839 results about "Packet processing" patented technology

The invention provides a multi-scene access control dynamic verification method and system based on a permission tree, and relates to the technical field of scene access, and the method comprises the steps: receiving a user resource access request, obtaining a user permission tree, obtaining a mapping rule according to a scene identifier, screening to generate a primary screening permission node set, carrying out the grouping processing through employing a consistent Hash algorithm, and obtaining a primary screening permission node set; and generating a scenarized permission tree through reachability analysis, merging and reconstruction, performing hierarchical verification on identity validity, scene legality and resource access permission on the request, and generating an access control strategy. The method can dynamically adapt to authority requirements of different scenes, and the accuracy and flexibility of resource access control are improved.

The techniques disclosed herein improve existing systems by receiving a packet to process and determining an associated packet processing graph for the packet. In response to determining that the associated packet processing graph contains an action comprising a set of rules for modifying the packet processing graph, a table to modify in the packet processing graph is accessed based on a table identifier in the action. The accessed table is modified by inserting one or more table rows into the packet processing graph and for each inserted table row, inserting a set of template actions containing prepopulated fields. The modified table is used to process subsequent packets.

The invention discloses a malicious traffic message interception and retention method based on threat intelligence, and the method comprises the following steps: S1, importing a threat intelligence data set, generating an intelligence label dictionary, and caching the intelligence label dictionary; s2, receiving a network data packet through a traffic mirroring device or an acquisition probe, and aggregating the network data packet into a traffic aggregation object based on a quintuple; s3, modeling and recording a state transition sequence based on a protocol state machine; s4, detecting a state transition sequence by using the information label dictionary, and identifying potential malicious traffic; s5, extracting data messages corresponding to the key nodes to form an extracted message set; s6, grouping according to the information labels and encrypting by using an improved AES symmetric encryption algorithm to generate an encrypted message file; s7, constructing an index data table containing a quintuple, capture time and an information label, and associating the index data table with the encrypted message file; and S8, storing the encrypted message file and the index data table in a separated storage system, and updating the index data table regularly. The method and the device are suitable for a threat-driven encrypted message processing scene.

A method performed by a computer system for use in controlling user plane network traffic in a cloud environment is described. The method includes deploying a temporary container in an executing container group, the executing container group including an application container that executes a packet-processing application, wherein the temporary container includes a network traffic control software that includes a pre-compiled network traffic control program and configuration information, wherein the temporary container, when deployed, executes a client component that is operable to: establish a secure connection to a server component of the packet-processing application and transfer the network traffic control software to the packet¬processing application using the secure connection, wherein the pre-compiled network traffic control program, when executed in the packet-processing application, is operable to control network traffic associated with the packet-processing application.

Techniques are disclosed for providing high performant packets processing capabilities in a virtualized cloud environment that enhance the scalability and high availability of the packets processing infrastructure. In certain embodiments disclosed herein, the VNICs functionality performed by network virtualization devices (NVDs) is offloaded from the NVDs to a fleet of computers, referred to as VNIC-as-a-Service System (or VNICaaS system). VNICaaS system is configured to provide Virtual Network Interface Cards (VNICs)-related functionality or service for multiple compute instances belonging to multiple tenants or customers of the CSPI. The VNICaaS system is capable of hosting multiple VNICs to process and transmit traffic in a distributed virtualized cloud networks environment. A single VNIC executed by the VNICaaS system can be used to process packets received from multiple compute instances.

The invention relates to the technical field of integrated circuit system-on-chip communication, and relates to a network-on-chip transmission method and device based on a dynamic parallel mechanism, and a medium. The method comprises the following steps: carrying out parallel transmission by adopting a control link and a data link which are separated; the control link and the data link are respectively provided with an independent packing module and an independent unpacking module; different transaction types are adapted through a dynamic message structure; dynamic subpackaging is carried out according to the data size during data link packaging; when the control link is unpacked, parameters are split through the Controldec module and are sent to the parameter receiving module; and when the data link is unpacked, the data link is controlled by a state machine, and the split data is transmitted into a data storage module. The invention aims to effectively reduce congestion, reduce power consumption and improve the transmission efficiency and the overall performance of the network on chip through parallel transmission architecture design, double-link parallel packet processing logic design and a composition structure of a dynamic message.

