110 results about "Software-defined networking" patented technology

The present disclosure provides an information transmission method and apparatus, and a storage medium. The method is applied to a digital twin network which includes a physical network entity and a twin network entity of the physical network entity, wherein the physical network entity includes a first controller, and network element devices of a first user plane communicatively connection to the first controller, both of which are based on a software-defined network architecture; and the twin network entity includes a second controller, and network element devices of a second user plane communicatively connected to the second controller, both of which are based on a software-defined network architecture; the second controller is used to obtain user plane information from the first controller and send the user plane information to a corresponding network element device of the second user plane, the user plane information is obtained by the first controller from a network element device in the first user plane, and transmission of the user plane information of the physical network entity to a network element device of a user plane of the twin network entity is achieved.

Systems and methods are provided for dynamic name resolution in a distributed software-defined network. An fxDeviceApp registers service metadata with a centralized application manager that maintains authoritative deployment information. A name resolution service receives requests to resolve service names and identifies active instances of the requested services based on real-time deployment state. The name resolution service then returns corresponding network addresses, enabling service-to-service communication within and across network zones. The system supports localized caching, zone-specific resolution rules governed by policy managers, and dynamic updates in response to changes in application deployment. Resolution decisions may account for service health or load metrics, and service lookup requests may be handled using a standardized message format compatible with a virtual messaging fabric. These features enable reliable, scalable, and policy-aware service discovery for distributed applications deployed across heterogeneous execution environments.

The present application relates to the technical field of information security, and more particularly to a dynamic white list management method and system based on immune-Kalman collaborative evolution, which comprises the following steps: receiving the observation data of the service access request collected and sent by the edge access gateway; predicting and updating the state vector of the current service baseline through the Kalman filter state estimator to obtain the prior state prediction value and the prediction residual; dynamically adjusting the "self-non-self" judgment threshold of the immune system, if it is judged as self, the characteristics of the service access request are fed back to the Kalman filter state estimator as observation samples and updated; if it is judged as non-self, an isolation instruction is generated and sent to the software defined network controller, and a denial of access instruction is sent to the edge access gateway; based on the prediction residual and the comprehensive health degree index, the running state of the system is judged, and the corresponding matching strategy is selected from the preset white list matching strategy set and sent to the edge access gateway for execution.

The invention provides a network diagnosis method and device based on a software defined network (SDN), and electronic equipment. The method comprises the following steps: obtaining to-be-detected service data, wherein the to-be-detected service data comprises one or more of the following items: service configuration data, service issuing data and service receiving data; network connectivity diagnosis is carried out on the SDN based on the service data through a flow diagnosis model, a diagnosis result is obtained, and the diagnosis result is used for indicating whether the service of the SDN is normally configured or not and whether the service of the SDN is normally issued or not; performing data reconciliation on the SDN based on the service data through a service reconciliation model to obtain a reconciliation result, the reconciliation result being used for indicating whether the service of the SDN is normally received; therefore, comprehensive detection of service configuration, issuing and receiving processes in the SDN network is realized.

The application discloses a kind of anonymous routing methods of double-layer satellite network for delay-sensitive service, it is applied to VLEO / LEO double-layer satellite network, this network is based on software-defined network SDN architecture implementation, including data plane, control plane and application plane;Data plane includes VLEO layer, VLEO / LEO cross layer and LEO layer;Application plane is deployed with the routing method of the application upper;The method comprises: constructing layered decoupling routing calculation framework, to divide routing decision into including LEO layer inner routing, VLEO / LEO cross layer routing and VLEO layer inner routing multilayer path selection;Using the collaborative computing capability of SDN controller and satellite node, multilayer path selection is reconfigured and weight disturbance in real time, generates optimal routing path.The application can effectively reduce end-to-end delay, balance network load, improve the real-time performance, robustness and security anonymity of double-layer satellite network.

