291 results about "Virtual switch" patented technology

The invention belongs to the technical field of communication transmission, and discloses a PLC networking data acquisition system and method based on an edge gateway, and the system comprises a dynamic virtual isolation module which is used for identifying and classifying different PLC devices through the deployment of an SDN controller and the adoption of a deep packet inspection technology, automatically distributing the different PLC devices to a virtual subnet, and obtaining a virtual IP; each virtual subnet isolates the PLC equipment with the same IP address through a virtual switch and a virtual router; recording the virtual IP and actual physical network port information of the PLC equipment through a mapping table, and establishing a network topology view; the multi-protocol analysis module is used for connecting the edge gateway and the PLC equipment based on a network topology view, carrying out protocol analysis by integrating a PLC communication protocol library and adopting FPGA hardware acceleration, and reading PLC networking data from the PLC equipment in real time; and the flexibility and the expandability of data acquisition can be improved.

Embodiments for communicating using a switch having multiple sets of switch ports, which can generate abstractions for compute nodes and accelerators in a switched Compute Express Link (CXL) interconnect, enabling any-to-any connectivity between hosts and devices. A first set of switch ports couples hosts and / or devices with a first virtual to physical binding. A second set couples a Resource Provisioning Unit (RPU) with the first virtual to physical binding. The first binding binds at least some of the first and / or second sets of switch ports to a first set of Virtual CXL Switches (VCSs). A third set couples the RPU to a second virtual to physical binding. A fourth set couples additional hosts and / or devices with the second virtual to physical binding. And the second virtual to physical binding binds at least some of the third and / or fourth sets of switch ports to a second set of VCSs.

Technologies for creating an optimized and accelerated network pipeline using a virtual switch and a network pipeline abstraction layer (NPAL) for fast link recovery are described. The virtual switch can monitor a link availability of each of a plurality of links to a destination, the plurality of links being specified in an initial group of identifiers. The virtual switch can detect a link failure of a first link of the plurality of links. The NPAL can remove a first link identifier, associated with the first link, from the initial group of link identifiers to obtain a modified group of link identifiers. The NPAL can cause a routing table in the NPAL to be updated to remove the first link identifier. The acceleration hardware engine can process network traffic data using the network pipeline and distribute the network traffic data to only the remaining links of the plurality of links.

Techniques associated with exchanging data between clusters are disclosed. A data packet can be received from a first pod in a first cluster of a cluster set that targets a second pod or service in a second cluster of the cluster set. A label identity is determined for the first pod from a table of pods and label identities. The label identity for the first pod is added in a virtual network identifier field of a data packet header. The data packet is communicated from a first virtual switch to the second cluster through a tunnel interface and gateway node. Upon receipt of the data packet, the label identity is extracted from the data packet header, and an ingress rule associated with the label identity can be determined. Access to the second pod is controlled based on the rule.

Techniques are described for communications in an L2 virtual network. In an example, the L2 virtual network includes a plurality of L2 compute instances hosted on a set of host machines and a plurality of L2 virtual network interfaces and L2 virtual switches hosted on a set of network virtualization devices. An L2 virtual network interface emulates an L2 port of the L2 virtual network. IGMP configuration is distributed to the L2 virtual switches. A control plane of the L2 virtual network coordinates IGMP configuration across the L2 virtual switches.

The invention provides a mixed reality industrial simulation training system which is composed of a space fusion perception unit, a multi-physics field simulation unit, a cooperative training management unit and a self-adaptive teaching engine. The space fusion sensing unit is composed of a real-time environment modeling and positioning subsystem and a physical interaction detection algorithm, and the real-time environment modeling and positioning subsystem dynamically constructs a three-dimensional space coordinate system of a real industrial scene through a visual sensor array and a radio frequency scanning device; generating a pose matrix of the virtual equipment model in the perspective display interface; the physical interaction detection algorithm realizes contact force feedback between virtual and real objects based on dynamic solution of collision volume, and when an operator triggers a virtual switch through a handheld controller, a real equipment control signal is synchronously driven; the multi-physics field simulation unit comprises a physical engine core module and a fault injection interface.

