44 results about "Virtual router" patented technology

The embodiment of the invention relates to a containerized routing protocol process for a virtual private network. A computing device includes processing circuitry and a storage medium configured with instructions, where the processing circuitry has access rights to the storage medium and is configured to execute a containerized application; a virtual router; for an interface of the containerized application, enabling communication between the containerized application and the virtual router by the interface; a Container Networking Interface (CNI) plug-in configured to configure an interface with a route for the containerized application based on data generated from a specification for the containerized application and from a network attachment definition; and a containerized routing protocol process configured to advertise a route in a routing protocol message according to a routing protocol.

To provide systems, methods, and devices for improved routing operations in a network computing environment.SOLUTION: An architecture 400 for host routed overlay includes a virtual customer edge router (virtual CE router), a plurality of host virtual machines, and a routed uplink from the virtual customer edge router to one or more of a plurality of leaf nodes L1 to L4. The architecture is such that the virtual customer edge router provides localized integrated routing and bridging (IRB) service for the plurality of host virtual machines of the host routed overlay.SELECTED DRAWING: Figure 4

The embodiment of the invention discloses a data processing method and device for a service function chain, equipment and a readable medium. The method comprises the following steps: acquiring a plurality of service nodes contained in the service function chain to be created, a data transmission sequence of the plurality of service nodes and a target address; according to the data transmission sequence, constructing a virtual router between each service node and the next service node of each service node; respectively configuring routing information corresponding to the target address in each service node and the virtual router according to the data transmission sequence so as to form a service function chain; wherein the configured routing information is used for indicating each service node to transmit the message to be sent to the target address to the virtual router, and the virtual router transmits the message to the next service node. According to the technical scheme, the deployment difficulty of the service function chain can be reduced.

The application provides a wireless network building method and device, equipment and storage medium. The method comprises the following steps: in response to receiving line access network physical connection fault information of a target intranet, determining a target wireless access terminal device which maintains connection with a user terminal in the target intranet, configuring a corresponding target virtual router for the device, obtaining first internet protocol (IP) information of the target wireless access terminal device, second IP information of the target virtual router and third IP information of a target line access device, sending the first IP information to the target virtual router, sending the second IP information to the target wireless access terminal device and the target line access device, and sending the third IP information to the target virtual router, so as to establish wireless network connection between the target wireless access terminal device and the target virtual router and between the target virtual router and the target line access device. The application can quickly build a wireless network when a physical connection fault occurs, and can ensure smooth network for users.

This application relates to isolated data interfaces for containers deployed to compute nodes. Generally, techniques are described for deploying a logically related group of one or more containers ("jars") that support the Data Plane Development Kit (DPDK) to support fast path packet communication over a data channel between a virtual router and a jar. In one example, a computing device includes a virtual router that includes processing circuitry and is configured to implement a virtual network in a computing infrastructure that includes the computing device to enable communication between virtual network endpoints connected via the virtual network. The computing device includes a jar that contains a containerized application, where the virtual router and the jar are configured to create a Unix domain socket using a file system resource that is accessible by the jar and by the virtual router and is not accessible by any other jar deployed to the computing device.

The embodiment of the invention relates to EVPN host routing bridging (HRB) and an EVPN cloud native data center. Techniques are described for an EVPN host routing bridge (HRB) and an EVPN cloud native data center with a host routing bridge (HRB). A host computing device of a data center includes one or more containerized user-level applications. The cloud native virtual router is configured to be dynamically deployed by a datacenter application orchestration engine and operable in a user space of the host computing device. The processing circuitry is configured to execute the containerized user-level application and the cloud native virtual router. The cloud native virtual router includes a containerized routing protocol process configured to operate as a control plane, and a data plane for the containerized router. The data plane is configured to operate an Ethernet virtual private network (EVPN) encapsulated / deencapsulated data path of the overlay network for communicating layer 2 (L2) network traffic of the containerized user application over a switching fabric of the data center.