Techniques are disclosed for a computing system comprising processing circuitry having access to a storage device, the processing circuitry configured to: generate, by a network controller executing in a software defined network (SDN), an advertisement in a first network cluster executing within a container orchestration platform of the SDN, wherein the advertisement conforms to a routing protocol and comprises information identifying a network service executing in the first network cluster, wherein the network service exposes a backend of a network application to the container orchestration platform of the SDN; and broadcast, by the network controller and to a second network cluster executing within the container orchestration platform of the SDN, the advertisement in accordance with the routing protocol.

Provided are a data transmission method, a communication apparatus, and a storage medium. The method is executed by a first node. The first node is a device in a forwarding layer of a software defined network (SDN). The method comprises: sending heartbeat information to a second node, the second node being a device in a control layer of the SDN, and the heartbeat information being carried by a link layer discovery protocol (LLDP) packet.

In an example, a network controller for an SDN architecture system includes processing circuitry of a central cluster of first one or more compute nodes; a configuration node configured for execution by the processing circuitry; a control node configured for execution by the processing circuitry. The configuration node includes a custom API server to process requests for operations on custom resources for SDN architecture configuration. Each of the custom resources for SDN architecture configuration corresponds to a type of configuration object in the SDN architecture system. The control node, in response to detecting an event on an instance of a first custom resource of the custom resources, obtains configuration data for the instance of the first custom resource and configures a corresponding instance of a configuration object in a workload cluster of second one or more compute nodes. The first and second compute nodes may be distinct.

The invention relates to the technical field of intelligent processing of campus operation and maintenance work orders, and discloses an intelligent analysis and service optimization system for campus informatization maintenance work orders. According to the system, standardization processing of multi-source work order data is achieved through a work order information aggregation module; the intelligent priority evaluation module adopts a deep learning model to analyze fault text semantics, generates a dynamic priority coefficient and improves the accuracy of work order grading; the resource scheduling optimization module generates an optimal allocation scheme based on the priority and the personnel state; and the redundant communication management module constructs an active-active architecture by using a software defined network, so that load balancing and rapid fault switching of a data stream and a control signaling are realized, and the communication reliability of the system is effectively guaranteed. According to the invention, the problems of inaccurate priority judgment and insufficient communication guarantee of a traditional work order system are solved.

This disclosure relates to a fully software-defined, fully virtualized, and customizable mobile communication platform deployed on public cloud infrastructure. Such mobile networks allows for end to end control of automatic and programmatic deployment and configuration of the mobile network components. The implementations below effectively enables instant creation and deployment of a true private global end-to-end Software Defined Network (SDN) for 3G, 4G, LTE, and 5G mobile communication from the ground up. Users will effectively act their own mobile carrier, allowing them to customize the features available to them via a programmatic interface.

Systems and methods are disclosed for enabling service-based communication among distributed application components in a software-defined network. A centralized application manager registers metadata for application instances, each associated with a common service identifier, and maintains an up-to-date mapping of these identifiers to network addresses across execution environments. When an application component initiates a request to communicate with a service by referencing its service identifier, a name resolution component dynamically resolves the identifier to an active network address using real-time deployment state. Communication is established via a virtual messaging fabric, facilitating reliable service discovery and inter-component messaging. The system supports load-balanced address selection, enforcement of security policy constraints, and synchronization across multiple network zones through a shared service registry. Application instances may include fxDeviceApp and fxCloudApp components executing on network devices and cloud platforms, respectively. These capabilities provide scalable, policy-driven, and secure service-level interaction within distributed application environments.

The invention discloses an ad hoc network simulation method based on network virtualization, belongs to the technical field of computer communication, and aims to solve the problems of insufficient compatibility, inflexible link control and weak topology time-varying simulation capability of traditional ad hoc network simulation. The core of the system is that a simulation architecture comprising a simulation configuration module, a service application module, a communication node module, an analog channel module and a data acquisition module is constructed, service application and a real equipment protocol stack are packaged through a container virtualization technology, and a real product and an upper-layer service application software protocol are supported to be directly deployed without transplantation. The system is compatible with a two-layer Ethernet and a three-layer IP protocol, integrates a communication link electromagnetic propagation model, is combined with OpenvSwitch and TC tools, is matched with a software defined network technology to control link quality and network topology time-varying characteristics, is adaptive to static and dynamic topology scenes, improves simulation authenticity and flexibility, and provides reliable support for ad hoc network testing.

