52 results about "Network Functions Virtualization" patented technology

The invention relates to the technical field of Internet of Things communication transmission, and discloses an Internet of Things data intelligent transmission method and system, and the method comprises the steps: abstracting the performance of a multi-source heterogeneous link through a software defined network controller, dynamically generating a slice template, carrying out the traffic marking and priority scheduling, constructing a multi-path target constraint optimization model, and carrying out the optimization of the multi-path target constraint optimization model. And in combination with a network function virtualization mechanism, multi-level intelligent transmission is implemented at edge nodes, and a final transmission control instruction is generated. In the prior art, in a heterogeneous multi-network environment, low-delay, high-reliability and high-bandwidth transmission cannot be guaranteed at the same time, and especially in an industrial automation scene, technical problems that a control instruction is easy to delay and a monitoring data bandwidth is limited exist. According to the invention, the overall transmission reliability and bandwidth utilization efficiency are improved through the dynamic priority traffic scheduling based on network slices, the multipath reliability product model and the dynamic batch processing and progressive compression technology based on real-time link feedback.

Some embodiments of this disclosure include systems, apparatuses, methods, and computer-readable media for use in a wireless network for deploying User Plane Function (UPF) and edge computing virtualized network functions (VNF). For example, some embodiments are directed to a network management system. The network management system includes processor circuitry. The processor circuitry can be configured to transmit a request to an edge computing management system to instantiate an edge computing virtualized network function (VNF). The request can include an identifier of a Network Service (NS) where a User Plane Function (UPF) VNF supporting the edge computing VNF is located. The processor circuitry can be further configured to receive, from the edge computing management system, a response indicating that the edge computing VNF is instantiated.

A virtualized network function (VNF) of a network function virtualization (NFV) link level architecture includes a management plane function (MPF) to map a logical interface as a virtual interface in a control plane function (CPF) of the VNF. The MPF maps a logical resource of the NFV virtualization link level architecture as a shadow resource on one or more data plane functions (DPFs) of the VNF, wherein a virtual link is formed by the logical interface, the shadow resource, and the virtual interface. One of the DPFs receives a packet over the virtual link from a switch and classifies a type of the packet. In response to the packet type being a data packet, the DPF aggregates the packet with other data packets to form aggregated data packets and sends the aggregated data packets to the switch.

Techniques for tenant-driven dynamic resource allocation in a network function virtualization infrastructure (NFVI). In one example, an orchestration system is operated by a data center provider of a data center, and the orchestration system includes processing circuitry coupled to a memory; logic stored in the memory and configured to be executed by the processing circuitry, wherein the logic is operable to: compute an aggregate bandwidth for a plurality of streams associated with tenants of a datacenter provider and processed by virtual network functions assigned to the tenants executing on servers of the datacenter; and modifying the allocation of computing resources for the server executing the virtual network function based on the aggregated bandwidth.

This application relates to the field of NFV technologies, and discloses an instantiation method and apparatus for a virtualised network function VNF. The method includes: A VNFM receives a first instantiation request from an NFVO, where the first instantiation request includes configuration information of a first virtual connection point of a VNF, and the configuration information of the first virtual connection point includes configuration information of K microservices of an NF corresponding to the VNF; further determines configuration information of a first ingress container object corresponding to the first virtual connection point, where the first ingress container object configured to provide an access ingress of the K microservices; and sends the configuration information of the first ingress container object to a CISM, where the configuration information of the first ingress container object is for creating the first ingress container object. In this way, an ingress container object can be created for a microservice. Because an access address of the microservice defined by using the ingress container object may be a domain name (for example, an fqdn), an access requirement of the microservice can be met.

Various aspects of the present disclosure relate to techniques for detecting anomalous policies in a virtualized network. A network entity is configured to receive policy information associated with a policy for a network function virtualization (NFV)-enabled wireless network; analyze the policy information using a machine learning model to generate results, wherein the machine learning model is trained to identify anomalies in one or more policies; and transmit the results of the machine learning model analysis, the results comprising an indication of whether the policy comprises an anomaly.

