89 results about "Virtual network interface" patented technology

A system for optimizing network traffic management is provided. The system includes a plurality of data processing units (DPUs), each assigned an identifier and configured to process network traffic for associated virtual network interface cards (vNICs). The system also includes a vNIC placement handler configured to receive media access control (MAC) address information from the plurality of DPUs and execute a relocation of at least two vNICs to be directly associated with one of the plurality of DPUs without through an inter-DPU physical network based on mapping the MAC address information to the identifier. The system further includes a communication framework integrated with the vNIC placement handler to enable transmission of MAC address information from the plurality of DPUs to the vNIC placement handler and offload network traffic from the vNICs to corresponding one or more of the plurality of DPUs.

The present technology pertains to receiving, by a multi-tenanted cloud-native headend, network traffic from a source that is directed to a destination within a network of a first tenant, where the network traffic is routed using BGP over a multi-tenanted BGP network, where the multi-tenanted BGP network utilizes route isolation to isolate the network of the first tenant from networks of other tenants making use of the multi-tenanted BGP network, mapping the received network traffic based on at least a source IP, source port, and virtual network interface (VNI) to a port associated with the network of the first tenant over the isolated BGP route, where the mapping is a stateful mapping, where the mapping is also potentially based on other information associated with the network traffic, and directing the received network traffic to a local address in the network of the first tenant.

Techniques are disclosed for providing high performant packets processing capabilities in a virtualized cloud environment that enhance the scalability and high availability of the packets processing infrastructure. In certain embodiments disclosed herein, the VNICs functionality performed by network virtualization devices (NVDs) is offloaded from the NVDs to a fleet of computers, referred to as VNIC-as-a-Service System (or VNICaaS system). VNICaaS system is configured to provide Virtual Network Interface Cards (VNICs)-related functionality or service for multiple compute instances belonging to multiple tenants or customers of the CSPI. The VNICaaS system is capable of hosting multiple VNICs to process and transmit traffic in a distributed virtualized cloud networks environment. A single VNIC executed by the VNICaaS system can be used to process packets received from multiple compute instances.

A container-based parallel computing system for executing high-performance computing (HPC) applications. The system leverages container technology to package the applications executed at the nodes in a cluster. To load and execute a job in the parallel computing system, containers are deployed in a cluster that include all the application resources and configuration information that the particular HPC application needs to execute. An event-driven batch scheduler may be used to dynamically allocate resources for executing multi-node jobs in the container-based parallel computing system, handling the coordination of resource allocation for the customer. The scheduler insures that jobs begin executing as fast as possible, and handles failure conditions such as partial scaling. Virtual network interfaces are attached to the containers that allow the containers to connect to and communicate with other containers in the cluster directly through the network interfaces of host machines using IP addresses provided by the virtual network interfaces.

The invention relates to the technical field of computer networks, and discloses a communication method and device for a computing node, equipment and a storage medium. The method is applied to a computing node, the computing node comprises a virtual switch and a physical network card, a plurality of virtual network interfaces are created in the virtual switch, the plurality of virtual network interfaces are in one-to-one correspondence with a plurality of service networks, and the physical network card is connected with at least one other node. The method comprises the following steps: receiving a target data message of a target service network through a target virtual network interface of a virtual switch; and sending the target data message to a corresponding node in the at least one other node through the physical network card. A plurality of virtual network interfaces are created in the virtual switch, and one virtual network interface corresponds to one service network, so that deployment of a plurality of service networks in the virtual switch is realized, network multiplexing in the virtual switch is realized, and the problem that physical network card resources of computing nodes are insufficient is solved. And a plurality of virtualized networks cannot be provided.

Techniques are described for enforcing the flow of traffic between VNICs using ZPR policy. A method includes accessing a ZPR policy that specifies how a flow of traffic is enforced between endpoints within the one or more networks, wherein the policy includes one or more layer 4 rules and one or more layer 7 rules; identifying from the ZPR policy, a ZPR statement that specifies a connection between a first virtual network interface card (VNIC) and an endpoint; generating, based on the ZPR statement, one or more network security group (NSG) rules; and distributing at least one of the one or more NSG rules to a first NSG associated with the first VNIC.

Various embodiments of the present technology generally relate to a VnicSet operator system containing instructions to implement a process to manage a virtual network interface controller (Vnic) on an application pod of a containerized software environment, the Vnic being directly reachable from a network external to the containerized software environment. In an aspect, the process includes monitoring a plurality of Vnics created for deployment within the containerized software environment, each of the plurality of Vnics being associated with a respective application pod within the containerized software environment, determining one or more non-active Vnics within the plurality of Vnics, and rectifying the one or more non-active Vnics.

