metropolitan area network. Compared with a traditional BRAS, under the same hardware condition, the number of supported users is larger, forwarding plane resources are utilized more efficiently, and the capacity expansion requirement is lowered; the IP addresses can be controlled in a centralized mode, applied and distributed according to needs, automatically released after being used, efficiently used and easy to operate, maintain and manage.

A data processing system, a data processing method, and a related device, which relate to the technical field of computers. A management and control node sends first management information and first control information to a computing node on the basis of a first bus, wherein the first management information comprises information for managing a communication function of the computing node, and the first control information comprises information for controlling the communication function of the computing node; and the management and control node further sends second management information and second control information to a switching node on the basis of a second bus, wherein the second management information comprises information for managing a data forwarding function of the switching node, and the second control information comprises information for controlling the data forwarding function of the switching node. In this way, the management and control node directly sends the management information and the control information to the computing node and the switching node by means of the buses, and it is unnecessary to perform forwarding by means of the switching node, thereby realizing physical isolation of the management information and the control information from a forwarding plane, and thus improving the security of management and control for the computing node and the switching node.

The embodiment of the invention provides a resource management method, electronic equipment and a program product. The method comprises the following steps: acquiring time-varying bandwidth path arrangement information issued by a controller; the time-varying bandwidth path arrangement information comprises an executable time period and a bandwidth demand and an execution path in the time period; sending a resource judgment message along the execution path, wherein the resource judgment message carries a time variable bandwidth resource request parameter and a bandwidth resource information field; the bandwidth resource information field is used for indicating time period-based bandwidth resource information of at least one hop in the execution path; and in response to a resource reservation confirmation message sent by the receiving end equipment according to the resource judgment message, bandwidth resource reservation based on the time-varying bandwidth path is executed. According to the scheme of the embodiment, the time variable parameters are processed on the forwarding surface, the value-added service can be provided by using the existing IP network, the operation efficiency of the wide area network is improved, and the data express service can be ordered as required, so that the cost is reduced, and the service is more flexible.

The invention discloses a dynamic routing optimization method for a hybrid forwarding plane network, which is characterized in that a centralized controller broadcasts a whole network flow table to routing equipment in a network domain in a flooding mode, and the routing equipment in the network domain introduces the whole network flow table in calculating a shortest path in a dynamic routing calculation process so as to optimize the dynamic routing. And optimizing and generating a routing table and conflict information, reporting the conflict information to the centralized controller by the routing equipment, and optimizing a service guarantee strategy by the centralized controller. The method has the beneficial effects that in a communication network based on a hybrid forwarding plane architecture, high-quality generation of a dynamic routing path is realized, a routing next hop is preferably formed, and the problems of network congestion and transmission delay increase generated after a centralized controller manages and controls the communication network are avoided.

The invention relates to a southbound resource management method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: acquiring a southbound resource to be processed, and acquiring a first forwarding plane label corresponding to the southbound resource to be processed; determining a resource configuration node according to the first forwarding plane label, and obtaining a large top heap corresponding to the resource configuration node; and when the large top heap comprises the resource label of the southbound resource to be processed, adding the southbound resource to be processed into the large top heap. By adopting the method, the accuracy of southbound resource management can be improved.

The invention discloses a video encryption transmission link optimization method and system based on digital twinning. The method comprises the following steps: deploying lightweight probes at a sending end, a receiving end and an intermediate node, acquiring an encryption algorithm, a key length, encryption and decryption time delay, hop-by-hop time delay and a packet loss rate in real time, and sending the information with timestamps into a message queue; after the cloud twin container reads the data, a network topological graph, an encryption state machine and a video quality attenuation model are updated, a future traffic matrix and an attacker model are input into a running diagram neural network, and multiple groups of encryption parameter and routing path combinations are output; the reinforcement learning agent selects an optimal combination, issues encryption parameters to an encryption engine through a network configuration protocol, and issues a new path to a forwarding plane through a segment routing protocol; after the strategy takes effect, the probe continues to collect performance data, a message queue is sent back to correct network weight, closed-loop optimization is formed, encryption delay and end-to-end delay are continuously reduced, and dynamic optimization of a video encryption transmission link is achieved.

The application provides a tunnel label processing method and device and network equipment, and relates to the technical field of network communication. The method comprises the following steps: in response to a label allocation operation acting on the network equipment, obtaining a tunnel label corresponding to the label allocation operation, generating a network entry containing the tunnel label according to a pre-configured association group format; saving the network entry to a preset storage location; and issuing the allocated tunnel label to a forwarding plane of the network equipment to publish the tunnel label. The tunnel label processing method, device and network equipment provided by the application can quickly find the tunnel label from the preset storage location when the network equipment is reset, which helps the network link converge quickly and effectively avoids the problem of poor communication quality caused by too long interruption time, thereby improving the user experience.

The invention relates to the technical field of computers, in particular to a distributed routing system, a routing processing method and a related device. The system comprises a control subsystem, at least one routing subsystem and at least one forwarding subsystem, each routing subsystem is used for establishing communication connection with a router of an associated business object side so as to receive routing report information notified by the business object side and report the routing report information to the control subsystem; the routing report information is used for indicating a service network configured for the service object; the control subsystem is used for generating a forwarding plane route based on the route report information and issuing the forwarding plane route to the forwarding subsystem associated with the business object; and each forwarding subsystem is used for updating the first local routing table based on the forwarding plane routing so as to forward a service flow request based on the first local routing table after receiving the service flow request. According to the invention, the functions of a traditional commercial router are decoupled, the expansibility and other performances of the routing system are improved, and the comprehensive performance is better.

