170 results about "Virtual switch" patented technology

Technologies for creating an optimized and accelerated network pipeline using a virtual switch and a network pipeline abstraction layer (NPAL) for fast link recovery are described. The virtual switch can monitor a link availability of each of a plurality of links to a destination, the plurality of links being specified in an initial group of identifiers. The virtual switch can detect a link failure of a first link of the plurality of links. The NPAL can remove a first link identifier, associated with the first link, from the initial group of link identifiers to obtain a modified group of link identifiers. The NPAL can cause a routing table in the NPAL to be updated to remove the first link identifier. The acceleration hardware engine can process network traffic data using the network pipeline and distribute the network traffic data to only the remaining links of the plurality of links.

The invention provides a mixed reality industrial simulation training system which is composed of a space fusion perception unit, a multi-physics field simulation unit, a cooperative training management unit and a self-adaptive teaching engine. The space fusion sensing unit is composed of a real-time environment modeling and positioning subsystem and a physical interaction detection algorithm, and the real-time environment modeling and positioning subsystem dynamically constructs a three-dimensional space coordinate system of a real industrial scene through a visual sensor array and a radio frequency scanning device; generating a pose matrix of the virtual equipment model in the perspective display interface; the physical interaction detection algorithm realizes contact force feedback between virtual and real objects based on dynamic solution of collision volume, and when an operator triggers a virtual switch through a handheld controller, a real equipment control signal is synchronously driven; the multi-physics field simulation unit comprises a physical engine core module and a fault injection interface.

The invention relates to the technical field of network intercommunication, and provides a method and equipment for realizing a bare metal gateway based on an OpenFlow flow table, and the method comprises the steps: enabling a bare metal server to be accessed to a VPC network, and creating and binding a network port to a specified bare metal gateway node in a specified VPC subnet through a cloud management platform; a logic flow table is generated through the OVN controller according to the network ports and the binding relation of the network ports, and the logic flow table is issued to the bare metal net nodes bound to the network ports; the bare metal net node translates the received logic flow table into an OpenFlow flow table and issues the OpenFlow flow table to a local OVS virtual switch; and the OVS virtual switch performs two-layer forwarding processing on the message transmitted between the bare metal server and the virtual machine in the VPC according to the received OpenFlow flow table. The bare metal gateway is realized in a pure software mode, the dependence on special hardware is avoided, and the cost is remarkably reduced. The efficient conversion between the VXLAN and the VLAN is realized based on the OpenFlow flow table, the flexibility, the expandability and the operation and maintenance automation degree are improved, and the high-performance two-layer intercommunication is ensured.

Embodiments for communicating using a switch configured to establish multiple types of communication routes. First and second upstream switch ports (USPs) communicate with first and second hosts according to first and second Compute Express Link (CXL) protocols, respectively. A downstream switch port (DSP) communicates with a device according to a third CXL protocol. The switch couples the first USP to the DSP via a first route traversing a single Virtual CXL Switch (VCS), and couples the first USP to the second USP via a second route traversing two VCSs. Optionally, the switch includes a Resource Provisioning Unit (RPU) coupling the two VCSs of the second route, terminating the first and second CXL protocols, and translating between CXL messages conforming to the first and second CXL protocols.

The invention discloses a congestion control method and device for a cloud computing platform, a program product and a storage medium, belongs to the field of data congestion control, is used for intercepting sending messages of virtual machines and performing data congestion control, and solves the problem of unreasonable network bandwidth allocation caused by different congestion control methods of different virtual machines. The method comprises the following steps: intercepting a TCP message sent by each virtual machine through a virtual switch of a virtualization layer, updating data of a flow table item of a target connection and a network state evaluation index according to the TCP message, and then determining a target window value of a TCP window of the TCP message according to the data of the flow table item of the target connection and the network state evaluation index. According to the method, the TCP window of the TCP message is modified to the target window value, so that the network bandwidth of each virtual machine in the cloud computing platform can be uniformly allocated, the network bandwidth can be reasonably allocated, the communication efficiency can be improved, and the utilization rate of network resources is also improved.

