30 results about "Forwarding plane" patented technology

The invention discloses an intelligent dynamic load balancing method and system based on Clico-VPP. The method comprises the following steps: acquiring a load state index of a back-end service pod; according to the load state index and a service capability coefficient corresponding to the back-end service pod, calculating a dynamic traffic allocation weight of the back-end service pod through a weighted calculation model; based on a dynamic threshold synchronization strategy, synchronizing the state of a first hash ring located in a control plane to a second hash ring located in a forwarding plane; and based on the second hash ring, determining a target pod for the input data stream through consistency lookup. A double-loop decoupling architecture is provided, hash rings of a control plane and a forwarding plane are separated, a synchronization strategy is determined through a dynamic threshold value, decision intelligence and forwarding stability are both considered, and jitter is avoided; meanwhile, a dynamic weight-driven consistent Hash algorithm is adopted, a real-time load index and Pod service capability are fused to calculate a dynamic weight, and the dynamic weight is mapped into the number of virtual nodes, so that intelligent scheduling based on capability and maximum maintenance of connection during capacity expansion and contraction are realized.

The application discloses a data transmission control method and device, a network element and a medium. The method comprises the following steps: when a data packet is received, a two-layer member link adjacency segment identifier corresponding to a segment routing based on an IPv6 forwarding plane of the data packet is acquired; a first forwarding path corresponding to the data packet is determined according to the two-layer member link adjacency segment identifier; when the first forwarding path has a fault, a processing mode corresponding to the two-layer member link adjacency segment identifier is determined, and the data packet is processed according to the processing mode. The application improves the flexibility of data packet transmission and processing.

The application discloses a service data flow protection method based on a multi-medium channel, and comprises the following steps: S1, forwarding plane multi-medium channel network topology sensing; S2, service multi-path planning of a control plane controller software based on the multi-medium channel; S3, switching of a protection path of a forwarding layer device based on the multi-medium channel; and S4, fault tunnel repairing of a control plane based on the multi-medium channel. The application can reduce the interruption risk of user service flow and improve the stability of a packet transmission network.

The invention discloses a shared database configuration method, a traffic redirection method and related equipment, and belongs to the technical field of communication. The method comprises: according to policy configuration information in a first network device, determining a Border Gateway Protocol (BGP) message, the BGP message comprising a target color mark in the policy configuration information; and a BGP message is sent to the second network device, the BGP message is used for configuring a first shared database of the second network device, the first shared database comprises a target color mark, and the target color mark is used for indicating the second network device to determine a segment routing strategy of the target traffic according to the target color mark when determining that the target traffic is attacked. Through the mode, the configuration consistency between the network devices can be ensured, the possibility of artificial configuration errors is reduced, meanwhile, the forwarding plane of the second network device directly interacts with the first shared database, and the process interaction safety can be improved.

A data processing system, a data processing method, and a related device, which relate to the technical field of computers. A management and control node sends first management information and first control information to a computing node on the basis of a first bus, wherein the first management information comprises information for managing a communication function of the computing node, and the first control information comprises information for controlling the communication function of the computing node; and the management and control node further sends second management information and second control information to a switching node on the basis of a second bus, wherein the second management information comprises information for managing a data forwarding function of the switching node, and the second control information comprises information for controlling the data forwarding function of the switching node. In this way, the management and control node directly sends the management information and the control information to the computing node and the switching node by means of the buses, and it is unnecessary to perform forwarding by means of the switching node, thereby realizing physical isolation of the management information and the control information from a forwarding plane, and thus improving the security of management and control for the computing node and the switching node.

The invention relates to a southbound resource management method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: acquiring a southbound resource to be processed, and acquiring a first forwarding plane label corresponding to the southbound resource to be processed; determining a resource configuration node according to the first forwarding plane label, and obtaining a large top heap corresponding to the resource configuration node; and when the large top heap comprises the resource label of the southbound resource to be processed, adding the southbound resource to be processed into the large top heap. By adopting the method, the accuracy of southbound resource management can be improved.

The invention discloses a video encryption transmission link optimization method and system based on digital twinning. The method comprises the following steps: deploying lightweight probes at a sending end, a receiving end and an intermediate node, acquiring an encryption algorithm, a key length, encryption and decryption time delay, hop-by-hop time delay and a packet loss rate in real time, and sending the information with timestamps into a message queue; after the cloud twin container reads the data, a network topological graph, an encryption state machine and a video quality attenuation model are updated, a future traffic matrix and an attacker model are input into a running diagram neural network, and multiple groups of encryption parameter and routing path combinations are output; the reinforcement learning agent selects an optimal combination, issues encryption parameters to an encryption engine through a network configuration protocol, and issues a new path to a forwarding plane through a segment routing protocol; after the strategy takes effect, the probe continues to collect performance data, a message queue is sent back to correct network weight, closed-loop optimization is formed, encryption delay and end-to-end delay are continuously reduced, and dynamic optimization of a video encryption transmission link is achieved.

