71 results about "Virtual network interface" patented technology

A container-based parallel computing system for executing high-performance computing (HPC) applications. The system leverages container technology to package the applications executed at the nodes in a cluster. To load and execute a job in the parallel computing system, containers are deployed in a cluster that include all the application resources and configuration information that the particular HPC application needs to execute. An event-driven batch scheduler may be used to dynamically allocate resources for executing multi-node jobs in the container-based parallel computing system, handling the coordination of resource allocation for the customer. The scheduler insures that jobs begin executing as fast as possible, and handles failure conditions such as partial scaling. Virtual network interfaces are attached to the containers that allow the containers to connect to and communicate with other containers in the cluster directly through the network interfaces of host machines using IP addresses provided by the virtual network interfaces.

Techniques are described for enforcing the flow of traffic between VNICs using ZPR policy. A method includes accessing a ZPR policy that specifies how a flow of traffic is enforced between endpoints within the one or more networks, wherein the policy includes one or more layer 4 rules and one or more layer 7 rules; identifying from the ZPR policy, a ZPR statement that specifies a connection between a first virtual network interface card (VNIC) and an endpoint; generating, based on the ZPR statement, one or more network security group (NSG) rules; and distributing at least one of the one or more NSG rules to a first NSG associated with the first VNIC.

Various embodiments of the present technology generally relate to a VnicSet operator system containing instructions to implement a process to manage a virtual network interface controller (Vnic) on an application pod of a containerized software environment, the Vnic being directly reachable from a network external to the containerized software environment. In an aspect, the process includes monitoring a plurality of Vnics created for deployment within the containerized software environment, each of the plurality of Vnics being associated with a respective application pod within the containerized software environment, determining one or more non-active Vnics within the plurality of Vnics, and rectifying the one or more non-active Vnics.

A method for configuring a communication network including a gateway adapted for connecting the communication network to a wide area communication network and connected to a plurality of nodes implementing an access point functionality is described. The nodes are coordinated in a centralised manner by a current master node selected from the plurality of nodes. The current master node obtains a virtual MAC address and an IP address associated with the virtual MAC address, the IP address being reserved for configuring network services. It next configures a virtual network interface from the IP address associated with the virtual MAC address.

A cloud computing resource system may receive an allocation request to connect the virtual machine to a customer network, wherein the virtual machine is executing while the allocation request is received and the allocation request includes network configuration information of the customer network. A cloud computing resource system may detect a discovery request from the virtual machine triggered by receipt of the allocation request, wherein the virtual machine remains executing during detection of the discovery request. A cloud computing resource system may update, responsive to detecting the discovery request from the virtual machine, a virtual network interface controller of the virtual machine with the network configuration information of the customer network, wherein the virtual machine remains executing during updating of the network configuration information.

Techniques are described for communications in an L2 virtual network. In an example, the L2 virtual network includes a plurality of L2 compute instances hosted on a set of host machines and a plurality of L2 virtual network interfaces and L2 virtual switches hosted on a set of network virtualization devices. An L2 virtual network interface emulates an L2 port of the L2 virtual network. Storm control information applicable to the L2 port is sent to a network virtualization device that hosts the L2 virtual network interface.

Systems and methods for virtual machine networking can include detecting, by a virtual machine (VM), a primary virtual Network Interface Controller (vNIC) configured with a first media access control (MAC) address assigned to the VM by a hypervisor running on a host computer system, and detecting a standby vNIC configured with a second MAC address. They can further include binding a software Network Interface Controller (NIC) configured with a third MAC address to the primary vNIC and the standby vNIC, and selecting a vNIC from among those two vNICs for use by the software NIC for communicating network data packets. Additionally, they can include assigning the third MAC address to the selected vNIC, and communicating network data packets through the software NIC using the third MAC address.

Various embodiments of the present technology generally relate to a VnicSet operator system containing instructions to implement a process to manage a virtual network interface controller (Vnic) on an application pod of a containerized software environment, the Vnic being directly reachable from a network external to the containerized software environment. In an aspect, the VnicSet operator may include a reconciler engine that determines one or more reconciliation actions for one or more Vnics. The reconciler engine may determine a first reconciliation action for a first worker node and acquire a node lock for the first worker node based on the first reconciliation action. Responsive to acquiring the node lock, the reconciler engine may transmit a first reconciliation action request to a cloud provider, where the cloud provider performs the first reconciliation action responsive to receiving the first reconciliation action request.

