495 results about "Packet forwarding" patented technology

The invention discloses a distributed model training-oriented routing reconstruction method in a hybrid photoelectric network, and belongs to the field of network communication optimization. The method comprises the following steps: constructing a collaborative routing model based on a current network flow state and topological information, and introducing an adaptive weight mechanism to dynamically adjust the priority of optical channels and electric packet forwarding, thereby realizing efficient collaborative utilization of multi-layer forwarding resources. According to the method, path reconstruction can be rapidly completed according to task characteristics and a network dynamic state, so that the system resource utilization rate is improved, and the maximum task completion time delay is reduced. Compared with a traditional fixed routing and semi-dynamic routing method, the method has the advantages that the average completion time delay and the maximum time delay are improved by more than 45% in the large-flow environment generated by large-scale model training, and the method has good expandability and real-time performance and is particularly suitable for burst flow intensive intelligent computing cluster scenes.

The invention relates to the technical field of integrated circuits and computer networks, and particularly discloses a transmission control and intelligent scheduling system for an integrated chip, and the system sets a dual-mode decision and dynamic switching mechanism for each routing node. Calculating dynamic characteristic parameters including an instantaneous value, a first-order trend and a second-order acceleration; when the parameter is matched with a pre-stored abnormal feature set and the load exceeds a threshold value, the node is immediately atomized and switched to a predefined security scheduling strategy loaded from a shared storage area, and otherwise, the node generates a scheduling decision according to self-adaptive decision logic continuously optimized based on historical performance feedback; all the nodes carry out data packet forwarding control according to the current execution strategy; and the system also periodically realizes federated global knowledge evolution according to the quality evaluation result of the self-adaptive decision of each node.

Example methods and systems for flow-based secure packet forwarding are described. In one example, a first computer system may assess validity of a security token associated with a flow of one or more packets. In response to determination that the security token is valid, a security association associated with the flow and the security token may be negotiated with a second computer system. The first computer system may process a packet associated with the flow and the security token to generate an encapsulated encrypted packet by performing encryption and encapsulation based on the security association. The encapsulated encrypted packet may be forwarded towards the second computer system to cause the second computer system to perform decapsulation and decryption, and to forward a decapsulated and decrypted packet towards the destination.

The invention relates to the technical field of network communication, and discloses a ubiquitous network dynamic fair rate cooperative control method, which aims at link time varying, topology reconstruction and multi-source and multi-path concurrency characteristics of an air-space-ground-sea fusion network. A routing node periodically collects indexes such as a request satisfaction rate, a queue length and a multi-hop queuing-free proportion to obtain link transmission quality and dynamically update an interest packet forwarding table; deducing a queue upper limit, calculating a rate shaping value in combination with an interest packet forwarding proportion, and carrying out delayed transmission on an over-limit interest packet; when the interest queue exceeds a threshold value, a congestion feedback value is generated and goes down along with a data packet, and an uncongested interface obtains a release bandwidth through probability compensation; and if the whole path is still congested, the consumer multiplicatively shrinks the sending window according to the feedback proportion. According to the method, the throughput is remarkably improved and the queuing delay is reduced while fair allocation of bandwidth resources is ensured.

The present application provides an endogenous-security network method and architecture, a medium, and a device. The method comprises: extracting forwarding characteristic information of normal service data flows; delivering the forwarding characteristic information of the normal service data flows to a transport network element, so as to form a forwarding table entry, a flow table, and a forwarding white list, wherein forwarding modes in a method for binding service data flow forwarding characteristics to forwarding table entries of transport network elements comprises: an authentication and authorization mode and an automatic learning mode; the transport network element performing packet forwarding according to the forwarding characteristic information of the normal service data flows; and discarding packets of abnormal service data flows, wherein packet identification is performed for forwarding operations on the basis of a whitelist automatically generated from configuration files of switches and routers. The present application solves the technical issue of an IP network having low inherent security protection capabilities due to the openness thereof and thus requiring the deployment of a large number of external security protection facilities. The issue results in poor effectiveness, high costs, and difficulty in establishing low-cost security protection capabilities, and ultimately makes the IP network easy to attack but difficult to defend.

