57 results about "Logical network" patented technology

Some embodiments provide a method for implementing a logical router of a logical network at a first Pod executing on a first node of a Kubernetes cluster to implement data message forwarding for the logical router. The method receives a data message for processing by the logical router. The method determines that the data message requires layer 7 (L7) service processing at the logical router. The method selects a second Pod from multiple Pods that perform L7 service for the logical router. Each of the Pods executes on a different node of the cluster. The method forwards the data message to the second Pod via a layer 2 (L2) construct that connects the first and second Pods.

The invention relates to the technical field of vehicles, and provides a vehicle-mounted terminal network equipment post-replacement management method and device, and the method comprises the steps: carrying out the network access verification of old piece equipment based on a preset first white list and a logic network address carried in a request under the condition that a network connection request of the old piece equipment is received, the first white list stores logic network addresses of offline old pieces; and under the condition that the network verification result indicates that the old piece equipment is allowed to access the in-vehicle domain network, vehicle binding relationship verification is performed on the old piece equipment based on a preset second white list, the equipment identification code of the old piece equipment and the change condition of the vehicle identification code bound with the old piece equipment, and the equipment identification code of the offline old piece is stored in the second white list. According to the method and the device provided by the invention, a traditional mode which completely depends on manual recording, judgment and operation is replaced, so that human errors are reduced, and accurate and automatic management of the life cycle state of the equipment is realized.

The present disclosure relates to enhancements in communications for beyond 5G (e.g., 6G) communication system. In one embodiment, the present disclosure discloses a method which comprises for each logical network entity providing a service and involved in a communication procedure within a communication system that comprises a plurality of logical network entities, facilitating, by at least one anchor logical network entity of the plurality of logical network entities, retrieving of state data associated with a user equipment (UE). The retrieving of the state data is performed at a beginning of the communication procedure from a viewpoint of the logical network entity. The method further comprises facilitating, by the at least one anchor logical network entity, storing of the state data at an end of the communication procedure from the viewpoint of the logical network entity.

A network system with a network core unit, a network-managing unit, a device-managing unit, and a network data-infrastructure, and a method for admitting an application device in this network system, are disclosed. The method includes authenticating the application device on network-level, notifying the network-managing unit about an authenticating result, configuring the network data-infrastructure to provide a connectivity between the network-managing unit and the device-managing unit, performing an authenticating action for the application device for authenticating the access device on application-level, notifying the network-managing unit about the authentication result, and configuring the network data-infrastructure to provide an isolated logical network connectivity between the application device and other equally authenticated application devices.

This invention relates to the field of data processing and discloses a method and system for project risk identification, early warning, and control. The method includes: acquiring state parameters of logical state nodes in a multi-dimensional data logical network, constructing state evolution trajectories, and calculating decay acceleration within adjacent time windows; identifying parallel monitoring node pairs sharing a common underlying resource pool and calculating the correlation of decay acceleration; when the correlation is negative and the difference exceeds a threshold, generating directed edges pointing to asymmetric resource offset occupancy in the topology graph and outputting early warning and control instructions. This invention identifies the asymmetry in the decay rate of evolution between parallel nodes, constructs asynchronous decay scissor difference judgment rules, achieves reverse mapping of resource scheduling imbalance, eliminates the blind spots of cross-path resource dependency perception in traditional monitoring systems, locks down the risk source before local fluctuations trigger global cascading failures, and improves the timeliness of early warning.

The application discloses a dynamic time-sensitive application network routing method and device, a storage medium and an electronic device, and the method comprises the following steps: in the case that a node application initiates a data request to a center node, the center node determines a candidate path based on a network state matrix model, wherein the node application is a user node mapped on a data plane of a logical network topology of a dynamic time-sensitive application network, and the center node is located on a control plane of the logical network topology; a communication time delay of each candidate path calculated based on a routing metric is used to determine a target path from the candidate path, and a path planning parameter is formed; on the basis of the same time reference, the center node performs quadratic programming on the target path, and forms a shaping configuration parameter; and the center node issues the path planning parameter and the shaping configuration parameter to the node application, so that the node application performs data forwarding based on the target path. The application solves the technical problem of deterministic time delay transmission of time-sensitive applications in a dynamic complex network.

