570 results about "Packet forwarding" patented technology

A fabric control protocol (FCP) and packet forwarding mechanisms are described that maximize utilization of bandwidth within massive, large-scale data centers having multi-stage data center switch fabric topologies, such as topologies that include a third switching layer formed by super spine switches. Automatic generation of data plane forwarding information referred to as FCP path information enumerates, for each data processing unit (DPU), the available FCP paths. The FCP path information may be based on unique combinations of peak points of the switch fabric for a given DPU with FCP colors assigned to network links that are used to multi-home the DPU to the switch fabric.

The invention discloses a distributed model training-oriented routing reconstruction method in a hybrid photoelectric network, and belongs to the field of network communication optimization. The method comprises the following steps: constructing a collaborative routing model based on a current network flow state and topological information, and introducing an adaptive weight mechanism to dynamically adjust the priority of optical channels and electric packet forwarding, thereby realizing efficient collaborative utilization of multi-layer forwarding resources. According to the method, path reconstruction can be rapidly completed according to task characteristics and a network dynamic state, so that the system resource utilization rate is improved, and the maximum task completion time delay is reduced. Compared with a traditional fixed routing and semi-dynamic routing method, the method has the advantages that the average completion time delay and the maximum time delay are improved by more than 45% in the large-flow environment generated by large-scale model training, and the method has good expandability and real-time performance and is particularly suitable for burst flow intensive intelligent computing cluster scenes.

The invention relates to the technical field of integrated circuits and computer networks, and particularly discloses a transmission control and intelligent scheduling system for an integrated chip, and the system sets a dual-mode decision and dynamic switching mechanism for each routing node. Calculating dynamic characteristic parameters including an instantaneous value, a first-order trend and a second-order acceleration; when the parameter is matched with a pre-stored abnormal feature set and the load exceeds a threshold value, the node is immediately atomized and switched to a predefined security scheduling strategy loaded from a shared storage area, and otherwise, the node generates a scheduling decision according to self-adaptive decision logic continuously optimized based on historical performance feedback; all the nodes carry out data packet forwarding control according to the current execution strategy; and the system also periodically realizes federated global knowledge evolution according to the quality evaluation result of the self-adaptive decision of each node.

Example methods and systems for flow-based secure packet forwarding are described. In one example, a first computer system may assess validity of a security token associated with a flow of one or more packets. In response to determination that the security token is valid, a security association associated with the flow and the security token may be negotiated with a second computer system. The first computer system may process a packet associated with the flow and the security token to generate an encapsulated encrypted packet by performing encryption and encapsulation based on the security association. The encapsulated encrypted packet may be forwarded towards the second computer system to cause the second computer system to perform decapsulation and decryption, and to forward a decapsulated and decrypted packet towards the destination.

The invention relates to the technical field of network communication, and discloses a ubiquitous network dynamic fair rate cooperative control method, which aims at link time varying, topology reconstruction and multi-source and multi-path concurrency characteristics of an air-space-ground-sea fusion network. A routing node periodically collects indexes such as a request satisfaction rate, a queue length and a multi-hop queuing-free proportion to obtain link transmission quality and dynamically update an interest packet forwarding table; deducing a queue upper limit, calculating a rate shaping value in combination with an interest packet forwarding proportion, and carrying out delayed transmission on an over-limit interest packet; when the interest queue exceeds a threshold value, a congestion feedback value is generated and goes down along with a data packet, and an uncongested interface obtains a release bandwidth through probability compensation; and if the whole path is still congested, the consumer multiplicatively shrinks the sending window according to the feedback proportion. According to the method, the throughput is remarkably improved and the queuing delay is reduced while fair allocation of bandwidth resources is ensured.

This application discloses example route selection methods, network devices, and systems. One example method includes obtaining, by a first network device, a plurality of routes arriving at a same prefixOne or more routes for guiding packet forwarding are selected by the first network device based on trustworthiness of each route of the plurality of routes, where the trustworthiness of each route identifies a trustworthiness degree of the corresponding route.

