91 results about "Logical network" patented technology

Techniques are disclosed for providing a context-aware description of anomalous behavior in a computer network. According to one embodiment of the present disclosure, a description of an anomaly detected in computer network activity is received. The description includes one or more features of the computer network associated with the anomaly. Contextual information relating to at least one of the features is generated based on a logical network topology. The logical network topology specifies a plurality of network traffic attributes of the computer network. An alert that includes a second description of the anomaly and the contextual information is generated.

Network address migration using a destination compute instance to update network configuration information in a cloud environment is disclosed. A network interface either using a private address within a subnet corresponding to the created network interface or using a floating address outside of the subnet corresponding to the created network interface is created. A first node of the HA pair with a service provider interface. The first node is an active data server of the HA pair and the second node is a backup node of the HA pair. Requests are serviced the first node using the created network interface. Upon failure of the first node, the second node performs a failover, wherein if the first node was utilizing a floating address, the second node registers the second node with the service provider interface by adding an address of the second node to the route table.

Some embodiments provide a method for implementing a logical router of a logical network at a first Pod executing on a first node of a Kubernetes cluster to implement data message forwarding for the logical router. The method receives a data message for processing by the logical router. The method determines that the data message requires layer 7 (L7) service processing at the logical router. The method selects a second Pod from multiple Pods that perform L7 service for the logical router. Each of the Pods executes on a different node of the cluster. The method forwards the data message to the second Pod via a layer 2 (L2) construct that connects the first and second Pods.

The invention relates to the technical field of vehicles, and provides a vehicle-mounted terminal network equipment post-replacement management method and device, and the method comprises the steps: carrying out the network access verification of old piece equipment based on a preset first white list and a logic network address carried in a request under the condition that a network connection request of the old piece equipment is received, the first white list stores logic network addresses of offline old pieces; and under the condition that the network verification result indicates that the old piece equipment is allowed to access the in-vehicle domain network, vehicle binding relationship verification is performed on the old piece equipment based on a preset second white list, the equipment identification code of the old piece equipment and the change condition of the vehicle identification code bound with the old piece equipment, and the equipment identification code of the offline old piece is stored in the second white list. According to the method and the device provided by the invention, a traditional mode which completely depends on manual recording, judgment and operation is replaced, so that human errors are reduced, and accurate and automatic management of the life cycle state of the equipment is realized.

Embodiments of the disclosure relate to a secure, high-performance communication link that relies on single network, multiple logical port addressing. Embodiments of an infrastructure are associated with a high-performance communication link that allows for distribution of network traffic across multiple interconnects using a single network address with different logical network port addressing. This high-performance communication link supports data traffic across different processing logic units residing within a destination computing device.

The present disclosure relates to enhancements in communications for beyond 5G (e.g., 6G) communication system. In one embodiment, the present disclosure discloses a method which comprises for each logical network entity providing a service and involved in a communication procedure within a communication system that comprises a plurality of logical network entities, facilitating, by at least one anchor logical network entity of the plurality of logical network entities, retrieving of state data associated with a user equipment (UE). The retrieving of the state data is performed at a beginning of the communication procedure from a viewpoint of the logical network entity. The method further comprises facilitating, by the at least one anchor logical network entity, storing of the state data at an end of the communication procedure from the viewpoint of the logical network entity.

A network system with a network core unit, a network-managing unit, a device-managing unit, and a network data-infrastructure, and a method for admitting an application device in this network system, are disclosed. The method includes authenticating the application device on network-level, notifying the network-managing unit about an authenticating result, configuring the network data-infrastructure to provide a connectivity between the network-managing unit and the device-managing unit, performing an authenticating action for the application device for authenticating the access device on application-level, notifying the network-managing unit about the authentication result, and configuring the network data-infrastructure to provide an isolated logical network connectivity between the application device and other equally authenticated application devices.

This invention relates to the field of data processing and discloses a method and system for project risk identification, early warning, and control. The method includes: acquiring state parameters of logical state nodes in a multi-dimensional data logical network, constructing state evolution trajectories, and calculating decay acceleration within adjacent time windows; identifying parallel monitoring node pairs sharing a common underlying resource pool and calculating the correlation of decay acceleration; when the correlation is negative and the difference exceeds a threshold, generating directed edges pointing to asymmetric resource offset occupancy in the topology graph and outputting early warning and control instructions. This invention identifies the asymmetry in the decay rate of evolution between parallel nodes, constructs asynchronous decay scissor difference judgment rules, achieves reverse mapping of resource scheduling imbalance, eliminates the blind spots of cross-path resource dependency perception in traditional monitoring systems, locks down the risk source before local fluctuations trigger global cascading failures, and improves the timeliness of early warning.

