235 results about "Virtual switch" patented technology

Embodiments for communicating using a switch having multiple sets of switch ports, which can generate abstractions for compute nodes and accelerators in a switched Compute Express Link (CXL) interconnect, enabling any-to-any connectivity between hosts and devices. A first set of switch ports couples hosts and / or devices with a first virtual to physical binding. A second set couples a Resource Provisioning Unit (RPU) with the first virtual to physical binding. The first binding binds at least some of the first and / or second sets of switch ports to a first set of Virtual CXL Switches (VCSs). A third set couples the RPU to a second virtual to physical binding. A fourth set couples additional hosts and / or devices with the second virtual to physical binding. And the second virtual to physical binding binds at least some of the third and / or fourth sets of switch ports to a second set of VCSs.

Technologies for creating an optimized and accelerated network pipeline using a virtual switch and a network pipeline abstraction layer (NPAL) for fast link recovery are described. The virtual switch can monitor a link availability of each of a plurality of links to a destination, the plurality of links being specified in an initial group of identifiers. The virtual switch can detect a link failure of a first link of the plurality of links. The NPAL can remove a first link identifier, associated with the first link, from the initial group of link identifiers to obtain a modified group of link identifiers. The NPAL can cause a routing table in the NPAL to be updated to remove the first link identifier. The acceleration hardware engine can process network traffic data using the network pipeline and distribute the network traffic data to only the remaining links of the plurality of links.

The invention provides a mixed reality industrial simulation training system which is composed of a space fusion perception unit, a multi-physics field simulation unit, a cooperative training management unit and a self-adaptive teaching engine. The space fusion sensing unit is composed of a real-time environment modeling and positioning subsystem and a physical interaction detection algorithm, and the real-time environment modeling and positioning subsystem dynamically constructs a three-dimensional space coordinate system of a real industrial scene through a visual sensor array and a radio frequency scanning device; generating a pose matrix of the virtual equipment model in the perspective display interface; the physical interaction detection algorithm realizes contact force feedback between virtual and real objects based on dynamic solution of collision volume, and when an operator triggers a virtual switch through a handheld controller, a real equipment control signal is synchronously driven; the multi-physics field simulation unit comprises a physical engine core module and a fault injection interface.

Embodiments for communicating using a switch configured to establish multiple types of communication routes. First and second upstream switch ports (USPs) communicate with first and second hosts according to first and second Compute Express Link (CXL) protocols, respectively. A downstream switch port (DSP) communicates with a device according to a third CXL protocol. The switch couples the first USP to the DSP via a first route traversing a single Virtual CXL Switch (VCS), and couples the first USP to the second USP via a second route traversing two VCSs. Optionally, the switch includes a Resource Provisioning Unit (RPU) coupling the two VCSs of the second route, terminating the first and second CXL protocols, and translating between CXL messages conforming to the first and second CXL protocols.

The invention relates to the technical field of computer networks, and discloses a communication method and device for a computing node, equipment and a storage medium. The method is applied to a computing node, the computing node comprises a virtual switch and a physical network card, a plurality of virtual network interfaces are created in the virtual switch, the plurality of virtual network interfaces are in one-to-one correspondence with a plurality of service networks, and the physical network card is connected with at least one other node. The method comprises the following steps: receiving a target data message of a target service network through a target virtual network interface of a virtual switch; and sending the target data message to a corresponding node in the at least one other node through the physical network card. A plurality of virtual network interfaces are created in the virtual switch, and one virtual network interface corresponds to one service network, so that deployment of a plurality of service networks in the virtual switch is realized, network multiplexing in the virtual switch is realized, and the problem that physical network card resources of computing nodes are insufficient is solved. And a plurality of virtualized networks cannot be provided.

