38 results about "Route reflector" patented technology

Some embodiments of the invention provide a method for interconnecting hub router clusters in an SD-WAN. The method is performed for each hub router of a first cluster and located in a first of multiple regions connected by the SD-WAN. The method establishes a connection with a respective hub router of a second cluster and located in a second of the multiple regions. The method sends, to a route reflector for the first region connected to the first cluster, a first peer-connection notification identifying the hub router as a next-hop for reaching the respective hub router. For each other hub router of the first cluster, the method receives from the route reflector a second peer-connection notification identifying the other hub router as a next-hop for reaching the other hub router's respective second cluster hub router for use in reaching edge routers connected to each other hub router's respective hub router.

A network device (ND) receives a first media access control (MAC) / Internet Protocol (IP) route for a customer ND. The ND installs the first MAC / IP route in a MAC / IP routing table and transmits the first MAC / IP route to a first subset of NDs causing the NDs to install the first route. The ND receives a second MAC / IP route for the customer ND and a sequence number indicative of an order of advertisement of the second MAC / IP route. The ND determines, based on the sequence number, that the second MAC / IP route is a best route for the customer ND. The ND installs the second MAC / IP route as the best route for the customer ND; and transmits the second MAC / IP route to a second subset of NDs including a first ND from which the first MAC / IP route originated, causing the first ND to request withdrawal of the first MAC / IP route.

Some embodiments of the invention provide a method for forwarding packets through an SD-WAN. The method is performed at a route reflector that advertises routes to facilitate forwarding of packets between first and second regions of the SD-WAN. The method advertises (1) to a first set of edge routers in the first region, a first route identifying a next-hop first hub router for initiating communications with a second set of edge routers in the second region, and (2) to the second set of edge routers, a second route identifying a next-hop second hub router for initiating communications with the first set of edge routers. When the second hub router loses connectivity to a first edge router of the first set of edge routers, the method advertises to the second set of edge routers a third route identifying the next-hop first hub router for initiating communications with the first edge router.

Some embodiments of the invention provide a method for providing dynamic edge-to-edge support across multi-hops in an SD-WAN connecting multiple regions. The method is performed at a first route reflector for a first of the multiple regions. The method receives, from a first edge router at a first site of the first region, a first request for endpoint information associated with a second edge router at a second site of a second region. After determining that the first route reflector does not have a direct connection to the second edge router, the method identifies a next-hop hub router for reaching the second edge router. The method sends a second request to the identified next-hop hub router to request the identified next-hop hub router to forward endpoint information for the second edge router to the first edge router for use in establishing a dynamic edge-to-edge connection with the second edge router.

A node, in a first network, includes circuitry configured to determine a next hop as decided by Border Gateway Protocol (BGP) is an anycast prefix to a Route Reflector (RR) interconnecting the first network with a second network, responsive to the next hop being the anycast prefix to the RR, create a tunnel with a destination based on the anycast prefix, and utilize the tunnel for traffic having the next hop as the anycast prefix to the RR. The anycast prefix is assigned to two or more RRs interconnecting the first network and the second network. A first path is decided by BGP based on a BGP Path Selection Algorithm that is independent of a second path determined by Interior Gateway Protocol (IGP). The first path and the second path can be different, and wherein tunnel is utilized to ensure the traffic always follows the first path.

Some embodiments of the invention provide a method for using route filtering to relay routes between members of hub router clusters in an SD-WAN to reduce redundant route notifications to route reflectors (RRs) that advertise routes to hub routers in multiple regions connected by the SD-WAN and multiple edge routers at sites across the multiple regions. The method is performed at a first hub router of a first cluster. From a first edge router at a first site in a first region, the method receives routes of the first edge router. The method distributes the routes of the first edge router to a particular RR directly connected to the first cluster. The method distributes, to each other hub router of the first cluster, the routes of the first edge router along with an identifier that indicates that the routes should not be redistributed to the particular RR.

