40 results about "Provider Edge" patented technology

Methods and systems are described herein for reducing border gateway protocol (BGP) signaling for multi-homed devices. In one aspect, the method comprises: receiving one or more signals from one or more provider edge devices. The one or more signals include an address of a membership group associated with a multi-homed device. A router receives, from a provider edge device of the one or more provider edge devices, a service prefix. The service prefix is associated with the multi-homed device and the membership group. The router may store the service prefix and the one or more provider edge devices and connect, according to the service prefix and the one or more provider edge devices, to the multi-homed device associated with the membership group.

The invention provides a service message transmission method and device, equipment and a storage medium, relates to the technical field of communication, and is used for solving the problem of poor compatibility of new and old equipment in a network. The method is applied to a first provider edge device PE, and comprises: receiving an edge-to-edge pseudo-wire simulation PWE3 service message from a source user edge device CE, the PWE3 service message comprising a target pseudo-wire PW identifier, and the target PW identifier being used for indicating a PW between the source CE and a target CE. And packaging the PWE3 service message according to the target PW identifier to obtain a segment routing SRv6 service message based on the sixth version of forwarding plane of the Internet protocol. And sending the SRv6 service message to a second PE through a target SRv6 tunnel between the first PE and the second PE, the second PE being a PE connected with the target CE.

An ingress provider edge (IPE) device of a provider network receives a packet from outside of the provider network. The IPE device determines the packet is to be transmitted to a device on an Ethernet segment on which the IPE device is multihomed. The IPE device transmits the packet on the Ethernet segment even though the designated forwarder for the Ethernet segment is from IPE device. Furthermore, the IPE device labels the packet with an IPE identifier that identifies the IPE device for the packet, and forwards the labeled packet to other devices on the provider network. An egress provider edge (EPE) device that is (a) multihomed on the same Ethernet segment as the IPE device and (b) is the designated forwarder for the Ethernet segment receives the packet. The EPE device refrains from transmitting the packet on the Ethernet segment.

In some implementations, an ingress provider edge network device (PE) may obtain dynamic load information associated with respective links of a plurality of multi-homing (MH) PEs. The ingress PE may determine based on the dynamic load information, a dynamic load-balancing scheme associated with the plurality of MH PEs. The ingress PE may forward traffic using the dynamic load-balancing scheme.

A traffic controller device for distributing or otherwise controlling the distribution of routing information may be included in a telecommunications network. The traffic controller may receive routing tables from a plurality of network devices, such as one or more provider edge devices of the network. The traffic controller, upon receiving the routing information from the provider edge devices, may generate a routing table associated with each device providing the routing information. The traffic controller may also provide updates to one or more of the networking devices associated with the controller. The traffic controller may alter or update, at the traffic controller, the routing table associated with the target provider edge device based on the network policy. The routing information in the routing table for that device and maintained by the traffic controller may be updated with a new route or new local preferred parameter value.

Ethernet VPN supports All-Active multihoming and an ingress Provider Edge (PE) can load balance traffic to all the egress PEs on a multihoming Ethernet Segment (MHES). Methods, devices, and systems to allow an operator to have the ingress PE load-balance to only a set of the PEs on the MHES are described. In the event that all PEs of the set are not usable (e.g., down, not attached to the ES, etc.), the ingress PE can load balance data traffic to one or more PEs on the MHES that are not in the set.

Aspects of the subject disclosure may include, for example, in response to a Border Gateway Protocol (BGP) update from an egress provider edge router connected to a destination customer network, receiving a request for an end-to-end SR policy or an end-to-end path from an ingress provider edge router, where the BGP update includes a prefix of the destination customer network and a first color; using color mapping data, determining a first domain associated with the first color and determining a second color to be associated with a second domain and mapped to the first color, where a color is a numerical value associated with a network intent of a domain, the color mapping data define mappings between different colors associated with different domains, and the mapped first color and second color enable identification of a first intent and a second intent that belong to the first domain and the second domain, respectively; and generating the end-to-end path reflecting each definition of the first and the second intents identified by the first color in the first domain and the second color in the second domain. Other embodiments are disclosed.

