995 results about "Virtual network" patented technology

A system and method for mitigating cyber-attacks against a target network comprising interconnected note that is implemented by Open Systems Interconnection (OSI) layers monitors the target network for detecting vulnerabilities across one or more OIS layers. a virtual network comprising a virtualized representation of the target network where the virtual network includes one or more virtual nodes that are annotated with identified vulnerabilities of one or more corresponding nods of the target network. A reference database can be configured to store records of known cyber-attacks and their corresponding mitigations where cyber-attacks on the virtual network are simulated based on records of known cyber-attacks and successful cyber-attacks. An AI engine can be configured to generate one or more mitigation actions based on simulation of the cyber-attacks before implementing the one or more mitigation actions to the target network.

Techniques are described for creating a network-link between a first virtual network in a first cloud environment and a second virtual network in a second cloud environment. The first virtual network in the first cloud environment is created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment. The network-link is created based on one or more link-enabling virtual networks being deployed in the first cloud environment and the second cloud environment.

The invention discloses a server network card test method, system and device and a medium. The method comprises the following steps: creating a plurality of network namespaces in a server; mapping physical network cards of the server to different network namespaces respectively; creating one or more pairs of veth virtual network cards among different network namespaces; network parameters are configured, an IP address is configured in each network namespace, and a routing rule is established; a bandwidth test is executed, large-flow data packets are sent among different network namespaces, the throughput rate of data transmission is measured, and the actual bandwidth performance of the network card is calculated; recording the parameters of the data packet in the test process, and analyzing the performance bottleneck of the physical network card; and outputting a bandwidth test report according to the recorded and analyzed data. According to the method, the network card is isolated by using the network namespace in the single server, and the virtual network card is used for realizing data forwarding to complete the bandwidth test of the network card, so that an additional server is not needed, the test cost is remarkably reduced, and the test efficiency is improved.

In general, techniques are described for a SDN architecture system that implements an integrated gateway service. In an example, network controller comprises processing circuitry and memory and is configured to: configure a virtual network in a cluster of nodes of a compute infrastructure, the cluster of nodes managed in part by the network controller; receive a manifest for a gateway service instance that abstracts a transit gateway resource configurable in a plurality of different types of compute infrastructures, wherein the manifest specifies an intended state of a transit gateway object of the gateway service instance; and reconcile the intended state of the transit gateway object for the gateway service instance by sending configuration data, generated based on the transit gateway object, to an interface for the compute infrastructure to configure a transit gateway to forward network packets between a compute infrastructure node of the compute infrastructure and the virtual network.

The present disclosure relates to a communication method and device enabling information sharing between multiple SMFs in a wireless communication system for supporting virtual network (VN) group communication. A method performed by a first SMF for managing a session of a terminal in a wireless communication system for supporting VN group communication according to an embodiment of the present disclosure comprises the steps of: receiving, through an AMF that manages the mobility of the terminal, a PDU session establishment request message having been transmitted from the terminal and including identification information indicating the VN group communication; transmitting a request message including the identification information to a UDM that manages subscription information; receiving information about multiple SMFs enabling information sharing for the VN group communication from the UDM; and performing session management for the VN group communication through the information sharing with a second SMF among the multiple SMFs.

The invention discloses a computer network experiment environment dynamic construction method based on virtual simulation, which belongs to the field of computer network experiment teaching and virtual simulation technology application, and comprises the following steps: analyzing experiment scene description to generate a modular construction instruction; creating and initializing a virtual machine instance and a basic network; generating a required virtual network device and constructing a corresponding virtual connection; configuration parameters, service scripts and security policies are comprehensively applied to the virtual machine and the network equipment; and integrally outputting the experimental environment to a user interaction interface. According to the method, the demand-driven instruction arrangement, virtual resource pooling scheduling and multi-layer automatic configuration technologies are adopted, so that a diversified and deeply interactive virtual computer network experiment environment can be quickly and flexibly constructed according to specific experiment demands of a user; and the resource utilization rate, the scene construction efficiency and the flexibility of the teaching mode of network experiment teaching are obviously improved.

