40 results about "Network service header" patented technology

A database is populated with geographic locations for network devices by providing a node on a network and making a connection into a network service provider (NSP) point of presence (POP) to obtain a connection to the network via the NSP. A message is then transmitted to the node over the network connection obtained from the NSP. The message is received at the node and a source network identifier is extracted from the message. The source network identifier is then associated with a known geographic location for the POP in a database. The foregoing steps are then repeated for multiple different POPs. Also, a database is populated with geographic locations for network devices by providing a node on a network and making a connection into a network service provider (NSP) point of presence (POP) to obtain a connection to the network via the NSP. A message is then transmitted to the node over the network connection obtained from the NSP. The message is received at the node and a source network identifier is extracted from the message. The route over the network between the node and the POP is then probed to obtain network identifiers for routers along the route. The foregoing steps are then repeated for multiple different POPs.

The invention discloses a method and a system for combining redirected download request and agency service to accelerate network service. On one hand, the load of a proxy server can be reduced, and on the other hand, the resource downloading speed is more remarkably improved as long as a cache server is arranged at a good position. The invention adopts the technical scheme that the method comprises the following steps that: a client side collects a URL (Uniform Resource Locator) of the network service and the protocol port range of real-time data; the client side grabs a corresponding Http Get request according to the collected URL and also grabs the real-time data of the network service according to the protocol port range; the client side redirects the grabbed Http Get request to the cache server; the cache server is deployed into the structure that if resources requested by the client side exist, the resources are directly sent back to the client side; if the resources requested by the client side do not exist, a request is initiated to an original address requested by the client side, is cached on the machine and is then sent back to the client end; and the client side carries out agency service operation on the grabbed real-time data of the network service and is forwarded through the proxy server.

The invention discloses a network access behavior-based access control method and system for a wireless local area network. The method comprises the following steps: a network side acquires information of data packets of different network service types in a BSS (Base Station Subsystem) according to a network service type; the network side establishes information of a network flow statistical table of the BSS according to the acquired information of the data packets of different network service types, wherein the information of the network flow statistical table comprises source sites, destination sites, service types, network access behavior durations and network access behavior occurring time of the data packets; and the network side generates information of the relation among the network service type, corresponding time and corresponding network data flow of each site in the BSS according to the established information of the network statistical table of the BSS, and performs access control according to the generated information of the relation among the sites in the BSS. By applying the method and the system, the problem of effective distribution of network resources in the wireless local area network is solved.

A method for applying network services related to geographic location including receiving regions within a map and receiving geo-service definitions for the regions. The method includes determining a subscriber's region and determining information related to the subscriber's traffic flow. The method then applies geo-service definitions based on the subscriber's region and the information related to the traffic flow. A system for applying network services related to geographic location having a location detection module for detecting a subscriber's location and a region detection module for determining the subscriber's region within a map based on the subscriber's location. The system further including a geo-service definition and enablement module for defining geo-service definitions and actions; and a subscriber detection and traffic management module adapted to receive the subscriber's region and apply geo-service definitions to the subscriber traffic flow based in part on the region of the subscriber.

Virtual machine environments are provided in the switches that form a network, with the virtual machines executing network services previously performed by dedicated appliances. The virtual machines can be executed on a single multi-core processor in combination with normal switch functions or on dedicated services processor boards. Packet processors analyze incoming packets and add a services tag containing services entries to any packets. Each switch reviews the services tag and performs any network services resident on that switch. This allows services to be deployed at the optimal locations in the network. The network services may be deployed by use of drag and drop operations. A topology view is presented, along with network services that may be deployed. Services may be selected and dragged to a single switch or multiple switches. The management tool deploys the network services software, with virtual machines being instantiated on the switches as needed.

An example method embodiment for networking includes managing, by a network controller, network services for one or more network devices connected to the network controller. Managing network services includes receiving a packet in a traffic flow from a network device. The network device is one of the one or more network devices connected to the network controller. Managing network services further includes determining applicable services for the packet, transmitting the packet to a service provider in accordance with the applicable services for the packet, receiving, from the service provider, service results corresponding to the packet, and creating a forwarding entry providing instructions for handling the traffic flow in a service path table at the network device in accordance with the service results corresponding to the packet.

