392 results about "Packet forwarding" patented technology

The invention discloses a distributed model training-oriented routing reconstruction method in a hybrid photoelectric network, and belongs to the field of network communication optimization. The method comprises the following steps: constructing a collaborative routing model based on a current network flow state and topological information, and introducing an adaptive weight mechanism to dynamically adjust the priority of optical channels and electric packet forwarding, thereby realizing efficient collaborative utilization of multi-layer forwarding resources. According to the method, path reconstruction can be rapidly completed according to task characteristics and a network dynamic state, so that the system resource utilization rate is improved, and the maximum task completion time delay is reduced. Compared with a traditional fixed routing and semi-dynamic routing method, the method has the advantages that the average completion time delay and the maximum time delay are improved by more than 45% in the large-flow environment generated by large-scale model training, and the method has good expandability and real-time performance and is particularly suitable for burst flow intensive intelligent computing cluster scenes.

The invention relates to the technical field of integrated circuits and computer networks, and particularly discloses a transmission control and intelligent scheduling system for an integrated chip, and the system sets a dual-mode decision and dynamic switching mechanism for each routing node. Calculating dynamic characteristic parameters including an instantaneous value, a first-order trend and a second-order acceleration; when the parameter is matched with a pre-stored abnormal feature set and the load exceeds a threshold value, the node is immediately atomized and switched to a predefined security scheduling strategy loaded from a shared storage area, and otherwise, the node generates a scheduling decision according to self-adaptive decision logic continuously optimized based on historical performance feedback; all the nodes carry out data packet forwarding control according to the current execution strategy; and the system also periodically realizes federated global knowledge evolution according to the quality evaluation result of the self-adaptive decision of each node.

Example methods and systems for flow-based secure packet forwarding are described. In one example, a first computer system may assess validity of a security token associated with a flow of one or more packets. In response to determination that the security token is valid, a security association associated with the flow and the security token may be negotiated with a second computer system. The first computer system may process a packet associated with the flow and the security token to generate an encapsulated encrypted packet by performing encryption and encapsulation based on the security association. The encapsulated encrypted packet may be forwarded towards the second computer system to cause the second computer system to perform decapsulation and decryption, and to forward a decapsulated and decrypted packet towards the destination.

The invention relates to the technical field of network communication, and discloses a ubiquitous network dynamic fair rate cooperative control method, which aims at link time varying, topology reconstruction and multi-source and multi-path concurrency characteristics of an air-space-ground-sea fusion network. A routing node periodically collects indexes such as a request satisfaction rate, a queue length and a multi-hop queuing-free proportion to obtain link transmission quality and dynamically update an interest packet forwarding table; deducing a queue upper limit, calculating a rate shaping value in combination with an interest packet forwarding proportion, and carrying out delayed transmission on an over-limit interest packet; when the interest queue exceeds a threshold value, a congestion feedback value is generated and goes down along with a data packet, and an uncongested interface obtains a release bandwidth through probability compensation; and if the whole path is still congested, the consumer multiplicatively shrinks the sending window according to the feedback proportion. According to the method, the throughput is remarkably improved and the queuing delay is reduced while fair allocation of bandwidth resources is ensured.

The present application provides an endogenous-security network method and architecture, a medium, and a device. The method comprises: extracting forwarding characteristic information of normal service data flows; delivering the forwarding characteristic information of the normal service data flows to a transport network element, so as to form a forwarding table entry, a flow table, and a forwarding white list, wherein forwarding modes in a method for binding service data flow forwarding characteristics to forwarding table entries of transport network elements comprises: an authentication and authorization mode and an automatic learning mode; the transport network element performing packet forwarding according to the forwarding characteristic information of the normal service data flows; and discarding packets of abnormal service data flows, wherein packet identification is performed for forwarding operations on the basis of a whitelist automatically generated from configuration files of switches and routers. The present application solves the technical issue of an IP network having low inherent security protection capabilities due to the openness thereof and thus requiring the deployment of a large number of external security protection facilities. The issue results in poor effectiveness, high costs, and difficulty in establishing low-cost security protection capabilities, and ultimately makes the IP network easy to attack but difficult to defend.

Devices, networks, systems, methods, and processes for packet forwarding and routing are described herein. A leaf switch can be in communication with a host device. The leaf switch may configure a subnet comprising the host device. The leaf switch can assign a next hop interface as a system port of the leaf switch and generate subnet information indicative of the assignment. The leaf switch may distribute the subnet information to one or more network devices through one or more internal Border Gateway Protocol sessions. A data packet destined to the host device can be transmitted to the system port of the leaf switch when a host Media Access Control (MAC) address of the host device is not resolved. The leaf switch can resolve the host MAC address and transmit the data packet to the host device based on the host MAC address.