Techniques are described for creating a network-link between a first virtual network in a first cloud environment and a second virtual network in a second cloud environment. The first virtual network in the first cloud environment is created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment. The network-link is created based on one or more link-enabling virtual networks being deployed in the first cloud environment and the second cloud environment.

The invention relates to a virtual network card implementation method based on a shared memory, an electronic device and a medium, which take the shared memory as a core communication carrier, construct a low-overhead data transmission basis, and efficiently implement a producer-consumer model in combination with the cyclic storage characteristic of an annular buffer area and the lock-free synchronization mechanism of atomic operation. Through partition design and atomic operation of the annular buffer area, continuity and exclusiveness of data access are guaranteed, and performance loss of a traditional lock mechanism is avoided; meanwhile, on the basis of the IPI interrupt capacity of the universal interrupt controller, cross-core synchronous notification is achieved through MPIDR accurate routing, interrupt wakeup waiting tasks are triggered through hardware, low-efficiency polling is replaced, and high-frequency data interaction scenes such as virtual network equipment are perfectly adapted. Compared with the prior art, the method has the advantages of efficient, safe and reliable network communication and the like.

The invention relates to the technical field of cloud computing, and discloses an elastic line scheduling method based on cloud computing, comprising the following steps: S1, establishing a virtual network architecture in a cloud computing environment; comprising the steps of virtualizing network resources, defining network topology and creating network virtual machine instances (VMs) and service instances; s2, real-time flow monitoring and demand prediction; comprising a flow monitoring system, a flow prediction model and prediction result feedback. S3, intelligent elastic resource scheduling; comprising a bandwidth allocation strategy, multi-path selection, a path switching mechanism and dynamic routing adjustment. S4, ensuring fairness and priority management; comprising priority management and fair resource allocation; s5, carrying out system self-optimization and learning; comprising continuous monitoring and feedback, a self-learning mechanism and performance evaluation and adjustment. According to the invention, through the elastic scheduling method, only a larger bandwidth needs to be used in the peak period actually, so that the waste of bandwidth resources and the cost expenditure are greatly reduced.

In response to a programmatic request, configuration information representing a multi-network-segment gateway established on behalf of a customer is stored at a networking service. In response to another programmatic request, a communication session is established between a route signaling node of the gateway and a routing information source located at a customer premise. In response to additional programmatic input, the networking service stores an indication that the gateway is to be used to transfer packets between a cloud-side virtual network and a customer-side virtual network. The routing information exchanged in the session pertains to the cloud-side and customer-side virtual network, and is used to transfer data packets between the two virtual networks.

Various methods and processing systems for the effective management of network traffic and facilitating data forwarding within distributed computing environments. Network components may be configured to amalgamate the Border Gateway Protocol (BGP) with Source Network Address Translation (SNAT) or network address port translation (NAPT) technologies to facilitate dynamic notification of network address accessibility and use port index identifiers to augment the precision and resilience of routing. A distributed SNAT / NAPT virtual network function (VNF) or cloud-native network function (CNF) may collaborate with LEAF switches or server aggregation devices to refine data transmission via adaptable address mapping and forwarding and enhance network scalability and resilience.

The invention discloses a virtual network security-oriented communication dynamic analysis method, which relates to the technical field of network security, and comprises the following steps of: acquiring a communication time sequence; performing multi-scale decomposition on the communication sequential sequence to obtain a reference communication sequential sequence; calculating a slope and a propagation rate, and determining abnormal communication data based on the slope and the propagation rate; determining continuous abnormal communication data according to the periodic characteristics of the abnormal communication data and the propagation sequence of the abnormal communication data in network nodes, and determining an initial node and a propagation path of the continuous abnormal communication data by adopting reverse time sequence recursive analysis; inputting the starting node of the continuous abnormal communication data and the abnormal data characteristics of the propagation path into the LSTM neural network model, and predicting subsequent abnormal nodes; according to the method, high-precision identification of communication abnormity is facilitated, and the security detection capability and the response efficiency in a virtualized network environment are remarkably improved.