The embodiment of the invention discloses a method of selecting a network function for data forwarding and a service function forward (SFF), so as to realize hot backup of a service chaining network function or realizing load balancing. The method of the embodiment of the invention comprises steps: the SFF receives a data packet, according to the load amount of a local network function entity associated with the SFF or indication information of whether to operate normally, a decision is made to whether to forward the data packet to the local network function entity or to another SFF, and a network function entity associated with the another SFF is a hot-backup network function entity for the local network function entity or a load-balancing network function entity. Thus, a path does not need to be added for the network function entity of the same type for realizing backup, management on the paths and NSHs (Network Service Header) can be reduced, the complexity is reduced, and an effective load balancing mechanism is provided for SFC (Service Function Chaining) in a distributed architecture.

Disclosed is a network service system including a terminal selectively providing packets of an information centric networking (ICN) protocol and an Internet protocol, a smart digital unit (DU) identifying whether the packets provided from the terminal correspond to an ICN protocol packet or an Internet protocol packet to transfer the packets through different paths depending on a type of the identified packet, and an ICN node receiving the ICN protocol packet from the smart DU to provide contents.

The invention discloses a building method and system for a network service path. The method comprises the steps of receiving a service request of a user and analyzing the service request, obtaining the resource requirements of service nodes and service links in this service request of the user, then calculating status information of each node and each link in a network topology, generating a service path mapping scheme according to the result obtained through calculation, and finally utilizing the generated service path mapping scheme for building the service path. According to the building method for the network service path, the service nodes and the service links can be dynamically determined according to the information of the service request of the user, the resources of the nodes and the links on the finally-generated service path can be better fit in with the requirement of the user, and transmission efficiency is also higher.

Disclosed herein is technology for formal verification of a network service chain in a software-defined networking environment. In an embodiment, a verification support apparatus for formal verification of a network service chain includes a Network Service Chain (NSC) descriptor information reception unit for receiving NSC descriptor information from an application program. An NSC configuration unit configures an NSC of multiple network services using the received NSC descriptor information. A verification request unit requests formal verification of each network service in the configured NSC from a formal verification unit.

A system leveraging the authentication control plane of a communications network to influence the associated Network Service header (NSH) values on a per subscriber packet basis; thus presenting a subscriber aware service chain header on which influences the processing of virtualized network function (VNF). This system implements vendor specific attributes (VSA) within the authentication provider platform to create an association of subscriber identity which may include MAC address, MAC and IP address as a tuple, circuit identifier string, realm based authentication data, IMSI, in part or in addition to leveraging DHCP Relay information sub options that may be present, which when processed inherit one or multiple vendor specific attributes from the authentication platform. These VSA values, each no greater than 2 bytes define the payload headers the participating subscriber gateway will shim to its layer 2 payload for processing as a Service Chain through one or multiple virtual network functions located elsewhere in the network.

The invention discloses a method and system for acquiring OAM information, and a computer readable storage medium, and relates to the technical field of data communication. The method includes that aservice function (SF) node receives a first service message which includes a network service header (NSH) message header which carries an operation administration and maintenance (OAM) information identifier and a programmable instruction indicating the OAM information to be acquired; the SF node, in accordance with the programmable instruction, adds a part of the OAM information to the first service message to form a second service message; and the OAM information in the second service message is acquired from the SF node according to the OAM information identifier. The method can improve theaccuracy of the acquired OAM information.

In one embodiment, a system, method, and computer program product are disclosed for authenticating a packet received from a client node, storing the results of the authentication in a cache memory of a service classifier node, and including the results of the authentication in a network service header of a packet before forwarding the packet to downstream service nodes. In one embodiment, the initial authentication is performed in conjunction with an authentication node.