The invention provides a DPU forwarding plane monitoring index issuing method and device, and relates to the technical field of monitoring, in the invention, an index issuer is connected with a DPU forwarding plane through a control socket, and the control socket is created through a Unix domain socket when the DPU forwarding plane is started; the method comprises the following steps: sending a monitoring state query request carrying a runtime management command to a DPU forwarding plane through a control socket, so that the control socket performs authority verification on the monitoring state query request, and sending the runtime management command to the DPU forwarding plane after the verification is passed; receiving a query result returned by the DPU forwarding plane through the control socket; performing format conversion on the query result according to a plurality of dynamically defined indexes to obtain target index data; and exposing the target index data in real time through the HTTP endpoint. According to the invention, the flexibility and manageability of the system are improved, and the real-time monitoring and analysis of the state and performance of the DPU forwarding plane are realized.

The invention provides a data forwarding method and device based on an application network technology. The method is applied to a first acceleration node in an application network deployed by a physical network, and comprises the following steps: obtaining a service attribute table sent by a controller, the service attribute table comprising a tenant access identifier and a forwarding plane corresponding to the tenant access identifier, and the forwarding plane being determined based on a service quality requirement configured by a tenant corresponding to the tenant access identifier; the forwarding plane comprises at least part of acceleration nodes in the application network; acquiring a data request from a terminal, wherein the data request comprises a target tenant access identifier; determining a target forwarding plane according to the target tenant access identifier and a service attribute table; and sending the data request to a second acceleration node in the target forwarding plane. In conclusion, the physical network is divided into the virtual networks with different service quality requirements, so that the network resources of the physical network can be fully utilized, the utilization rate of the network resources is improved, diversified service quality requirements can be adapted, and the user experience is improved.

A service forwarding method, device and electronic equipment, the method comprising: obtaining a to-be-processed service and a control plane corresponding to the to-be-processed service; when the control plane is in a preset state, determining an initial forwarding list corresponding to the to-be-processed service from a forwarding plane associated with the control plane; adjusting the initial forwarding list to a target forwarding list based on a service type of the to-be-processed service; and forwarding the to-be-processed service according to the target forwarding list. Through the above method, the initial forwarding list is adjusted to the target forwarding list based on the service type of the to-be-processed service, the control plane is decoupled from the forwarding plane, so that the to-be-processed services of different service types correspond to different forwarding lists, and the service requirements corresponding to the to-be-processed services of different service types on the same port link can be met.

The application discloses a network verification method and device, equipment, a storage medium and a program product. The method comprises the following steps: determining an abstract network element model based on an abstract network element function; wherein the abstract network element model is a network forwarding plane network element model; performing task arrangement based on a network verification task to obtain a reachable matrix; and performing network verification on the reachable matrix based on an instance of the abstract network element model to obtain a reachable path.

The invention provides an SDN network structure and a communication method thereof, and belongs to the technical field of network architectures, and the network structure comprises a controller, a distributed fault detection node, a cross-domain resource interaction module and an elastic forwarding plane module. The distributed fault detection nodes collect fault information and transmit the collected fault information to the data intercommunication layer; the cross-domain resource interaction module generates a resource availability matrix, and transmits the resource availability matrix to the data intercommunication layer through a cross-domain resource description protocol; the elastic forwarding plane module collects a load-energy efficiency mapping relation and transmits the load-energy efficiency mapping relation to the data intercommunication layer; and the data intercommunication layer receives the fault information, the resource availability matrix and the load-energy efficiency mapping relation, sends the fault information and the resource availability matrix to the reinforcement learning safety-flow cooperative scheduling module, and sends the load-energy efficiency mapping relation to the fault self-healing path reconstruction module. On-demand collaboration is realized, and industrial control service time delay is reduced.

The invention relates to a traffic forwarding method and device, communication equipment, a storage medium and a program product. The method comprises the steps of obtaining a service chain SFC path template corresponding to a user when it is detected that the user has to-be-forwarded traffic; the SFC path template is a basic SFC path corresponding to the user; under the condition that the SFC path template is obtained, generating a target SFC path corresponding to the to-be-forwarded traffic according to the available condition of a preferred forwarding plane UP corresponding to a user and the SFC path template; the target SFC path is used for forwarding the to-be-forwarded traffic. By adopting the method, the generation efficiency of the target SFC path can be improved.

