15 results about "Substrate network" patented technology

Techniques for managing the distribution of configuration information that supports the flow of packets in a cloud environment are described. In an example, a virtual network interface card (VNIC) hosted on a network virtualization device NVD receives a first packet from a compute instance associated with the VNIC. The VNIC determines that flow information to send the first packet on a virtual network is unavailable from a memory of the NVD. The VNIC sends, via the NVD, the first packet to a network interface service, where the network interface service maintains configuration information to send packets on the substrate network and is configured to send the first packet on the substrate network based on the configuration information. The NVD receives the flow information from the network interface service, where the flow information is a subset of the configuration information. The NVD stores the flow information in the memory.

The invention relates to a silicon substrate network physical topological structure and a silicon substrate chip architecture, the silicon substrate network physical topological structure comprises a central switch and a plurality of calculation core particle groups, each calculation core particle group is connected with the central switch, the central switch is arranged at the center of a wafer, and each calculation core particle group is arranged in a preset area around the central switch on the wafer; the central switch is used as a data routing node and provides a signal path for any two computing core particle groups; the calculation core particle group comprises a plurality of calculation core particles, all the calculation core particles are arranged in a two-dimensional grid form, all the calculation core particles are mutually connected through an on-chip network, and the calculation core particles are used for calculating data. By adopting the silicon substrate network physical topological structure, the balance between communication resources and computing resources can be ensured.

Techniques for utilizing a cloud-side link module and a provider substrate extension (PSE) link module to secure a communications channel between a cloud provider network and a provider substrate extension are described. A PSE link module receives a request originated by a compute instance in the PSE that is destined to a destination within the cloud provider network. The request was encrypted using an encryption scheme that encrypts traffic of a virtual private cloud that the compute instance operates in. The PSE link module decrypts the first request, encrypts it using a separate encryption scheme, and transmits it via a secure tunnel to a second link module in the cloud provider network. The second link module can decrypt the encrypted traffic and cause it to be validated before it is passed on via the cloud provider's substrate network to be processed.

Techniques for controlling packet flows are described. In an example, a packet is sent on a virtual network. The packet's header includes scoping data that indicates a network boundary within which the packet is permitted and / or prohibited to flow. A network virtualization device of a substrate network receives the packet. The network virtualization device determines the scoping data from the header and, based on network configuration information, determines the forward flow of the packet. If the forward flow falls within a permitted network boundary indicated by the scoping data, the network virtualization device sends the packet forward. Otherwise, the packet is dropped.

Methods and systems for data processing and troubleshooting at a query management service are described. The query management service may receive, via a proxy between the query management service and a communication service, an indication of a query from a user of the communication service. The query management service may determine an intent of the query based on using a third-party natural language processing (NLP) model and customized logic to analyze the query. The query management service may obtain query results based on executing, within a distributed computing environment that includes the query management service and a set of multi-substrate network security services, a sequence of actions, that correspond to the intent of the query. The query management service may transmit an indication of the query results to the communication service, where the query results are rendered according to feedback information received from the user.

Systems and methods for highly-available host networking with active-active or active-backup traffic load-balancing are disclosed herein. The method can include selecting a compute instance from an overlay network residing on a substrate network, identifying a plurality of Network Virtualization Devices (“NVD”) for association with the compute instance, creating a loopback interface on each of the NVDs, each of which loopback interfaces can include a shared IP address that can be in the substrate layer, prepopulating a table in each of the NVDs, the table linking the shared IP address to the compute instance, and each of the plurality of NVDs advertising a unique route to the compute instance via the shared IP address.

Techniques are described for implementing secure communications between edge devices providing cloud computing services in an edge environment. A computing cluster can include a plurality of cloud-computing edge devices. The computing cluster can implement a distributed control plane for performing operations related to managing cloud infrastructure resources within the computing cluster. The cloud-computing edge devices can be connected to an intra-node switch to form a substrate network. The data related to control plane operations may be transmitted over the substrate from one edge device to another, such that control plane operations can be performed at any suitable edge device in the cluster. The edge devices can use an encryption protocol to encrypt the data transmitted over the substrate network via the intra-node switch.

Nodes of a protected system perform protected network address discovery by establishing a management overlay network using static network addresses not subject to network discovery, and using the overlay network to communicate application-level network address information among the protected nodes. Each protected node operates to (1) maintain a store of the application-level network address information from the overlay network, and instantiate protective packet filters at node ports, and (2) in response to an outgoing network address discovery request, (a) use a packet filter to consult the store and retrieve target network address information for a target of the discovery request, and (b) make an on-node response with the target network address information without forwarding the discovery request out to the substrate network. Network discovery is thus protected from the effects of potential network address conflicts involving the other nodes, which may be outside the control of the protected system.