The invention discloses an information transmission method and device, a ground gateway, a satellite node, a storage medium and a computer program product. The ground gateway side method comprises at least one of the following steps that first information is sent to each satellite node in all satellite nodes in a first area, and the first information is used for indicating the change condition of the available bandwidth of the corresponding satellite node in a first time range; receiving second information sent by the satellite nodes in the first area, wherein the second information is used for indicating the change condition of the traffic load of the corresponding satellite nodes in the first time range; sending third information to each satellite node in all satellite nodes in the first area, wherein the third information is used for indicating the change condition of the network topology of the corresponding satellite node in the first time range; the ground gateway establishes a neighbor relationship with each of all satellite nodes in the first area, and the ground gateway has at least routing reflector (RR) and / or controller functions.

Some embodiments of the invention provide a method for implementing an SD-WAN connecting multiple sites at multiple physical locations. The method is performed at a first route reflector for a first region of the SD-WAN. The method receives, from a hub router of the first region, a peer-connection notification regarding a newly connected first edge router located at a first site in a second region. The method determines that a routing table maintained by the first route reflector does not include routes of the first edge router and that the first route reflector does not have a direct connection to the first edge router. Based on said determining, the method requests routes of the first edge router from the hub router. After receiving from the hub router the requested routes of the first edge router, the method updates the routing table to include the routes of the first edge router.

Some embodiments of the invention provide a method for providing dynamic edge-to-edge support across multi-hops in an SD-WAN connecting multiple regions. The method is performed at a first route reflector for a first of the multiple regions. The method receives, from a first edge router at a first site of the first region, a first request for endpoint information associated with a second edge router at a second site of a second region. After determining that the first route reflector does not have a direct connection to the second edge router, the method identifies a next-hop hub router for reaching the second edge router. The method sends a second request to the identified next-hop hub router to request the identified next-hop hub router to forward endpoint information for the second edge router to the first edge router for use in establishing a dynamic edge-to-edge connection with the second edge router.

Some embodiments of the invention provide a method for implementing an SD-WAN connecting multiple sites at multiple physical locations. The method is performed at a first route reflector for a first region of the SD-WAN. The method receives, from a hub router of the first region, a peer-connection notification regarding a newly connected first edge router located at a first site in a second region. The method determines that a routing table maintained by the first route reflector does not include routes of the first edge router and that the first route reflector does not have a direct connection to the first edge router. Based on said determining, the method requests routes of the first edge router from the hub router. After receiving from the hub router the requested routes of the first edge router, the method updates the routing table to include the routes of the first edge router.

The application provides a network configuration method and device, electronic equipment and storage medium. The method comprises the following steps: obtaining a target configuration file, the target configuration file comprising a configuration item and a configuration parameter matched with the configuration item, the target configuration file being used to instruct a target controller to perform a configuration operation on a target area in a Kubernetes cluster; sending the target configuration file to a pre-configured target controller, the target controller being used to perform network configuration on the Kubernetes cluster, the Kubernetes cluster comprising at least one target area, the target area comprising a route reflector (RR) node, a non-RR node and a switch associated with the RR node; and controlling the target controller to perform network configuration on a target parameter of the target area in the Kubernetes cluster based on the target configuration file. Through the above characteristics, the network deployment effect of the Kubernetes cluster can be improved.

In one embodiment, a method includes receiving, by a route reflector, a subscription request from a first provider edge node in a network and generating a subscription policy for the first provider edge node. The method also includes receiving a first Ethernet Virtual Private Network (EVPN) Type 2 Route from a second provider edge node, assigning a sequence number to the first EVPN Type 2 Route, and communicating the first EVPN Type 2 Route with the sequence number to the first provider edge node. The method further includes receiving a second EVPN Type 2 Route from a third provider edge node, generating an updated sequence number in response to receiving the second EVPN Type 2 Route from the third provider edge node, and communicating the second EVPN Type 2 Route with the updated sequence number to the first provider edge node and the second provider node.

