97 results about "Network virtualization" patented technology

Techniques are described for communications in an L2 virtual network. In an example, the L2 virtual network includes a plurality of L2 compute instances hosted on a set of host machines and a plurality of L2 virtual network interfaces and L2 virtual switches hosted on a set of network virtualization devices. An L2 virtual network interface emulates an L2 port of the L2 virtual network. IGMP configuration is distributed to the L2 virtual switches. A control plane of the L2 virtual network coordinates IGMP configuration across the L2 virtual switches.

A Network Virtualization Device (NVD) executes a set of Virtual Network Interface Cards (VNICs). The set of VNICs includes a first VNIC that forwards packets for a set of one or more packet flows. The NVD stores a first VNIC-related information that includes information identifying a first set of one or more packet flows and associated state information The NVD in response to determining that the state information for the first VNIC is to be synchronized with another NVD, identifies a first backup NVD for the first VNIC, wherein the first backup NVD is a backup for the first VNIC, and communicates to the first backup NVD, a portion of the state information stored by the NVD for the first VNIC.

A router with network virtualization and configuration may be configured for a client site including a plurality of electronic devices. A configuration may be downloaded by the router, which then performs network configuration steps automatically including by identifying the plurality of devices at the client site and provisioning them according the LAN configuration. A user interface (UI) for configuring a network may include a router administrator dashboard for creating a detailed network configuration by assigning a plurality of ports of the router to the plurality of electronic devices in the selected network configuration, and sending the detailed network configuration to the router for use by the router in creating a network with the plurality of electronic devices at the client site.

Techniques are described for communications in an L2 virtual network. In an example, the L2 virtual network includes a plurality of L2 compute instances hosted on a set of host machines and a plurality of L2 virtual network interfaces and L2 virtual switches hosted on a set of network virtualization devices. An L2 virtual network interface emulates an L2 port of the L2 virtual network. Access control list (ACL) information applicable to the L2 port is sent to a network virtualization device that hosts the L2 virtual network interface.

Disclosed are a network card communication method and apparatus for an AI training platform, a device, and a medium. The method includes: building a switch network topology on the basis of a spine-leaf network, and configuring a preset number of virtual local area networks for each leaf switch in the switch network topology; virtualizing a physical network card to obtain virtual network cards, allocating the virtual network cards to corresponding job-containers according to a preset allocation rule, and allocating, to each virtual network card in the job-containers, different sub-networks corresponding to the virtual local area networks; and adding a corresponding sub-network communication policy routing rule to a pod where each job-container is located, whereby a virtual network card in the job-container sends training data to the remaining virtual network cards on a basis of the sub-network communication policy routing rule.

Techniques are disclosed for providing high performant packets processing capabilities in a virtualized cloud environment that enhance the scalability and high availability of the packets processing infrastructure. In certain embodiments disclosed herein, the VNICs functionality performed by network virtualization devices (NVDs) is offloaded from the NVDs to a fleet of computers, referred to as VNIC-as-a-Service System (or VNICaaS system). VNICaaS system is configured to provide Virtual Network Interface Cards (VNICs)-related functionality or service for multiple compute instances belonging to multiple tenants or customers of the CSPI. The VNICaaS system is capable of hosting multiple VNICs to process and transmit traffic in a distributed virtualized cloud networks environment. A single VNIC executed by the VNICaaS system can be used to process packets received from multiple compute instances.

A first network device of a first data center may encode a source tenant system interface (TSI) group identifier into a tag protocol identifier and a group-based policy identifier, and may encode the tag protocol identifier and the group-based policy identifier into a virtual extensible local area network (VXLAN) packet with the source TSI group identifier, where the source TSI group identifier is not included in a header of the VXLAN packet. The first network device may provide the VXLAN packet, with the source TSI group identifier, to a second network device of a second data center, via an Ethernet virtual private network (EVPN) multiprotocol label switching (MPLS) network.

The invention relates to the field of computer hardware virtualization, and discloses a CAN network virtualization method, system, device and medium, a virtual CAN network is established through QEMU virtual machines, each QEMU virtual machine can be used as a node, all the nodes are connected through a Kvaser Virtual CAN Driver driver to form a virtual CAN network, the virtual CAN network can be used for simulation and testing, and the virtual CAN network can be used for simulating and testing. Therefore, logic analysis of the virtual device is separated from actual operation of the device, the front end is mainly used for reading, writing and the like of a register, and when hardware operation is involved, the operation is transmitted to the rear end, so that coupling is reduced, the flexibility of a model is improved, and the reliability of the model is improved. The problem that drivers and application software cannot be developed and verified in advance due to high CAN network hardware cost and long development period is solved.

