42 results about "Virtual network interface" patented technology

A container-based parallel computing system for executing high-performance computing (HPC) applications. The system leverages container technology to package the applications executed at the nodes in a cluster. To load and execute a job in the parallel computing system, containers are deployed in a cluster that include all the application resources and configuration information that the particular HPC application needs to execute. An event-driven batch scheduler may be used to dynamically allocate resources for executing multi-node jobs in the container-based parallel computing system, handling the coordination of resource allocation for the customer. The scheduler insures that jobs begin executing as fast as possible, and handles failure conditions such as partial scaling. Virtual network interfaces are attached to the containers that allow the containers to connect to and communicate with other containers in the cluster directly through the network interfaces of host machines using IP addresses provided by the virtual network interfaces.

Techniques are described for enforcing the flow of traffic between VNICs using ZPR policy. A method includes accessing a ZPR policy that specifies how a flow of traffic is enforced between endpoints within the one or more networks, wherein the policy includes one or more layer 4 rules and one or more layer 7 rules; identifying from the ZPR policy, a ZPR statement that specifies a connection between a first virtual network interface card (VNIC) and an endpoint; generating, based on the ZPR statement, one or more network security group (NSG) rules; and distributing at least one of the one or more NSG rules to a first NSG associated with the first VNIC.

Techniques are described for communications in an L2 virtual network. In an example, the L2 virtual network includes a plurality of L2 compute instances hosted on a set of host machines and a plurality of L2 virtual network interfaces and L2 virtual switches hosted on a set of network virtualization devices. An L2 virtual network interface emulates an L2 port of the L2 virtual network. Storm control information applicable to the L2 port is sent to a network virtualization device that hosts the L2 virtual network interface.

Various embodiments of the present technology generally relate to a VnicSet operator system containing instructions to implement a process to manage a virtual network interface controller (Vnic) on an application pod of a containerized software environment, the Vnic being directly reachable from a network external to the containerized software environment. In an aspect, the VnicSet operator may include a reconciler engine that determines one or more reconciliation actions for one or more Vnics. The reconciler engine may determine a first reconciliation action for a first worker node and acquire a node lock for the first worker node based on the first reconciliation action. Responsive to acquiring the node lock, the reconciler engine may transmit a first reconciliation action request to a cloud provider, where the cloud provider performs the first reconciliation action responsive to receiving the first reconciliation action request.

This application discloses a network switching method, apparatus, electronic device, storage medium, and program, relating to the field of distributed storage technology. The method includes: collecting detection data from different layers in a distributed storage system, wherein the different layers include at least one of the following: physical layer, transport layer, and application layer; and the detection data includes at least one of the following: physical layer signal data, transport layer liveness detection data, and application layer verification data; determining the real-time operating status of the storage network based on the detection data; and determining whether to call a virtual network interface to switch the storage traffic of the storage network application to the front-end network based on the real-time operating status. This solves the problem in related technologies where data synchronization between different object storage units is impossible when the storage network is completely interrupted.

A system can, for a cluster that comprises a group of nodes and that hosts a group of virtual machines, create and attach respective new virtual network interface cards to respective virtual machines of the group of virtual machines, wherein the respective new virtual network interface cards are assigned to the new external subnet. The system can create the new external subnet. The system can delete respective current virtual network interface cards from the respective virtual machines, wherein the respective current virtual network interface cards are assigned to the current external subnet. The system can acquire respective dynamic host control protocol leases for the respective virtual machines, wherein the respective dynamic host control protocol leases correspond to the new external subnet. The system can halt a connection from a computer on the new external subnet via the respective new virtual network interface cards.

The present disclosure relates to a controller and network configuration method. The controller comprises an orchestrator of a virtualized computing infrastructure, wherein the orchestrator is configured to: receive namespace specification data specifying a namespace, a first virtual network for the namespace, and a second virtual network for the namespace; receive virtual execution element specification data specifying a virtual execution element, wherein the virtual execution element specification data comprises a namespace object specifying a namespace of the virtual execution element; and send, based on the namespace specification data and the namespace object, one or more requests to a network controller of the virtualized computing infrastructure to create respective virtual network interfaces of the first virtual network and the second virtual network for the virtual execution element.

The embodiment of the application discloses a network management method and device, electronic equipment and computer readable storage medium, and belongs to the technical field of communication. The method comprises the following steps: creating a virtual network interface, and configuring the virtual network interface as a network interface of an upper application; determining a target physical network interface in a plurality of physical network interfaces based on interface information of the plurality of physical network interfaces; and transmitting a data stream of the upper application through the virtual network interface and the target physical network interface. In this way, by binding the upper application to the virtual network interface, the physical network is transparent to the upper application, the upper application does not need to be aware when the physical network switches, thereby ensuring the uninterruptedness of network connection, and meanwhile, the target physical network interface can be intelligently selected based on the interface information, data acceleration is realized without the need of application layer adaptation, and the user experience in a multi-network environment is significantly improved.

