53 results about "Network traffic management" patented technology

The application relates to the technical field of network flow management, and discloses a network flow detection method and device. The method comprises the following steps: a gateway acquires to-be-detected network flow corresponding to a specified port on a server; the gateway classifies and processes to-be-detected flow data according to a preset rule to obtain flow data corresponding to each flow type, wherein the preset rule is a classification rule set for the flow type; the gateway performs abnormality detection on the flow data of each flow type to obtain to-be-distributed flow data; the gateway distributes the to-be-distributed flow data to a service node associated with the corresponding flow type; and the service node performs abnormality detection on the flow data received from the gateway when the micro service of the service node is started. Through implementation of the application, the gateway and each service node can directly perform independent abnormality detection on the flow data, and the detection time of malicious flow is saved, and the detection efficiency of the malicious flow is improved.

The invention provides an aggregate communication server node sorting method and device, equipment, a medium and a product, and relates to the technical field of network flow management. Comprising the following steps: acquiring a to-be-sorted server node original list participating in set communication; according to a topology database, querying to obtain topology information of each server node in the server node original list; according to the topological information of each server node, reordering each server node in the server node original list, and generating a topological affinity node list; a list of topological affinity nodes is output for a collective communication operation. According to the method provided by the invention, by ensuring that the adjacent server nodes are at the same level or adjacent levels in the physical topology, the cross-level flow of set communication can be minimized, so that the set communication efficiency is improved, and the time consumption of a training task is reduced.

The invention relates to the technical field of network traffic management, in particular to a traffic management and control method and system fusing TSim and eSIM card data, and the method comprises the steps: receiving a traffic management and control instruction initiated by an ith terminal through an interactive gateway, recording the receiving time of the traffic management and control instruction, and if the data interaction amount is greater than or equal to a preset interaction amount threshold value, executing the step 1; and generating a to-be-transmitted data instruction for suggesting to use the eSIM card to send the to-be-transmitted data by using the interactive gateway, returning the to-be-transmitted data instruction to the ith terminal, when the to-be-transmitted data returned by the ith terminal is received, forwarding the to-be-transmitted data to the low-power-consumption network, and if the data interaction amount is smaller than the interaction amount threshold value, sending the to-be-transmitted data to the ith terminal. And generating a to-be-transmitted data instruction for suggesting to use the TSim card to send the to-be-transmitted data by using the interactive gateway, and transmitting the to-be-transmitted data to a target terminal of the ith terminal by using the first service RPL instance or the second service RPL instance. According to the invention, the flexibility and stability of TSim and eSIM card data traffic control can be improved.

The present disclosure is directed to network traffic management and load balancing at a cloud-based secure access service accessible to remotely connected user devices. In one example, a cloud-based secure service system includes a network controller configured to receive network traffic from one or more user devices remotely connected to the controller; parse the network traffic into flow data and contextual information associated with the network traffic; determine that the network traffic is to be serviced by a target firewall service at the cloud-based secure service system based on the flow data and the contextual information; and direct the network traffic to the target firewall service to be serviced.

The present disclosure provides a deep reinforcement learning (DRL) based dynamic network traffic management system including a LAN router, a plurality of WAN routers, a network switch, and a GNAT controller configured to measure one or more traffic states of a plurality of data flows, obtain an expected reward at the current time point, obtain the one or more traffic states to input to a DRL model to provide an expected reward of each data flow estimated for a next time point, obtain a target reward at the current time point, adjust parameters of the DRL model, predict a plurality of long-term rewards using the trained DRL model, select one of the plurality of long-term rewards, and adjust the bandwidth assigned to each data flow based on the selected long-term reward.

Methods, non-transitory computer readable media, network traffic manager apparatuses, and systems that assist with mitigating DDOS attack using a hardware device includes determining when a received network packet in an established connection between a client and a destination server includes a connection identifier cookie. A connection validation cookie is generated based on at least data in the received network packet, when the determination indicates the received network packet includes the connection identifier cookie. The connection identifier cookie is compared against the generated connection validation cookie. The received network packet is dropped when the comparison indicates the connection validation cookie fails to match the connection identifier cookie.

The application relates to the technical field of network security and discloses a network traffic threat detection and early warning method based on decoupling representation learning, which comprises the following steps: S1, detecting and identifying network traffic data in a network traffic management device to construct a data set containing a threat traffic data set and a normal traffic data set; S2, obtaining potential representation of the threat traffic data set according to a pre-trained Glow generation model; S3, constructing a learning strategy based on traffic changes in a potential space of the Glow generation model according to the potential representation to obtain a threat interpretable direction of a candidate traversal; S4, designing a comparison module through contrastive learning and extracting decoupling representation according to the threat interpretable direction; S5, constructing a threat detection model based on the decoupling representation and setting an early warning mechanism through a result of the threat detection model. The two can be obviously distinguished through decoupling, so that the efficiency of the detection process is improved. The method can well cope with detection and analysis of massive network traffic data.

