52 results about "Intelligent network interface card" patented technology

Techniques for selective intelligent enforcement and / or selective intelligent offloading for mobile networks using a smart network interface card are disclosed. In some embodiments, a system / process / computer program product for selective intelligent enforcement and / or selective intelligent offloading for mobile networks using a smart network interface card includes monitoring network traffic in a core mobile network using a Smart Network Interface Card (NIC) of a network element in the core mobile network to identify a new session that attached to the core mobile network for mobile network communications; extracting meta information associated with the new session using the Smart NIC of the network element in the core mobile network; and applying selective intelligent enforcement and / or selective intelligent offloading using the Smart NIC of the network element if the extracted meta information associated with the new session matches a selective intelligent enforcement policy and / or a selective intelligent offload policy.

Procedure that includes the following: an application layer (160) of a host (101) of a computer platform (100-1) which uses a smart network interface card (NIC (140; 920)) of the computer platform (100-1) to provide an input / output (I / O) service for the application layer (160), wherein the I / O service includes a service connected to a cloud operator domain, the smart NIC (140; 920) is installed in a connector (150), and the application layer (160) is connected to a cloud tenant domain; and a baseboard management controller (936) of the intelligent NIC (140; 920) that manages the computer platform (100-1), the management of the computer platform (100-1) comprising: the baseboard management controller (936) that manages the host (101), wherein the baseboard management controller (936) manages other components of the intelligent NIC (140; 920) than the baseboard management controller (936), the management of other components of the intelligent NIC (140; 920) than the baseboard management controller (936) including the baseboard management controller (936) changing a power state of the intelligent NIC (140; 920) in response to a remote message; and The management of the host (101) includes the baseboard management controller (936) communicating with the host (101) via the port to control a system performance state of the computer platform (100-1).

The invention provides a DPU intelligent network card working component switching method, a DPU chip, a DPU intelligent network card and electronic equipment, the DPU intelligent network card comprises a first component and a second component which can be switched mutually, and the method comprises the following steps: setting a value of a form control register on the DPU intelligent network card; writing corresponding configuration information into a starting configuration register on the DPU intelligent network card according to the value of the form control register; in the stage of restarting the DPU intelligent network card, guiding the read-only memory to analyze the configuration information in the starting configuration register; and correspondingly completing a starting process of the first component or the second component according to the analyzed configuration information, so that the DPU intelligent network card realizes working component switching. According to the technical scheme, the DPU network card and the intelligent network interface card can be quickly switched, so that the DPU intelligent network card works in the intelligent network interface card mode, and the overall energy efficiency ratio is improved.

A system and method are provided for implementing a network component and verifying an update of the network component. The network component can be, e.g., a software-defined wide area network, a firewall, a router, or a load balancer. The network component can be an embedded network edge device that is implemented, e.g., in software, in circuitry, or using hardware acceleration (e.g., a data processing unit (DPU), a smart network interface card (SmartNIC), etc.). The updated version of the network component is verified by implementing it on a shadow dataplane concurrently with the current version operating on a primary dataplane, and comparing the performances of these two versions. Based on this comparison satisfying various verification criteria, the updated version passes a verification test and can be promoted to the primary dataplane.

A system and method are provided for implementing a network component, such as a software-defined wide area network, a firewall, a router, or a load balancer. The network component can be an embedded network edge device that is implemented, e.g., in software, in circuitry, or using hardware acceleration (e.g., a data processing unit (DPU), a smart network interface card (SmartNIC), etc.). The system can include multiple dataplanes, including a primary dataplane and a shadow dataplane. A packet dispatcher relays received data packets to a primary dataplane and the shadow dataplane. The primary dataplane applies a current version of the network component to data packets, and the secondary dataplane applies a new version of the network component to identical replicas of the data packets. A control plane agent compares performance data gathered from the respective dataplanes to perform verification testing on the new version of the network component.

Disclosed are systems, apparatuses, methods, and computer-readable media for policy-based transparent packet inspection for last mile zero-trust workload protection. The method comprises receiving a packet on a network interface of a provisioned resource in a data center or a user device within a network; determining, by a first intercepting agent provisioned within the network interface, whether to inspect the packet based on rules received from a control plane of the network, wherein the network interface comprises a smart network interface card (SmartNIC) or a data processing unit (DPU) and is configured with the first intercepting agent based on the control plane; selectively invoking a deep packet inspection of the packet based on inspection of the packet by the first intercepting agent using the rules from the control plane; and blocking the packet at the network interface based on the deep packet inspection identifying malicious content within the packet.