The invention discloses a terminal test system and method based on a DL / T698 protocol. The system is composed of a master station platform, a to-be-tested terminal, a virtual electric meter, a virtual router and a data driver. The master station platform integrates a master station control module, a test case module, a configuration and control module, a communication management module and the like to realize test instruction initiation, parameter configuration, data interaction and result judgment; the virtual electric meter simulates a real electric energy meter to generate standardized data, the virtual route guarantees message transmission between the terminal and the communication connector, and the data driver provides a standard data model for result verification. The test method comprises a plurality of stages of pre-configuration and environment establishment, test case construction and data preparation, test step code conversion and assertion setting, test execution and result feedback and the like. According to the invention, the test efficiency can be greatly improved, the labor cost is reduced, and the test accuracy and reliability are improved.

A peer-to-peer conversation captioning (“PPCC”) system includes a first electronic device for a first user, a second electronic device for a second user, and a PPCC server. The PPCC system further includes a virtual relay entity, which includes a first virtual router for the first language, a second virtual router for the second language, and a global switch. The virtual routers include a speech-to-text engine, a translation engine, a text-to-speech engine, and a multiplexer. The speech-to-text engine converts a user's spoken language to texts and sends the texts to the global switch. Then, the translation engine receives and translates the texts where the text-to-speech engine converts the translated texts to voice. The multiplexer combines the translated texts and the voice to be sent to another user.

An indication of a set of premises between which network traffic is to be routed via a private fiber backbone of a provider network is obtained. Respective virtual routers are configured for a first premise and a second premise, and connectivity is established between the virtual routers and routing information sources at the premises. Contents of at least one network packet originating at the first premise are transmitted to the second premise via the private fiber backbone using routing information obtained at the virtual routers from the routing information source at the second premise.

The invention provides a communication control apparatus, a communication control method, and a computer program product. This communication control device is provided in a mobile body provided with a cellular communication unit that performs cellular communication and a wireless LAN communication unit that performs wireless LAN communication, and is provided with: a virtual router unit that determines whether to route communication to the cellular communication unit or to route communication to the wireless LAN communication unit; and a control unit that, by controlling the routing of the virtual router unit, performs control for performing communication by preferentially using wireless LAN communication compared with cellular communication.

The application provides a network deployment method, device, server and medium, and relates to the field of communication.The network deployment method comprises the following steps: obtaining a first service and a second service; calling a virtual infrastructure manager (VIM) and a software defined network (SDN) controller to create a first virtual router and a second virtual router; calling a security controller to create a virtual firewall in the case that the first service and the second service have security interaction requirements; calling the VIM, the SDN controller and the security controller to establish a first logical link and a second logical link; the first logical link is a logical link interconnecting the first virtual router and the virtual firewall, and the second logical link is a logical link interconnecting the second virtual router and the virtual firewall.In the embodiment of the application, the virtual routers of different services share the virtual firewall, so that the vFW resource occupation can be effectively reduced, and the network deployment cost is reduced.

Example embodiments are directed towards overcoming limitations of a virtual private cloud (VPC) implemented on a public cloud in a cloud-native 5G wireless telecommunication network by overlaying a network of virtual routers (vRouters) across a software defined data center (SDDC) and virtual private cloud (VPC) in such a manner that enables telecommunication network traffic to communicate between one or more telecommunication NFs of the 5G wireless telecommunication network running on a cloud-native platform of the public cloud (e.g., may be workloads that exist in native AWS) and one or more other telecommunication network functions (NFs) of the 5G wireless telecommunication network running in the in the SDDC using the connected VPC (e.g., such as when using VMWare Cloud to implement the SDDC). The connected VPC is a private cloud existing within the public cloud 202 and the overlay network implemented by such vRouters operationally connects the VPC to the host public cloud and other public clouds.

A node according to an embodiment disclosed in the present document may store instructions for: performing a network access request to an external server through an access control application, the network access request including identification information of a target application and identification information of a destination network; receiving a data flow from the external server through the access control application, the data flow corresponding to identification information of the node and the identification information of the destination network and including information about whether a data packet can be transmitted through a virtual router; and transmitting a data packet of the target application on the basis of the received data flow, through the access control application. The virtual router may be included in a switch to which the node transmits the data packet.