The application discloses an edge network traffic prediction method based on redundancy reserve pool calculation, comprising the following steps: collecting traffic data of an edge base station, and constructing a training set and a test set according to the traffic data; inputting the constructed training set into an ESN model and training, and collecting a reserve pool state matrix; performing high-dimensional mapping on the reserve pool state matrix by using a ordinal pattern conversion network modeling method, calculating the ordinal complexity of reserve pool neurons according to a complex network measurement index, and determining key and non-key neurons of the reserve pool; balancing migrating the input weight and the internal weight of the key neurons of the reserve pool to the non-key neurons of the reserve pool in a redundant manner to form a new ESN model, retraining the new ESN model, and obtaining an optimal output weight matrix; deploying the trained new ESN model on an edge side network traffic management device, collecting traffic data of the edge base station in real time as input of the model, and obtaining a prediction value of future network traffic as output of the model.

A computer system for managing congestion control of packets includes a processor that implements a network traffic manager including a congestion controller and a socket. The congestion controller determines messages parameters for packets of a plurality of messages and assigns a congestion control algorithm setting to each packet based on the message parameters associated with each packet. The socket includes a buffer with a queue having a plurality of threshold queue positions. The congestion controller determines that a subset of packets exceeds at least a first threshold queue position and selects a congestion control action for each packet in the subset based on the assigned congestion control setting for each respective packet and a position of each respective packet relative to the plurality of threshold queue positions.

Methods, non-transitory computer readable media, network traffic management apparatuses, central management devices, and network traffic management systems that control access to configuration data in a distributed system are illustrated. With this technology, a set of configuration data is stored in a first data structure and a corresponding set of configuration data is stored in a second data structure along with an encrypted digest value that was encrypted using a private key associated with a particular administrator role. The stored configuration data and / or newly received modifications to stored configuration data can be authenticated via a comparison of a digest value calculated using the configuration data compared to the stored encrypted digest value, which is decrypted with a stored public key corresponding to the administrator role. Accordingly, configuration data can be securely controlled by authenticating it as valid in accordance with authorized administrator roles prior to being updated or loaded.

The embodiment of the application discloses a service request processing method and system based on a GRPC framework. The technical scheme provided by the embodiment of the application injects a predefined codec, and the codec is used for transparent transmission of a service request through communication of protocol data based on the GRPC framework and upper nodes and lower nodes. The service request of the upper node is received based on the codec, a URL address contained in the service request is determined, a target lower node is determined according to the URL address, and the service request is forwarded to the target lower node based on the codec. By injecting the predefined codec into the GRPC framework to replace the codec of the GRPC framework itself, it is ensured that the GRPC framework can normally receive and process the service request and forward the service request to the target lower node. In this way, the difficulty of the service request processing of the service gateway in the GRPC framework can be reduced, the service request processing efficiency can be optimized, and the network traffic management can be optimized.

The application relates to the technical field of network management, and discloses a deterministic network traffic management method, system, device and medium, fuzzy processing is performed on acquired multi-element network data to obtain a traffic health state fuzzy set; the traffic health state fuzzy set is matched according to a fuzzy membership degree rule base to obtain an abnormal traffic probability value; a second graph neural network structure constructed based on a graph attention and a gated recurrent unit is used to perform spatiotemporal feature extraction on a first graph neural network structure obtained according to feature representation of the traffic health state fuzzy set; after linear transformation is performed on the obtained spatiotemporal state vector, a health state result is obtained according to the abnormal traffic probability value and a dynamic probability threshold value obtained; and according to the dynamic probability threshold value, the health state result and a deterministic network priority mapping rule, traffic scheduling is performed on each multi-element network data. The method improves the dynamic adaptability, accuracy and time delay controllability of power communication network traffic management.

The present invention discloses a multi-layer network traffic dynamic monitoring and analysis method based on a graph neural network. The method comprises the following steps: S1: real-time data collection and preprocessing of each node; S2: partitioning the preprocessed data based on a preset time window to construct graph structure data; S3: topological learning of the constructed graph structure data using an improved EvolveGCN to generate a final feature representation of the dynamic changes in the network topology; S4: modeling the preprocessed data using Graph WaveNet to extract the final feature representation of spatiotemporal dependency and local spatial correlation; S5: feature fusion to generate a comprehensive feature vector; S6: generating a final monitoring result based on the comprehensive feature vector; and S7: transmitting the final monitoring result to a network traffic management platform for data processing and analysis. The present invention can provide an efficient and scientific optimization solution for dynamic network traffic monitoring, bringing significant technical value and economic benefits to practical applications.

