74 results about "Network virtualization" patented technology

Techniques are disclosed for providing high performant packets processing capabilities in a virtualized cloud environment that enhance the scalability and high availability of the packets processing infrastructure. In certain embodiments disclosed herein, the VNICs functionality performed by network virtualization devices (NVDs) is offloaded from the NVDs to a fleet of computers, referred to as VNIC-as-a-Service System (or VNICaaS system). VNICaaS system is configured to provide Virtual Network Interface Cards (VNICs)-related functionality or service for multiple compute instances belonging to multiple tenants or customers of the CSPI. The VNICaaS system is capable of hosting multiple VNICs to process and transmit traffic in a distributed virtualized cloud networks environment. A single VNIC executed by the VNICaaS system can be used to process packets received from multiple compute instances.

A first network device of a first data center may encode a source tenant system interface (TSI) group identifier into a tag protocol identifier and a group-based policy identifier, and may encode the tag protocol identifier and the group-based policy identifier into a virtual extensible local area network (VXLAN) packet with the source TSI group identifier, where the source TSI group identifier is not included in a header of the VXLAN packet. The first network device may provide the VXLAN packet, with the source TSI group identifier, to a second network device of a second data center, via an Ethernet virtual private network (EVPN) multiprotocol label switching (MPLS) network.

The invention relates to the technical field of computer server resource management and network virtualization, and particularly discloses a server hybrid deployment and management system based on a virtualization technology, which comprises a uniform resource abstraction layer, a global resource sensing and modeling unit, a strategy-driven intelligent arrangement engine and a heterogeneous resource execution adapter. The uniform resource abstraction layer performs standardized abstraction on a physical server, a virtual machine and a container; the global resource sensing and modeling unit integrates the resource data and constructs a global resource model; a strategy-driven intelligent arrangement engine performs multi-objective optimization solution based on strategies and constraints to generate a scheduling scheme; the heterogeneous resource execution adapter translates the scheme into bottom executable atomic operations. According to the invention, unified management and intelligent cooperative scheduling of heterogeneous computing resources are realized, and the resource utilization efficiency and the system automation level are improved.

The invention relates to a multi-modal network dynamic loading and management system and method based on modal virtualization, and belongs to the technical field of network system structures and virtualization. By constructing a modal virtualization layer and a modal description language analysis mechanism, the limitation that traditional network virtualization is only oriented to a single protocol stack is broken through, unified packaging and isolation of multiple network modalities such as IP, TSN, ICN and custom protocols are achieved, the dual-modal state snapshot and traffic mirroring technology is utilized, and the network modality is improved. The problem of service interruption in the online switching process of the network modes is solved; and further in combination with a vectorized heterogeneous resource elastic scheduling model, global optimal configuration and on-demand mapping of the CPU, the GPU, the FPGA and the P4 programmable switching chip are realized.

A method implemented by a first cloud gateway (GW). The method includes receiving, from a first customer premises edge device (CPE) over a software defined wide area network (SD-WAN) path, a data packet including an outer layer internet protocol (IP) header and a generic network virtualization encapsulation (GENEVE) header. The GENEVE header includes one or more sub-type length values (TLVs). The method also includes extracting a destination address from the one or more sub TLVs within the GENEVE header. And the method further comprises the steps of updating the destination IP address in the outer-layer IP header to the extracted destination address, and forwarding the data packet to a second CPE according to the updated destination IP address.

Improved network traffic flow processing techniques are described. In a network device providing multiple processing planes, each processing plane comprising multiple processing units, techniques are described that take advantage of flow affinity / locality principles such that the same processing component of a processing plane, which previously performed processing for a network flow, is used for performing subsequent processing for the same network flow. This enables faster processing of network traffic flows by the network device. In certain implementations, the techniques described herein can be implemented in a network virtualization device (NVD) that is configured to perform network virtualization functions.

Techniques are described for communications in an L2 virtual network. In an example, the L2 virtual network includes a plurality of L2 compute instances hosted on a set of host machines and a plurality of L2 virtual network interfaces and L2 virtual switches hosted on a set of network virtualization devices. An L2 virtual network interface emulates an L2 port of the L2 virtual network. Storm control information applicable to the L2 port is sent to a network virtualization device that hosts the L2 virtual network interface.

Disclosed systems, apparatuses, and methods enable remotely controlling robotic-assisted medical systems, such as robotic-assisted surgery systems, for performing remote robotic-assisted medical procedures. Disclosed approaches provide a secure, efficient, and dynamically-created virtual network for connecting physician consoles and robotic-assisted medical systems. Disclosed approaches improve efficiency, security, scalability, and reliability of remote robotic-assisted medical procedures.

