1444 results about "Virtual network" patented technology

A system and method for mitigating cyber-attacks against a target network comprising interconnected note that is implemented by Open Systems Interconnection (OSI) layers monitors the target network for detecting vulnerabilities across one or more OIS layers. a virtual network comprising a virtualized representation of the target network where the virtual network includes one or more virtual nodes that are annotated with identified vulnerabilities of one or more corresponding nods of the target network. A reference database can be configured to store records of known cyber-attacks and their corresponding mitigations where cyber-attacks on the virtual network are simulated based on records of known cyber-attacks and successful cyber-attacks. An AI engine can be configured to generate one or more mitigation actions based on simulation of the cyber-attacks before implementing the one or more mitigation actions to the target network.

The invention provides a 5G network intelligent switching management method based on artificial intelligence, and the method comprises the following steps: collecting and processing network related data, and obtaining a network data set; constructing a switching demand prediction model used for predicting network switching time and a target and a switching effect prediction model used for predicting network performance after switching; optimizing the initial switching strategy in combination with reinforcement learning to obtain an optimal switching strategy; deploying a network switching engine model on the edge computing node, and adjusting an optimal switching strategy in real time according to the network environment change; a virtual simulation digital environment is constructed for network simulation, an optimal switching strategy is evaluated according to the simulated virtual network environment, and then a network switching engine model is optimized in real time according to an evaluation result. According to the invention, the intelligent switching decision is realized, the precision and efficiency of the switching decision can be improved, the network adaptability and diversified requirements are enhanced, and the user experience is improved.

Disclosed are various embodiments for rate proportional scheduling to reduce packet loss in virtualized network function chains. A congestion monitor executed by a first virtual machine executed by a host computing device can detect congestion in a receive queue associated with a first virtualized network function implemented by a first virtual machine. The congestion monitor can send a pause signal to a rate controller executed by a second virtual machine executed by the host computing device. The rate controller can receive the pause signal. In response, the rate controller can pause the processing of packets by a second virtualized network function implemented by the second virtual machine to reduce congestion in the receive queue of the first virtualized network function.

A wireless communication method performed by a first SMF of a wireless core network includes receiving a first virtual network (VN) session request from a second SMF, the first VN session request including at least one of a virtual network (VN) identifier (ID) of a VN, first routing information, or first data communication tunnel information for a first VN data communication session; sending a first VN session response; and configuring, according to the first routing information, a first packet detection rule (PDR) and a first forwarding action rule (FAR) for a first User Plane Function (UPF) associated with the first SMF to forward data packets of the first VN data communication session. Other methods, a wireless communication apparatus, and non-transitory computer readable storage medium performing the wireless communication methods are disclosed.

The technology disclosed relates to detection of data traffic in computing environments, such as cloud environments. Example systems and methods detect a plurality of workloads in a virtual network in a computing environment and deploy a plurality of probe agents to the plurality of workloads. Each respective probe agent detects network traffic on a respective workload of the plurality of workloads, scans a data packet that is at least one of sent or received by the respective workload, generates a data classification relative to the data packet, and generates a scan result that includes packet payload information and an indication of the data classification. The scan results are received from the plurality of probe agents and a computing action is performed based on scan results.

The invention, which relates to the technical field of data security, discloses a power grid enterprise power data storage security risk assessment system comprising the following components: a virtual environment monitoring module, a risk assessment and isolation module, an early warning and response module and a security policy management module. According to the invention, omnibearing real-time monitoring is carried out on a virtual server and a virtual network of a power grid enterprise data center through the virtual environment monitoring module, an abnormal behavior detection model is continuously optimized by using a machine learning algorithm, and high-precision identification of novel abnormal behaviors is realized. Meanwhile, the risk assessment and isolation module introduces a specific risk factor weight in combination with the unique characteristics of the power data of the power grid enterprise, ensures that an assessment result highly accurately reflects the actual safety risk of power data storage, and remarkably improves the safety and stability of power data storage of the power grid enterprise.