The disclosed systems, methods, and computer readable media relate to managing persistent memory within a smart network interface card (smartNIC) of a cloud-computing environment, or at storage device of the host instance on which the smartNIC operates and to which the smartNIC has access. The smartNIC may be configured with various modes that enable passthrough of input / output operations to or from non-volatile remote storage (e.g., a block storage data plane volume) or storage of at least some of the data corresponding to the input / output operations within the persistent memory managed by the smartNIC. The smartNIC may be configured to select a storage location for data between a pool of candidate storage including the persistent storage managed by the smartNIC or the non-volatile remote storage. These techniques improve communications between the smartNIC and the non-volatile remote storage and reduce the risk of network jitters and overall network latency.

A smart network interface card (smartNIC) may receive first traffic for a first process configured with a first bandwidth limit. The smartNIC may receive second traffic for a second process configured with a second bandwidth limit, the second bandwidth limit corresponding to a larger value between a second transmit limit and a second receive limit associated with the second process. The smartNIC may queue the received traffic associated with the first process and the second process in a scheduler, the scheduler having a first set of queues configured to store traffic from the first process, and a second set of queues configured to store traffic from the second process. The smartNIC may forward queued traffic from the first set of queues or the second set of queues, a maximum amount of forwarded first process traffic corresponding to the first bandwidth limit minus an amount of forwarded second process traffic.

Techniques are disclosed for a smart network interface card (smartNIC) performing a unified logging process. In one example, an accelerator transmits a packet to a programming data plane of the smart network interface card. The programming data plane determines whether the packet is to be forwarded. In accordance with a determination that the packet is not be forwarded, the programming data plane modifies the packet to include an instruction that instructs the accelerator to log the packet and to not forward the packet. The programming data plane transmits the modified packet to the accelerator. The accelerator logs data associated with the modified packet to a unified log based at least in part on the instruction.

A system and method are provided for implementing a network component, such as a software-defined wide area network, a firewall, a router, or a load balancer. The network component can be an embedded network edge device that is implemented, e.g., in software, in circuitry, or using hardware acceleration (e.g., a data processing unit (DPU), a smart network interface card (SmartNIC), etc.). The system can include multiple dataplanes, including a primary dataplane and a shadow dataplane. A packet dispatcher relays received data packets to a primary dataplane and the shadow dataplane. The primary dataplane applies a current version of the network component to data packets, and the secondary dataplane applies a new version of the network component to identical replicas of the data packets. A control plane agent compares performance data gathered from the respective dataplanes to perform verification testing on the new version of the network component.

The application provides a switching method in a data storage system, a smart network card and a computing device, and belongs to the technical field of storage. In the switching method provided by the application, a plurality of storage nodes in the data storage system share the smart network card, and the smart network card has the functions of determining whether the storage nodes can provide services and analyzing read-write requests from messages, so that the smart network card can directly stop using a first storage node and send a read-write request to a second storage node different from the first storage node in the plurality of storage nodes without passing through a host connected to the data storage system in the case that it is determined that the first storage node cannot provide services. Since the path between the smart network card and the storage nodes is shorter than the path between the host and the storage nodes, the method can shorten the time consumed for determining that the storage nodes cannot provide services and for switching the storage nodes, and improve the efficiency of abnormal processing.

The disclosed systems, methods and computer readable media relate to managing Non-Volatile Memory Express (NVMe) over Transmission Control Protocol (TCP) (NVMeOTCP) connections between a smart network interface card (smartNIC) and a block storage data plane (BSDP) of a cloud computing environment. A software agent (“agent”) executing at the smartNIC may manage a number of network paths (active and, in some cases, passive network paths). The agent may monitor the network traffic (e.g., input / output operations (IOPS)) through the paths (e.g., using established NVMeOTCP connections corresponding to the paths). If a condition is met relating to a performance threshold associated with the monitored paths, the agent may increase or decrease the number established NVMeOTCP connections to match real time network conditions.

The application discloses a kind of based on flow perception intelligent network interface card optimization system and method, it belongs to computer network technical field.The optimization system of the application includes flow perception module, flow prediction module, resource scheduling module, priority queue module and load balancing module.The application introduces resource monitoring, flow perception, resource prediction and dynamic scheduling module, real-time monitoring network flow and predicting its change trend, according to flow mode dynamically adjusts resource allocation.The application effectively solves the problem of resource contention, through priority ordering and load balancing, ensure the stable operation of high priority task, improve the throughput and stability of system, reduce resource waste.The application is suitable for resource management of intelligent network interface card in data center and cloud computing environment, improves network processing efficiency and resource utilization, guarantees service quality, reduces resource waste, and enhances the adaptive capacity of system to dynamic load and complex flow mode.

