11 results about "Virtual routing and forwarding" patented technology

This disclosure describes techniques for using multiple route distinguishers assigned to a single VRF to provide same-destination path diversity in a VPN. In an example, a method includes storing, by a device, to a single virtual routing and forwarding instance (VRF) of one or more VRFs configured for a network device of a network, a plurality of routes for a common address prefix of a virtual private network (VPN); and sending, by the device to a network router, each of the plurality of routes for the common address prefix with a different, corresponding route distinguisher.

The systems and methods disclosed herein are designed for a network to use virtual routing and forwarding (VRF) for tenant provisioning. The network may include a network device and an authentication server or service. The network device may submit an authentication request and a VRF request to the authentication server or service. The authentication server or service may return a VRF reference to the network device. The network device may also, on behalf of a tenant and as part of resource provisioning for the tenant, include the tenant in a VRF associated with the VRF reference.

Generally, Software-Defined Wide Area Networks (SD-WAN) generally do not support network segmentation. The concepts disclosed herein connects IPSec SD-WAN fabric to a Virtual Routing and Forwarding (VRF) router and make use of a Software Defined Cloud Interconnect (SDCI) Router to route traffic from IPSec SD-WAN to various cloud services from the SDCI Router in the fabric. The concepts disclosed herein also provides for tunnel multi-plexing that takes incoming and outgoing traffic and maps VPNs to any service VRF associated with the cloud based services.

This disclosure describes techniques for customer isolation using virtualization to provide time synchronization services. For example, one method includes: receiving, by a computing device, Internet Protocol (IP) addresses of customer networks among multiple customer networks connected to a cloud exchange performed by the computing device; configuring, by the computing device, a time synchronization server connected to the cloud exchange using a virtualized local area network (VLAN) associated with the IP addresses of the customer networks, the time synchronization server including multiple instances providing time synchronization services; and configuring, by the computing device, the time synchronization server using Virtual Routing and Forwarding (VRF) or network namespaces for VLANs, wherein the VRF or network namespace includes routes for sending time synchronization services between the customer networks and specific instances among the multiple instances providing time synchronization services.

Aspects of the subject disclosure may include, for example, network device(s) capable of on-demand virtual routing and forwarding (VRF) table creation. A network device may receive a request from a customer device requesting on-demand VRF creation, and may instantiate and provision a VRF in response. The request made by the customer device may be made by announcing an attribute in a border gateway protocol (BGP) message. Other embodiments are disclosed.

The invention relates to a link cross-VRF communication method and device, equipment and a medium, and relates to the technical field of communication. The method comprises the following steps: when a first message of a first virtual private network (VPN) is received, extracting a destination IP address in the first message; wherein the first message comes from a first host under a first virtual routing and forwarding VRF identifier, and the destination IP address does not belong to a host address under the first VRF identifier in the first VPN; determining a second VRF identifier corresponding to the destination IP address based on the destination IP address and a mapping relation table; and determining a forwarding path of the first message based on the destination IP address and the second VRF identifier. By adopting the method, the access of a large number of direct connection equipment can be realized.

This disclosure provides a secure packet transmission method, a method for negotiating an internet protocol security security association (IPsec SA), and a related apparatus, and is applied to a wide area network. In a scenario of crossing a plurality of segments of tunnels, an IPsec SA used for end-to-end security protection is negotiated between a first site edge and a second site edge based on a virtual routing and forwarding (VRF) granularity by extending a border gateway protocol (BGP) route. After performing security protection on a virtual private network (VPN) service packet based on the IPsec SA, the first site edge sends the packet through an overlay end-to-end tunnel between the first site edge and the second site edge, and the second site edge processes the packet based on the IPsec SA, to obtain the VPN service packet.

Different services through Virtual Routing and Forwarding instances (VRFs) are identified without needing a Multiprotocol Label Switching (MPLS) label or a Virtual Extensible Local Area Network (VXLAN) Network Identifier (VNI) by using, for example, different UDP port numbers to identify different connectivity services (e.g., customers, VRFs) when IP-in-IP (also referred to as IP over UDP) is used as a tunneling mechanism (e.g., in the data center).

A method for virtual routing and forwarding (VRF) support across a network with dynamic provisioning. A network device receives route information that includes a traffic isolation context label for a traffic isolation context, and host reachability information, where the route information is received over a network interface of the second network device. The network device identifies a target VRF into which to import a route. The network device configures a subinterface on the network interface over which it received the route information, including binding the subinterface to the target VRF and configuring the subinterface to insert the traffic isolation context label into network traffic. The network device imports reachability for a next hop network device and a route into the target VRF.

A route advertisement method includes advertising, by a first network device, an Internet Protocol (IP) prefix route to a second network device, where the IP Prefix route includes a gateway (GW) IP address and a Multi-Protocol Label Switching (MPLS) label. The GW IP address is an IP address of a first interface of the first network device. The MPLS Label is a label of a first IP-virtual routing and forwarding (IP-VRF) instance of the first network device. The first network device advertises a media access control (MAC) / IP route to the second network device, where the MAC / IP route includes the IP address of the first interface and a MAC address of the first interface.

Disclosed in embodiments of the present application are a packet forwarding method, an electronic device, a storage medium, and a program product. The packet forwarding method comprises: receiving a virtual routing and forwarding packet sent by a private network device, wherein the virtual routing and forwarding packet carries first target address information; on the basis of the first target address information, determining a first service flow corresponding to the virtual routing and forwarding packet; on the basis of the first service flow and a preset association relationship, determining a first network tunnel corresponding to the virtual routing and forwarding packet, wherein the preset association relationship is a correspondence between identification information of a service flow and a network tunnel, and the identification information of the service flow comprises first identification information of the first service flow; and forwarding, by means of the first network tunnel, the virtual routing and forwarding packet to a target network device corresponding to the first target address information.