Techniques are described for creating a network-link between a first virtual network in a first cloud environment and a second virtual network in a second cloud environment. The first virtual network in the first cloud environment is created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment. The network-link is created based on one or more link-enabling virtual networks being deployed in the first cloud environment and the second cloud environment.

The invention discloses a server network card test method, system and device and a medium. The method comprises the following steps: creating a plurality of network namespaces in a server; mapping physical network cards of the server to different network namespaces respectively; creating one or more pairs of veth virtual network cards among different network namespaces; network parameters are configured, an IP address is configured in each network namespace, and a routing rule is established; a bandwidth test is executed, large-flow data packets are sent among different network namespaces, the throughput rate of data transmission is measured, and the actual bandwidth performance of the network card is calculated; recording the parameters of the data packet in the test process, and analyzing the performance bottleneck of the physical network card; and outputting a bandwidth test report according to the recorded and analyzed data. According to the method, the network card is isolated by using the network namespace in the single server, and the virtual network card is used for realizing data forwarding to complete the bandwidth test of the network card, so that an additional server is not needed, the test cost is remarkably reduced, and the test efficiency is improved.

The invention provides a data interaction method and device based on a shared memory, virtual electronic equipment and a storage medium, and the method comprises the steps: responding to a detected packet sending request of a first application for a first protocol stack of first virtual network equipment, and calling a first packet sending function; encapsulating the to-be-sent data into a first data packet based on the first packet sending function; obtaining a storage address of the first data packet, and mapping the storage address in a mode of directly accessing a mapping interface by a memory to obtain a mapped physical address; and filling the physical address into a corresponding position of the descriptor of the first virtual network equipment, and updating the position of a tail pointer of the descriptor. The RC and the EP are registered as the virtual network card through the network driving technology, so that the communication function can be realized through the PCIE slot and by means of the PCIE connecting line, data message transmission can be realized without the aid of peripheral equipment such as the network card, the stability of data transmission is improved, and the configuration cost of hardware is saved.

The embodiment of the invention discloses a network resource allocation method and device based on load balancing, equipment and a medium. The method comprises the following steps: segmenting a physical wireless local area network into at least two virtual network slices by adopting a network function virtualization algorithm and a software defined network algorithm, and carrying out customized configuration on the at least two virtual network slices; determining a load state and an average load of the at least two virtual network slices, and determining a network resource allocation quantity of the at least two virtual network slices according to the load state and the average load; configuring corresponding service quality parameters for the at least two virtual network slices, and allocating processing tasks of different levels according to the service quality parameters; and dynamically adjusting the network resource allocation quantities of the at least two virtual network slices according to the network resource allocation quantities and the processing tasks of the corresponding levels. By adopting the scheme, the network resources are reasonably allocated, the communication requirements of different applications can be met, and the utilization rate of the network resources is improved.

Techniques associated with exchanging data between clusters are disclosed. A data packet can be received from a first pod in a first cluster of a cluster set that targets a second pod or service in a second cluster of the cluster set. A label identity is determined for the first pod from a table of pods and label identities. The label identity for the first pod is added in a virtual network identifier field of a data packet header. The data packet is communicated from a first virtual switch to the second cluster through a tunnel interface and gateway node. Upon receipt of the data packet, the label identity is extracted from the data packet header, and an ingress rule associated with the label identity can be determined. Access to the second pod is controlled based on the rule.

In one implementation, a device performs, using a using a large language model-based troubleshooting agent, troubleshooting of a plurality of issues in a network indicated by a plurality of support tickets opened by users of the network. The device aggregates, based on results of the troubleshooting, the plurality of support tickets into a master support ticket. The device obtains a resolution to the master support ticket from a support engineer. The device uses the resolution to the master support ticket in conjunction with the large language model-based troubleshooting agent to troubleshoot a new support ticket.