The present invention discloses a network service searching method based on a P2P network double-layer ring-shaped routing structure, and belongs to the computer network service retrieval field. The present invention aims to resolve a technical problem that network service searching efficiency and accuracy are significantly reduced because a conventional searching manner is only limited to keyword matching. A used technical solution is: the method organizes network service registered nodes based on a double-layer ring-shaped routing structure P2P network, integrates with difference of node capabilities in an actual network, fully uses a dynamic mechanism of searching and positioning nodes in the P2P network, and clusters the registered nodes by using a service field ontology concept mapping range according to types of services provided by the registered nodes, so that network service registration and discovery of a specific field is concentrated on a small quantity of continuous nodes of an outer ring in the double-layer ring-shaped structure.

The invention discloses a network service request compiling method, a network service request compiling device, and a controller, which are used to realize automatic compiling of a user network request in a NaaS (Network as a Service), and therefore a base is provided for network automatic deployment. The network service request compiling method comprises steps that a network service request submitted by a user is received, and according to a preset resolving rule, the network service request is resolved into a basic service unit group, and the basic service units of the basic service unit group are complied to acquire basic network elements; the compiling results of the basic service units of the basic service unit group are processed to acquire a basic network element group.

Disclosed is a network service control device and method in an environment in which a Software Defined Network (SDN) and a legacy network are connected to each other. The network service control device according to the present invention includes: a first network acquisition unit for acquiring first network information corresponding to the SDN; a second network information acquisition unit for acquiring second network information corresponding to the legacy network; a control message creation unit for creating a service control message for controlling a service of the network environment in which the SDN and the legacy network are connected to each other, based on at least one of the first network information and the second network information; and a service control unit for controlling the service of the network environment by transmitting the service control message to at least one network switch module included in the network environment.

The invention provides a data message processing method and device. The method comprises the steps that an enhanced context header type is acquired; the enhanced context header type is packaged in a network service header and the network service header is packaged in a data message; and the data message is transmitted along a service forwarding path. With application of the data message processing method and device, a context header type identifier can be further increased in an SFC network so as to enhance further identification for the context header on nodes supporting a service chain.

The invention discloses a method and system for managing distributed network services as well as control nodes. The method comprises the following steps: generating service data of a service in accordance with a service registration request, wherein the service data comprise service numbers; using a DHT (distributed Hash table) algorithm to determine a service management control node for managing the service in accordance with the service numbers; and sending the service data of the service to the service management control node, and managing the service by the service management control node. The technical scheme provided by the invention can be used to effectively realize service management of distributed networks and improve the service management and the access efficiency, and particularly is applied to managing multi-service applications in the distributed networks.

The embodiment of the invention provides a protection switching method. The protection switching method comprises the following steps of detecting whether a failure node exists or not, so as to obtain a detection result; if yes, transmitting fault information corresponding to the failure node to a controller in a manner of transmitting a message by NSH(network service header); and enabling the controller to complete the protection switching of the failure node according to a switching strategy.

The invention provides an SFC service data forwarding method and an SFC network system, and the method comprises the steps: enabling a classifier to receive a service message, and generating an SFC message based on the service message; enabling the classifier to generate a network service header NSH according to the forwarding path information of the service message, and fill the ToS field in theNSH with quality of service QoS information corresponding to the service message; and enabling the classifier to encapsulate the NSH in the SFC message, and forward the SFC message based on the QoS information carried by the ToS field. According to the method and the SFC network system provided by the invention, a QoS mechanism can be provided for the SFC network, so that the service flow of the service chain is forwarded according to the priority, the service quality of high-grade users is ensured, the operation capability is improved, and the system overhead is not increased.

The invention provides a message forwarding method and device, wherein a flow classification node determines a business chain which requires to save the specified information in the network service header NSH. When the data message is received, a first NSH is encapsulated for the data message and sent to a first node of the business chain if the data message matches the above business chain. The first NSH carries a retention mark, and the retention mark is used for indicting that a tail node of the business chain retains the specified information in the first NSH. And then the specified information in the first NSH is retained which is based on the retention mark in the first NSH encapsulated for the data message without cleaning the whole NSH when the tail node of the specified business chain receives the date message. The message forwarding method and device have the advantages that the business chain achieves that information is preserved on demand, and the purpose of business chain, business chain attribute information and data center transmission via the operation and maintenance tool dynamically displays the data message is satisfied.