The invention relates to the technical field of cloud service systems, in particular to an SDN-based RoCE multi-tenant management system, which comprises the steps that a control node interacts with a working node, determines network configuration for a newly added tenant container, translates according to a logic network object pointed by the network configuration to obtain a logic data path flow table, and sends the logic data path flow table to the working node; the DPU node generates a flow table rule in accordance with the logical data path flow table. In order to solve the problem that the RoCE performance is reduced due to the fact that an existing tenant management system needs to consume long time to perform rule searching and routing when data writing is performed among multiple containers, the three nodes are introduced, and the RoCE performance is improved by determining a network model of a current pod network for a newly-added tenant container. Therefore, the network resources of the current network are accurately described, the related resources allocated to the tenant container are determined, the DPU node is controlled to route the data through the logic path data flow table, the more efficient inter-container communication efficiency is achieved, and the related network requirements of the RoCE process are met.

The present application relates to the technical field of railway logistics operation and maintenance, and discloses a logistics intelligent management optimization method fusing multi-source data analysis, which comprises the following steps: obtaining business text and structured equipment monitoring data, combining train working diagram and passenger flow density parameters to extract fault action vocabulary; using train arrival and departure time alignment data to lock effective physical time window containing fault evolution; performing passenger flow load decoupling processing on monitoring data, using a baseline model to remove basic load to generate standard residual waveform; fusing building information model and logical network, constructing spatial logical index based on comprehensive proximity; performing cross-station similar equipment matching based on multi-dimensional working condition feature vector and generating maintenance report. Through effectively stripping the interference of passenger flow environmental noise on equipment monitoring data, combining spatial logical correlation and working condition similarity matching, the accuracy of fault feature extraction and the reuse efficiency of cross-site operation and maintenance knowledge are significantly improved.

Embodiments of the present application relate to the technical field of communication, and disclose a multicast method, which comprises the following steps: determining virtual machine information of a target virtual machine; converting the virtual machine information into virtual port information corresponding to a preset SDN controller; and sending the virtual port information to the SDN controller, so that the SDN controller adds the target virtual machine into a multicast group of a virtual multicast network corresponding to a target cloud platform; the virtual multicast network is constructed in advance by the SDN controller according to network configuration information; the network configuration information is converted from logical network information of the target cloud platform; and the target cloud platform comprises the target virtual machine. In the above manner, the embodiments of the present application improve the processing efficiency of multicast services in a cloud environment.

A network management apparatus includes at least one processor. The processor is configured to execute a reception process of receiving a signal supplied when a problem is detected in any of a plurality of logical networks in a network virtualization environment, and a first determination process of determining not to perform auto-healing in a case in which a problem is detected in a first logical network that is configured for platform monitoring and a problem is not detected in a second logical network that is configured for application monitoring.

The present disclosure relates to a network method, a network device and a network apparatus. The network method is for a network comprising a plurality of logical network nodes connected by physical network links, the network method being performed by a controller of the network and comprising: determining a link quality of each physical link between a first logical network node and a second logical network node of the plurality of logical network nodes; and based on the determined link quality of each physical link, link quality labelling the physical links.

This invention relates to the fields of network security and information technology, specifically to an agent mapping method and system for asset discovery in isolated network blind spots. The method includes: deploying agents on terminals to collect local data, including ARP cache, network connection tables, hardware fingerprints, and behavioral profiles, and encrypting and uploading this data. The main control center performs asset deduplication and authentication based on hardware fingerprints, and uses time window alignment and session continuity analysis algorithms to process connection data, resolving association ambiguities caused by timing misalignments and temporary connections, and establishing high-confidence cross-agent connection relationships. Finally, the connection relationships and behavioral profile data are merged, and unmanaged assets discovered at the link layer are included to synthesize a global asset topology across logical network segments. This invention improves the coverage, identification accuracy, and real-time performance of asset discovery in complex isolated network environments, while eliminating the risk of interference to business networks during the scanning process.