The embodiment of the invention provides an IP address statistical system and method, electronic equipment, a medium and a program product, and relates to the field of wireless communication. The system comprises a first service module used for receiving IP address demand basic information of each network element deployed in a network function virtualization (NFV) network cloud system platform; the second service module is used for receiving docking configuration information of each network element of the NFV network cloud and an external system; the third service module is used for receiving resource pool deployment parameters; the resource pool deployment parameter is used for indicating the actual deployment scale of each network element under different networking types in a single resource pool, and the actual deployment scale at least comprises the actual deployment number of each network element in the single resource pool; and the fourth service module is used for counting the number of IPv4 and / or IPv6 addresses of each NFV network cloud resource pool based on the IP address demand basic information of each network element, the docking configuration information and the resource pool deployment parameters.

The invention provides a data cache recovery method and system, relates to the technical field of computer networks, and is applied to a cache platform in a network function virtualization system. And when the service process works normally, a small number of data packets are stored as preparation for service process recovery in a covering storage mode through the shared annular queue. And when the service process is abnormal, caching the data packets to flow into the service process through the linear queue, and determining the first data packet which does not successfully pass through the service process. And after the service process is recovered, all cached data packets are recovered in time. Different cache mechanisms are adopted through normal service flow and abnormal service flow, the communication bandwidth and the processing efficiency of the shunt under the normal service flow condition are guaranteed, the method has the advantage of small cache overhead, all data packets can be accurately recovered after abnormal processing, and the service flow safety is improved. And the data packet can pass through the service process completely and reasonably under any condition, so that the purpose that the user does not perceive the data packet is achieved.

The invention provides a DCN simulation method, the DCN is used for monitoring an optical transport network, and the method comprises the steps: carrying out the simulation of a DCN interface part through behavior simulation, and obtaining an interface network model; the DCN interface part comprises the optical transport network and a target connection structure, and the target connection structure is a structure connected with the optical transport network in the DCN; simulating a DCN forwarding part through network function virtualization to obtain a forwarding network model; the DCN forwarding part comprises a link used for forwarding a data packet in the DCN. The invention further provides data communication network simulation equipment, a computer readable medium and a computer program product.

The application provides a blockchain security capability abstraction system, comprising a smart contract subset module, a consensus subset module, a peer-to-peer (P2P) subset module, a state indication module and a blockchain ledger module, wherein the smart contract subset module is used for encapsulating script code and a smart contract of the blockchain; the consensus subset module is used for making the dispersed nodes in the blockchain reach a consensus on the validity of block data and encapsulating a consensus algorithm in the blockchain; the P2P subset module is used for transmitting transaction data and block data between the nodes in the blockchain; and the state indication module is used for obtaining abnormal state information output by the blockchain. The security capability of the blockchain technology is abstracted, and a tamper-proof and traceable security protection method is provided for a service flow through software-defined security (SDS) and network function virtualization (NFV) technology.

The embodiment of the invention provides a network function virtualization network element control method and device, equipment and a medium. The method comprises the following steps: acquiring a network element host list and a version list; in response to a control instruction for a network function virtualization network element, determining a to-be-controlled network function virtualization network element object from the network element host list and / or the version list according to the control instruction; determining a task type of the control instruction; and under the condition that the task type is a script command task, determining a script to be executed according to the control instruction. Under the condition that the task type is a label task, determining a script to be executed according to the control instruction; and executing the script to be executed or the script to be executed on the network function virtualization network element object to be controlled. According to the embodiment of the invention, the operation and maintenance flexibility and efficiency of the network function virtualization network element are improved.