The invention relates to the technical field of network intercommunication, and provides a method and equipment for realizing a bare metal gateway based on an OpenFlow flow table, and the method comprises the steps: enabling a bare metal server to be accessed to a VPC network, and creating and binding a network port to a specified bare metal gateway node in a specified VPC subnet through a cloud management platform; a logic flow table is generated through the OVN controller according to the network ports and the binding relation of the network ports, and the logic flow table is issued to the bare metal net nodes bound to the network ports; the bare metal net node translates the received logic flow table into an OpenFlow flow table and issues the OpenFlow flow table to a local OVS virtual switch; and the OVS virtual switch performs two-layer forwarding processing on the message transmitted between the bare metal server and the virtual machine in the VPC according to the received OpenFlow flow table. The bare metal gateway is realized in a pure software mode, the dependence on special hardware is avoided, and the cost is remarkably reduced. The efficient conversion between the VXLAN and the VLAN is realized based on the OpenFlow flow table, the flexibility, the expandability and the operation and maintenance automation degree are improved, and the high-performance two-layer intercommunication is ensured.

The invention provides a method, a controller and a system for automatically configuring a spanning tree protocol in a K8s cluster based on a DPU, and the method comprises the steps: monitoring whether the configuration data of a spanning tree protocol configuration instance in the K8s cluster is changed in real time, if yes, updating a bridging device table of a virtual switch database according to the spanning tree protocol configuration instance, and if not, updating the bridging device table of the virtual switch database; sending the updated spanning tree protocol configuration data to a virtual switch in the DPU so that the virtual switch in the DPU receives the updated spanning tree protocol configuration data and correspondingly configures or starts a corresponding spanning tree protocol STP and / or a rapid spanning tree protocol RSTP; and monitoring whether the virtual switch configures or starts the STP and / or the RSTP in real time, and if yes, updating the state of the custom resource definition unit for the spanning tree protocol, so that a user can know the current spanning tree protocol setting state of the virtual switch. According to the invention, the automatic configuration of the spanning tree protocol in the K8s cluster can be realized, the real-time performance and reliability of the automatic configuration can be effectively improved, and the efficiency and quality of network operation and maintenance can be effectively improved.

Embodiments for communicating using a switch configured to establish multiple types of communication routes. First and second upstream switch ports (USPs) communicate with first and second hosts according to first and second Compute Express Link (CXL) protocols, respectively. A downstream switch port (DSP) communicates with a device according to a third CXL protocol. The switch couples the first USP to the DSP via a first route traversing a single Virtual CXL Switch (VCS), and couples the first USP to the second USP via a second route traversing two VCSs. Optionally, the switch includes a Resource Provisioning Unit (RPU) coupling the two VCSs of the second route, terminating the first and second CXL protocols, and translating between CXL messages conforming to the first and second CXL protocols.

The invention discloses a cluster network traffic control method, product, device and medium, and relates to the technical field of computers, comprising: collecting current subnet information, current access control rule file and current malicious network traffic characteristics in a container cluster; dividing subnet addresses in the current subnet information into subnet address sets, classifying the current access control rule files to obtain rule address sets, and obtaining container addresses corresponding to the current malicious network traffic features; generating each new access control rule based on each subnet address set, each rule address set and the container address, and determining the priority of each new access control rule; and issuing each new access control rule to a kernel of each virtual switch in the container cluster according to the priority, so that each virtual switch manages and controls the network flow according to each new access control rule. And the access control rule is adjusted more reasonably, so that the management and control reliability of cluster network traffic is improved.

Disclosed in the present invention are a network traffic collection method and system based on a cloud-based environment. The present invention solves the problems of existing traffic collection being invasive to a monitored system, and having system and software dependency requirements, poor adaptability, and high consumption of computing and network transmission resources. A mirror virtual switch and a virtualized instance agent node are created at a computing node. By mirroring traffic by means of a patch port of a virtual switch, monitoring node data is diverted to the mirror virtual switch, and then is forwarded to the virtualized instance agent node by means of the mirror virtual switch; network traffic data is stored as in a file format, and is forwarded to a data security monitoring platform for monitoring a virtualized instance event in real time, and when the event changes, a flow table of the virtual switch is adjusted on the basis of a monitoring policy. According to the present invention, traffic monitoring is implemented in a software manner, and virtualized instance traffic is collected before packet modification, facilitating the accuracy of security event judgment, involving no intrusive modification to an instance, and no system requirement, and occupying few resources.