Devices, networks, systems, methods, and processes for packet forwarding and routing are described herein. A leaf switch can be in communication with a host device. The leaf switch may configure a subnet comprising the host device. The leaf switch can assign a next hop interface as a system port of the leaf switch and generate subnet information indicative of the assignment. The leaf switch may distribute the subnet information to one or more network devices through one or more internal Border Gateway Protocol sessions. A data packet destined to the host device can be transmitted to the system port of the leaf switch when a host Media Access Control (MAC) address of the host device is not resolved. The leaf switch can resolve the host MAC address and transmit the data packet to the host device based on the host MAC address.

Devices, networks, systems, methods, and processes for packet forwarding and routing are described herein. A network device may be connected to a host device. The network device can identify an interface associated with the host device and determine an operational status of the interface. The network device can determine a host route and assign an encapsulation index associated with the host route. The network device may generate an update message based on the operational status and the encapsulation index. The network device can transmit the update message to one or more other network devices. The network device can also update one or more routing or forwarding tables to include routing information associated with the host device. The other network devices can extract the routing information from the update message and may utilize the routing information to route or forward one or more data packets addressed to the host device.

A method for detecting network attack based on kernel operating characteristics of a software switch, comprising: collecting kernel operating characteristic data of the software switch during network management and packet forwarding of the software switch, wherein the kernel operating characteristic data of the software switch can reflect characteristic data of a fine-grained operating state of a network; preprocessing the kernel operating characteristic data of the software switch; and inputting the preprocessed kernel operating characteristic data of the software switch into a pre-trained attack detection model to detect a potential attack behavior in a network. The method is applicable to all scenarios where the software switch is applicable, especially a software-defined network and a cloud data center, an industrial Internet, 5G, edge computing based on the software-defined network. More accurate and timely detection and early warning of potential anomalies and attack behaviors in the network can be implemented.

Various embodiments include methods of managing mixed data flow types in communications in a network apparatus. The network apparatus may determine data flow priority levels of a plurality of data flows, identify high-priority data flows associated with a particular LAN interface, and assign a designated public IP address range or a designated public port range for the high-priority data. Upon receiving an uplink, the apparatus may select a source port number from the previously reserved range dedicated for high-priority data flows in response to the received packet matching one or more prioritized data flow packet filters, modify the received uplink packet, and forward the modified uplink packet to the next hop in the path towards the destination IP address in response to determining that the packet is enqueued successfully.

The invention discloses a data message forwarding method and device in an SRv6 network, a medium and equipment. The invention belongs to the technical field of data transmission. The method comprises the following steps: after a data message is received, acquiring data identification information of the data message; analyzing the data identification information to obtain transmission demand information of data elements; mapping the transmission demand information to a network identifier, and packaging the transmission demand information to the head of a data message; and forwarding the data message according to the network identifier. By adopting the technical scheme, the equipment node at the network level can know the transmission requirement of the data element and forward the data element according to the transmission requirement, and the subsequent node can analyze the header content of the data message to obtain the transmission requirement, so that the data message forwarding link can meet the transmission requirement, and the transmission efficiency is improved. And the transmission requirement of the data element is perceived at the network level, so that the security and effectiveness of data transmission are ensured.

A technique for determining security attacks in wireless communication systems is disclosed. A method implementation of the technique is performed by a controller and includes obtaining a first statistics based on an amount of messages received from at least one packet forwarding entity within a pre-defined time interval, t, wherein the first statistics is a time-domain data; obtaining a second statistics based on at least one arriving-time difference, Td, between two consecutive messages; detecting an anomaly based on the second statistics; determining, if the anomaly is detected, a security attack based on the first statistics; and initiating a security attack notification to an orchestrator.

A packet forwarding method, apparatus, and system are provided, and belong to the field of network technologies. A destination address field of a first packet received by a first network node includes a compressed segment identifier corresponding to a first outbound interface or a next-hop node of the first network node; based on the first outbound interface being faulty or the next-hop node being faulty, the first network node determines a second segment identifier based on segment identifier planning information of the node corresponding to the compressed segment identifier, and forwards the first packet based on the second segment identifier, where the second segment identifier is a segment identifier in a segment list of the first packet or a segment identifier in the destination address field.

A disclosed computing device capable of intelligent power management of underutilized packet forwarding devices may include (1) a plurality of packet forwarding devices and (2) a controller communicatively coupled to the plurality of packet forwarding devices, wherein the controller is programmed to (A) search for configuration data associated with the plurality of packet forwarding devices, (B) determine, based at least in part on the search for the configuration data, that a packet forwarding device included in the plurality of packet forwarding devices is underutilized, and (C) reduce power consumption of the packet forwarding device in response to determining that the packet forwarding device is underutilized. Various other apparatuses, systems, and methods are also disclosed.