This disclosure describes techniques and mechanisms to enable proactive convergence of endpoints in a network corresponding to virtual machine mobility scenarios. The techniques may be used individually or together to reduce convergence times and improve network security. The techniques may include proactively exchanging IP-MAC binding information between an old location and a new location of a virtual machine; (2) utilizing a route reflector and a convergence efficient flood order to update the location of the virtual machine at the old location to point to the new location; (3) proactively poisoning the route to the virtual machine at the old location; and (4) utilizing an orchestrator to proactively notify leaf(s) of reachability information of the virtual machine prior to or during migration of the virtual machine.

This disclosure describes techniques and mechanisms to enable proactive convergence of endpoints in a network corresponding to virtual machine mobility scenarios. The techniques may be used individually or together to reduce convergence times and improve network security. The techniques may include proactively exchanging IP-MAC binding information between an old location and a new location of a virtual machine; (2) utilizing a route reflector and a convergence efficient flood order to update the location of the virtual machine at the old location to point to the new location; (3) proactively poisoning the route to the virtual machine at the old location; and (4) utilizing an orchestrator to proactively notify leaf(s) of reachability information of the virtual machine prior to or during migration of the virtual machine.

The invention discloses a quantum key distribution system and method. The system comprises a quantum key service platform, an SDN (Software Defined Network) controller, a routing reflector and a plurality of routing devices, and the first routing device issues a first BGP (Border Gateway Protocol) routing message of a custom group attribute containing first key application information to request to update a quantum key; the routing reflector sends the first BGP routing message to other routing equipment; the second routing equipment responds to the first BGP routing message and issues a second BGP routing message containing second key application information; the routing reflector sends the first BGP routing message and the second BGP routing message to the SDN controller; and the SDN controller obtains a first quantum key and a second quantum key generated by the quantum key service platform, and sends a first response message carrying the encrypted quantum key and a second response message carrying the encrypted quantum key to the first routing device and the second routing device respectively. The technical problems of low distribution efficiency, multiple protocols and complex operation and maintenance when a quantum key distribution technology is applied to a current communication network are solved.

Some embodiments of the invention provide a method for implementing an SD-WAN connecting multiple sites at multiple physical locations. The method is performed at a first hub router of the SD-WAN. The method establishes, with a first edge router of a first site in a first region, a new connection for the first hub router to use to connect the first edge router to a second edge router of a second site in the first region. The method determines that a peer-connection notification regarding the newly connected first edge router has to be sent to a first route reflector (RR) that does not connect directly with the first edge router but connects to routers in a second region. The method sends the peer-connection notification to the first RR to analyze and determine whether to obtain routes associated with the first edge router for advertising to routers in the second region.

Some embodiments of the invention provide a method for using route filtering to relay routes between members of hub router clusters in an SD-WAN to reduce redundant route notifications to route reflectors (RRs) that advertise routes to hub routers in multiple regions connected by the SD-WAN and multiple edge routers at sites across the multiple regions. The method is performed at a first hub router of a first cluster. From a first edge router at a first site in a first region, the method receives routes of the first edge router. The method distributes the routes of the first edge router to a particular RR directly connected to the first cluster. The method distributes, to each other hub router of the first cluster, the routes of the first edge router along with an identifier that indicates that the routes should not be redistributed to the particular RR.

The present disclosure provides an information transmission method and apparatus, a ground gateway, a satellite node, a storage medium, and a computer program product. A method for a ground gateway side comprises at least one of the following: sending first information to each satellite node among all satellite nodes in a first area, the first information being used for indicating a change in available bandwidth of the corresponding satellite node within a first time range; receiving second information sent by a satellite node in the first area, the second information being used for indicating a change in traffic load of the corresponding satellite node within the first time range; and sending third information to each satellite node among all the satellite nodes in the first area, the third information being used for indicating a change in network topology of the corresponding satellite node within the first time range. The ground gateway establishes a neighbor relationship with each satellite node among all the satellite nodes in the first area, and the ground gateway at least has a route reflector (RR) function and / or a controller function.