The invention discloses an intelligent private network system based on an SDN (Software Defined Network) and zero trust, which belongs to the field of software defined networks and virtualization, and comprises an SDN and virtualization module used for separating a network control plane from a data forwarding plane, constructing a network resource pool and realizing pooling and sharing of network resources; the zero-trust security module is used for implementing multi-factor authentication, dynamic authority control and a micro-isolation strategy and constructing a dynamic self-adaptive security closed-loop system; the AI auxiliary security audit and threat prediction module is used for analyzing the security log based on a machine learning algorithm to realize abnormal behavior identification and threat prediction; the automatic operation and maintenance management module is used for realizing automation of system configuration, monitoring and fault processing; by separating a network control plane from a data forwarding plane, flexible scheduling and management of network traffic are realized, the problems of insufficient bandwidth and high transmission delay of a traditional private network are solved, and the demand of sharp increase of service volume is met.

The application provides a dynamic networking method of distributed edge cloud. The application realizes acquisition and synchronization of dynamic Internet IP of distributed edge cloud and IP / Mac information of virtual machine by deploying a cloud network scheduling server, and deploying dialing software and a virtual network controller on each cloud node. A distributed virtual switch and a virtual edge gateway are constructed through a virtual network forwarding plane based on eBPF, so that two-layer network intercommunication between virtual machines in the distributed edge cloud can be realized in a geographically dispersed and dynamic IP environment. Meanwhile, the virtual edge gateway realizes safe forwarding of data packets in cross-cloud access through policy control. In summary, the application effectively solves the two-layer network intercommunication and safe access problem in the dynamic address environment of the distributed edge cloud, and improves the flexibility and scalability of the system.

The invention discloses a service flow replication method, device and system based on a switch chip, and relates to the technical field of communication, and the method comprises the following steps: S001, constructing a full-link telemetering mechanism in a main data channel, collecting time delay fluctuation and packet loss tracks in real time, generating a replication pressure index heat map, and transmitting the replication pressure index heat map to a main data channel; the resource occupation range of the mirror session on the forwarding plane is represented; and S002, based on the copy pressure index heat map and in combination with port real-time statistical information, generating a conflict fingerprint in the three-state content addressing storage, and positioning a high-frequency copy hot spot, a cross-port strategy conflict and a repeated entry path by using the conflict fingerprint to provide a reference for strategy convergence. According to the method, resource occupation is perceived through a telemetering heat map, strategy partitioning is realized by utilizing conflict fingerprints and an access control list, redundant traffic is duplicated in combination with signatures and hash chains, resources are adaptively allocated by fusing a fault-tolerant and regulation mechanism, a copy closed loop is constructed, the stability and the execution efficiency are improved, the load of core equipment is reduced, and the method has engineering feasibility.

The invention provides a DPU forwarding plane monitoring index issuing method and device, and relates to the technical field of monitoring, in the invention, an index issuer is connected with a DPU forwarding plane through a control socket, and the control socket is created through a Unix domain socket when the DPU forwarding plane is started; the method comprises the following steps: sending a monitoring state query request carrying a runtime management command to a DPU forwarding plane through a control socket, so that the control socket performs authority verification on the monitoring state query request, and sending the runtime management command to the DPU forwarding plane after the verification is passed; receiving a query result returned by the DPU forwarding plane through the control socket; performing format conversion on the query result according to a plurality of dynamically defined indexes to obtain target index data; and exposing the target index data in real time through the HTTP endpoint. According to the invention, the flexibility and manageability of the system are improved, and the real-time monitoring and analysis of the state and performance of the DPU forwarding plane are realized.

The present invention discloses an intelligent multi-view stereo matching method and device. The method includes: constructing a global context Transformer module for exploring the global context relationship between the reference view features and the source view features at the smallest scale within the view; constructing a three-dimensional perception Transformer module based on epipolar geometry to mine the three-dimensional consistency information between the globally perceived reference view features and the globally perceived source view features; using differentiable deformation operations to map the large-scale features and the three-dimensionally consistent features to multiple forward planes of the reference view to obtain the mapped multi-scale source view features, and performing group-level correlation operations on the multi-scale source view features to obtain a multi-scale matching cost volume; constructing a multi-scale cost regularization module to realize the mapping between the matching cost volume and the depth map of the reference view; and using an L1 loss function to constrain the difference between the multi-scale depth map and the true depth map to realize the training of the network. The device includes: a processor and a memory.

The invention provides a data forwarding method and device based on an application network technology. The method is applied to a first acceleration node in an application network deployed by a physical network, and comprises the following steps: obtaining a service attribute table sent by a controller, the service attribute table comprising a tenant access identifier and a forwarding plane corresponding to the tenant access identifier, and the forwarding plane being determined based on a service quality requirement configured by a tenant corresponding to the tenant access identifier; the forwarding plane comprises at least part of acceleration nodes in the application network; acquiring a data request from a terminal, wherein the data request comprises a target tenant access identifier; determining a target forwarding plane according to the target tenant access identifier and a service attribute table; and sending the data request to a second acceleration node in the target forwarding plane. In conclusion, the physical network is divided into the virtual networks with different service quality requirements, so that the network resources of the physical network can be fully utilized, the utilization rate of the network resources is improved, diversified service quality requirements can be adapted, and the user experience is improved.

The application relates to a network device protection method, an electronic device and a computer readable storage medium. Embodiments of the application comprise the following steps: obtaining link state information of a control plane, generating feedback information according to the link state information, and sending the feedback information to a forwarding plane, so that the forwarding plane can update an access control list according to the feedback information. Through the network device protection method, the policy of the access control list can be dynamically updated, so that an attack message sender cannot send attack messages in a targeted manner, and network message attacks can be effectively prevented and the security of the network device can be ensured.