Examples described herein relate to a switch configured to allocate packet processing resources, from a pool of packet processing resources, to multiple applications, wherein the pool of packet processing resources comprise configurable packet processing pipelines of one or more network devices and packet processing resources of one or more servers. In some examples, the configurable packet processing pipelines and the packet processing resources are to perform one or more of: network switch operations, microservice communications, and / or block storage operations. In some examples, the network switch operations comprise one or more of: application of at least one access control list (ACL), packet forwarding, packet routing, and / or Virtual Extensible LAN (VXLAN) or GENEVE termination. In some examples, the microservice communications comprise one or more of: packet routing between microservices and / or load balancing of utilized microservices.

Embodiments of this application provide a packet forwarding method. In the method, a first network device generates a first packet, where the first packet includes a segment list corresponding to a forwarding path of the first packet, the segment list includes a plurality of sequentially arranged compressed segment identifiers, a length of each of the plurality of compressed segment identifiers is less than 128 bits, the plurality of compressed segment identifiers include a first-type compressed segment identifier and a second-type compressed segment identifier, a length of the first-type compressed segment identifier is a first length, a length of the second-type compressed segment identifier is a second length, and the first length is less than the second length. The first network device sends the first packet based on the segment list.

Providing mobility network support for scrubbed IP domains can include obtaining packet forwarding control protocol messages associated with a mobility network, the packet forwarding control protocol messages relating to data communications of user equipment attached to the mobility network via a radio resource, correlating the packet forwarding control protocol messages to subscriber identities or device identities to obtain correlated packet forwarding control protocol messages, determining, based on the correlated packet forwarding control protocol messages, if the user equipment is associated with a malicious subscriber or comprises a malicious device, in response to determining that the user equipment is associated with a malicious subscriber or comprises a malicious device, selecting an interface via which the radio resource connects to a user plane of the mobility network, and triggering activation of an interface-located firewall on the interface to monitor data exchanged via the interface.

The invention provides a signaling security protection method, device, system, equipment, medium and product, and relates to the technical field of data interaction, the method is applied to a UPF, and the method comprises the following steps: based on the flow of a PFCP (Packet Forwarding Control Protocol) signaling of an interface between the UPF and a session management function network element SMF, the security of a field of the PFCP signaling, and an abnormal port where the UPF is butted with a network security component; determining a threat comprehensive score; determining a protection strategy of signaling security based on the threat comprehensive score; and performing security protection on the PFCP signaling based on the protection strategy. According to the invention, the defense level is dynamically regulated and controlled according to the threat comprehensive score, the signaling security is ensured, the influence of the protection strategy on the system performance is reduced as far as possible, the security of the protection strategy and the influence on the system performance can be better balanced, and the security protection efficiency and the network stability and reliability are improved.

A data packet forwarding method and apparatus, a storage medium, and an electronic device are provided. The method includes: receiving, through a Gemport in one-to-one correspondence with a service Gemport of a first edge Optical Network Unit (ONU), a data packet sent by the first edge ONU; searching for a destination forwarding port from a Media Access Control (MAC) address table according to a destination MAC address of the data packet, wherein the MAC address table stores a correspondence between a source MAC address and a Gemport; and in a case where the destination forwarding port is found, sending the data packet to a second edge ONU through the destination forwarding port. The solution may solve the problem in the related art regarding how to enable the FTTR optical gateways to effectively handle data exchange between ordinary Ethernet ports and edge ONUs and data exchange between multiple edge ONUs.

In a communication method, a first session management function (SMF) determines, based on a group identifier of a group to which a target user equipment belongs, a first user plane function (UPF) connected to a first user equipment, where the first user equipment is an access point user equipment in the group; the first SMF sends an Internet Protocol (IP) address of the target user equipment and / or the group identifier to the first UPF; and the first UPF establishes a General Packet Radio Service (GPRS) Tunneling Protocol User Plane (GTP-U) tunnel between the first UPF and the second UPF, and stores a correspondence between the IP address and the GTP-U tunnel to implement packet forwarding.