Systems and methods for bypassing subsequent lookups in packet processing pipelines in which multiple circuit blocks includes pre-processing circuitry that determine keys based on parsed contents of packets, and that retrieve responses from respective look-up tables (LUTs) based on the keys. The LUT of a first one of the blocks may be programmed with keys and / or responses for other ones of the circuit blocks, and the first circuit block may provide the keys and / or responses in metadata of the packets. Alternatively, or additionally, the first circuit block may provide parsed contents of the packets in the metadata of the respective packets. The other circuit blocks may selectively bypass the respective pre-processing circuitry based on the metadata.

Embodiments of the present disclosure provide a data transmission method, a data link layer, a chip interconnection interface, and an electronic device. The data transmission method is applied to the data link layer of the chip interconnection interface, the data link layer communicates with the system bus and the physical layer, the system bus operates in a first clock domain, and the physical layer operates in a second clock domain or in a second clock domain and a third clock domain. The method includes: the data link layer performs packet processing on the first data received from the system bus to obtain second data, and provides the second data to the physical layer; or, the data link layer performs unpacking processing on the third data received from the physical layer to obtain fourth data, and provides the fourth data to the system bus, wherein the data link layer partially operates in the third clock domain, and the first clock domain is different from the second clock domain and the third clock domain, the first clock domain includes a first clock signal, the second clock domain includes a second clock signal, and the third clock domain includes a third clock signal.

In one embodiment, a sender node includes packet processing circuitry to associate, at layer 2 or 3 of Open Systems Interconnection (OSI) model, path identifiers and per-path packet sequence numbers with packets, wherein the path identifiers identify paths from the sender node to receiver nodes, and an interface to send the packets with the associated packet sequence numbers and path identifiers to the receiver nodes.

The invention relates to an IPv4 data message processing method and device based on longest prefix matching. The method comprises the following steps: acquiring an IPv4 data message, and extracting a destination IP address in the message; based on a longest prefix matching mode, extracting a preset number of bits from the high order of the destination IP address; generating a search index through the preset number of bits; determining a corresponding table item in a pre-stored FPGA rule matching table according to the lookup index; extracting a message processing rule according to pre-stored information of the table item; and executing a subsequent processing action on the IPv4 data message based on the message processing rule. According to the method and the device, the IPv4 message prefix matching can be carried out through FPGA hardware acceleration, a matching result is generated through single query, linear speed processing under million-level rules is supported, and meanwhile, the longest prefix priority principle is automatically maintained when the rules are changed through a CPU-FPGA collaborative updating mechanism.

A method of operating a network device is provided. The method can include obtaining incoming data packets, conveying the incoming data packets through a parallel data bus, and using a demultiplexer to split the incoming data packets being conveyed through the parallel data bus onto a plurality of separate independent data paths within the network device. The method can further include using a multiplexer to aggregate or merge data packets from the plurality of data paths onto an egress parallel data bus.

The invention relates to a quality prediction method based on spatio-temporal dynamic graph convolution and mutual attention selection, and the method comprises the steps: collecting historical observation values of a target variable and a process variable in a chemical process, combining the historical observation values into a one-dimensional vector, carrying out the dimension rising processing of the time dimension of the one-dimensional vector, and carrying out the feature embedding and grouping processing, thereby obtaining a plurality of grouping features; respectively carrying out convolution operation on each grouping feature to obtain a corresponding time feature representation; obtaining a first time-space representation corresponding to the time feature representation based on the adaptive topological structure and a gating mechanism; aggregating each time feature representation through the attention weight to obtain an aggregated feature; carrying out average pooling and convolution operation on the aggregated features in the time dimension and the node feature dimension to obtain global features, time local features and node local features, and then obtaining second space-time representation; and performing residual connection on the second spatio-temporal representation and each first spatio-temporal representation, and outputting a predicted value of the target variable through a full connection layer.

A network device includes a storage device, a processor and a hardware acceleration circuit. The storage device is arranged to store program codes. The processor is arranged to load and execute the program codes to perform the following operation: during a network speed test period, calculating at least one transmission parameter. The hardware acceleration circuit is arranged to provide a function of hardware-accelerated packet processing, wherein during the network speed test period, the hardware acceleration circuit is further arranged to refer to the at least one transmission parameter to self-generate a plurality of packets and send the plurality of packets to another network device for network speed test.

