885 results about "Physical network" patented technology

The invention belongs to the technical field of communication transmission, and discloses a PLC networking data acquisition system and method based on an edge gateway, and the system comprises a dynamic virtual isolation module which is used for identifying and classifying different PLC devices through the deployment of an SDN controller and the adoption of a deep packet inspection technology, automatically distributing the different PLC devices to a virtual subnet, and obtaining a virtual IP; each virtual subnet isolates the PLC equipment with the same IP address through a virtual switch and a virtual router; recording the virtual IP and actual physical network port information of the PLC equipment through a mapping table, and establishing a network topology view; the multi-protocol analysis module is used for connecting the edge gateway and the PLC equipment based on a network topology view, carrying out protocol analysis by integrating a PLC communication protocol library and adopting FPGA hardware acceleration, and reading PLC networking data from the PLC equipment in real time; and the flexibility and the expandability of data acquisition can be improved.

The invention discloses an unmanned aerial vehicle track and resource scheduling method based on deep reinforcement learning, and belongs to the technical field of resource scheduling, and the method comprises the steps: carrying out the real-time simulation and optimization of a communication interaction process through employing a digital twin network of a physical network; by minimizing the task completion time delay of all user equipment in the average time slot, the QoE target of task offloading service in the multi-UAV edge network is realized, so that the service efficiency and user experience of the whole network are improved. And aiming at the constructed optimization target, a deep reinforcement learning algorithm is combined with a variational auto-encoder module to solve the problem of mixed action space. Continuous and discrete action spaces are effectively processed, and the decision-making ability of an algorithm is improved. Besides, a graph attention network module is also introduced, so that the unmanned aerial vehicle can adaptively capture the state characteristics of other unmanned aerial vehicles, thereby making a more accurate joint decision. The joint decision-making mechanism can significantly improve the task unloading efficiency and the service quality of the multi-unmanned aerial vehicle edge network.

The invention relates to the technical field of industrial distributed control system architecture, and discloses a dual-redundancy design method for a virtual controller VDPU, which comprises the following steps of: deployment of a four-network-port redundant network architecture: dividing four physical network ports into two groups of independent channels, and simultaneously configuring a network link automatic switching mechanism, the working states of the four network ports are monitored in real time, then double isolation of a physical layer and a protocol layer is achieved, and an independent heartbeat transmission channel is established; main / standby heartbeat monitoring and switching control: the main / standby controller periodically interacts state information packets through a special heartbeat channel, and establishes a three-level fault determination mechanism at the same time to perform seamless main / standby switching; a multi-mode data synchronization mechanism is implemented, namely initialization synchronization, increment synchronization during operation and exception recovery synchronization are started, separation of heartbeat signals and data synchronization can be realized through two groups of independent channels, and the fault-tolerant capability and the switching efficiency of the system are improved, so that the operation stability of the system is guaranteed.

Some embodiments provide a novel method for using connection tracking records to process data messages at a physical network interface card (PNIC) connected to a host computer. A first software firewall of the PNIC determines whether processing of a flow is passable to a second software firewall of the PNIC and to a third hardware firewall of the PNIC. The first software firewall creates a connection tracking record for the flow and data specifying whether processing of the flow is passable to the second software firewall and independently whether processing of the flow is passable to the third hardware firewall. The first software firewall provides the connection tracking record and said data to the second software firewall of the PNIC so that the second software firewall processes the flow or passes the connection tracking record and the data to the third hardware firewall if determination was that the flow is passable to the third hardware firewall.

The invention discloses a server network card test method, system and device and a medium. The method comprises the following steps: creating a plurality of network namespaces in a server; mapping physical network cards of the server to different network namespaces respectively; creating one or more pairs of veth virtual network cards among different network namespaces; network parameters are configured, an IP address is configured in each network namespace, and a routing rule is established; a bandwidth test is executed, large-flow data packets are sent among different network namespaces, the throughput rate of data transmission is measured, and the actual bandwidth performance of the network card is calculated; recording the parameters of the data packet in the test process, and analyzing the performance bottleneck of the physical network card; and outputting a bandwidth test report according to the recorded and analyzed data. According to the method, the network card is isolated by using the network namespace in the single server, and the virtual network card is used for realizing data forwarding to complete the bandwidth test of the network card, so that an additional server is not needed, the test cost is remarkably reduced, and the test efficiency is improved.