A system for optimizing network traffic management is provided. The system includes a plurality of data processing units (DPUs), each assigned an identifier and configured to process network traffic for associated virtual network interface cards (vNICs). The system also includes a vNIC placement handler configured to receive media access control (MAC) address information from the plurality of DPUs and execute a relocation of at least two vNICs to be directly associated with one of the plurality of DPUs without through an inter-DPU physical network based on mapping the MAC address information to the identifier. The system further includes a communication framework integrated with the vNIC placement handler to enable transmission of MAC address information from the plurality of DPUs to the vNIC placement handler and offload network traffic from the vNICs to corresponding one or more of the plurality of DPUs.

Systems and methods for connecting devices via a virtual global network are disclosed. In one embodiment the network system may comprise an endpoint device including a tunnel manager and a first virtual interface, an access point server including at least one tunnel listener and a second virtual interface. One or more tunnels are formed connecting the tunnel managers and tunnel listeners. The virtual interfaces provide a logical point of access to the one or more tunnels.

A virtual gateway for transmission of packets from a service provider virtual network to a service consumer virtual network of a user is established at a cloud computing environment. A limited-access endpoint is created in the service consumer virtual network, with security settings provided by the user which enable transmission of packets from a service implemented at the service provider virtual network to resources within the service consumer virtual network. A packet directed to a resource in the service consumer virtual network is received at the gateway from the service. If the security settings permit delivery of packets via the endpoint to the resource, the packet is transmitted to the resource.

The invention relates to a test method based on a virtual network element. The method comprises the following steps: acquiring configuration information of a current virtual network element; generating a configuration parameter value according to the configuration information, and performing a reliability test on the configuration interface of the current virtual network element based on the configuration parameter value; under the condition that the reliability test is passed, constructing a test message, and testing a forwarding function and / or a sending function of the current virtual network element based on the test message; obtaining a test result based on first flow table item configuration information sent by the current virtual network element and / or second flow table item configuration information received by the current virtual network element; the first flow table item configuration information is generated in the process that the current virtual network element sends the response message to the target virtual network element; the second flow table item configuration information is generated in the process that the current virtual network element receives the test message. By adopting the method, the virtual network element with the fault can be accurately positioned; the response message is a message forwarded by the current virtual network element after receiving the test message.

The invention relates to an Oracle RAC heartbeat network detection switching method and device and a storage medium, and the method comprises the steps: obtaining the number of sent and received heartbeat packets, the number of received and sent bytes and the round-trip time of the heartbeat packets in a network card hardware counter, calculating the network delay according to the round-trip time of the heartbeat packets through employing a hardware timestamp, and carrying out the detection switching of the Oracle RAC heartbeat network. And calculating a packet loss rate according to the number of sent and received heartbeat packets, calculating a bandwidth utilization rate according to the number of received and sent bytes, judging whether a heartbeat network fault is detected according to the network delay, the packet loss rate and the bandwidth utilization rate, and if the heartbeat network fault is detected, switching a network card or a virtual IP. The network flow data comprises the number of sent and received heartbeat packets and the number of received and sent bytes, the network flow data can be collected in real time through a network card hardware counter and a hardware timestamp, the timeliness of flow monitoring can be ensured, the accuracy can be up to milliseconds, heartbeat network faults can be detected within the millisecond level, and the service life of the network is prolonged. And the influence of the heartbeat network fault on the reliability of the Oracle RAC cluster is reduced.

A container-based parallel computing system for executing high-performance computing (HPC) applications. The system leverages container technology to package the applications executed at the nodes in a cluster. To load and execute a job in the parallel computing system, containers are deployed in a cluster that include all the application resources and configuration information that the particular HPC application needs to execute. An event-driven batch scheduler may be used to dynamically allocate resources for executing multi-node jobs in the container-based parallel computing system, handling the coordination of resource allocation for the customer. The scheduler insures that jobs begin executing as fast as possible, and handles failure conditions such as partial scaling. Virtual network interfaces are attached to the containers that allow the containers to connect to and communicate with other containers in the cluster directly through the network interfaces of host machines using IP addresses provided by the virtual network interfaces.