The application provides a network deployment method, device, server and medium, and relates to the field of communication.The network deployment method comprises the following steps: obtaining a first service and a second service; calling a virtual infrastructure manager (VIM) and a software defined network (SDN) controller to create a first virtual router and a second virtual router; calling a security controller to create a virtual firewall in the case that the first service and the second service have security interaction requirements; calling the VIM, the SDN controller and the security controller to establish a first logical link and a second logical link; the first logical link is a logical link interconnecting the first virtual router and the virtual firewall, and the second logical link is a logical link interconnecting the second virtual router and the virtual firewall.In the embodiment of the application, the virtual routers of different services share the virtual firewall, so that the vFW resource occupation can be effectively reduced, and the network deployment cost is reduced.

The embodiment of the invention provides a multi-agent co-simulation control system of an information energy system, and the system consists of multiple agents, a data processing module, a software defined network and a co-control simulation platform. Unified perception and intelligent decision making of the global state of the energy system are realized, and the self-adaption and autonomy level of the system is improved. Flexible scheduling and safe collaboration of communication resources are realized through the software defined network, and the robustness of the system in dynamic change is enhanced; local control real-time performance and global optimization economical efficiency are effectively balanced through a hierarchical collaborative system of edge, fog and cloud computing; through a high-fidelity closed-loop simulation environment, full-period verification and continuous optimization capability is provided for a control strategy and system evolution.

Aspects of the subject disclosure may include, for example, receiving artificial intelligence (AI) analytics from a generative AI system, and based on the AI analytics, causing a software defined network (SDN) controller to identify a signaling path over a quantum signaling network, thereby enabling selection of a determined suitable path for quantum entanglement distribution. Other embodiments are disclosed.

A network system that facilitates financial transactions. A software defined network may operate to provide a variety of trading related services to a variety of customers with a low latency. Core or processor affinity for routing processes may improve speeds of routing. Data capture through a shared memory space may allow for a variety of analytics without introducing unacceptable delay.

A method of life-cycle management for a threat-detection-agent at a network gateway node includes providing an SDN including a data plane, control plane, and an application layer including a threat-detection-agent life-cycle-management-block, deploying, by the threat-detection-agent life-cycle-management-block, a threat-detection-agent, receiving, by the threat-detection-agent life-cycle-management-block a health-statistics report from the threat-detection-agent, determining, by the threat-detection-agent life-cycle-management-block based on the health-statistics report, whether first threat-detection-agent has failed, and deploying, by the threat-detection-agent life-cycle-management-block, another threat-detection-agent, subsequent to determining that the threat-detection-agent has failed. The method may terminate the threat-detection-agent. Life-cycle management method may be applied to a threat-detection-agent deployed in the control plane.

The invention provides a data packet verification method, system and device, electronic equipment and a medium. The method comprises the following steps: receiving a data packet sent by a bare metal server; verifying the data packet by using a multi-level network security rule to obtain a verification result of the data packet; and if the verification result indicates that the data packet is a secure data packet, the data packet is sent to a software defined network, and the multi-level network security rule comprises a security group rule and a network access control list rule. According to the method provided by the invention, the problems of high cost, complex networking, strong coupling and limited functions in the prior art are effectively solved, and an efficient, flexible and reliable bare metal server security access implementation mode is provided.

