40 results about "Network service header" patented technology

A database is populated with geographic locations for network devices by providing a node on a network and making a connection into a network service provider (NSP) point of presence (POP) to obtain a connection to the network via the NSP. A message is then transmitted to the node over the network connection obtained from the NSP. The message is received at the node and a source network identifier is extracted from the message. The source network identifier is then associated with a known geographic location for the POP in a database. The foregoing steps are then repeated for multiple different POPs. Also, a database is populated with geographic locations for network devices by providing a node on a network and making a connection into a network service provider (NSP) point of presence (POP) to obtain a connection to the network via the NSP. A message is then transmitted to the node over the network connection obtained from the NSP. The message is received at the node and a source network identifier is extracted from the message. The route over the network between the node and the POP is then probed to obtain network identifiers for routers along the route. The foregoing steps are then repeated for multiple different POPs.

The invention discloses a network access behavior-based access control method and system for a wireless local area network. The method comprises the following steps: a network side acquires information of data packets of different network service types in a BSS (Base Station Subsystem) according to a network service type; the network side establishes information of a network flow statistical table of the BSS according to the acquired information of the data packets of different network service types, wherein the information of the network flow statistical table comprises source sites, destination sites, service types, network access behavior durations and network access behavior occurring time of the data packets; and the network side generates information of the relation among the network service type, corresponding time and corresponding network data flow of each site in the BSS according to the established information of the network statistical table of the BSS, and performs access control according to the generated information of the relation among the sites in the BSS. By applying the method and the system, the problem of effective distribution of network resources in the wireless local area network is solved.

A method for applying network services related to geographic location including receiving regions within a map and receiving geo-service definitions for the regions. The method includes determining a subscriber's region and determining information related to the subscriber's traffic flow. The method then applies geo-service definitions based on the subscriber's region and the information related to the traffic flow. A system for applying network services related to geographic location having a location detection module for detecting a subscriber's location and a region detection module for determining the subscriber's region within a map based on the subscriber's location. The system further including a geo-service definition and enablement module for defining geo-service definitions and actions; and a subscriber detection and traffic management module adapted to receive the subscriber's region and apply geo-service definitions to the subscriber traffic flow based in part on the region of the subscriber.

Virtual machine environments are provided in the switches that form a network, with the virtual machines executing network services previously performed by dedicated appliances. The virtual machines can be executed on a single multi-core processor in combination with normal switch functions or on dedicated services processor boards. Packet processors analyze incoming packets and add a services tag containing services entries to any packets. Each switch reviews the services tag and performs any network services resident on that switch. This allows services to be deployed at the optimal locations in the network. The network services may be deployed by use of drag and drop operations. A topology view is presented, along with network services that may be deployed. Services may be selected and dragged to a single switch or multiple switches. The management tool deploys the network services software, with virtual machines being instantiated on the switches as needed.

An example method embodiment for networking includes managing, by a network controller, network services for one or more network devices connected to the network controller. Managing network services includes receiving a packet in a traffic flow from a network device. The network device is one of the one or more network devices connected to the network controller. Managing network services further includes determining applicable services for the packet, transmitting the packet to a service provider in accordance with the applicable services for the packet, receiving, from the service provider, service results corresponding to the packet, and creating a forwarding entry providing instructions for handling the traffic flow in a service path table at the network device in accordance with the service results corresponding to the packet.

Disclosed herein is technology for formal verification of a network service chain in a software-defined networking environment. In an embodiment, a verification support apparatus for formal verification of a network service chain includes a Network Service Chain (NSC) descriptor information reception unit for receiving NSC descriptor information from an application program. An NSC configuration unit configures an NSC of multiple network services using the received NSC descriptor information. A verification request unit requests formal verification of each network service in the configured NSC from a formal verification unit.

A system leveraging the authentication control plane of a communications network to influence the associated Network Service header (NSH) values on a per subscriber packet basis; thus presenting a subscriber aware service chain header on which influences the processing of virtualized network function (VNF). This system implements vendor specific attributes (VSA) within the authentication provider platform to create an association of subscriber identity which may include MAC address, MAC and IP address as a tuple, circuit identifier string, realm based authentication data, IMSI, in part or in addition to leveraging DHCP Relay information sub options that may be present, which when processed inherit one or multiple vendor specific attributes from the authentication platform. These VSA values, each no greater than 2 bytes define the payload headers the participating subscriber gateway will shim to its layer 2 payload for processing as a Service Chain through one or multiple virtual network functions located elsewhere in the network.

The invention discloses a method and system for acquiring OAM information, and a computer readable storage medium, and relates to the technical field of data communication. The method includes that aservice function (SF) node receives a first service message which includes a network service header (NSH) message header which carries an operation administration and maintenance (OAM) information identifier and a programmable instruction indicating the OAM information to be acquired; the SF node, in accordance with the programmable instruction, adds a part of the OAM information to the first service message to form a second service message; and the OAM information in the second service message is acquired from the SF node according to the OAM information identifier. The method can improve theaccuracy of the acquired OAM information.