Some embodiments provide a method for distributing a service rule that is to be enforced across a first set of sites and that is defined by reference to a group identifier that identifies a group of machines. The method distributes the service rule to each site in the first set of sites. The method identifies at least one site in the first set of sites that is not in a second set of sites that has already received a definition of the group. The method distributes the group definition to each identified site in the first set of sites that has not already received the definition of the group.

The application discloses a railway construction simulation model generation method based on full-line design parameters, relates to the technical field of model simulation, collects line track geometric parameters, geological exploration data, bridge and tunnel structure parameters, construction mechanical performance indexes and environmental constraint conditions, constructs a multi-source heterogeneous database, constructs full-line design parameters after spatial coordinate unification and data cleaning, establishes a time and space dependency relationship of construction elements based on a line section topological structure of the railway, generates an initial construction logic network, optimizes the construction logic network according to construction efficiency, resource scheduling rules and dynamic constraint conditions, defines parallel construction events in a railway construction process, maps the full-line design parameters and the construction logic network into a three-dimensional visual simulation model of railway construction through a parameterized modeling engine, introduces real-time railway construction data, predicts a construction delay probability of the railway construction, and determines whether to make construction process adjustment and construction resource redistribution.

A network management apparatus includes at least one processor. The processor is configured to execute a reception process of receiving a signal supplied when a problem is detected in any of a plurality of logical networks in a network virtualization environment, and a first determination process of determining not to perform auto-healing in a case in which a problem is detected in a first logical network that is configured for platform monitoring and a problem is not detected in a second logical network that is configured for application monitoring.

The application discloses a dynamic time-sensitive application network routing method and device, a storage medium and an electronic device, and the method comprises the following steps: in the case that a node application initiates a data request to a center node, the center node determines a candidate path based on a network state matrix model, wherein the node application is a user node mapped on a data plane of a logical network topology of a dynamic time-sensitive application network, and the center node is located on a control plane of the logical network topology; a communication time delay of each candidate path calculated based on a routing metric is used to determine a target path from the candidate path, and a path planning parameter is formed; on the basis of the same time reference, the center node performs quadratic programming on the target path, and forms a shaping configuration parameter; and the center node issues the path planning parameter and the shaping configuration parameter to the node application, so that the node application performs data forwarding based on the target path. The application solves the technical problem of deterministic time delay transmission of time-sensitive applications in a dynamic complex network.

The invention relates to the technical field of cloud service systems, in particular to an SDN-based RoCE multi-tenant management system, which comprises the steps that a control node interacts with a working node, determines network configuration for a newly added tenant container, translates according to a logic network object pointed by the network configuration to obtain a logic data path flow table, and sends the logic data path flow table to the working node; the DPU node generates a flow table rule in accordance with the logical data path flow table. In order to solve the problem that the RoCE performance is reduced due to the fact that an existing tenant management system needs to consume long time to perform rule searching and routing when data writing is performed among multiple containers, the three nodes are introduced, and the RoCE performance is improved by determining a network model of a current pod network for a newly-added tenant container. Therefore, the network resources of the current network are accurately described, the related resources allocated to the tenant container are determined, the DPU node is controlled to route the data through the logic path data flow table, the more efficient inter-container communication efficiency is achieved, and the related network requirements of the RoCE process are met.

The present application relates to the technical field of railway logistics operation and maintenance, and discloses a logistics intelligent management optimization method fusing multi-source data analysis, which comprises the following steps: obtaining business text and structured equipment monitoring data, combining train working diagram and passenger flow density parameters to extract fault action vocabulary; using train arrival and departure time alignment data to lock effective physical time window containing fault evolution; performing passenger flow load decoupling processing on monitoring data, using a baseline model to remove basic load to generate standard residual waveform; fusing building information model and logical network, constructing spatial logical index based on comprehensive proximity; performing cross-station similar equipment matching based on multi-dimensional working condition feature vector and generating maintenance report. Through effectively stripping the interference of passenger flow environmental noise on equipment monitoring data, combining spatial logical correlation and working condition similarity matching, the accuracy of fault feature extraction and the reuse efficiency of cross-site operation and maintenance knowledge are significantly improved.

Embodiments of the present application relate to the technical field of communication, and disclose a multicast method, which comprises the following steps: determining virtual machine information of a target virtual machine; converting the virtual machine information into virtual port information corresponding to a preset SDN controller; and sending the virtual port information to the SDN controller, so that the SDN controller adds the target virtual machine into a multicast group of a virtual multicast network corresponding to a target cloud platform; the virtual multicast network is constructed in advance by the SDN controller according to network configuration information; the network configuration information is converted from logical network information of the target cloud platform; and the target cloud platform comprises the target virtual machine. In the above manner, the embodiments of the present application improve the processing efficiency of multicast services in a cloud environment.