The present application provides an endogenous-security network method and architecture, a medium, and a device. The method comprises: extracting forwarding characteristic information of normal service data flows; delivering the forwarding characteristic information of the normal service data flows to a transport network element, so as to form a forwarding table entry, a flow table, and a forwarding white list, wherein forwarding modes in a method for binding service data flow forwarding characteristics to forwarding table entries of transport network elements comprises: an authentication and authorization mode and an automatic learning mode; the transport network element performing packet forwarding according to the forwarding characteristic information of the normal service data flows; and discarding packets of abnormal service data flows, wherein packet identification is performed for forwarding operations on the basis of a whitelist automatically generated from configuration files of switches and routers. The present application solves the technical issue of an IP network having low inherent security protection capabilities due to the openness thereof and thus requiring the deployment of a large number of external security protection facilities. The issue results in poor effectiveness, high costs, and difficulty in establishing low-cost security protection capabilities, and ultimately makes the IP network easy to attack but difficult to defend.

Devices, networks, systems, methods, and processes for packet forwarding and routing are described herein. A leaf switch can be in communication with a host device. The leaf switch may configure a subnet comprising the host device. The leaf switch can assign a next hop interface as a system port of the leaf switch and generate subnet information indicative of the assignment. The leaf switch may distribute the subnet information to one or more network devices through one or more internal Border Gateway Protocol sessions. A data packet destined to the host device can be transmitted to the system port of the leaf switch when a host Media Access Control (MAC) address of the host device is not resolved. The leaf switch can resolve the host MAC address and transmit the data packet to the host device based on the host MAC address.

The invention discloses a communication path determination method and device. In the method, a first network element receives a path selection request sent by a session management network element, the first path selection request being used for requesting to select a user plane network element for a session of a terminal device; the first network element selects a user plane network element for the session of the terminal equipment according to the path selection request and acquired network information, and the network information comprises routing information of a data network connected with at least one user plane network element or a subnetwork connected with the terminal equipment; and the first network element sends the information of the selected user plane network element to the session management network element. According to the method, the mobile communication system can select the user plane network element for the terminal equipment based on the routing information, so that a guarantee is provided for message transmission of a user through the user plane network element or a transmission path between the user plane network elements, and the message forwarding efficiency is improved.

Devices, networks, systems, methods, and processes for packet forwarding and routing are described herein. A network device may be connected to a host device. The network device can identify an interface associated with the host device and determine an operational status of the interface. The network device can determine a host route and assign an encapsulation index associated with the host route. The network device may generate an update message based on the operational status and the encapsulation index. The network device can transmit the update message to one or more other network devices. The network device can also update one or more routing or forwarding tables to include routing information associated with the host device. The other network devices can extract the routing information from the update message and may utilize the routing information to route or forward one or more data packets addressed to the host device.

The invention provides a flow control system and method. The system comprises a switching chip, a plurality of transaction receiving devices and a plurality of transaction sending devices, wherein the transaction receiving devices and the transaction sending devices are connected with the switching chip. Transaction packet transmission between transaction sending equipment and transaction receiving equipment is carried out through an exchange chip, and when a plurality of transaction sending equipment occupy the same transmission link, and the flow distribution conditions of the transaction packet forwarding time requirement and the to-be-returned transaction packet quantity requirement are met at the same time, the transaction packet is transmitted to the transaction receiving equipment. And selecting a target transaction sending device for sending the transaction packet with the minimum data length to distribute flow, so as to transmit the transaction packet sent by the target transaction sending device to a transaction receiving device, therefore, delay of overall data transmission caused by the fact that the length of the to-be-returned transaction data is large and the transaction sending device corresponding to the transaction with the large number of to-be-returned transaction packets occupies too much flow can be avoided, and reliability and efficiency of data routing transmission are effectively improved.