The invention provides a flow blocking method based on a distributed DPI system and related equipment, and the method comprises the steps: a main control board receives and analyzes a first blocking rule issued through a northbound interface, and issues a non-quintuple matching rule in the first blocking rule to a message processing unit in a full-quantity manner; the programmable switching chip forwards the network message to a message processing unit; the message processing unit performs matching judgment on the network message according to a non-quintuple matching rule; when identifying that the network message hits the non-quintuple matching rule, reporting the corresponding key feature information to the main control board; the main control board generates a second blocking rule according to the key feature information and issues the second blocking rule to the programmable switching chip; and the programmable switching chip writes the received second blocking rule into an internal configurable rule table, and executes traffic blocking when a subsequent network message hits the second blocking rule. According to the invention, accurate classification, identification and plugging of complex, encrypted or dynamically changed traffic in a network can be realized.

The invention provides a node state detection method and device, equipment and a medium, and the method comprises the steps: carrying out the grouping processing of a plurality of nodes, and obtaining a plurality of client nodes and a plurality of service nodes in a to-be-detected state; pairing the plurality of client nodes and the plurality of service nodes, performing first network detection on a plurality of paired first node combinations, and determining a plurality of target node combinations of which the node states are target states; and when the number of the multiple target nodes of the multiple target node combinations is greater than or equal to a preset number, performing second network detection on multiple second node combinations formed by pairing the multiple target nodes and the multiple first nodes, and determining node states of the multiple first nodes according to a detection result of the second network detection of the multiple second node combinations. The detection frequency of invalid pairing is reduced, the time consumption of network connectivity detection between the nodes is shortened, the node state is accurately determined, and the detection efficiency before deployment of the cloud platform storage cluster and the overall deployment efficiency are improved.

Example embodiments of the present disclosure relate to methods, devices, and computer storage medium for communication. The method comprises: receiving, at a terminal device from a network device, at least one of the following parameters associated with a protocol data unit (PDU) set: a first parameter indicating whether all PDUs in the PDU set are needed by an application layer; a second parameter indicating whether the PDU set is to be discarded when an additional PDU set associated with the PDU set is lost or discarded; a third parameter indicating a discard timer for the PDU set; or a fourth parameter indicating a reordering timer for the PDU set, and processing the PDU set based on the received at least one of the parameters. In this way, packet processing with PDU set granularity is supported, and PDU-set based handling is also supported. Therefore, communication quality and network performance are improved.

The invention relates to the technical field of fault detection, and discloses a big data-based machine room equipment fault diagnosis method and system, and the method comprises the steps: collecting load information data streams generated by all equipment in a machine room in real time, and carrying out the filtering, and obtaining a filtered information sequence; performing grouping processing on the filtered information sequence by using a K-means clustering algorithm to obtain a dynamic change mode group, calculating a key statistical index, and obtaining an abnormal feature set; if the abnormal feature set exceeds a preset variance threshold, classifying the abnormal feature set and determining a fault mode to obtain a fault mode category set; matching the fault mode category set with a preset fault mode database to obtain a fault mode matching result, and generating a corresponding risk assessment report to obtain a risk assessment report; and adjusting the operation parameters of the machine room equipment to obtain the equipment operation parameters. According to the method, equipment faults can be diagnosed in time.

The invention discloses a network data packet processing method, system and device based on an XDP and DPDK collaboration mechanism and a storage medium, and the method comprises the steps: carrying out the filtering of network traffic through an XDP program in a network card drive layer of a kernel mode, and redirecting to a DPDK program of a user mode; and performing related operations, such as forwarding, encryption and decryption, NAT and the like, on the redirected data packet through a DPDK program in a user mode according to the heat preservation processing logic of the DPDK configuration file or the set processing logic. According to the method, different XDP programs can be loaded for different network ports, and the method has good function extensibility; and irrelevant or malicious messages are discarded in a kernel mode, so that the occupancy rate of a memory and a CPU (Central Processing Unit) is greatly reduced, and then the data traffic forwarding rate is improved through the DPDK.

The invention discloses a container virtual network construction method and device, equipment and a storage medium, and relates to the technical field of containers, and the method comprises the steps: carrying out the design and deployment of a network drive service of a container virtual network based on the standard information of a Docker container network model and a vector data packet processing framework, and registering the drive service to a Docker engine; when the network construction process is started through the Docker engine, container network configuration information sent by the client is received and packaged to complete network configuration additional operation; and calling each hypertext transfer protocol interface in a target virtual network driving service item by item through a Docker engine and a client instruction, and respectively creating endpoints and network bridges in combination with a vector data packet processing tool so as to obtain a constructed target container virtual network, and realizing communication by using the target container virtual network. According to the invention, the communication performance of the container virtual network especially in a high-throughput communication scene is improved.

