1717 results about "Software-defined networking" patented technology

Embodiments are provided for implementing control plane functionality to configure a data plane at a plurality of network nodes. A software defined topology (SDT) component is configured to determine a data plane logical topology indicating a plurality of selected nodes and a logical architecture connecting the selected nodes. The data plane logical topology enables traffic delivery for a service or virtual network for an end-customer or operator. A software defined networking (SDN) component is configured to interact with the SDT component and map the data plane logical topology to a physical network. The mapping includes allocating network nodes including the selected nodes and network resources which enable communications for the service or virtual network and meet QoS requirement. A software defined protocol (SDP) component is configured to interact with the SDN and define data plane protocol and process functionality for the network nodes.

Method of and a compiler for controlling a network based on a logical network model. The network has physical nodes and virtual nodes. The physical nodes are interconnected by physical links in accordance with a physical network layout. The logical network model has logical nodes indicated with a logical node name which refers to at least one physical or at least one virtual node in the network. The method uses a physical forwarding point-of-attachment relation defining physical paths of the physical network in dependence on a physical forwarding policy, a first mapping relation defining how the virtual nodes and the physical nodes are mapped to one another, and a second mapping relation defining how the logical nodes are mapped to the physical nodes and the virtual nodes. The method also includes transforming paths in the physical network to paths between the physical nodes and the virtual nodes.

The invention discloses a controller for determining a network state based on an SDN (Software Defined Networking) and a determination method thereof. The controller comprises a state updating module, a calculation module, an execution module, a flow management module and an evaluation module, wherein the state updating module is used for updating through a state and a path calculated by the calculation module; the calculation module is used for calculating a current network resource state N; the execution module is used for setting rules according to the path calculated by the calculation module and writing the path into a flow meter; the flow management module is used for carrying out congestion avoidance, flow supervision and shaping; and the evaluation module is used for carrying out synthetic judgment according to the current network resource state N calculated by the calculation module and QoS (Quality of Service) requirements of an application when receiving the application transmitted by a switch. According to the controller, the network state can be accurately controlled, a forwarding plane is precisely controlled, a 'Q+X' resource distribution mode is proposed, and the network resource is scheduled, so that the flexibility, the high efficiency, the intelligence and the optimization of a network can be realized.

A computer-implemented method, a system, and a network include receiving network data from a network and non-network sourced data from one or more external sources relative to the network; performing data mining on the network data and the non-network sourced data; developing a predictive analytics model based on the data mining; and performing predictive analytics on the network data and the non-network sourced data using the predictive analytics model to detect likely future failures in the network. The network can include a Software Defined Network (SDN) operating at any of Layers 0, 1, 2 and / or 3.

One embodiment of the present invention provides a switch capable of processing software-defined data flows. The switch includes an identifier management module and a flow definition management module. During operation, the identifier management module allocates a logical identifier to a link aggregation port group which includes a plurality of ports associated with different links. The flow definition management module processes a flow definition corresponding to the logical identifier, applies the flow definition to ports in the link aggregation port group, and update lookup information for the link aggregation port group based on the flow definition.

The invention discloses a software defined network (SDN)-based data processing system, which comprises a source data node, a source control node and a target control node, wherein the source data node is used for receiving a first data packet and transmitting the first data packet to the corresponding source control node; the source control node is used for receiving the first data packet, which carries a target address of the first data packet, transmitted by the source data node, and determining the target control node according to the target address of the first data packet; and the target control node is used for receiving the first data packet and generating a second data packet according to the first data packet and a matching strategy rule. According to the software defined network-based data processing system provided by the embodiment of the invention, the collaboration capacity between the nodes is improved so as to reduce redundancy for multi-node processing in network equipment and improve the business processing efficiency of a network. The invention also discloses a software defined network-based data processing method and a software defined network-based data processing device.

