22 results about "Routing domain" patented technology

The invention discloses a link congestion control load balancing routing method based on routing domain division. The method belongs to the technical field of low-orbit satellite routing switching application. The problem that a traditional routing algorithm is high in complexity and slow in response time under the condition of a large network scale is solved. A giant constellation is divided into non-overlapping routing domains, global routing is divided into intra-domain local routing calculation and cross-domain routing interaction, on-satellite computing power consumption is reduced, and the method is adaptive to a large-scale satellite network. Meanwhile, a traditional distributed routing algorithm relates to signaling flooding when the state of a satellite link is changed, the signaling overhead is huge in a large-scale satellite network, local response is carried out in the congestion process by means of a sub-domain architecture and inter-satellite link availability prediction, and the signaling overhead of the whole network is reduced, so that the availability of the routing algorithm is improved.

The technology of this application relates to a method and apparatus for sending route calculation information, a device, and a storage medium. The method relates to the field of communications technologies. The method includes receiving route calculation information, where the route calculation information includes computing capability information of a computing container, and the computing capability information indicates a computing capability corresponding to the computing container. The method further includes obtaining a shortest path tree, where the shortest path tree includes a shortest path from a router to each other router in a routing domain, and sending the route calculation information to each other router in a network based on the shortest path tree.

The embodiment of the invention provides a federated network target range networking method and related equipment, and the method comprises the steps: responding to an attack and defense networking request, building a first communication link between a source terminal target range where an attack terminal is located and a master control target range, and building a second communication link between a target terminal target range where a target terminal is located and the master control target range; respectively constructing a first logic interface corresponding to the first communication link and a second logic interface corresponding to the second communication link in a centralized routing cluster of the master control target range; configuring a first main IP address on the first logic interface and a second main IP address on the second logic interface respectively based on the network configuration information of the attack end and the target end; according to the method, the virtual routing forwarding instance is created, the first logic interface and the second logic interface are bound to the routing domain of the virtual routing forwarding instance, and the cross-domain forwarding path from the first logic interface to the second logic interface is established, so that the networking flexibility, applicability and reliability of the federated network target range are improved.

The embodiments of this application provide a routing domain, including a computing container and a network router. The network router is a routing node that supports route computation. The computing container is connected to the network router through a virtual link. The computing container is configured to: run a routing protocol, where the routing protocol is used to carry a computing capability of the computing container or the computing capability of the computing container and an identifier of a service or function running in the computing container; send the computing capability of the computing container or the computing capability of the computing container and the identifier of the service. The network router is configured to: obtain the computing capability and obtain a network capability of the routing domain; and compute a route based on the computing capability, or compute a route based on the computing capability and the network capability.

The invention relates to the technical field of military simulation data engineering, and discloses a military simulation-oriented multi-dimensional semantic knowledge graph framework construction method, which comprises the following steps of: analyzing an object model extension component of a high-level system structure to construct a simulation object model increment state sequence, mapping the multi-dimensional coordinates for data distribution management into a discretized grid data routing domain; analyzing a federal protocol session layer log to determine a member connection reliability index, and calibrating a data accessibility index of each grid unit in combination with a grid data routing domain; generating an extended semantic type identifier for the semantic assertion, and constructing a semantic missing tendency evaluation model associated with the extended semantic type identifier and the data accessibility index to calculate a missing risk metric value for the incremental semantic field; and generating a global consistency compensation factor based on the missing risk metric and fusing the global consistency compensation factor with the semantic triple.

A packet processing method, a network device, and a network system are provided, which are related to the field of communication technologies. According to the method, an intermediate node updates a source IP address of a packet based on an IP address that belongs to a local end in an endpoint IP address of a connection, and updates a destination IP address of the packet based on an IP address that belongs to a remote end in the endpoint IP address of the connection. Therefore, in a scenario in which an SR path crosses underlay transport networks in a plurality of different routing domains, a problem that a packet is discarded because a source IP address is always an IP address of a head end and URPF check fails is avoided.

The application provides a stable hierarchical routing method, device and electronic equipment of a star-ground fusion Internet, and relates to the technical field of communication. The method comprises the following steps: dividing the star-ground fusion Internet into three routing domains, the first routing domain comprising a plurality of ground nodes, the second routing domain comprising a plurality of orbital planes, and the third routing domain comprising a plurality of orbits in the same orbital plane; determining the first routing domain according to a ground node address, the ground node address being determined based on the coordinates of the geographic block where the ground node is located in the routing coordinate system; in the case where the first routing domain and the second routing domain are interconnected, using a relay ground station or an opportunistic link to route data from a source end to a destination end; and in the case where the first routing domain and the third routing domain are interconnected, routing data from the source end to the destination end based on an inter-satellite topology state and a routing coordinate system. The scheme of the application can construct a stable and efficient routing hierarchy in a dynamically running star-ground fusion Internet.