Embodiments of the present application provide a network vulnerability scanning system, method, electronic device and storage medium, the scanning system at least includes at least one local CPE located in the user intranet, cloud CPE located in the cloud and at least two scanners in communication connection with the cloud CPE, the cloud CPE is configured with a virtual network interface for network vulnerability scanning, the local CPE is configured with a network identifier for accessing the virtual network interface, and the vulnerability scanning tunnel for network vulnerability scanning is constructed between the local CPE and the cloud CPE through the cooperation between the network identifier and the virtual network interface.

This application discloses a network switching method, apparatus, electronic device, storage medium, and program, relating to the field of distributed storage technology. The method includes: collecting detection data from different layers in a distributed storage system, wherein the different layers include at least one of the following: physical layer, transport layer, and application layer; and the detection data includes at least one of the following: physical layer signal data, transport layer liveness detection data, and application layer verification data; determining the real-time operating status of the storage network based on the detection data; and determining whether to call a virtual network interface to switch the storage traffic of the storage network application to the front-end network based on the real-time operating status. This solves the problem in related technologies where data synchronization between different object storage units is impossible when the storage network is completely interrupted.

A method includes a manager gateway receiving a baseboard management controller configuration over a WebSocket connection that supports communication over a wide area network (WAN) between the controller in a device-side private network and a system management application that runs in a cloud-side private network within a public cloud computing system, wherein the manager gateway connects the cloud-side private network to the WAN. The manager gateway creates, in response to receiving the configuration for the controller, a virtual network interface controller (vNIC) having a cloud-side local network address and creating a record in a cloud-side DNS Service to map the controller to the vNIC. When the manager gateway receives a request message over the cloud-side private network from the application at the virtual network interface controller, the manager gateway relays the request message to the controller over the WebSocket connection that the cloud-side DNS Service maps to the vNIC.

A system can, for a cluster that comprises a group of nodes and that hosts a group of virtual machines, create and attach respective new virtual network interface cards to respective virtual machines of the group of virtual machines, wherein the respective new virtual network interface cards are assigned to the new external subnet. The system can create the new external subnet. The system can delete respective current virtual network interface cards from the respective virtual machines, wherein the respective current virtual network interface cards are assigned to the current external subnet. The system can acquire respective dynamic host control protocol leases for the respective virtual machines, wherein the respective dynamic host control protocol leases correspond to the new external subnet. The system can halt a connection from a computer on the new external subnet via the respective new virtual network interface cards.

The present disclosure relates to a controller and network configuration method. The controller comprises an orchestrator of a virtualized computing infrastructure, wherein the orchestrator is configured to: receive namespace specification data specifying a namespace, a first virtual network for the namespace, and a second virtual network for the namespace; receive virtual execution element specification data specifying a virtual execution element, wherein the virtual execution element specification data comprises a namespace object specifying a namespace of the virtual execution element; and send, based on the namespace specification data and the namespace object, one or more requests to a network controller of the virtualized computing infrastructure to create respective virtual network interfaces of the first virtual network and the second virtual network for the virtual execution element.

The embodiment of the application discloses a network management method and device, electronic equipment and computer readable storage medium, and belongs to the technical field of communication. The method comprises the following steps: creating a virtual network interface, and configuring the virtual network interface as a network interface of an upper application; determining a target physical network interface in a plurality of physical network interfaces based on interface information of the plurality of physical network interfaces; and transmitting a data stream of the upper application through the virtual network interface and the target physical network interface. In this way, by binding the upper application to the virtual network interface, the physical network is transparent to the upper application, the upper application does not need to be aware when the physical network switches, thereby ensuring the uninterruptedness of network connection, and meanwhile, the target physical network interface can be intelligently selected based on the interface information, data acceleration is realized without the need of application layer adaptation, and the user experience in a multi-network environment is significantly improved.

Systems and methods for implementing cloud network service management are disclosed. In some embodiments, a method may include operating a cloud native application (CnApp) custom operator in a containerized software environment to dynamically manage cloud native network services on a target application pod via a persistent network interface to an external network. The method may include obtaining first resource definition data for a first custom resource to define attributes of a resource bundle for implementing a cloud native network service, and creating the first custom resource based on the first resource definition data, including initializing a target application pod. The method may include generating second resource definition data derived from the first resource definition data to define attributes of a virtual network interface to be associated with a target application pod, and applying the second resource definition data to initialize creation of a second custom resource.

A cloud computing resource system may receive an allocation request to connect the virtual machine to a customer network, wherein the virtual machine is executing while the allocation request is received and the allocation request includes network configuration information of the customer network. A cloud computing resource system may detect a discovery request from the virtual machine triggered by receipt of the allocation request, wherein the virtual machine remains executing during detection of the discovery request. A cloud computing resource system may update, responsive to detecting the discovery request from the virtual machine, a virtual network interface controller of the virtual machine with the network configuration information of the customer network, wherein the virtual machine remains executing during updating of the network configuration information.