An apparatus features processor(s) and a non-transitory storage medium including an intelligent-adversary simulator and a formatting modules. The simulator calculates path(s) of least resistance for a cyber threat in a cyber-attack scenario to compromise 1) a first virtualized instance (source device), 2) a second virtualized instance (targeted device), and 3) virtualized instances of components of a virtualized instance of a network associated with selected pathways of the cyber-attack scenario through the virtualized instance of the network. The virtualized instances may be based on historical knowledge of connectivity and behaviour patterns of users and devices within an actual network under analysis. The formatting module generates a report with identified devices that are communicatively coupled to the virtualized instance of the network and prioritized to allocate security resources. The simulator calculates the least resistance path(s) through the virtualized instance of the network and refrains from calculating every theoretically path therefrom.

The invention relates to the technical field of computer server resource management and network virtualization, and particularly discloses a server hybrid deployment and management system based on a virtualization technology, which comprises a uniform resource abstraction layer, a global resource sensing and modeling unit, a strategy-driven intelligent arrangement engine and a heterogeneous resource execution adapter. The uniform resource abstraction layer performs standardized abstraction on a physical server, a virtual machine and a container; the global resource sensing and modeling unit integrates the resource data and constructs a global resource model; a strategy-driven intelligent arrangement engine performs multi-objective optimization solution based on strategies and constraints to generate a scheduling scheme; the heterogeneous resource execution adapter translates the scheme into bottom executable atomic operations. According to the invention, unified management and intelligent cooperative scheduling of heterogeneous computing resources are realized, and the resource utilization efficiency and the system automation level are improved.

The invention relates to a multi-modal network dynamic loading and management system and method based on modal virtualization, and belongs to the technical field of network system structures and virtualization. By constructing a modal virtualization layer and a modal description language analysis mechanism, the limitation that traditional network virtualization is only oriented to a single protocol stack is broken through, unified packaging and isolation of multiple network modalities such as IP, TSN, ICN and custom protocols are achieved, the dual-modal state snapshot and traffic mirroring technology is utilized, and the network modality is improved. The problem of service interruption in the online switching process of the network modes is solved; and further in combination with a vectorized heterogeneous resource elastic scheduling model, global optimal configuration and on-demand mapping of the CPU, the GPU, the FPGA and the P4 programmable switching chip are realized.

A method implemented by a first cloud gateway (GW). The method includes receiving, from a first customer premises edge device (CPE) over a software defined wide area network (SD-WAN) path, a data packet including an outer layer internet protocol (IP) header and a generic network virtualization encapsulation (GENEVE) header. The GENEVE header includes one or more sub-type length values (TLVs). The method also includes extracting a destination address from the one or more sub TLVs within the GENEVE header. And the method further comprises the steps of updating the destination IP address in the outer-layer IP header to the extracted destination address, and forwarding the data packet to a second CPE according to the updated destination IP address.

Improved network traffic flow processing techniques are described. In a network device providing multiple processing planes, each processing plane comprising multiple processing units, techniques are described that take advantage of flow affinity / locality principles such that the same processing component of a processing plane, which previously performed processing for a network flow, is used for performing subsequent processing for the same network flow. This enables faster processing of network traffic flows by the network device. In certain implementations, the techniques described herein can be implemented in a network virtualization device (NVD) that is configured to perform network virtualization functions.

Techniques are described for communications in an L2 virtual network. In an example, the L2 virtual network includes a plurality of L2 compute instances hosted on a set of host machines and a plurality of L2 virtual network interfaces and L2 virtual switches hosted on a set of network virtualization devices. An L2 virtual network interface emulates an L2 port of the L2 virtual network. Storm control information applicable to the L2 port is sent to a network virtualization device that hosts the L2 virtual network interface.

A network interface card, such as a SmartNIC, is used to provide encryption, such as network encryption virtual function (NEVF), for a virtual machine, so that a customer can control network keys in a virtual cloud network. The NEVF includes a memory device (e.g., SRAM) and a crypto processor (e.g., a crypto core). The memory device stores a crypto key. The crypto processor uses the crypto key to encrypt data to and from a virtual machine in the virtual cloud network. A key management system can be used to securely transfer crypto keys to the NEVF. Having one NEVF per virtual machine can enable a customer to manage the crypto key for a virtual cloud network.