In general, techniques are described for a SDN architecture system that implements an integrated gateway service. In an example, network controller comprises processing circuitry and memory and is configured to: configure a virtual network in a cluster of nodes of a compute infrastructure, the cluster of nodes managed in part by the network controller; receive a manifest for a gateway service instance that abstracts a transit gateway resource configurable in a plurality of different types of compute infrastructures, wherein the manifest specifies an intended state of a transit gateway object of the gateway service instance; and reconcile the intended state of the transit gateway object for the gateway service instance by sending configuration data, generated based on the transit gateway object, to an interface for the compute infrastructure to configure a transit gateway to forward network packets between a compute infrastructure node of the compute infrastructure and the virtual network.

The present disclosure relates to a communication method and device enabling information sharing between multiple SMFs in a wireless communication system for supporting virtual network (VN) group communication. A method performed by a first SMF for managing a session of a terminal in a wireless communication system for supporting VN group communication according to an embodiment of the present disclosure comprises the steps of: receiving, through an AMF that manages the mobility of the terminal, a PDU session establishment request message having been transmitted from the terminal and including identification information indicating the VN group communication; transmitting a request message including the identification information to a UDM that manages subscription information; receiving information about multiple SMFs enabling information sharing for the VN group communication from the UDM; and performing session management for the VN group communication through the information sharing with a second SMF among the multiple SMFs.

The invention discloses a computer network experiment environment dynamic construction method based on virtual simulation, which belongs to the field of computer network experiment teaching and virtual simulation technology application, and comprises the following steps: analyzing experiment scene description to generate a modular construction instruction; creating and initializing a virtual machine instance and a basic network; generating a required virtual network device and constructing a corresponding virtual connection; configuration parameters, service scripts and security policies are comprehensively applied to the virtual machine and the network equipment; and integrally outputting the experimental environment to a user interaction interface. According to the method, the demand-driven instruction arrangement, virtual resource pooling scheduling and multi-layer automatic configuration technologies are adopted, so that a diversified and deeply interactive virtual computer network experiment environment can be quickly and flexibly constructed according to specific experiment demands of a user; and the resource utilization rate, the scene construction efficiency and the flexibility of the teaching mode of network experiment teaching are obviously improved.

Techniques are described for communications in an L2 virtual network. In an example, the L2 virtual network includes a plurality of L2 compute instances hosted on a set of host machines and a plurality of L2 virtual network interfaces and L2 virtual switches hosted on a set of network virtualization devices. An L2 virtual network interface emulates an L2 port of the L2 virtual network. IGMP configuration is distributed to the L2 virtual switches. A control plane of the L2 virtual network coordinates IGMP configuration across the L2 virtual switches.

Techniques are described for creating a network-link between a first virtual network in a first cloud environment and a second virtual network in a second cloud environment. The first virtual network in the first cloud environment is created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment. The network-link is created based on one or more link-enabling virtual networks being deployed in the first cloud environment and the second cloud environment.

The invention relates to a virtual network card implementation method based on a shared memory, an electronic device and a medium, which take the shared memory as a core communication carrier, construct a low-overhead data transmission basis, and efficiently implement a producer-consumer model in combination with the cyclic storage characteristic of an annular buffer area and the lock-free synchronization mechanism of atomic operation. Through partition design and atomic operation of the annular buffer area, continuity and exclusiveness of data access are guaranteed, and performance loss of a traditional lock mechanism is avoided; meanwhile, on the basis of the IPI interrupt capacity of the universal interrupt controller, cross-core synchronous notification is achieved through MPIDR accurate routing, interrupt wakeup waiting tasks are triggered through hardware, low-efficiency polling is replaced, and high-frequency data interaction scenes such as virtual network equipment are perfectly adapted. Compared with the prior art, the method has the advantages of efficient, safe and reliable network communication and the like.