Systems and methods for implementing cloud network service management are disclosed. In some embodiments, a method may include operating a cloud native application (CnApp) custom operator in a containerized software environment to dynamically manage cloud native network services on a target application pod via a persistent network interface to an external network. The method may include obtaining first resource definition data for a first custom resource to define attributes of a resource bundle for implementing a cloud native network service, and creating the first custom resource based on the first resource definition data, including initializing a target application pod. The method may include generating second resource definition data derived from the first resource definition data to define attributes of a virtual network interface to be associated with a target application pod, and applying the second resource definition data to initialize creation of a second custom resource.

Systems and methods for implementing cloud-based network functions are disclosed. In some embodiments, a method may include operating a custom operator in a containerized software environment, such as Kubernetes, to manage a virtual network interface controller (Vic) on an application pod, the Vic being directly accessible from a network external to the containerized software environment. The method may include identifying an application pod to which a Vnic is to be added, determining a worker node in a containerized software environment on which the application pod is running, creating the Vnic on the worker node, and executing a job on the worker node to inject the Vnic into the application pod.

Embodiments of the present disclosure relate to routing table selection based on alternative routing indicators. In some examples, a computing device includes a virtual computing entity and a virtual network interface between the virtual computing entity and a network external to the computing device. The computing device stores a first routing table for routing packets addressed to the virtual network interface, and a second routing table for routing packets addressed to another interface in the computing device that is different from the virtual network interface. Based on the packet satisfying the packet filter rule, the computing device associates the packet with an alternative routing indicator of the IP flow specifying that IP subnet conflicts between the IP subnet of the virtual network interface and the IP subnet of another entity are resolved using the first routing table instead of the second routing table.

This application discloses a traffic processing method, device, and storage medium based on a virtual network interface card (NIC), relating to the field of network traffic processing technology. The method includes: capturing raw data packets from a traffic source device and transmitting the raw data packets to a traffic processing node via a preset transmission protocol; performing at least one processing operation on the raw data packets at the traffic processing node to obtain processed standardized Layer 2 data packets, including protocol adaptation, data packet decryption, data packet modification, and traffic filtering; determining the target virtual NIC corresponding to the standardized Layer 2 data packets and writing the standardized Layer 2 data packets to the target virtual NIC; connecting the acquisition interface of a preset analysis tool to the target virtual NIC, and performing analysis operations on the standardized Layer 2 data packets through the preset analysis tool to obtain corresponding data analysis results. This solves the technical problem of poor compatibility in existing traffic analysis and processing methods, and improves the flexibility of traffic processing.

A system and method for directing network traffic in a client device based on a domain catalog. The method includes generating a virtual network interface having a namespace with a plurality of names, wherein a first name of the namespace is assigned to a client device; assigning a second name of the namespace to a resource accessible to the client device through a zero trust network environment; configuring the client device to communicate only through the virtual network interface; and sending network traffic to the resource, in response to determining that the resource is allowed based on a domain catalog.

In some examples, a computer device contains a virtual processing unit (VPU) and a virtual network interface between the VPU and a network outside the computer device. The computer device stores a first routing table used for routing packets destined for the virtual network interface and a second routing table used for routing packets destined for a different interface, distinct from the virtual network interface in the computer device.Based on a packet that satisfies a packet filter rule, the computer device assigns an alternate route indicator for an IP flow to the packet, where the alternate route indicator specifies the use of the first routing table instead of the second routing table to address an IP subnet collision between an IP subnet of the virtual network interface and an IP subnet of another entity.

The invention discloses an access method of a baseboard management controller and electronic equipment, and relates to the technical field of servers, and the access method comprises the following steps: creating a first virtual network interface, and when a network address request from an operation and maintenance client is received through the first virtual network interface, sending the network address request to the operation and maintenance client; obtaining a to-be-matched identity label of the substrate management controller carried by the network address request; determining a target baseboard management controller from a plurality of baseboard management controllers based on the to-be-matched identity, determining a target network address from at least one network address segment in an idle state, and configuring the target network address to the first virtual network interface; and sending network configuration completion information to a second virtual network interface of the operation and maintenance client through the first virtual network interface so as to indicate the operation and maintenance client to access the target substrate management controller through a target network address in the network configuration completion information. According to the method and the device, the convenience and the efficiency of accessing the BMC can be improved when the BMC network is blocked.