This invention discloses a service traffic replication method, apparatus, and system based on a switching chip, relating to the field of communication technology. The method includes the following steps: S001, by constructing a full-link telemetry mechanism on the backbone data channel, real-time collection of latency fluctuations and packet loss trajectories is achieved, and a replication pressure index heatmap is generated to characterize the resource occupancy range of the mirror session on the forwarding plane; S002, based on the replication pressure index heatmap and combined with real-time port statistics, a conflict fingerprint is generated in the three-state content addressing storage. The conflict fingerprint is used to locate high-frequency replication hotspots, cross-port policy conflicts, and repeated entry paths, providing a reference for policy convergence. This invention perceives resource occupancy through telemetry heatmaps, implements policy partitioning using conflict fingerprints and access control lists, combines signatures and hash chains to deduplicate redundant traffic, integrates fault tolerance and control mechanisms to adaptively allocate resources, constructs a replication closed loop, improves stability and execution efficiency, reduces the load on core equipment, and has engineering feasibility.

The invention discloses an SCN control forwarding plane dynamic scheduling method and system based on a DRQN and a time-sensitive compiler, and belongs to the field of service customization networks. Comprising resource state collection and vector construction; generating a strategy intention; in a control plane, a distributed recursive Q learning DRQN model is adopted, and a resource allocation strategy is generated in real time based on the advanced strategy intention; a time-sensitive flow table compiler is designed, and the time-sensitive flow table compiler converts the advanced strategy intention into an atomic instruction set irrelevant to equipment in real time and supports a time-sensitive network TSN scheduling operation code; and issuing the atomic instruction and updating the flow table. The method can adapt to the rapid change of the network state, and reduces the failure time of the scheduling strategy.

The present application relates to a kind of multi-modal network support quasi-state system, method, device and storage medium, wherein system includes multi-modal controller, multi-modal network element and multi-modal end device;Multi-modal controller connects multiple multi-modal network elements, and multi-modal end device accesses multi-modal network through multi-modal network element;Multi-modal controller is used to complete the quasi-state of control protocol and the scheduling implementation of quasi-state system, and multiple different modal mode forwarding protocol software is simultaneously operated in multi-modal controller, to realize the heterogeneity of control plane;Multi-modal network element is used to complete the quasi-state of data plane and the decision function of quasi-state system;Multiple different modal forwarding plane is operated on multi-modal end device to realize heterogeneity.This method realizes the endogenous security of multi-modal network by quasi-state transformation of multi-modal network.

This disclosure relates to a data processing method, apparatus, device, and readable storage medium based on a Data Processing Unit (DPU). When a preset event is detected in a container cluster, a configuration table corresponding to the container cluster is generated through the control plane. The configuration table includes forwarding rules and interface configuration information. The configuration table is sent to a control plane agent deployed on the DPU through the control plane. The control plane agent adds interface configurations to the forwarding plane deployed on the DPU according to the interface configuration information. The interface configurations are used to generate target network interfaces corresponding to the network interfaces in the container cluster. The control plane agent associates the forwarding rules with the target network interfaces to form a forwarding flow table, and distributes the forwarding flow table to the forwarding plane on the DPU. Based on the forwarding flow table, the data to be forwarded is forwarded to the target port through the forwarding plane on the DPU. This disclosure can reduce unnecessary cloud server CPU resource consumption, thereby improving the utilization efficiency of cloud server CPU resources.

The invention discloses a data processing system, a data processing method and related equipment, and relates to the technical field of computers. The management and control node sends first management information and first control information to the computing node based on the first bus, the first management information comprises information for managing the communication function of the computing node, and the first control information comprises information for controlling the communication function of the computing node; the management and control node further sends second management information and second control information to the switching node based on the second bus, the second management information comprises information for managing the data forwarding function of the switching node, and the second control information comprises information for controlling the data forwarding function of the switching node. Thus, the management and control node directly sends the management information and the control information to the computing node and the switching node through the bus, forwarding through the switching node is not needed, physical isolation between the management information and the control information and a forwarding plane is achieved, and the security of management and control for the computing node and the switching node is improved.

