1808 results about "Software define network" patented technology

Method of and a compiler for controlling a network based on a logical network model. The network has physical nodes and virtual nodes. The physical nodes are interconnected by physical links in accordance with a physical network layout. The logical network model has logical nodes indicated with a logical node name which refers to at least one physical or at least one virtual node in the network. The method uses a physical forwarding point-of-attachment relation defining physical paths of the physical network in dependence on a physical forwarding policy, a first mapping relation defining how the virtual nodes and the physical nodes are mapped to one another, and a second mapping relation defining how the logical nodes are mapped to the physical nodes and the virtual nodes. The method also includes transforming paths in the physical network to paths between the physical nodes and the virtual nodes.

A computer-implemented method, a system, and a network include receiving network data from a network and non-network sourced data from one or more external sources relative to the network; performing data mining on the network data and the non-network sourced data; developing a predictive analytics model based on the data mining; and performing predictive analytics on the network data and the non-network sourced data using the predictive analytics model to detect likely future failures in the network. The network can include a Software Defined Network (SDN) operating at any of Layers 0, 1, 2 and / or 3.

One embodiment of the present invention provides a switch capable of processing software-defined data flows. The switch includes an identifier management module and a flow definition management module. During operation, the identifier management module allocates a logical identifier to a link aggregation port group which includes a plurality of ports associated with different links. The flow definition management module processes a flow definition corresponding to the logical identifier, applies the flow definition to ports in the link aggregation port group, and update lookup information for the link aggregation port group based on the flow definition.

The invention discloses a software defined network (SDN)-based data processing system, which comprises a source data node, a source control node and a target control node, wherein the source data node is used for receiving a first data packet and transmitting the first data packet to the corresponding source control node; the source control node is used for receiving the first data packet, which carries a target address of the first data packet, transmitted by the source data node, and determining the target control node according to the target address of the first data packet; and the target control node is used for receiving the first data packet and generating a second data packet according to the first data packet and a matching strategy rule. According to the software defined network-based data processing system provided by the embodiment of the invention, the collaboration capacity between the nodes is improved so as to reduce redundancy for multi-node processing in network equipment and improve the business processing efficiency of a network. The invention also discloses a software defined network-based data processing method and a software defined network-based data processing device.

One embodiment of the present invention provides a system for facilitating flow definition management in a switch. During operation, the system identifies a generic flow definition which specifies a flow that is not specific to any input port of a switch. The system further stores in a flow lookup data structure one or more port-specific flow rules based on the generic flow definition, wherein each port-specific flow rule corresponds to a respective port capable of processing data flows.

System and method for performance-based routing in an SDN. An SDN controller is configured to adaptively determine data transmission routes based on real-time route performance evaluation provided by a virtual router. The virtual router includes a route detection component to attain route performance data and a performance evaluation component to evaluate the route performance based on predetermined criteria provided by the SDN controller. The evaluation result is sent to the SDN controller and used to intelligently determine a superior route selection and route usage for a specific application program. According to the determination, the SDN controller updates the flow table associated with the virtual router for subsequent data transmission.

Data traffic is intelligently steered by an adaptive load balancer through a software defined network (SDN) to which the load balancer is operatively coupled. The network has egress ports to which a plurality of servers is connected. The network has an SDN controller which generates statistical information concerning the network. Data traffic is steered through the SDN by the adaptive load balancer using a passive port method, a passive path, method, an active path method and an active path with quality of service (QoS) overlay method.

The invention discloses a framework system of a grade software defined network software controller and an implementation method thereof. The framework system and the implementation method are applied in a multi-domain optical transport network (OTN); an inter-domain mapping relation of a whole network view and a physical device network is established according to whole network topologic information by a primary (SDNOTN) controller; an inter-domain mapping processing request of the whole network view and the physical device network in each domain is sent to each auxiliary SDNOTN; and the domain mapping relation of the whole network view and the physical device network is established by the auxiliary SDNOTN controllers. Grade structures of the primary SDNOTN controller and the auxiliary SDNOTN controllers are arranged in the framework system, so that the mapping relation of the multi-domain whole network view and the overall physical device network in real sense is realized, and a whole network resource optimizing algorithm is realized in the real sense, so that the problem that the inter-domain link resource conflict occurs in a cross-domain service connection signaling process can be thoroughly solved.

“Multi-tenant awareness” is added to a set of one or more packet processing devices in a Software Defined Network (SDN) having a controller. For each of one or more tenants, information in a table associates network protocol address attributes with an Internet Protocol (IP) address unique to the tenant. The table is associated with a multiple-layer translation layer being managed by the SDN controller. As a data packet traverses the translation layer, network protocol address attributes are translated according to values in the table to enable logical routing of the packet (to a given PPD. This translation occurs dynamically (or “on-the-fly”) as packets are “on route” to their destination. By implementing a multi-layer network address translation (NAT), one layer may be used to translate network protocol address source attributes, while a second layer may be used to translate network protocol address destination attributes.