Embodiments for communicating using a switch configured to establish multiple types of communication routes. First and second upstream switch ports (USPs) communicate with first and second hosts according to first and second Compute Express Link (CXL) protocols, respectively. A downstream switch port (DSP) communicates with a device according to a third CXL protocol. The switch couples the first USP to the DSP via a first route traversing a single Virtual CXL Switch (VCS), and couples the first USP to the second USP via a second route traversing two VCSs. Optionally, the switch includes a Resource Provisioning Unit (RPU) coupling the two VCSs of the second route, terminating the first and second CXL protocols, and translating between CXL messages conforming to the first and second CXL protocols.

Techniques are described for communications in an L2 virtual network. In an example, the L2 virtual network includes a plurality of L2 compute instances hosted on a set of host machines and a plurality of L2 virtual network interfaces and L2 virtual switches hosted on a set of network virtualization devices. An L2 virtual network interface emulates an L2 port of the L2 virtual network. Access control list (ACL) information applicable to the L2 port is sent to a network virtualization device that hosts the L2 virtual network interface.

The invention relates to the technical field of computer networks, and discloses a communication method and device for a computing node, equipment and a storage medium. The method is applied to a computing node, the computing node comprises a virtual switch and a physical network card, a plurality of virtual network interfaces are created in the virtual switch, the plurality of virtual network interfaces are in one-to-one correspondence with a plurality of service networks, and the physical network card is connected with at least one other node. The method comprises the following steps: receiving a target data message of a target service network through a target virtual network interface of a virtual switch; and sending the target data message to a corresponding node in the at least one other node through the physical network card. A plurality of virtual network interfaces are created in the virtual switch, and one virtual network interface corresponds to one service network, so that deployment of a plurality of service networks in the virtual switch is realized, network multiplexing in the virtual switch is realized, and the problem that physical network card resources of computing nodes are insufficient is solved. And a plurality of virtualized networks cannot be provided.

The invention relates to the technical field of network intercommunication, and provides a method and equipment for realizing a bare metal gateway based on an OpenFlow flow table, and the method comprises the steps: enabling a bare metal server to be accessed to a VPC network, and creating and binding a network port to a specified bare metal gateway node in a specified VPC subnet through a cloud management platform; a logic flow table is generated through the OVN controller according to the network ports and the binding relation of the network ports, and the logic flow table is issued to the bare metal net nodes bound to the network ports; the bare metal net node translates the received logic flow table into an OpenFlow flow table and issues the OpenFlow flow table to a local OVS virtual switch; and the OVS virtual switch performs two-layer forwarding processing on the message transmitted between the bare metal server and the virtual machine in the VPC according to the received OpenFlow flow table. The bare metal gateway is realized in a pure software mode, the dependence on special hardware is avoided, and the cost is remarkably reduced. The efficient conversion between the VXLAN and the VLAN is realized based on the OpenFlow flow table, the flexibility, the expandability and the operation and maintenance automation degree are improved, and the high-performance two-layer intercommunication is ensured.

The invention provides a PCIe (Peripheral Component Interconnect Express) switching structure and a switching chip. The PCIe switching structure comprises a PCIe controller, a plurality of Router routers, a Crossbar switch, a DMA (Direct Memory Access) engine and an NOC (Note Over Chip). The Crossbar exchanger is connected with a plurality of Router routes; the PCIe controller is connected with the Crossbar exchanger through a Router route; the Crossbar exchanger is connected with the PCIe controller; a DMA (Direct Memory Access) Function and / or a P2P (Peer-to-Peer) Function are / is arranged in the PCIe controller; and the DMA engine is connected with the Crossbar exchanger through a Router route. According to the scheme, in PCIe switching supporting multiple virtual switches, multiple DMA modules are not needed, the DMA can be used as a Function in a PCIe structure according to needs so as to be attached to any virtual switching upstream port, and data migration in any switching port or between any two switching ports is supported.