Devices, networks, systems, methods, and processes for packet forwarding and routing are described herein. A network device may be connected to a host device. The network device can identify an interface associated with the host device and determine an operational status of the interface. The network device can determine a host route and assign an encapsulation index associated with the host route. The network device may generate an update message based on the operational status and the encapsulation index. The network device can transmit the update message to one or more other network devices. The network device can also update one or more routing or forwarding tables to include routing information associated with the host device. The other network devices can extract the routing information from the update message and may utilize the routing information to route or forward one or more data packets addressed to the host device.

A method for detecting network attack based on kernel operating characteristics of a software switch, comprising: collecting kernel operating characteristic data of the software switch during network management and packet forwarding of the software switch, wherein the kernel operating characteristic data of the software switch can reflect characteristic data of a fine-grained operating state of a network; preprocessing the kernel operating characteristic data of the software switch; and inputting the preprocessed kernel operating characteristic data of the software switch into a pre-trained attack detection model to detect a potential attack behavior in a network. The method is applicable to all scenarios where the software switch is applicable, especially a software-defined network and a cloud data center, an industrial Internet, 5G, edge computing based on the software-defined network. More accurate and timely detection and early warning of potential anomalies and attack behaviors in the network can be implemented.

A packet forwarding method, apparatus, and system are provided, and belong to the field of network technologies. A destination address field of a first packet received by a first network node includes a compressed segment identifier corresponding to a first outbound interface or a next-hop node of the first network node; based on the first outbound interface being faulty or the next-hop node being faulty, the first network node determines a second segment identifier based on segment identifier planning information of the node corresponding to the compressed segment identifier, and forwards the first packet based on the second segment identifier, where the second segment identifier is a segment identifier in a segment list of the first packet or a segment identifier in the destination address field.

A disclosed computing device capable of intelligent power management of underutilized packet forwarding devices may include (1) a plurality of packet forwarding devices and (2) a controller communicatively coupled to the plurality of packet forwarding devices, wherein the controller is programmed to (A) search for configuration data associated with the plurality of packet forwarding devices, (B) determine, based at least in part on the search for the configuration data, that a packet forwarding device included in the plurality of packet forwarding devices is underutilized, and (C) reduce power consumption of the packet forwarding device in response to determining that the packet forwarding device is underutilized. Various other apparatuses, systems, and methods are also disclosed.

The invention provides a signaling security protection method, device, system, equipment, medium and product, and relates to the technical field of data interaction, the method is applied to a UPF, and the method comprises the following steps: based on the flow of a PFCP (Packet Forwarding Control Protocol) signaling of an interface between the UPF and a session management function network element SMF, the security of a field of the PFCP signaling, and an abnormal port where the UPF is butted with a network security component; determining a threat comprehensive score; determining a protection strategy of signaling security based on the threat comprehensive score; and performing security protection on the PFCP signaling based on the protection strategy. According to the invention, the defense level is dynamically regulated and controlled according to the threat comprehensive score, the signaling security is ensured, the influence of the protection strategy on the system performance is reduced as far as possible, the security of the protection strategy and the influence on the system performance can be better balanced, and the security protection efficiency and the network stability and reliability are improved.

In a communication method, a first session management function (SMF) determines, based on a group identifier of a group to which a target user equipment belongs, a first user plane function (UPF) connected to a first user equipment, where the first user equipment is an access point user equipment in the group; the first SMF sends an Internet Protocol (IP) address of the target user equipment and / or the group identifier to the first UPF; and the first UPF establishes a General Packet Radio Service (GPRS) Tunneling Protocol User Plane (GTP-U) tunnel between the first UPF and the second UPF, and stores a correspondence between the IP address and the GTP-U tunnel to implement packet forwarding.

A packet to be forwarded over a computer network to a destination is received. A group of multiple network paths is available to forward to the packet to the destination. One or more path selection factors are determined to be used to identify a specific network load balancing algorithm to select a specific network path from the group of multiple network paths. The one or more path selection factors include at least one path selection factor determined based at least in part on a dynamic state of the computer network or a network node in the computer network. In response to selecting, by the specific network load balancing algorithm, the specific network path from among the group of multiple network paths, the packet is forwarded over the specific network path.