The application relates to a power supply control method and device of a dual-node server, computer equipment and a medium. The method comprises the following steps: receiving a power supply control request directed to a target IP address through a target network interface; directing the power supply control request to a target virtual network interface bound to the target IP address, and sending the power supply control request to a target network namespace where the target virtual network interface is located through the target virtual network interface; determining a target node identifier and a target operation type related to the power supply control request in the target network namespace; generating a power supply control instruction according to the target node identifier and the target operation type; and sending the power supply control instruction to a target node corresponding to the target node identifier through a data interface corresponding to the target node identifier, so as to control the target node to execute a power supply control operation corresponding to the power supply control instruction. The method can reduce material costs, make deployment operations simple, and improve safety.

The application discloses a transparent detection method and device of network connectivity, electronic equipment and a storage medium, and the method comprises the steps that a source virtual network interface is created; a message sending instruction is received; a data packet is constructed based on the message sending instruction; and the data packet is forwarded to a network interface of a source device through the source virtual network interface. A source node detection agent unit forwards the data packet to the network interface of the source device through the source virtual network interface, the data packet is sent to a network interface of a destination device through the network interface of the source device, a destination node detection agent unit listens to the data packet received by the destination device through a created destination virtual network interface and feeds back a receiving result, the sending and receiving operations of the data packet do not need to enter the device, the working state of the device itself does not affect the sending process of the data packet, the detection result is not affected by the network configuration and shutdown state of the device, the detection rate is improved, and the privacy of user data is ensured.

Systems and methods for implementing cloud-based network functions are disclosed. In some embodiments, a method may include operating a custom operator in a containerized software environment, such as Kubernetes, to manage a virtual network interface controller (Vic) on an application pod, the Vic being directly accessible from a network external to the containerized software environment. The method may include identifying an application pod to which a Vnic is to be added, determining a worker node in a containerized software environment on which the application pod is running, creating the Vnic on the worker node, and executing a job on the worker node to inject the Vnic into the application pod.

Embodiments of the present disclosure relate to routing table selection based on alternative routing indicators. In some examples, a computing device includes a virtual computing entity and a virtual network interface between the virtual computing entity and a network external to the computing device. The computing device stores a first routing table for routing packets addressed to the virtual network interface, and a second routing table for routing packets addressed to another interface in the computing device that is different from the virtual network interface. Based on the packet satisfying the packet filter rule, the computing device associates the packet with an alternative routing indicator of the IP flow specifying that IP subnet conflicts between the IP subnet of the virtual network interface and the IP subnet of another entity are resolved using the first routing table instead of the second routing table.

This application discloses a traffic processing method, device, and storage medium based on a virtual network interface card (NIC), relating to the field of network traffic processing technology. The method includes: capturing raw data packets from a traffic source device and transmitting the raw data packets to a traffic processing node via a preset transmission protocol; performing at least one processing operation on the raw data packets at the traffic processing node to obtain processed standardized Layer 2 data packets, including protocol adaptation, data packet decryption, data packet modification, and traffic filtering; determining the target virtual NIC corresponding to the standardized Layer 2 data packets and writing the standardized Layer 2 data packets to the target virtual NIC; connecting the acquisition interface of a preset analysis tool to the target virtual NIC, and performing analysis operations on the standardized Layer 2 data packets through the preset analysis tool to obtain corresponding data analysis results. This solves the technical problem of poor compatibility in existing traffic analysis and processing methods, and improves the flexibility of traffic processing.

A network communication system includes a first communication device and a second communication device. The first communication device includes a processor and a first network interface controller. The processor operates multiple virtual machines. The first network interface controller simulates a virtual network interface having a virtual network address. The first network interface controller includes a buffer for temporally storing a packet to be transmitted to the virtual machine. In response to that an available space in the buffer being insufficient, the first network interface controller generates and transmits a pause frame. The first network interface controller records the virtual network address in a source address column in the pause frame. When a second network interface controller of the second communication device receives the pause frame, the second network interface controller suspends a traffic flow to be transmitted to the virtual network address.

A method includes a manager gateway receiving a baseboard management controller configuration over a WebSocket connection that supports communication over a wide area network (WAN) between the controller in a device-side private network and a system management application that runs in a cloud-side private network within a public cloud computing system, wherein the manager gateway connects the cloud-side private network to the WAN. The manager gateway creates, in response to receiving the configuration for the controller, a virtual network interface controller (vNIC) having a cloud-side local network address and creating a record in a cloud-side DNS Service to map the controller to the vNIC. When the manager gateway receives a request message over the cloud-side private network from the application at the virtual network interface controller, the manager gateway relays the request message to the controller over the WebSocket connection that the cloud-side DNS Service maps to the vNIC.