The invention provides an access control list configuration method and device, electronic equipment and a storage medium, and relates to the technical field of servers, and the method comprises the steps: collecting subnet information in a target containerization cluster, a configured access control list rule and security threat features in network traffic; the information is subjected to fusion analysis based on a predefined security policy so as to generate an access control list rule set containing different priorities, and then the rules are synchronized to a cluster virtual switch kernel according to the priorities so as to realize hierarchical control and dynamic protection of network traffic. The problems that a large-scale dynamic network environment is difficult to deal with, the automation level is low and malicious traffic cannot be efficiently intercepted due to the fact that manual configuration and static rule maintenance are relied on and deep integration of a containerized cluster network structure is lacked can be solved. The technical effects of improving the automation level of containerized cluster network management, enhancing the adaptability to a dynamic network environment, and realizing efficient interception of malicious traffic to guarantee network security are achieved.

A network device of a virtual switch, which includes a second network device and operates on a unified control plane, is provided. During operation, the network device maintains a link between its first port and a second port of the second network device. Here, the first link can be distinct from a second link used for exchanging data traffic of the virtual switch. The network device operates a spanning tree protocol to place the first and second ports in respective port states, which include a forwarding state and a blocked state. If the second link becomes unavailable, the network device determines that the virtual switch has split into a first segment comprising the network device and a second segment comprising the second network device. If the first port state is in the blocked state, the network device suspends communication via a respective port of the first segment.

The invention discloses a public network flow forwarding method, device and equipment for a cloud computing system and a medium, and relates to the technical field of cloud computing. The public network flow forwarding method for the cloud computing system comprises the steps that a virtual switch and a virtual machine are deployed on a host machine; a cloud computing system is built in a manner of deploying a virtual gateway on a cloud computing gateway, so that only a first message of public network flow in a cloud computing network is forwarded by a gateway node and a high-speed forwarding table is generated, and the gateway node does not need to participate in subsequent other public network flow messages which are not the first message. Public network traffic forwarding between hosts is directly carried out only by utilizing the generated high-speed forwarding table and the host information table, so that the technical problems of high load and high delay of public network traffic forwarding of the existing gateway node are solved, the forwarding efficiency of the public network traffic in the cloud computing network is greatly improved, and the forwarding efficiency of the public network traffic in the cloud computing network is improved. And meanwhile, the loss and the load pressure of the gateway node are greatly reduced.

The invention discloses a network load balancing method, a computer program product, equipment and a medium, relates to the technical field of data centers, is applied to a virtual switch of a data center, and obtains to-be-sent data; packaging the to-be-sent data to obtain initial packaged data; in the quintuple, determining an item to be transformed; in the initial encapsulation data, transforming a value corresponding to a to-be-transformed item in the outer layer message to obtain target encapsulation data; performing hash operation based on the quintuple of the target encapsulation data to obtain a hash value; and transmitting the target encapsulation data according to a transmission path corresponding to the hash value. The method and the device have the beneficial effects that different transmission paths can be used for transmitting the target encapsulation data, and finally, different to-be-sent data of the same stream are transmitted through different transmission paths, so that the occupation of a single transmission path by the data of the same stream is avoided, load balancing between the transmission paths is realized, and the transmission efficiency is improved. The network load balancing capability of the data center is improved; and the universality is good.

Techniques are described for communications in an L2 virtual network. In an example, the L2 virtual network includes a plurality of L2 compute instances hosted on a set of host machines and a plurality of L2 virtual network interfaces and L2 virtual switches hosted on a set of network virtualization devices. An L2 virtual network interface emulates an L2 port of the L2 virtual network. Storm control information applicable to the L2 port is sent to a network virtualization device that hosts the L2 virtual network interface.

Disclosed are a packet forwarding method and system, an electronic device, and a storage medium. The method comprises: receiving an initial packet sent by forwarding hardware, wherein the initial packet is a packet satisfying a preset dispersion condition, the preset dispersion condition is used for dispersing a target packet to obtain a packet needing to be processed by a first virtual switch, and the target packet is a packet for which a forwarding path cannot be determined on the basis of a flow table of the forwarding hardware; and generating a first packet corresponding to the initial packet, and sending the first packet to the forwarding hardware, such that the forwarding hardware forwards the first packet on the basis of identification information in the first packet, wherein the identification information is used for representing a forwarding path of the initial packet.