A network management apparatus includes at least one processor. The processor is configured to execute a reception process of receiving a signal supplied when a problem is detected in any of a plurality of logical networks in a network virtualization environment, and a first determination process of determining not to perform auto-healing in a case in which a problem is detected in a first logical network that is configured for platform monitoring and a problem is not detected in a second logical network that is configured for application monitoring.

The present disclosure relates to a network method, a network device and a network apparatus. The network method is for a network comprising a plurality of logical network nodes connected by physical network links, the network method being performed by a controller of the network and comprising: determining a link quality of each physical link between a first logical network node and a second logical network node of the plurality of logical network nodes; and based on the determined link quality of each physical link, link quality labelling the physical links.

This invention relates to the fields of network security and information technology, specifically to an agent mapping method and system for asset discovery in isolated network blind spots. The method includes: deploying agents on terminals to collect local data, including ARP cache, network connection tables, hardware fingerprints, and behavioral profiles, and encrypting and uploading this data. The main control center performs asset deduplication and authentication based on hardware fingerprints, and uses time window alignment and session continuity analysis algorithms to process connection data, resolving association ambiguities caused by timing misalignments and temporary connections, and establishing high-confidence cross-agent connection relationships. Finally, the connection relationships and behavioral profile data are merged, and unmanaged assets discovered at the link layer are included to synthesize a global asset topology across logical network segments. This invention improves the coverage, identification accuracy, and real-time performance of asset discovery in complex isolated network environments, while eliminating the risk of interference to business networks during the scanning process.

Methods, apparatus, and systems for providing effective slice-level load metrics reporting and load balancing are disclosed. In one example aspect, a wireless communication method includes transmitting, by a first network element, a request to a second network element requesting resource status at a slice level of a slice. The slice represents a logical network of a physical network infrastructure. The method also includes receiving, by the first network element, load information at the slice level from the second network element in response to the request.

Some embodiments of the invention provide a method for implementing an edge device that handles data traffic between a logical network and an external network. The method monitors resource usage of a node pool that includes multiple nodes that each executes a respective set of pods. Each of the pods is for performing a respective set of data message processing operations for at least one of multiple logical routers. The method determines that a particular node in the node pool has insufficient resources for the particular node's respective set of pods to adequately perform their respective sets of data message processing operations. Based on the determination, the method automatically provides additional resources to the node pool by instantiating at least one additional node in the node pool.

The application discloses a service traffic grading method, an electronic device, a storage medium and a product, relates to the technical field of computers, and can realize grading management of traffic of different service types at a logical network level, and distinguish service characteristics from the source, by presetting multiple service traffic grades in a cloud platform, binding ports with the grades, allocating independent tunnel source addresses to each traffic grade on a computing node, and uniformly maintaining and issuing encapsulation rules by a distributed controller, so that path control and differential processing based on the grades can be realized in the process of tunnel establishment and traffic forwarding, end-to-end service traffic grading can be realized in a virtualization environment, the bandwidth guarantee capability and low-latency experience of high-priority services are improved, low-priority services are prevented from occupying key link resources, and finally, efficient utilization and fine management and control of network resources in the cloud platform are realized.

This invention provides a process mapping method and system based on priority cut sets to solve the problems of huge computational resource consumption and poor scalability caused by exhaustive cut enumeration in existing process mapping methods. The invention first obtains the logical network to be mapped; then, it optimizes the network through multiple iterative mapping passes. In each pass, for each node in the network, candidate cut sets are generated by merging a finite number of priority cut sets of its fan-in nodes, and new priority cut sets are selected from the candidate cut sets according to a dynamic priority ranking criterion; finally, a mapped netlist is generated based on the finally determined representative cut sets. This invention avoids exhaustive search by only calculating and storing a small number of optimal cut sets, significantly reducing the time and space complexity of the algorithm. At the same time, the multi-pass iteration and dynamic optimization strategy ensures high-quality mapping results, making it particularly suitable for the design of large-scale, complex integrated circuits.

In a mesh communication network, bridge devices use two parallel configurations: a first logical network configuration to route data packets point-to-point, using dynamic routing between the bridge devices; and a second logical network configuration to route data packets broadcast, using a spanning tree that eliminates potential loops. Upon receiving a subscription request (410) from a station device, each bridge device is instructed (414) to initiate a source search for the multicast data stream. When the multicast data stream is received via an input port of a bridge device, the bridge device is configured to switch the multicast data stream from the input port to an output port toward the station device, according to the first configuration. Figure to be published with the abbreviation: Fig. 4

A computing node of a computing device of a computing device cluster of a data ingest sub-system of a database system includes main memory and processing core resources. The main memory is logically divided into a computing device memory section and a database memory section. The database memory section includes a first logical section for a first processing core resource, a second logical section for a second processing core resource, and a logical network communication section. A processing core resource includes processing module and a memory device. The processing core resources retrieves a first division of a sub-segment of a segment of a segment group of a partition of a dataset and processes it for short term storage and for long term storage. The processing core resource stores the short term version and outputs the long term version.