Techniques are described for capturing a missing data packet and creating a modified missing data packet having missing information associated with the missing data packet to provide more detail of the missing data packet for further analysis and / or availability. For example, a computing device includes an internal communication channel, a process executing in user space, and a virtual router. The virtual router includes, for example, processing circuitry and a missing interface to the internal communication channel, where the virtual router is configured to: receive a data packet; in response to determining that the data packet is to be missing, create a modified missing data packet to include missing information associated with the data packet; and provide the modified missing data packet to the missing interface to transmit the modified missing data packet to the process via the internal communication channel.

The invention discloses a data processing method and device for an artificial intelligence scene and a readable storage medium, and relates to the technical field of computers, in particular to the technical field of artificial intelligence, cloud computing and model training and pushing. According to the specific implementation scheme, the method comprises the steps that a graphics processor server in a virtual private cloud network initiates a data processing request for the parallel file storage system through a remote direct memory access protocol; the virtual switch forwards the data processing request to a virtual router through a plurality of physical switches; the data processing request forwarded by the virtual switch carries a value for identifying a remote direct memory access protocol, so that each physical switch preferentially processes the data processing request based on a pre-configured priority strategy; the virtual router repackages the message of the data processing request and forwards the message to the intelligent computing gateway; and the intelligent computing gateway removes the header of the data processing request, performs address mapping, and forwards the mapped message of the data processing request to the parallel file storage system.

The application provides a cross-AZ device switching system, method, storage medium and program product, and belongs to the technical field of clouds. The method comprises the following steps: when it is detected that a virtual router HAVIP address is available on a first ECS in a first AZ, a location service device generates a first routing table item pointing to the first ECS, and the virtual router HAVIP address is a global IP address that can cross different AZs; when it is detected that the virtual router HAVIP address is not available on the first ECS and is available on a second ECS in a second AZ, the location service device generates a second routing table item pointing to the second ECS; and the location service device switches the first routing table item to the second routing table item, so that the second ECS provides services through the virtual router HAVIP address. In the application, the virtual router HAVIP address is a global IP address that can cross AZs, so that cross-AZ device switching can be realized based on the virtual router HAVIP address.

The application relates to the technical field of cloud private line and discloses a cloud private line configuration device and method, computer equipment and a storage medium. The device comprises a private line switch management module, which is used for dividing a first virtual local area network on a private line switch and is also used for configuring a static route of a virtual private cloud for the private line switch; a private line network module, which is used for creating a second virtual local area network on an edge switch, the network segment of the second virtual local area network being the same as that of the first virtual local area network; a virtual private cloud module, which is used for creating a virtual private cloud and a virtual router on a leaf switch to connect a spine switch and the virtual private cloud; and a private line gateway module, which is used for creating a virtual router on the edge switch to connect the spine switch and the private line switch. Compared with directly configuring the cloud private line on a hardware network device, the cloud private line is more convenient and efficient to configure through a cloud platform.

The application particularly relates to a method and system for realizing safe access based on an AI large model. The method for realizing safe access based on the AI large model comprises the following steps: constructing an AI security large model, creating a cloud host, a virtual router and a cloud firewall; detecting network flow data and task logs in real time, analyzing security risk data, acquiring business data, and detecting business security demand changes in real time; the AI security large model analyzes and reasons security risks and business security level requirements in real time, calls a cloud platform interface to dynamically adjust required resources of the cloud firewall, and calls a security control interface to intelligently adjust security strategies; and the AI security large model is trained and optimized in real time according to detected new security risks and business data. The method and system for realizing safe access based on the AI large model improve security protection capability, avoid security protection bottlenecks, improve reliability, can meet complex and changeable business security requirements, and realize automatic security protection capability.