One embodiment of the present invention provides a computing system capable of providing feedback to a controller in a software-defined network. The computing system includes a policy management module and a communication module coupled to the policy management module. During operation, the policy management module recognizes a local policy indicating how a data flow is to be processed and identifies a data flow associated with the policy. The communication module constructs a request for a flow definition from a controller in a software-defined network. A flow definition indicates how the data flow is processed in the software-defined network.

Method and systems for controlling a hybrid network having software-defined network (SDN) switches and legacy switches include initializing a hybrid network topology by retrieving information on a physical and virtual infrastructure of the hybrid network; generating a path between two nodes on the hybrid network based on the physical and virtual infrastructure of the hybrid network; generating a virtual local area network by issuing remote procedure call instructions to legacy switches in accordance with a network configuration request; and generating an SDN network slice by issuing SDN commands to SDN switches in accordance with the network configuration request.

An adaptive load balancer intelligently steers data traffic through a software defined network (SDN) to which the load balancer is operatively coupled. The network has egress ports to which a plurality of servers is connected. The network has an SDN controller which generates statistical information concerning the network. The adaptive load balancer includes a weighted round robin scheduler module which receives client requests and, based on the statistical information generated by the SDN controller, determines a weight to be attributed to each server of the plurality of servers connected to the network. The adaptive load balancer operates in a passive port mode, a passive path mode, an active path mode and an active path with quality of service (QoS) overlay mode.

A method and system for integrated management of converged heterogeneous resources is disclosed. The method includes: defining a Software-Defined Infrastructure (SDI) by separating data, control, and management for converged heterogeneous resource provisioning, creating an integrated resource manager using interfaces for one or more cloud controllers, Software-Defined Network (SDN) controllers, or general-resource controllers, enabling external entities to request and use the resources through interfaces, storing topology information and utilizing it for integrated resource management, and monitoring and measuring the converged heterogeneous resources. An integrated management system includes an SDI manager configured to provide integrated resource control and management functions, a cloud controller, an SDN controller, a general resource controller, a topology manager, northbound interfaces of an SDI manager for external entities to request resources and check the status of resources, and all inter-relations between an SDI manager, a cloud controller, an SDN manager, a general resource manager and a topology manager.

Methods and arrangements for securing a software defined network. One or more control messages are intercepted. Information is extracted from the one or more control messages to create a global network state model, and there is determined, from the extracted information, presence of at least one prospective modification to the global network state model. Thereupon, a determination is made as to whether the at least one prospective modification presents a threat to security of the software defined network. Other variants and embodiments are broadly contemplated herein.

One embodiment of the present invention provides a switch in a software-defined network. The switch includes at least one port, a flow management module, and forwarding circuitry. The port is capable of receiving a frame belonging to a software-defined data flow and a frame belonging to a regular data flow. The flow management module logically partitions the port for the frame belonging to the software-defined data flow from the frame belonging to the regular data flow. The forwarding circuitry forwards the frame belonging to the software-defined data flow based on a flow definition in a local flow table. The flow definition indicates how the software-defined data flow is processed in a software-defined network.

Provided is a user autonomous routing customization system based on a software-defined network. The system comprises a network topology information detection module, a network performance detection module, a network resource integration module, a network resource presenting module, a network key point extraction module, a user key point selection module, a route computation module and a user interaction interface module. Also provided is a user autonomous routing customization method based on the software-defined network. The method comprises the following operation steps that (2) a user logs in a system and views current network resource information; (2) the system recommends candidate routing schemes to the user; (3) the user selects one routing; and (4) strategy customization and resource scheduling are performed on a physical network by the system so that customized control of the network is actively performed by the user. An objective that the user autonomously selects the customized routing schemes is realized by the system and method.

The embodiment of the invention provides a data stream processing method, a data stream processing system, a controller and switching equipment. The data stream processing method comprises the following steps of: receiving the first characteristic information of a data stream transmitted by any piece of switching equipment in a software defined network (SDN), and judging whether the data stream corresponding to the first characteristic information of the data stream is safe or not according to preset safety rules to obtain a detection result; if the detection result indicates that the data stream is safe, generating a data stream forwarding strategy for the data stream, and transmitting the data stream forwarding strategy to the switching equipment, so that the switching equipment forwards the data stream according to the forwarding strategy; and if the detection result indicates that the data stream is unsafe, instructing the switching equipment to discard the data stream. According to the data stream processing method, the data stream processing system, the controller and the switching equipment, the safety of the data stream of any piece of switching equipment in the SDN can be detected.

The invention discloses a network diagnosis method based on a software defined network (SDN). The method includes the steps that a switchboard sets the rule of debug option of a flow table item according to a flow table debug setting command sent by a controller; the switchboard matches the key field of the message heading with the matching field of the flow table item, and judges whether the flow table item matched with the message is set up with a debug option field or not; if yes, the switchboard executes relevant debugging operations according to the content of the debug option field, and the operations include, but not limited to, sending the matching message and the contextual information to the controller; and the controller proceeds network diagnosis according to the message and the contextual information. The invention further discloses a network diagnosis system and equipment based on the SDN. With the technical scheme provided by the invention, the cycle for positioning a network problem is accelerated, the quality of the network is improved, and the operating maintenance cost of the network is reduced.