The invention provides a method for managing a floating IP under a distributed gateway based on an OVN, and the method comprises the steps: when a virtual machine configures the floating IP, the virtual machine sends an ARP response message to a local gateway, and maps and updates the floating IP and an MAC address of the local gateway to an ARP table of the local gateway. And copying the ARP response message corresponding to the floating IP through a multicast management mechanism, performing general network virtualization packaging, and forwarding the packaged floating IP to all distributed gateways in the virtual private cloud. And each distributed gateway receiving the ARP response message updates a corresponding ARP table according to the ARP response message, so that MAC addresses of floating IPs in the ARP tables of all the distributed gateways are consistent. According to the method provided by the invention, the floating IP under the distributed gateway can be efficiently managed in a large-scale cloud computing environment.

Disclosed systems, apparatuses, and methods enable remotely controlling robotic-assisted medical systems, such as robotic-assisted surgery systems, for performing remote robotic-assisted medical procedures. Disclosed approaches provide a secure, efficient, and dynamically-created virtual network for connecting physician consoles and robotic-assisted medical systems. Disclosed approaches improve efficiency, security, scalability, and reliability of remote robotic-assisted medical procedures.

Systems and methods for encrypting data between a customer and a virtual cloud network (VCN) for end-to-end encryption, where the customer manages the encryption keys.SOLUTION: The network head end device, VCN Head End 704, accepts the first key provisioned by the customer, receives the first data packet sent from the customer's device, and decrypts the first data packet using the first key to obtain the information. The network virtualization device 624 receives the information from the network head-end device, confirms that the information is to be sent to the virtual machine in the virtual cloud network, confirms that data in the virtual cloud network is to be encrypted, encrypts the information using the second key to generate a second data packet, and routes the second data packet to the virtual machine in the virtual cloud network 312.SELECTED DRAWING: Figure 7

Techniques for monitoring data transport in a network virtualization function (NVF) chain. A path tracing packet is generated having a Midpoint Compressed Data (MCD) to collect path tracing information of the NVF chain. The NVF node is configured to record an MCD containing Wide Local Path Tracing Identification (WL PT ID). The WL PT ID includes a first field having a value that indicates that a non-standard path tracing format is to be used and has a second field that indicates a particular path tracing format to be used. The path tracing packet is passed through the NVF chain and is then received back again after passing through the NVF chain. Data collected by the path tracing packet is analyzed to determine which NVF nodes the path tracing packet passed through, and the amount of time taken for the path tracing packet to pass through, the NVF chain.

A network management apparatus includes at least one processor. The processor is configured to execute a reception process of receiving a signal supplied when degradation in performance of a VNF or CNF exceeding a threshold value is detected in a network virtualization environment, a specifying process of specifying a hardware resource related to performance degradation when the signal is received, and a first command transmission process of transmitting a command to perform auto-healing so as to deploy a hardware resource other than the specified hardware resource for the VNF or CNF having degraded performance.

The application discloses an intelligent network card, a cloud server and a traffic forwarding method. The intelligent network card comprises a network virtualization component and a physical network card, a symmetric hash module and a plurality of groups of data flow forwarding queues connected with the symmetric hash module; a plurality of software CPUs are arranged on the network virtualization component; the data flow forwarding queues are arranged to correspond to unique software CPUs; the symmetric hash module is used for being connected with the physical network card and a virtual machine in communication respectively, performing symmetric hash operation on five-tuple information of a forward data flow sent by the virtual machine and five-tuple information of a reverse data flow sent by the physical network card respectively, sending the forward and reverse data flows belonging to a same session to data flow forwarding queues corresponding to operation results, and enabling the forward and reverse data flows belonging to the same session to be forwarded by software CPUs corresponding to the data flow forwarding queues. The application removes session cross-CPU lock overhead and core-to-core communication overhead, and greatly improves new connection performance.

The invention discloses a network virtualization resource management method and system, and relates to the technical field of intelligent resource management, and the method comprises the steps: initializing an AoL virtual queue, dynamically updating the queue through a Lyapunov drift method, dividing scene feature groups in combination with an ODSS algorithm, fusing prediction results of multiple models, correcting deviation through a Lyapunov-ODSS objective function, and refining the prediction results according to priorities. And an OPT-JR multi-objective function is defined, and an optimal resource allocation vector is solved by using an NSGA-II algorithm. According to the method, the Lyapunov drift theory is introduced to carry out resource regulation and control, the ODSS feature screening algorithm is combined to carry out feature selection, the robustness and real-time performance of resource management are improved, multiple models are fused to carry out collaborative prediction, the precision and stability of resource demand prediction are improved, and the utilization efficiency and intelligent scheduling of resources in a virtualized network are realized.