Embodiments for communicating using a switch having multiple sets of switch ports, which can generate abstractions for compute nodes and accelerators in a switched Compute Express Link (CXL) interconnect, enabling any-to-any connectivity between hosts and devices. A first set of switch ports couples hosts and / or devices with a first virtual to physical binding. A second set couples a Resource Provisioning Unit (RPU) with the first virtual to physical binding. The first binding binds at least some of the first and / or second sets of switch ports to a first set of Virtual CXL Switches (VCSs). A third set couples the RPU to a second virtual to physical binding. A fourth set couples additional hosts and / or devices with the second virtual to physical binding. And the second virtual to physical binding binds at least some of the third and / or fourth sets of switch ports to a second set of VCSs.

The application discloses a software defined network system, which comprises a BGP proxy component, an SDN controller, a plurality of gateway devices not supporting a BGP protocol and computer nodes; the BGP proxy component is used for establishing a BGP session with the SDN controller and announcing routing information of the plurality of gateway devices to the SDN controller through the BGP session; the SDN controller is used for generating node-side data plane configuration information based on the received routing information and delivering the node-side data plane configuration information to the computer nodes; and the computer nodes are used for configuring a forwarding table and / or tunnel encapsulation parameters of a virtual switch on the nodes according to the received node-side data plane configuration information. The application reduces the complexity of networking.

The invention discloses a speed limit configuration method and device of a virtual switch, equipment, a medium and a product, and the method comprises the steps: generating at least one piece of speed limit group information according to the bandwidth demand information of each virtual machine user; wherein the speed limit group information comprises speed limit configuration parameters corresponding to the bandwidth demand information and at least one speed limit object; and issuing the speed limit group information to a virtual switch to indicate the virtual switch to perform network speed limit on each virtual machine user based on the speed limit group information. According to the invention, by generating the speed-limiting group information, various types of speed-limiting configuration parameters of different speed-limiting objects can be integrated, and unified speed-limiting configuration of the virtual switch is realized, so that the timeliness of speed-limiting configuration issuing of the virtual switch can be ensured.

A system and method provides for safeguarded selection of a polarity for selected application of power or ground to a test circuit via a circuit tester test probe. A positive polarity selection switch is aligned with a negative polarity selection switch on a probe surface. A virtual switch indicia is shown on a probe display with an actuation axis of the virtual switch oriented to correspond to relative alignment of the polarity switches. Pressing the positive polarity switch places the virtual switch in a first position indicating a positive probe polarity selection and pressing the negative polarity switch places the virtual switch in a second position indicating a negative probe polarity selection. Additional polarity selection indicia are generated to reinforce user recognition of a selected polarity to avoid circuit or probe damage.

The invention discloses a message forwarding method and system, electronic equipment and a storage medium. The method comprises the steps that an initial message sent by forwarding hardware is received, the initial message is a message meeting a preset shunting condition, and the preset shunting condition is used for shunting a message needing to be processed by a first virtual switch from a target message, the target message is a message of which a forwarding path cannot be determined based on a flow table of the forwarding hardware; generating a first message corresponding to the initial message, and sending the first message to the forwarding hardware, so that the forwarding hardware forwards the first message according to the identification information in the first message; the identification information is used for representing a forwarding path of the initial message. According to the embodiment of the invention, the technical problem that a network card in the related technology is difficult to meet the message processing requirement in a high-performance network scene can be solved.

The invention relates to the technical field of cloud computing, in particular to a cloud tenant bearing scale optimization method and device, equipment, a medium and a product, and the method comprises the steps: recognizing a sender and an access purpose of an access request, and determining a data flow direction corresponding to the access request; in response to the condition that the sender is the virtual machine, address conversion and message encapsulation are performed on the access request through the virtual switch, and the encapsulated access request is sent to the cloud gateway; and in response to the fact that the sender is the Underlay network or the public network, the cloud gateway is determined based on the sender, the cloud gateway confirms the virtual private cloud based on the access purpose, the access request is subjected to message packaging, and the access request is sent to the virtual switch. According to the technical scheme of the invention, the original address translation is sunk to the virtual switches corresponding to the virtual private clouds from the cloud gateway for processing according to the data in the cloud-out direction and the cloud-in direction, so that the memory space occupied by the NAT table items can be released, the detailed routing capacity of the virtual machines is improved, and the expansion of the cloud tenant scale borne by the cloud data center is facilitated.