The invention provides a communication guarantee method and device for an open-pit mine field, electronic equipment and a storage medium, and relates to the technical field of communication, a physical double-route Ethernet ring network architecture which contains main and standby routes and keeps a preset distance is constructed, and a single-board-level redundancy protection mechanism is configured for a baseband processing unit and a core network server in the architecture, so that the communication guarantee capability of the open-pit mine field is improved. In addition, fault detection and path reconstruction are executed based on a preset protection protocol and a software defined network controller, and meanwhile, a base station dynamic migration operation which triggers a migration process based on environment monitoring data and realizes base station configuration deployment and service switching through a network function virtualization technology is executed. The problems that in the prior art, due to the fact that single routing topology is adopted, key equipment lacks single-board-level redundancy, the fault detection and path recovery efficiency is low, and a base station depends on manual migration, the single-point fault risk is high, the fault recovery time is long, and the mining pit propelling dynamic coverage requirement is difficult to adapt can be solved.

Systems and methods for zero-copy forwarding for network function virtualization (NFV). An example method comprises: receiving, by a supervisor of a host computer system, a definition of a packet filter originated by a virtual execution environment running on the host computer system; responsive to validating the packet filter, associating the packet filter with a vNIC of the virtual execution environment; receiving, by the supervisor, a network packet originated by the vNIC; and responsive to matching the network packet to a network connection specified by the packet filter, causing the packet filter to forward the network packet via the network connection.

Embodiments of this application disclose a method for creating a network service NS and a related apparatus. The method includes: A management device sends a network service descriptor NSD query request to a network functions virtualization orchestrator NFVO, and then receives information about an NSD from the NFVO. Because the information about the NSD includes information about a network service deployment flavour, the management device may determine an instantiation parameter based on the information about the network service deployment flavour, to request the NFVO to create an NS instance, and a staff does not need to input the instantiation parameter by using the NFVO. In this way, operation complexity of deploying the NS instance by using the management device is reduced, and an error caused by manually inputting the instantiation parameter is avoided.

Embodiments of the present application disclose an information processing method and device, network equipment and a storage medium. The method comprises: a network function virtualization orchestrator (NFVO) determining a first operation to be performed based on a first information record table and a second information record table; the first information record table is used to record first related information of each policy created in a resource pool and association relationship information of each policy and a corresponding network element instance; the second information record table is used to record second related information of each network element instance in the resource pool; the first operation is used to manage the association relationship of the policy and the corresponding network element instance of the policy in the resource pool; the first information record table is generated based on an obtained policy file, and the second information record table is generated based on a change operation of the network element instance; a first type of configuration parameter corresponding to the first operation is sent to a virtual network function manager (VNFM) through a first type of interface corresponding to the first operation; wherein the first type of configuration parameter is used for the VNFM to perform the first operation.

A method and device for deploying a network function virtualization infrastructure, the method comprising: creating a resource pool hardware description file according to a predefined unified resource pool data model, the unified resource pool data model including all software and hardware information of the resource pool and a unified data format in which the software and hardware information is presented; generating a description file of a target NFVI according to design requirements of a user-defined target NFVI resource pool; generating a unified infrastructure description file for the target NFVI that conforms to the unified resource pool data model based on the resource pool hardware description file and the description file of the target NFVI; calling a deployment tool for the network function virtualization infrastructure, and using the unified infrastructure description file of the target NFVI as input to the deployment tool to deploy the target NFVI. The present invention can improve the deployment efficiency of the network function virtualization infrastructure and reduce manual interaction.

The application provides a data cache recovery method and system, relates to the technical field of computer networks, and is applied to a cache platform in a network function virtualization system. When a service flow normally works, a small amount of data packets are saved in a covering and saving mode through a common ring queue as preparation for service flow recovery. When the service flow is abnormal, data packets to be flowed into the service flow are cached through a linear queue, and the first data packet that fails to successfully pass through the service flow is determined. All cached data packets are recovered in time after the service flow is recovered. Different cache mechanisms are adopted for the normal service flow and the abnormal service flow, the communication bandwidth and processing efficiency of the service flow under the normal condition are guaranteed, the cache overhead is small, all data packets can be accurately recovered after abnormal processing, data packets can be completely and reasonably passed through the service flow under any condition, and therefore, the purpose of user non-perception is achieved.