A method for configuring a communication network including a gateway adapted for connecting the communication network to a wide area communication network and connected to a plurality of nodes implementing an access point functionality is described. The nodes are coordinated in a centralised manner by a current master node selected from the plurality of nodes. The current master node obtains a virtual MAC address and an IP address associated with the virtual MAC address, the IP address being reserved for configuring network services. It next configures a virtual network interface from the IP address associated with the virtual MAC address.

A cloud computing resource system may receive an allocation request to connect the virtual machine to a customer network, wherein the virtual machine is executing while the allocation request is received and the allocation request includes network configuration information of the customer network. A cloud computing resource system may detect a discovery request from the virtual machine triggered by receipt of the allocation request, wherein the virtual machine remains executing during detection of the discovery request. A cloud computing resource system may update, responsive to detecting the discovery request from the virtual machine, a virtual network interface controller of the virtual machine with the network configuration information of the customer network, wherein the virtual machine remains executing during updating of the network configuration information.

Techniques are described for communications in an L2 virtual network. In an example, the L2 virtual network includes a plurality of L2 compute instances hosted on a set of host machines and a plurality of L2 virtual network interfaces and L2 virtual switches hosted on a set of network virtualization devices. An L2 virtual network interface emulates an L2 port of the L2 virtual network. Storm control information applicable to the L2 port is sent to a network virtualization device that hosts the L2 virtual network interface.

A distributed unit (DU) in a virtual radio access network (vRAN) of a wireless 5G (fifth generation) network is implemented using software-defined networking (SDN) technology on a single computer server that is physically co-located with a radio unit in a distributed RAN (D-RAN) architecture. An update agent facilitates versioning support through interoperations with different DU versions, v1 and v2, to prevent them from concurrently executing real-time processing threads on the server's processor which would cause malfunctions. DU v2 is initialized using non-real-time threads. The update agent blocks real-time processing thread generation by DU v2 after initialization is complete. The update agent sets DU v1 processing threads to non-real-time and unblocks DU v2 to migrate data traffic between the versions. A layer 2 switch provides duplicated data packets to virtual network interface cards that are implemented for the respective DU versions and which share a common MAC (medium access control) address.

A virtual network interface is configured to receive packets of an application at a packet processing service. A first set of fast-path nodes of the service is assigned to execute packet rewriting rules on packets received via the virtual network interface. Based on analysis of metrics obtained from the set of fast-path nodes, a determination is made that a criterion for scaling up fast-path nodes has been met. A second set of fast-path nodes is assigned to execute packet rewriting rules on additional packets received via the interface, with the number of nodes included in the second set based on a statistic (indicated by the metrics) of the size of packets transmitted via the virtual network interface.

Systems and methods for virtual machine networking can include detecting, by a virtual machine (VM), a primary virtual Network Interface Controller (vNIC) configured with a first media access control (MAC) address assigned to the VM by a hypervisor running on a host computer system, and detecting a standby vNIC configured with a second MAC address. They can further include binding a software Network Interface Controller (NIC) configured with a third MAC address to the primary vNIC and the standby vNIC, and selecting a vNIC from among those two vNICs for use by the software NIC for communicating network data packets. Additionally, they can include assigning the third MAC address to the selected vNIC, and communicating network data packets through the software NIC using the third MAC address.

Various embodiments of the present technology generally relate to a VnicSet operator system containing instructions to implement a process to manage a virtual network interface controller (Vnic) on an application pod of a containerized software environment, the Vnic being directly reachable from a network external to the containerized software environment. In an aspect, the VnicSet operator may include a reconciler engine that determines one or more reconciliation actions for one or more Vnics. The reconciler engine may determine a first reconciliation action for a first worker node and acquire a node lock for the first worker node based on the first reconciliation action. Responsive to acquiring the node lock, the reconciler engine may transmit a first reconciliation action request to a cloud provider, where the cloud provider performs the first reconciliation action responsive to receiving the first reconciliation action request.

Embodiments of the present application provide a network vulnerability scanning system, method, electronic device and storage medium, the scanning system at least includes at least one local CPE located in the user intranet, cloud CPE located in the cloud and at least two scanners in communication connection with the cloud CPE, the cloud CPE is configured with a virtual network interface for network vulnerability scanning, the local CPE is configured with a network identifier for accessing the virtual network interface, and the vulnerability scanning tunnel for network vulnerability scanning is constructed between the local CPE and the cloud CPE through the cooperation between the network identifier and the virtual network interface.