To provide a system and a method that support efficient virtualization in lossless interconnect networks.SOLUTION: A network switching environment 600 includes: one or more switches including at least a leaf switch; a plurality of host channel adapters each including at least one virtual function (VF), a virtual switch, and at least one physical function (PF); a plurality of hypervisors; and a plurality of virtual machines (VMs), and each of the plurality of virtual functions associated with at least one VF. A method deploys a plurality of host channel adapters comprising one or more virtual switches with a prepopulated local identifier (LID) architecture or a virtual switch with a dynamic LID assignment architecture, assigns the LID to each virtual switch, and calculates one or more linear forwarding tables based at least on the LIDs assigned to each of the virtual switches.SELECTED DRAWING: Figure 6

The application relates to a bidirectional message processing method based on a unified user state channel and belongs to the technical field of virtualized communication, which solves the problems of CPU idle rate, high memory occupation and aggravated message processing delay caused by large-scale virtual function representative port polling. The method comprises the following steps: creating a virtual interface and an association relationship between the virtual interface and a hardware virtual function instance identifier in a user state virtual switch; establishing a user state channel as a shared bidirectional message transmission path between a plurality of hardware virtual function instances and the user state virtual switch; constructing extended metadata containing the hardware virtual function instance identifier, obtaining transmission data according to the extended metadata and a to-be-processed message; receiving and analyzing the transmission data through the user state channel to obtain the to-be-processed message and the extended metadata, and then determining a forwarding rule of the to-be-processed message and executing the forwarding of the to-be-processed message. The method realizes accelerated processing of the bidirectional message without polling and significantly reduces the memory resource occupation.

Embodiments of the present application provide a message processing method and device, and a storage medium. A virtual switch in a network device can obtain event notification information from the network device, and determine at least one data queue containing a to-be-sent message from data queues of the network device according to the event notification information. Then, the virtual switch can access the at least one data queue to obtain the to-be-sent message, and send the to-be-sent message to a destination address. In this implementation, the virtual switch only needs to access the data queue containing the to-be-sent message, and does not need to access all data queues one by one, which greatly reduces the processing delay of the message.

This application relates to the field of network communication technology, and in particular to a gateway configuration method and apparatus. The method is applied to an OVS virtual switch, and includes: receiving the MAC address of a newly created virtual machine and custom gateway information specified for the virtual machine from the controller; receiving a DHCP request message sent by a target virtual machine, and obtaining the MAC address information of the target virtual machine carried in a specified field of the DHCP request message; if it is determined that target custom gateway information corresponding to the MAC address of the target virtual machine is maintained locally, then sending the target custom gateway information in a DHCP response message to the target virtual machine, so that the target virtual machine performs gateway configuration based on the target custom gateway information.

This application discloses a message transmission method and apparatus. The method includes: receiving a first message at the tunnel port of a virtual switch, wherein the tunnel port corresponds to at least one target tunnel, the target tunnel corresponds to multiple transmission paths, and the transmission paths connect a target client and a service agent module; determining the target transmission direction of the first message based on the transmission direction tag information carried by the first message; and determining a target transmission path among the transmission paths based on the target transmission direction.

The invention discloses a virtualization method for audio frequency integrated network resources, which belongs to the technical field of audio frequency network resource management, and comprises the following steps of: constructing a distributed virtual switch layer covering a subnet, embedding a virtual switch instance into a kernel mode network stack of each physical host in a cluster, dynamically mapping the cloud hosts in the subnet to a physical host group through a consistent Hash algorithm; when a cloud host sends an audio data packet, a source physical host virtual switch instance executes the following steps: extracting a DSCP field and marking the DSCP field as EF, and through GRE-over-UDP tunnel packaging, replacing a target MAC address with a virtual MAC address of a next hop virtual switch instance; and after the virtual switch instance of the target physical host is decapsulated, delivering the audio packet to the target cloud host based on the virtual port forwarding table. According to the method, efficient virtualization transmission of audio data is realized through a distributed virtual switching layer and a consistent Hash mapping mechanism, QoS guarantee and low-delay transmission are supported, and the method is suitable for audio network resource management in a large-scale cloud environment.

The invention discloses a data acquisition and evaluation method for a digital twin network, and designs a data acquisition and evaluation system for the digital twin network. Digital twin network management software, a virtual switch, virtual equipment, a network mirror image data acquisition and analysis terminal and a network mirror image data evaluation and analysis center are designed in a digital twin network data acquisition and evaluation system, and system composition, functions and processes are explained. According to the method, a safe, controllable and efficient research environment is realized by constructing a digital twin network environment, a brand new mode is provided for network data acquisition and evaluation, and the defects of actual physical network data acquisition and evaluation can be overcome.

