77 results about "Route reflector" patented technology

Deployment of a hub-and-spoke (HaSP) topology virtual private network (VPN) may be facilitated by implementing a bi-directional VRF on a hub PE and using the hub PE as a hub-reflector. Route distinguishers and route targets may be used to differentiate traffic originating on the spokes from traffic originating on the hub. Using a bi-directional VRF allows a HaSP VPN to be created using a single link between the hub CE and hub PE. Allowing the hub CE to control spoke route distribution, and differentiating the direction of the flow by route target and route designator, enables the hub to control traffic between the spokes. Configuring the hub PE as a route reflector allows communication between the spokes to take place without having the CE hub inspect every piece of traffic. Optionally, other services may be provided by the hub PE as well, such as NAT, firewall, and AAA services.

A system and method for filtering routing updates is disclosed. A system that incorporates teachings of the present disclosure may include, for example, a Route Reflector (RR) having a route reflection element that routes to one or more network elements a routing update according to a filter. Other embodiments are disclosed.

The embodiment of the invention provides route equipment, a route reflector, a route information processing method and a route information processing system. The route information processing method comprises the following steps that: first route equipment receives the route information of second route equipment and disconnection no deletion identification information corresponding to the route information from the route reflector; the first route equipment determines that border gateway protocol (BGP) connection between the first route equipment and the route reflector is passively disconnected; and the first route equipment processes the route information corresponding to the disconnection no deletion identification information in a graceful restart (GR) mode. In the embodiment of the invention, the route information of other route equipment, which is positioned on a forwarding path, is processed in the GR mode, so that the forwarding path among the equipment is kept unchanged temporarily, the smoothness of service flow is ensured, and flow loss is avoided.

A method may include receiving a request to provide at least one application session, and generating a networking architecture that includes at least one virtual route reflector front end (VRR FE), at least one back end work unit, and at least one routing information base (RIB) in a virtualization environment. The method includes implementing the at least one application session via the at least one VRR FE, the at least one back end work unit, and the at least one RIB. The at least one VRR FE is to perform as a proxy for traffic to the at least one back end work unit. The method also includes monitoring a load associated with the at least one application session, and performing load balancing on the networking architecture based on assignment of the load to the at least one back end work unit.

A computer device may include logic configured to generate a virtualized environment for a customer; receive a request to provide a route reflector service for the customer; and generate a virtual route reflector on the generated virtualized environment, in response to receiving the request to provide the route reflector service for the customer. The logic may further be configured to establish a Virtual Private Network (VPN) or secure tunnel connection between the generated virtual route reflector and a client router associated with a customer network via a cloud center access system, wherein the cloud center access system connects a cloud center system that includes the computer device to a provider network that includes the client router; and establish a Border Gateway Protocol (BGP) session between the client router and the generated virtual route reflector using the established VPN or secure tunnel connection.

A system for advertising routing updates is disclosed. A system that incorporates teachings of the present disclosure may include, for example, a route reflector having a controller element that generates from a routing update a plurality of dissimilar routing advertisements transmitted in whole or in part to one or more provider edge routers operating in a packet-switched communication system. Other embodiments are disclosed.

The invention proposes a route publishing method, and the method comprises the steps: enabling all BGP routers to report updated routes to a BGP route reflector; enabling the BGP route reflector to publish an RT label with a VRF and a plurality of next-hop target routes to a far-end target BGP router with a VRF according to the collected updated routes, wherein each next-hop target route is configured to have a different NT label; enabling the target BGP router to receive the target routes reflected by the BGP route reflector; enabling the target routes to be installed in a corresponding VRF route list according to the RT label, and transmitting a message to the next hop, matched with the RT label of the message transmitting VRF, of the NT label when the received message is matched with the target route. The method can flexibly select a next hop for each VRF, and achieves the centralized control and dispatching of flow.

The present disclosure provides a separate Ethernet forwarding and control plane system, method, network, and architecture with a Link State Interior Gateway route reflector for the control plan system and a layer two network architecture for the forwarding system. The present invention optionally utilizes a cloud implementation for the Designated Router (DR) or designated peering node reducing peering requirements and distributing the functionality. Through the architecture of the present invention, the Provider router is obviated by the application of layer two switches and servers. Such an architecture provides improved scaling, performance, and cost reduction.

The invention relates to a selective BGP graceful restart in redundant router deployments. In general, techniques are described for selectively invoking graceful restart procedures when a route reflector member of a redundant route cluster fails. In one example, a method is provided that includes determining, by a provider edge router that supports graceful restart procedures, that a first router forms a redundant group with at least a second router. The method also includes detecting a failure of the first router and determining that at least the second router in the redundant group is operating approximately while the first router is failed. The method further includes overriding graceful restart procedures with respect to the failed first router when at least the second router is operating. The method also includes forwarding one or more data packets according to route information provided via the second router.

The invention is concerned with the communicating method and the communicating system between the mix virtual private networks (VPN) of the different autonomous system, it is: setup the route reflector respectively in the autonomous system of the superior VPN provider's station that relative to the lower lever VPN user when setups the route reflector, the relay, the transmitting VPN route and the operating stream, and setup corresponding Ipv4/v6 VRF for the lower level VPN station in every route reflector of the autonomous system; achieve the BGP/MPLS VPN network communication between the same-kind network and the different-kind network of the IPv4/v6 mix network which belongs to the different autonomous system of Carrier's carrier, by the two processes that are the VPN route circular and the VPN service data transmission.

