114 results about "Software define network" patented technology

The invention provides an SDN (Software Defined Network) inter-domain traffic engineering method based on reinforcement learning, which comprises the following steps of: deploying a data traffic demand monitoring platform and a control system, and constructing a global network topological graph; calculating a short link identifier for the link in the network and distributing the short link identifier to each network device; flow judgment is carried out, upward notification is carried out according to requirements, and pre-operation of intelligent routing is cooperatively completed; deploying a reinforcement learning model in the total intelligent body, outputting an optimal cross-domain path strategy to the cooperative controller, disassembling the optimal cross-domain path strategy into flow table rules which can be executed by each domain, and issuing the flow table rules to local controllers of related domains; and each local controller pushes the flow table configuration to the domain switching equipment to complete the forwarding decision of the flow. According to the method, a complete closed-loop process of flow measurement, intelligent decision making, cross-domain control and path issuing is realized, feasible reference is provided for actual deployment of an intelligent network, and the method has good engineering popularization value and is suitable for intelligent scheduling scenes such as an operator backbone network, an industrial internet and metro edge cloud.

The invention discloses a self-adaptive and self-coordinated unified communication system and method based on an SDN, and relates to the field of coordinated communication, and the method comprises the steps: collecting network state data of a switch, extracting traffic chaos features through a lightweight chaos analysis algorithm, generating a traffic feature vector, generating a network management threshold based on the traffic feature vector, and carrying out the dynamic adjustment, updating a flow table, generating a resource state log, evaluating cross-domain network congestion according to the resource state log, calculating a congestion index, generating a key through a quantum key distribution unit, dynamically adjusting a key update frequency and distributing the key update frequency to a cross-domain switch, recording a key distribution log, and using the key distribution log and a real-time network state to determine the congestion of the cross-domain network. Detecting network abnormity, defining as an antigen, running an antibody generation algorithm to generate a repair strategy, and storing as an antibody record; according to the method, the traffic feature vector is generated through the chaos analysis algorithm, potential congestion or abnormity can be detected earlier, and the dynamic adaptability of a cross-domain network is improved.

The invention relates to the technical field of industrial network communication, in particular to an SDN (Software Defined Network) industrial network routing method based on deep traffic classification and dynamic pheromone optimization. According to the method, an SMOTE algorithm is improved, a target sub-region is selected through an adaptive boundary to perform oversampling to balance sample data, the problem of flow imbalance of the SDN multi-access interconnection architecture is solved, meanwhile, a CNN-LSTM model fused with an attention mechanism is established, and depth feature extraction is performed on samples after the samples are balanced so as to meet dynamic features of the flow in a short sequence.

The invention provides a satellite network mobility management system and method based on an SDN, and relates to the technical field of satellite network communication management, the system comprises a space unit, a ground unit and a user unit, the space unit comprises a plurality of satellites with a data forwarding function, the satellites are deployed in a plurality of position management areas, and the space unit comprises a plurality of user units; a network switch is deployed on each satellite, and a satellite in each position management area is used as a local SDN controller; the network switch processes the data packet from the user unit according to the flow table item in the local flow table; the ground unit comprises a global SDN (Software Defined Network) controller, and the global SDN controller communicates with the local SDN controller and carries out global management on the information of the user equipment; and the user unit comprises a plurality of pieces of user equipment, and the user equipment communicates with the network switch. According to the invention, the signaling overhead is effectively reduced, the data transmission path optimization is realized, and the data transmission path switching delay is shortened.

The application discloses a software defined network system, which comprises a BGP proxy component, an SDN controller, a plurality of gateway devices not supporting a BGP protocol and computer nodes; the BGP proxy component is used for establishing a BGP session with the SDN controller and announcing routing information of the plurality of gateway devices to the SDN controller through the BGP session; the SDN controller is used for generating node-side data plane configuration information based on the received routing information and delivering the node-side data plane configuration information to the computer nodes; and the computer nodes are used for configuring a forwarding table and / or tunnel encapsulation parameters of a virtual switch on the nodes according to the received node-side data plane configuration information. The application reduces the complexity of networking.