The invention provides a knowledge perception routing method in a semantic edge network based on Lyapunov optimization. The method comprises the following steps: constructing a virtual queue for tracking accumulated deviation of knowledge migration flow and budget in a semantic edge network, setting a shadow price corresponding to the virtual queue, and calculating a Lagrange dominant function by using the shadow price at the current moment to obtain a comprehensive dominant function; the comprehensive path weight of each adjacent link between the starting node and each neighbor node is converted into a probability distribution value of each adjacent link, a deterministic forwarding strategy is generated, a route matching rule is generated according to the forwarding strategy, the route matching rule is executed through a data forwarding plane, and a route matching result is obtained; and optimizing and updating the forwarding strategy according to the comprehensive dominant function. According to the method, the long-term average knowledge migration bandwidth is strictly ensured not to exceed the preset budget mathematically through the virtual queue tracking mechanism, and the problem of network congestion caused by excessive consumption of the knowledge migration bandwidth is effectively avoided.

The system and method, device and electronic equipment provided by the present disclosure comprise a forwarding plane, a session plane and a monitoring plane, the monitoring plane is used for monitoring state information of the forwarding plane and the session plane; the forwarding plane is used for obtaining to-be-forwarded traffic and transmitting forwarding information carried in the to-be-forwarded traffic to the session plane; the session plane is used for responding to the forwarding information, matching configuration information corresponding to the to-be-forwarded traffic from a preset database according to the forwarding information, and performing interaction of session and configuration with the forwarding plane, and transmitting the configuration information to the forwarding plane; the forwarding plane is further used for receiving the configuration information and performing forwarding processing on the to-be-forwarded traffic according to the configuration information and the state information. Compared with the related art, the embodiment of the present disclosure can avoid forwarding the to-be-forwarded traffic to the failed node and reduce the probability of service interruption by modularizing and splitting, monitoring the state information of each node of the system through the monitoring plane module, so that the system has continuity and high availability.

The application discloses a message sending method and device and a storage medium, and comprises the following steps: receiving a message, the message will be detected and processed by a hop-by-hop network node in a message forwarding path; carrying a control plane identifier for uploading on a message extension header, the control plane identifier is used to indicate that the message is carried on the information of a control plane or a forwarding plane; and sending the message. According to the application, on the basis of supporting existing hop-by-hop processing functions, the ability of processing message information hop by hop on a forwarding plane can also be supported, and the function can meet the needs of new technologies such as slicing and flow detection. The control plane identifier for uploading can be effectively prevented from being tampered with or used by hackers to attack network nodes.

The application relates to a segment list compression method, device, equipment, storage medium and program product. The method comprises the following steps: obtaining a segment list in a segment routing header (SRH) extension header of a segment routing version 6 (SRv6) message based on a segment routing (SR) forwarding plane of a sixth version of an Internet protocol (IPv6), wherein the segment list comprises a plurality of segment identifiers (SIDs); obtaining a first matrix according to a plurality of first SIDs in the segment list and obtaining a second matrix according to a plurality of second SIDs in the segment list, wherein the plurality of first SIDs have the same prefix, and the plurality of second SIDs do not have the same prefix; performing compression processing on the first matrix to obtain a first compression result, and performing compression processing on the second matrix to obtain a second compression result; and replacing the segment list in the SRH extension header by using the first compression result and the second compression result. The method can reduce the length of the SRv6 message.

This application discloses a route advertisement method, a packet forwarding method, a device, and a system. A first network device obtains a first VPN route and a second VPN route that have a same route prefix and a same route distinguisher but different VPN identifiers and different next hops. The first network device allocates a third VPN identifier to the first VPN route and the second VPN route, and stores, on a forwarding plane, a first correspondence between the third VPN identifier and a first VPN identifier that is included in the first VPN route and a second correspondence between the third VPN identifier and a second VPN identifier that is included in the second VPN route. The first VPN route and the second VPN route that belong to a same VPN can form fast reroute or load balancing.

Provided in the present invention are a data forwarding method and apparatus based on application network technology. The method is applied to a first acceleration node in an application network deployed in a physical network, and comprises: acquiring a service attribute table sent by a controller, which service attribute table comprises tenant access identifiers and forwarding planes corresponding to the tenant access identifiers, wherein a forwarding plane is determined on the basis of a quality of service requirement configured by a tenant corresponding to each tenant access identifier, and comprises at least a portion of acceleration nodes in the application network; acquiring a data request from a terminal, wherein the data request comprises a target tenant access identifier; on the basis of the target tenant access identifier and the service attribute table, determining a target forwarding plane; and sending the data request to a second acceleration node in the target forwarding plane. In summary, by means of dividing a physical network into virtual networks of different quality of service requirements, network resources of the physical network can be fully utilized, thereby improving the utilization rate of the network resources; and adaptation to diverse quality of service requirements is realized, thereby improving the user experience.

