113 results about "Virtual router" patented technology

In general, techniques are described for deploying and managing a virtual router having Data Plane Development Kit (DPDK) functionality to a computing device. In an example, a method includes creating, by a container orchestration platform executing on a computing device, a virtual router custom resource instance of a virtual router custom resource definition, the virtual router custom resource instance for a virtual router to execute on the computing device; based on configuration data for the virtual router custom resource instance, by the container orchestration platform, modifying the virtual router custom resource instance with the configuration data and deploying a first virtual computing instance comprising a virtual router configured according to the modified virtual router custom resource instance; and executing, by the computing device, the virtual router to process a packet.

The invention belongs to the technical field of communication transmission, and discloses a PLC networking data acquisition system and method based on an edge gateway, and the system comprises a dynamic virtual isolation module which is used for identifying and classifying different PLC devices through the deployment of an SDN controller and the adoption of a deep packet inspection technology, automatically distributing the different PLC devices to a virtual subnet, and obtaining a virtual IP; each virtual subnet isolates the PLC equipment with the same IP address through a virtual switch and a virtual router; recording the virtual IP and actual physical network port information of the PLC equipment through a mapping table, and establishing a network topology view; the multi-protocol analysis module is used for connecting the edge gateway and the PLC equipment based on a network topology view, carrying out protocol analysis by integrating a PLC communication protocol library and adopting FPGA hardware acceleration, and reading PLC networking data from the PLC equipment in real time; and the flexibility and the expandability of data acquisition can be improved.

Proposed herein at techniques for scalable network traffic steering in a multi-tenant network. In one aspect, a method includes receiving, at an ingress of a multi-tenant network, a data packet, the data packet including a Virtual Network Identifier (VNI) identifying a corresponding tenant for the data packet in the multi-tenant network, and determining, at the ingress, a corresponding cluster of routers for processing the data packet based on the VNI, wherein the corresponding cluster of routers is one of a plurality of clusters of routers in the multi-tenant network. The method further includes forwarding the data packet to a router in the corresponding cluster of routers for processing.

An example computing device includes a first containerized router and processing circuitry. The computing device includes a containerized virtual router configured to execute on the processing circuitry and configured to implement a data plane for the first containerized router. The computing device includes a containerized routing protocol process configured to execute on the processing circuitry and configured to implement a control plane for the first containerized router wherein the containerized routing protocol process is configured to execute a routing protocol. The first containerized router is configured to program a virtual private cloud (VPC) route table in a VPC gateway based on routing information received by the containerized routing protocol process via the routing protocol. The first containerized router is communicatively coupled to a second containerized router via a virtual router redundancy protocol (VRRP) session.

The invention relates to a computing device, a method for a computer network, and a computer readable storage medium. An example computing device includes a containerized router and processing circuitry. In one embodiment, a computing device includes a containerized virtual router configured to execute on a processing circuit and configured to implement a data plane for the containerized router. In one embodiment, a computing device includes a containerized routing protocol process configured to execute on a processing circuit and configured to implement a control plane for a containerized router, where the containerized routing protocol process is configured to execute a routing protocol. The computing device includes a process configured to execute on a processing circuit and configured to program a virtual private cloud (VPC) routing table in a VPC gateway based on routing information received by a containerized routing protocol process via a routing protocol.

An example computing device includes a containerized router and processing circuitry. The computing device includes a containerized virtual router configured to execute on the processing circuitry and configured to implement a data plane for the containerized router. The computing device includes a containerized routing protocol process configured to execute on the processing circuitry and configured to implement a control plane for the containerized router, wherein the containerized routing protocol process is configured to execute a routing protocol. The computing device includes a process configured to execute on the processing circuitry and configured to program a VPC route table in a virtual private cloud (VPC) gateway based on routing information received by the containerized routing protocol process via the routing protocol.

The invention discloses a virtual machine network connectivity test method and device, a medium and a product, relates to the technical field of cloud computing, and is applied to a detection service, the detection service is configured with a single preset detection network card, the preset detection network card is connected with a plurality of l2gateway ports, each l2gateway port corresponds to a virtual router, the IP address and the MAC address of each l2gateway port are the same, and the IP address and the MAC address of each virtual router are the same. Comprising the following steps: determining a target network label corresponding to a to-be-tested target virtual machine from a preset mapping relation table; packaging based on the target network label to obtain a detection message, and sending the detection message to a target l2gateway port matched with the label by using a preset detection network card; and determining a target virtual router matched with the target l2gateway port, so that the target l2gateway port forwards the detection message to a target virtual machine in the target virtual router to perform a network connectivity test.