The present disclosure provides a latency information query method, device, equipment, readable storage medium and product, the method comprises: obtaining the latency query request sent by a lightweight network management platform; determining the query times and the query latency interval according to the query constraint information; according to the latency query request, sending the query request matched with the query times to the preset software defined network controller according to the query latency interval; obtaining the query result fed back by the software defined network controller, determining the target latency data between the starting end information and the terminal end information according to the query result, and the query result includes at least one path information matched with the query constraint information. Through limited query times, the query result including all circuit path information data meeting the query constraint information provided by the user can be queried, different circuit path options are provided for the user, and the efficiency and accuracy of the latency information query are improved.

The application discloses a hospital multi-active data center network management system based on a software defined network, relates to the technical field of data management, and discloses a network management system controlled based on an SDN controller, which comprises a traffic collection module, a prediction module, a scheduling module, a multi-active data module and a security module; the traffic collection module is used for collecting historical traffic data of a hospital, analyzing and managing the acquired traffic data, obtaining historical data of traffic loads of various devices of the hospital, and storing the data; the prediction module predicts future traffic loads of devices of the hospital based on historical data acquired in the traffic collection module and uploads the prediction result to the scheduling module; the application can predict future traffic loads of devices of the hospital, reasonably distribute network traffic to various data centers and corresponding servers according to the prediction result, flexibly configure the network, quickly adjust the distribution of network resources, and improve the medical experience of patients.

The present application relates to the technical field of information security, and more particularly to a dynamic white list management method and system based on immune-Kalman collaborative evolution, which comprises the following steps: receiving the observation data of the service access request collected and sent by the edge access gateway; predicting and updating the state vector of the current service baseline through the Kalman filter state estimator to obtain the prior state prediction value and the prediction residual; dynamically adjusting the "self-non-self" judgment threshold of the immune system, if it is judged as self, the characteristics of the service access request are fed back to the Kalman filter state estimator as observation samples and updated; if it is judged as non-self, an isolation instruction is generated and sent to the software defined network controller, and a denial of access instruction is sent to the edge access gateway; based on the prediction residual and the comprehensive health degree index, the running state of the system is judged, and the corresponding matching strategy is selected from the preset white list matching strategy set and sent to the edge access gateway for execution.

Transmission Control Protocol (TCP) states of an active device are replicated at a backup device configured to track connections in a software defined network (SDN). The backup device receives, from the active device, a TCP packet with a TCP flag including one or more of SYN, SYN-ACK, ACK, FIN, FIN-ACK, ACK, or RESET. When the TCP packet has a SYN flag, the backup device adds a connection record to a connection table. Otherwise, the backup device derives an updated connection state for the connection record using a TCP state machine. The connection state is updated as future packets are received by the backup device.

The invention provides a network flow table automatic analysis method and system based on an OpenFlow technology, relates to the technical field of operation and maintenance of a cloud computing data center network and a software defined network, and aims to carry out automatic routing inspection and positioning aiming at the problems of missing, repetition and inconsistency of a CVK host flow table at a bottom layer of a cloud platform. The method comprises the following steps: inputting target CVK host access information and carrying out connectivity and authentication verification; traversing virtual machine network information on the CVK host, connecting the Redis to query security group information associated with a virtual network card, and detecting missing of a security group flow table; the offline state of the network-cvk-agent service is checked, whether the network-cvk-agent service is caused by missing of a basic flow table of a network port or not is positioned in the offline mode, and missing information is output; detecting repetition and inconsistency of the basic flow table when the basic flow table is not offline or not missing; and finally, all task results are summarized and output to a console, and repair guidance is provided in a knowledge base link form, so that operation and maintenance personnel are helped to quickly position root causes and recover businesses.

The application discloses a path selection method, device, equipment, storage medium and program product. The method is applied to a software defined network controller. The method comprises the following steps: acquiring first policy information, wherein the first policy information comprises information of a priority; judging the size relationship between the priority of the first policy information and the priority of second policy information, wherein the first policy information and the second policy information are policy information corresponding to the same head node address and the same destination node address; and in the case that the priority of the first policy information is smaller than the priority of the second policy information, sending a first target path to a head node according to the head node address in the first policy information, wherein the target path is a path in a first path corresponding to the first policy information and not coexisting with a second path corresponding to the second policy information. In this way, the balance of network resource utilization rate is ensured.