Some embodiments of the invention provide a method for detecting and remediating anomalies in an SD-WAN that includes a controller, an enterprise datacenter, and multiple branch sites each having at least one edge node that includes a set of packet processing stages. At the controller, the method receives from a particular node of a particular branch site a flow notification indicating detection of an anomaly on the particular node. Based on the anomaly, the method dynamically generates trace monitoring rules that specify one or more flows to be traced and provides the trace monitoring rules to the particular node and at least one other node of another branch site. From the particular node and the at least one other node, the method receives trace monitoring results collected in response to the provided trace monitoring rules, and analyzes the results to identify any anomalies and dynamic actions to correct the anomalies.

This disclosure relates to the field of network communication technology, and in particular provides a message processing method, apparatus, electronic device, storage medium, and program product. The message processing method is applied to a cloud gateway forwarding plane node based on Vector Packet Processing (VPP), and includes: in response to detecting that the type of the uplink inner packet is an Address Resolution Protocol (ARP) request packet, adjusting the ingress interface of the uplink inner packet to the uplink physical interface, wherein the uplink inner packet corresponds to the original packet sent by the terminal; pointing the next processing node of the uplink inner packet to an ARP proxy node in the cloud gateway forwarding plane node; and generating an ARP proxy response packet corresponding to the uplink inner packet based on the uplink physical interface through the ARP proxy node. This method, by implementing ARP packet proxy processing locally on the cloud gateway forwarding plane, can reduce the processing complexity and resource consumption of the cloud gateway forwarding plane, and improve message forwarding efficiency.

The invention particularly relates to a forwarding plane uninterrupted optimization method. According to the forwarding plane uninterrupted optimization method, before a virtual machine is migrated, a Nova event hook module captures a virtual machine migration plan, and a flow table synchronization manager is triggered to generate and issue an OpenFlow rule required by a target node; deploying a necessary flow table in advance at a target node to ensure immediate forwarding after migration is completed; after a migration target node starts a virtual machine, driving the virtual machine to broadcast an ARP Request or a neighbor discovery NS message through an MAC learning accelerator to trigger path learning, so that an upstream switching network completes path updating; after the migration of the data plane is completed, the service flow is forwarded instantly, and the service is not interrupted; and meanwhile, port state updating and original node resource recovery are completed on a control plane. According to the forwarding plane uninterrupted optimization method, the flow table issuing delay after migration is obviously reduced, the forwarding reachability is improved, the second-level switching of the data plane is realized, the network elasticity and the service continuity are effectively improved, and the manual configuration and troubleshooting burden is reduced.

The application discloses a universal forwarding plane platform, a server and a message forwarding method. The universal forwarding plane platform comprises at least one first software module for executing each step of a message forwarding process, and further comprises at least one mounting point; the mounting point is mounted with a second software module which is predefined and customized; the second software module is used for starting to run and executing at least one step in the message forwarding process in a mode different from the first software module, under the condition that the first software module is not interrupted. The application realizes the extension of the customized and personalized forwarding process of the universal forwarding plane, decouples the original tightly-coupled forwarding process to a certain extent, improves the code development efficiency, reduces the code maintenance and upgrading cost, further enhances the adaptability of the software to different use scenarios, improves the robustness of the software, realizes the secondary development function, and enables the lightweight deployment of the universal forwarding platform.

Techniques for multi-tenant overlays with per-tenant distributed routing are described herein. The techniques may include provisioning an overlay network such that tenants hosted by a forwarding plane of the overlay network are each configured to forward routing protocol packets to a routing control plane of the overlay network and the routing control plane of the overlay network is configured to determine routing paths between each tenant and respective destinations. A routing protocol packet may be sent to the routing control plane by a first tenant. The routing protocol packet may include an indication of a destination that is served by the first tenant. Based on receiving the routing protocol packet, the routing control plane may determine one or more routing paths between the tenants and the destination. Additionally, an indication of the routing path may be sent to the tenants.

This invention provides a method and system for determining the configuration of vehicular time-sensitive network (TSN) traffic, relating to the field of vehicular network technology. The method is applied to SOA middleware, which includes control plane ports and forwarding plane ports. The method includes: acquiring vehicular service traffic data through the forwarding plane ports; determining service traffic parameter data based on the vehicular service traffic data; and sending the service traffic parameter data to the TSN controller through the control plane ports, so that the TSN controller can determine traffic configuration parameters based on the service traffic parameter data. This invention achieves adaptive perception of vehicular TSN service traffic through SOA middleware, not only realizing the automated acquisition of vehicular TSN service traffic characteristics but also determining traffic configuration parameters without changing existing TSN service industry standards and the support capabilities of vehicular terminal equipment, thus achieving deterministic transmission of vehicular TSN service traffic.