The embodiment of the present application provides a path determination method, device, system, equipment and storage medium, which relates to the field of cloud network integration technology. The technical solution of the embodiment of the present application includes: the router obtains link state parameters, wherein the link state parameters include the basic performance parameters and delay change frequency of the link where the router is located within a specified time length; the router sends the link state parameters to the route reflector, the route reflector receives the link state parameters sent by the router, sends the link state parameters to the SDN controller, the SDN controller receives the link state parameters sent by the route reflector, and calculates the path based on the link state parameters. In the embodiment of the present application, the router sends the link state parameters including the delay change frequency to the SDN controller via the route reflector, so that the path calculated by the SDN controller is more suitable for delay-sensitive services.

This disclosure describes techniques and mechanisms to enable proactive convergence of endpoints in a network corresponding to virtual machine mobility scenarios. The techniques may be used individually or together to reduce convergence times and improve network security. The techniques may include proactively exchanging IP -MAC binding information between an old location and a new location of a virtual machine; (2) utilizing a route reflector and a convergence efficient flood order to update the location of the virtual machine at the old location to point to the new location; (3) proactively poisoning the route to the virtual machine at the old location: and (4) utilizing an orchestrator to proactively notify leafys) of reachability information of the virtual machine prior to or during migration of the virtual machine.

This application discloses a communication method and a related apparatus, and relates to the field of communication technologies. The method is applied to a software defined wide area network (SD-WAN) overlay network. A customer premise equipment (CPE) autonomously generates an SD-WAN overlay routing table, so that communication reliability and flexibility are improved. A route reflector (RR) specifies an overlay multicast reverse path forwarding (RPF) route to the CPE to implement SD-WAN overlay multicast communication, and the CPE does not need to perform path computation autonomously, so that a computing power requirement of the CPE is reduced. An identifier of the CPE and an identifier of a site are carried in a multicast join message to implement the SD-WAN overlay multicast communication. A standard IP header is carried in a multicast service packet to implement the SD-WAN overlay multicast communication, so that generalization, applicability, and compatibility are improved.

This application discloses a routing information processing method, apparatus, electronic device, storage medium, and program product, which can be used in a route reflector with additional path capability enabled in a network communication system. The method involves receiving first routing information with the same destination address sent by at least two access devices to obtain a routing information set for the destination address; for each piece of first routing information in the routing information set, determining the first forwarding path corresponding to that first routing information; determining a target first routing information to be sent from the first routing information corresponding to the same first forwarding path; and sending the target first routing information corresponding to each first forwarding path to the routing end, so that the routing end can add it to the routing table for forwarding data traffic to the destination address. This application can achieve effective dissemination of routing information, thereby improving the forwarding quality of data traffic in a network communication system.

In one embodiment, a method includes receiving, by a route reflector, a subscription request from a first provider edge node in a network and generating a subscription policy for the first provider edge node. The method also includes receiving a first Ethernet Virtual Private Network (EVPN) Type 2 Route from a second provider edge node, assigning a sequence number to the first EVPN Type 2 Route, and communicating the first EVPN Type 2 Route with the sequence number to the first provider edge node. The method further includes receiving a second EVPN Type 2 Route from a third provider edge node, generating an updated sequence number in response to receiving the second EVPN Type 2 Route from the third provider edge node, and communicating the second EVPN Type 2 Route with the updated sequence number to the first provider edge node and the second provider node.

The present application discloses a network intercommunication method, system, electronic device, storage medium and program product, which relate to the field of cloud computing, including: for first virtual machine traffic output by a virtual machine in a computing node and whose destination node is a physical server node, routing matching is performed on the first virtual machine traffic through the routing table corresponding to the first virtual routing and forwarding instance in the computing node; instructing the target switch to send the obtained second virtual machine traffic to the physical server node, so that the virtual machine and the physical server node can achieve network intercommunication, and the target switch is respectively connected to the physical server node, the route reflector and the computing node. The method solves the problem that the soft gateway used between the virtual machine in the computing node and the bare metal node in the cloud computing environment has a bandwidth forwarding bottleneck and a high solution cost, which leads to poor network intercommunication between the virtual machine and the bare metal node, and improves the network intercommunication between the virtual machine and the bare metal node.