Methods, apparatus, and systems for providing effective slice-level load metrics reporting and load balancing are disclosed. In one example aspect, a wireless communication method includes transmitting, by a first network element, a request to a second network element requesting resource status at a slice level of a slice. The slice represents a logical network of a physical network infrastructure. The method also includes receiving, by the first network element, load information at the slice level from the second network element in response to the request.

Some embodiments of the invention provide a method for implementing an edge device that handles data traffic between a logical network and an external network. The method monitors resource usage of a node pool that includes multiple nodes that each executes a respective set of pods. Each of the pods is for performing a respective set of data message processing operations for at least one of multiple logical routers. The method determines that a particular node in the node pool has insufficient resources for the particular node's respective set of pods to adequately perform their respective sets of data message processing operations. Based on the determination, the method automatically provides additional resources to the node pool by instantiating at least one additional node in the node pool.

The application discloses a service traffic grading method, an electronic device, a storage medium and a product, relates to the technical field of computers, and can realize grading management of traffic of different service types at a logical network level, and distinguish service characteristics from the source, by presetting multiple service traffic grades in a cloud platform, binding ports with the grades, allocating independent tunnel source addresses to each traffic grade on a computing node, and uniformly maintaining and issuing encapsulation rules by a distributed controller, so that path control and differential processing based on the grades can be realized in the process of tunnel establishment and traffic forwarding, end-to-end service traffic grading can be realized in a virtualization environment, the bandwidth guarantee capability and low-latency experience of high-priority services are improved, low-priority services are prevented from occupying key link resources, and finally, efficient utilization and fine management and control of network resources in the cloud platform are realized.

This invention provides a process mapping method and system based on priority cut sets to solve the problems of huge computational resource consumption and poor scalability caused by exhaustive cut enumeration in existing process mapping methods. The invention first obtains the logical network to be mapped; then, it optimizes the network through multiple iterative mapping passes. In each pass, for each node in the network, candidate cut sets are generated by merging a finite number of priority cut sets of its fan-in nodes, and new priority cut sets are selected from the candidate cut sets according to a dynamic priority ranking criterion; finally, a mapped netlist is generated based on the finally determined representative cut sets. This invention avoids exhaustive search by only calculating and storing a small number of optimal cut sets, significantly reducing the time and space complexity of the algorithm. At the same time, the multi-pass iteration and dynamic optimization strategy ensures high-quality mapping results, making it particularly suitable for the design of large-scale, complex integrated circuits.

In a mesh communication network, bridge devices use two parallel configurations: a first logical network configuration to route data packets point-to-point, using dynamic routing between the bridge devices; and a second logical network configuration to route data packets broadcast, using a spanning tree that eliminates potential loops. Upon receiving a subscription request (410) from a station device, each bridge device is instructed (414) to initiate a source search for the multicast data stream. When the multicast data stream is received via an input port of a bridge device, the bridge device is configured to switch the multicast data stream from the input port to an output port toward the station device, according to the first configuration. Figure to be published with the abbreviation: Fig. 4

Some embodiments provide a method of transmitting data in a logical network with multiple branches and a hub cluster with multiple hubs of a first category of hubs and multiple hubs of a second category of hubs. The method, for each of the multiple branches (1) assigns a first hub of the first category of hubs to the branch (2) assigns a second hub of the second category of hubs to the branch, and (3) provides a set of application based policies to the branch. The application based policies direct the branch to route different types of network traffic of the application through the first hub than through the second hub. Each hub of the first category of hubs, in some embodiments, includes a set of resources equivalent to a set of resources of each other hub of the first category of hubs.

