42 results about "Ip prefix" patented technology

A method and algorithm for IP address lookup for packet forwarding, finds a longest prefix match for a destination address of n bits, using 2n / 2 entries in a lookup table, expanding a given IP address to be matched if its prefix length is more than n / 2, and, completing a lookup operation using the table. The number ‘n” may be 32 or otherwise. An example teaches an IP address lookup table with a maximum address size of 32 bits, using a lookup table with 216 entries. Further, if an IP prefix length is more than 16 bits, then the given address to be matched is expanded to its full prefix length before the lookup operation. The algorithm takes only two memory references for specific hardware, such as IXP1200. For generic hardware, it takes only three memory references. Also taught is a computer readable medium having the method encoded therein.

The invention discloses an internetwork routing method. The method comprises the following steps: establishing a mapping table from an internet protocol (IP) address prefixes of network forwarding equipment to AS numbers; generating an aggregation forwarding table based on the mapping table and a forwarding table of the network forwarding equipment, wherein the aggregation forwarding table comprises table entries of the IP address prefixes and the AS numbers; and when the network forwarding equipment receives the data packet, searching the next hop which corresponds to a data packet from the aggregation forwarding table according to the head of the data packet, so as to forward the data packet. According to the method, because the AS numbers are introduced into the forwarding table, the IP address prefix table entries from the same AS declaration in the forwarding table are aggregated into the AS number table entry. The aggregation property of the IP address prefix entries is enhanced, and one part of IP prefixes are kept due to the requirements of traffic engineering, so that the IP aggregation property is improved and the requirements of traffic engineering are met, and therefore the AS number routing of the traffic engineering is not influenced.

There is provided a method for tracking a backbone network botnet based on a distributed space-time mechanism. According to the method, a traffic probe sends DNS data in traffic to a DNS abnormity traffic detection engine, which executes filtering by using a white list and sends DNS access data to a Fast Flux DNS detection module to detect a domain name with Fast Flux DNS characteristic. The traffic probe sends a TCP handshake message and an end message that are in the traffic to a macro distribution characteristic extraction engine to obtain IP address data represented by macro distribution characteristic, and an IP cluster executes clustering to obtain an IP prefix for abnormal behavior, and sends the IP prefix to a distributed mechanism determination engine to execute abnormity IP behavior feature extraction. Filter processing of a secondary probe is executed on the domain name with Fast Flux DNS characteristic and the abnormity IP behavior feature, and the filtered result is inputted to an iterator and iterated to output intermediate node information; the iteration is executed repeatedly by the secondary probe and the iterator until there is no output from the secondary probe, and at the moment, the intermediate node information is a trackable botnet node with the highest hierarchy.

Various systems and methods for preventing loops. For example, one method involves receiving a multicast data packet at a node. The node is coupled to a local area network (LAN). An internet protocol (IP) prefix is assigned to the LAN. The method involves determining whether a source address included in the packet is covered by the IP prefix. Depending on the direction of travel of the multicast data packet and whether or not the source address is covered by the IP prefix, the node determines whether a loop exists.

Prefix length memory tables are used to enable fast IPv4 LPM lookups using a single memory access for a first range of IP prefixes, and using two memory accesses for larger IP prefixes. Each of the prefix length memory tables is used to hold a set of forwarding rules associated with a different prefix length range. IP LPM operations are then performed in parallel in each of the prefix length memory tables of the set, and the forwarding rule matching the longest prefix is returned from each of the memory tables. A priority encoder is used to select between positive results from the multiple prefix length memory tables to enable the forwarding rule with the largest matching prefix to be used to key into the next hop forwarding table. The method utilizes low cost DDR SDRAM rather than TCAM, and also exhibits low overhead.

The invention provides an IP routing search method and device. The method comprises the steps of establishing a multibit trie for routing distribution of an IP prefix in each VPN (Virtual Private Network), and dividing each multibit trie into multiple levels; establishing an input key for each level according to a VPN identifier and all bits of an IP address before each level when routing search is carried out on an IP address in one VPN, calculating the input key for each level by employing a Hash function of each level, and carrying out routing search by employing a data structure information pointer of a sub _Trie node corresponding to the longest Hash hit result. According to the method and the device, the IP routing search efficiency is improved.