An improved mechanism is disclosed for advertising Segment Routing over IPv6 (SRv6)- based Border Gateway Protocol (BGP) services in networks supporting multiple Segment Identifier (SID) types (14). A Provider Edge (PE) router (100), acting as a BGP speaker (38), operates an SRv6-based BGP service and advertises it via BGP Update messages. These messages include Service SID information encoded as a Service SID Type- Length-Value (TLV) (12), and multiple Service SID Structure information (14), each corresponding to different SID types, such as uncompressed SIDs or micro SIDs (uSIDs). Upon receiving these messages, ingress PE routers select appropriate SID types based on capabilities or local policies, enhancing interoperability and reducing control-plane overhead. The solution uses a new Service SID TLV type (18) to indicate support for multiple SID structures, promoting efficient resource utilization and seamless multi¬ vendor deployment within SRv6 environments. This approach simplifies transitions between SID types and optimizes network scalability and flexibility.

A method to establish an optimized frame format used by a first compute node (21) acting as ingress PE and a second compute node (22) acting as egress PE in the transport of overlay ethernet traffic containing an IP payload from the source overlay endpoint attached to or hosted in the first compute node (21) to the destination overlay endpoint attached to or hosted in the second compute node (22) through a Multi Protocol Label Switching, MPLS, underlay network (2), where the frame format is a conventional MPLS tagged ethernet frame format, wherein an MPLS label stack is inserted between the ethernet header and the IP header of the overlay ethernet frame, where the single ethernet header carries the destination and source overlay Media Access Control, MAC, addresses when the frame was originated from the source overlay endpoint, where the MPLS header of the frame comprises a top label with the Label Switch Path, LSP, label towards the destination Provider Edge, PE, router, ie. egress PE, and a bottom label, e.g. an optimization MPLS label, holding information enabling the forwarding mechanism in the egress PE router to restore the original destination and source overlay MAC addresses.

A system and associated methods provide procedures for establishing multicast connections and forwarding multicast content from a source to a subscriber when an ingress provider edge in communication with the subscriber is connected to an egress provider edge device belonging to an EVPN instance, especially in cases where the egress provider edge device is not receiving content from the source. The system configures “backup” provider edge devices belonging to the EVPN instance to temporarily forward the multicast content to the egress provider edge device on behalf of the source, enabling the ingress provider edge device and subscriber to continue to receive the multicast content from the source while the multicast network adjusts to recognize a new egress provider edge device. Methods of establishing connections between the ingress provider edge device and the correct egress provider edge device are also provided to avoid flooding and inefficient content forwarding throughout the network.

Aspects of the subject disclosure may include, for example, a device, having: a processing system including a processor; and a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, the operations including: receiving a border gateway protocol (BGP) prefix from a first provider edge (PE) router; determining that a second PE router failed to send the BGP prefix to the device; confirming that the BGP prefix is valid; and sending the BGP prefix to the second PE router. Other embodiments are disclosed.

Mobile User Plane (MUP) over Multi-Protocol Label Switching (MPLS) is implemented over an access an access network connecting a provider edge router to a gateway router, the gateway router being connected to a base station having a wireless connection to user equipment (UE). Traffic between the provider edge router and the gateway router is routed according to both of multi-protocol label switching (MPLS) protocol and mobile user plane (MUP) protocol. An MUP-controller may discover the UE, base station, and corresponding tunnel information and transmit this information to the provider edge router and gateway router, which then create an MPLS label and routing entries to implement MUP.

The present disclosure describes a device, computer-readable medium, and method for multifactor authentication using network address translation data. A method performed by a processing system includes receiving, from a host device in a communication network, a request to authenticate a user, wherein the request includes a purported identity of the user and a public internet protocol address assigned to a user endpoint device from which a request to access a resource at the host device was sent, querying a provider edge server for a verification that the purported identity matches an identity associated with a private internet protocol address that is mapped to the public internet protocol address, receiving a first response from the provider edge server, determining whether to authenticate the user based on the first response from the provider edge server, and sending a second response to the host device indicating a result of the determining.

In some implementations, an ingress provider edge network device (PE) may obtain dynamic load information associated with respective links of a plurality of multi-homing (MH) PEs. The ingress PE may determine based on the dynamic load information, a dynamic load-balancing scheme associated with the plurality of MH PEs. The ingress PE may forward traffic using the dynamic load-balancing scheme.

In one embodiment, a method includes receiving, by a route reflector, a subscription request from a first provider edge node in a network and generating a subscription policy for the first provider edge node. The method also includes receiving a first Ethernet Virtual Private Network (EVPN) Type 2 Route from a second provider edge node, assigning a sequence number to the first EVPN Type 2 Route, and communicating the first EVPN Type 2 Route with the sequence number to the first provider edge node. The method further includes receiving a second EVPN Type 2 Route from a third provider edge node, generating an updated sequence number in response to receiving the second EVPN Type 2 Route from the third provider edge node, and communicating the second EVPN Type 2 Route with the updated sequence number to the first provider edge node and the second provider node.