A network testing method implemented in a software-defined network (SDN) is disclosed. The network testing method comprising providing a test scenario including one or more network events, injecting said one or more network events to the SDN using an SDN controller, and gathering network traffic statistics. A network testing apparatus used in a software-defined network (SDN) also is disclosed. The network testing apparatus comprising a testing system to provide a test scenario including one or more network events, to inject said one or more network events to the SDN using an SDN controller, and to gather network traffic statistics. Other methods, apparatuses, and systems also are disclosed.

A method for providing service chaining in a software-defined network (SDN)-based network system, the method including: receiving, at a controller, a first packet-in message from a first switch of a plurality of switches, which has received a service request packet from a user, to indicate that the first switch does not have a corresponding entry in a field extracted from the service request packet; extracting from the packet-in message both a service identifier that identifies a type of a service requested through the service request packet and a user identifier that identifies the user; and searching an entry database for an entry list that enables the service request packet to be forwarded to a network function list that corresponds to the service identifier and the user identifier, with reference to a service table, a user table, and a network function table which are associated with one another.

The invention discloses an air-ground integrated network architecture based on a software defined network and network function virtualization. According to the system architecture, the entire network consists of a ground network part and a space network part, and is divided in a unified manner into a management layer, a control layer and a forwarding layer. The management layer is responsible for registering and querying the network status and network service functions of the ground part and the space part in the air-ground integrated network and making routing, security, billing, service call and resource management strategies. The control layer consists of a ground part and a space part, and is responsible for controlling data forwarding according to the strategies of the management layer and collecting the information of network links and network service functions. The forwarding layer consists of a ground part and a space part, and is responsible for forwarding data and providing network service functions. The architecture uses a software defined network and an idea of network function virtualization, and efficient information transmission control and on-demand satellite service providing are realized in an air-ground integrated network.

The invention discloses a communication method, a software defined network SDN switch and a communication system, and relates to the field of communication. The control system deployment cost of SDN equipment based on OpenFlow in the wide area network environment deployment process can be lowered. The communication method is applied to an SDN based on the OpenFlow, an SDN control network comprises the SDN switch, an operator wireless exit gateway, a wireless convergence gateway and an SDN controller, the SDN switch is connected to an operator wireless network served by the operator wireless exit gateway through a wireless communication module, and the wireless convergence gateway is respectively connected to the wireless exit gateway of the operator wireless network and the SDN controller through a wired network. The communication method comprises the step that the SDN switch is in communication with the SDN controller through the operator wireless network and the operator wireless exit gateway. The communication method is mainly used for the achievement process of the SDN control network based on the OpenFlow.

In an address resolution system in a centralized network control environment including a plurality of software defined network (SDN) switches, an address resolution protocol (ARP) controller checks whether an ARP table has a MAC address corresponding to the destination IP address of an ARP request packet when the ARP request packet is received from a source host. An SDN controller determines whether to broadcast the ARP request packet according to the existence of the MAC address corresponding to the destination IP address in the ARP table.

The invention discloses a software defined network (SDN)-based space network QoS guarantee method and a management center. An SDN-based space network is divided into a management layer, a control layer, and a forwarding layer, and includes a bottom-up information collecting process and a top-down strategy sending process. A satellite network management center in the management layer is an entity for making a QoS guarantee strategy, and the QoS guarantee strategy mainly includes the results in service grade authentication, traffic scheduling and bandwidth allocation, wherein service grade authentication is a process in which different service requests of users are distinguished according to the service grading standard, traffic scheduling is a process in which transmission paths meeting the QoS requirement are planned for data flows at different service grades, and bandwidth allocation is a process in which priority-based on-demand bandwidth resources are provided in a link sharing state. In addition, the invention provides a network status monitoring method in the control layer, which is the basis for the satellite network management center to make a QoS guarantee strategy. According to the invention, based on a controllable and manageable software defined network, space network resource allocation is optimized, on-demand service of the space network is realized, and the purpose of QoS guarantee is achieved.

A system for distributed multi-domain routing control includes two or more software-defined network (SDN) controllers and virtual routers. The two or more SDN controllers create virtual topology information by collecting information about switches under the control thereof, exchange network information about a different virtual network, as well as create a routing path from a source terminal to a destination cross switch or a routing path from the destination cross switch to a destination terminal based on location identification information of the destination terminal and / or the virtual topology information. Then, the virtual routers manage communication between the different virtual tenant networks or communication between each virtual tenant network and an external network.

A data communication system has data processing circuitry to transfer data communications. Trust modules establish and maintain network trust of the data processing circuitry. A Network Function Virtualization (NFV) system executes hypervisors to establish and maintain an NFV processing environment in the data processing circuitry. A Software Defined Network (SDN) system executes SDN applications, SDN controllers, and SDN data machines in the data processing circuitry during NFV slices to transfer the data communications. The data communication system maintains a data structure that associates, based on execution relationships, individual blocks of the data processing circuitry, the trust modules, the hypervisors, the NFV slices, the SDN applications, the SDN controllers, and the SDN data machines. The database may be queried for the hardware trust data related to specific NFV and SDN software modules.