The invention discloses a substation dispatching data network security communication method based on quantum tunnel encryption, relates to the technical field of large-scale power grid security assurance, and aims to solve the problems of endpoint security loss, boundary solidification, weak quantum threat resistance and inflexible deployment of a dispatching data network. According to the method, the establishment of a secure session and the encapsulation, encryption and restoration of data are realized by integrating quantum key distribution and a post quantum cryptographic operation module through quantum secure communication terminals deployed in a dispatching master station and a transformer substation. According to the method, application layer encryption and signature are carried out on telecontrol protocol data, a double-layer encryption tunnel is constructed, and transmission of various physical network media is supported. By means of the scheme, end-to-end protection is achieved, quantum attacks are effectively resisted, double encryption is provided, and networking flexibility and smooth evolution are improved.

Apparatuses, methods, and systems are disclosed for improving confidence of network analytics using a digital twin. An apparatus (800) includes a transceiver (825) that receives a request for analytics that includes a threshold minimum confidence level for the analytics and a specified time period for delivering the analytics and a processor (805) that determines a set of additional data to use for satisfying the threshold minimum confidence level available from a set of physical network resources associated with at least one digital twin instance. The transceiver (825) receives the set of additional data from the at least one digital twin instance and delivers the analytics at the specified time period in response to the analytics, derived based on the set of additional data from the at least one digital twin instance, satisfying the threshold minimum confidence level.

The invention discloses an industrial park carbon emission reduction benefit evaluation method and system, and belongs to the technical field of power system energy conservation and emission reduction, and the method comprises the steps: S1, obtaining industrial park integrated data, carrying out the preprocessing of the integrated data, obtaining carbon data, and building an equivalent physical network model according to the topological structure and equipment parameters of an industrial park; s2, calculating a carbon footprint according to the carbon data and a carbon footprint rule, and extracting carbon features based on the carbon footprint in combination with a reference mode; s3, calculating carbon efficiency according to the carbon footprint and economic data in the carbon data, and performing fine-grained dynamic measurement and calculation according to the carbon footprint, the carbon characteristics and the equivalent physical network model to obtain a carbon emission flow; s4, performing benefit evaluation according to the carbon efficiency and the carbon emission flow to obtain a carbon benefit, a carbon potential and a carbon relationship, and generating a carbon emission reduction strategy report according to the carbon benefit, the carbon potential and the carbon relationship; according to the method, the problem that the park carbon emission reduction benefit evaluation is inaccurate due to the fact that the mutual influence relation between different carbon links is not considered in the prior art is solved.

Systems and methods for a virtual layer-2 network are described herein. The method can include providing a virtual Layer 3 network in a virtualized cloud environment. The virtual Layer 3 network can be hosted by an underlying physical network. The method can include providing a virtual Layer 2 network in the virtualized cloud environment. The virtual Layer 2 network can be hosted by the underlying physical network.

The present application provides a data acquisition method, apparatus and system. The method comprises: acquiring service traffic feature data of a communication service in a physical network, wherein the service traffic feature data is used for describing a transmission feature of a data stream of the communication service in the physical network; and constructing or updating a network twin on the basis of the service traffic feature data, wherein the network twin is a digital expression of the physical network and the communication service, and is used for simulating the transmission of the data stream of the communication service in the physical network. On the basis of the described solution, existing network management data acquisition mechanisms are enhanced, and the network twin is constructed or updated on the basis of the service traffic feature data, thereby facilitating simulation of the transmission of the data stream of the communication service in the physical network, and realizing rapid evaluation of the service experience quality of the communication service and network management in the physical network.

The invention discloses a distribution-micro collaborative operation simulation optimization method, which belongs to the technical field of simulation optimization, and comprises the steps of preprocessing grid-connected point voltage data, tie line power data and communication time delay data, constructing a power distribution network power flow physical network following a Kirchhoff's law, outputting a source load power prediction curve by using a long short-term memory network algorithm, and calculating the distribution-micro collaborative operation according to the source load power prediction curve. And a distribution-micro collaborative simulation optimization model is obtained based on residual error rolling correction tie line impedance parameters, a delay penalty term is set in a target function in combination with the preprocessed communication delay data, a power regulation instruction is obtained by using a particle swarm optimization algorithm, and a dynamic simulation video stream is generated. According to the invention, through rolling correction of the tie line impedance parameters and setting of the delay penalty term positively correlated with the time delay, the problem of control failure caused by physical deviation caused by model parameter solidification and communication time delay accumulation is solved, and the defects of voltage deviation calculation distortion and inaccurate network loss evaluation are eliminated. And the simulation precision and the operation stability of distribution-micro cooperation are improved.