A packet to be forwarded over a computer network to a destination is received. A group of multiple network paths is available to forward to the packet to the destination. One or more path selection factors are determined to be used to identify a specific network load balancing algorithm to select a specific network path from the group of multiple network paths. The one or more path selection factors include at least one path selection factor determined based at least in part on a dynamic state of the computer network or a network node in the computer network. In response to selecting, by the specific network load balancing algorithm, the specific network path from among the group of multiple network paths, the packet is forwarded over the specific network path.

The invention relates to a flow table parallel matching method and system of a programmable switching chip. The method comprises the following steps: determining an input flow table based on the programmable switching chip as a fragment boundary point, and generating a plurality of sub-tables; respectively establishing storage areas of a plurality of sub-tables, configuring matching control units in the storage areas, and connecting the storage areas to obtain a sub-table parallel processing architecture; mathematical modeling is carried out based on the processing unit number constraint, the storage space constraint and the bandwidth constraint of the subtable parallel processing architecture, and a flow table parallel matching mathematical model is generated; performing particle swarm optimization on the system throughput parameter, the resource utilization rate parameter and the matching time delay parameter to obtain a system configuration parameter group; and obtaining an input data packet, distributing the input data packet to the corresponding sub-table unit according to the system configuration parameter group, and performing parallel matching operation in the sub-table unit to obtain a data packet forwarding strategy. According to the invention, accurate matching result sorting is realized, and the accuracy of the matching result is improved.

The embodiment of the invention discloses a message forwarding method, electronic equipment, a storage medium and a program product. The message forwarding method comprises the following steps: receiving a virtual routing forwarding message sent by private network equipment; the virtual routing forwarding message carries first target address information; determining a first service flow corresponding to the virtual routing forwarding message according to the first target address information; determining a first network tunnel corresponding to the virtual routing forwarding message according to the first service flow and a preset association relationship; the preset association relationship is a corresponding relationship between the identification information of the service flow and the network tunnel; the identification information of the service flow comprises first identification information of the first service flow; and forwarding the virtual routing forwarding message to a target network device corresponding to the first target address information through the first network tunnel. According to the invention, the configuration efficiency and the configuration flexibility of the message forwarding path can be improved.

The invention relates to an optical modem connection scheduling method based on scene awareness and dynamic resource slicing. The method comprises the following steps: collecting application layer data in real time, analyzing application layer protocol characteristics, identifying an application scene, and predicting a bandwidth demand and a change trend based on the application scene; creating a private network slice for the emergency task; detecting a network flow mode in real time, acquiring an application type of the network flow mode, identifying a high-bandwidth downloading behavior, detecting a network index of a delay sensitive application in real time to determine a service level protocol, and determining a real-time application priority and a current demand according to the application type and the service level protocol; the required minimum bandwidth is calculated, dynamic speed limiting, bandwidth redistribution and network utilization rate monitoring are carried out on high-bandwidth downloading application, and downloading bandwidth limitation is temporarily improved when the total utilization rate is lower than a threshold value and continues for specified time; calculating a risk score; a heartbeat packet acceleration channel is set, an independent UDP packet forwarding path is developed for key IoT equipment, the connection state of the IoT equipment is detected in real time, and an emergency communication plan is triggered when the IoT equipment is abnormal.

Embodiments of this application disclose an in-network computing packet forwarding method, a forwarding node, and a computer storage medium, and belong to the field of communication technologies. In the method, a forwarding node receives a plurality of in-network computing packets; determines an in-network computing identifier of each in-network computing packet; performs, based on the in-network computing identifier of each in-network computing packet, aggregation computing on in-network computing packets that belong to a same in-network computing message in the plurality of in-network computing packets, to obtain at least one aggregated packet; and forwards each aggregated packet by using a hash routing algorithm based on an in-network computing identifier corresponding to each aggregated packet.

The invention provides a message forwarding method and related equipment, and relates to the technical field of communication. The method comprises the following steps: a forwarding node acquires coordinate information of a destination node corresponding to a message to be forwarded in a K-dimensional direct connection topology network; and the forwarding node respectively queries K dimension tables corresponding to the forwarding node according to the coordinate information so as to determine a target FEC area corresponding to the destination node in the K-dimensional direct connection topology network. Each dimension table in the K dimension tables is used for recording a forwarding equivalence class FEC area corresponding to each coordinate value on one dimension. Wherein other nodes in the K-dimensional direct connection topology network are divided into a plurality of FEC areas, and the next hop port addresses of all nodes, reaching the same FEC area, of the forwarding node are the same. And the forwarding node queries an FEC matching table according to the target FEC region, and determines a target port address corresponding to the target FEC region. The FEC matching table is used for recording the next hop port address corresponding to each FEC area. And the forwarding node forwards the message to be forwarded according to the target port address.

