37 results about "Network Functions Virtualization" patented technology

A virtualized network function (VNF) of a network function virtualization (NFV) link level architecture includes a management plane function (MPF) to map a logical interface as a virtual interface in a control plane function (CPF) of the VNF. The MPF maps a logical resource of the NFV virtualization link level architecture as a shadow resource on one or more data plane functions (DPFs) of the VNF, wherein a virtual link is formed by the logical interface, the shadow resource, and the virtual interface. One of the DPFs receives a packet over the virtual link from a switch and classifies a type of the packet. In response to the packet type being a data packet, the DPF aggregates the packet with other data packets to form aggregated data packets and sends the aggregated data packets to the switch.

Techniques for tenant-driven dynamic resource allocation in a network function virtualization infrastructure (NFVI). In one example, an orchestration system is operated by a data center provider of a data center, and the orchestration system includes processing circuitry coupled to a memory; logic stored in the memory and configured to be executed by the processing circuitry, wherein the logic is operable to: compute an aggregate bandwidth for a plurality of streams associated with tenants of a datacenter provider and processed by virtual network functions assigned to the tenants executing on servers of the datacenter; and modifying the allocation of computing resources for the server executing the virtual network function based on the aggregated bandwidth.

This application relates to the field of NFV technologies, and discloses an instantiation method and apparatus for a virtualised network function VNF. The method includes: A VNFM receives a first instantiation request from an NFVO, where the first instantiation request includes configuration information of a first virtual connection point of a VNF, and the configuration information of the first virtual connection point includes configuration information of K microservices of an NF corresponding to the VNF; further determines configuration information of a first ingress container object corresponding to the first virtual connection point, where the first ingress container object configured to provide an access ingress of the K microservices; and sends the configuration information of the first ingress container object to a CISM, where the configuration information of the first ingress container object is for creating the first ingress container object. In this way, an ingress container object can be created for a microservice. Because an access address of the microservice defined by using the ingress container object may be a domain name (for example, an fqdn), an access requirement of the microservice can be met.

The embodiment of the invention provides an IP address statistical system and method, electronic equipment, a medium and a program product, and relates to the field of wireless communication. The system comprises a first service module used for receiving IP address demand basic information of each network element deployed in a network function virtualization (NFV) network cloud system platform; the second service module is used for receiving docking configuration information of each network element of the NFV network cloud and an external system; the third service module is used for receiving resource pool deployment parameters; the resource pool deployment parameter is used for indicating the actual deployment scale of each network element under different networking types in a single resource pool, and the actual deployment scale at least comprises the actual deployment number of each network element in the single resource pool; and the fourth service module is used for counting the number of IPv4 and / or IPv6 addresses of each NFV network cloud resource pool based on the IP address demand basic information of each network element, the docking configuration information and the resource pool deployment parameters.

The invention provides a DCN simulation method, the DCN is used for monitoring an optical transport network, and the method comprises the steps: carrying out the simulation of a DCN interface part through behavior simulation, and obtaining an interface network model; the DCN interface part comprises the optical transport network and a target connection structure, and the target connection structure is a structure connected with the optical transport network in the DCN; simulating a DCN forwarding part through network function virtualization to obtain a forwarding network model; the DCN forwarding part comprises a link used for forwarding a data packet in the DCN. The invention further provides data communication network simulation equipment, a computer readable medium and a computer program product.

The embodiment of the invention provides a network function virtualization network element control method and device, equipment and a medium. The method comprises the following steps: acquiring a network element host list and a version list; in response to a control instruction for a network function virtualization network element, determining a to-be-controlled network function virtualization network element object from the network element host list and / or the version list according to the control instruction; determining a task type of the control instruction; and under the condition that the task type is a script command task, determining a script to be executed according to the control instruction. Under the condition that the task type is a label task, determining a script to be executed according to the control instruction; and executing the script to be executed or the script to be executed on the network function virtualization network element object to be controlled. According to the embodiment of the invention, the operation and maintenance flexibility and efficiency of the network function virtualization network element are improved.

The invention provides a communication guarantee method and device for an open-pit mine field, electronic equipment and a storage medium, and relates to the technical field of communication, a physical double-route Ethernet ring network architecture which contains main and standby routes and keeps a preset distance is constructed, and a single-board-level redundancy protection mechanism is configured for a baseband processing unit and a core network server in the architecture, so that the communication guarantee capability of the open-pit mine field is improved. In addition, fault detection and path reconstruction are executed based on a preset protection protocol and a software defined network controller, and meanwhile, a base station dynamic migration operation which triggers a migration process based on environment monitoring data and realizes base station configuration deployment and service switching through a network function virtualization technology is executed. The problems that in the prior art, due to the fact that single routing topology is adopted, key equipment lacks single-board-level redundancy, the fault detection and path recovery efficiency is low, and a base station depends on manual migration, the single-point fault risk is high, the fault recovery time is long, and the mining pit propelling dynamic coverage requirement is difficult to adapt can be solved.