Systems and methods for encrypting data between a customer and a virtual cloud network (VCN) for end-to-end encryption, where the customer manages the encryption keys.SOLUTION: The network head end device, VCN Head End 704, accepts the first key provisioned by the customer, receives the first data packet sent from the customer's device, and decrypts the first data packet using the first key to obtain the information. The network virtualization device 624 receives the information from the network head-end device, confirms that the information is to be sent to the virtual machine in the virtual cloud network, confirms that data in the virtual cloud network is to be encrypted, encrypts the information using the second key to generate a second data packet, and routes the second data packet to the virtual machine in the virtual cloud network 312.SELECTED DRAWING: Figure 7

Techniques for monitoring data transport in a network virtualization function (NVF) chain. A path tracing packet is generated having a Midpoint Compressed Data (MCD) to collect path tracing information of the NVF chain. The NVF node is configured to record an MCD containing Wide Local Path Tracing Identification (WL PT ID). The WL PT ID includes a first field having a value that indicates that a non-standard path tracing format is to be used and has a second field that indicates a particular path tracing format to be used. The path tracing packet is passed through the NVF chain and is then received back again after passing through the NVF chain. Data collected by the path tracing packet is analyzed to determine which NVF nodes the path tracing packet passed through, and the amount of time taken for the path tracing packet to pass through, the NVF chain.

A network management apparatus includes at least one processor. The processor is configured to execute a reception process of receiving a signal supplied when degradation in performance of a VNF or CNF exceeding a threshold value is detected in a network virtualization environment, a specifying process of specifying a hardware resource related to performance degradation when the signal is received, and a first command transmission process of transmitting a command to perform auto-healing so as to deploy a hardware resource other than the specified hardware resource for the VNF or CNF having degraded performance.

The application discloses an intelligent network card, a cloud server and a traffic forwarding method. The intelligent network card comprises a network virtualization component and a physical network card, a symmetric hash module and a plurality of groups of data flow forwarding queues connected with the symmetric hash module; a plurality of software CPUs are arranged on the network virtualization component; the data flow forwarding queues are arranged to correspond to unique software CPUs; the symmetric hash module is used for being connected with the physical network card and a virtual machine in communication respectively, performing symmetric hash operation on five-tuple information of a forward data flow sent by the virtual machine and five-tuple information of a reverse data flow sent by the physical network card respectively, sending the forward and reverse data flows belonging to a same session to data flow forwarding queues corresponding to operation results, and enabling the forward and reverse data flows belonging to the same session to be forwarded by software CPUs corresponding to the data flow forwarding queues. The application removes session cross-CPU lock overhead and core-to-core communication overhead, and greatly improves new connection performance.

The invention discloses a network virtualization resource management method and system, and relates to the technical field of intelligent resource management, and the method comprises the steps: initializing an AoL virtual queue, dynamically updating the queue through a Lyapunov drift method, dividing scene feature groups in combination with an ODSS algorithm, fusing prediction results of multiple models, correcting deviation through a Lyapunov-ODSS objective function, and refining the prediction results according to priorities. And an OPT-JR multi-objective function is defined, and an optimal resource allocation vector is solved by using an NSGA-II algorithm. According to the method, the Lyapunov drift theory is introduced to carry out resource regulation and control, the ODSS feature screening algorithm is combined to carry out feature selection, the robustness and real-time performance of resource management are improved, multiple models are fused to carry out collaborative prediction, the precision and stability of resource demand prediction are improved, and the utilization efficiency and intelligent scheduling of resources in a virtualized network are realized.

This invention relates to a three-site mutual backup method under a commercial encrypted network virtualization architecture, belonging to the field of network communication technology. It addresses the technical problems of existing cross-regional and cross-network segment communication schemes, including insufficient interconnection security, adaptability, data backup efficiency, fault switching response speed, hardware architecture cost-effectiveness, and incomplete scenario coverage. The method includes the following steps: master station backup generation; parallel off-site replication; breakpoint resumption and anomaly recovery; local storage and version retention at branch stations; fault switching and local recovery. The three-site mutual backup method under the commercial encrypted network virtualization architecture of this invention offers: superior interconnection security and adaptability, more efficient and complete data backup, low-impact automated fault switching, a more reasonable and cost-controllable hardware architecture, higher detection accuracy, and stronger scalability.