The invention discloses a congestion control method and device for a cloud computing platform, a program product and a storage medium, belongs to the field of data congestion control, is used for intercepting sending messages of virtual machines and performing data congestion control, and solves the problem of unreasonable network bandwidth allocation caused by different congestion control methods of different virtual machines. The method comprises the following steps: intercepting a TCP message sent by each virtual machine through a virtual switch of a virtualization layer, updating data of a flow table item of a target connection and a network state evaluation index according to the TCP message, and then determining a target window value of a TCP window of the TCP message according to the data of the flow table item of the target connection and the network state evaluation index. According to the method, the TCP window of the TCP message is modified to the target window value, so that the network bandwidth of each virtual machine in the cloud computing platform can be uniformly allocated, the network bandwidth can be reasonably allocated, the communication efficiency can be improved, and the utilization rate of network resources is also improved.

The invention provides an access control list configuration method and device, electronic equipment and a storage medium, and relates to the technical field of servers, and the method comprises the steps: collecting subnet information in a target containerization cluster, a configured access control list rule and security threat features in network traffic; the information is subjected to fusion analysis based on a predefined security policy so as to generate an access control list rule set containing different priorities, and then the rules are synchronized to a cluster virtual switch kernel according to the priorities so as to realize hierarchical control and dynamic protection of network traffic. The problems that a large-scale dynamic network environment is difficult to deal with, the automation level is low and malicious traffic cannot be efficiently intercepted due to the fact that manual configuration and static rule maintenance are relied on and deep integration of a containerized cluster network structure is lacked can be solved. The technical effects of improving the automation level of containerized cluster network management, enhancing the adaptability to a dynamic network environment, and realizing efficient interception of malicious traffic to guarantee network security are achieved.

A network device of a virtual switch, which includes a second network device and operates on a unified control plane, is provided. During operation, the network device maintains a link between its first port and a second port of the second network device. Here, the first link can be distinct from a second link used for exchanging data traffic of the virtual switch. The network device operates a spanning tree protocol to place the first and second ports in respective port states, which include a forwarding state and a blocked state. If the second link becomes unavailable, the network device determines that the virtual switch has split into a first segment comprising the network device and a second segment comprising the second network device. If the first port state is in the blocked state, the network device suspends communication via a respective port of the first segment.

The invention discloses a public network flow forwarding method, device and equipment for a cloud computing system and a medium, and relates to the technical field of cloud computing. The public network flow forwarding method for the cloud computing system comprises the steps that a virtual switch and a virtual machine are deployed on a host machine; a cloud computing system is built in a manner of deploying a virtual gateway on a cloud computing gateway, so that only a first message of public network flow in a cloud computing network is forwarded by a gateway node and a high-speed forwarding table is generated, and the gateway node does not need to participate in subsequent other public network flow messages which are not the first message. Public network traffic forwarding between hosts is directly carried out only by utilizing the generated high-speed forwarding table and the host information table, so that the technical problems of high load and high delay of public network traffic forwarding of the existing gateway node are solved, the forwarding efficiency of the public network traffic in the cloud computing network is greatly improved, and the forwarding efficiency of the public network traffic in the cloud computing network is improved. And meanwhile, the loss and the load pressure of the gateway node are greatly reduced.

Technologies for optimizing performance of virtual switches in networking and accelerated computing are described. A virtual switch can identify an addition of a first data path (DP) rule in a flow table. The virtual switch can determine that the first DP rule and a second DP rule in the flow table overlap. The addition of the first DP rule causes the second DP rule to be deleted in the flow table. Before the second DP rule is deleted, the virtual switch can simulate receipt of a simulated packet comprising the specified portion of the network header corresponding to a second DP rule identifier of the second DP rule. The receipt of the simulated packet causes a third DP rule to be added to the flow table. After the third DP rule is added, the virtual switch can delete the second DP rule.