The invention relates to a ship network security digital twinning full life cycle maintenance and monitoring method, which comprises the following steps: step 1, constructing a digital twinning 3D virtual model of a ship network, the 3D virtual model is based on an actual network topology structure of a ship, and comprises all network nodes including a switch, a router, a sensor and a control system; and real-time rendering is carried out on local equipment or a cloud platform. According to the method, the real-time mapping of the high-fidelity 3D virtual model and the physical network is constructed, the three-dimensional and visual monitoring of the ship network state is realized, the cognitive efficiency of operation and maintenance personnel on the complex network topology is greatly improved, the cloud-side collaborative intelligent analysis architecture is adopted, and the real-time monitoring of the ship network state is realized. According to the method, the local real-time threat detection capability in an unstable network environment is ensured, the defense level of the system is continuously improved through cloud deep learning and model optimization, multi-source heterogeneous data acquisition and intelligent analysis are combined, and hidden attacks and abnormal behaviors which are difficult to find by a traditional method can be accurately recognized.

A system for optimizing network traffic management is provided. The system includes a plurality of data processing units (DPUs), each assigned an identifier and configured to process network traffic for associated virtual network interface cards (vNICs). The system also includes a vNIC placement handler configured to receive media access control (MAC) address information from the plurality of DPUs and execute a relocation of at least two vNICs to be directly associated with one of the plurality of DPUs without through an inter-DPU physical network based on mapping the MAC address information to the identifier. The system further includes a communication framework integrated with the vNIC placement handler to enable transmission of MAC address information from the plurality of DPUs to the vNIC placement handler and offload network traffic from the vNICs to corresponding one or more of the plurality of DPUs.

Disclosed are a network card communication method and apparatus for an AI training platform, a device, and a medium. The method includes: building a switch network topology on the basis of a spine-leaf network, and configuring a preset number of virtual local area networks for each leaf switch in the switch network topology; virtualizing a physical network card to obtain virtual network cards, allocating the virtual network cards to corresponding job-containers according to a preset allocation rule, and allocating, to each virtual network card in the job-containers, different sub-networks corresponding to the virtual local area networks; and adding a corresponding sub-network communication policy routing rule to a pod where each job-container is located, whereby a virtual network card in the job-container sends training data to the remaining virtual network cards on a basis of the sub-network communication policy routing rule.

Some embodiments provide a novel method for migrating virtual machines (VMs) from a first host computer to a second host computer. The first host computer is connected to a physical network interface card (PNIC) that performs middlebox service operations for flows associated with the VMs. At the PNIC, the method receives a notification that a VM is to be migrated from the first to the second host computer. The method configures an embedded hardware switch of the PNIC to forward a set of flows associated with the VM to a firewall of the PNIC. The embedded hardware switch was initially programmed to process the set of flows instead of the firewall. The method synchronizes flow cache information regarding the set of flows from the embedded hardware switch to the firewall. The method processes the set of flows at the firewall until the VM is migrated to the second host computer.

The present disclosure provides a method for accessing a virtual machine: applying to a server, the server is deployed with a virtual switch, at least one virtual machine, a physical network interface card interface and a virtual bridge interface, receiving an initial access request through the virtual bridge interface; the initial access request includes first destination address information; translating the first destination address information to second destination address information to obtain a processed access request based on the virtual bridge interface; sending the processed access request to a port of a virtual switch according to the second destination address information based on the virtual bridge interface; translating the second destination address information to third destination address information to obtain a final access request based on the virtual switch; accessing the virtual machine indicated by the initial access request based on the third destination address information in the final access request.

In certain embodiments, a physical network access token at a network access terminal may be authenticated for modification of records at a remote server system. In some embodiments, a set of records and counterpart records having the same record identifiers and resource amounts may be stored independently on a physical token or user device and the remote server system. When a connection is established between an access terminal and the physical token (e.g., for authenticating a modification of record(s)), the access terminal may transmit input data to the token, which may use the input data with the records stored on the token to generate authentication data, which may be used by the remote server to authenticate a network action requested via the token.

Optimizing traffic routing operations in a two-box WLAN setup including a gateway device and a WAN adaptor device. The WAN adaptor device receives initial packets of a traffic flow from a client device, and sends the initial packets to the gateway device for slowpath (SP) processing. The gateway device creates fastpath (FP) processing rules for the traffic flow, including traffic modifications resulting from the SP processing, and sends the FP processing rules to the WAN adaptor device. The WAN adaptor device applies the FP processing rules to perform the traffic modifications on subsequent packets of the second traffic flow. The FP processing rules enable the WAN adaptor device to forward the subsequent packets of the traffic flow to the client device directly, without bridging to the gateway device for FP processing.