The invention provides a network flexible slicing and dynamic optimization method, system, device and medium, and relates to the field of network function virtualization, and the method comprises the steps: obtaining a resource utilization rate and an energy consumption level of a network in an NFV environment as a resource-energy efficiency parameter, and taking resource-energy efficiency maximization as a target function, carrying out VNF deployment problem modeling to obtain a VNF deployment model; constructing a preference list of VNFs and nodes in a network flexible slice according to the VNF deployment model; a preset matching algorithm is adopted, matching is carried out according to the preference list of the nodes and the VNFs, and each VNF is deployed on the optimal node; and monitoring the load change of the network flexible slice in real time, and dynamically scaling the network scale according to the load change. According to the method, the change of the network load is dynamically sensed, the network scale is flexibly scaled according to the real-time load condition, and meanwhile, the deployment position of the VNF is reasonably arranged, so that efficient utilization of network resources and optimization of energy consumption are realized.

Embodiments of methods and apparatus for fine-grained isolation in a CN domain for network slicing are disclosed. A method for isolation in a CN domain for network slicing includes receiving a slice isolation policy and establishing a CN NSS isolation policy based on the slice isolation policy. When the CN NSS isolation policy includes a network resource isolation policy, the network resource isolation policy is mapped to a network resource allocation policy, where a portion related to physical resources is sent to a network function management function (NFMF) and a portion related to virtual resources is sent to a network function virtualization management and orchestration function. When the NSS isolation policy includes an application level isolation policy, the application level isolation policy is mapped to an application level policy that is sent to the NFMF.

The invention relates to the technical field of virtualization resource management, and particularly provides a railway Beidou application service cloud platform based on virtualization and resource management, which comprises a computing virtual module, a network virtual module, an authentication module, an equipment management module, a container management module, an arrangement module and a storage module. Network function virtualization is achieved through the NFV technology, virtual network slices are provided, and the network isolation requirements of multiple tenants are met; the container management module is integrated with other core services, so that rapid popularization and batch management of containers are realized; and a cloud native application low-code development platform is provided, so that quick and deep customization of service development is realized, and the development efficiency and the cooperation efficiency are improved. According to the method, virtualization and centralized scheduling management of computing, storage and network resources are covered, and the limitation of a traditional network virtualization technology in the cloud computing era is solved.

A method is implemented by an event collector to utilize feedback from an event handler to prioritize event forwarding to the event handler. The method includes receiving feedback from the event handler in response to a successful match-action in a rules engine, the feedback including a derived condition which is a generalized version of a condition stored in the match part of a rule, determining whether the derived condition is stored in an event prioritizer, and storing the derived condition in the event prioritizer with initial expiration timer and hit counter, in response to the derived condition not being present in the event prioritizer, and updating a hit counter and expiration timer of the derived condition in the event prioritizer, in response to the derived condition being present in the event prioritizer.

The invention relates to a network traffic lightweight security detection method based on eBPF and zero-trust policy orchestration, and belongs to the fields of cloud computing, container security, network function virtualization and zero-trust architecture. The method comprises the following steps of node initialization, eBPF byte code addition and verification, zero copy annular buffer area construction, feature extraction and real-time monitoring, based on the compression decision tree, efficient security detection, event reporting and compression, zero-trust strategy engine, zero-trust strategy arrangement and issuing, remote measurement and zero-trust alarm, and adaptive learning and model updating are realized. According to the invention, fine-grained control of east-west and north-south network traffic in a container cluster is realized, resource overhead in a security filtering process is reduced, influence on service performance is reduced, compatibility of the scheme to different kernel versions and different container arrangement platforms is enhanced, and high requirements of enterprises for container network security are met.

One example method includes receiving a request to scan a file, storing the file, performing a vulnerability scan on the file, based on an outcome of the vulnerability scan, making a copy of the file, scanning the copy of the file, when the scanning identifies an attack pattern, applying a rule concerning the attack pattern, and performing a remedial action specified by the rule with respect to the file and / or with respect to a device that handled the file.