The invention provides a method, a controller and a system for automatically configuring a spanning tree protocol in a K8s cluster based on a DPU, and the method comprises the steps: monitoring whether the configuration data of a spanning tree protocol configuration instance in the K8s cluster is changed in real time, if yes, updating a bridging device table of a virtual switch database according to the spanning tree protocol configuration instance, and if not, updating the bridging device table of the virtual switch database; sending the updated spanning tree protocol configuration data to a virtual switch in the DPU so that the virtual switch in the DPU receives the updated spanning tree protocol configuration data and correspondingly configures or starts a corresponding spanning tree protocol STP and / or a rapid spanning tree protocol RSTP; and monitoring whether the virtual switch configures or starts the STP and / or the RSTP in real time, and if yes, updating the state of the custom resource definition unit for the spanning tree protocol, so that a user can know the current spanning tree protocol setting state of the virtual switch. According to the invention, the automatic configuration of the spanning tree protocol in the K8s cluster can be realized, the real-time performance and reliability of the automatic configuration can be effectively improved, and the efficiency and quality of network operation and maintenance can be effectively improved.

The invention relates to the technical field of computers and provides a method for kernel mode flow control unloading, computer equipment and a medium. Kernel mode flow control is realized, message forwarding and hardware unloading kernel mode flow control are realized through cooperation of the kernel mode flow control data path module and the virtual switch of the user space, the pressure of the central processing unit is released, the flow table processing efficiency is improved, and the flow table processing efficiency is improved by expanding and optimizing the message. According to the method, the forwarding information is added to support kernel mode flow control unloading, so that a kernel protocol interface and a kernel protocol stack of an operating system can be called for processing, and the kernel mode flow control unloading is supported on the basis of supporting the kernel mode flow control unloading; the corresponding relation between the virtual network interface and the virtual instance device and the corresponding relation between the virtual instance device and the representative device can be flexibly adjusted, and therefore the requirement of a user for customizing input and output resources is met.

The embodiment of the invention provides a cloud private line connectivity test method and device, electronic equipment and a storage medium. A virtual switch is installed on a simulation node; constructing a first virtual network interface and a second virtual network interface for installing the virtual switch; creating a network namespace for simulating the network environment of the client side equipment at the simulation node; adding the second virtual network interface to the network namespace, and simulating the second virtual network interface to configure network information for the network namespace; adding the first virtual network interface to an integrated bridge, and creating a flow table on the integrated bridge; executing flow receiving and transmitting through the flow table, the network information and the network namespace, and generating flow receiving and transmitting state information; according to the method, the connectivity of the cloud private line between the cloud host and the network namespace is detected based on the traffic transceiving state information, the connectivity of the cloud private line is tested on the basis of not excessively depending on a test environment, the test cost is reduced, and the test efficiency is improved.

Embodiments for communicating using a switch configured to establish multiple types of communication routes. First and second upstream switch ports (USPs) communicate with first and second hosts according to first and second Compute Express Link (CXL) protocols, respectively. A downstream switch port (DSP) communicates with a device according to a third CXL protocol. The switch couples the first USP to the DSP via a first route traversing a single Virtual CXL Switch (VCS), and couples the first USP to the second USP via a second route traversing two VCSs. Optionally, the switch includes a Resource Provisioning Unit (RPU) coupling the two VCSs of the second route, terminating the first and second CXL protocols, and translating between CXL messages conforming to the first and second CXL protocols.

The invention discloses a cluster network traffic control method, product, device and medium, and relates to the technical field of computers, comprising: collecting current subnet information, current access control rule file and current malicious network traffic characteristics in a container cluster; dividing subnet addresses in the current subnet information into subnet address sets, classifying the current access control rule files to obtain rule address sets, and obtaining container addresses corresponding to the current malicious network traffic features; generating each new access control rule based on each subnet address set, each rule address set and the container address, and determining the priority of each new access control rule; and issuing each new access control rule to a kernel of each virtual switch in the container cluster according to the priority, so that each virtual switch manages and controls the network flow according to each new access control rule. And the access control rule is adjusted more reasonably, so that the management and control reliability of cluster network traffic is improved.