The invention provides a network interruption optimization method, system and device during virtual machine live migration and a medium, and belongs to the technical field of cloud computing. The method comprises the following steps: performing time synchronization on all computing nodes, and deploying message middleware; monitoring the memory migration progress of the virtual machine and the dirty page generation rate of the virtual machine in real time, and calculating a virtual machine switching time point; a live migration switching notification message is generated based on the virtual machine switching time point, and the source node pushes the live migration switching notification message to a target node and related computing nodes through message middleware; after receiving the live migration switching notification message, the target node creates virtual network equipment and updates a link according to the live migration switching notification message; after the related computing node receives the live migration switching notification message, routing equipment creation and link updating required by the virtual machine are carried out according to the live migration switching notification message; and monitoring the migration process of the virtual machine memory in real time, and executing the thermal migration rollback and retry process when the migration fails.

The present invention discloses a 5G-TSN industrial heterogeneous virtual network architecture and a fine-grained scheduling method for virtual resources, and relates to the field of industrial communications. NFV technology is used to virtualize the TSN intelligent gateway of the edge computing layer into a virtual machine with TSN functions; the SDN controller centrally controls the TSN intelligent gateway supporting SDN technology deployed at the edge computing layer, and combines with NFV technology to perform virtualized network modeling of the 5G-TSN industrial heterogeneous network from the perspective of resource scheduling, and schedules and manages network slices with different QoS belonging to different industrial applications. The present invention is oriented to the upper-layer dynamic application requirements of flexible manufacturing, takes into account the heterogeneous QoS requirements of on-site communication resources and data streams, introduces the age of information (AoI) as an indicator at the virtual level to characterize the information timeliness of 5G access network data transmission, and proposes a 5G-TSN industrial heterogeneous virtual network architecture and heterogeneous QoS mapping mechanism in combination with the characteristics of 5G data, which can realize fine-grained on-demand delivery of industrial multi-priority heterogeneous data streams.

The invention relates to the technical field of computer networks, and discloses a communication method and device for a computing node, equipment and a storage medium. The method is applied to a computing node, the computing node comprises a virtual switch and a physical network card, a plurality of virtual network interfaces are created in the virtual switch, the plurality of virtual network interfaces are in one-to-one correspondence with a plurality of service networks, and the physical network card is connected with at least one other node. The method comprises the following steps: receiving a target data message of a target service network through a target virtual network interface of a virtual switch; and sending the target data message to a corresponding node in the at least one other node through the physical network card. A plurality of virtual network interfaces are created in the virtual switch, and one virtual network interface corresponds to one service network, so that deployment of a plurality of service networks in the virtual switch is realized, network multiplexing in the virtual switch is realized, and the problem that physical network card resources of computing nodes are insufficient is solved. And a plurality of virtualized networks cannot be provided.

The invention discloses an electric power Internet of Things service scheduling method and device based on an SDN and an NFV, and a medium, and belongs to the field of virtual networks, and the method comprises the steps: receiving an electric power Internet of Things service request issued by a cloud network cooperative management platform through an SDN controller, and matching a corresponding VNF combination for the electric power Internet of Things service request; based on the control domain network topology structure, performing first path planning for the VNF combination through a weighted shortest path algorithm to obtain a first deployment path; constructing an optimization objective function of the first deployment path based on the dynamically adjusted time delay weight factor and load weight factor, and performing global optimization on the first deployment path based on the optimization objective function to obtain a second deployment path; and generating a deployment instruction based on the second deployment path, and issuing the deployment instruction to each corresponding physical node through the NFVO to perform VNF instance deployment so as to complete power Internet of Things service scheduling. Therefore, by implementing the method and the system, accurate scheduling of various services of the power internet of things can be completed according to the time delay requirement.

Systems and methods of interface-based ACLs in a virtual Layer-2 network. The method can include sending a packet from source compute instance in a virtual network to a destination compute instance via a destination virtual network interface card (destination VNIC) within a first virtual layer 2 network and evaluating an access control list (ACL) for the packet with a source virtual network interface card (source VNIC). ACL information relevant to the packet can be embedded in the packet. The VSRS can receive the packet and can identify the destination VNIC within the first virtual layer 2 network for delivery of the packet based on information received with the packet and mapping information contained within a mapping table. The VSRS can access ACL information from the packet and can apply the ACL information to the packet.