The invention discloses a distributed server load balancing method based on the SDN. Through the advantage of the SDN structure where a control face and a forwarding face are separated, a user access request arrives at a certain device on the SDN, then, an SDN controller dynamically dispatches the user access request to an appropriate server according to the network running state, and therefore server load balancing is achieved. By means of the distributed server load balancing method, comprehensive fault tolerance can be achieved from the access process and the forwarding process to the service process, the total load bearing capacity of a server cluster is brought into full play, and running expandability and running reliability of the whole system are improved.

One embodiment of the present invention provides a system for facilitating flow definition management in a switch. During operation, the system identifies a generic flow definition which specifies a flow that is not specific to any input port of a switch. The system further stores in a flow lookup data structure one or more port-specific flow rules based on the generic flow definition, wherein each port-specific flow rule corresponds to a respective port capable of processing data flows.

System and method for performance-based routing in an SDN. An SDN controller is configured to adaptively determine data transmission routes based on real-time route performance evaluation provided by a virtual router. The virtual router includes a route detection component to attain route performance data and a performance evaluation component to evaluate the route performance based on predetermined criteria provided by the SDN controller. The evaluation result is sent to the SDN controller and used to intelligently determine a superior route selection and route usage for a specific application program. According to the determination, the SDN controller updates the flow table associated with the virtual router for subsequent data transmission.

Data traffic is intelligently steered by an adaptive load balancer through a software defined network (SDN) to which the load balancer is operatively coupled. The network has egress ports to which a plurality of servers is connected. The network has an SDN controller which generates statistical information concerning the network. Data traffic is steered through the SDN by the adaptive load balancer using a passive port method, a passive path, method, an active path method and an active path with quality of service (QoS) overlay method.

A system and method for steering traffic through a set of services is provided. A service path or service chain is assigned to a received packet based on a classification of the packet and correlation of the packet with a traffic flow. A new service chain identifier can be created if no such correlation exists. A next service type and a particular instance of the next service type can be determined in accordance with the service chain identifier. A next destination for the traffic can be set in accordance with the instance of the next service.

Methods, software, and apparatus for implementing local service chaining (LSC) with virtual machines (VMs) or virtualized containers in Software Defined Networking (SDN). In one aspect a method is implemented on a compute platform including a plurality of VMs or containers, each including a virtual network interface controller (vNIC) communicatively coupled to a virtual switch in an SDN. LSCs are implemented via a plurality of virtual network appliances hosted by the plurality of VMs or containers. Each LCS comprises a sequence (chain) of services performed by virtual network appliances defined for the LSC. In connection with performing the chain of services, packet data is forwarded between VMs or containers using a cut-through mechanisms under which packet data is directly written to receive (Rx) buffers on the vNICs in a manner that bypasses the virtual switch. LSC indicia (e.g., through LSC tags) and flow tables are used to inform each virtual network appliance and / or or its host VM or container of the next vNIC Rx buffer or Rx port to which packet data is to be written.

“Multi-tenant awareness” is added to a set of one or more packet processing devices in a Software Defined Network (SDN) having a controller. For each of one or more tenants, information in a table associates network protocol address attributes with an Internet Protocol (IP) address unique to the tenant. The table is associated with a multiple-layer translation layer being managed by the SDN controller. As a data packet traverses the translation layer, network protocol address attributes are translated according to values in the table to enable logical routing of the packet (to a given PPD. This translation occurs dynamically (or “on-the-fly”) as packets are “on route” to their destination. By implementing a multi-layer network address translation (NAT), one layer may be used to translate network protocol address source attributes, while a second layer may be used to translate network protocol address destination attributes.

The invention discloses a virtual open network building system based on a software definition network. The virtual open network building system comprises a network topological information detection module, a network performance detection module, a network resource integration module, a network resource display module, a user virtual node selection module, a virtual network management module, a network resource virtualization module, a host unit resource virtualization module and a user interaction interface module. A virtual open network building method based on the software definition network comprises the steps that (1) a user logs into the virtual open network building system; (2) the system collects network resource information and visually displays the information to the user; (3) the user finds resources for specific service and provides a service request; and (4) the system provides virtual network customization service for the user. According to the virtual open network building system and the virtual open network building method, the aim of the user for opening and self-building a virtual network is achieved.