This application discloses a network switching method, apparatus, electronic device, storage medium, and program, relating to the field of distributed storage technology. The method includes: collecting detection data from different layers in a distributed storage system, wherein the different layers include at least one of the following: physical layer, transport layer, and application layer; and the detection data includes at least one of the following: physical layer signal data, transport layer liveness detection data, and application layer verification data; determining the real-time operating status of the storage network based on the detection data; and determining whether to call a virtual network interface to switch the storage traffic of the storage network application to the front-end network based on the real-time operating status. This solves the problem in related technologies where data synchronization between different object storage units is impossible when the storage network is completely interrupted.

Technologies are disclosed for providing compatible network resources to program components executing in a virtualized environment. Virtual network adapters are created in a virtualized environment that correspond to network interfaces present on a host processing system. A virtual network interface is created in the virtualized environment and exposed to program components executing in the virtualized environment. Network packets are routed between the program components executing in the virtualized environment, the virtual network interface, the active virtual network adapter, and the network interface on the host processing system corresponding to the active virtual network adapter. Network control messages generated by program components executing in a virtualized environment are intercepted and forwarded to a host processing system for processing.

A method includes a manager gateway receiving a baseboard management controller configuration over a WebSocket connection that supports communication over a wide area network (WAN) between the controller in a device-side private network and a system management application that runs in a cloud-side private network within a public cloud computing system, wherein the manager gateway connects the cloud-side private network to the WAN. The manager gateway creates, in response to receiving the configuration for the controller, a virtual network interface controller (vNIC) having a cloud-side local network address and creating a record in a cloud-side DNS Service to map the controller to the vNIC. When the manager gateway receives a request message over the cloud-side private network from the application at the virtual network interface controller, the manager gateway relays the request message to the controller over the WebSocket connection that the cloud-side DNS Service maps to the vNIC.

A system can, for a cluster that comprises a group of nodes and that hosts a group of virtual machines, create and attach respective new virtual network interface cards to respective virtual machines of the group of virtual machines, wherein the respective new virtual network interface cards are assigned to the new external subnet. The system can create the new external subnet. The system can delete respective current virtual network interface cards from the respective virtual machines, wherein the respective current virtual network interface cards are assigned to the current external subnet. The system can acquire respective dynamic host control protocol leases for the respective virtual machines, wherein the respective dynamic host control protocol leases correspond to the new external subnet. The system can halt a connection from a computer on the new external subnet via the respective new virtual network interface cards.

The present disclosure relates to a controller and network configuration method. The controller comprises an orchestrator of a virtualized computing infrastructure, wherein the orchestrator is configured to: receive namespace specification data specifying a namespace, a first virtual network for the namespace, and a second virtual network for the namespace; receive virtual execution element specification data specifying a virtual execution element, wherein the virtual execution element specification data comprises a namespace object specifying a namespace of the virtual execution element; and send, based on the namespace specification data and the namespace object, one or more requests to a network controller of the virtualized computing infrastructure to create respective virtual network interfaces of the first virtual network and the second virtual network for the virtual execution element.

The embodiment of the application discloses a network management method and device, electronic equipment and computer readable storage medium, and belongs to the technical field of communication. The method comprises the following steps: creating a virtual network interface, and configuring the virtual network interface as a network interface of an upper application; determining a target physical network interface in a plurality of physical network interfaces based on interface information of the plurality of physical network interfaces; and transmitting a data stream of the upper application through the virtual network interface and the target physical network interface. In this way, by binding the upper application to the virtual network interface, the physical network is transparent to the upper application, the upper application does not need to be aware when the physical network switches, thereby ensuring the uninterruptedness of network connection, and meanwhile, the target physical network interface can be intelligently selected based on the interface information, data acceleration is realized without the need of application layer adaptation, and the user experience in a multi-network environment is significantly improved.

The invention discloses a network switching method and device, electronic equipment, a storage medium and a program, and relates to the technical field of distributed storage, and the method comprises the steps: collecting detection data of different hierarchies in a distributed storage system, the different hierarchies comprising at least one of a physical layer, a transmission layer and an application layer, the detection data comprises at least one of physical layer signal data, transmission layer detection data and application layer verification data; determining a real-time operation state of the storage network based on the detection data; and determining whether to call the virtual network interface to switch the storage flow of the storage network application to the front-end network according to the real-time running state. The problem that data synchronization cannot be carried out among different object storage units when a storage network is completely interrupted in the prior art is solved.