The invention relates to a route synchronization method and device for a virtual network, and the method comprises the steps: constructing a directed network graph used for representing a route propagation direction based on virtual routers in the virtual network and a connection relation between the virtual routers; calculating betweenness centrality of a virtual router corresponding to each node in the directed network graph; in the route synchronization process, for any virtual router receiving the route, the priority of the route is calculated based on the betweenness centrality of a source virtual router issuing or forwarding the route; and according to the priority, updating a routing table in the virtual router receiving the routing, and continuing to synchronize the routing according to the propagation direction defined in the directed network diagram. According to the scheme, the advantages and disadvantages of the routing are dynamically evaluated from the perspective of global topology, so that the routing published by the key hub node is preferentially propagated and adopted, and the rapid and intelligent synchronization of the routing in the virtual network and the automatic selection of the optimal path are realized on the premise of ensuring no loop.

To provide a communication control system, a communication control method, and a program for reducing communication costs.SOLUTION: In the communication system 22, the telematics control unit (TCU) 30 is a communication control device provided in a mobile body including a cellular communication unit configured to perform cellular communication and a wireless LAN communication unit configured to perform wireless LAN communication, and the control unit includes a virtual router unit configured to determine whether to route communication to the cellular communication unit or to route communication to the wireless LAN communication unit, and a control unit configured to perform control for prioritizing wireless LAN communication over cellular communication by controlling routing by the virtual router unit.SELECTED DRAWING: Figure 2

The application provides a dynamic routing docking configuration method and device and electronic equipment, the method is applied to a cloud management platform, the method comprises the following steps: creating a virtual router (vRouter) by calling a virtual infrastructure manager (VIM) and a software defined network (SDN) controller, and creating a virtual firewall (vFW) by calling a security controller; creating an interconnection logical link and a dynamic routing neighbor between the vRouter and the vFW by calling the VIM, the SDN controller and the security controller, realizing the configuration of dynamic routing docking between the vRouter and the vFW, so that the vRouter and the vFW can be dynamically routed and docked, the demand for dynamic routing docking between the vRouter and the vFW can be met, the method can be applied to a scene requiring dynamic routing docking, the applicable range is expanded, and the scene applicability is improved.

The invention discloses an enterprise-level network dynamic access control method based on continuous risk assessment, which relates to the field of network access, and comprises the following steps: monitoring the network communication frequency condition of a terminal server in a virtual network and the load deviation condition of a virtual router, and assessing the congestion degree of current virtual network transmission; screening a communication busy terminal server group and a communication idle terminal server group; obtaining the length of a shortest route path for mutual communication between each terminal server with busy communication and operation parameters of all virtual routers on the route path, and evaluating the suitability of each shortest route decision path; acquiring a network communication routing path from the idle terminal server to the receiving terminal, and evaluating the routing upgrade matching of the idle terminal server in combination with the parameters of the idle terminal server; and upgrading the idle terminal server into a virtual router, and re-deciding a routing path between the terminal servers with busy communication.

The invention discloses a virtual machine communication method and system, computer equipment and a storage medium, and relates to the technical field of cloud platforms, and the method comprises the steps that a virtual router sends a first request message to a preset port, and sends the first request message to a protocol conversion module through the preset port, and the protocol conversion module performs protocol conversion on the first request message to obtain a second request message, and sends the second request message to the second virtual machine through the virtual router. The problems that cross-protocol communication between virtual machines excessively depends on physical equipment, the efficiency of adjusting the physical equipment is low, and the elastic expansion requirement of a cloud platform is difficult to meet can be solved. According to the method, a protocol conversion module is deployed in a network namespace, conversion from a first request message to a second request message is realized by using the protocol conversion module, dependence on physical equipment is removed, physical three-layer network equipment is replaced by using a preset port and a virtual router, and the public network address requirement of the physical three-layer network equipment is reduced.