Technologies for creating an optimized and accelerated network pipeline using a virtual switch and a Network Pipeline Abstraction Layer (NPAL) for rapid link recovery are described. The virtual switch can monitor the link availability of each of several links to a destination, where the multiple links are specified in an initial set of identifiers. The virtual switch can detect a link failure of the first of the multiple links. The NPAL can remove the first link identifier associated with the first link from the initial set of link identifiers to obtain a modified set of link identifiers. The NPAL can cause a routing table within the NPAL to be updated to remove the first link identifier.The acceleration hardware engine can process network traffic data using the network pipeline and distribute the network traffic data only to the remaining of the multiple links.

The invention relates to an attack traffic identification method and device, computer equipment, a medium and a program product. The method comprises the following steps: when a new network connection of a virtual switch is detected, determining a connection rate of the new network connection; when the connection rate of the new network connection reaches a preset attack traffic threshold, determining the connection state of each network connection of the virtual switch; each network connection comprises the new network connection; and when the connection state is a semi-connection state, determining that the attack traffic aiming at the virtual switch exists. By adopting the method, whether attack traffic exists or not can be accurately identified.

The embodiment of the invention provides a micro-service architecture-oriented network security detection method and device. The method comprises the following steps of: respectively acquiring communication flow between virtual machines and a network activity track of a container through a virtual switch port mirror image and a log interface of a container platform; constructing a dynamic baseline model containing a legal communication matrix, a protocol white list and a traffic threshold; comparing the acquired data with the dynamic baseline model by adopting a real-time stream processing technology, and detecting an abnormal behavior of the container or the virtual machine; and executing response measures of different levels according to the seriousness of the abnormal behavior threat. According to the scheme, internal attack behaviors such as container escape and transverse penetration can be effectively identified and coped with.

The application discloses a virtual machine MAC address learning method and device, equipment, medium and product, relates to the technical field of cloud computing, and is applied to a distributed controller. The method comprises the following steps: acquiring a source MAC address reported by a virtual switch and determining a target virtual machine port bound with the source MAC address; wherein a virtual machine on a host machine sends a network message through the target virtual machine port, and the network message carries the source MAC address; acquiring current reporting state information of the target virtual machine port from a preset port reporting state list, and updating the current reporting state information based on the source MAC address to obtain updated reporting state information; wherein the port reporting state list is used for recording reporting state information of each virtual machine port about the MAC address; and determining whether to learn the source MAC address and whether to allow the source MAC address to be reported to a southbound database based on the updated reporting state. The application can guarantee the stability of an OVN cluster.

This invention provides a data transmission method and apparatus based on a virtual switch. The method includes: determining the subnet segment range of the local area network where the target tunnel endpoint is located and the IP address of the gateway based on the IP address, subnet segment, and routing information of the target tunnel endpoint; obtaining a first list of IP addresses within the same subnet segment range as the target tunnel endpoint from the flow table, thereby updating the neighbor table; determining the target IP address; searching for the target MAC address corresponding to the target IP address in the neighbor table; and forwarding the packet to be forwarded to the target MAC address through the virtual switch. This method achieves the goal of obtaining the MAC address corresponding to the target IP address through the neighbor table, thereby ensuring that the forwarding of normal packets is not lost and avoiding the risk that the virtual switch itself may be affected by modifying it to add caching functionality.

The invention provides a cloud desktop virtual network device and network card straight-through on-demand hybrid forwarding method, belongs to the technical field of cloud desktop and virtualization, and realizes a flexible flow scheduling strategy on a bonding aggregation port through statistics and network quality analysis of user network messages based on aggregation binding of an openvswitch virtual network card and a sriov straight-through network card. On one hand, based on bandwidth requirements, large-bandwidth flow is guided to a high-performance straight-through network card, and low-bandwidth flow is guided to an ovs virtual switch network card; and on the other hand, based on network quality parameters such as packet loss rate and retransmission rate, the traffic which is high in packet loss rate and retransmission rate and urgently needs to be guaranteed preferentially is switched to the straight-through network card to be processed. Therefore, the network forwarding performance is dynamically optimized, and on-demand allocation of resources and improvement of user experience are realized.