The present disclosure pertains to systems and methods for monitoring and configuring a software-defined network (SDN). A system may include a communication interface to communicate a plurality of communication flows to a plurality of network devices in the SDN and to receive information from the plurality of network devices related to traffic in the SDN between a plurality of hosts. A configuration subsystem may generate the plurality of communication flows based on a planned configuration. A monitoring subsystem may monitor information from the plurality of network devices related to traffic in the SDN to identify a change to at least one aspect of the planned configuration. An operator-interface subsystem to generate an alert regarding the change. The configuration subsystem may implement an update to the planned configuration based on the change.

Techniques are disclosed for a computing system comprising processing circuitry having access to a storage device, the processing circuitry configured to: generate, by a network controller executing in a software defined network (SDN), an advertisement in a first network cluster executing within a container orchestration platform of the SDN, wherein the advertisement conforms to a routing protocol and comprises information identifying a network service executing in the first network cluster, wherein the network service exposes a backend of a network application to the container orchestration platform of the SDN; and broadcast, by the network controller and to a second network cluster executing within the container orchestration platform of the SDN, the advertisement in accordance with the routing protocol.

Provided are a data transmission method, a communication apparatus, and a storage medium. The method is executed by a first node. The first node is a device in a forwarding layer of a software defined network (SDN). The method comprises: sending heartbeat information to a second node, the second node being a device in a control layer of the SDN, and the heartbeat information being carried by a link layer discovery protocol (LLDP) packet.

The present application relates to the technical field of software defined network, especially to a traffic scheduling method and system for multi-core SDN switches, the present application significantly improves the traffic processing capacity and network performance of multi-core SDN switches through integrated load prediction model and dynamic pipeline configuration strategy, the main process includes real-time collection of network traffic and performance data, optimization of load prediction model using these data, and dynamic adjustment of pipeline configuration and load balancing strategy according to model prediction results; this includes increasing processing capacity during traffic peak and saving resources during low traffic, ensuring optimal utilization of network resources; the present application effectively reduces network delay, improves data transmission throughput, and reduces data packet loss rate, especially during traffic peak, can significantly improve the performance of key business applications; in addition, by continuously adjusting and optimizing the pipeline configuration, the present application can also continuously improve the overall stability and reliability of the network.

The invention provides a link flooding attack defense method and system based on a data plane programmable SDN (Software Defined Network), and relates to the technical field of network security defense. The method comprises the following steps: carrying out real-time clustering analysis on a Traceroute data packet passing through a switch by adopting an online clustering algorithm based on a weighted Manhattan distance, positioning a suspicious link and sending alarm information to a controller; establishing a link attribute graph sequence by collecting link state data based on the alarm information, and performing abnormal link identification by using a space-time double-attention detection model based on GAT-Seq2Seq to obtain an attack path; and identifying a link flooding attack flow by adopting an attack flow identification method based on reinforcement learning, and discarding the link flooding attack flow at a source end switch of an attack path. According to the method, the link flooding attack defense system with high accuracy, low resource overhead and quick response capability is constructed, so that efficient defense of attacks is realized.

The application discloses a power internet of things agent system for dynamic resource management, which is connected between an internet of things terminal and an internet of things management platform, and comprises a device atomic layer, a device arrangement layer and a network communication layer; the device atomic layer, the device arrangement layer and the network communication layer are sequentially connected in series; the device atomic layer is connected with the internet of things terminal and realizes data acquisition of the internet of things terminal through protocol analysis and data preprocessing; the device arrangement layer realizes connection with the device atomic layer and the network communication layer through a software defined network interface, and realizes matching of resources and tasks through construction of a virtual resource pool; the network communication layer is connected with the internet of things management platform through an encryption channel, and realizes hierarchical transmission of data of the internet of things terminal through a master-standby communication link and a queue buffer mode. The application not only realizes agent data transmission between the internet of things terminal and the internet of things management platform, but also has higher reliability and better real-time performance.