A network management apparatus includes at least one processor. The processor is configured to execute a reception process of receiving a signal supplied when a problem is detected in any of a plurality of logical networks in a network virtualization environment, and a first determination process of determining not to perform auto-healing in a case in which a problem is detected in a first logical network that is configured for platform monitoring and a problem is not detected in a second logical network that is configured for application monitoring.

The present invention relates to the technical field of optical communications, and discloses a method and system for providing virtual network topology configuration services based on MAML and transfer learning, and a storage medium. The method includes: building a network architecture using a software-defined network; receiving, by the network architecture, configuration information to configure a virtual network topology; and calling, by the network architecture, an intelligent machine learning service providing module to execute an MAML algorithm and a transfer learning algorithm to provider a user with machine learning services, the machine learning services including quality of transmission estimation, fault management, and resource allocation. By means of the present invention, the quality of service and efficiency of network virtualization can be improved.

A virtualized network function (VNF) of a network function virtualization (NFV) link level architecture includes a management plane function (MPF) to map a logical interface as a virtual interface in a control plane function (CPF) of the VNF. The MPF maps a logical resource of the NFV virtualization link level architecture as a shadow resource on one or more data plane functions (DPFs) of the VNF, wherein a virtual link is formed by the logical interface, the shadow resource, and the virtual interface. One of the DPFs receives a packet over the virtual link from a switch and classifies a type of the packet. In response to the packet type being a data packet, the DPF aggregates the packet with other data packets to form aggregated data packets and sends the aggregated data packets to the switch.

To allow a customer to control network keys in a virtual cloud network, a network interface card such as a smart NIC is used to provide encryption such as a network encryption virtual function (NEVF) for virtual machines. The NEVF includes a memory device (e.g., SRAM) and a crypto processor (e.g., a crypto core). The memory device stores an encryption key. The crypto processor encrypts data to and from the virtual machines in the virtual cloud network using the encryption key. A key management service can be used to securely transfer the encryption key to the NEVF. Having one NEVF per virtual machine can allow a customer to manage encryption keys for the virtual cloud network.

The present disclosure provides dynamic routing for data flows to a customer network hosted in the cloud. A plurality of compute instances may share a common virtual IP address. Each of the plurality of compute instances may advertise information to a respective network virtualization device (NVD). The information may include the IP address, cost, and / or active / standby status of the compute instance. The NVD may then provide the information to the control plane of a virtual cloud network (VCN), which may aggregate the information from the plurality of compute instances and generate a forwarding table, which may be sent to the NVDs. These techniques may allow a customer to automatically remove a compute instance whose service host has failed. These techniques may also allow a customer to add compute instances and to route data flows according to an active-standby operation, an equal cost active-active operation, or an unequal cost active-active operation.

To provide a network device, method and system for virtualizing a network.SOLUTION: A network device 500 comprises a physical transceiver port for transferring data at a predetermined fixed data rate and a virtual circuit, wherein the virtual circuit receives a request to transfer an incoming data stream at a non-predetermined data rate and establishes a virtual port. The virtual port includes a FIFO buffer that operates as a token bucket that is periodically filled with tokens and emptied when full, selects from the physical transceiver ports a physical transceiver port having a total predetermined fixed data rate that is higher than the non-predetermined data rate, and when the token bucket of the virtual port is full, forwards the output data stream to the selected physical transceiver port to forward all tokens from the token bucket to the physical transceiver port at the predetermined fixed data rate.SELECTED DRAWING: Figure 5

A network management apparatus includes at least one processor. The processor is configured to execute a reception process of receiving a signal supplied when a problem is detected in any of a plurality of logical networks in a network virtualization environment, and a first determination process of determining not to perform auto-healing in a case in which a problem is detected in a first logical network that is configured for platform monitoring and a problem is not detected in a second logical network that is configured for application monitoring.

The invention discloses an ad hoc network simulation method based on network virtualization, belongs to the technical field of computer communication, and aims to solve the problems of insufficient compatibility, inflexible link control and weak topology time-varying simulation capability of traditional ad hoc network simulation. The core of the system is that a simulation architecture comprising a simulation configuration module, a service application module, a communication node module, an analog channel module and a data acquisition module is constructed, service application and a real equipment protocol stack are packaged through a container virtualization technology, and a real product and an upper-layer service application software protocol are supported to be directly deployed without transplantation. The system is compatible with a two-layer Ethernet and a three-layer IP protocol, integrates a communication link electromagnetic propagation model, is combined with OpenvSwitch and TC tools, is matched with a software defined network technology to control link quality and network topology time-varying characteristics, is adaptive to static and dynamic topology scenes, improves simulation authenticity and flexibility, and provides reliable support for ad hoc network testing.