The application belongs to the technical field of network security operation and maintenance, network address translation monitoring, software defined network and intelligent operation and maintenance, and specifically discloses a firewall NAT policy automatic perception and port health degree closed-loop monitoring method and system based on SNMP MIB: the firewall NAT MIB is periodically collected through the SNMP protocol to obtain a current actual effective NAT entry set; the set is compared with a local monitoring configuration file to identify new and invalid entries, and an incremental update is performed on the configuration file according to a preset conflict arbitration strategy; the updated configuration file is read, survival detection is performed on a target port, and the result is pushed to a time sequence monitoring system. The application solves the problems of configuration drift, perception blind area and lack of closed-loop automation caused by the disconnection between monitoring configuration and NAT policy in the prior art, realizes automatic perception of NAT entries, incremental synchronization of configuration and closed-loop visual monitoring of port health degree, and improves operation and maintenance efficiency and monitoring accuracy.

The application discloses a method for intelligent routing optimization based on machine learning in a software-defined network, and relates to the technical field of communication networks, comprising the following steps: obtaining link state encoding and alleyway topology data of a target object; performing topology skeleton mapping on the alleyway topology data to generate a twin topology base map; performing time series difference operation on the link state encoding to generate a sequence of encoding difference values, and performing abnormality measurement on the sequence of encoding difference values to generate a sequence of abnormality evidence. According to the method, communication abnormality is searched in the twin topology base map, a block probability map is generated by forward accumulation and backward smoothing, and is updated to a reachability update twin graph, so that noise misjudgment is inhibited, reachability is continuously evolved with abnormality, an action mask is generated by double-layer mask synthesis of the reachability update twin graph and the block probability map, and an actionable candidate solution is constructed, thereby, unreachable and high-risk actions are eliminated in advance, and invalid exploration is reduced.

The invention discloses a dynamic QoS on-demand routing method oriented to service requirements, belongs to the field of industrial Internet of Things, and realizes self-adaptive routing optimization in an industrial Internet scene through multi-dimensional state perception, dynamic weight generation, unified reward modeling and a deep reinforcement learning strategy based on a software defined network (SDN) control architecture. According to the method, a dynamic weight adjustment mechanism based on a user portrait and a depth deterministic strategy gradient algorithm of priority experience playback are introduced, so that a routing strategy can keep stable and rapid convergence capability in a complex industrial environment, and the optimal dynamic QoS (Quality of Service) requirement can be automatically matched according to different service types; and therefore, the requirements of the industrial internet on high reliability, self-adaptive capability and intelligent network decision can be effectively met.

A queue management system (including but not limited to active queue management systems, traditional networks, and / or software-defined networking), method, computer program product, or integrated circuit that selectively manages flows based on methods for how the data of the flows have been encoded (such as FEC and / or compression) and / or characteristics of the flows (including but not limited to loss-recovery capabilities). Similarly, an encoder system, method, computer program product, or integrated circuit can make encoding decisions based on known and / or anticipated queue management policy (e.g., an FEC encoder may be configured to make frame splitting, parity symbol allocation, and / or packetization decisions based on known and / or anticipated queue management policy, and a data compressor may be configured to make data compression decisions based on known and / or anticipated queue management policy).

The invention discloses a heterogeneous resource management method for a containerized platform of an underwater acoustic signal processor, and belongs to the technical field of the containerized platform of the underwater acoustic signal processor, and the method comprises the steps: constructing a unified capability representation resource pool, and quantifying the hardware architecture of a heterogeneous calculation unit and the performance of an underwater acoustic reference algorithm; analyzing an underwater sound task to generate an acoustic processing logic diagram containing nodes and dependency relationships; according to the algorithm type and real-time constraint of each node in the graph, matching mapping is carried out by combining the performance of the resource pool and the load state, and a task-is generated; a resource mapping scheme; instantiating the processing container, connecting the container according to a data flow through a software defined network, configuring storage, and forming a distributed computing pipeline; and during operation, monitoring performance and triggering dynamic rescheduling and reconstruction. According to the method, fine scheduling of heterogeneous resources, intelligent deployment of task assembly lines and adaptive optimization are realized, and the underwater acoustic signal processing efficiency, the real-time guarantee and the resource utilization rate are improved.