In one embodiment, a computer-implemented method comprises using one or more computing devices that are communicatively coupled to one or more internetworking devices in two or more logical layers of a multiple-layer distributed computing environment, the logical layers comprising at least an operational technology (OT) network and an information technology (IT) network, configuring one or more network firewalls in one or more of the logical layers to admit UDP protocol traffic on one or more specified ports; using the one or more computing devices, setting a current logical network layer to a lowest logical layer of the multiple-layer distributed computing environment; using the one or more computing devices, opening a secure tunnel using the internetworking stack of a first authentication service node at the current logical network layer; using the one or more computing devices, initiating secure tunnel communication toward a second authentication service node at a next higher logical layer of the computing environment; using the one or more computing devices, setting the current logical network layer to be the next higher logical layer, and repeating the opening and initiating one or more times between the current logical layer and the next successive higher logical layer; using the one or more computing devices, synchronizing user access policies between the first authentication service node and the second authentication service node using state synchronization messages communicated through the secure tunnel.

In certain implementations, a method includes receiving, by a network interface controller (NIC), a request for inter-process communication associated with a sending process of a distributed application. The request includes a logical network address for a destination process of the distributed application. The method includes executing, by the NIC, a network address translation process to translate the logical network address for the destination process to a translated network address for the destination process. The network address translation process includes executing, using a first portion of the logical network address, a lookup of a network address translation table to determine a first address; determining a translation modifier by executing a translation algorithm using a second portion of the logical network address; and determining the translated network address using the first address and the translation modifier. The method includes processing, by the NIC, a first message using the translated network address.

The embodiment of the application provides a multi-layer network attack resistance evaluation method, comprising the following steps: repeatedly attacking a physical network layer of a multi-layer network by using a target attack mode; the multi-layer network comprises the physical network layer and a logical network layer; for each attack of the target attack mode, calculating a maximum connected piece ratio of the logical network layer after the corresponding attack; and calculating a damage degree index of the multi-layer network corresponding to the target attack mode according to the maximum connected piece ratios corresponding to all attacks of the target attack mode.

The invention provides an academic declaration assessment method for knowledge graph enhanced large model reasoning, and belongs to the field of combination of a large model and a knowledge graph. Through deep fusion of the structured ability of the knowledge graph and the reasoning agent of the large language model, the spanning of the academic ability assessment from shallow text matching to deep logical reasoning is realized. The method comprises the following steps: constructing a knowledge-driven intelligent reasoning framework; performing deep semantic extraction from an unstructured academic text by utilizing the powerful semantic analysis capability of a large language model; scattered text information is converted into a structured logic network by constructing a dynamic knowledge graph. According to the method, a thinking-action reasoning circulation mechanism is innovatively introduced, multi-hop exploration is carried out on a knowledge graph through an intelligent agent, and the inherent factual illusion and reasoning fault problems of a traditional large model during complex academic logic processing can be solved; and an explanation generation strategy based on a structured evidence chain is supported, and the reliability, the professional degree and the transparency of an academic evaluation system are remarkably improved.

The application discloses a kind of based on CTC8180 chip's air sea cross-domain network slice configuration and response method, belongs to air sea cross-domain communication and network slice technical field, including S1.Configuration and parallel access NETCONF with CLI passage, convert configuration instruction CTC8180 chip call instruction;S2.Based on FlexE technology creates resource pool, logical port, binding interface and VRF strategy;S3.Combined with SRv6 path programming, service level mapping and gport identification slice identification, complete the forwarding and mapping configuration of slice strategy;S4.Through three kinds of protocol monitoring performance, data acquisition and fault detection;S5.Through resource dynamic adjustment, path switching and strategy linkage etc. form closed loop control, S6.The steps of integration S1-S5 realize multi-chip compatibility and stable adaptation deployment.The application provides a kind of specific implementation method for constructing logical network slice capability on high-performance forwarding hardware facing air sea cross-domain specific demand, provides reliable communication guarantee for high dynamic, heterogeneous service.