The invention discloses a network load balancing method, a computer program product, equipment and a medium, relates to the technical field of data centers, is applied to a virtual switch of a data center, and obtains to-be-sent data; packaging the to-be-sent data to obtain initial packaged data; in the quintuple, determining an item to be transformed; in the initial encapsulation data, transforming a value corresponding to a to-be-transformed item in the outer layer message to obtain target encapsulation data; performing hash operation based on the quintuple of the target encapsulation data to obtain a hash value; and transmitting the target encapsulation data according to a transmission path corresponding to the hash value. The method and the device have the beneficial effects that different transmission paths can be used for transmitting the target encapsulation data, and finally, different to-be-sent data of the same stream are transmitted through different transmission paths, so that the occupation of a single transmission path by the data of the same stream is avoided, load balancing between the transmission paths is realized, and the transmission efficiency is improved. The network load balancing capability of the data center is improved; and the universality is good.

Techniques are described for communications in an L2 virtual network. In an example, the L2 virtual network includes a plurality of L2 compute instances hosted on a set of host machines and a plurality of L2 virtual network interfaces and L2 virtual switches hosted on a set of network virtualization devices. An L2 virtual network interface emulates an L2 port of the L2 virtual network. Storm control information applicable to the L2 port is sent to a network virtualization device that hosts the L2 virtual network interface.

Disclosed are a packet forwarding method and system, an electronic device, and a storage medium. The method comprises: receiving an initial packet sent by forwarding hardware, wherein the initial packet is a packet satisfying a preset dispersion condition, the preset dispersion condition is used for dispersing a target packet to obtain a packet needing to be processed by a first virtual switch, and the target packet is a packet for which a forwarding path cannot be determined on the basis of a flow table of the forwarding hardware; and generating a first packet corresponding to the initial packet, and sending the first packet to the forwarding hardware, such that the forwarding hardware forwards the first packet on the basis of identification information in the first packet, wherein the identification information is used for representing a forwarding path of the initial packet.

Embodiments for communicating using a switch having multiple sets of switch ports, which can generate abstractions for compute nodes and accelerators in a switched Compute Express Link (CXL) interconnect, enabling any-to-any connectivity between hosts and devices. A first set of switch ports couples hosts and / or devices with a first virtual to physical binding. A second set couples a Resource Provisioning Unit (RPU) with the first virtual to physical binding. The first binding binds at least some of the first and / or second sets of switch ports to a first set of Virtual CXL Switches (VCSs). A third set couples the RPU to a second virtual to physical binding. A fourth set couples additional hosts and / or devices with the second virtual to physical binding. And the second virtual to physical binding binds at least some of the third and / or fourth sets of switch ports to a second set of VCSs.

Electronic devices may be provided that contain flexible displays that are bent to form displays on multiple surfaces of the devices. Bent flexible displays may be bent to form front side displays and edge displays. Edge displays may be separated from front side displays or from other edge displays using patterned housing members, printed or painted masks, or by selectively activating and inactivating display pixels associated with the flexible display. Edge displays may alternately function as virtual buttons, virtual switches, or informational displays that are supplemental to front side displays. Virtual buttons may include transparent button members, lenses, haptic feedback components, audio feedback components, or other components for providing feedback to a user when virtual buttons are activated.

The application discloses a software defined network system, which comprises a BGP proxy component, an SDN controller, a plurality of gateway devices not supporting a BGP protocol and computer nodes; the BGP proxy component is used for establishing a BGP session with the SDN controller and announcing routing information of the plurality of gateway devices to the SDN controller through the BGP session; the SDN controller is used for generating node-side data plane configuration information based on the received routing information and delivering the node-side data plane configuration information to the computer nodes; and the computer nodes are used for configuring a forwarding table and / or tunnel encapsulation parameters of a virtual switch on the nodes according to the received node-side data plane configuration information. The application reduces the complexity of networking.

The invention discloses a speed limit configuration method and device of a virtual switch, equipment, a medium and a product, and the method comprises the steps: generating at least one piece of speed limit group information according to the bandwidth demand information of each virtual machine user; wherein the speed limit group information comprises speed limit configuration parameters corresponding to the bandwidth demand information and at least one speed limit object; and issuing the speed limit group information to a virtual switch to indicate the virtual switch to perform network speed limit on each virtual machine user based on the speed limit group information. According to the invention, by generating the speed-limiting group information, various types of speed-limiting configuration parameters of different speed-limiting objects can be integrated, and unified speed-limiting configuration of the virtual switch is realized, so that the timeliness of speed-limiting configuration issuing of the virtual switch can be ensured.