The application relates to a satellite topology separation routing forwarding method, device, equipment and storage medium. The method comprises the following steps: based on a periodically changed full topology, generating a periodically changed inter-satellite topology and a satellite-ground topology corresponding by a software defined network; based on the inter-satellite topology, determining the shortest path from each satellite to all other satellites; based on the satellite-ground topology, obtaining the direct connection satellite corresponding to each ground station, and generating the satellite-ground routing corresponding to each ground station based on the direct connection satellite; based on the satellite-ground routing corresponding to each ground station, generating the routing mapping table of each satellite and multiple ground stations; based on the routing mapping table, querying the landing satellite corresponding to the target ground station, and sending a message carrying a message header to the target ground station through the landing satellite; wherein the landing satellite is the direct connection satellite to the target ground station. The method can improve the efficiency of the satellite network and guarantee the timeliness of the satellite network communication.

The invention relates to the technical field of intelligent processing of campus operation and maintenance work orders, and discloses an intelligent analysis and service optimization system for campus informatization maintenance work orders. According to the system, standardization processing of multi-source work order data is achieved through a work order information aggregation module; the intelligent priority evaluation module adopts a deep learning model to analyze fault text semantics, generates a dynamic priority coefficient and improves the accuracy of work order grading; the resource scheduling optimization module generates an optimal allocation scheme based on the priority and the personnel state; and the redundant communication management module constructs an active-active architecture by using a software defined network, so that load balancing and rapid fault switching of a data stream and a control signaling are realized, and the communication reliability of the system is effectively guaranteed. According to the invention, the problems of inaccurate priority judgment and insufficient communication guarantee of a traditional work order system are solved.

This disclosure relates to a fully software-defined, fully virtualized, and customizable mobile communication platform deployed on public cloud infrastructure. Such mobile networks allows for end to end control of automatic and programmatic deployment and configuration of the mobile network components. The implementations below effectively enables instant creation and deployment of a true private global end-to-end Software Defined Network (SDN) for 3G, 4G, LTE, and 5G mobile communication from the ground up. Users will effectively act their own mobile carrier, allowing them to customize the features available to them via a programmatic interface.

The invention discloses an ad hoc network simulation method based on network virtualization, belongs to the technical field of computer communication, and aims to solve the problems of insufficient compatibility, inflexible link control and weak topology time-varying simulation capability of traditional ad hoc network simulation. The core of the system is that a simulation architecture comprising a simulation configuration module, a service application module, a communication node module, an analog channel module and a data acquisition module is constructed, service application and a real equipment protocol stack are packaged through a container virtualization technology, and a real product and an upper-layer service application software protocol are supported to be directly deployed without transplantation. The system is compatible with a two-layer Ethernet and a three-layer IP protocol, integrates a communication link electromagnetic propagation model, is combined with OpenvSwitch and TC tools, is matched with a software defined network technology to control link quality and network topology time-varying characteristics, is adaptive to static and dynamic topology scenes, improves simulation authenticity and flexibility, and provides reliable support for ad hoc network testing.

The application provides a network deployment method, device, server and medium, and relates to the field of communication.The network deployment method comprises the following steps: obtaining a first service and a second service; calling a virtual infrastructure manager (VIM) and a software defined network (SDN) controller to create a first virtual router and a second virtual router; calling a security controller to create a virtual firewall in the case that the first service and the second service have security interaction requirements; calling the VIM, the SDN controller and the security controller to establish a first logical link and a second logical link; the first logical link is a logical link interconnecting the first virtual router and the virtual firewall, and the second logical link is a logical link interconnecting the second virtual router and the virtual firewall.In the embodiment of the application, the virtual routers of different services share the virtual firewall, so that the vFW resource occupation can be effectively reduced, and the network deployment cost is reduced.

The embodiment of the invention provides a multi-agent co-simulation control system of an information energy system, and the system consists of multiple agents, a data processing module, a software defined network and a co-control simulation platform. Unified perception and intelligent decision making of the global state of the energy system are realized, and the self-adaption and autonomy level of the system is improved. Flexible scheduling and safe collaboration of communication resources are realized through the software defined network, and the robustness of the system in dynamic change is enhanced; local control real-time performance and global optimization economical efficiency are effectively balanced through a hierarchical collaborative system of edge, fog and cloud computing; through a high-fidelity closed-loop simulation environment, full-period verification and continuous optimization capability is provided for a control strategy and system evolution.