The invention relates to the field of databases, in particular to a database disaster tolerance synchronization method based on packet replication and a database system. The invention provides a refined synchronization control mechanism based on a grouping strategy aiming at the problem that a unified global synchronization strategy cannot meet refined and differentiated requirements of distributed applications on data consistency, availability and performance in the existing database replication technology. Multiple groups of standby libraries adopt different synchronization levels to perform grouping copying in the same database; a logic abstraction layer of a synchronization group is introduced, a synchronization strategy and a physical standby library are decoupled, and multiple different synchronization mechanisms of a master-slave replication process are allowed in a database; a synchronous waiting mode of a traditional single path is broken through by utilizing a multi-waiting queue and a grouping ACK processing mechanism, so that state advancement of different groups does not interfere with each other; and checking is completed based on the consistency of the state mask, so that the transaction can be successfully returned only after all specified synchronization conditions are met, and the strong consistency of data is ensured.

Disclosed are a virtual machine migration method and apparatus, an offloading card, a device, and a system, related to the field of computers. The method comprises: when a virtual machine is migrated from a source device to a destination device, the source device receiving a service packet sent by an external device to the virtual machine in the source device, and an offloading card in the source device transmitting service data comprised by the service packet to an offloading card in the destination device on the basis of a tunnel between the source device and the destination device; the offloading card of the destination device feeding back a response packet by means of the tunnel between the source device and the destination device, or feeding back a response message to the external device on the basis of the tunnel between the destination device and the external device. The packet of the virtual machine is processed and forwarded in real time, preventing a packet loss phenomenon of virtual machine migration, reducing occupation of the storage space of the VMM or the storage space of the source device, reducing participation of a processor in the source device in packet processing, decreasing packet processing time delay, enabling the destination device to restart the virtual machine in a timely manner, and effectively shortening time delay of virtual machine migration.

The invention relates to a cross-cluster equipment access system and method suitable for an edge computing environment, belongs to the field of edge computing and computer networks, and mainly solves the problem that cross-cluster equipment access cannot be efficiently and safely realized under the scenes of edge cluster physical isolation, limited network resources, dynamic equipment change and the like. The system comprises a superior cluster connector assembly deployed in a superior cluster and a subordinate cluster connector assembly deployed in a subordinate cluster, and the superior cluster connector assembly comprises a cluster controller and a service relay agent and is responsible for device registration, DNS analysis and request forwarding; the subordinate cluster connector comprises a cluster agent and an equipment relay agent, and is responsible for equipment information synchronization and data packet processing. Compared with the prior art, the method has the advantages of lightweight deployment, efficient communication, safety, reliability, transparent service and the like, is suitable for edge computing scenes such as unmanned aerial vehicle clusters, intelligent manufacturing, post-disaster communication and the like, and can remarkably improve the equipment access efficiency and the resource coordination capability.

The invention provides a nuclear magnetic resonance spectrogram analysis method and system, and relates to the technical field of mass spectrometry, and the method comprises the following steps: carrying out Fourier transform on an original FID signal of a to-be-detected solution to obtain a corresponding frequency domain signal; after carrying out phase correction processing on the frequency domain signal, determining positions of a plurality of candidate peaks from the frequency domain signal according to a second derivative; grouping the candidate peaks based on the distance parameter between the adjacent candidate peaks to obtain a plurality of first candidate peak groups; if the difference value between the maximum peak height and the minimum peak height of the candidate peaks is greater than a first preset threshold value, filtering partial candidate peaks in the first candidate peak group; if the difference value between the maximum peak value of the abnormal candidate peak group and the maximum peak value of the first candidate peak groups on the two sides is greater than a second preset threshold value, filtering the abnormal candidate peak group to obtain a target candidate peak group; and performing parameter fitting on the candidate peaks in the target candidate peak group by using a least square method, and determining the solvent peak position and the water peak position.

Embodiments of the present invention provide a data processing method, a device, and a storage medium. The method comprises: acquiring first access log information of a block device in a first time period, wherein the block device corresponds to a plurality of logical block addresses; determining a target grouping length on the basis of the first access log information so as to group the plurality of logical block addresses on the basis of the target grouping length to obtain a plurality of groups, wherein the logical block addresses in a same group have similar access behaviors; determining access feature values respectively corresponding to the plurality of groups; and on the basis of the access feature values respectively corresponding to the plurality of groups, determining cold and hot data categories respectively corresponding to the plurality of groups.