The invention relates to the field of cloud computing, in particular to a network traffic isolation method and device, electronic equipment and a storage medium, and the method comprises the steps: creating a virtual network interface in an operating system kernel; configuring a system routing strategy, so that the external network flow of which the target address meets a preset condition is routed to the virtual network interface; receiving a network data packet through the virtual network interface; determining the identity of a user initiating the network data packet according to the attribute information of the network data packet; and when the user identity is valid and the target address of the network data packet accords with a preset forwarding condition corresponding to the user identity, forwarding the network data packet through an exclusive network channel established for the user identity. According to the method, the virtual network interface is combined with user identity recognition, universal flow isolation independent of specific operating system capacity is achieved, refined user-level management and control can be carried out on network flow in a multi-user environment, and high safety, universality and usability are achieved at the same time.

The invention discloses an embedded Ethernet port expansion method based on a VLAN (Virtual Local Area Network) and a switch chip, which comprises the following steps of: physically connecting a unique physical Ethernet interface of a main control unit with a convergence port of a two-layer switch chip, and connecting other ports of the switch chip as expansion interfaces to an external client; the main control unit issues a configuration instruction by simulating an SMI protocol through GPIO, sets a convergence port to be in a Trunk mode, sets an expansion interface to be in an Access mode, and allocates an independent VLAN identifier; and creating a virtual network interface in the main control unit protocol stack and binding the virtual network interface with the VLAN. During communication, the main control unit receives and transmits a data frame with a VLAN label, and the exchange chip forwards data between the convergence port and the corresponding expansion interface according to the label and automatically completes adding and stripping of the label. According to the invention, hardware cost, size and power consumption can be effectively reduced, MCU resources are saved, and high-performance expansion and data isolation of multiple network ports are realized.

In some implementations, a cloud computing system may deploy a virtual server to execute an application associated with an application licensor system. The cloud computing system may identify a virtual network interface that corresponds to the virtual server. The cloud computing system may associate a key received from the application licensor system to the virtual network interface to allow the application to be executed based on the virtual network interface. The cloud computing system may associate the virtual server and the virtual network interface. The cloud computing system may execute the application on the virtual server based on the key that is associated with the virtual network interface and based on associating the virtual server and the virtual network interface.

In some implementations, a cloud computing system may deploy a virtual server to execute an application associated with an application licensor system. The cloud computing system may identify a virtual network interface that corresponds to the virtual server. The cloud computing system may associate a key received from the application licensor system to the virtual network interface to allow the application to be executed based on the virtual network interface. The cloud computing system may associate the virtual server and the virtual network interface. The cloud computing system may execute the application on the virtual server based on the key that is associated with the virtual network interface and based on associating the virtual server and the virtual network interface.

In an embodiment, a system for routing vehicle network traffic to external networks includes a first computer in a vehicle and a second computer in the vehicle. The first computer is operable to receive network traffic related to a software application executing in the vehicle, determine a category for the network traffic based on a traffic categorization policy, determine a virtual network port of a virtual network interface for the determined category, and transmit the network traffic, via the determined virtual network port, over an internal network connection in the vehicle. The second computer is communicably coupled to the first computer via the internal network connection and is operable to receive the network traffic, via the virtual network port, over the internal network connection, and route the network traffic to an external network based on the virtual network port.

In one embodiment, a system for forwarding vehicle network traffic to external networks includes a first computer and a second computer located in the vehicle. The first computer is capable of receiving network traffic associated with a software application running in the vehicle, determining a category for the network traffic based on a traffic categorization policy, identifying a virtual network port of a virtual network interface for the identified category, and forwarding the network traffic, via the identified virtual network port, over an internal network connection within the vehicle.The second computer is connected to the first computer via the internal network connection for data transmission purposes and is operational to receive network traffic via the virtual network port and to forward network traffic to an external network based on the virtual network port.

This application discloses a network sharing method and a display device. The method is based on a USB master-slave hardware connection. After device information verification and matching, the first virtual network interface is enabled, which breaks through the technical bottleneck of traditional USB master-slave technology, which can only perform basic data transmission and cannot build network links. At the same time, the interface is set as a gateway and the second system is assigned an IP address in the same network segment through the DHCP protocol. A dedicated network link is built based on the USB physical link, realizing the collaborative networking of multiple display device systems based on a single USB interface, as well as the network collaborative sharing between multiple systems.

The invention relates to virtual network interface connections. A mobile device receives a message from a vehicle computing platform via a remote procedure communication (RPC), updates a source address of the message to indicate the mobile device, sends the message to a destination address of the message, receives a response message from the destination, updates a destination address of the response message to indicate the vehicle computing platform, and sends the response message to the vehicle computing platform via the RPC. For a request received from a vehicle application for a network protocol not supported by the mobile device, the computing platform constructs a remote procedure call (RPC) message by a virtual network interface application and sends the RPC message to the mobile device to cause the mobile device to update a source address of the request to indicate the mobile device and send the request to a destination address of the request.