A User Plane Function UPF Geographic Redundancy (GR) and Routers on Packet Forwarding Control Protocol Router (PFCP) N4 and General Packet Radio Service Tunneling Protocol (GTPv1) interfaces for a RAN network. A UPF and UPF-GR are connected via a dedicated connection for session and state replication. The UPF-GR is kept in a hot-standby mode, and all the sessions that are created, modified, or deleted at a UPF are also created, modified, and deleted at UPF-GR. The UPF and UPF-GR are also configured with a same N4 IP Address. A Session Management Function (SMF) is connected via a PFCP Router (PFCP-SMF) with PFCP routers of UPF and UPF-GR. A RAN node is connected via a Router (GTPv1-Radio) with GTPv1 routers of UPF and UPF-GR. The UPF and UPF-GR are configured to handle the same GTPv1 Interface IP Address and the same IP Pool from which the User Equipment IPs are allocated.

A method for detecting network attack based on kernel operating characteristics of a software switch, comprising: collecting kernel operating characteristic data of the software switch during network management and packet forwarding of the software switch, wherein the kernel operating characteristic data of the software switch can reflect characteristic data of a fine-grained operating state of a network; preprocessing the kernel operating characteristic data of the software switch; and inputting the preprocessed kernel operating characteristic data of the software switch into a pre-trained attack detection model to detect a potential attack behavior in a network. The method is applicable to all scenarios where the software switch is applicable, especially a software-defined network and a cloud data center, an industrial Internet, 5G, edge computing based on the software-defined network. More accurate and timely detection and early warning of potential anomalies and attack behaviors in the network can be implemented.

This application provides example packet forwarding methods and packet forwarding apparatuses. One example method includes sending, by a network processor, at least one descriptor to a traffic manager, where the at least one descriptor indicates a storage address of at least one packet in a buffer module. First information of a to-be-forwarded packet is sent by the traffic manager to the network processor based on the at least one descriptor. The to-be-forwarded packet is obtained by the network processor based on the first information. The to-be-forwarded packet is sent by the network processor to the traffic manager. The to-be-forwarded packet is received and forwarded by the traffic manager.

Various embodiments include methods of managing mixed data flow types in communications in a network apparatus. The network apparatus may determine data flow priority levels of a plurality of data flows, identify high-priority data flows associated with a particular LAN interface, and assign a designated public IP address range or a designated public port range for the high-priority data. Upon receiving an uplink, the apparatus may select a source port number from the previously reserved range dedicated for high-priority data flows in response to the received packet matching one or more prioritized data flow packet filters, modify the received uplink packet, and forward the modified uplink packet to the next hop in the path towards the destination IP address in response to determining that the packet is enqueued successfully.

The invention discloses a data message forwarding method and device in an SRv6 network, a medium and equipment. The invention belongs to the technical field of data transmission. The method comprises the following steps: after a data message is received, acquiring data identification information of the data message; analyzing the data identification information to obtain transmission demand information of data elements; mapping the transmission demand information to a network identifier, and packaging the transmission demand information to the head of a data message; and forwarding the data message according to the network identifier. By adopting the technical scheme, the equipment node at the network level can know the transmission requirement of the data element and forward the data element according to the transmission requirement, and the subsequent node can analyze the header content of the data message to obtain the transmission requirement, so that the data message forwarding link can meet the transmission requirement, and the transmission efficiency is improved. And the transmission requirement of the data element is perceived at the network level, so that the security and effectiveness of data transmission are ensured.

A technique for determining security attacks in wireless communication systems is disclosed. A method implementation of the technique is performed by a controller and includes obtaining a first statistics based on an amount of messages received from at least one packet forwarding entity within a pre-defined time interval, t, wherein the first statistics is a time-domain data; obtaining a second statistics based on at least one arriving-time difference, Td, between two consecutive messages; detecting an anomaly based on the second statistics; determining, if the anomaly is detected, a security attack based on the first statistics; and initiating a security attack notification to an orchestrator.

A packet forwarding method, apparatus, and system are provided, and belong to the field of network technologies. A destination address field of a first packet received by a first network node includes a compressed segment identifier corresponding to a first outbound interface or a next-hop node of the first network node; based on the first outbound interface being faulty or the next-hop node being faulty, the first network node determines a second segment identifier based on segment identifier planning information of the node corresponding to the compressed segment identifier, and forwards the first packet based on the second segment identifier, where the second segment identifier is a segment identifier in a segment list of the first packet or a segment identifier in the destination address field.