Embodiments of this application disclose a method for creating a network service NS and a related apparatus. The method includes: A management device sends a network service descriptor NSD query request to a network functions virtualization orchestrator NFVO, and then receives information about an NSD from the NFVO. Because the information about the NSD includes information about a network service deployment flavour, the management device may determine an instantiation parameter based on the information about the network service deployment flavour, to request the NFVO to create an NS instance, and a staff does not need to input the instantiation parameter by using the NFVO. In this way, operation complexity of deploying the NS instance by using the management device is reduced, and an error caused by manually inputting the instantiation parameter is avoided.

Embodiments of the present application disclose an information processing method and device, network equipment and a storage medium. The method comprises: a network function virtualization orchestrator (NFVO) determining a first operation to be performed based on a first information record table and a second information record table; the first information record table is used to record first related information of each policy created in a resource pool and association relationship information of each policy and a corresponding network element instance; the second information record table is used to record second related information of each network element instance in the resource pool; the first operation is used to manage the association relationship of the policy and the corresponding network element instance of the policy in the resource pool; the first information record table is generated based on an obtained policy file, and the second information record table is generated based on a change operation of the network element instance; a first type of configuration parameter corresponding to the first operation is sent to a virtual network function manager (VNFM) through a first type of interface corresponding to the first operation; wherein the first type of configuration parameter is used for the VNFM to perform the first operation.

The application provides a data cache recovery method and system, relates to the technical field of computer networks, and is applied to a cache platform in a network function virtualization system. When a service flow normally works, a small amount of data packets are saved in a covering and saving mode through a common ring queue as preparation for service flow recovery. When the service flow is abnormal, data packets to be flowed into the service flow are cached through a linear queue, and the first data packet that fails to successfully pass through the service flow is determined. All cached data packets are recovered in time after the service flow is recovered. Different cache mechanisms are adopted for the normal service flow and the abnormal service flow, the communication bandwidth and processing efficiency of the service flow under the normal condition are guaranteed, the cache overhead is small, all data packets can be accurately recovered after abnormal processing, data packets can be completely and reasonably passed through the service flow under any condition, and therefore, the purpose of user non-perception is achieved.

Embodiments of methods and apparatus for fine-grained isolation in a CN domain for network slicing are disclosed. A method for isolation in a CN domain for network slicing includes receiving a slice isolation policy and establishing a CN NSS isolation policy based on the slice isolation policy. When the CN NSS isolation policy includes a network resource isolation policy, the network resource isolation policy is mapped to a network resource allocation policy, where a portion related to physical resources is sent to a network function management function (NFMF) and a portion related to virtual resources is sent to a network function virtualization management and orchestration function. When the NSS isolation policy includes an application level isolation policy, the application level isolation policy is mapped to an application level policy that is sent to the NFMF.

A method is implemented by an event collector to utilize feedback from an event handler to prioritize event forwarding to the event handler. The method includes receiving feedback from the event handler in response to a successful match-action in a rules engine, the feedback including a derived condition which is a generalized version of a condition stored in the match part of a rule, determining whether the derived condition is stored in an event prioritizer, and storing the derived condition in the event prioritizer with initial expiration timer and hit counter, in response to the derived condition not being present in the event prioritizer, and updating a hit counter and expiration timer of the derived condition in the event prioritizer, in response to the derived condition being present in the event prioritizer.

The invention relates to a network traffic lightweight security detection method based on eBPF and zero-trust policy orchestration, and belongs to the fields of cloud computing, container security, network function virtualization and zero-trust architecture. The method comprises the following steps of node initialization, eBPF byte code addition and verification, zero copy annular buffer area construction, feature extraction and real-time monitoring, based on the compression decision tree, efficient security detection, event reporting and compression, zero-trust strategy engine, zero-trust strategy arrangement and issuing, remote measurement and zero-trust alarm, and adaptive learning and model updating are realized. According to the invention, fine-grained control of east-west and north-south network traffic in a container cluster is realized, resource overhead in a security filtering process is reduced, influence on service performance is reduced, compatibility of the scheme to different kernel versions and different container arrangement platforms is enhanced, and high requirements of enterprises for container network security are met.

One example method includes receiving a request to scan a file, storing the file, performing a vulnerability scan on the file, based on an outcome of the vulnerability scan, making a copy of the file, scanning the copy of the file, when the scanning identifies an attack pattern, applying a rule concerning the attack pattern, and performing a remedial action specified by the rule with respect to the file and / or with respect to a device that handled the file.