A system and associated methods provide procedures for establishing multicast connections and forwarding multicast content from a source to a subscriber when an ingress provider edge in communication with the subscriber is connected to an egress provider edge device belonging to an EVPN instance, especially in cases where the egress provider edge device is not receiving content from the source. The system configures “backup” provider edge devices belonging to the EVPN instance to temporarily forward the multicast content to the egress provider edge device on behalf of the source, enabling the ingress provider edge device and subscriber to continue to receive the multicast content from the source while the multicast network adjusts to recognize a new egress provider edge device. Methods of establishing connections between the ingress provider edge device and the correct egress provider edge device are also provided to avoid flooding and inefficient content forwarding throughout the network.

The present application describes systems and methods for network-based blocking threat intelligence. An access control list (ACL) generator may modify ACLs and provide modified ACLs to provider edge routers based on the capabilities of the provider edge routers. In some cases, an additional provider edge router that is more capable of implementing longer ACLs may be used. In some cases, a collector may identify when threat communications are bypassing provider edge routers with limited ACL lengths and provide the customer an opportunity to buy a better router or access to an additional router that supports longer or additional ACLs. A threat intelligence system may update (e.g., continuously update) the ACL provided to the ACL generator, and the ACL generator may accordingly update the modified ACLs provided to the provider edge routers.

The invention discloses a high-efficiency GPNPU (General Purpose Network Processing Unit) chip architecture with integrated memory and calculation, which belongs to the technical field of NPU chip architectures and comprises a plurality of array PE (Provider Edge) units, each PE unit comprises a local memory and a calculation unit and can independently execute vector and tensor calculation tasks, and the plurality of PE units are connected through data channels to realize direct exchange and sharing of data. Therefore, dependence on an external memory is reduced, and data processing efficiency is improved. According to the method, various existing AI network models can be supported, particularly, hardware, large-scale and instruction processing is carried out on operators in a recently popular LLM (Large Language Model), the AI calculation requirement of a large data volume is met, parallel calculation is achieved through specific instruction combination, the AI calculation efficiency and speed are improved, and complex AI tasks can be rapidly processed.

Provided is a service data processing method. The service data processing method includes: generating, based on service data of a plurality of client services, service blocks of the client services, respectively; mapping the service blocks of the client services into a payload area of at least one sub slicing frame (SSF); and configuring an overhead area field of each SSF to obtain the at least one SSF, wherein each of the SSF carries the service blocks of a plurality of different client services. Further provided are a service data exchange method, a service data extraction method, a provider edge device, a provider exchange device, and a computer-readable medium.

A network device can automatically select an execution plan from a set of possible execution plans that cause a first set of traffic assignments in a network to be changed to a second set of traffic assignments. A traffic assignment indicates assignments of the traffic to one or more tunnels, internal routes and / or peer links to be utilized for routing traffic received at provider edge routers through a network to prefixes. A traffic assignment can have various parameters such as bandwidth, transmission costs etc. Each execution plan has one or more steps, and each step has one or more traffic assignment changes progressing from the first set of traffic assignments to the second set of traffic assignments. The network device can automatically select an execution plan based on an evaluation metric determined for each execution plan. The evaluation metric can be a cost based metric or a quality based metric.

Methods and systems are described herein for reducing border gateway protocol (BGP) signaling for multi-homed devices. In one aspect, the method comprises: receiving one or more signals from one or more provider edge devices. The one or more signals include an address of a membership group associated with a multi-homed device. A router receives, from a provider edge device of the one or more provider edge devices, a service prefix. The service prefix is associated with the multi-homed device and the membership group. The router may store the service prefix and the one or more provider edge devices and connect, according to the service prefix and the one or more provider edge devices, to the multi-homed device associated with the membership group.

In one example, techniques are provided for extending an active measurement protocol with an Operations, Administration and Management / Maintenance (OAM) channel. A first Provider Edge (PE) node obtains from or provides to a second PE node, over a packet-switched network via an overlay, OAM data in an OAM channel of the active measurement protocol. The OAM data relates to a networking issue. The network issue is automatically resolved responsive to the OAM data.