Disclosed are a flow control method for a distributed in-network neural network based on a programmable data plane, and a device. The method comprises: forming a plurality of neurons from a programmable switch, and then the programmable switch using a source routing method for actively sending a data packet to determine an inter-neuron communication link; constructing a distributed in-network neural network; then according to requirements, carrying out model pruning on the distributed in-network neural network; different detection nodes of the distributed in-network neural network extracting network behavior features in different time slots, and using extracted feature training models to acquire a set of optimal weights among the neurons; and converting the discovered optimal weights into network behavior features of flow control, and using a weight probability forwarding strategy to complete approximately optimal flow control. According to the present invention, the packet forwarding process and the training process of a neural network model are unified, such that the in-band decentralized cooperative flow control is achieved, and moreover, by means of model pruning, the distributed in-network neural networks can be adapted to different network topologies.

The invention provides an SRv6 header compression method and device, electronic equipment, a storage medium and a program product. According to the header compression method, based on a network topology and a data packet forwarding path, an optimal relay node combination and stack compression nodes are dynamically determined by using an optimal relay node selection algorithm, and then segmented stack compression transmission is realized by marking relay forwarding labels. Therefore, the starting node and the relay node only need to store the stack pushing information required locally, and do not need to carry all SIDs of a complete path, so that the redundant information of the SRv6 header is remarkably reduced. Meanwhile, through dynamic interaction between the control center and the nodes, the network can optimize a forwarding path in real time, it is guaranteed that a data packet is efficiently transmitted according to a specified path, the overall performance of the electric power communication network is improved, and the problems of bandwidth waste and transmission delay caused by the fact that a traditional SRv6 header is too long are effectively solved.

A data processing method and apparatus, and a network device. The method is applied to a network device comprising a plurality of data transmission ports, and comprises: parsing an initial data packet transmitted by a data transmitting end, and determining a packet feature of the initial data packet; when the initial data packet is determined as a target data packet on the basis of the packet feature, determining a forwarding policy of the target data packet on the basis of the packet feature and a packet forwarding routing table, wherein the packet forwarding routing table is generated by means of load balancing states of the plurality of data transmission ports; and on the basis of the forwarding policy of the target data packet, determining a target data transmission port from among the plurality of data transmission ports, and using the target data transmission port to forward the target data packet to a data receiving end.

The invention relates to a traffic scheduling method and device, computer equipment, a storage medium and a program product. The method comprises the following steps: a data processing unit of a sending end analyzes message characteristics of a message and obtains link state information fed back by a switch; adding a corresponding classification mark to the message based on the message characteristics and the link state information; the classification mark is one of a plurality of preset classification marks; sending the data packets carrying the classification marks to a switch, and indicating the switch to select different load balancing modes to send the message by adding different classification marks; wherein the different load balancing modes at least comprise a stream-by-stream mode and a packet-by-packet mode. Therefore, coexistence of a packet-by-packet forwarding mode and a flow-by-flow forwarding mode of the network can be realized, the marking strategy of the message can be dynamically adjusted in combination with the congestion condition of the network, the message is forwarded by using different load balancing modes under different network congestion conditions, network congestion is effectively avoided, and server resource overhead in the network is saved.

The invention discloses an inter-satellite routing processing method and device based on a controller, related equipment, a product and a storage medium. Comprising the following steps: receiving a hypertext transfer protocol (HTTP)-based addressing request sent by at least one satellite; the addressing request comprises source address information, destination address information and to-be-transmitted data information; sending an HTTP-based addressing response to the at least one satellite based on the addressing request; determining a control instruction issued by a switch on each satellite according to the source address information, the destination address information and preset mapping information; sending a control instruction to at least one satellite; the control instruction is used for the at least one satellite to judge whether the forwarding time delay of at least one route between the first satellite and the second satellite exceeds the effective time of a preset forwarding route, and if the forwarding time delay of the at least one route does not exceed the effective time of the preset forwarding route, forwarding the at least one route to the second satellite. And carrying out IP packet forwarding on the to-be-transmitted data information according to the control instruction.