A system and method provides for safeguarded selection of a polarity for selected application of power or ground to a test circuit via a circuit tester test probe. A positive polarity selection switch is aligned with a negative polarity selection switch on a probe surface. A virtual switch indicia is shown on a probe display with an actuation axis of the virtual switch oriented to correspond to relative alignment of the polarity switches. Pressing the positive polarity switch places the virtual switch in a first position indicating a positive probe polarity selection and pressing the negative polarity switch places the virtual switch in a second position indicating a negative probe polarity selection. Additional polarity selection indicia are generated to reinforce user recognition of a selected polarity to avoid circuit or probe damage.

The invention discloses a message forwarding method and system, electronic equipment and a storage medium. The method comprises the steps that an initial message sent by forwarding hardware is received, the initial message is a message meeting a preset shunting condition, and the preset shunting condition is used for shunting a message needing to be processed by a first virtual switch from a target message, the target message is a message of which a forwarding path cannot be determined based on a flow table of the forwarding hardware; generating a first message corresponding to the initial message, and sending the first message to the forwarding hardware, so that the forwarding hardware forwards the first message according to the identification information in the first message; the identification information is used for representing a forwarding path of the initial message. According to the embodiment of the invention, the technical problem that a network card in the related technology is difficult to meet the message processing requirement in a high-performance network scene can be solved.

The invention relates to the technical field of cloud computing, in particular to a cloud tenant bearing scale optimization method and device, equipment, a medium and a product, and the method comprises the steps: recognizing a sender and an access purpose of an access request, and determining a data flow direction corresponding to the access request; in response to the condition that the sender is the virtual machine, address conversion and message encapsulation are performed on the access request through the virtual switch, and the encapsulated access request is sent to the cloud gateway; and in response to the fact that the sender is the Underlay network or the public network, the cloud gateway is determined based on the sender, the cloud gateway confirms the virtual private cloud based on the access purpose, the access request is subjected to message packaging, and the access request is sent to the virtual switch. According to the technical scheme of the invention, the original address translation is sunk to the virtual switches corresponding to the virtual private clouds from the cloud gateway for processing according to the data in the cloud-out direction and the cloud-in direction, so that the memory space occupied by the NAT table items can be released, the detailed routing capacity of the virtual machines is improved, and the expansion of the cloud tenant scale borne by the cloud data center is facilitated.

To provide a system and a method that support efficient virtualization in lossless interconnect networks.SOLUTION: A network switching environment 600 includes: one or more switches including at least a leaf switch; a plurality of host channel adapters each including at least one virtual function (VF), a virtual switch, and at least one physical function (PF); a plurality of hypervisors; and a plurality of virtual machines (VMs), and each of the plurality of virtual functions associated with at least one VF. A method deploys a plurality of host channel adapters comprising one or more virtual switches with a prepopulated local identifier (LID) architecture or a virtual switch with a dynamic LID assignment architecture, assigns the LID to each virtual switch, and calculates one or more linear forwarding tables based at least on the LIDs assigned to each of the virtual switches.SELECTED DRAWING: Figure 6

The application relates to a bidirectional message processing method based on a unified user state channel and belongs to the technical field of virtualized communication, which solves the problems of CPU idle rate, high memory occupation and aggravated message processing delay caused by large-scale virtual function representative port polling. The method comprises the following steps: creating a virtual interface and an association relationship between the virtual interface and a hardware virtual function instance identifier in a user state virtual switch; establishing a user state channel as a shared bidirectional message transmission path between a plurality of hardware virtual function instances and the user state virtual switch; constructing extended metadata containing the hardware virtual function instance identifier, obtaining transmission data according to the extended metadata and a to-be-processed message; receiving and analyzing the transmission data through the user state channel to obtain the to-be-processed message and the extended metadata, and then determining a forwarding rule of the to-be-processed message and executing the forwarding of the to-be-processed message. The method realizes accelerated processing of the bidirectional message without polling and significantly reduces the memory resource occupation.