The invention provides a method for achieving Kubernetes cluster service public network access through a P2P network and a gateway. The method is characterized in that the method is based on a Service Controller assembly, a gateway system, a P2P virtual network and a DNS system; comprising the following steps: S1, deploying a gateway system, and configuring domain names and extensive domain name certificates; s2, deploying a P2P system; s3, configuring a routing forwarding rule for the P2P node of the K8S cluster through the P2P server; s4, the resource change in the Kubernetes cluster is monitored in real time; s5, performing gateway configuration; according to the invention, through the P2P virtual network and the point-to-point distributed architecture, the risk of single point failure is eliminated, through end-to-end encryption and dynamic key negotiation, the risk of certificate leakage is prevented, and through a multi-level security mechanism, the overall security of the system is enhanced, the network forwarding level is reduced, and the service access delay is reduced.

The invention relates to the technical field of cloud computing, and discloses an elastic line scheduling method based on cloud computing, comprising the following steps: S1, establishing a virtual network architecture in a cloud computing environment; comprising the steps of virtualizing network resources, defining network topology and creating network virtual machine instances (VMs) and service instances; s2, real-time flow monitoring and demand prediction; comprising a flow monitoring system, a flow prediction model and prediction result feedback. S3, intelligent elastic resource scheduling; comprising a bandwidth allocation strategy, multi-path selection, a path switching mechanism and dynamic routing adjustment. S4, ensuring fairness and priority management; comprising priority management and fair resource allocation; s5, carrying out system self-optimization and learning; comprising continuous monitoring and feedback, a self-learning mechanism and performance evaluation and adjustment. According to the invention, through the elastic scheduling method, only a larger bandwidth needs to be used in the peak period actually, so that the waste of bandwidth resources and the cost expenditure are greatly reduced.

The invention relates to the technical field of network security, in particular to a source address verification method and device based on a virtual network, a controller and a medium, and the method comprises the steps: determining a nearest virtual node when a connection request of a client network is received, so as to control the client network to establish connection with the nearest virtual node, bind an input interface, and notify a source prefix; and allocating an original path to the client network based on the source prefix and the destination prefix, and when it is monitored that the client network sends a message from the source address to the destination address, obtaining all virtual nodes of the original path so as to verify the source address of the message based on all the virtual nodes, and when it is determined that the source address exists in the preset SAV verification table and is marked as legal and credible, the message is allowed to be forwarded based on the original path, so that the message is forwarded to the destination address. According to the invention, in a complex dynamic network environment, efficient and accurate source address verification is realized only through the source address of the message, so that source address forgery attacks are effectively defended.

In response to a programmatic request, configuration information representing a multi-network-segment gateway established on behalf of a customer is stored at a networking service. In response to another programmatic request, a communication session is established between a route signaling node of the gateway and a routing information source located at a customer premise. In response to additional programmatic input, the networking service stores an indication that the gateway is to be used to transfer packets between a cloud-side virtual network and a customer-side virtual network. The routing information exchanged in the session pertains to the cloud-side and customer-side virtual network, and is used to transfer data packets between the two virtual networks.

Various methods and processing systems for the effective management of network traffic and facilitating data forwarding within distributed computing environments. Network components may be configured to amalgamate the Border Gateway Protocol (BGP) with Source Network Address Translation (SNAT) or network address port translation (NAPT) technologies to facilitate dynamic notification of network address accessibility and use port index identifiers to augment the precision and resilience of routing. A distributed SNAT / NAPT virtual network function (VNF) or cloud-native network function (CNF) may collaborate with LEAF switches or server aggregation devices to refine data transmission via adaptable address mapping and forwarding and enhance network scalability and resilience.

Techniques are described for communications in an L2 virtual network. In an example, the L2 virtual network includes a plurality of L2 compute instances hosted on a set of host machines and a plurality of L2 virtual network interfaces and L2 virtual switches hosted on a set of network virtualization devices. An L2 virtual network interface emulates an L2 port of the L2 virtual network. Access control list (ACL) information applicable to the L2 port is sent to a network virtualization device that hosts the L2 virtual network interface.