The invention relates to the field of cloud native network traffic management, and provides a traffic scheduling method, a traffic scheduling device, a computer readable storage medium and electronic equipment, and the traffic scheduling method comprises the steps: receiving service endpoint change information and traffic scheduling configuration for an upstream service cluster; the change information is used for indicating a newly added service end point; the traffic scheduling configuration is obtained by analyzing annotation information of an application access entry resource associated with the upstream service cluster, and the traffic scheduling configuration is used for indicating to start a slow start strategy for a newly added service endpoint; and based on the traffic scheduling configuration, applying the slow start strategy to the newly added service end point to realize progressive traffic scheduling. According to the method and the device, the problems of performance jitter, request failure or cascade failure and the like caused by the fact that the new online service instance immediately bears full traffic can be effectively solved.

The invention relates to the technical field of network management, and discloses a flow management method, system and device for a deterministic network and a medium, and the method comprises the steps: carrying out the fuzzy processing of obtained multi-element network data, and obtaining a flow health state fuzzy set; matching the traffic health state fuzzy set according to a fuzzy membership rule base to obtain an abnormal traffic probability value; performing spatial-temporal feature extraction on the first graph neural network structure obtained according to the feature representation of the traffic health state fuzzy set by adopting a second graph neural network structure constructed based on graph attention and a gating circulation unit; performing linear transformation on the obtained space-time state vector, and obtaining a health state result according to an abnormal traffic probability value and an obtained dynamic probability threshold value; and performing traffic scheduling on each piece of multi-element network data according to the dynamic probability threshold, the health state result and the deterministic network priority mapping rule. According to the method provided by the invention, the dynamic adaptability, the accuracy and the time delay controllability of electric power communication network flow management are improved.

Methods, non-transitory computer readable media, network traffic management devices and network traffic management systems that provide protection of core networks are illustrated. With this technology, the method includes configuring a service communication proxy among a plurality of service communication proxies to receive a request from a network function. In some examples, the network function is one of the plurality of network functions. Next, the service communication proxy can be configured to determine whether a profile of the network function is stored in a common cache and, in response to determining the profile is in the common cache, retrieve the profile to respond to the request. Then, service communication proxy can be configured to select a destination NF based on based on the stored profile of the network function retrieved from the common cache.

Network traffic management is performed in a system comprising a network interface card (NIC) operatively coupled to a processor with multiple cores. The NIC is configured to execute receiver side scaling (RSS). The NIC generates a hash table for tracking communications flows that have been assigned to selected cores of the multiple cores. In response to receiving, at the NIC, a packet associated with a new communication flow, the NIC accesses a flag indicating that a first core of the multiple cores exceeds a threshold for CPU utilization. In response to determining that the flag indicates that the first core of the multiple cores exceeds the threshold for CPU utilization, the first core of the multiple cores is excluded from an RSS function for load balancing the multiple cores. A subset of the multiple cores that exclude the first core is used for load balancing the multiple cores.

Methods, non-transitory computer readable media, network traffic manager apparatuses, and systems that facilitate network security are disclosed. The method includes evaluating a security risk of a transaction and determining a risk metric for the transaction based on the evaluation. Based on the risk metric, the method further includes determining a data access right for the transaction. Then the method includes directing the transaction to a target application entity based on the data access right of the transaction.

The present disclosure relates to a packet transmission method applied to a network device. This method includes obtaining a priority bucket value for a packet. The priority bucket value represents consumable priority values for transmitting the packet across various paths. The packet is scheduled and transmitted based on the priority bucket value and the distance to a destination of each path, with updating the priority bucket value updated after each scheduling. This approach enables consistent end-to- end Quality of Service (QoS) across different network paths, enhancing the efficiency and reliability of network traffic management.

Methods, network traffic management apparatuses, non-transitory computer readable media, and systems that optimize transport of unknown and changing unstructured log data in a network environment. The method includes retrieving one or more entries associated with target unstructured log data; structuring the one or more entries into sorted structured batches comprising structured data and sorted unstructured batches without structured data, based on a current configuration and producing current batch metadata; converting the sorted structured batches into columnar-oriented representation; compressing the columnar-oriented batches; evaluating the compressed columnar-oriented batches by comparing a compression ratio of compressed sizes of the sorted structured batches and the sorted unstructured batches using the current batch metadata thereby producing a compression rate; receiving the compression rate and the current batch metadata; and determining an optimized configuration for the retrieved one or more entries; and repeating the above steps using the optimized configuration.

Methods, non-transitory computer readable media, network traffic manager apparatuses, and systems that assist with selectively routing packets includes receiving a domain name system request from a client. The domain name system request can comprise a configuration for registration of an adapter and then, based on the configuration of the domain name system request, a server can be determined to send the domain name system request. The configuration can comprise an adapter type and the server is determined at least in part based on the adapter type of the configuration. Then the domain name system request can be transmitted to the determined server.