In a mesh communication network, bridge devices use two parallel configurations: a first logical network configuration to route data packets point-to-point, using dynamic routing between the bridge devices; and a second logical network configuration to route data packets broadcast, using a spanning tree that eliminates potential loops. Upon receiving a subscription request (410) from a station device, each bridge device is instructed (414) to initiate a source search for the multicast data stream. When the multicast data stream is received via an input port of a bridge device, the bridge device is configured to switch the multicast data stream from the input port to an output port toward the station device, according to the first configuration.

The present disclosure generally relates to optimizing load-balancing of network endpoints using tree collectives representing a logical network communication topology for the network endpoints. Systems and methods described herein eliminate the previously restrictive conditions imposed on tree-based communication collectives by generating collective trees with any arity and representing any number of physical network endpoints. The resulting collective trees ensure that each represented network endpoint has a number of outgoing flows and a number of incoming flows that are no more than the arity of the collective tree. In this way, the described systems and methods inject significant efficiencies into communication collectives within networked compute nodes by eliminating communication bandwidth latencies and bottlenecks.

Embodiments disclosure herein describe systems, methods, and devices for addressing the challenges of implementing Energy-Efficient Ethernet (EEE) in networks where certain latency-sensitive control protocols are incompatible with EEE or experience degraded performance due to its power-saving mechanisms. Conversely, more devices are being shipped with EEE enabled by default to achieve sustainability-related certifications. In response, various embodiments utilize an EEE management logic that dynamically analyzes network topology data, network traffic data, and EEE settings data to overcome these limitations. By understanding the physical and logical network layout, real-time traffic patterns, and EEE configurations, the system identifies areas where EEE can be safely disabled without negatively affecting critical operations. It can selectively adjust EEE settings to maintain the performance of latency-sensitive protocols while maximizing energy efficiency in less demanding areas. This achieves a desired goal of obtaining reliable operation of latency-sensitive devices, such as industrial control systems, while achieving significant energy savings.

The technology disclosed herein enables a secrets node on a private network to provide credentials to other nodes on the private network. In a particular example, a method includes, in a secrets node, obtaining credentials for accessing a service. The service is provided by one or more computing systems external to the logical network. The method further includes authenticating a client to the logical network and, after authenticating the client, receiving, in the secrets node via the logical network, a request from the client to access the service. The method also includes, in the secrets node, providing the credentials to the client in a response to the request based on the request having been received over the logical network.

The present disclosure appropriately implements communication in a case where a network slice is utilized. A communication device according to one embodiment of the present disclosure is a communication device that communicates with a terminal, and has a control section that judges whether or not a condition for switching a logical network between the terminal and the communication device is satisfied, and a communication section that transmits, in a case where the condition is satisfied, an instruction for switching the logical network to another logical network to a second communication device that discloses a network function (Network Function (NF)) of a physical network corresponding to the logical network to the outside.

The application relates to the technical field of intelligent tunnel construction management, and discloses a data and algorithm double-driven global collaborative management system and method for tunnel construction, wherein the data and algorithm double-driven global collaborative management method for tunnel construction comprises the following steps: acquiring multi-source heterogeneous construction data and performing standardized pretreatment; extracting construction real-time state information and constructing a three-dimensional model, and dynamically binding the real-time state information and the three-dimensional model; constructing a process network model; performing real-time updating on the process network model; performing construction progress deduction; calculating a safety step distance and performing overrun judgment; extracting safety state information except the safety step distance, and performing risk analysis; identifying progress deviation; identifying risk response demand; and generating a regulation and control instruction; the application realizes process logic network modeling by fusing field knowledge constraints, progress deduction by deep reinforcement learning enhanced by migration learning, risk intelligent early warning by a time sequence prediction model, and global collaborative regulation and control by multi-target optimization.

Embodiments of the present application provide a MAC address offset processing method, a MAC address offset processing device, a communication device, a chip, a computer readable storage medium and a computer program product. The MAC address offset processing method is applied to a first function and includes determining that a first device has a MAC address offset, updating or deleting information about the first device in a MAC address table of a first user plane function (UPF). The first function is a logical network element of the first UPF.