Embodiments herein disclose for example a method performed by a controlling network node for handling one or more virtual network functions (VNF) in a communication network. The controlling network node initiates a setup of virtual resources for a VNF, wherein an aggregating connection point (CP), indicates a set of CPs to be connected to a same external virtual link. The controlling network node transmits configuration data to a managing function wherein the configuration data comprises an indication.

In response to receiving a reservation request at a provider network, metadata indicating that a group of network addresses of a subnet is reserved for operations of a particular category is stored. A first request for an operation, requiring assignment of an address of the reserved group is rejected if the operation does not belong to the particular category, even if the address is not in use. In response to a second request for an operation which does belong to the particular category, an address of the reserved group is assigned.

The invention provides an intelligent computing center computing power resource container network card configuration method and device, and relates to the technical field of intelligent computing centers, intelligent computing centers and computing power infrastructure, the method comprises the following steps: S1, creating a first virtual network card based on first information, the first information being used for indicating a first network segment and a first container, the first network segment is one of a plurality of network segments included in the container network, the container network is a network used when the container cluster distributes the network segments, the container cluster comprises a plurality of computing power resource containers, the first container is one of the computing power resource containers, and the first virtual network card is used for accessing the first network segment; s2, determining a first container in the plurality of computing power resource containers based on first information; and S3, migrating the first virtual network card into the first container, and executing network card configuration operation in the first container based on the first virtual network card. The network segment expansion efficiency of the container can be improved.

The present disclosure provides a method of traffic scheduling implementation, including: receiving a domain name resolution request sent by a first business application on a first terminal device, and performing domain name resolution on the domain name resolution request to determine a to-be-resolved domain name; if the to-be-resolved domain name is a target domain name, determining, from a preset network segment, a first virtual network address corresponding to the to-be-resolved domain name, and using the first virtual network address as a first traffic destination address corresponding to the to-be-resolved domain name, where the preset network segment includes a plurality of virtual network addresses; and sending the first traffic destination address to the first business application on the first terminal device, to cause the first business application to perform data transmission based on the first traffic destination address.

The invention relates to the technical field of injection molding manufacturing of automotive interiors, in particular to an injection molding method and system for an automotive armrest, and the method comprises the following steps: determining an armrest mold, obtaining a cavity topological structure based on the armrest mold, carrying out partition treatment according to the cavity topological structure, and obtaining a plurality of cavity partitions; a melt virtual network is constructed, melt flow simulation is conducted on the multiple cavity partitions according to the melt virtual network, partition control compensation is conducted on the multiple cavity partitions according to a melt flow simulation result, and a condensation blank is obtained; and pressure maintaining regulation and control are conducted on the condensation blank according to the cavity partitions, cooling demolding is conducted, a finished handrail product is obtained, and pressure maintaining regulation and control are used for conducting shrinkage compensation on the condensation blank. According to the invention, the problems of non-uniform melt flow, incomplete cavity filling and poor product quality consistency caused by a complex structure in the injection molding of the existing automobile armrest are solved.

A system is disclosed for quarantining and recovery of a network after an outage or in advance of a potential outage. Unaffected network slices are isolated and recovery is initiated by quarantine physical and virtual network functions. An AI model is trained based on recent events detected by sensors disposed throughout the network to determine whether to quarantine network slices, move services to unaffected network slices, or initiate recovery. Once the network is stabilized, resources that are specifically allocated for recovery and services are released and the traffic moved back to the recovered network slices.

A firewall manager automates traffic route configuration, compliance monitoring, and remediation. An administrator specifies a firewall policy that includes rules and traffic description, and specifies accounts, isolated virtual networks (IVNs) and / or subnets for firewall deployment. For automated traffic route configuration, the manager provisions and configures firewalls for the specified networks. The manager uses discovered network resource of the specified networks to determine route information for the firewalls for the networks for the traffic, and sends instructions for routing updates for the IVNs to an IVN manager service. For compliance monitoring and remediation, the manager obtains information about new IVNs, subnets, resources and / or routes, and determines compliance by comparing the obtained information to the firewall policy. The manager generates a remediation plan for non-compliance and instructs remediation by performing programmatic calls to the IVN manager service.