Embodiments of the present application relate to the technical field of communications, and provide a network optimization method, a network optimization system, a communication device and a storage medium, for use in improving the accuracy of network optimization. The network optimization method comprises: on the basis of network optimization requirements of a physical network, determining a first configuration parameter to be optimized; on the basis of a digital twin network corresponding to the physical network, optimizing the first configuration parameter, to obtain an optimal parameter value of the first configuration parameter; and issuing the optimal parameter value of the first configuration parameter to the physical network.

The embodiment of the invention provides a method, a device and a system for managing a digital twin network, so that the digital twin network can realize synchronous data interaction with a physical network without using standardized defined data and corresponding interfaces, and meanwhile, the influence of the digital twin network on the function of the physical network is also avoided. The method comprises the steps that a first device receives a first creation request, the first creation request is used for requesting to create a digital twin network body in a digital twin network corresponding to a physical network, and the first device manages the physical network and the digital twin network; and the first device creates the digital twin network body in the digital twin network according to the first creation request.

The invention relates to the technical field of computer data processing, in particular to a self-discovery communication method, system and device between network participant containers based on DDS communication middleware and a readable storage medium, network participant application programs are independently packaged in the containers based on the DDS communication middleware, and a virtual large two-layer network is created by using a Wave Net, so that the network participant application programs are automatically found in the containers. The virtual large two-layer network adopts a VXLAN tunnel to construct a network bottom layer, so that containers deployed on different hosts communicate in the same virtual local area network; the publisher container and the subscriber container show existence of themselves through multicast communication broadcast discovery information, and the publisher container and the subscriber container obtain IP and port information of the opposite side and carry out point-to-point unicast communication when themes are matched. According to the invention, while network isolation is ensured, the physical network boundary of the DDS container is greatly expanded, the network interconnection capability of the container in the system is improved, a high-availability and high-performance containerized distributed real-time system can be constructed, and multi-host and multi-node communication application requirements can be met.

The invention relates to the technical field of virtual machines, in particular to a method for acquiring Guest OS running state information under Jailhou.The method comprises the steps that a Trace area is newly added for each Guest OS on an ivshmem memory communication model, and the Trace area comprises a conf area and a running state area; before the Host Linux starts the Guest OS, the system running state information of the Guest OS to be checked is written in the conf area of the corresponding Trace area; after the Guest OS is powered on, default Trace configuration information is read, and a corresponding Trace area address is obtained; and according to the Trace region address, reading the system running state information of the Guest OS to be checked, and writing the corresponding running state information into the running state region of the Trace region according to a certain format. Through the scheme, the problem that the Guest OS running state information is inconvenient to obtain by using a traditional method based on a physical serial port or a physical network port in a Jailhouse environment is solved.

The invention discloses a physical network card management method, system and device, and relates to the technical field of computers, a virtual drive layer can manage a plurality of physical network cards, so that physical resources of the plurality of physical network cards are kept consistent, and the physical resources of the plurality of physical network cards are saved under the condition that a main network card meets a fault switching condition. According to the method, the standby network card can be determined from the plurality of physical network cards according to the binding relationship between the virtual resource and the plurality of physical resources, and the standby network card is utilized to execute the request sent by the application program, so that the binding and management of the physical resources of the plurality of physical network cards are realized; the technical problem that cross-physical network card resource binding and management cannot be realized in related technologies can be solved, and the technical effects of cross-physical network card resource binding and high availability are achieved.

The invention discloses an active congestion avoiding method and system based on flow prediction, and relates to the technical field of network communication, and the method comprises the steps: collecting the network state information of a physical network in real time; dynamically synchronizing and mapping network state information of a physical network to a virtual mirror image by using a digital twinning technology; under the virtual mirror image, traffic prediction is carried out on the network state information based on a time domain convolutional network model, and a traffic prediction result is obtained; the traffic prediction result is transmitted into a scheduling strategy engine for dynamic analysis and evaluation, and an active traffic scheduling strategy for traffic prediction is determined; issuing the active flow scheduling strategy to a physical network for execution; and according to the latest network state information, an active flow scheduling strategy is dynamically adjusted to form a closed-loop adaptive system. According to the method, the virtual mirroring of the network state information is realized by using the digital twin technology, the traffic prediction result is obtained by using the time domain convolutional network model, and the traffic scheduling strategy is actively adjusted before traffic congestion occurs, so that congestion is effectively avoided.