Devices, networks, systems, methods, and processes for offloading services for sustainability improvements are described herein. A device may receive one or more service requests corresponding to one or more services. The device may determine one or more energy profiles for one or more processing units based on a plurality of power consumption metrics of the one or more processing units. The device may assign execution of the one or more service requests to the one or more processing units based on corresponding energy profiles of the one or more processing units. Thus, the device may facilitate selective offloading and execution of services among different processing units. The device can optimize the offloading and execution of the services such that the services are executed with least power consumption, thereby improving sustainability of the device.

In certain embodiments, a method includes receiving, at an interface of a Smart network interface card (SmartNIC) of a computing device, via a network, a network data unit; processing, by a data allocator of a SmartNIC subsystem of the SmartNIC, the network data unit to make a determination that data included in the network data unit is intended for processing by an accelerator of the computing device, wherein the accelerator is configured to execute a machine learning algorithm; storing, by the data allocator and based on the determination, the data in a local buffer of the SmartNIC subsystem; identifying, by the data allocator, a memory resource associated with the accelerator; and transferring the data from the local buffer to the memory resource.

In an example, there is disclosed a host-fabric interface (HFI), including: an interconnect interface to communicatively couple the HFI to an interconnect; a network interface to communicatively couple the HFI to a network; network interface logic to provide communication between the interconnect and the network; a coprocessor configured to provide an offloaded function for the network; a memory; and a caching agent configured to: designate a region of the memory as a shared memory between the HFI and a core communicatively coupled to the HFI via the interconnect; receive a memory operation directed to the shared memory; and issue a memory instruction to the memory according to the memory operation.

A data storage system, an intelligent network interface card, and a compute node are provided, and belong to the field of data storage. The data storage system includes a compute node and a plurality of storage nodes. The compute node stores metadata, and the metadata may indicate an address at which target data is stored in the plurality of storage nodes. According to this application, the compute node may directly read the target data from a corresponding storage node based on the address indicated by the metadata stored in the compute node, does not need to perform cross-node data forwarding by using the plurality of storage nodes, and does not need to perform a plurality of times of metadata searching. This effectively reduces a data reading delay and improves a data reading speed.

Devices, networks, systems, methods, and processes for offloading services for sustainability improvements are described herein. A device may receive one or more service requests corresponding to one or more services. The device may determine one or more energy profiles for one or more processing units based on a plurality of power consumption metrics of the one or more processing units. The device may assign execution of the one or more service requests to the one or more processing units based on corresponding energy profiles of the one or more processing units. Thus, the device may facilitate selective offloading and execution of services among different processing units. The device can optimize the offloading and execution of the services such that the services are executed with least power consumption, thereby improving sustainability of the device.

The present disclosure provides a baseboard management controller located at a server network interface card. The process includes an application layer of a host of a computer platform using an intelligent network interface card (NIC) of the computer platform to provide input / output (I / O) services to the application layer. The I / O services include services associated with a cloud operator domain; the intelligent NIC is installed in a connector; and the application layer is associated with a cloud tenant domain. The process includes a baseboard management controller of the intelligent NIC managing a computer platform. Managing the computer platform includes the baseboard management controller managing the host; the baseboard management controller manages components of the intelligent NIC other than the baseboard management controller; and managing the host includes the baseboard management controller communicating with the host via the connector to control the system power state of the computer platform.

A computing device has several smart network interface cards (NICs) with RJ45 connectors. The smart NICs are in master-slave arrangement, where internal RJ45 connectors of the master smart NIC are connected by RJ45 cables to respective RJ45 connectors of slave smart NICs. A front RJ45 connector of the master smart NIC is connected by an RJ45 cable to a network switch that is installed in a same rack as the computing device.

Multi-tenant optimized serverless placement using network interface card and commodity storage may be provided. A first request to execute a first function may be received. Next, it may be determined to execute the first function at a first network interface card. The first network interface card may include a plurality of processors. Then, a container may be created at the first network interface card. The container may have at least one processor of the plurality of processors. The first function may be executed at the container.

In certain embodiments, a method includes receiving, at an interface of a Smart network interface card (SmartNIC) of a computing device, via a network, a network data unit; processing, by a data allocator of a SmartNIC subsystem of the SmartNIC, the network data unit to make a determination that data included in the network data unit is intended for processing by an accelerator of the computing device, wherein the accelerator is configured to execute a machine learning algorithm; storing, by the data allocator and based on the determination, the data in a local buffer of the SmartNIC subsystem; identifying, by the data allocator, a memory resource associated with the accelerator; and transferring the data from the local buffer to the memory resource.