In general, techniques are described for leveraging a configuration framework for an orchestration platform to configure software that implements a control plane for a containerized network router in a cloud-native SDN architecture. In an example, a method comprises receiving, by a server executing a containerized routing protocol process, configuration data generated from a Network Resource configuration object managed by a custom resource controller; configuring, by the server, the containerized routing protocol process with the configuration data; and programming, by the containerized routing protocol process, based on the configuration data generated from the Network Resource configuration object, a virtual router data plane to forward network traffic.

Various arrangements of a hybrid cellular network system are detailed herein. The system can include a cellular radio access network (RAN) comprising a plurality of base stations (BSs). Each BS can include an antenna, a physical router; a radio units (RU), and a distributed unit (DU). The system can include multiple pass-through edge data centers (P-EDCs). Each P-EDC is in communication with a different subset of BSs. The system can include an aggregation data center (ADC) in communication with the P-EDCs. The system can further include a breakout edge data center (EDC) executed at an EDC of a cloud computing platform, the B-EDC including a second transit gateway and a virtual router.

The invention provides a message processing method for a virtual router and the virtual router, and the method comprises the steps: setting an intrusion detection and defense engine in the virtual router, configuring a rule index field in a rule file of the intrusion detection and defense engine, and setting a rule mapping table in the intrusion detection and defense engine; redirecting the data message conforming to the specific destination IP to the preprocessing node in the routing stage; redirecting the data message matched with any one ACL rule and an ACL rule index number hit in the traversal process to an intrusion detection and defense engine through the preprocessing node; performing rule index field matching on the matching information through an intrusion detection and defense engine, calling a corresponding ACL rule in a rule mapping table according to the matched rule index field, and executing corresponding ACL strategy processing on the data message; and when it is determined that the ACL rule quotes the IPS rule base, the intrusion detection and defense engine executes corresponding IPS strategy processing on the data message according to the quoted IPS rule base.

An example computing device includes a containerized router and processing circuitry. The computing device includes a containerized virtual router configured to execute on the processing circuitry and configured to implement a data plane for the containerized router. The computing device includes a containerized routing protocol process configured to execute on the processing circuitry and configured to implement a control plane for the containerized router, wherein the containerized routing protocol process is configured to execute a routing protocol. The computing device includes a process configured to execute on the processing circuitry and configured to program a VPC route table in a virtual private cloud (VPC) gateway based on routing information received by the containerized routing protocol process via the routing protocol.

The invention particularly relates to a method and a system for realizing secure access based on an AI large model. The method for realizing security access based on the AI large model comprises the following steps: constructing an AI security large model, and creating a cloud host, a virtual router and a cloud firewall; detecting network flow data and task logs in real time, analyzing security risk data, obtaining service data, and detecting service security demand changes in real time; the AI security big model analyzes and reasones security risks and business security level requirements in real time, calls a cloud platform interface to dynamically adjust resources required by a cloud firewall, and calls a security control interface to intelligently adjust a security strategy; and training and optimizing the AI security big model in real time according to the detected new security risk and business data. According to the method and the system for realizing security access based on the AI large model, the security protection capability is improved, the security protection bottleneck is avoided, the reliability is improved, the complex and changeable service security requirements can be met, and the automatic security protection capability is realized.

In general, techniques are described for leveraging a configuration framework for an orchestration platform to configure software that implements a control plane for a containerized network router in a cloud-native SDN architecture. In an example, a method comprises receiving, by a server executing a containerized routing protocol process, configuration data generated from a Network Resource configuration object managed by a custom resource controller; configuring, by the server, the containerized routing protocol process with the configuration data; and programming, by the containerized routing protocol process, based on the configuration data generated from the Network Resource configuration object, a virtual router data plane to forward network traffic.

In general, this disclosure describes techniques for a containerized router operating within a cloud native orchestration framework. In an example, a computing device comprises processing circuitry; a containerized set of workloads; a containerized routing protocol process configured to execute on the processing circuitry and configured to receive routing information; a kernel network stack executing on the processing circuitry and configured to forward packets based on first routing information from the containerized routing protocol process; and a data plane development kit (DPDK)-based virtual router executing on processing circuitry and configured to forward traffic to and from the workloads based on second routing information from the containerized routing protocol process.

A mobile network operator may deploy a distributed network stack including, deploying a first cloud native function in a first public cloud and deploying a second cloud native function in a second public cloud. A system may provide a connected virtual private cloud. A system may deploy one or more virtual routers within the connected virtual private cloud. A system may connect the first public cloud and the second public cloud to the connected virtual private cloud using the one or more virtual routers in the connected virtual private cloud to form the overlay network. A system may transmit data traffic between the first cloud native function and the second cloud native function using the overlay network.