A system and method for directing network traffic in a client device based on a domain catalog. The method includes generating a virtual network interface having a namespace with a plurality of names, wherein a first name of the namespace is assigned to a client device; assigning a second name of the namespace to a resource accessible to the client device through a zero trust network environment; configuring the client device to communicate only through the virtual network interface; and sending network traffic to the resource, in response to determining that the resource is allowed based on a domain catalog.

In some examples, a computer device contains a virtual processing unit (VPU) and a virtual network interface between the VPU and a network outside the computer device. The computer device stores a first routing table used for routing packets destined for the virtual network interface and a second routing table used for routing packets destined for a different interface, distinct from the virtual network interface in the computer device.Based on a packet that satisfies a packet filter rule, the computer device assigns an alternate route indicator for an IP flow to the packet, where the alternate route indicator specifies the use of the first routing table instead of the second routing table to address an IP subnet collision between an IP subnet of the virtual network interface and an IP subnet of another entity.

The invention discloses an access method of a baseboard management controller and electronic equipment, and relates to the technical field of servers, and the access method comprises the following steps: creating a first virtual network interface, and when a network address request from an operation and maintenance client is received through the first virtual network interface, sending the network address request to the operation and maintenance client; obtaining a to-be-matched identity label of the substrate management controller carried by the network address request; determining a target baseboard management controller from a plurality of baseboard management controllers based on the to-be-matched identity, determining a target network address from at least one network address segment in an idle state, and configuring the target network address to the first virtual network interface; and sending network configuration completion information to a second virtual network interface of the operation and maintenance client through the first virtual network interface so as to indicate the operation and maintenance client to access the target substrate management controller through a target network address in the network configuration completion information. According to the method and the device, the convenience and the efficiency of accessing the BMC can be improved when the BMC network is blocked.

The invention relates to the field of cloud computing, in particular to a network traffic isolation method and device, electronic equipment and a storage medium, and the method comprises the steps: creating a virtual network interface in an operating system kernel; configuring a system routing strategy, so that the external network flow of which the target address meets a preset condition is routed to the virtual network interface; receiving a network data packet through the virtual network interface; determining the identity of a user initiating the network data packet according to the attribute information of the network data packet; and when the user identity is valid and the target address of the network data packet accords with a preset forwarding condition corresponding to the user identity, forwarding the network data packet through an exclusive network channel established for the user identity. According to the method, the virtual network interface is combined with user identity recognition, universal flow isolation independent of specific operating system capacity is achieved, refined user-level management and control can be carried out on network flow in a multi-user environment, and high safety, universality and usability are achieved at the same time.

Technologies are disclosed for providing compatible network resources to program components executing in a virtualized environment. Virtual network adapters are created in a virtualized environment that correspond to network interfaces present on a host processing system. A virtual network interface is created in the virtualized environment and exposed to program components executing in the virtualized environment. Network packets are routed between the program components executing in the virtualized environment, the virtual network interface, the active virtual network adapter, and the network interface on the host processing system corresponding to the active virtual network adapter. Network control messages generated by program components executing in a virtualized environment are intercepted and forwarded to a host processing system for processing.

Techniques are described for communications in an L2 virtual network. In an example, the L2 virtual network includes a plurality of L2 compute instances hosted on a set of host machines and a plurality of L2 virtual network interfaces and L2 virtual switches hosted on a set of network virtualization devices. An L2 virtual network interface emulates an L2 port of the L2 virtual network. Access control list (ACL) information applicable to the L2 port is sent to a network virtualization device that hosts the L2 virtual network interface.

The invention discloses an embedded Ethernet port expansion method based on a VLAN (Virtual Local Area Network) and a switch chip, which comprises the following steps of: physically connecting a unique physical Ethernet interface of a main control unit with a convergence port of a two-layer switch chip, and connecting other ports of the switch chip as expansion interfaces to an external client; the main control unit issues a configuration instruction by simulating an SMI protocol through GPIO, sets a convergence port to be in a Trunk mode, sets an expansion interface to be in an Access mode, and allocates an independent VLAN identifier; and creating a virtual network interface in the main control unit protocol stack and binding the virtual network interface with the VLAN. During communication, the main control unit receives and transmits a data frame with a VLAN label, and the exchange chip forwards data between the convergence port and the corresponding expansion interface according to the label and automatically completes adding and stripping of the label. According to the invention, hardware cost, size and power consumption can be effectively reduced, MCU resources are saved, and high-performance expansion and data isolation of multiple network ports are realized.