A method of providing at least one Network Service (NS) to a Network Slice (NwS) during a design phase of the NwS based on a NwS Forwarding Graph (NwS FG) which comprises Network Functions (NFs) at a functional level, Virtual Network Functions (VNFs) and / or Physical Network Functions (PNFs) at a resource level, and embedding information for embedding the VNFs and / or PNFs (VNFs / PNFs) across more than one domain. The method determines, based on the NwS FG, Network Slice Subnets (NwSSs) for the NwS, wherein NFs comprising the NwS FG are grouped into respective groups to be managed by a respective NwSS manager. The method further maps the NwSSs to NSs based on Network Function Virtualization Orchestrator (NFVO) assigned to a domain, wherein at least some of the VNFs / PNFs managed by respective NFVOs are mapped to sites across the multiple domains determined by the embedding information.

A wireless communication method is disclosed. The method includes performing communication between a first network function virtualization (NFV) system and a second NFV system through a declarative design management (DDM) function, where the DDM function communicates with the first NFV system through a first NFV interface protocol, and the DDM function communicates with the second NFV system through a second NFV interface protocol different from the first NFV interface protocol.

This invention provides an information processing method, apparatus, and related equipment applied to a Network Functions Virtualization (NFV) platform. The platform includes multiple network elements, each comprising a Fast Path (FP) module and a Distributed Slow Path (DSP) module. The method includes: when a first network element receives a request message and no session information corresponding to the request message is found in the first network element's fast forwarding table, the DSP module of the first network element obtains the session information corresponding to the request message; the FP module of the first network element forwards the message information corresponding to the request message based on the session information. This reduces the forwarding paths during data transmission, improves information forwarding efficiency, and reduces network connection latency.

Disclosed are a communication method and apparatus for a plurality of administrative domains, where the plurality of administrative domains include a composite network service (NS) administrative domain and a nested network service (NS) administrative domain, and the composite NS administrative domain and the nested NS administrative domain respectively include a composite network functions virtualization orchestrator (NFVO) and a nested NFVO. According to the communication method and apparatus for a plurality of administrative domains, the composite NFVO sends a subscription request message for analysis and prediction information of a nested NS instance to the nested NFVO, and performs a corresponding management operation based on received analysis and prediction information.

The invention relates to a dynamic slice management method and device based on multi-level labels, and belongs to the technical field of network management. When a vehicle is powered on and attempts to be connected with a network, a vehicle terminal sends a connection request message to the network, and a strategy control engine detects the request message that the vehicle terminal is connected with the network and determines a priority label of a brand model node corresponding to the vehicle, a group member identity priority label and a priority label corresponding to an operator service level; determining a guarantee level according to the three priority labels, converting the guarantee level into a network slice identifier, sending a resource allocation instruction to a network slice manager, and scheduling a service flow of the vehicle to a corresponding network slice instance; and after receiving the resource allocation instruction, the network slice manager configures a data forwarding path through the software defined network controller, and allocates virtualized resources through the network function virtualization infrastructure manager. According to the invention, the network resource utilization efficiency is obviously improved.

The present invention provides a VNF instantiation method and apparatus for a network cloud, and relates to the technical field of network cloud virtualization, the method is applied to a network function virtualization orchestrator NFVO, and comprises: when a first VNF virtual network function instantiation request sent by user equipment (UE) is obtained and a virtual machine is created for a VNF of the network cloud by a virtual resource manager VIM, the VNF instantiation request is sent to the VNF of the network cloud; according to the resource fragmentation data of the available area AZ where the VNF is located and the real-time resource occupation data of the VNF, whether VNF resource adjustment needs to be performed on the virtual machine is judged; if the VNF resource adjustment needs to be carried out on the virtual machine, sending a first resource adjustment request to the VNFM; obtaining a resource adjustment result sent by the VNFM; and under the condition that the VNF instantiation completion result sent by the VNFM is obtained, sending the VNF instantiation completion result to the UE, and according to the scheme of the invention, in the VNF instantiation process of the network cloud, VNF resource adjustment can be realized.

The invention discloses a core network service chain rapid reconstruction method based on network function virtualization, and relates to the technical field of communication network data transmission and network service orchestration, and the method comprises the steps: obtaining a cabinet loop differential pressure sequence and an error correction counting sequence where each candidate takeover host is located, and determining a reconstruction observation window and a reference window based on an orchestration event timestamp; respectively calculating a differential pressure ripple index and an error correction peak cluster index according to the change condition of the corresponding sequence; calculating the physical interference risk quantity based on the indexes and the synchronization intensity of the two sequences in the observation window; and finally, carrying out risk scoring on the candidate service chains according to the risk quantity, selecting the service chain with the lowest score to execute flow cutting, and outputting a reconstruction posterior consistency quantity. According to the method, cross-layer interference between short-time instability of a physical layer and communication errors can be quantified, hardware transient fluctuation is prevented from being misjudged as software overload, and wrong drop point selection and reconstruction oscillation are prevented.

