Embodiments are directed to receiving an original packet at a service function; determining, for a reverse packet, a reverse service path identifier for a previous hop on a service function chain; determining, for the reverse packet, a service index for the reverse service path identifier; and transmitting the reverse packet to the previous hop on the service function chain.

A first network device of a plurality of network devices is provided. The first network device is configured to receive a first data packet from a second site; search a flow table stored in the first network device for a target flow entry whose flow identifier is of a first data flow, each entry comprises a flow identifier and a corresponding outbound interface identifier, the target flow entry is created when the first site sends a second data flow to the second site, a source address of the second data flow is a destination address of the first data flow, and a destination address of the second data flow is a source address of the first data flow; and if the target flow entry is found, send the first data packet through an interface corresponding to an outbound interface identifier in the target flow entry.

A method for anticipatory bidirectional packet steering involves receiving, by a first packet steering module of a network, a first encapsulated packet traveling in a forward traffic direction. The first encapsulated packet includes a first encapsulating data structure. The network includes two or more packet steering modules and two or more network nodes. Each of the packet steering modules includes a packet classifier module, a return path learning module, a flow policy table, and a replicated data structure (RDS). The return path learning module of the first packet steering module generates return traffic path information associated with the first encapsulated packet and based on the first encapsulating data structure. The first packet steering module updates the RDS using the return traffic path information and transmits the return traffic path information to one or more other packet steering modules.

Disclosed herein are a stepping-stone detection apparatus and method. The stepping-stone detection apparatus includes a target connection information reception unit for receiving information about a target connection from an intrusion detection system (IDS), a fingerprint generation unit for generating a target connection fingerprint based on the information about the target connection, and generating one or more candidate connection fingerprints using information about one or more candidate connections corresponding to one or more flow information collectors, and a stepping-stone detection unit for detecting a stepping stone by comparing the target connection fingerprint, in which a maximum allowable delay time is reflected, with the candidate connection fingerprints.

A node receives, from a center node, a request packet including a data part in which a MAC address and position information of the center node are described, determines whether or not there is a request destination node, where determining that there is the request destination node, additionally describes a MAC address and position information of the node itself in the data part, and transmits the described request packet to the request destination node, where determining that there is no request destination node, determines that the node itself is a terminal node, where determining that the node itself is the terminal node, generates a reply packet including a data part in which all of MAC addresses and all pieces of position information described in the data part of the received request packet are described, and transmits the reply packet to a request source node.

Systems, methods, and software described herein provide enhancements for deploying communication networks in clusters of satellite devices. In one example, a first subset of satellite devices is configured to orbit in a first orbital layer, and a second subset of satellite devices is configured to orbit in a second orbital layer. A communication network is formed among the satellite devices and is configured to selectively exchange communications among the first orbital layer and the second orbital layer based at least in part on an operational status of the communication network.

A wireless communication system may use federated learning to develop a global model. The system may initialize parameters of user equipment (UE) models. A network node may select multiple UEs to participate in federated training. The selected UEs may choose one or more model layers to generate local models. The network node may aggregate the local models to generate a global model. The process may be repeated until the global model converges.

Embodiments of the present invention provide a Multiprotocol Label Switching traffic engineering tunnel establishing method and device. A tunnel establishing method includes: receiving, by a second routing device, an identifier, which is sent by a first routing device, of an MPLS TE tunnel from a first VPN instance to a second VPN instance; acquiring, by the second routing device according to the identifier, path information of the MPLS TE tunnel from the first VPN instance to the second VPN instance; and establishing an MPLS TE tunnel from the second VPN instance to the first VPN instance according to the acquired path information. Therefore, forward and reverse bidirectional tunnels are co-routed or partially co-routed, thereby solving a problem caused by non-co-routing during BFD.

A receiving node receives a virtual LDP initialization (vInit) message from a first node, where the vInit message comprises a request to establish a vLDP session between a requesting node and a target node. If the receiving node does not own a destination address of the vInit message, the receiving node is determined to be a relay node. The relay node inserts a relay label into the vInit message, where the relay label is an outgoing label that the relay node uses to reach the first node, and forwards the vInit message toward the destination address. If the receiving node owns the destination address, the receiving node is determined to be the target node, which extracts a stack of relay labels from the vInit message. The relay labels are used to define a return path to the requesting node for messages transmitted over the vLDP session.

A method for the exchange of data between nodes of a server cluster includes a plurality of nodes interconnected together by a geographic interconnection network including a plurality of transmission segments linking the plurality of nodes together according to a predetermined limited number of several different connection directions respectively associated with several different coordinates of a system of coordinates, each transmission segment of the geographic interconnection network thus belonging to a single one of the different connection directions and the system of coordinates thus being defined such that each coordinate of the system of coordinates is associated with a single one of the different connection directions, the method including sending, by a sending node, data intended for at least one other receiving node; transmitting the data using the geographic interconnection network; and receiving the data by each the receiving node.