In one embodiment, a system, method, and computer program product are disclosed for authenticating a packet received from a client node, storing the results of the authentication in a cache memory of a service classifier node, and including the results of the authentication in a network service header of a packet before forwarding the packet to downstream service nodes. In one embodiment, the initial authentication is performed in conjunction with an authentication node.

The present invention discloses a network service searching method based on a P2P network double-layer ring-shaped routing structure, and belongs to the computer network service retrieval field. The present invention aims to resolve a technical problem that network service searching efficiency and accuracy are significantly reduced because a conventional searching manner is only limited to keyword matching. A used technical solution is: the method organizes network service registered nodes based on a double-layer ring-shaped routing structure P2P network, integrates with difference of node capabilities in an actual network, fully uses a dynamic mechanism of searching and positioning nodes in the P2P network, and clusters the registered nodes by using a service field ontology concept mapping range according to types of services provided by the registered nodes, so that network service registration and discovery of a specific field is concentrated on a small quantity of continuous nodes of an outer ring in the double-layer ring-shaped structure.

The invention provides a data message processing method and device. The method comprises the steps that an enhanced context header type is acquired; the enhanced context header type is packaged in a network service header and the network service header is packaged in a data message; and the data message is transmitted along a service forwarding path. With application of the data message processing method and device, a context header type identifier can be further increased in an SFC network so as to enhance further identification for the context header on nodes supporting a service chain.

The invention discloses a method and system for managing distributed network services as well as control nodes. The method comprises the following steps: generating service data of a service in accordance with a service registration request, wherein the service data comprise service numbers; using a DHT (distributed Hash table) algorithm to determine a service management control node for managing the service in accordance with the service numbers; and sending the service data of the service to the service management control node, and managing the service by the service management control node. The technical scheme provided by the invention can be used to effectively realize service management of distributed networks and improve the service management and the access efficiency, and particularly is applied to managing multi-service applications in the distributed networks.

The invention provides an SFC service data forwarding method and an SFC network system, and the method comprises the steps: enabling a classifier to receive a service message, and generating an SFC message based on the service message; enabling the classifier to generate a network service header NSH according to the forwarding path information of the service message, and fill the ToS field in theNSH with quality of service QoS information corresponding to the service message; and enabling the classifier to encapsulate the NSH in the SFC message, and forward the SFC message based on the QoS information carried by the ToS field. According to the method and the SFC network system provided by the invention, a QoS mechanism can be provided for the SFC network, so that the service flow of the service chain is forwarded according to the priority, the service quality of high-grade users is ensured, the operation capability is improved, and the system overhead is not increased.

The invention provides a message forwarding method and device, wherein a flow classification node determines a business chain which requires to save the specified information in the network service header NSH. When the data message is received, a first NSH is encapsulated for the data message and sent to a first node of the business chain if the data message matches the above business chain. The first NSH carries a retention mark, and the retention mark is used for indicting that a tail node of the business chain retains the specified information in the first NSH. And then the specified information in the first NSH is retained which is based on the retention mark in the first NSH encapsulated for the data message without cleaning the whole NSH when the tail node of the specified business chain receives the date message. The message forwarding method and device have the advantages that the business chain achieves that information is preserved on demand, and the purpose of business chain, business chain attribute information and data center transmission via the operation and maintenance tool dynamically displays the data message is satisfied.

The invention relates to the technical field of cloud host network utilization, and in particular to a method for performing cross-network service access based on a cloud host. The method for performing cross-network service access based on the cloud host disclosed by the invention comprises the following steps: 1, a cloud host with a fixed external network IP address is obtained; 2, a VPN and a network service access agent tool are set up on the cloud host; 3, the VPN user is configured to have a fixed dialup IP address, and a mapping relationship of the network service access agent is configured; 4, the VPN is dialed up on the host providing the cross-network service of the intranet, a fixed IP is directly distributed, and a fixed association is established with the cloud host; and 5, the external network accesses the intranet service through the cloud host, and jumps to the intranet service by the agent tool, thereby implementing the cross-network service access of the external network through the cloud host. The invention solves the problem that the intranet cannot provide the fixed external network service, and utilizes the low price characteristic of the service host to reduce the cost of obtaining the public network IP, which provides an efficient and feasible method for small-scale external network access services.

The invention provides a message forwarding method and device based on a service function chain. The method comprises the following steps: identifying a local VPN virtual local area network of a tenant to which a received first Ethernet message belongs; searching a global VPN ID mapped to the local VPN in the VPN mapping relationship of the tenant; searching a first service function chain node based on the service function chain forwarding table; packaging the first Ethernet message into a first NSH message with a first NSH network service header according to the found first service function chain node, wherein the first NSH head carries a global VPN ID; searching a first virtual extensible local area network (VXLAN) tunnel reaching the first service function link node in a forwarding instance of the service function link domain; and packaging the first NSH message into a first VXLAN message according to the first VXLAN tunnel, and sending the first VXLAN message through an output portof the first VXLAN tunnel.