The embodiment of the invention discloses a message forwarding method, electronic equipment, a storage medium and a program product. The message forwarding method comprises the following steps: receiving a virtual routing forwarding message sent by private network equipment; the virtual routing forwarding message carries first target address information; determining a first service flow corresponding to the virtual routing forwarding message according to the first target address information; determining a first network tunnel corresponding to the virtual routing forwarding message according to the first service flow and a preset association relationship; the preset association relationship is a corresponding relationship between the identification information of the service flow and the network tunnel; the identification information of the service flow comprises first identification information of the first service flow; and forwarding the virtual routing forwarding message to a target network device corresponding to the first target address information through the first network tunnel. According to the invention, the configuration efficiency and the configuration flexibility of the message forwarding path can be improved.

The invention relates to an optical modem connection scheduling method based on scene awareness and dynamic resource slicing. The method comprises the following steps: collecting application layer data in real time, analyzing application layer protocol characteristics, identifying an application scene, and predicting a bandwidth demand and a change trend based on the application scene; creating a private network slice for the emergency task; detecting a network flow mode in real time, acquiring an application type of the network flow mode, identifying a high-bandwidth downloading behavior, detecting a network index of a delay sensitive application in real time to determine a service level protocol, and determining a real-time application priority and a current demand according to the application type and the service level protocol; the required minimum bandwidth is calculated, dynamic speed limiting, bandwidth redistribution and network utilization rate monitoring are carried out on high-bandwidth downloading application, and downloading bandwidth limitation is temporarily improved when the total utilization rate is lower than a threshold value and continues for specified time; calculating a risk score; a heartbeat packet acceleration channel is set, an independent UDP packet forwarding path is developed for key IoT equipment, the connection state of the IoT equipment is detected in real time, and an emergency communication plan is triggered when the IoT equipment is abnormal.

Embodiments of this application disclose an in-network computing packet forwarding method, a forwarding node, and a computer storage medium, and belong to the field of communication technologies. In the method, a forwarding node receives a plurality of in-network computing packets; determines an in-network computing identifier of each in-network computing packet; performs, based on the in-network computing identifier of each in-network computing packet, aggregation computing on in-network computing packets that belong to a same in-network computing message in the plurality of in-network computing packets, to obtain at least one aggregated packet; and forwards each aggregated packet by using a hash routing algorithm based on an in-network computing identifier corresponding to each aggregated packet.

A data processing method and apparatus, and a network device. The method is applied to a network device comprising a plurality of data transmission ports, and comprises: parsing an initial data packet transmitted by a data transmitting end, and determining a packet feature of the initial data packet; when the initial data packet is determined as a target data packet on the basis of the packet feature, determining a forwarding policy of the target data packet on the basis of the packet feature and a packet forwarding routing table, wherein the packet forwarding routing table is generated by means of load balancing states of the plurality of data transmission ports; and on the basis of the forwarding policy of the target data packet, determining a target data transmission port from among the plurality of data transmission ports, and using the target data transmission port to forward the target data packet to a data receiving end.

The invention relates to a traffic scheduling method and device, computer equipment, a storage medium and a program product. The method comprises the following steps: a data processing unit of a sending end analyzes message characteristics of a message and obtains link state information fed back by a switch; adding a corresponding classification mark to the message based on the message characteristics and the link state information; the classification mark is one of a plurality of preset classification marks; sending the data packets carrying the classification marks to a switch, and indicating the switch to select different load balancing modes to send the message by adding different classification marks; wherein the different load balancing modes at least comprise a stream-by-stream mode and a packet-by-packet mode. Therefore, coexistence of a packet-by-packet forwarding mode and a flow-by-flow forwarding mode of the network can be realized, the marking strategy of the message can be dynamically adjusted in combination with the congestion condition of the network, the message is forwarded by using different load balancing modes under different network congestion conditions, network congestion is effectively avoided, and server resource overhead in the network is saved.

The invention discloses an inter-satellite routing processing method and device based on a controller, related equipment, a product and a storage medium. Comprising the following steps: receiving a hypertext transfer protocol (HTTP)-based addressing request sent by at least one satellite; the addressing request comprises source address information, destination address information and to-be-transmitted data information; sending an HTTP-based addressing response to the at least one satellite based on the addressing request; determining a control instruction issued by a switch on each satellite according to the source address information, the destination address information and preset mapping information; sending a control instruction to at least one satellite; the control instruction is used for the at least one satellite to judge whether the forwarding time delay of at least one route between the first satellite and the second satellite exceeds the effective time of a preset forwarding route, and if the forwarding time delay of the at least one route does not exceed the effective time of the preset forwarding route, forwarding the at least one route to the second satellite. And carrying out IP packet forwarding on the to-be-transmitted data information according to the control instruction.