A system and method are provided for faster convergence with multihoming using internet protocol (IP) performance measurement (PM) sessions to report, to a transmitting provider edge (PE), a state of health of a connection between a multihomed node and a receiving (PE). The state of health can be the liveness of the connection. The receiving PE locally monitors the state of health of its connection to the node, and encodes information of the state of health in a field of the PM session messages sent to the transmitting PE. For example, while the PM session messages indicate the connection is live, traffic from the transmitting PE to the node is routed through the receiving PE. Upon the PM session messages indicating the connection is no longer live, the transmitting PE instead routes traffic to the node through another receiving PE with which the node is multihomed.

A method for a network device to act as a Provider Edge (PE) in an Ethernet Virtual Private Network (EVPN) to prevent transient loops between multi-homed peer PEs. The method includes: advertising a first EVPN label to one or more PEs that are multi-homed peer PEs acting as PEs, advertising a second EVPN label to one or more PEs that are multi-homed peer PEs not acting as PEs, receiving a first traffic of a CE encapsulated with the first EVPN label instead of the second EVPN label, and discarding the first traffic in response to determining that a link between the PE and the CE is not operable and the first traffic of the CE is encapsulated with the first EVPN label.

The invention discloses a PPPoE (Point-to-Point Protocol over Ethernet) negotiation method, a PPPoE negotiation device and a related product, belongs to the technical field of communication, and solves the problem of low message forwarding performance of PE (Point-to-Point Protocol over Ethernet) equipment. According to the specific scheme, an access device receives a first dialing message from a first terminal, the first dialing message is used for requesting to execute a PPPoE negotiation process, and the first terminal is one of a plurality of terminals connected with the access device; the access device generates a first and sixth version Internet protocol IPv6 message according to the first dialing message, the first IPv6 message carries a first identifier and a second identifier, the first identifier indicates an Internet protocol IP address of the access device, the second identifier indicates an IP address of the BRAS, and the first identifier is used for the BRAS to feed back a response message corresponding to the first dialing message; and the access device sends the first IPv6 message to a provider edge (PE) device. The embodiment of the invention is used in a PPPoE (Point to Point Protocol over Ethernet) dialing scene.

Mobile User Plane (MUP) over Multi -Protocol Label Switching (MPLS) is implemented over an access an access network connecting a provider edge router to a gateway router, the gateway router being connected to a base station having a wireless connection to user equipment (UE). Traffic between the provider edge router and the gateway router is routed according to both of multi -protocol label switching (MPLS) protocol and mobile user plane (MUP) protocol. An MUP-controller may discover the UE, base station, and corresponding tunnel information and transmit this information to the provider edge router and gateway router, which then create an MPLS label and routing entries to implement MUP.

In one embodiment, a method includes receiving, by a route reflector, a subscription request from a first provider edge node in a network and generating a subscription policy for the first provider edge node. The method also includes receiving a first Ethernet Virtual Private Network (EVPN) Type 2 Route from a second provider edge node, assigning a sequence number to the first EVPN Type 2 Route, and communicating the first EVPN Type 2 Route with the sequence number to the first provider edge node. The method further includes receiving a second EVPN Type 2 Route from a third provider edge node, generating an updated sequence number in response to receiving the second EVPN Type 2 Route from the third provider edge node, and communicating the second EVPN Type 2 Route with the updated sequence number to the first provider edge node and the second provider node.

Aspects of the disclosure are directed to a provider edge synchronizer for coordinating entries in an overlay network. The provider edge synchronizer can determine and maintain mappings for hosts in the overlay network using lookup tables. When a provider edge in the overlay network sends a request, the provider edge synchronizer can generate a response based on the lookup tables and can then send the response to all gateways, particularly redundant centralized gateways.

In one example, a method includes receiving a plurality of network probes originating from a first provider edge router in a service provider network, calculating a plurality of network performance metrics, based on the plurality of network probes, and storing the network performance metrics associated with each network probe of the plurality of network probes in a path metric table, wherein an entry in the path metric table for the each network probe includes a path traveled by the each network probe from the first provider edge router to the processing system, the network performance metrics associated with the each network probe, a community value associated with the each network probe, and a traffic classification value associated with the each network probe.

The present application describes systems and methods for network-based blocking threat intelligence. An access control list (ACL) generator may modify ACLs and provide modified ACLs to provider edge routers based on the capabilities of the provider edge routers. In some cases, an additional provider edge router that is more capable of implementing longer ACLs may be used. In some cases, a collector may identify when threat communications are bypassing provider edge routers with limited ACL lengths and provide the customer an opportunity to buy a better router or access to an additional router that supports longer or additional ACLs. A threat intelligence system may update (e.g., continuously update) the ACL provided to the ACL generator, and the ACL generator may accordingly update the modified ACLs provided to the provider edge routers.