50 results about "Provider Edge" patented technology

Methods and systems are described herein for reducing border gateway protocol (BGP) signaling for multi-homed devices. In one aspect, the method comprises: receiving one or more signals from one or more provider edge devices. The one or more signals include an address of a membership group associated with a multi-homed device. A router receives, from a provider edge device of the one or more provider edge devices, a service prefix. The service prefix is associated with the multi-homed device and the membership group. The router may store the service prefix and the one or more provider edge devices and connect, according to the service prefix and the one or more provider edge devices, to the multi-homed device associated with the membership group.

The invention provides a service message transmission method and device, equipment and a storage medium, relates to the technical field of communication, and is used for solving the problem of poor compatibility of new and old equipment in a network. The method is applied to a first provider edge device PE, and comprises: receiving an edge-to-edge pseudo-wire simulation PWE3 service message from a source user edge device CE, the PWE3 service message comprising a target pseudo-wire PW identifier, and the target PW identifier being used for indicating a PW between the source CE and a target CE. And packaging the PWE3 service message according to the target PW identifier to obtain a segment routing SRv6 service message based on the sixth version of forwarding plane of the Internet protocol. And sending the SRv6 service message to a second PE through a target SRv6 tunnel between the first PE and the second PE, the second PE being a PE connected with the target CE.

An ingress provider edge (IPE) device of a provider network receives a packet from outside of the provider network. The IPE device determines the packet is to be transmitted to a device on an Ethernet segment on which the IPE device is multihomed. The IPE device transmits the packet on the Ethernet segment even though the designated forwarder for the Ethernet segment is from IPE device. Furthermore, the IPE device labels the packet with an IPE identifier that identifies the IPE device for the packet, and forwards the labeled packet to other devices on the provider network. An egress provider edge (EPE) device that is (a) multihomed on the same Ethernet segment as the IPE device and (b) is the designated forwarder for the Ethernet segment receives the packet. The EPE device refrains from transmitting the packet on the Ethernet segment.

In some implementations, an ingress provider edge network device (PE) may obtain dynamic load information associated with respective links of a plurality of multi-homing (MH) PEs. The ingress PE may determine based on the dynamic load information, a dynamic load-balancing scheme associated with the plurality of MH PEs. The ingress PE may forward traffic using the dynamic load-balancing scheme.

The invention provides a computing power routing method and device, a routing node, a node and client equipment, and relates to the technical field of communication, the computing power routing method is applied to a first routing node, and the method comprises the following steps: receiving a first message sent by a second routing node; performing de-encapsulation processing on the first message to obtain a second message and a first segment of routing identifier SID; determining a local first target node connected with the first routing node according to the first SID; the second message is sent to the first target node; wherein the first routing node is a first hop provider edge (PE) routing node of the first target node access network; the first target node is a first edge computing MEC device or a first computing power service node. According to the scheme of the invention, the problem of routing chaos in a distributed scene can be avoided, and the problems of multi-point decision and inconsistent routing states are further avoided.

A traffic controller device for distributing or otherwise controlling the distribution of routing information may be included in a telecommunications network. The traffic controller may receive routing tables from a plurality of network devices, such as one or more provider edge devices of the network. The traffic controller, upon receiving the routing information from the provider edge devices, may generate a routing table associated with each device providing the routing information. The traffic controller may also provide updates to one or more of the networking devices associated with the controller. The traffic controller may alter or update, at the traffic controller, the routing table associated with the target provider edge device based on the network policy. The routing information in the routing table for that device and maintained by the traffic controller may be updated with a new route or new local preferred parameter value.

Ethernet VPN supports All-Active multihoming and an ingress Provider Edge (PE) can load balance traffic to all the egress PEs on a multihoming Ethernet Segment (MHES). Methods, devices, and systems to allow an operator to have the ingress PE load-balance to only a set of the PEs on the MHES are described. In the event that all PEs of the set are not usable (e.g., down, not attached to the ES, etc.), the ingress PE can load balance data traffic to one or more PEs on the MHES that are not in the set.

Aspects of the subject disclosure may include, for example, in response to a Border Gateway Protocol (BGP) update from an egress provider edge router connected to a destination customer network, receiving a request for an end-to-end SR policy or an end-to-end path from an ingress provider edge router, where the BGP update includes a prefix of the destination customer network and a first color; using color mapping data, determining a first domain associated with the first color and determining a second color to be associated with a second domain and mapped to the first color, where a color is a numerical value associated with a network intent of a domain, the color mapping data define mappings between different colors associated with different domains, and the mapped first color and second color enable identification of a first intent and a second intent that belong to the first domain and the second domain, respectively; and generating the end-to-end path reflecting each definition of the first and the second intents identified by the first color in the first domain and the second color in the second domain. Other embodiments are disclosed.