The present invention is a software-defined network solution system and may include a management server that provides application-centric network control in a data center environment.

In one embodiment, a switch in a software-defined network receives a packet sent by an endpoint device via the SDN. The switch makes a copy of the packet based on one or more header fields of the packet matching one or more flow table entries of the switch. The switch forms telemetry data for reporting to a traffic analysis service by applying a metadata filter to the copy of the packet. The metadata filter prevents at least a portion of the copy of the packet from inclusion in the telemetry data. The switch sends the formed telemetry data to the traffic analysis service.

The application provides a terminal network security transmission method and platform for an exchange, relates to the technical field of security transmission, and comprises the following steps: for a target exchange, a double-mapping module is constructed, and a screening encapsulation layer is configured at the first module end; source address information is received, security check screening and storage are performed, and safe address information is determined; a software-defined network is introduced, a physical communication network is divided and logically programmed, and a logical management network is determined; a forwarding storm evaluation based on a first time node is performed, and a storm evaluation result is determined; if the storm probability meets a probability threshold value, a storm control mechanism is triggered to perform flow control, and a flow control strategy is determined; and terminal network security transmission management is performed. The application solves the technical problem that the conventional network security management method usually relies on fixed rules and static security strategies, is difficult to adjust and respond to a dynamically changing network environment in time, and results in poor security in the data transmission process.

This invention belongs to the field of network communication and provides a method and system for automatic network fault handling. The method includes: collecting multi-source monitoring signals to construct a spatiotemporal matrix characterizing the network state; training a decision tree model using a reinforcement learning algorithm and constructing a reward function based on root cause localization accuracy and repair effectiveness; after the decision tree model determines the root cause of the fault, calling the software-defined network (SDN) controller interface to generate a corresponding rerouting policy based on the root cause, and distributing the rerouting policy to network devices for path adjustment; applying the rerouting policy in a simulation environment, collecting QoS indicators before and after adjustment to verify the effectiveness of the repair policy; and feeding back the repair verification results to the training process of the decision tree model to update the parameters of the reinforcement learning algorithm. This application can improve the accuracy of automatic network fault handling.

This invention discloses a routing optimization method for distributed training cluster communication. The method comprises two parts: a traffic analysis component and a routing optimization component, both implemented in the centralized control plane of a software-defined network. The traffic analysis component needs to perceive the specific communication mode adopted by the application layer and the node allocation configured by the network administrator to obtain relevant traffic information, including the origin, destination, and amount of data transmitted for each flow, as well as the dependencies between flows. The routing optimization component then performs non-blocking route allocation based on the obtained task traffic information and network topology. This invention, targeting distributed machine learning data center training clusters, achieves overall non-blocking traffic communication by perceiving task cluster communication traffic and optimizing routes, reducing training communication overhead and further improving task completion time. It has application value in current mainstream large-scale model training scenarios.

A hybrid positioning system for a vehicle includes one or more controllers in wireless communication with a plurality of surrounding vehicles located in an environment surrounding the vehicle and a cellular software defined network including an edge positioning function. The one or more controllers execute instructions to receive, from the plurality of surrounding vehicles, relative position measurements that are each indicative of a position of one of the plurality of surrounding vehicles relative to the vehicle, wherein the relative position measurements are received by the one or more controllers in real-time. The one or more controllers receive a precise global position of the vehicle and the plurality of surrounding vehicles from the edge positioning function of the cellular software defined network, and fuse together the relative position measurements and the precise global position of the vehicle to determine a precise position of the vehicle.

An apparatus and method for network resource management and computational resource management for service-oriented communications within a software-defined network architecture (SDN), wherein an SDN control unit (138) monitors network traffic within a communications network (100), the SDN control unit (138) receives data about computational resource usage and service-oriented communications within the communications network (100), the SDN control unit (138) determines network resource settings and computational resource settings in response to an evaluation of the data, and the SDN control unit (138) configures the network resources and computational resources in response to the network resource settings and computational resource settings.