A disclosed computing device capable of intelligent power management of underutilized packet forwarding devices may include (1) a plurality of packet forwarding devices and (2) a controller communicatively coupled to the plurality of packet forwarding devices, wherein the controller is programmed to (A) search for configuration data associated with the plurality of packet forwarding devices, (B) determine, based at least in part on the search for the configuration data, that a packet forwarding device included in the plurality of packet forwarding devices is underutilized, and (C) reduce power consumption of the packet forwarding device in response to determining that the packet forwarding device is underutilized. Various other apparatuses, systems, and methods are also disclosed.

There is provided a method performed by a session management function (SMF) node of a network for establishing a PFCP session. A plurality of service functions (SFs) are selected (102) to connect in a service function chain for handling the PFCP session. Each of the plurality of SFs is capable of activating a feature of the PFCP session and is supported by a user plane function (UPF) node. The selection is based on a load of each of the plurality of SFs. For each UPF node that supports one or more of the selected plurality of SFs, transmission of a request is initiated (104) to the UPF node to establish the PFCP session with the UPF node. The request comprises an indication of the one or more of the selected plurality of SFs that the UPF node supports.

This application discloses a service packet forwarding method and related apparatus. In the service packet forwarding method, when receiving a packet sent by any second virtual resource module connected to a first service function forwarder (SFF), the first SFF dynamically determines a forwarding path of the packet based on configuration information of a second virtual resource module for implementing a second service function, to achieve dynamic load balancing on the packet instead of relying on a service function chain ingress node to perform load balancing, so as to reduce pressure on the service function chain ingress node.

Examples described herein relate to a switch configured to allocate packet processing resources, from a pool of packet processing resources, to multiple applications, wherein the pool of packet processing resources comprise configurable packet processing pipelines of one or more network devices and packet processing resources of one or more servers. In some examples, the configurable packet processing pipelines and the packet processing resources are to perform one or more of: network switch operations, microservice communications, and / or block storage operations. In some examples, the network switch operations comprise one or more of: application of at least one access control list (ACL), packet forwarding, packet routing, and / or Virtual Extensible LAN (VXLAN) or GENEVE termination. In some examples, the microservice communications comprise one or more of: packet routing between microservices and / or load balancing of utilized microservices.

Embodiments of this application provide a packet forwarding method. In the method, a first network device generates a first packet, where the first packet includes a segment list corresponding to a forwarding path of the first packet, the segment list includes a plurality of sequentially arranged compressed segment identifiers, a length of each of the plurality of compressed segment identifiers is less than 128 bits, the plurality of compressed segment identifiers include a first-type compressed segment identifier and a second-type compressed segment identifier, a length of the first-type compressed segment identifier is a first length, a length of the second-type compressed segment identifier is a second length, and the first length is less than the second length. The first network device sends the first packet based on the segment list.

Providing mobility network support for scrubbed IP domains can include obtaining packet forwarding control protocol messages associated with a mobility network, the packet forwarding control protocol messages relating to data communications of user equipment attached to the mobility network via a radio resource, correlating the packet forwarding control protocol messages to subscriber identities or device identities to obtain correlated packet forwarding control protocol messages, determining, based on the correlated packet forwarding control protocol messages, if the user equipment is associated with a malicious subscriber or comprises a malicious device, in response to determining that the user equipment is associated with a malicious subscriber or comprises a malicious device, selecting an interface via which the radio resource connects to a user plane of the mobility network, and triggering activation of an interface-located firewall on the interface to monitor data exchanged via the interface.