A network traffic management system prepares a map showing network delays updated through the transmission of regularly time-stamped messages. This map is then employed to prioritize packets, address quality of service requirements, or drop expired / expiring packets.

The application discloses a network flow management method and device of a cloud platform, equipment and a storage medium, relates to the technical field of cloud computing, and comprises the following steps: monitoring message flow data on a virtual switch bridge by using a virtual switch in the cloud platform; determining the number of polling central processing units according to the message flow data in a preset time period; and adjusting the number of polling central processing units in a data plane development kit network of the virtual switch according to the number of polling central processing units; by determining the number of polling CPUs according to the message flow data in the preset time period, the number of polling CPUs of the dynamically adjusted OVS-DPDK network can be determined by using the monitored network flow on the virtual switch bridge, so that the dynamic adjustment of the polling CPUs is realized, the number of polling CPUs can be reduced when the network flow is small, the message forwarding energy consumption of the cloud platform is reduced, and the network forwarding performance of the cloud platform is not obviously reduced.

The invention discloses a traffic management method, device and equipment and a storage medium, and relates to the technical field of computer network traffic management and optimization, and the method comprises the steps: obtaining a switch configuration address, a switch configuration path and a to-be-sent data packet; locking a mapping relation between each switch port and corresponding target equipment based on the switch configuration address, and determining a static address table; setting a routing path and a priority corresponding to each data flow based on the switch configuration path, and determining a static routing table; switching a network label corresponding to the to-be-sent data packet based on the static address table and the static routing table, and determining label switching information; and forwarding the to-be-sent data packet along the forwarding path identified by the label switching information to complete routing flow management. According to the invention, the static address table and the static routing table are utilized to accurately control the data flow and select the optimization path, network label switching is carried out to realize rapid and efficient forwarding, and the flow optimization efficiency is improved.

Methods, network traffic manager apparatuses, non-transitory computer readable media, and systems that optimize resource usage of an application running in a network traffic management system are disclosed. The method monitors a usage of execution resource by one of a plurality of application functions of the application during the running of the application to obtain resource usage data of the application function, the plurality of application functions being separately allocated resource for executing the plurality of application functions. The method stores the resource usage data and detects a restart of the application. In response to the detection of the restart of the application, the method further retrieves the stored resource usage data of the application function and adjusts resources to be allocated to the application function at the restart of the application based on the resource usage data.

A network switch includes an input port configured to receive a first data packet comprising a header of metadata and a payload of a plurality of cells. The network switch includes a controller configured to determine, using at least the metadata, an eligibility of directing the first data packet to a first path or otherwise directing the first data packet to a second path. The first path is characterized by a first latency. The second path is characterized by a second latency. The first latency is lower than the second latency. The network switch is configured to start storing the first data packet from the first path into a queue upon receiving a first cell of the payload, to manage the packet in the queue, to retrieve the cells from the queue to prepare a second data packet; and to transmit the second data packet upon identification of a destination port.

A computer can monitor network traffic on a blockchain computing network. The computer can determine a current level of network congestion on the blockchain computing network. The computer can execute a first machine learning model that predicts a timeseries of future transaction costs based on historical data and the current level network congestion level of the blockchain computing network. The computer can also execute a second machine learning model to predict a timeseries of future transaction sizes and UTXO types for the distributed ledger-based account based on historical transaction data. The computer can select one or more UTXOs to use to complete the transaction of the transaction request. The computer can append a block instance containing an identification of the selected one or more UTXOs to the blockchain to complete the transaction.

A system to manage network traffic is described. The system can include a data processing system that receives a request to execute a data analysis process to measure an effectiveness of a first content item on a plurality of end user computing devices. Client data, for each end user computing device, can be accessed, which includes interaction data representing interactions with the first content item. A data processing model can be executed in a secure environment using the client data to obtain (i) transformed client data structured in accordance with a predefined format and (ii) a data mapping of one or more data fields from the client data to input data. A performance score representing the effectiveness can be received from the external computing device based on (i) the transformed client data and (ii) the data mapping. A second content item can be selected based on the performance score.

A system to manage network traffic is described. The system can include a data processing system that receives a request to execute a data analysis process to measure an effectiveness of a first content item on a plurality of end user computing devices. Client data, for each end user computing device, can be accessed, which includes interaction data representing interactions with the first content item. A data processing model can be executed in a secure environment using the client data to obtain (i) transformed client data structured in accordance with a predefined format and (ii) a data mapping of one or more data fields from the client data to input data. A performance score representing the effectiveness can be received from the external computing device based on (i) the transformed client data and (ii) the data mapping. A second content item can be selected based on the performance score.