The invention relates to an automatic signing and issuing method and device for routing origin authorization. The method comprises the steps of dividing IP prefixes into a plurality of different prefix sets; checking the plurality of prefix sets according to a preset use strategy; and after the verification is passed, signing and issuing corresponding routing origin authorization or resource certificates for the IP prefixes in each prefix set according to different prefix sets. According to the scheme, based on an INR use strategy, whether an IP prefix meets the INR use strategy or not and whether INR distribution and authorization conflicts exist or not are checked; and after the check is passed, a corresponding resource certificate and routing origin authorization are automatically signed and issued according to the willingness of the INR holder so as to prevent repeated INR allocation and repeated INR authorization caused by manual operation from being unable to be detected by an RPKI relying party.

The present invention proposes an IP route search method and device. The method includes the following steps that: a Multibit Trie tree is constructed for the distribution of IP prefixes in each VPN; routes on high 1-to-m-level IP prefixes of the Multibit Trie tree are expanded onto (m+1)-level IP prefixes through adopting a prefix expansion method, wherein m is an integer larger than 1; each branch of the (m+1)-level IP prefixes of the Multibit Trie tree is adopted as one Branch_Tree, and the data structure information of each Branch_Tree is stored; and when route search is carried out for one IP address in one VPN, a corresponding Branch_Tree is searched out in a Multibit Trie tree corresponding to the VPN according to the high m+1 bit of the IP address, and a corresponding route is searched out in the Branch_Tree. With the IP route search method and device adopted, IP route search efficiency can be improved.

A system and method are provided for sorting IP routing table entries in a TCAM for longest IP prefix matching LPM of destination IP addresses. The IP routing table is divided into logical blocks, for each block an associated routing entry IP prefix length. Each block is of a respective size whose proportion of the total size of the routing table is determined by the associated IP prefix length. The blocks are ordered so that the TCAM returns an LPM when queried. Starting block sizes can be initialized to proportions which reflect actual expected numbers by proportion of routing entries by IP prefix length. The blocks also grow and shrink as entries are added and deleted so as to more closely mirror real-world populations of expected entries having the IP prefix length in question.

A microphone array configurable to connect via an Ethernet connection with an audio processor includes a plurality of MEMS microphones (7101-7121), a plurality of sigma-delta modulators (7201-7221), a processor and storage (90), and an Ethernet physical interface (80) operating at a network data transmission rate. Each sigma-delta modulator converts the analog output of a corresponding microphone into a bit stream at an audio sampling rate. The processor and storage performs a data-interleaving operation (92) to combine the bit streams from the sigma-delta modulators into a microphone audio frame serial bit stream (34), and loads the microphone audio frame serial bit stream into a FIFO memory (94) at a FIFO serial data load rate. The processor and storage computes an Ethernet FCS checksum on the microphone audio frame serial bit stream, concatenates, an FCS delay gap, the Ethernet FCS checksum, a timing gap, a frame prefix, a UDP / IP prefix, a payload, and the microphone audio frame serial bit stream to form an Ethernet frame packet serial bit stream, unloads this Ethernet packet serial bit stream from the FIFO memory at the network data transmission rate and transmits the Ethernet frame packet serial bit stream from the Ethernet physical interface.

The invention discloses a flexible IP addressing method and device based on a single hash bloom filter. filter, in which the bit vector of each bloom filter is divided into k partitions; each prefix length is mapped to each partition of the corresponding bloom filter, and the IP prefix information is stored in the hash table; the addressing operation is performed When , W kinds of prefixes are intercepted to the destination address, and the intercepted prefixes are sent to the corresponding Bloom filter, and a matching vector is returned; according to the hash table and the matching vector, the storage space of the destination address is obtained. The invention effectively reduces the calculation amount of Bloom Filter to the original calculation amount, greatly reduces the calculation cost of addressing, improves the addressing efficiency of massive communication subjects, and supports the scalability of Flexible IP under multiple semantics.