The embodiment of the invention relates to a containerized routing protocol process for a virtual private network. A computing device includes processing circuitry and a storage medium configured with instructions, where the processing circuitry has access rights to the storage medium and is configured to execute a containerized application; a virtual router; for an interface of the containerized application, enabling communication between the containerized application and the virtual router by the interface; a Container Networking Interface (CNI) plug-in configured to configure an interface with a route for the containerized application based on data generated from a specification for the containerized application and from a network attachment definition; and a containerized routing protocol process configured to advertise a route in a routing protocol message according to a routing protocol.

The present invention discloses a VPN network system based on quantum key technology, and relates to the field of network communication technology. When the NFVO receives a request to access an accessed node, it obtains the network topology between the access node and the accessed node, and sends the network topology, node configuration information, and VPN creation command as connection information to the first virtual management configuration module and the second virtual configuration management module, so that they configure the nodes according to the node configuration information, respectively, and establish a VPN channel according to the network topology and VPN creation command; the first virtual router and the second virtual router use the first QKD module and the second QKD module to generate quantum keys, respectively, and use the quantum keys to encrypt data communication through the VPN channel. The above system combines quantum key technology and VPN technology, improves the flexibility and adaptability of the management architecture of the encrypted transmission network system, and provides a feasible network architecture for realizing large-scale quantum encryption services.

To provide systems, methods, and devices for improved routing operations in a network computing environment.SOLUTION: An architecture 400 for host routed overlay includes a virtual customer edge router (virtual CE router), a plurality of host virtual machines, and a routed uplink from the virtual customer edge router to one or more of a plurality of leaf nodes L1 to L4. The architecture is such that the virtual customer edge router provides localized integrated routing and bridging (IRB) service for the plurality of host virtual machines of the host routed overlay.SELECTED DRAWING: Figure 4

The embodiment of the invention discloses a data processing method and device for a service function chain, equipment and a readable medium. The method comprises the following steps: acquiring a plurality of service nodes contained in the service function chain to be created, a data transmission sequence of the plurality of service nodes and a target address; according to the data transmission sequence, constructing a virtual router between each service node and the next service node of each service node; respectively configuring routing information corresponding to the target address in each service node and the virtual router according to the data transmission sequence so as to form a service function chain; wherein the configured routing information is used for indicating each service node to transmit the message to be sent to the target address to the virtual router, and the virtual router transmits the message to the next service node. According to the technical scheme, the deployment difficulty of the service function chain can be reduced.

The application provides a wireless network building method and device, equipment and storage medium. The method comprises the following steps: in response to receiving line access network physical connection fault information of a target intranet, determining a target wireless access terminal device which maintains connection with a user terminal in the target intranet, configuring a corresponding target virtual router for the device, obtaining first internet protocol (IP) information of the target wireless access terminal device, second IP information of the target virtual router and third IP information of a target line access device, sending the first IP information to the target virtual router, sending the second IP information to the target wireless access terminal device and the target line access device, and sending the third IP information to the target virtual router, so as to establish wireless network connection between the target wireless access terminal device and the target virtual router and between the target virtual router and the target line access device. The application can quickly build a wireless network when a physical connection fault occurs, and can ensure smooth network for users.

This application relates to isolated data interfaces for containers deployed to compute nodes. Generally, techniques are described for deploying a logically related group of one or more containers ("jars") that support the Data Plane Development Kit (DPDK) to support fast path packet communication over a data channel between a virtual router and a jar. In one example, a computing device includes a virtual router that includes processing circuitry and is configured to implement a virtual network in a computing infrastructure that includes the computing device to enable communication between virtual network endpoints connected via the virtual network. The computing device includes a jar that contains a containerized application, where the virtual router and the jar are configured to create a Unix domain socket using a file system resource that is accessible by the jar and by the virtual router and is not accessible by any other jar deployed to the computing device.

The embodiment of the invention relates to EVPN host routing bridging (HRB) and an EVPN cloud native data center. Techniques are described for an EVPN host routing bridge (HRB) and an EVPN cloud native data center with a host routing bridge (HRB). A host computing device of a data center includes one or more containerized user-level applications. The cloud native virtual router is configured to be dynamically deployed by a datacenter application orchestration engine and operable in a user space of the host computing device. The processing circuitry is configured to execute the containerized user-level application and the cloud native virtual router. The cloud native virtual router includes a containerized routing protocol process configured to operate as a control plane, and a data plane for the containerized router. The data plane is configured to operate an Ethernet virtual private network (EVPN) encapsulated / deencapsulated data path of the overlay network for communicating layer 2 (L2) network traffic of the containerized user application over a switching fabric of the data center.