A shadow network, which can be a virtual reproduction of a real, physical, base computer network, is described. Shadow networks duplicate the topology, services, host, and network traffic of the base network using shadow hosts, which are low interaction, minimal-resource-using host emulators. The shadow networks are connected to the base network through virtual switches, etc. in order to form a large obfuscated network. When a hacker probes into a host emulator, a more resource-intensive virtual machine can be swapped in to take its place. When a connection is attempted from a host emulator to a physical computer, the a host emulator can step in to take the place of the physical computer, and software defined networking (SDN) can prevent collisions between the duplicated IP addresses. Replicating the shadow networks within the network introduces problems for hackers and allows a system administrator easier ways to identify intrusions.

One embodiment of the present invention provides a computing system capable of providing feedback to a controller in a software-defined network. The computing system includes a policy management module and a communication module coupled to the policy management module. During operation, the policy management module recognizes a local policy indicating how a data flow is to be processed and identifies a data flow associated with the policy. The communication module constructs a request for a flow definition from a controller in a software-defined network. A flow definition indicates how the data flow is processed in the software-defined network.

The invention provides a dynamic flow dispatch method and system based on a software definition network. The method comprises a step of carrying out deep analysis of flow through flow information uploaded by a switch, and classifying flow types by a flow identification and grading module according to priorities, a step of calling a statistic management module to obtain information of switch ports, calculating joint links of the switch, and sending information of the joint links to a topology management module, a step of calling the topology management module to obtain a feasible path for flow direction and calculating real-time sate statistic information of the feasible path, and a step of analyzing features of the joint links to calculate weight of the joint links in the overall selection, working out the optimal dispatch strategy based on the weight and giving out the optimal dispatch strategy. The invention can achieve the optimal real-time dispatch of network flow, so that flow is enabled to reach a destination in a fastest manner, and purposes of improving the bandwidth utilization rate and optimizing network performances are finally realized.

In one embodiment, a system includes a software defined network (SDN) controller connected to SDN-capable switch(es), the SDN controller being configured to communicate with and program the SDN-capable switches, wherein each of the SDN-capable switches is configured to communicate with the SDN controller, one or more fiber channel forwarders (FCFs) connected to the SDN-capable switches, storage area network (SAN) fabric(s), and local area network (LAN) fabric(s), and at least one end node connected directly or indirectly to the SDN-capable switches and / or the one or more FCFs, wherein the SDN controller is configured to collect information from the one or more FCFs that corresponds with each of the one or more FCFs via fiber channel initialization protocol (FIP) advertisement frames, and create and manage a FCF database, the FCF database including the information that corresponds with each of the one or more FCFs.

Method and systems for controlling a hybrid network having software-defined network (SDN) switches and legacy switches include initializing a hybrid network topology by retrieving information on a physical and virtual infrastructure of the hybrid network; generating a path between two nodes on the hybrid network based on the physical and virtual infrastructure of the hybrid network; generating a virtual local area network by issuing remote procedure call instructions to legacy switches in accordance with a network configuration request; and generating an SDN network slice by issuing SDN commands to SDN switches in accordance with the network configuration request.

In some embodiments, a security device controller (SDC) is provided. In some embodiments, a security device controller includes receiving a configuration policy in a vendor neutral language; and automatically configuring a plurality of security devices on a heterogeneous network based on the configuration policy. For example, the plurality of security devices can include physical, virtual, or software defined network (SDN) based routers and / or firewalls, and the heterogeneous network can include security devices from a plurality of different vendors.

An adaptive load balancer intelligently steers data traffic through a software defined network (SDN) to which the load balancer is operatively coupled. The network has egress ports to which a plurality of servers is connected. The network has an SDN controller which generates statistical information concerning the network. The adaptive load balancer includes a weighted round robin scheduler module which receives client requests and, based on the statistical information generated by the SDN controller, determines a weight to be attributed to each server of the plurality of servers connected to the network. The adaptive load balancer operates in a passive port mode, a passive path mode, an active path mode and an active path with quality of service (QoS) overlay mode.