The embodiment of the invention relates to a domain name query processing method and device based on a public cloud network, equipment and a medium, and the method comprises the steps: obtaining a domain name query request sent by a business server, and determining whether cloud anycast routing information is configured in a virtual router or not, the on-cloud anycast routing information is published by a domain name server in the public cloud network; when cloud anycast routing information is configured in the virtual router, a domain name query request is sent to a public cloud forwarding network device, and the public cloud forwarding network device sends the domain name query request to a domain name server in a public cloud network according to the anycast routing information; and obtaining an internet protocol IP address corresponding to the domain name query request queried by a domain name server in the public cloud network. According to the technical scheme, the dynamic routing management of the domain name server on the cloud is realized, the disaster tolerance of the public cloud network is improved, and the uniformity of the domain name service system in the hybrid cloud mode is realized.

The invention discloses a method and equipment for communication between the outside and a virtual machine, and a storage medium, and relates to the field of network virtualization. The method comprises the following steps: creating a unique private network for each node; creating a virtual router for each node and associating the virtual router with an external network; setting a corresponding forwarding rule for the virtual machine under the node according to an external process needing to access the virtual machine; and according to the life event of the virtual machine, dynamically generating or releasing the target network address translation rule on the virtual router according to the forwarding rule of the virtual machine. According to the method, the target network address translation rule is dynamically generated for the virtual router according to the life event of the virtual machine, so that normal access of the outside to the application program of the virtual machine is realized under the condition of saving operation and maintenance means.

To provide a logical multiplexed network separation communication method through virtual private network (VPN) hopping and a communication system performing the same.SOLUTION: A communication system logically separates a large number of networks formed between a large number of terminals and computing devices by generating and using a virtual router (VR) corresponding to each of the multiple terminals at a service gateway, thereby forming independent networks for each server or terminal, and enhancing security by changing the VR used in each network according to specific rules.SELECTED DRAWING: Figure 1

Systems and methods described herein provide intelligent network segment routing. A method performed in a network of virtual routers includes designating a unique node identifier (ID) for each routing node in a network and designating a segment ID for each link between two of the routing nodes. Each segment ID is based on a first node ID and an adjacent second node ID for each link. The method also includes obtaining real-time link utilization data for each of the links, assigning a segment score to each of the links based on the real-time link utilization data and the segment ID, and routing packets through the network based on the segment scores and the node IDs.

Example embodiments of the present disclosure relate to operating a virtual router in a communication system. In an example method, a terminal device determines whether a router priority of the terminal device is higher than router priorities of other terminal devices, where the terminal device and other terminal devices are part of a group of terminal devices of a communication system configured to act as a virtual router. The terminal device sets a router state of the terminal device as a master device for the virtual router based on determining that the router priority of the terminal device is higher than the router priorities of the other terminal devices in the terminal device group. As such, appropriate externally observable behavior of a network that supports a VRRP mechanism in a cellular network is provided.

The invention provides a traffic security protection method and device. The method comprises the following steps: receiving a service message from a first virtual router of a first service VPC; routing the service message to a firewall in the protection VPC, so that the firewall performs security detection on the service message; and after the security detection is passed, forwarding the service message to a second virtual router of the second service VPC, so that the second virtual router sends the service message to a second virtual machine. According to the method, on the premise that a VPC routing table is not modified, east-west flow is guided to a specified firewall through host routing and ARP proxy functions, and path reachability and safety protection of bidirectional flow are achieved. The firewall and other security resources are intensively deployed in the independent protection VPC, so that the protection range of the firewall is expanded, and the load balancing performance is improved.

The invention provides an access control method, device and equipment for a virtual router. Comprising the following steps: acquiring a first data packet through subnet gateway equipment; wherein the first data packet comprises a first source address of a virtual machine corresponding to the subnet gateway equipment and a first destination address of destination network equipment; according to the first source address and the first destination address, querying a first target routing device corresponding to the first data packet based on a pre-configured policy routing rule in a virtual network namespace; the first target routing equipment is one of external gateway equipment and network address translation gateway equipment; converting a first source address in the first data packet according to a pre-configured address conversion rule in the target routing equipment to obtain a first converted data packet; and forwarding the first converted data packet to the destination network equipment via the first target routing equipment. Therefore, the network management requirement in a complex communication scene is met.