This application proposes an IP route lookup method and device. The method includes: constructing a Multibit Trie for the route distribution of IP prefixes in each VPN; using the method of prefix expansion to extend the routes on the IP prefixes of the Multibit Trie higher than 1~m to the m+1 IP prefixes , m is an integer greater than 1; each branch of the m+1 level IP prefix of the Multibit Trie is used as a Branch_Tree, and the data structure information of each Branch_Tree is preserved; when a routing search is performed to an IP address in a VPN According to the upper m+1 bits of the IP address, the corresponding Branch_Tree is found in the Multibit Trie corresponding to the VPN, and the corresponding route is found in the Branch_Tree. The application improves the efficiency of IP routing lookup.

The present application discloses a resource request scheduling method and device. The method includes: receiving a resource request sent by a terminal, the resource request carrying the terminal's Internet Protocol address IP; in response to the resource request, determining that the resource request matches the terminal's IP The dispatching group; obtain at least one IP prefix identifier associated with each Internet data center in the dispatching group, and the IP prefix identifier associated with the Internet data center belongs to the IP prefix corresponding to the historical access terminal with communication connection failure in the Internet data center Designate a position; determine a target Internet data center that meets a preset condition from the scheduling group, and the preset condition includes: at least one associated IP prefix identifier does not include a previous position of the terminal's IP; the terminal's resource request Dispatched to the server of the target Internet data center. The solution of the present application can realize resource request scheduling in a more reasonable manner, and reduce jamming on the user terminal side.

Embodiments of the present invention provide a method, device, and system for determining PCF, which relate to the field of communication technologies and can reduce signaling overhead required for determining PCF to a certain extent. The method includes: when the first AMF receives the PCF identification information sent by the second AMF, and there is a target PCF in the PCF corresponding to the PCF identification information, the first AMF acquires policy information from the target PCF, wherein the PCF identification information includes at least Identification information of a first PCF, where the identification information of the first PCF includes at least one of the IP address of the first PCF, the IP prefix of the first PCF, and the FQDN of the first PCF, and the first AMF is the The AMF that provides services for the secondary access network, and the second AMF is the AMF that provides services for the terminal's last access to the network. The method is applied in the process of the terminal accessing the network.

A method, system and computer-usable medium are disclosed for establishing a virtual point of presence or VPoP in a country or locale by registering an internet protocol (IP) prefix range for communication specific to the locale in a physical data center; implementing proxy servers on the data center that support the IP prefix range; geolocating users in the locale to the IP prefix range; network address translating inbound connections to the IP prefix range with IP addresses on the proxy servers to provide extended IP network addresses; and providing content to the users by the proxy servers on using the extended IP network addresses.

A method, system and computer-usable medium are disclosed for establishing a virtual point of presence or VPoP in a country or locale by registering an internet protocol (IP) prefix range for communication specific to the locale in a physical data center; implementing proxy servers on the data center that support the IP prefix range; geolocating users in the locale to the IP prefix range; network address translating inbound connections to the IP prefix range with IP addresses on the proxy servers to provide extended IP network addresses; and providing content to the users by the proxy servers on using the extended IP network addresses.

The present invention relates to a coding and decoding method and system for routing origin authorization compression. The coding method includes the following steps: given an authorized IP prefix set of an AS, using an IP prefix tree to maintain the IP prefix; Disassemble into multiple disjoint independent subtree blocks, each subtree block is uniquely determined by the position of its root node in the original prefix tree; encode the path from the root node of the original prefix tree block to the root node of a subtree block as an integer , used as the unique identifier of this subtree block; encode all nodes contained in the entire subtree block into a bitmap bitmap; encode the routing origin authorization information of a given AS into multiple identifier and bitmap tuples. The invention can not only realize the high security like minimal ROA, but also break through the expansion bottleneck and realize safe and expandable compression coding of routing origin authorization information.