Systems and methods for implementing cloud network service management are disclosed. In some embodiments, a method may include operating a cloud native application (CnApp) custom operator in a containerized software environment to dynamically manage cloud native network services on a target application pod via a persistent network interface to an external network. The method may include obtaining first resource definition data for a first custom resource to define attributes of a resource bundle for implementing a cloud native network service, and creating the first custom resource based on the first resource definition data, including initializing a target application pod. The method may include generating second resource definition data derived from the first resource definition data to define attributes of a virtual network interface to be associated with a target application pod, and applying the second resource definition data to initialize creation of a second custom resource.

Some embodiments provide a method of forwarding data messages to a machine that executes on a host computer and has an associated virtual network interface controller (VNIC) also executing on the host computer. The method retrieves data messages from a queue associated with the VNIC and stores these data messages in a first set of buffer data stores associated with the VNIC. When the first buffer set reaches a threshold congestion level, the method stores data messages subsequently retrieved from the VNIC queue in a second set of buffer data stores associated with the VNIC. In some embodiments, a set of one or more processes executing on the machine retrieves the data messages stored in the buffer sets for processing by these processes or other processes.

A cloud computing resource system may receive an allocation request to connect the virtual machine to a customer network, wherein the virtual machine is executing while the allocation request is received and the allocation request includes network configuration information of the customer network. A cloud computing resource system may detect a discovery request from the virtual machine triggered by receipt of the allocation request, wherein the virtual machine remains executing during detection of the discovery request. A cloud computing resource system may update, responsive to detecting the discovery request from the virtual machine, a virtual network interface controller of the virtual machine with the network configuration information of the customer network, wherein the virtual machine remains executing during updating of the network configuration information.

The application relates to a power supply control method and device of a dual-node server, computer equipment and a medium. The method comprises the following steps: receiving a power supply control request directed to a target IP address through a target network interface; directing the power supply control request to a target virtual network interface bound to the target IP address, and sending the power supply control request to a target network namespace where the target virtual network interface is located through the target virtual network interface; determining a target node identifier and a target operation type related to the power supply control request in the target network namespace; generating a power supply control instruction according to the target node identifier and the target operation type; and sending the power supply control instruction to a target node corresponding to the target node identifier through a data interface corresponding to the target node identifier, so as to control the target node to execute a power supply control operation corresponding to the power supply control instruction. The method can reduce material costs, make deployment operations simple, and improve safety.

The application discloses a transparent detection method and device of network connectivity, electronic equipment and a storage medium, and the method comprises the steps that a source virtual network interface is created; a message sending instruction is received; a data packet is constructed based on the message sending instruction; and the data packet is forwarded to a network interface of a source device through the source virtual network interface. A source node detection agent unit forwards the data packet to the network interface of the source device through the source virtual network interface, the data packet is sent to a network interface of a destination device through the network interface of the source device, a destination node detection agent unit listens to the data packet received by the destination device through a created destination virtual network interface and feeds back a receiving result, the sending and receiving operations of the data packet do not need to enter the device, the working state of the device itself does not affect the sending process of the data packet, the detection result is not affected by the network configuration and shutdown state of the device, the detection rate is improved, and the privacy of user data is ensured.

The present application discloses a network management method, device, medium, and electronic device for a cluster system. The method includes: in the cluster system, selecting a node as a target node, and creating a target container deployment unit in the target node; selecting a network object in the network object list corresponding to the target container deployment unit as a target network object in turn; for each target network object, creating a first virtual network interface and a second virtual network interface; associating the first virtual network interface with the second virtual network interface to establish multiple network interfaces in the container deployment unit to achieve communication between container deployment units. The technical solution of the present application can establish multiple network interfaces in the container deployment unit and achieve communication between container deployment units. It can ensure the reliability of network communication and reduce the cost of migrating traditional applications.

Systems and methods for implementing cloud-based network functions are disclosed. In some embodiments, a method may include operating a custom operator in a containerized software environment, such as Kubernetes, to manage a virtual network interface controller (Vic) on an application pod, the Vic being directly accessible from a network external to the containerized software environment. The method may include identifying an application pod to which a Vnic is to be added, determining a worker node in a containerized software environment on which the application pod is running, creating the Vnic on the worker node, and executing a job on the worker node to inject the Vnic into the application pod.

Embodiments of the present disclosure relate to routing table selection based on alternative routing indicators. In some examples, a computing device includes a virtual computing entity and a virtual network interface between the virtual computing entity and a network external to the computing device. The computing device stores a first routing table for routing packets addressed to the virtual network interface, and a second routing table for routing packets addressed to another interface in the computing device that is different from the virtual network interface. Based on the packet satisfying the packet filter rule, the computing device associates the packet with an alternative routing indicator of the IP flow specifying that IP subnet conflicts between the IP subnet of the virtual network interface and the IP subnet of another entity are resolved using the first routing table instead of the second routing table.