The embodiment of the invention provides a data packet processing method, a physical host, a virtual switch, a medium and a product, when a data packet is acquired by the virtual switch, a software forwarding module in the virtual switch can forward the data packet according to a locally stored data distribution rule and metadata of the data packet; and distributing the data packet to a target receiving queue configured by a virtual network card in the virtual instance, and processing the data packet by a processor core bound with the target receiving queue, namely realizing multi-queue receiving of the data packet. In the process, the process of distributing the data packets by using the data distribution rule is realized by the software module. Compared with configuration of data distribution rules in a hardware module, richer data distribution rules can be configured in a software module, so that distribution of data packets is more reasonable. And when the virtual host is subjected to thermal migration, the data distribution rule configured in the software module can be directly subjected to thermal migration, so that the process of reconfiguring the data distribution rule on a new physical host is omitted.

Disclosed in the present invention are a network traffic collection method and system based on a cloud-based environment. The present invention solves the problems of existing traffic collection being invasive to a monitored system, and having system and software dependency requirements, poor adaptability, and high consumption of computing and network transmission resources. A mirror virtual switch and a virtualized instance agent node are created at a computing node. By mirroring traffic by means of a patch port of a virtual switch, monitoring node data is diverted to the mirror virtual switch, and then is forwarded to the virtualized instance agent node by means of the mirror virtual switch; network traffic data is stored as in a file format, and is forwarded to a data security monitoring platform for monitoring a virtualized instance event in real time, and when the event changes, a flow table of the virtual switch is adjusted on the basis of a monitoring policy. According to the present invention, traffic monitoring is implemented in a software manner, and virtualized instance traffic is collected before packet modification, facilitating the accuracy of security event judgment, involving no intrusive modification to an instance, and no system requirement, and occupying few resources.

The invention discloses a congestion control method and device for a cloud computing platform, a program product and a storage medium, belongs to the field of data congestion control, is used for intercepting sending messages of virtual machines and performing data congestion control, and solves the problem of unreasonable network bandwidth allocation caused by different congestion control methods of different virtual machines. The method comprises the following steps: intercepting a TCP message sent by each virtual machine through a virtual switch of a virtualization layer, updating data of a flow table item of a target connection and a network state evaluation index according to the TCP message, and then determining a target window value of a TCP window of the TCP message according to the data of the flow table item of the target connection and the network state evaluation index. According to the method, the TCP window of the TCP message is modified to the target window value, so that the network bandwidth of each virtual machine in the cloud computing platform can be uniformly allocated, the network bandwidth can be reasonably allocated, the communication efficiency can be improved, and the utilization rate of network resources is also improved.

The invention relates to a vehicle equipment testing method and device and a storage medium, and the method applied to a vehicle comprises the steps that a seat controller responds to a testing instruction sent by testing control equipment based on a virtual switch controller, and sends a processing instruction to a vehicle body controller, and the vehicle body controller controls the vehicle table board equipment and / or the vehicle screen equipment to execute switching operation based on the processing instruction, so that the test control equipment obtains switching test information formed by the switching operation executed by the vehicle table board equipment and / or the vehicle screen equipment, and generates a test result based on the switching test information and preset target switching information. Therefore, when the fatigue durability test is carried out, the whole test process is started and completed through an automatic program control instruction, the test cost is reduced, the test efficiency is improved, meanwhile, the test is carried out based on the whole vehicle environment, the test is not merely fatigue durability in a single environment, and the test accuracy and reliability of the vehicle equipment are further improved.

The invention relates to a network switching method and device of a virtual machine, computer equipment and a storage medium. The method comprises the following steps: monitoring the network state of a main network under the condition that a virtual machine uses the main network to carry out network communication; a communication link of the main network comprises a virtual switch in communication connection with the virtual machine, a network service component in communication connection with the virtual switch and a physical switch in communication connection with the network service component; switching the communication network of the virtual machine to a standby network when monitoring that the main network is in the abnormal network communication state; the standby network is in communication connection with the physical switch through a user mode provided by the fast simulator; and the fast simulator is used for simulating and generating the virtual machine. By adopting the method, the network reliability of the virtual machine can be improved, and the high availability of the virtual machine is further improved.