A multi-domain confinement apparatus is provided. The multi-domain confinement apparatus is configured for the pipelined distribution of entangled sets of e-bits for use in performing remote quantum logic operations. The multi-domain confinement apparatus includes an entanglement domain comprising an entanglement domain confinement device, a routing domain comprising one or more respective routing domain confinement devices, an interaction domain comprising an interaction domain confinement device. The entanglement domain defines one or more entanglement locations and the entanglement domain is configured for sets of e-bits to be entangled at respective entanglement locations. Each of the respective routing domain confinement devices and the interaction domain confinement device are configured to enable quantum objects to pass there through at respective inter-layer routing locations. The interaction domain defines a plurality of interaction locations and the interaction domain is configured for data qubit-e-bit pairs to be interacted at respective interaction locations.

A multi-domain confinement apparatus is provided. The multi-domain confinement apparatus is configured for the pipelined distribution of entangled sets of e-bits for use in performing remote quantum logic operations. The multi-domain confinement apparatus includes an entanglement domain comprising an entanglement domain confinement device, a routing domain comprising one or more respective routing domain confinement devices, an interaction domain comprising an interaction domain confinement device. The entanglement domain defines one or more entanglement locations and the entanglement domain is configured for sets of e-bits to be entangled at respective entanglement locations. Each of the respective routing domain confinement devices and the interaction domain confinement device are configured to enable quantum objects to pass there through at respective inter-layer routing locations. The interaction domain defines a plurality of interaction locations and the interaction domain is configured for data qubit-e-bit pairs to be interacted at respective interaction locations.

The present technology relates to receiving a tag that associates at least one routing domain in an on-premise site with at least one virtual network in a cloud environment, the cloud environment being associated with a cloud service provider. The present technology also relates to automating the populating of routing tables and the propagation of tables with the cloud service provider.

The application discloses a routing configuration method, device, equipment, storage medium and product. In the scene of user subnet multi-homing access, a routing prefix is directly configured on a network device or the routing prefix is announced by a subnet, so that the network device updates a source address verification rule or adds a corresponding static route after receiving routing configuration information, and the network device generates a corresponding source address verification rule after receiving announcement information. Therefore, precise protection of more scenes such as asymmetric routing, intra-domain user multi-homing asymmetric access and flow bypassing can be realized, and the problem of misfiltering of legal flow can be avoided.

The application relates to the technical field of military simulation data engineering, and discloses a multi-dimensional semantic knowledge graph framework construction method for military simulation, which comprises the following steps: analyzing an object model extension component of a high-level architecture to construct a simulation object model incremental state sequence, and mapping a multi-dimensional coordinate of data distribution management into a discretized grid data routing domain; analyzing a federal protocol session layer log to determine a member connection reliability index, and combining the grid data routing domain to calibrate a data reachability index of each grid unit; generating an extended semantic type identifier for a semantic assertion, constructing a semantic missing tendency evaluation model associated with the extended semantic type identifier and the data reachability index, and calculating a missing risk measurement value for an incremental semantic field; and generating a global consistency compensation factor based on the missing risk measurement value and fusing the semantic triple.

The application discloses a routing data transmission method and device, equipment and storage medium, relates to the field of data transmission, and is applied to a routing node in a routing domain. The method comprises the following steps: receiving a service data packet, analyzing the service data packet, obtaining label information carried in the service data packet, and transmitting the service data packet in the routing domain based on the label information. Since the routing node analyzes the service data packet, and transmits the service data packet in the routing domain based on the label information carried by the service data packet, the safety and flexibility of data packet transmission in the routing domain are effectively improved, and the path failure problem caused by the node failure problem in the routing domain is effectively avoided.

The invention discloses a routing scheduling system and method. The system comprises an aggregation root, a routing domain and a scheduling domain. The aggregation root is used for acquiring a service request message reported by a user; wherein the service request message comprises routing information used for determining a routing key; the routing domain is used for determining a routing result of the service request message according to the service request message and a pre-configured routing key strategy; wherein the routing key strategy is a predicate operation rule between routing keys set by a user; the scheduling domain is used for sending the service request message to the target application according to the routing result; wherein the target application comprises a first target application and a second target application, and the versions of the first target application and the second target application are different. By supporting a complex routing key strategy such as a predicate operation rule between pre-configured routing keys, the granularity control of routing is finer, and the traffic of the service request message can be accurately shunted in any proportion.