The invention belongs to the field of integrated circuit design, provides a scalable model suitable for a terahertz frequency band CMOS transistor, and is used for solving the problems that in the prior art, the modeling cost is high, the physical significance of a scaling rule is indefinite, the extrapolation capability is limited, terahertz frequency band modeling is missing and the like. The scalable model comprises an intrinsic network, a substrate network and a port parasitic network, and the effective frequency band of the scalable model can reach the terahertz frequency band; the model accurately describes an NQS effect under a high-frequency condition and comprises a scaling model of a nonlinear NQS resistor; meanwhile, a scalable grid capacitance scaling model is embedded in the model, the capacitance model strictly follows the law of conservation of charge, and the problem that the model is not converged during simulation is effectively avoided; in addition, the scaling model provided by the invention further comprises scaling rules of a parasitic parameter system in a CMOS transistor equivalent circuit; in conclusion, the modeling period is greatly shortened on the premise that the moderate parameter quantity is guaranteed.

An ophthalmic device is disclosed, the ophthalmic device comprising: (a) a step of providing a reactive composition, the reactive composition comprising (i) a polymerization initiator capable of forming two or more free radical groups upon first activation, wherein at least one of the free radical groups is further activatable by subsequent activation, (ii) one or more ethylenically unsaturated compounds, and (iii) a crosslinking agent; (b) a step of subjecting the reactive composition to a first activation step such that the reactive composition polymerizes thereto form a crosslinked substrate network containing covalently bonded activatable free radical initiators; and (c) inactivating at least a portion of the covalently bonded activatable free radical initiators in one or more selected regions of the crosslinked substrate network. An ophthalmic device manufactured by a process comprising: (d) a step of ensuring that the crosslinked substrate network contains retained covalently activatable free radical initiators outside one or more selected regions and optionally within one or more selected regions; (b) a step of contacting the crosslinked substrate network with a grafting composition containing one or more ethylenically unsaturated compounds, wherein the contact is carried out under conditions such that the grafting composition penetrates into the crosslinked substrate network; and (e) a step of activating the retained covalently activatable free radical initiators so that the grafting composition polymerizes with the crosslinked substrate network, thereby forming a grafted polymer network outside the selected regions and optionally partially within the selected regions.

Nodes of a protected system perform protected network address discovery by establishing a management overlay network using static network addresses not subject to network discovery, and using the overlay network to communicate application-level network address information among the protected nodes. Each protected node operates to (1) maintain a store of the application-level network address information from the overlay network, and instantiate protective packet filters at node ports, and (2) in response to an outgoing network address discovery request, (a) use a packet filter to consult the store and retrieve target network address information for a target of the discovery request, and (b) make an on-node response with the target network address information without forwarding the discovery request out to the substrate network. Network discovery is thus protected from the effects of potential network address conflicts involving the other nodes, which may be outside the control of the protected system.

The invention provides a semiconductor device radio frequency modeling method and model for a silicon-on-insulator (SOI) platform. The method comprises the following steps: constructing an equivalent circuit model comprising a gate / body end parasitic impedance network, an intrinsic capacitance module, a body resistance module and a substrate network module; an intrinsic capacitance parameter is extracted through a low-frequency CV test, Cg is decomposed into overlapping capacitance, depletion capacitance and accumulation capacitance, and a hyperbolic tangent function and polynomial correction are introduced; extracting parasitic resistance inductance by using layout information and square resistance; bulk resistance parameters modulated by voltage are extracted based on the high-frequency S parameters, and the body resistance is fitted by adopting an exponential function. The model provided by the invention can accurately reflect the back gate effect and the bulk resistance modulation effect of the SOI device, and shows excellent fitting precision in a wide frequency band, wide voltage and wide temperature range.

Techniques for managing the distribution of configuration information that supports the flow of packets in a cloud environment are described. In an example, a virtual network interface card (VNIC) hosted on a network virtualization device NVD receives a first packet from a compute instance associated with the VNIC. The VNIC determines that flow information to send the first packet on a virtual network is unavailable from a memory of the NVD. The VNIC sends, via the NVD, the first packet to a network interface service, where the network interface service maintains configuration information to send packets on the substrate network and is configured to send the first packet on the substrate network based on the configuration information. The NVD receives the flow information from the network interface service, where the flow information is a subset of the configuration information. The NVD stores the flow information in the memory.

Techniques for controlling packet flows are described. In an example, a packet is sent on a virtual network. The packet's header includes scoping data that indicates a network boundary within which the packet is permitted and / or prohibited to flow. A network virtualization device of a substrate network receives the packet. The network virtualization device determines the scoping data from the header and, based on network configuration information, determines the forward flow of the packet. If the forward flow falls within a permitted network boundary indicated by the scoping data, the network virtualization device sends the packet forward. Otherwise, the packet is dropped.

A service automation system in a microservices-based communication network is provided to automate the deployment of new software release. When a new version of a microservice deployed in a service chain is released, the system conducts a comprehensive analysis of deployed microservices and their versions. It identifies direct and indirect relation and propagation effects onto other microservices, explores dependencies, and determines the essential microservices for the upgrade including their respective versions. Moreover, the system intelligently calculates the optimal number of instances for the updated version based on user load and requested users to migrate to the new version. Also, the service automation determines ideal deployment locations in the substrate network for new versions placement.