An improved mechanism is disclosed for advertising Segment Routing over IPv6 (SRv6)- based Border Gateway Protocol (BGP) services in networks supporting multiple Segment Identifier (SID) types (14). A Provider Edge (PE) router (100), acting as a BGP speaker (38), operates an SRv6-based BGP service and advertises it via BGP Update messages. These messages include Service SID information encoded as a Service SID Type- Length-Value (TLV) (12), and multiple Service SID Structure information (14), each corresponding to different SID types, such as uncompressed SIDs or micro SIDs (uSIDs). Upon receiving these messages, ingress PE routers select appropriate SID types based on capabilities or local policies, enhancing interoperability and reducing control-plane overhead. The solution uses a new Service SID TLV type (18) to indicate support for multiple SID structures, promoting efficient resource utilization and seamless multi¬ vendor deployment within SRv6 environments. This approach simplifies transitions between SID types and optimizes network scalability and flexibility.

A method to establish an optimized frame format used by a first compute node (21) acting as ingress PE and a second compute node (22) acting as egress PE in the transport of overlay ethernet traffic containing an IP payload from the source overlay endpoint attached to or hosted in the first compute node (21) to the destination overlay endpoint attached to or hosted in the second compute node (22) through a Multi Protocol Label Switching, MPLS, underlay network (2), where the frame format is a conventional MPLS tagged ethernet frame format, wherein an MPLS label stack is inserted between the ethernet header and the IP header of the overlay ethernet frame, where the single ethernet header carries the destination and source overlay Media Access Control, MAC, addresses when the frame was originated from the source overlay endpoint, where the MPLS header of the frame comprises a top label with the Label Switch Path, LSP, label towards the destination Provider Edge, PE, router, ie. egress PE, and a bottom label, e.g. an optimization MPLS label, holding information enabling the forwarding mechanism in the egress PE router to restore the original destination and source overlay MAC addresses.

A system and associated methods provide procedures for establishing multicast connections and forwarding multicast content from a source to a subscriber when an ingress provider edge in communication with the subscriber is connected to an egress provider edge device belonging to an EVPN instance, especially in cases where the egress provider edge device is not receiving content from the source. The system configures “backup” provider edge devices belonging to the EVPN instance to temporarily forward the multicast content to the egress provider edge device on behalf of the source, enabling the ingress provider edge device and subscriber to continue to receive the multicast content from the source while the multicast network adjusts to recognize a new egress provider edge device. Methods of establishing connections between the ingress provider edge device and the correct egress provider edge device are also provided to avoid flooding and inefficient content forwarding throughout the network.

Aspects of the subject disclosure may include, for example, a device, having: a processing system including a processor; and a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, the operations including: receiving a border gateway protocol (BGP) prefix from a first provider edge (PE) router; determining that a second PE router failed to send the BGP prefix to the device; confirming that the BGP prefix is valid; and sending the BGP prefix to the second PE router. Other embodiments are disclosed.

Mobile User Plane (MUP) over Multi-Protocol Label Switching (MPLS) is implemented over an access an access network connecting a provider edge router to a gateway router, the gateway router being connected to a base station having a wireless connection to user equipment (UE). Traffic between the provider edge router and the gateway router is routed according to both of multi-protocol label switching (MPLS) protocol and mobile user plane (MUP) protocol. An MUP-controller may discover the UE, base station, and corresponding tunnel information and transmit this information to the provider edge router and gateway router, which then create an MPLS label and routing entries to implement MUP.

The present disclosure describes a device, computer-readable medium, and method for multifactor authentication using network address translation data. A method performed by a processing system includes receiving, from a host device in a communication network, a request to authenticate a user, wherein the request includes a purported identity of the user and a public internet protocol address assigned to a user endpoint device from which a request to access a resource at the host device was sent, querying a provider edge server for a verification that the purported identity matches an identity associated with a private internet protocol address that is mapped to the public internet protocol address, receiving a first response from the provider edge server, determining whether to authenticate the user based on the first response from the provider edge server, and sending a second response to the host device indicating a result of the determining.