The Distributed Software Defined Network (dSDN) disclosed herein is an end-to-end architecture that enables secure and flexible programmability across a network with full lifecycle management of services and infrastructure applications (fxDeviceApp). The dSDN also harmonizes application deployment across the network independent of the hardware vendor. As a result, the dSDN simplifies the network deployment lifecycle from concept to design to implementation to decommissioning.

One embodiment of the present invention provides a switch capable of processing software-defined data flows. The switch includes an identifier management module and a flow definition management module. During operation, the identifier management module allocates a logical identifier to a link aggregation port group which includes a plurality of ports associated with different links. The flow definition management module processes a flow definition corresponding to the logical identifier, applies the flow definition to ports in the link aggregation port group, and update lookup information for the link aggregation port group based on the flow definition.

Systems and methods are described for software-defined approaches to energy communication networks (ECNs). For example, electrical substations typically host many Intelligent Electronic Devices (IEDs) that monitor and / or control the state of the substations' electricity infrastructures. Critical data from the IEDs can be packaged and transmitted between multiple IEDs for proper system monitoring and control. Even modern networks that interconnect IEDs tend to manifest many limitations, ranging from setup complexity to security policies. Embodiments use novel software-defined networking techniques to address these and other limitations. In some embodiments, power system requirements (e.g., data and communications requirements of IEDs) are translated into a set of networking requirements (e.g., as central routing tables). One implementation uses a Ryu-based, software-defined network controller. Embodiments provide features, such as auto-configuration, security management, re-routing, and flexibility to handle rapid evolution of the smart grid.

Methods and arrangements for securing a software defined network. One or more control messages are intercepted. Information is extracted from the one or more control messages to create a global network state model, and there is determined, from the extracted information, presence of at least one prospective modification to the global network state model. Thereupon, a determination is made as to whether the at least one prospective modification presents a threat to security of the software defined network. Other variants and embodiments are broadly contemplated herein.

One embodiment of the present invention provides a switch in a software-defined network. The switch includes at least one port, a flow management module, and forwarding circuitry. The port is capable of receiving a frame belonging to a software-defined data flow and a frame belonging to a regular data flow. The flow management module logically partitions the port for the frame belonging to the software-defined data flow from the frame belonging to the regular data flow. The forwarding circuitry forwards the frame belonging to the software-defined data flow based on a flow definition in a local flow table. The flow definition indicates how the software-defined data flow is processed in a software-defined network.

Embodiments are provided for a framework for networks with software defined protocols (SDP) network nodes. The embodiments include a SDM controller component for managing and controlling a data plane protocol for SDP network nodes. The SDP controller also interacts with a software defined networking (SDN) controller for determining one or more paths in a network including the SDP network nodes. The SDP controller is configured to determining a break-down of data plane process functionality into a plurality of basic process function blocks for a service, traffic flow, or virtual network in accordance with network component capabilities or quality of service / experience requirement. A workflow and status information are also determined for one or more network components along a path allocated, by the SDN controller. The workflow and status information are indicated to the one or more components, which are configured to implement the workflow using the basic process function blocks.

Provided is a user autonomous routing customization system based on a software-defined network. The system comprises a network topology information detection module, a network performance detection module, a network resource integration module, a network resource presenting module, a network key point extraction module, a user key point selection module, a route computation module and a user interaction interface module. Also provided is a user autonomous routing customization method based on the software-defined network. The method comprises the following operation steps that (2) a user logs in a system and views current network resource information; (2) the system recommends candidate routing schemes to the user; (3) the user selects one routing; and (4) strategy customization and resource scheduling are performed on a physical network by the system so that customized control of the network is actively performed by the user. An objective that the user autonomously selects the customized routing schemes is realized by the system and method.