The invention discloses a speed limiting method and device, a virtual switch, a storage medium and a computer program product, and the method comprises the steps: the virtual switch determines a first value of each virtual machine managed by the virtual switch; under the condition that the network computing power utilization rate of the virtual switch is greater than a set threshold, determining all first virtual machines in the virtual machines managed by the virtual switch; wherein the first numerical value of the first virtual machine is greater than the corresponding second numerical value; executing setting operation on at least part of the first virtual machines, wherein the setting operation comprises distributing at least part of idle network computing power of the virtual switch to the first virtual machines and / or limiting the speed of network computing power which is used by the first virtual machines and exceeds a third numerical value; the first numerical value indicates that the virtual machine consumes the network computing power of the virtual switch, the second numerical value indicates the reference network computing power quota of the virtual machine, and the third numerical value is greater than or equal to the second numerical value.

The invention provides an access control list configuration method and device, electronic equipment and a storage medium, and relates to the technical field of servers, and the method comprises the steps: collecting subnet information in a target containerization cluster, a configured access control list rule and security threat features in network traffic; the information is subjected to fusion analysis based on a predefined security policy so as to generate an access control list rule set containing different priorities, and then the rules are synchronized to a cluster virtual switch kernel according to the priorities so as to realize hierarchical control and dynamic protection of network traffic. The problems that a large-scale dynamic network environment is difficult to deal with, the automation level is low and malicious traffic cannot be efficiently intercepted due to the fact that manual configuration and static rule maintenance are relied on and deep integration of a containerized cluster network structure is lacked can be solved. The technical effects of improving the automation level of containerized cluster network management, enhancing the adaptability to a dynamic network environment, and realizing efficient interception of malicious traffic to guarantee network security are achieved.

A network device of a virtual switch, which includes a second network device and operates on a unified control plane, is provided. During operation, the network device maintains a link between its first port and a second port of the second network device. Here, the first link can be distinct from a second link used for exchanging data traffic of the virtual switch. The network device operates a spanning tree protocol to place the first and second ports in respective port states, which include a forwarding state and a blocked state. If the second link becomes unavailable, the network device determines that the virtual switch has split into a first segment comprising the network device and a second segment comprising the second network device. If the first port state is in the blocked state, the network device suspends communication via a respective port of the first segment.

The invention relates to the technical field of cloud computing, and discloses a message processing method and device, electronic equipment and a storage medium, and the method comprises the steps: obtaining the current environment information of a host machine; determining a kernel mode flow table upper limit value of a virtual switch according to the current environment information of the host machine; determining a kernel mode message interception condition of the virtual switch according to the kernel mode flow table upper limit value of the virtual switch; and under the condition that the kernel mode flow table number of the virtual switch meets the kernel mode message interception condition, intercepting a target message in to-be-processed messages to be transmitted to the kernel mode of the virtual switch. The upper limit value of the kernel mode flow table of the virtual switch is predicted in advance, and the number of the kernel mode flow tables of the virtual switch is accurately controlled, so that the network bottleneck caused by excessive kernel mode flow tables is effectively avoided, the message processing efficiency is improved, and the network stability and the operation efficiency of a cloud computing management platform are further guaranteed.

The invention discloses a public network flow forwarding method, device and equipment for a cloud computing system and a medium, and relates to the technical field of cloud computing. The public network flow forwarding method for the cloud computing system comprises the steps that a virtual switch and a virtual machine are deployed on a host machine; a cloud computing system is built in a manner of deploying a virtual gateway on a cloud computing gateway, so that only a first message of public network flow in a cloud computing network is forwarded by a gateway node and a high-speed forwarding table is generated, and the gateway node does not need to participate in subsequent other public network flow messages which are not the first message. Public network traffic forwarding between hosts is directly carried out only by utilizing the generated high-speed forwarding table and the host information table, so that the technical problems of high load and high delay of public network traffic forwarding of the existing gateway node are solved, the forwarding efficiency of the public network traffic in the cloud computing network is greatly improved, and the forwarding efficiency of the public network traffic in the cloud computing network is improved. And meanwhile, the loss and the load pressure of the gateway node are greatly reduced.