A system for optimizing network traffic management is provided. The system includes a plurality of data processing units (DPUs), each assigned an identifier and configured to process network traffic for associated virtual network interface cards (vNICs). The system also includes a vNIC placement handler configured to receive media access control (MAC) address information from the plurality of DPUs and execute a relocation of at least two vNICs to be directly associated with one of the plurality of DPUs without through an inter-DPU physical network based on mapping the MAC address information to the identifier. The system further includes a communication framework integrated with the vNIC placement handler to enable transmission of MAC address information from the plurality of DPUs to the vNIC placement handler and offload network traffic from the vNICs to corresponding one or more of the plurality of DPUs.

A zero trust cloud environment provides access to a secure network, and secure network applications. The zero trust cloud environment performs authentication of a user account, and upon successful completion initiates a secure network application, such as an SSH session to a server in a secure network. The server is instructed to generate an isolated network namespace through which a virtual network interface is bridged to the default network namespace. A firewall of the default network namespace does not permit network traffic from the virtual network interface to pass if it is directed to an address of the secure network.

The invention discloses a data transmission method, a network audio device, a data transmission system, an electronic device and a storage medium, and the method comprises the steps: creating virtual network interfaces based on physical network interfaces, and respectively configuring the physical network interfaces and the virtual network interfaces to form at least N + 1 data transmission channels; when the data to be sent are obtained from the application module, marking processing is carried out on the corresponding data to be sent according to a data transmission channel used when the data to be sent is transmitted, and the data transmission channel used when the data to be sent is transmitted is specified by the application module; and sending the marked data to be sent to the target equipment through the corresponding data transmission channel. According to the invention, two different data transmission channels are formed. The data transmission between the two different data transmission channels is mutually independent, so that the audio data is not interfered and influenced by other types of data during transmission, and the effects of improving the forwarding efficiency and reducing the delay are realized.

The application provides a virtual machine management method and a virtualization system. The method comprises the following steps: when a cloud base platform in the virtualization system receives a virtual machine creation request, the cloud base platform determines target tenant information of a target virtual machine indicated by the virtual machine creation request, and determines a target host from at least one host based on the target tenant information; the cloud base platform allocates a target VLAN identifier to the target virtual machine, and creates a target VLAN sub-interface on a physical network card of the target host based on the target VLAN identifier; the cloud base platform creates a target virtual network interface on the target VLAN sub-interface, so that a data packet sent by the target virtual network interface supports carrying a VLAN label of the target VLAN sub-interface; and the cloud base platform creates the target virtual machine on the target host through the target virtual network interface, so that the target virtual network interface is bound to the target virtual machine. The embodiment of the application can conveniently create a virtual machine, and effectively reduces the complexity of network management.

A method includes a manager gateway receiving a baseboard management controller configuration over a WebSocket connection that supports communication over a wide area network (WAN) between the controller in a device-side private network and a system management application that runs in a cloud-side private network within a public cloud computing system, wherein the manager gateway connects the cloud-side private network to the WAN. The manager gateway creates, in response to receiving the configuration for the controller, a virtual network interface controller (vNIC) having a cloud-side local network address and creating a record in a cloud-side DNS Service to map the controller to the vNIC. When the manager gateway receives a request message over the cloud-side private network from the application at the virtual network interface controller, the manager gateway relays the request message to the controller over the WebSocket connection that the cloud-side DNS Service maps to the vNIC.

The present technology pertains to receiving, by a multi-tenanted cloud-native headend, network traffic from a source that is directed to a destination within a network of a first tenant, where the network traffic is routed using BGP over a multi-tenanted BGP network, where the multi-tenanted BGP network utilizes route isolation to isolate the network of the first tenant from networks of other tenants making use of the multi-tenanted BGP network, mapping the received network traffic based on at least a source IP, source port, and virtual network interface (VNI) to a port associated with the network of the first tenant over the isolated BGP route, where the mapping is a stateful mapping, where the mapping is also potentially based on other information associated with the network traffic, and directing the received network traffic to a local address in the network of the first tenant.

A method includes a manager gateway receiving a baseboard management controller configuration over a WebSocket connection that supports communication over a wide area network (WAN) between the controller in a device-side private network and a system management application that runs in a cloud-side private network within a public cloud computing system, wherein the manager gateway connects the cloud-side private network to the WAN. The manager gateway creates, in response to receiving the configuration for the controller, a virtual network interface controller (vNIC) having a cloud-side local network address and creating a record in a cloud-side DNS Service to map the controller to the vNIC. When the manager gateway receives a request message over the cloud-side private network from the application at the virtual network interface controller, the manager gateway relays the request message to the controller over the WebSocket connection that the cloud-side DNS Service maps to the vNIC.