There is provided a network management apparatus performing a first storage process, a second storage process, a search process, and a presentation process. The first storage process stores logs of a plurality of components constituting a virtualization environment of a network. The second storage process stores correspondence information in which, for each failure that may occur in the network, error logs of the plurality of components related to the failure are associated with each other. The search process searches, when a failure occurs in the network, based on an error log of a first component among the plurality of components, for an error log of a second component related to the failure from the stored logs using the correspondence information. The presentation process presents a result of the search to a user.

Techniques for monitoring data transport in a network virtualization function (NVF) chain. A path tracing packet is generated having a Midpoint Compressed Data (MCD) to collect path tracing information of the NVF chain. The NVF node is configured to record an MCD containing Wide Local Path Tracing Identification (WL PT ID). The WL PT ID includes a first field having a value that indicates that a non-standard path tracing format is to be used and has a second field that indicates a particular path tracing format to be used. The path tracing packet is passed through the NVF chain and is then received back again after passing through the NVF chain. Data collected by the path tracing packet is analyzed to determine which NVF nodes the path tracing packet passed through, and the amount of time taken for the path tracing packet to pass through, the NVF chain.

A cloud service is provided and accessible via a virtual IP address in a virtual cloud network (VCN), where the VCN is part of an overlay network. A source network virtualization device (NVD) receives a first packet destined to the virtual IP address. The source NVD determined based upon a dynamic routing gateway table, the VCN mapped to the virtual IP address. Further, the source NVD identifies based upon the virtual IP address, a substrate IP address of a destination NVD that implements a virtual network interface card (VNIC) associated with the virtual IP address and communicates the first packet from the source NVD to the destination NVD using the substrate IP address.

A processor acquires a current change request of a network virtualization environment, and automatically rejects the current change request if a determination criterion that satisfies a value of a comparison item in the current change request is not detected in a determination criterion management database. If the determination criterion that satisfies the value of the comparison item is detected, the processor searches for a past change record that satisfies the determination criterion (execution result of the past change of the same type). If the execution result of the past change is not detected, the processor automatically rejects the current change request. If the execution result of the past change is detected, the processor automatically approves the current change request when a predetermined condition related to the execution result of the past change is satisfied, but automatically rejects the current change request when the predetermined condition is not satisfied.

A method implemented by a first cloud gateway (GW). The method includes receiving, from a first customer premises edge (CPE) on a Software-Defined Wide Area Network (SD-WAN) path, a packet comprising an outer Internet Protocol (IP) header and a generic network virtualization encapsulation (GENEVE) header. The GENEVE header includes one or more sub-type length values (TLVs). The method further includes extracting a destination address from the one or more sub-TLVs within the GENEVE header. The method also includes updating a destination IP address in the outer IP header with the extracted destination address and forwarding the packet to the second CPE based on the updated IP destination address.

The invention provides a wide-narrow band converged communication system and method based on 5G and PDT, and relates to the technical field of network virtualization communication. Wide-narrow band communication situation awareness is executed through a wide-narrow band communication situation awareness module; performing communication network signaling bearer determination and communication network service interruption evaluation in sequence to obtain a corresponding service interruption evaluation result; the broadband and narrowband converged communication coordination module is used for executing broadband and narrowband communication network coordination based on the service interruption evaluation result after the broadband and narrowband communication situation awareness module obtains the service interruption evaluation result so as to obtain a communication network coordination result; and the broadband-narrowband communication effect analysis module is used for executing broadband-narrowband communication effect analysis based on the communication network cooperation result after the broadband-narrowband converged communication cooperation module obtains the communication network cooperation result and judging whether a broadband-narrowband communication effect qualification prompt is sent to a preset person or not, and finally the overall broadband-narrowband communication effect is poor.

The invention relates to the technical field of virtualization resource management, and particularly provides a railway Beidou application service cloud platform based on virtualization and resource management, which comprises a computing virtual module, a network virtual module, an authentication module, an equipment management module, a container management module, an arrangement module and a storage module. Network function virtualization is achieved through the NFV technology, virtual network slices are provided, and the network isolation requirements of multiple tenants are met; the container management module is integrated with other core services, so that rapid popularization and batch management of containers are realized; and a cloud native application low-code development platform is provided, so that quick and deep customization of service development is realized, and the development efficiency and the cooperation efficiency are improved. According to the method, virtualization and centralized scheduling management of computing, storage and network resources are covered, and the limitation of a traditional network virtualization technology in the cloud computing era is solved.