Some embodiments provide a method of transmitting data in a logical network with multiple branches and a hub cluster with multiple hubs of a first category of hubs and multiple hubs of a second category of hubs. The method, for each of the multiple branches (1) assigns a first hub of the first category of hubs to the branch (2) assigns a second hub of the second category of hubs to the branch, and (3) provides a set of application based policies to the branch. The application based policies direct the branch to route different types of network traffic of the application through the first hub than through the second hub. Each hub of the first category of hubs, in some embodiments, includes a set of resources equivalent to a set of resources of each other hub of the first category of hubs.

In one embodiment, a computer-implemented method comprises using one or more computing devices that are communicatively coupled to one or more internetworking devices in two or more logical layers of a multiple-layer distributed computing environment, the logical layers comprising at least an operational technology (OT) network and an information technology (IT) network, configuring one or more network firewalls in one or more of the logical layers to admit UDP protocol traffic on one or more specified ports; using the one or more computing devices, setting a current logical network layer to a lowest logical layer of the multiple-layer distributed computing environment; using the one or more computing devices, opening a secure tunnel using the internetworking stack of a first authentication service node at the current logical network layer; using the one or more computing devices, initiating secure tunnel communication toward a second authentication service node at a next higher logical layer of the computing environment; using the one or more computing devices, setting the current logical network layer to be the next higher logical layer, and repeating the opening and initiating one or more times between the current logical layer and the next successive higher logical layer; using the one or more computing devices, synchronizing user access policies between the first authentication service node and the second authentication service node using state synchronization messages communicated through the secure tunnel.

In certain implementations, a method includes receiving, by a network interface controller (NIC), a request for inter-process communication associated with a sending process of a distributed application. The request includes a logical network address for a destination process of the distributed application. The method includes executing, by the NIC, a network address translation process to translate the logical network address for the destination process to a translated network address for the destination process. The network address translation process includes executing, using a first portion of the logical network address, a lookup of a network address translation table to determine a first address; determining a translation modifier by executing a translation algorithm using a second portion of the logical network address; and determining the translated network address using the first address and the translation modifier. The method includes processing, by the NIC, a first message using the translated network address.

The embodiment of the application provides a multi-layer network attack resistance evaluation method, comprising the following steps: repeatedly attacking a physical network layer of a multi-layer network by using a target attack mode; the multi-layer network comprises the physical network layer and a logical network layer; for each attack of the target attack mode, calculating a maximum connected piece ratio of the logical network layer after the corresponding attack; and calculating a damage degree index of the multi-layer network corresponding to the target attack mode according to the maximum connected piece ratios corresponding to all attacks of the target attack mode.

The invention provides an academic declaration assessment method for knowledge graph enhanced large model reasoning, and belongs to the field of combination of a large model and a knowledge graph. Through deep fusion of the structured ability of the knowledge graph and the reasoning agent of the large language model, the spanning of the academic ability assessment from shallow text matching to deep logical reasoning is realized. The method comprises the following steps: constructing a knowledge-driven intelligent reasoning framework; performing deep semantic extraction from an unstructured academic text by utilizing the powerful semantic analysis capability of a large language model; scattered text information is converted into a structured logic network by constructing a dynamic knowledge graph. According to the method, a thinking-action reasoning circulation mechanism is innovatively introduced, multi-hop exploration is carried out on a knowledge graph through an intelligent agent, and the inherent factual illusion and reasoning fault problems of a traditional large model during complex academic logic processing can be solved; and an explanation generation strategy based on a structured evidence chain is supported, and the reliability, the professional degree and the transparency of an academic evaluation system are remarkably improved.

The application discloses a kind of based on CTC8180 chip's air sea cross-domain network slice configuration and response method, belongs to air sea cross-domain communication and network slice technical field, including S1.Configuration and parallel access NETCONF with CLI passage, convert configuration instruction CTC8180 chip call instruction;S2.Based on FlexE technology creates resource pool, logical port, binding interface and VRF strategy;S3.Combined with SRv6 path programming, service level mapping and gport identification slice identification, complete the forwarding and mapping configuration of slice strategy;S4.Through three kinds of protocol monitoring performance, data acquisition and fault detection;S5.Through resource dynamic adjustment, path switching and strategy linkage etc. form closed loop control, S6.The steps of integration S1-S5 realize multi-chip compatibility and stable adaptation deployment.The application provides a kind of specific implementation method for constructing logical network slice capability on high-performance forwarding hardware facing air sea cross-domain specific demand, provides reliable communication guarantee for high dynamic, heterogeneous service.