The invention provides a communication guarantee method and device for an open-pit mine field, electronic equipment and a storage medium, and relates to the technical field of communication, a physical double-route Ethernet ring network architecture which contains main and standby routes and keeps a preset distance is constructed, and a single-board-level redundancy protection mechanism is configured for a baseband processing unit and a core network server in the architecture, so that the communication guarantee capability of the open-pit mine field is improved. In addition, fault detection and path reconstruction are executed based on a preset protection protocol and a software defined network controller, and meanwhile, a base station dynamic migration operation which triggers a migration process based on environment monitoring data and realizes base station configuration deployment and service switching through a network function virtualization technology is executed. The problems that in the prior art, due to the fact that single routing topology is adopted, key equipment lacks single-board-level redundancy, the fault detection and path recovery efficiency is low, and a base station depends on manual migration, the single-point fault risk is high, the fault recovery time is long, and the mining pit propelling dynamic coverage requirement is difficult to adapt can be solved.

Embodiments of the present application provide a data transmission method and device, equipment and storage medium, relating to the field of financial technology or other related fields. The method is applied to a starting network device in a software defined network (SDN) network, and includes: in response to a data transmission instruction issued by a first tenant in the starting network device, obtaining, by a switch in the starting network device, to-be-transmitted data from a preset terminal device; determining address information of a preset target network device, and determining a data transmission path according to the address information of the first tenant in the starting network device and the address information of the preset target network device; the preset target network device is a network device in the SDN network other than the starting network device; and transmitting the to-be-transmitted data to the target network device according to the data transmission path. The method of the present application makes the data center network more simple, saves maintenance costs, and improves the efficiency and flexibility of data transmission.

Aspects of the subject disclosure may include, for example, receiving artificial intelligence (AI) analytics from a generative AI system, and based on the AI analytics, causing a software defined network (SDN) controller to identify a signaling path over a quantum signaling network, thereby enabling selection of a determined suitable path for quantum entanglement distribution. Other embodiments are disclosed.

Implementations of a software-defined network perimeter system may include: a security standards server configured to send an installer to a first client machine utilizing an endpoint protection server, a console server configured to route data across a dispersive network where the data is routed between the first client machine and second client machine, a controller configured to electronically couple the first and second client machines to network resources, a first and second endpoint device coupled to the first and second client machines, respectively, and a correlation server coupled to the security standards server, the console server, the controller, and the first and second endpoint devices where the correlation server is configured to match a physical or logical aspect of the client machine to a registration key included in a database of registration keys where the respective endpoint device provides access to the network resources after receiving the registration key.

A network system that facilitates financial transactions. A software defined network may operate to provide a variety of trading related services to a variety of customers with a low latency. Core or processor affinity for routing processes may improve speeds of routing. Data capture through a shared memory space may allow for a variety of analytics without introducing unacceptable delay.

The invention relates to an SDN (Software Defined Network)-based K8S network elastic scaling method and system, unified modeling and global visualization of a Kubernetes network are realized by introducing an SDN controller, dynamic bandwidth adjustment and QoS (Quality of Service) strategy issuing are carried out in combination with load prediction on the basis of sensing service flow in real time, the defects of fixed bandwidth and localized management of a traditional CNI (Context Network Interface) plug-in are effectively overcome, and the method and the system have the advantages that the service flow is sensed in real time; second-level elastic scaling and cross-cluster / cross-data-center deterministic bandwidth scheduling in a single cluster are realized, the phenomena of network congestion and resource waste are fundamentally eliminated, and the overall network resource utilization efficiency of the cluster and the service quality guarantee capability of key services are remarkably improved.

A method of life-cycle management for a threat-detection-agent at a network gateway node includes providing an SDN including a data plane, control plane, and an application layer including a threat-detection-agent life-cycle-management-block, deploying, by the threat-detection-agent life-cycle-management-block, a threat-detection-agent, receiving, by the threat-detection-agent life-cycle-management-block a health-statistics report from the threat-detection-agent, determining, by the threat-detection-agent life-cycle-management-block based on the health-statistics report, whether first threat-detection-agent has failed, and deploying, by the threat-detection-agent life-cycle-management-block, another threat-detection-agent, subsequent to determining that the threat-detection-agent has failed. The method may terminate the threat-detection-agent. Life-cycle management method may be applied to a threat-detection-agent deployed in the control plane.