A method of providing at least one Network Service (NS) to a Network Slice (NwS) during a design phase of the NwS based on a NwS Forwarding Graph (NwS FG) which comprises Network Functions (NFs) at a functional level, Virtual Network Functions (VNFs) and / or Physical Network Functions (PNFs) at a resource level, and embedding information for embedding the VNFs and / or PNFs (VNFs / PNFs) across more than one domain. The method determines, based on the NwS FG, Network Slice Subnets (NwSSs) for the NwS, wherein NFs comprising the NwS FG are grouped into respective groups to be managed by a respective NwSS manager. The method further maps the NwSSs to NSs based on Network Function Virtualization Orchestrator (NFVO) assigned to a domain, wherein at least some of the VNFs / PNFs managed by respective NFVOs are mapped to sites across the multiple domains determined by the embedding information.

A wireless communication method is disclosed. The method includes performing communication between a first network function virtualization (NFV) system and a second NFV system through a declarative design management (DDM) function, where the DDM function communicates with the first NFV system through a first NFV interface protocol, and the DDM function communicates with the second NFV system through a second NFV interface protocol different from the first NFV interface protocol.

This invention provides an information processing method, apparatus, and related equipment applied to a Network Functions Virtualization (NFV) platform. The platform includes multiple network elements, each comprising a Fast Path (FP) module and a Distributed Slow Path (DSP) module. The method includes: when a first network element receives a request message and no session information corresponding to the request message is found in the first network element's fast forwarding table, the DSP module of the first network element obtains the session information corresponding to the request message; the FP module of the first network element forwards the message information corresponding to the request message based on the session information. This reduces the forwarding paths during data transmission, improves information forwarding efficiency, and reduces network connection latency.

Disclosed are a communication method and apparatus for a plurality of administrative domains, where the plurality of administrative domains include a composite network service (NS) administrative domain and a nested network service (NS) administrative domain, and the composite NS administrative domain and the nested NS administrative domain respectively include a composite network functions virtualization orchestrator (NFVO) and a nested NFVO. According to the communication method and apparatus for a plurality of administrative domains, the composite NFVO sends a subscription request message for analysis and prediction information of a nested NS instance to the nested NFVO, and performs a corresponding management operation based on received analysis and prediction information.

An embodiment of the present application provides a message forwarding method, a forwarding layer device, a system, an electronic device and a storage medium. The message forwarding method is applied to the forwarding layer of a network function virtualization forwarding system. The method includes: receiving a message to be forwarded; parsing the header information encapsulated by the network virtualization protocol in the message to be forwarded, and identifying the priority information included in the header information; if the header information does not include the priority information, marking the message to be forwarded with the priority information based on the network virtualization protocol by a first message marker, so as to forward the message to be forwarded according to the priority information.

A reliable network function virtualization (rVNF) system includes a virtualized network function (VNF) application instance that includes a plurality of physical VNF instances. A load balancer provides an interface between a client and the VNF application instance. A load balancer interface facilitates delivery of packets related to a particular user context to the same physical VNF instance. A communication interface facilitates communication between the client and the VNF application instance. Application storage stores session data associated with the VNF application instance.

The invention relates to a dynamic slice management method and device based on multi-level labels, and belongs to the technical field of network management. When a vehicle is powered on and attempts to be connected with a network, a vehicle terminal sends a connection request message to the network, and a strategy control engine detects the request message that the vehicle terminal is connected with the network and determines a priority label of a brand model node corresponding to the vehicle, a group member identity priority label and a priority label corresponding to an operator service level; determining a guarantee level according to the three priority labels, converting the guarantee level into a network slice identifier, sending a resource allocation instruction to a network slice manager, and scheduling a service flow of the vehicle to a corresponding network slice instance; and after receiving the resource allocation instruction, the network slice manager configures a data forwarding path through the software defined network controller, and allocates virtualized resources through the network function virtualization infrastructure manager. According to the invention, the network resource utilization efficiency is obviously improved.