In some implementations, an ingress provider edge network device (PE) may obtain dynamic load information associated with respective links of a plurality of multi-homing (MH) PEs. The ingress PE may determine based on the dynamic load information, a dynamic load-balancing scheme associated with the plurality of MH PEs. The ingress PE may forward traffic using the dynamic load-balancing scheme.

In one embodiment, a method includes receiving, by a route reflector, a subscription request from a first provider edge node in a network and generating a subscription policy for the first provider edge node. The method also includes receiving a first Ethernet Virtual Private Network (EVPN) Type 2 Route from a second provider edge node, assigning a sequence number to the first EVPN Type 2 Route, and communicating the first EVPN Type 2 Route with the sequence number to the first provider edge node. The method further includes receiving a second EVPN Type 2 Route from a third provider edge node, generating an updated sequence number in response to receiving the second EVPN Type 2 Route from the third provider edge node, and communicating the second EVPN Type 2 Route with the updated sequence number to the first provider edge node and the second provider node.

A system and associated methods provide procedures for establishing multicast connections and forwarding multicast content from a source to a subscriber when an ingress provider edge in communication with the subscriber is connected to an egress provider edge device belonging to an EVPN instance, especially in cases where the egress provider edge device is not receiving content from the source. The system configures “backup” provider edge devices belonging to the EVPN instance to temporarily forward the multicast content to the egress provider edge device on behalf of the source, enabling the ingress provider edge device and subscriber to continue to receive the multicast content from the source while the multicast network adjusts to recognize a new egress provider edge device. Methods of establishing connections between the ingress provider edge device and the correct egress provider edge device are also provided to avoid flooding and inefficient content forwarding throughout the network.

The present application describes systems and methods for network-based blocking threat intelligence. An access control list (ACL) generator may modify ACLs and provide modified ACLs to provider edge routers based on the capabilities of the provider edge routers. In some cases, an additional provider edge router that is more capable of implementing longer ACLs may be used. In some cases, a collector may identify when threat communications are bypassing provider edge routers with limited ACL lengths and provide the customer an opportunity to buy a better router or access to an additional router that supports longer or additional ACLs. A threat intelligence system may update (e.g., continuously update) the ACL provided to the ACL generator, and the ACL generator may accordingly update the modified ACLs provided to the provider edge routers.

A method performed by a first provider edge (PE) in an ethernet virtual private network (EVPN) is disclosed to handle media access control (MAC) mobility. The method includes receiving a first route advertisement message from a second PE, wherein the first route advertisement message includes a MAC address associated with a host, a first ethernet segment identifier (ESI), and a sequence number, receiving a second route advertisement message from a third PE, wherein the second route advertisement message includes the MAC address, a second ESI, and the same sequence number included in the first route advertisement message, and responsive to a determination that the route advertisement messages include the same MAC address and the same sequence number but include different ESIs, invalidating routes associated with the MAC address having the same sequence number and removing an entry for the MAC address from a MAC table.

In some implementations, a first network device may encode Internet Protocol version 4 (IPv4) network layer reachability information (NLRI) using Internet Protocol version 6 (IPv6) next hop encoding to generate encoded IPv4 NLRI. The first network device may include information indicating border gateway protocol (BGP) labeled unicast (BGP-LU) in the encoded IPv4 NLRI. The first network device may advertise the encoded IPv4 NLRI. The first network device may establish a communication session with a second network device, wherein the communication session is established via an IPv6 core network. The first network device may forward, via the communication session, one or more IPv4 packets using the encoded IPv4 NLRI.

The invention discloses a high-efficiency GPNPU (General Purpose Network Processing Unit) chip architecture with integrated memory and calculation, which belongs to the technical field of NPU chip architectures and comprises a plurality of array PE (Provider Edge) units, each PE unit comprises a local memory and a calculation unit and can independently execute vector and tensor calculation tasks, and the plurality of PE units are connected through data channels to realize direct exchange and sharing of data. Therefore, dependence on an external memory is reduced, and data processing efficiency is improved. According to the method, various existing AI network models can be supported, particularly, hardware, large-scale and instruction processing is carried out on operators in a recently popular LLM (Large Language Model), the AI calculation requirement of a large data volume is met, parallel calculation is achieved through specific instruction combination, the AI calculation efficiency and speed are improved, and complex AI tasks can be rapidly processed.

Provided is a service data processing method. The service data processing method includes: generating, based on service data of a plurality of client services, service blocks of the client services, respectively; mapping the service blocks of the client services into a payload area of at least one sub slicing frame (SSF); and configuring an overhead area field of each SSF to obtain the at least one SSF, wherein each of the SSF carries the service blocks of a plurality of different client services. Further provided are a service data exchange method, a service data extraction method, a provider edge device, a provider exchange device, and a computer-readable medium.