Disclosed are a packet forwarding method and system, an electronic device, and a storage medium. The method comprises: receiving an initial packet sent by forwarding hardware, wherein the initial packet is a packet satisfying a preset dispersion condition, the preset dispersion condition is used for dispersing a target packet to obtain a packet needing to be processed by a first virtual switch, and the target packet is a packet for which a forwarding path cannot be determined on the basis of a flow table of the forwarding hardware; and generating a first packet corresponding to the initial packet, and sending the first packet to the forwarding hardware, such that the forwarding hardware forwards the first packet on the basis of identification information in the first packet, wherein the identification information is used for representing a forwarding path of the initial packet.

The invention relates to the technical field of data packet forwarding, and discloses a data packet forwarding method and device, a switch, a system and a storage medium, the method is applied to a first switch, the first switch is connected with at least one second switch, and the method comprises the following steps: receiving a current data packet; a target second switch is determined based on the current data packet and a preset protocol label forwarding table, the preset protocol label forwarding table is a mapping table of corresponding relations between different data packets and the second switches, and the preset protocol label forwarding table is constructed through a current link state and a current network topology; the current network topology is a connection relation topology between the switches, and the current link state is a connection state between the switches; and sending the current data packet to the target second switch. By monitoring the network topology and the link state information in real time, the preset protocol label forwarding table is dynamically constructed, so that the flexibility of data packet forwarding is improved.

The invention belongs to the technical field of industrial automation control, and particularly relates to a system and a method for remotely managing a multi-brand PLC (Programmable Logic Controller) by an upper computer of a Microsoft operating system, and the system comprises an engineer station which is provided with PLC editing software and an onion client which is integrated with a TAP virtual network card driver; the host computer of the Microsoft operating system is deployed in a field network where the PLC is located, is provided with a user mode packet forwarding program, and does not need to install any bottom layer driving program, and the program is called as an onion gateway; the onion console is used for an administrator to configure PLC equipment information and an engineer access authority strategy; according to the host computer remote management multi-brand system based on the Microsoft system, through a strategy pre-distribution mechanism, a virtual network card interception technology and a Tun2sockets technology, host computer undriven multi-brand PLC remote authorization access of a Microsoft operating system is realized.

This application provides a communication method and apparatus, relating to the field of communication technology. The method is applied to a first network device in a multi-machine backup group. Each network device in the multi-machine backup group establishes an SRv6 PW tunnel with a second network device. Multiple SRv6 PW tunnels form an equivalent path. The method includes: obtaining the current operating status of the first network device; and, based on the current operating status, sending or not sending routing information to the first network device. The routing information includes a cost value, so that the second network device, having received at least one routing information, selects the SRv6 PW tunnel with the lowest cost value as the path for forwarding the target packet. The SRv6 PW tunnel with the lowest cost value is the SRv6 PW tunnel between the second network device and the primary device in the multi-machine backup group. This solution can solve the problems of bandwidth waste and low packet forwarding efficiency caused by packet detours in multi-machine backup networking.

The application discloses a multi-service traffic grouping scheduling method for a P4 switch processor core, mainly comprising a feature extraction method based on a statistical interval and a Sketch, comprehensive data packet time correlation and traffic dynamic change, an optimized Bloom filter conflict detection mechanism, improved adaptability and accuracy of the algorithm in a limited resource environment; a decision tree model is combined with scheduling, a decision tree is reconstructed to adapt to a P4 switch operation mode and data processing demand, high-precision service flow classification under line-speed operation is ensured; a grouping scheduling method AD-PIFO is designed based on variable priority, data packet forwarding priority is dynamically adjusted, different service QoS demand is met, and the overall performance and efficiency of the switch are improved. The method is outstanding in high-priority traffic throughput and low-latency performance, and the medium-low-priority traffic throughput is better than that of similar algorithms, is stable and effective under different load conditions, has reasonable additional time overhead of data packet transmission, and is widely used in SDN network optimization data packet scheduling scenes.