According to one aspect of the present invention there is provided a system, method, and computer program product for recovering from a network failure in a communication network using network function virtualization (NFV-based network), the method including: selecting a first network component of the NFV-based network, detecting at least one probable failure of the first network component, selecting a second network component to be used for replacing the instance of the VNF in the first network component prior to a failure of the first network component, and securing at least one resource of the selected second network component for the other instance of the VNF and maintaining, in the selected second network component, an updated copy of data associated with the instance of the VNF in the first network component.

This invention discloses an OLT virtualization system based on SDN technology, belonging to the field of network communication technology. The technical problem to be solved by this invention is the resource shortage, planning difficulties, and mutual interference of capacity improvement in actual deployment. The technical solution adopted is as follows: The OLT virtualization system adopts a control separation architecture, which virtualizes the network functions of the control plane and control function layer. Real-time business intelligent processing units and non-real-time business intelligent processing units are deployed in the cloud on the edge host where the network virtualization is located. The non-real-time business intelligent processing units are deployed on the central cloud. Business isolation is performed by classifying the real-time type of business, forming a unified and open control platform based on cloud edge facilities.

The invention relates to the technical field of cloud computing and network function virtualization, can be applied to the field of medical treatment and finance, and discloses a cloud network service intelligent scheduling method, system and device and a storage medium. Collecting multi-dimensional state data of the cloud network service according to a preset period to construct a time sequence data stream, and predicting future state prediction data of the cloud network service by adopting a pre-trained time sequence prediction model, and according to the multi-dimensional state data at the current moment, the future state prediction data and the intention label, determining the health degree of a source physical host bearing the cloud network service and each candidate physical host in the domain label range, and when a migration triggering condition is met, thermally migrating the cloud network service to the healthiest target physical host in the domain label range. The normal form transformation from passive fault response to active risk avoidance is realized, and the availability, the resource utilization rate and the operation and maintenance automation level of cloud network services are remarkably improved.

A container network controller (CNC) in a Network Functions Virtualization (NFV) system may be used to manage and control services for complex container networks to establish an autonomous network for container networks. These management or control services include an intention analysis service, a container network life-cycle management function, operations and maintenance (O&M) data processing service, and / or a policy creation function.

The invention provides a disaster recovery method and device of a core network management system, equipment, a medium and a product, and the method comprises the steps: determining whether backup equipment of main equipment operates normally or not after the main equipment in the core network management system is detected to be abnormal; wherein the main equipment comprises a main network function virtualization orchestrator NFVO or a main virtualization network function manager VNFM in the network management system of the core network; when it is determined that the backup device operates normally, a state detection request is sent to the backup device, and state judgment information returned by the backup device is obtained; and under the condition of determining that the main equipment cannot execute the resource operation request based on the state judgment information, executing the resource operation request through the switched backup equipment.

A virtualized network function (VNF) of a network function virtualization (NFV) link level architecture includes a management plane function (MPF) to map a logical interface as a virtual interface in a control plane function (CPF) of the VNF. The MPF maps a logical resource of the NFV virtualization link level architecture as a shadow resource on one or more data plane functions (DPFs) of the VNF, wherein a virtual link is formed by the logical interface, the shadow resource, and the virtual interface. One of the DPFs receives a packet over the virtual link from a switch and classifies a type of the packet. In response to the packet type being a data packet, the DPF aggregates the packet with other data packets to form aggregated data packets and sends the aggregated data packets to the switch.

A network node according to the present invention is provided with: a reception unit that receives information indicating a priority level relating to a network function virtualization component (VNFC), and a transmission unit that transmits the priority level information to a network function virtualization component (VNFC), and that transmits the priority level information to the network function virtualization component (VNFC), the reception unit being configured so as to transmit the priority level information to the network function virtualization component (VNFC); and a control unit that determines a VNFC that can be stopped on the basis of the priority level, and that terminates the VNFC that can be stopped and repairs a certain VNFC when a failure has occurred in the certain VNFC.

The invention discloses a network element resource allocation method and system for a power IMS (IP Multimedia Subsystem) virtualization core network, and belongs to the technical field of power IMS network function virtualization. The method comprises the following steps: S1, establishing a hybrid networking model of a core network, and determining simplest node configuration and corresponding network element nodes of the core network based on the model; s2, dividing the network element nodes into key network elements and non-key network elements, and configuring single node redundancy for the network element nodes based on the division and a preset redundancy coefficient; and S3, configuring a synchronizable instance for the network element node configured with the single-node redundancy so as to form double-node redundancy configuration of the core network. According to the method, a resource configuration system from simplest configuration to multiple redundancy is constructed step by step, so that efficient flow management and user cutover can be realized, and the service persistence and the overall robustness of the system are effectively optimized.