The invention discloses an over-limit routing processing method and device, computer equipment and a storage medium. The method belongs to the technical field of network control, and specifically comprises the following steps: after receiving a first route filtering message which is sent by a receiving device and is used for indicating filtering of an overrun route, determining a first route demand result of a first edge device in a first autonomous system for the overrun route; under the condition that the first route demand result represents that no demand exists, sending a second route filtering message for indicating to filter the ultralimit route to a second route reflector of the second autonomous system; wherein the second route filtering message is used for indicating the second route reflector to control the sending device to filter the overrun route. Based on the method provided by the invention, the purpose of filtering the over-limit routing from the source is realized, and the pressure of the over-limit routing on the edge equipment of each supplier in the network is reduced to the maximum extent.

The invention provides a route synchronization method, device and equipment and a readable storage medium, and the method comprises the steps: obtaining network overlay route information, and reflecting the network overlay route information to a vBGP; host overlay routing information injected by the SDN controller is received through the independent communication channel; and the overlay routing information of the host is reflected to each BGP (Border Gateway Protocol) peer. According to the technical scheme of the invention, an independent communication channel is established between the route reflector and the SDN controller, the problems of main and standby switching and neighbor oscillation caused by vBGP are avoided, the stability and efficiency of route synchronization are improved, host overlay route information can be directly injected and reflected to each BGP peer by the SDN controller, and the reliability of route synchronization is improved. The routing management flexibility and reliability in the mixed Overlay networking environment are enhanced, the routing updating process is simplified, and the risk of routing errors and residues is reduced.

The invention relates to a system architecture for realizing separation of network data and a control plane based on an SDN (Software Defined Network) and a BGP (Border Gateway Protocol) EVPN (Enhanced Virtual Private Network), comprising a branch layer which is provided with a plurality of VXLAN (Virtual eXtensible Local Area Network) tunnel endpoint devices and is used for processing a message sent by at least one host and transmitting the processed message to a routing reflector on a core layer, the plurality of VXLAN tunnel endpoint devices establish connection and synchronize host MAC addresses by issuing routing information of a preset type; and the core layer is provided with a plurality of routing reflectors and is used for transmitting the processed message to the SDN gateway, and the SDN gateway is used for transmitting the processed message to the operator boundary equipment. Through the method and the device, the problems of difficulty in network deployment, limited network scale and low bandwidth utilization efficiency of the L2VPN in related technologies are solved, separation of the data plane and the control plane is realized, and the method and the device have the advantages of simplicity in deployment, high expansibility, high bandwidth utilization rate and the like.

The embodiment of the invention provides a communication method, a communication system, electronic equipment, a storage medium and a program product. The communication method includes receiving port resource configuration information from a network controller in a software defined wide area network (SD-WAN). The port resource configuration information is used for establishing a security management tunnel between an edge node in the SD-WAN and an associated routing reflector (RR) in the SD-WAN, and the edge node sends a security management tunnel establishment request to the RR. The security management tunnel establishment request comprises a port number in the port resource configuration information. And the edge node establishes a security management tunnel with the RR based on the port number. According to the embodiment of the invention, excessive manual intervention can be reduced, and the operation cost is reduced.

The application provides a policy issuing method, a controller, a route reflector device and a network system. The method comprises the following steps: a policy generation component of a master controller generates a policy issuing instruction according to a current policy, stores the policy issuing instruction into a policy issuing table, and broadcasts the policy issuing instruction to BGP components of controllers in a controller cluster; the BGP components of the controllers determine whether to issue the policy issuing instruction according to BGP neighbor information of the BGP components and RR devices indicated by the policy issuing instruction, wherein the BGP neighbor information is used to indicate the RR devices connected with the controllers; and if yes, the BGP component which determines to issue the policy issuing instruction sends the policy issuing instruction to the connected RR device through a virtual IP address of the master controller. The application reduces the number of BGP neighbors on the RR device side and the controller side, and also reduces the data amount borne by the BGP components in each controller.