The invention provides a signaling security protection method, device, system, equipment, medium and product, and relates to the technical field of data interaction, the method is applied to a UPF, and the method comprises the following steps: based on the flow of a PFCP (Packet Forwarding Control Protocol) signaling of an interface between the UPF and a session management function network element SMF, the security of a field of the PFCP signaling, and an abnormal port where the UPF is butted with a network security component; determining a threat comprehensive score; determining a protection strategy of signaling security based on the threat comprehensive score; and performing security protection on the PFCP signaling based on the protection strategy. According to the invention, the defense level is dynamically regulated and controlled according to the threat comprehensive score, the signaling security is ensured, the influence of the protection strategy on the system performance is reduced as far as possible, the security of the protection strategy and the influence on the system performance can be better balanced, and the security protection efficiency and the network stability and reliability are improved.

A data packet forwarding method and apparatus, a storage medium, and an electronic device are provided. The method includes: receiving, through a Gemport in one-to-one correspondence with a service Gemport of a first edge Optical Network Unit (ONU), a data packet sent by the first edge ONU; searching for a destination forwarding port from a Media Access Control (MAC) address table according to a destination MAC address of the data packet, wherein the MAC address table stores a correspondence between a source MAC address and a Gemport; and in a case where the destination forwarding port is found, sending the data packet to a second edge ONU through the destination forwarding port. The solution may solve the problem in the related art regarding how to enable the FTTR optical gateways to effectively handle data exchange between ordinary Ethernet ports and edge ONUs and data exchange between multiple edge ONUs.

In a communication method, a first session management function (SMF) determines, based on a group identifier of a group to which a target user equipment belongs, a first user plane function (UPF) connected to a first user equipment, where the first user equipment is an access point user equipment in the group; the first SMF sends an Internet Protocol (IP) address of the target user equipment and / or the group identifier to the first UPF; and the first UPF establishes a General Packet Radio Service (GPRS) Tunneling Protocol User Plane (GTP-U) tunnel between the first UPF and the second UPF, and stores a correspondence between the IP address and the GTP-U tunnel to implement packet forwarding.

A packet to be forwarded over a computer network to a destination is received. A group of multiple network paths is available to forward to the packet to the destination. One or more path selection factors are determined to be used to identify a specific network load balancing algorithm to select a specific network path from the group of multiple network paths. The one or more path selection factors include at least one path selection factor determined based at least in part on a dynamic state of the computer network or a network node in the computer network. In response to selecting, by the specific network load balancing algorithm, the specific network path from among the group of multiple network paths, the packet is forwarded over the specific network path.

The invention relates to a flow table parallel matching method and system of a programmable switching chip. The method comprises the following steps: determining an input flow table based on the programmable switching chip as a fragment boundary point, and generating a plurality of sub-tables; respectively establishing storage areas of a plurality of sub-tables, configuring matching control units in the storage areas, and connecting the storage areas to obtain a sub-table parallel processing architecture; mathematical modeling is carried out based on the processing unit number constraint, the storage space constraint and the bandwidth constraint of the subtable parallel processing architecture, and a flow table parallel matching mathematical model is generated; performing particle swarm optimization on the system throughput parameter, the resource utilization rate parameter and the matching time delay parameter to obtain a system configuration parameter group; and obtaining an input data packet, distributing the input data packet to the corresponding sub-table unit according to the system configuration parameter group, and performing parallel matching operation in the sub-table unit to obtain a data packet forwarding strategy. According to the invention, accurate matching result sorting is realized, and the accuracy of the matching result is improved.

The embodiment of the invention discloses a message forwarding method, electronic equipment, a storage medium and a program product. The message forwarding method comprises the following steps: receiving a virtual routing forwarding message sent by private network equipment; the virtual routing forwarding message carries first target address information; determining a first service flow corresponding to the virtual routing forwarding message according to the first target address information; determining a first network tunnel corresponding to the virtual routing forwarding message according to the first service flow and a preset association relationship; the preset association relationship is a corresponding relationship between the identification information of the service flow and the network tunnel; the identification information of the service flow comprises first identification information of the first service flow; and forwarding the virtual routing forwarding message to a target network device corresponding to the first target address information through the first network tunnel. According to the invention, the configuration efficiency and the configuration flexibility of the message forwarding path can be improved.