This invention discloses a bypass transmission architecture for encrypted network interface cards (NICs) based on parallel feature extraction. The architecture includes: a packet stream input interface, a control path unit, a data path unit, a decision window merging unit, a fragmentation-aware incremental checksum correction engine unit, and a security control unit. This invention can reduce forwarding latency, improve transmission determinism and resource utilization, and enhance packet forwarding efficiency in high-speed network scenarios. By using a deterministic delay storage module that matches worst-case latency, timing synchronization between control flow and data flow is achieved, reducing the risk of timing races and rule misjudgments. Simultaneously, the fragmentation-aware incremental checksum correction engine reduces the risks of insufficient fragmentation packet compatibility, checksum miscalculations, and resulting packet loss in traditional solutions.

The application provides a data transmission method, a distributor, a data transmission system and a medium, relates to the technical field of computers, and the method is applied to a distributor device arranged between a zero-trust server cluster and a switch, and comprises the following steps: receiving a client virtual IP and a target server MAC address sent by a target server after the target server is logged in at a client and is assigned a virtual IP; writing the corresponding relationship into a first ARP table; receiving an access data packet sent by the target server, forwarding the access data packet to a business system through the switch; receiving a response data packet sent by the switch, the response data packet having a client virtual IP as a destination IP; querying the first ARP table according to the destination IP to obtain the target server MAC address, forwarding the response data packet to the target server, and returning the response data packet to the client by the target server. According to the application, the virtual IP and the server MAC are mapped and stored by the distributor, accurate packet forwarding of the cluster is realized, and resource waste caused by multicast of the switch is avoided.

Techniques for using Prefix Address Translation (PAT), Mobile Internet Protocol (MIP), and / or other techniques to anonymize server-side addresses in data communications. Rather than allowing a server and / or endpoint have visibility of a client IP address of a client device accessing the server and / or endpoint, a virtual network service instead returns a PAT IP address that is mapped to the client device and / or the endpoint device. In this way, IP addresses of clients devices are obfuscated by the virtual network. The client device may then communicate data packets to the server and / or endpoint using the PAT IP address as the source address, and the virtual network service that works in conjunction with the server and / or endpoints can convert the PAT IP address to the actual IP address of the client for return packets using PAT and forward the return packet onto the client device.

The application discloses a spontaneous packet forwarding method and device, electronic equipment and storage medium, and the method comprises the following steps: an uplink module of a packet flow pipeline marks a spontaneous packet after obtaining the spontaneous packet, and forms a to-be-forwarded spontaneous packet; the uplink module of the packet flow pipeline collects packet information according to the to-be-forwarded spontaneous packet; the uplink module of the packet flow pipeline writes the collected information into the to-be-forwarded spontaneous packet, forms a first spontaneous packet, and redirects the first spontaneous packet to a module of a next flow pipeline; the module of the next flow pipeline collects information of the flow pipeline, forms a target spontaneous packet after collecting information of all the flow pipelines, and forwards the target spontaneous packet, thereby solving the problems of poor timeliness and heavy processing burden of a server when collecting information through a spontaneous packet, effectively ensuring the timeliness of information and effectively reducing the processing burden of the server.

Embodiments of the invention relate to Layer 2 network extensions over Layer 3 networks using packages. Techniques are disclosed for session-based routing within a Layer 2 (L2) network of an Open System Interconnect (OSI) model extended over a Layer 3 (L3) network. In one example, an L2 network connects a first client device to a first router and a second client device to a second router. And the L3 network is connected with the first router and the second router. A first router receives, from a first client device, a non-session-based L2 frame destined for a second client device. The first router forms an L3 packet including an L3 header specifying L3 addresses of the first router and the second router and a protocol of L3 service selection based on the L2 frame, a payload including the L2 frame, and metadata including a session identifier clearly identifying the L2 frame, and forwards the L3 packet to the second router. The second router restores the L2 frame from the payload and forwards the L2 frame to the second client device.

This application discloses a method for updating the forwarding address of a message, a routing communication method, and related apparatus. This method determines the shortest path from a first node to all nodes in the autonomous network when a path update occurs. It then determines whether a node is a problem node based on a comparison between its shortest path and historical paths. If the node is a problem node, the address of its corresponding first next-hop block is updated based on the shortest path from the first node to that node. This process quickly locates the problem node and updates the address of its corresponding next-hop block, thereby updating the next-hop address corresponding to the routing prefix in the associated prefix set of the next-hop block—that is, updating the message's forwarding address. This process eliminates the need to re-determine the next-hop address of each routing prefix based on the shortest path of all nodes during path updates, saving computational resources and improving network performance.