The invention discloses a multi-hop pipeline propagation method based on TDMA time slot level synchronization. The method comprises the following steps: S1, constructing a TDMA frame format; s2, constructing a local pseudo transition time mapping table in an uplink receiving time slot; s3, constructing a local clock drift trend model based on a bat resonance fitting algorithm; s4, predicting the expected arrival time of the next uplink synchronization according to the model, and adjusting a local clock; s5, completing data packet processing operation in the local processing time slot; s6, in a downlink sending time slot, the node completes service data sending and adds local clock drift trend model parameters; s7, entering a low-power-consumption monitoring state in the protection sleep time slot, comparing the difference between the feedback model parameters and the model parameters, and updating the model if the difference exceeds a preset tolerance threshold; and S8, the node injects Gaussian disturbance into a local clock in a set frame period, and the model is updated regularly. According to the method, a bat resonance fitting algorithm and a time slot modeling method are adopted, and multi-hop node autonomous synchronization is achieved.

The invention provides a low-power-consumption feed-forward equalizer circuit which comprises a grouping processing module which divides tap values of tap coefficients of the feed-forward equalizer circuit into a plurality of groups, each group comprises a plurality of tap values, and a tap combination value needing to be processed by each lookup table module is calculated; the lookup table module is used for storing the tap combination value which is calculated in advance and performing lookup operation according to the bit combination of the input data to generate an intermediate result; the clock gating trigger module is used for enabling a signal tapdata to be equal to 1 when a tap value is updated, completing updating of the tap value output by a register DFF, and closing an input clock of the DFF when the tap value is kept unchanged and the tapdata is equal to 0; the shift accumulation module performs weight shift operation on the intermediate results output by the lookup table module and then accumulates the intermediate results to generate a plurality of groups of tap value processing results; and the result output module outputs a final equalization signal of the feed-forward equalizer circuit. The FFE circuit is realized by converting the multiplier into the LUT table and the adder, and the power consumption of the FFE circuit is greatly reduced while the signal processing performance of the FFE circuit is ensured.

The invention discloses an internet behavior early warning method and system based on network packet processing, and belongs to the field of network security, and the system comprises gateway equipment, a DPI analysis module, a user portrait module and an early warning module. The gateway equipment is used for capturing user data packets in real time on a network driving layer by using an XDP technology, filtering the captured data packets, and selecting the data packets conforming to a set rule; the DPI analysis module is used for deeply analyzing the selected data packets through a DPI technology and carrying out traffic type marking and classified storage on the data packets of each user according to an analysis result; the user portrait module is used for performing user portrait analysis based on the storage data packet of the user and identifying an abnormal behavior; and the early warning module is used for configuring an early warning rule and a notification mode and giving out early warning aiming at the abnormal behavior of the user. According to the invention, high-speed processing of the data packet can be realized, and on the premise of not sacrificing performance, abnormal behaviors of a user can be accurately identified and timely early warning can be given out.

A communication method for an SD-WAN is provided. The method may include: A first node obtains SD-WAN overlay topology information; obtains a first SD-WAN overlay locator route advertised by a second node, where the first SD-WAN overlay locator route includes a first locator configured by the second node at an overlay layer; and obtains, based on the first SD-WAN overlay locator route and the SD-WAN overlay topology information, a software-defined wide area network overlay segment routing SD-WAN overlay SR BE path arriving at the second node.

The invention discloses an intelligent construction site multi-dimensional collaborative management method based on BIM and Internet of Things, and the method comprises the steps: carrying out the grouping processing of data through employing a clustering algorithm according to a unified data set after fusion, classifying the data of similar processes, and carrying out the recalculation through adjusting a clustering center if a grouping result shows that the data distribution is not uniform, determining an inter-process logic dependency relationship graph; the method comprises the following steps: acquiring real-time field update data as input through a complex coupling process sequence, predicting the completion time of each process in the sequence by adopting a neural network model, judging whether a prediction deviation is within an allowable range or not, and obtaining an accurate progress prediction result; and deducing a result through a final dynamic resource demand, generating a summary report for a project end process, carrying out mapping display on the result by adopting a visual tool, judging whether a construction period requirement is met or not, and obtaining complete construction management output.

Systems and methods for the storing and distribution of routes with different length prefixes between different tables in network devices utilizing lookup strengths associated with prefix lengths are disclosed. The results from performing lookups in these tables may have associated lookup strengths based on the prefix length of the associated routes, and the evaluation of which route to utilize for packet processing can be determined utilizing these associated lookup strengths. In this manner, a desired route for such packet processing may be determined regardless of the table where a route resides.