Methods, apparatus, systems, and articles of manufacture are disclosed for secure execution on smart network interface cards. An example non-transitory computer readable medium comprising instructions that, when executed, cause a processor to at least: obtain instructions for execution, decode the instructions, execute the decoded instructions, determine an execution frequency, and, when the execution frequency meets a threshold, provide an alert of the execution frequency.

A system and method are provided for implementing a network component, such as a software-defined wide area network, a firewall, a router, or a load balancer. The network component can be an embedded network edge device that is implemented, e.g., in software, in circuitry, or using hardware acceleration (e.g., a data processing unit (DPU), a smart network interface card (SmartNIC), etc.). The system can include multiple dataplanes, including a primary dataplane and a shadow dataplane. A packet dispatcher relays received data packets to a primary dataplane and the shadow dataplane. The primary dataplane applies a current version of the network component to data packets, and the secondary dataplane applies a new version of the network component to identical replicas of the data packets. A control plane agent compares performance data gathered from the respective dataplanes to perform verification testing on the new version of the network component.

The disclosure relates to an intelligent network interface card and arrangement for reducing wiring requirements in a rack system. A computing device has a number of smart network interface cards (NICs) with RJ45 connectors. The intelligent NIC is arranged in a master-slave mode, wherein the internal RJ45 connector of the master intelligent NIC is connected to the corresponding RJ45 connector of the slave intelligent NIC through an RJ45 cable. A front RJ45 connector of the main smart NIC is connected to a network switch mounted in the same rack as the computing device through an RJ45 cable.

High availability network services are provided in a in a virtual computing environment comprising a plurality of network devices running in a software defined network (SDN) of the virtual computing environment, the network devices comprising a plurality of SDN appliances configured to disaggregate enforcement of policies of the SDN from hosts of the virtual computing environment, the hosts implemented on servers communicatively coupled to network interfaces of the SDN appliances, the servers hosting a plurality of virtual machines, the SDN appliance comprising a plurality of smart network interface cards (fNICs) configured to implement functionality of the SDN appliances.

Devices, networks, systems, methods, and processes for offloading services for sustainability improvements are described herein. A device may receive one or more service requests corresponding to one or more services. The device may determine one or more energy profiles for one or more processing units based on a plurality of power consumption metrics of the one or more processing units. The device may assign execution of the one or more service requests to the one or more processing units based on corresponding energy profiles of the one or more processing units. Thus, the device may facilitate selective offloading and execution of services among different processing units. The device can optimize the offloading and execution of the services such that the services are executed with least power consumption, thereby improving sustainability of the device.

The invention relates to transparent packet inspection for last mile zero trust workload protection. Systems, apparatus, methods, and computer readable media are disclosed for policy-based transparent packet inspection for last mile zero trust workload protection. The method comprises receiving a packet on a network interface of provisioning resources in a user equipment or data center within a network; determining, by a first interception agent provided within a network interface comprising a Smart Network Interface Card (SmartNIC) or a Data Processing Unit (DPU) and configured with the first interception agent based on a control plane of the network, whether the packet is to be checked based on a rule received from the control plane of the network; selectively invoking a deep packet check of the packet based on a check of the packet by the first interception agent using rules from the control plane; and identifying malicious content within the packet based on the deep packet check, the packet being blocked at the network interface.

Some embodiments provide a novel method of migrating a particular virtual machine (VM) from a first host computer to a second host computer. The first host computer of some embodiments has a physical network interface card (PNIC) that performs at least one of network forwarding operations and middlebox service operations for the particular VM. The first host computer sends, to the PNIC of the first host computer, a request for state information relating to at least one of network forwarding operations and middlebox service operations that the PNIC performs for the particular VM. The first host computer receives the state information from the PNIC. The first host computer provides the state information received from the PNIC to the second host computer as part of a data migration that is performed to migrate the particular VM from the first host computer to the second host computer.

A system and method are provided for implementing a network component and verifying an update of the network component. The network component can be, e.g., a software-defined wide area network, a firewall, a router, or a load balancer. The network component can be an embedded network edge device that is implemented, e.g., in software, in circuitry, or using hardware acceleration (e.g., a data processing unit (DPU), a smart network interface card (SmartNIC), etc.). The updated version of the network component is verified by implementing it on a shadow dataplane concurrently with the current version operating on a primary dataplane, and comparing the performances of these two versions. Based on this comparison satisfying various verification criteria, the updated version passes a verification test and can be promoted to the primary dataplane.