The invention discloses a virtual network security-oriented communication dynamic analysis method, which relates to the technical field of network security, and comprises the following steps of: acquiring a communication time sequence; performing multi-scale decomposition on the communication sequential sequence to obtain a reference communication sequential sequence; calculating a slope and a propagation rate, and determining abnormal communication data based on the slope and the propagation rate; determining continuous abnormal communication data according to the periodic characteristics of the abnormal communication data and the propagation sequence of the abnormal communication data in network nodes, and determining an initial node and a propagation path of the continuous abnormal communication data by adopting reverse time sequence recursive analysis; inputting the starting node of the continuous abnormal communication data and the abnormal data characteristics of the propagation path into the LSTM neural network model, and predicting subsequent abnormal nodes; according to the method, high-precision identification of communication abnormity is facilitated, and the security detection capability and the response efficiency in a virtualized network environment are remarkably improved.

The invention discloses a virtual network bandwidth dynamic regulation and control method and system based on a user portrait, electronic equipment and a storage medium, and belongs to the technical field of computers. In order to solve the problem of poor user experience caused by acceleration of a virtual private network due to fixed bandwidth of the virtual network, the invention provides a dynamic regulation and control method for bandwidth of the virtual network based on a user portrait, which comprises the following steps of: collecting a user acceleration log, and constructing a behavior data set of a corresponding user; according to the behavior data set, user characteristics of the user in a recent first preset period are obtained, and the user characteristics comprise a user peak use time period and a corresponding bandwidth, a low peak use time period and a corresponding bandwidth, and a bandwidth connection duration; determining a user bandwidth prediction value of the next first preset period of the corresponding user according to the user characteristics; and / or, according to the behavior data set of all users of the same edge node and based on a random forest algorithm, constructing a bandwidth prediction model of the corresponding edge node; taking behavior data in the latest second preset period in the behavior data set of all users corresponding to the edge node as input, and obtaining output of the corresponding bandwidth prediction model as a node bandwidth prediction value of the next second preset period of the corresponding edge node; the first preset period is smaller than the second preset period. According to the invention, through deep analysis of user behaviors and demands, user portraits are constructed, bandwidth is intelligently allocated and adjusted, and the utilization efficiency of network resources and user experience can be improved.

A system for optimizing network traffic management is provided. The system includes a plurality of data processing units (DPUs), each assigned an identifier and configured to process network traffic for associated virtual network interface cards (vNICs). The system also includes a vNIC placement handler configured to receive media access control (MAC) address information from the plurality of DPUs and execute a relocation of at least two vNICs to be directly associated with one of the plurality of DPUs without through an inter-DPU physical network based on mapping the MAC address information to the identifier. The system further includes a communication framework integrated with the vNIC placement handler to enable transmission of MAC address information from the plurality of DPUs to the vNIC placement handler and offload network traffic from the vNICs to corresponding one or more of the plurality of DPUs.

Disclosed are a network card communication method and apparatus for an AI training platform, a device, and a medium. The method includes: building a switch network topology on the basis of a spine-leaf network, and configuring a preset number of virtual local area networks for each leaf switch in the switch network topology; virtualizing a physical network card to obtain virtual network cards, allocating the virtual network cards to corresponding job-containers according to a preset allocation rule, and allocating, to each virtual network card in the job-containers, different sub-networks corresponding to the virtual local area networks; and adding a corresponding sub-network communication policy routing rule to a pod where each job-container is located, whereby a virtual network card in the job-container sends training data to the remaining virtual network cards on a basis of the sub-network communication policy routing rule.

Systems and methods for connecting devices via a virtual global network are disclosed. In one embodiment the network system may comprise an endpoint device including a tunnel manager and a first virtual interface, an access point server including at least one tunnel listener and a second virtual interface. One or more tunnels are formed connecting the tunnel managers and tunnel listeners. The virtual interfaces provide a logical point of access to the one or more tunnels.

In general, techniques are described for performing network segmentation for container orchestration platforms. A network controller comprising a memory and processing circuitry may be configured to perform the techniques. The memory may be configured to store a request, conforming to a container orchestration platform, to configure a new pod of a plurality of pods with a primary interface to communicate on a virtual network to segment a network formed by the plurality of pods. The processing circuitry may be configured to configure, responsive to the request, the new pod with the primary interface to enable communications via the virtual network.