The invention discloses a path optimizing selection method and system based on a route reflector, and relates to the field of data communication. The method comprises the following steps: a first route reflector acquires the whole network topology information and receives the whole network complete BGP route information sent by a second route reflector; the first route reflector collects and analyzes the whole network traffic flow direction data and link utilization factor data, and formulates a traffic grooming and optimizing strategy; according to the whole network topology information, the whole network complete BGP route information, the whole network traffic flow direction data and the link utilization factor data, the first route reflector reflects an optimized BGP route to a to-be-optimized path router according to the traffic grooming and optimizing strategy. The multipath load balancing of the traffic can be realized, and the problem of the production of the suboptimum route caused by the lack of the whole network topology visual angle is avoided. Furthermore, the processing burden of the first route reflector can be reduced since the first route reflector only needs to establish IBGP connection with the router referring to path optimization.

The invention provides a load balance method for backbone network traffic based on BGP virtual next hop, comprising: allocating a virtual manage IP address for every area; separately configuring static router at multiple convergence router of the area, and infusing the static router to IGP router table; changing the NextHop attribute in BGP router information transmitted to router reflector to virtual manage IP address to enable the core router to perform routing setting according to the BGP routing information forwarded by the router reflector. In the inventive method, load balance of virtual manage IP address can be achieved under standard IP backbone network balance model by utilizing multi-routing iteration of router by setting one identical virtual manage IP address as next hop information of BGP Nexthop attribute for BGP router of same area.

Methods and systems for an integrated solution to flow collection for determination of rate-based DoS attacks targeting ISP infrastructure are provided. According to one embodiment, a method of mitigating DDoS attacks is provided. Information regarding at least one destination within a network for which a distributed denial of service (DDoS) attack status is to be monitored is received by a DDoS attack detection module coupled with a flow controller via a bus. The DDoS attack status is determined for the at least one destination based on the information regarding the at least one destination. When a DDoS attack is detected the flow controller is notified of the DDoS attack status for the at least one destination by the DDoS attack detection module. Responsive thereto, the flow controller directs a route reflector to divert traffic destined for the at least one destination to a DDoS attack mitigation appliance within the network.

A system and method for retaining routes in a control plane learned by an inter-domain routing protocol in the event of a connectivity failure between routers. Routers are classified as either route reflectors or originators. A determination is made whether the connectivity failure occurred between a route reflector and an originator, two originators, or two route reflectors. A determination is then made whether to propagate a withdrawal of learned routes based on whether the connectivity failure occurred between a route reflector and an originator, two originators, or two route reflectors. A withdrawal of learned routes is propagated to neighboring routers if the connectivity failure occurred between two originators, or between a route reflector and an originator that is inaccessible via an intra-domain routing protocol. No withdrawal of learned routes is propagated if the connectivity failure occurred between two route reflectors, or between a route reflector and an originator that is accessible via an intra-domain routing protocol.

The embodiment of the invention discloses a quick rerouting method, a quick rerouting device and a quick rerouting system. In the embodiment of the invention, a first service provider edge router and a second service provider edge router are firstly configured with different router identifiers; and after routing information passes through a routing reflector, the router identifiers of the service provider edge routers are modified, thus leading the router identifiers of the first service provider edge router and the second service provider edge router to be consistent. By adopting the technical proposal provided by the embodiment of the invention, the VPN FRR can be supported in domain when the reflector exists between PE and ASBR in a CE double return PE scene. The technical proposal provided by the embodiment of the invention only needs ASBR to support the technique and does not make any modification to other nodes, thus having simple implementation.

The invention discloses a routing information transmitting method. The method comprises the following step that: a VPN (Virtual Private Network) virtual route reflector (VRR) determines routing information with a received identifier made for routing information required by a service access router (AR) in the received routing information according to the identifier, and transmits the routing information to the AR. The invention also discloses a routing information transmitting system and the VRR. According to the technical scheme in the embodiment of the invention, the VRR only needs to transmit the routing information required by the AR to the AR according to the identifier without transmitting useless routing information, so that the transmission frequency of a useless route in a network is lowered; the resource processing loads of the VRR and the AR are relieved; and the accuracy of routing information transmission is increased.

Improved systems and methods for distributing interdomain routing information within an Autonomous System (AS). A protocol extension to BGP, iBGPd (internal Border Gateway Protocol downloader), has been developed to replace IBGP in distributing BGP interdomain routing information within an AS. The iBGPd technique distributes routing information hop-by-hop using a reliable multi-party transport protocol. Scalability is greatly improved since the use of a full mesh of TCP connections is avoided. Also, there are improvements in routing information propagation delay and routing stability. Drawbacks related to the use of route reflectors and confederations are avoided.

The invention relates to a data communication technology, solves the problem that an existing VPN FRR technology cannot be implemented under the condition that a route reflector exists between a dual-homing/multi-homing PE and a far-end PE and provides service provider boundary routers, system and method for achieving fast VPN rerouting. According to the technical scheme, two novel service provider boundary routers are provided, the first service provider boundary router comprises a router identification presetting module, a sending module, a dynamic identification generating module and a router identification replacing module, and the second service provider boundary router comprises a receiving module and an analysis recovery module. The service provider boundary routers, system and method for achieving the fast VPN rerouting has the advantages that the far-end service provider boundary router can still support the fast VPN rerouting under the condition that the route reflector exists between the dual-homing/multi-homing service provider boundary router and the far-end service provider boundary router and is suitable for dual-homing/multi-homing networking.