The invention discloses a concentrator network switching decision-making system and method based on communication quality evaluation. Safe and intelligent switching is achieved through cooperation of multiple modules. Constructing a physical, network and application layer multi-dimensional index system, and generating a communication quality score by adopting a dynamic weight and a random forest; the safety protection module ensures signal legality through radio frequency fingerprint and digital signature two-factor authentication; the switching decision is based on a double-threshold mechanism, trend prediction and a pre-switching mechanism, so that the interruption time is shortened; and the privacy protection adopts dynamic differential privacy and federated learning to realize data desensitization and model security aggregation.

A method including acquiring virtual location information of a virtual data buffer of a virtual network interface component; designating physical location information of a physical data buffer of a physical network interface component as the virtual location information; and storing data according to the virtual location information when the data is being stored into the physical data buffer. Since the physical location information of the physical data buffer of the physical network interface component is designated as the virtual location information instead of being determined via allocation by a physical device. Thus, the physical network interface component is capable of storing, upon receiving data, the data into a data buffer designated by the virtual network interface component, thereby eliminating the process of copying data from a data buffer designated by the physical network interface component to the data buffer designated by the virtual network interface component.

The present disclosure relates to securely setting up mesh networks in a manner that does not require a physical network cable being attached to a wireless mesh device and that does not require transmitting unencrypted information wirelessly when a mesh network is setup. Methods and apparatus consistent with the present disclosure may allow a user to choose which mesh nodes can join a network and that user may specificity a custom profile that may include rules that may identify how mesh network identifiers are used, that identify passcodes / passphrases assigned to a particular network, may identify types of traffic that may be passed through particular 802.11 radio channels, or other parameters that may control how traffic is switched between devices in a particular wireless mesh network. This combined with dual factor verification and the use of different types of communication channels make wireless mesh networks easy to deploy and expand.

The invention relates to the technical field of computer networks, and discloses a communication method and device for a computing node, equipment and a storage medium. The method is applied to a computing node, the computing node comprises a virtual switch and a physical network card, a plurality of virtual network interfaces are created in the virtual switch, the plurality of virtual network interfaces are in one-to-one correspondence with a plurality of service networks, and the physical network card is connected with at least one other node. The method comprises the following steps: receiving a target data message of a target service network through a target virtual network interface of a virtual switch; and sending the target data message to a corresponding node in the at least one other node through the physical network card. A plurality of virtual network interfaces are created in the virtual switch, and one virtual network interface corresponds to one service network, so that deployment of a plurality of service networks in the virtual switch is realized, network multiplexing in the virtual switch is realized, and the problem that physical network card resources of computing nodes are insufficient is solved. And a plurality of virtualized networks cannot be provided.

The embodiment of the invention provides a remote direct memory access method and equipment in a virtualization scene. The method comprises the following steps: acquiring a remote direct memory access RDMA request of a first virtual machine to a second virtual machine memory; calling a first virtualization RDMA device in an emulator of a host machine to which the first virtual machine belongs through a first preset drive in the first virtual machine, and converting the RDMA request into an Ethernet message; and transmitting the Ethernet message to a second virtual network card associated with a second virtualization RDMA device in an emulator of a host machine to which a second virtual machine belongs through a first virtual network card associated with the first virtualization RDMA device, so that the second virtualization RDMA device converts the Ethernet message into an RDMA request and transmits the RDMA request to a second virtual machine memory. According to the embodiment of the invention, the RDMA technology is realized in a virtual scene in a software mode, the method does not depend on whether a physical network card of a host machine has the RDMA capability or not, is not limited by resources by queues, and can support the live migration of the virtual machine.

The invention discloses a software and hardware collaborative RDMA network card SR-IOV parameterization configuration method, which can reduce redundant calculation steps through the collaboration of FPGA hardware acceleration and driving parameterization configuration, greatly improves the power consumption compared with a traditional pure software design scheme, and enables the VF performance of a network card to be close to the level of a physical network card. According to the method, the QP number, the MAC address and the RDMA enabling mark of the VF are dynamically adjusted through parameterization of the configuration file, and the operation and maintenance management efficiency can be effectively improved without manual item-by-item configuration; forwarding and isolation of CF traffic are achieved through the FPGA hardware layer, traffic sniffing between virtual machines is prevented, and safety is enhanced; the realized VF supports standard Ethernet communication and RDMA at the same time, the resource utilization rate is improved, and the requirements of hybrid scenes such as high performance computing (HPC) and cloud computing are met.