This invention relates to a three-site mutual backup method under a commercial encrypted network virtualization architecture, belonging to the field of network communication technology. It addresses the technical problems of existing cross-regional and cross-network segment communication schemes, including insufficient interconnection security, adaptability, data backup efficiency, fault switching response speed, hardware architecture cost-effectiveness, and incomplete scenario coverage. The method includes the following steps: master station backup generation; parallel off-site replication; breakpoint resumption and anomaly recovery; local storage and version retention at branch stations; fault switching and local recovery. The three-site mutual backup method under the commercial encrypted network virtualization architecture of this invention offers: superior interconnection security and adaptability, more efficient and complete data backup, low-impact automated fault switching, a more reasonable and cost-controllable hardware architecture, higher detection accuracy, and stronger scalability.

A network management apparatus includes at least one processor. The processor is configured to execute a reception process of receiving a signal supplied when a problem is detected in any of a plurality of logical networks in a network virtualization environment, and a first determination process of determining not to perform auto-healing in a case in which a problem is detected in a first logical network that is configured for platform monitoring and a problem is not detected in a second logical network that is configured for application monitoring.

The present invention relates to the technical field of optical communications, and discloses a method and system for providing virtual network topology configuration services based on MAML and transfer learning, and a storage medium. The method includes: building a network architecture using a software-defined network; receiving, by the network architecture, configuration information to configure a virtual network topology; and calling, by the network architecture, an intelligent machine learning service providing module to execute an MAML algorithm and a transfer learning algorithm to provider a user with machine learning services, the machine learning services including quality of transmission estimation, fault management, and resource allocation. By means of the present invention, the quality of service and efficiency of network virtualization can be improved.

A virtualized network function (VNF) of a network function virtualization (NFV) link level architecture includes a management plane function (MPF) to map a logical interface as a virtual interface in a control plane function (CPF) of the VNF. The MPF maps a logical resource of the NFV virtualization link level architecture as a shadow resource on one or more data plane functions (DPFs) of the VNF, wherein a virtual link is formed by the logical interface, the shadow resource, and the virtual interface. One of the DPFs receives a packet over the virtual link from a switch and classifies a type of the packet. In response to the packet type being a data packet, the DPF aggregates the packet with other data packets to form aggregated data packets and sends the aggregated data packets to the switch.

A router with network virtualization and configuration may be configured for a client site including a plurality of electronic devices. A configuration may be downloaded by the router, which then performs network configuration steps automatically including by identifying the plurality of devices at the client site and provisioning them according the LAN configuration. A user interface (UI) for configuring a network may include a router administrator dashboard for creating a detailed network configuration by assigning a plurality of ports of the router to the plurality of electronic devices in the selected network configuration, and sending the detailed network configuration to the router for use by the router in creating a network with the plurality of electronic devices at the client site.

To allow a customer to control network keys in a virtual cloud network, a network interface card such as a smart NIC is used to provide encryption such as a network encryption virtual function (NEVF) for virtual machines. The NEVF includes a memory device (e.g., SRAM) and a crypto processor (e.g., a crypto core). The memory device stores an encryption key. The crypto processor encrypts data to and from the virtual machines in the virtual cloud network using the encryption key. A key management service can be used to securely transfer the encryption key to the NEVF. Having one NEVF per virtual machine can allow a customer to manage encryption keys for the virtual cloud network.

The present disclosure provides dynamic routing for data flows to a customer network hosted in the cloud. A plurality of compute instances may share a common virtual IP address. Each of the plurality of compute instances may advertise information to a respective network virtualization device (NVD). The information may include the IP address, cost, and / or active / standby status of the compute instance. The NVD may then provide the information to the control plane of a virtual cloud network (VCN), which may aggregate the information from the plurality of compute instances and generate a forwarding table, which may be sent to the NVDs. These techniques may allow a customer to automatically remove a compute instance whose service host has failed. These techniques may also allow a customer to add compute instances and to route data flows according to an active-standby operation, an equal cost active-active operation, or an unequal cost active-active operation.

To provide a network device, method and system for virtualizing a network.SOLUTION: A network device 500 comprises a physical transceiver port for transferring data at a predetermined fixed data rate and a virtual circuit, wherein the virtual circuit receives a request to transfer an incoming data stream at a non-predetermined data rate and establishes a virtual port. The virtual port includes a FIFO buffer that operates as a token bucket that is periodically filled with tokens and emptied when full, selects from the physical transceiver ports a physical transceiver port having a total predetermined fixed data rate that is higher than the non-predetermined data rate, and when the token bucket of the virtual port is full, forwards the output data stream to the selected physical transceiver port to forward all tokens from the token bucket to the physical transceiver port at the predetermined fixed data rate.SELECTED DRAWING: Figure 5