A network device can automatically select an execution plan from a set of possible execution plans that cause a first set of traffic assignments in a network to be changed to a second set of traffic assignments. A traffic assignment indicates assignments of the traffic to one or more tunnels, internal routes and / or peer links to be utilized for routing traffic received at provider edge routers through a network to prefixes. A traffic assignment can have various parameters such as bandwidth, transmission costs etc. Each execution plan has one or more steps, and each step has one or more traffic assignment changes progressing from the first set of traffic assignments to the second set of traffic assignments. The network device can automatically select an execution plan based on an evaluation metric determined for each execution plan. The evaluation metric can be a cost based metric or a quality based metric.

Methods and systems are described herein for reducing border gateway protocol (BGP) signaling for multi-homed devices. In one aspect, the method comprises: receiving one or more signals from one or more provider edge devices. The one or more signals include an address of a membership group associated with a multi-homed device. A router receives, from a provider edge device of the one or more provider edge devices, a service prefix. The service prefix is associated with the multi-homed device and the membership group. The router may store the service prefix and the one or more provider edge devices and connect, according to the service prefix and the one or more provider edge devices, to the multi-homed device associated with the membership group.

A system and associated methods provide solutions for reducing a volume of traffic through a multicast network attributed to repeated maintenance messages, which are required in order to maintain a multicast connection. The system configures provider edge devices to generate and send maintenance messages on behalf of members of a multicast group to establish and maintain the multicast connection and provides options for determining unknown locations of sources and / or subscribers, thereby reducing the overall volume of traffic transmitted over the multicast network.

In one example, techniques are provided for extending an active measurement protocol with an Operations, Administration and Management / Maintenance (OAM) channel. A first Provider Edge (PE) node obtains from or provides to a second PE node, over a packet-switched network via an overlay, OAM data in an OAM channel of the active measurement protocol. The OAM data relates to a networking issue. The network issue is automatically resolved responsive to the OAM data.

A system and method are provided for faster convergence with multihoming using internet protocol (IP) performance measurement (PM) sessions to report, to a transmitting provider edge (PE), a state of health of a connection between a multihomed node and a receiving (PE). The state of health can be the liveness of the connection. The receiving PE locally monitors the state of health of its connection to the node, and encodes information of the state of health in a field of the PM session messages sent to the transmitting PE. For example, while the PM session messages indicate the connection is live, traffic from the transmitting PE to the node is routed through the receiving PE. Upon the PM session messages indicating the connection is no longer live, the transmitting PE instead routes traffic to the node through another receiving PE with which the node is multihomed.

A system and associated methods provide solutions for reducing a volume of traffic through a multicast network attributed to repeated maintenance messages, which are required in order to maintain a multicast connection. The system configures provider edge devices to generate and send maintenance messages on behalf of members of a multicast group to establish and maintain the multicast connection and provides options for determining unknown locations of sources and / or subscribers, thereby reducing the overall volume of traffic transmitted over the multicast network.

The present disclosure relates to the technical field of communications, and provides a computing power routing method and apparatus, a routing node, a node, and a client device. The computing power routing method is applied to a first routing node, and comprises: receiving a first packet sent by a second routing node; performing decapsulation processing on the first packet to obtain a second packet and a first segment routing identifier SID; on the basis of the first SID, determining a local first target node connected to the first routing node; and sending the second packet to the first target node, wherein the first routing node is a first-hop provider edge (PE) routing node of a network accessed by the first target node, and the first target node is a first edge computing MEC device or a first computing power service node. The solution of the present disclosure can avoid the problem of routing confusion in distributed scenarios, thereby avoiding the problems of multi-point decision-making and inconsistent routing states.

Techniques are described by which a routing protocol, such as border gateway protocol (BGP), is extended to control propagation and importation of information using route targets (RTs) specified as bitmasks that encode link administrative group information. For example, a network control device (e.g., controller) is configured to allocate one or more subset of resources (e.g., nodes or links) of an underlay network to each of one or more virtual networks established over the underlay network. The controller generates a bitmask encoded with link administrative group information of the one or more links. The controller then outputs, to a plurality of provider edge (PE) routers that are participating in a respective virtual network, a routing protocol message to advertise the one or more subset of resources, wherein the routing protocol message includes a route target specified as the bitmask.