The invention discloses a terminal test system and method based on a DL / T698 protocol. The system is composed of a master station platform, a to-be-tested terminal, a virtual electric meter, a virtual router and a data driver. The master station platform integrates a master station control module, a test case module, a configuration and control module, a communication management module and the like to realize test instruction initiation, parameter configuration, data interaction and result judgment; the virtual electric meter simulates a real electric energy meter to generate standardized data, the virtual route guarantees message transmission between the terminal and the communication connector, and the data driver provides a standard data model for result verification. The test method comprises a plurality of stages of pre-configuration and environment establishment, test case construction and data preparation, test step code conversion and assertion setting, test execution and result feedback and the like. According to the invention, the test efficiency can be greatly improved, the labor cost is reduced, and the test accuracy and reliability are improved.

An example computing device includes a first containerized router and processing circuitry. The computing device includes a containerized virtual router configured to execute on the processing circuitry and configured to implement a data plane for the first containerized router. The computing device includes a containerized routing protocol process configured to execute on the processing circuitry and configured to implement a control plane for the first containerized router wherein the containerized routing protocol process is configured to execute a routing protocol. The first containerized router is configured to program a virtual private cloud (VPC) route table in a VPC gateway based on routing information received by the containerized routing protocol process via the routing protocol. The first containerized router is communicatively coupled to a second containerized router via a virtual router redundancy protocol (VRRP) session.

Respective implementations facilitating a mobile core connection router are provided. A method can include establishing, by a system comprising a processor, a connection to a virtualized core network instance, associated with a first computing device, via a mobility tunneling protocol; in response to the establishing of the connection, initializing, by the system, a virtualized router function based on a routing table; and routing, by the system and via the virtualized router function, data traffic between the virtualized core network instance and a second computing device, communicatively coupled to the system and distinct from the first computing device.

The invention relates to a redundant containerized virtual router for use with a virtual private cloud. The computing device includes a first containerized router and processing circuitry. In one embodiment, a computing device includes a containerized virtual router configured to execute on a processing circuit and the containerized virtual router configured to implement a data plane of a first containerized router. In one embodiment, a computing device includes a containerized routing protocol process configured to execute on a processing circuit and the containerized routing protocol process configured to implement a control plane of a first containerized router, where the containerized routing protocol process is configured to execute a routing protocol. The first containerized router is configured to program a virtual private cloud (VPC) routing table in the VPC gateway based on routing information received via a routing protocol through a containerized routing protocol process. The first containerized router is communicatively coupled to the second containerized router via a virtual router redundancy protocol (VRRP) session.

A peer-to-peer conversation captioning (“PPCC”) system includes a first electronic device for a first user, a second electronic device for a second user, and a PPCC server. The PPCC system further includes a virtual relay entity, which includes a first virtual router for the first language, a second virtual router for the second language, and a global switch. The virtual routers include a speech-to-text engine, a translation engine, a text-to-speech engine, and a multiplexer. The speech-to-text engine converts a user's spoken language to texts and sends the texts to the global switch. Then, the translation engine receives and translates the texts where the text-to-speech engine converts the translated texts to voice. The multiplexer combines the translated texts and the voice to be sent to another user.

An indication of a set of premises between which network traffic is to be routed via a private fiber backbone of a provider network is obtained. Respective virtual routers are configured for a first premise and a second premise, and connectivity is established between the virtual routers and routing information sources at the premises. Contents of at least one network packet originating at the first premise are transmitted to the second premise via the private fiber backbone using routing information obtained at the virtual routers from the routing information source at the second premise.

A node according to an embodiment disclosed in the present document may store instructions for: performing a network access request to an external server through an access control application, the network access request including identification information of a target application and identification information of a destination network; receiving a data flow from the external server through the access control application, the data flow corresponding to identification information of the node and the identification information of the destination network and including information about whether a data packet can be transmitted through a virtual router; and transmitting a data packet of the target application on the basis of the received data flow, through the access control application. The virtual router may be included in a switch to which the node transmits the data packet.

An example computing device includes a first containerized router and processing circuitry. The computing device includes a containerized virtual router configured to execute on the processing circuitry and configured to implement a data plane for the first containerized router. The computing device includes a containerized routing protocol process configured to execute on the processing circuitry and configured to implement a control plane for the first containerized router wherein the containerized routing protocol process is configured to execute a routing protocol. The first containerized router is configured to program a virtual private cloud (VPC) route table in a VPC gateway based on routing information received by the containerized routing protocol process via the routing protocol. The first containerized router is communicatively coupled to a second containerized router via a virtual router redundancy protocol (VRRP) session.