A system leveraging the authentication control plane of a communications network to influence the associated Network Service header (NSH) values on a per subscriber packet basis; thus presenting a subscriber aware service chain header on which influences the processing of virtualized network function (VNF). This system implements vendor specific attributes (VSA) within the authentication provider platform to create an association of subscriber identity which may include MAC address, MAC and IP address as a tuple, circuit identifier string, realm based authentication data, IMSI, in part or in addition to leveraging DHCP Relay information sub options that may be present, which when processed inherit one or multiple vendor specific attributes from the authentication platform. These VSA values, each no greater than 2 bytes define the payload headers the participating subscriber gateway will shim to its layer 2 payload for processing as a Service Chain through one or multiple virtual network functions located elsewhere in the network.

The invention relates to the technical field of cloud host network utilization, and in particular to a method for performing cross-network service access based on a cloud host. The method for performing cross-network service access based on the cloud host disclosed by the invention comprises the following steps: 1, a cloud host with a fixed external network IP address is obtained; 2, a VPN and a network service access agent tool are set up on the cloud host; 3, the VPN user is configured to have a fixed dialup IP address, and a mapping relationship of the network service access agent is configured; 4, the VPN is dialed up on the host providing the cross-network service of the intranet, a fixed IP is directly distributed, and a fixed association is established with the cloud host; and 5, the external network accesses the intranet service through the cloud host, and jumps to the intranet service by the agent tool, thereby implementing the cross-network service access of the external network through the cloud host. The invention solves the problem that the intranet cannot provide the fixed external network service, and utilizes the low price characteristic of the service host to reduce the cost of obtaining the public network IP, which provides an efficient and feasible method for small-scale external network access services.

The invention discloses a device and a method to access network service by simplifying a service interface. The device comprises a transfer interpreter and the service interface. The service interface comprises an upload component, a download component and a command component. By utilizing the translator, the command and the data of a web page can be interpreted to the data of the upload component, the download component and the command component and presented on the service interface; each content of the components can be translated to a normal HTML file and delivered to the network job platform to carry out the corresponding job. The presenting of the service interface can take the place of the browser to realize and support the function of a participating style service, and the complicated network access interface is simplified, and the services supplied by different servers on the network can be accessed.

To allow efficient differentiated handling of network traffic in a network segment, a network address translator (120) performs network address translation on incoming data packets to be transmitted to the network segment and / or outgoing data packets to be transmitted from the network segment. Network address translation replaces source network addresses with replacement network addresses in incoming data packets. In the output data packet, the replacement network address is included in place of the destination address, and the network address translation replaces the replacement network address with the destination network address. In each case, the alternative network address is selected according to the traffic class of the data packet. In a network segment, differentiated processing of data packets based on alternative network addresses is provided.

The invention provides a message forwarding method and device based on a service function chain. The method comprises the following steps: identifying a local VPN virtual local area network of a tenant to which a received first Ethernet message belongs; searching a global VPN ID mapped to the local VPN in the VPN mapping relationship of the tenant; searching a first service function chain node based on the service function chain forwarding table; packaging the first Ethernet message into a first NSH message with a first NSH network service header according to the found first service function chain node, wherein the first NSH head carries a global VPN ID; searching a first virtual extensible local area network (VXLAN) tunnel reaching the first service function link node in a forwarding instance of the service function link domain; and packaging the first NSH message into a first VXLAN message according to the first VXLAN tunnel, and sending the first VXLAN message through an output portof the first VXLAN tunnel.

The present invention provides a method and device for processing data packets. The method includes: obtaining an enhanced context data header type; encapsulating the enhanced context data header type in a network service header, and encapsulating the network service header In the data message; sending the data message along the service forwarding path. The invention can further increase the type identification of the context data header in the SFC network, so as to enhance the further identification of the context data header on the nodes supporting the service chain.