The present invention discloses a method for preventing BGP man-in-the-middle attacks based on certificateless orderly aggregation signatures. The key generation center of the certificateless public key cryptosystem generates and manages public and private keys, and generates a neighbor relationship authentication code and an aggregation signature for the entire EBGP routing path for the EBGP routing path. To prevent collusion attacks, neighbor relationship verification and EBGP routing path aggregation signature verification are adopted. Among them, neighbor relationship verification can effectively reduce the probability of routing path forgery. EBGP routing path verification can not only prevent malicious routing domains from lurking in the routing prefix and routing path, but also prevent any two or more routing domains from participating in a collusion attack, resulting in downstream routing domains receiving false BGP update messages with lurking malicious routing domains.

The embodiments of the present application provide a method, device and system for communication between a network management system and a network element. The method includes: the network management system sends a query message to a gateway network element GNE in a second routing domain, the query message is used to obtain routing information of a first non-gateway network element NGNE, the first NGNE is an NGNE to be registered, the routing domain where the network management system is located is a first routing domain, and the first routing domain is different from the second routing domain; the network management system receives a response message sent by the GNE in the second routing domain, the response message indicates the routing information of the GNE in the second routing domain communicating with the first NGNE; the network management system establishes a communication connection with the first NGNE based on the response message. This method is beneficial to improving the efficiency of establishing a connection between the network management system and the network element, while ensuring that the network management system can access the network element through an appropriate path.

Systems, methods, and computer-readable media for interconnecting SDWANs through segment routing. A first SDWAN and a second SDWAN of a SDWAN fabric can be identified. A segment routing domain that interconnects the first SDWAN and the second SDWAN can be formed across a WAN underlay of the SDWAN fabric. Data transmission between the first SDWAN and the second SDWAN can be controlled by performing segment routing through the segment routing domain formed between the first SDWAN and the second SDWAN.

The present technology pertains to receiving a tag associating at least one routing domain in an on-premises site with at least one virtual network in a cloud environment associated with a cloud service provider. The present technology also pertains to the automation of populating route and propagation tables with the cloud service provider.

The invention provides a satellite network routing method and device, equipment, a storage medium and a program product. The method comprises the following steps: dividing an operation period of a target satellite network into a plurality of time windows based on preset time granularity; in each time window, generating a snapshot based on the link information and the sun-on interference information; extracting a preset attribute of the target service, and judging whether the target service passes through the sunshine interference area in the snapshot; in response to determining that the target service passes through the sun-on interference area in the snapshot, removing links in the sun-on interference area in the snapshot, and generating a routing domain snapshot; dividing the routing domain snapshot into a sunshine interference area, a transition area and a normal area; and determining a source node and a target node of the target service, and determining a transmission path of the target service based on the position relations between the source node and the target node and the sun-sun interference area, the transition area and the normal area. The satellite network topology change can be dynamically adapted, and the service reliability and the resource utilization efficiency of the network are remarkably improved.

A virtual network provider system supports a virtual network including virtual machines that are each assigned to an underlay address of an underlay addressing scheme. The virtual network provider system further includes multiple routing domains each defined to include a different subset of the virtual machines. Each of the routing domains is assigned to a range of overlay addresses of an overlay addressing scheme. For each routing domain, the assigned range of overlay addresses is allocated among the subset of the virtual machines in the routing domain. The system further includes a virtual network host configured to use addresses of the overlay addressing scheme to selectively route messages between endpoints on select pairs of the virtual machines assigned to a same routing domain of the plurality of routing domains.

The invention discloses a network security protection method and system, and relates to the technical field of network security, the network security protection system comprises a routing domain, the routing domain is established by one or more autonomous domains based on a border gateway protocol, and the autonomous domains comprise black hole routers and common routers. The method comprises the following steps: a black hole router receives a fraud-related IP address and a group attribute value, generates a black hole route according to the fraud-related IP address, and sends the black hole route and the group attribute value to a first router so as to discard a data packet of the fraud-related IP address flowing through the first router based on the black hole route, the group attribute value is used for representing the danger degree and the effective range of the fraud-related IP address, and the first router is a common router matched with the group attribute value in the routing domain. By applying the technical scheme of the invention, efficient and accurate blocking of fraud-related traffic can be realized.

This application belongs to the field of network encryption networking, and specifically discloses a method, apparatus, electronic device, and storage medium for remote networking across VPN tunnels. The method includes: initiating a negotiation process between a first VPN encryption device and a second VPN encryption device; in the negotiation process, the first VPN encryption device and the second VPN encryption device exchange routing information; the first VPN encryption device contains routing information within a first network, and the second VPN encryption device contains routing information within a second network; the first VPN encryption device publishes the routing information within the second network to the first network, and the second VPN encryption device publishes the routing information within the first network to the second network, so that the first network and the second network form a routing domain, the routing domain including an external network routing domain and an internal network routing domain.