A packet processing method includes a first network device receiving a first Bit Index Explicit Replication (BIER) packet including a first BIER header. When the first BIER packet is a packet sent to a second network device, and in response to determining that the second network device is an edge node device in a BIER communication network and does not support BIER packet forwarding, the first network device determines a target label used for a reverse path forwarding (RPF) check, updates the first BIER packet to obtain a second BIER packet, where the second BIER packet includes the target label but does not include the first BIER header, and sends the second BIER packet to the second network device.

A method for deep packet inspection (DPI) in a software defined network (SDN). The method includes configuring a plurality of network nodes operable in the SDN with at least one probe instruction; receiving from a network node a first packet of a flow, the first packet matches the at least one probe instruction and includes a first sequence number; receiving from a network node a second packet of the flow, the second packet matches the at least one probe instruction and includes a second sequence number, the second packet is a response of the first packet; computing a mask value respective of at least the first and second sequence numbers indicating which bytes to be mirrored from subsequent packets belonging to the same flow; generating at least one mirror instruction based on at least the mask value; and configuring the plurality of network nodes with at least one mirror instruction.

Systems and methods for source address verification and/or retention for access devices.

Systems and methods for source address verification and/or retention for access devices.

In one embodiment, a device obtains routing forecasts for a software defined network. The device splits a particular routing policy for the software defined network into two or more routing policies, based on the routing forecasts. The device makes an evaluation as to whether the two or more routing policies should be reverted back into the particular routing policy. The device sends, to a user interface, data indicative of the particular routing policy that was split into the two or more routing policies and the evaluation as to whether the two or more routing policies should be reverted back into the particular routing policy.

A method for deep packet inspection (DPI) in a software defined network (SDN). The method includes configuring a plurality of network nodes operable in the SDN with at least one probe instruction; receiving from a network node a first packet of a flow, the first packet matches the at least one probe instruction and includes a first sequence number; receiving from a network node a second packet of the flow, the second packet matches the at least one probe instruction and includes a second sequence number, the second packet is a response of the first packet; computing a mask value respective of at least the first and second sequence numbers indicating which bytes to be mirrored from subsequent packets belonging to the same flow; generating at least one mirror instruction based on at least the mask value; and configuring the plurality of network nodes with at least one mirror instruction.

A method for deep packet inspection (DPI) in a software defined network (SDN). The method includes configuring a plurality of network nodes operable in the SDN with at least one probe instruction; receiving from a network node a first packet of a flow, the first packet matches the at least one probe instruction and includes a first sequence number; receiving from a network node a second packet of the flow, the second packet matches the at least one probe instruction and includes a second sequence number, the second packet is a response of the first packet; computing a mask value respective of at least the first and second sequence numbers indicating which bytes to be mirrored from subsequent packets belonging to the same flow; generating at least one mirror instruction based on at least the mask value; and configuring the plurality of network nodes with at least one mirror instruction.

In one embodiment, a device obtains routing forecasts for a software defined network. The device splits a particular routing policy for the software defined network into two or more routing policies, based on the routing forecasts. The device makes an evaluation as to whether the two or more routing policies should be reverted back into the particular routing policy. The device sends, to a user interface, data indicative of the particular routing policy that was split into the two or more routing policies and the evaluation as to whether the two or more routing policies should be reverted back into the particular routing policy.

Embodiments of this application provide a packet transmission method, a communication apparatus, and a communication system. A target transport layer proxy network element establishes a fourth transport layer connection based on a first context of a source transport layer proxy network element, where the first context is a context about packet transmission of the source transport layer proxy network element on a first path. If the target transport layer proxy network element receives first indication information, and the first indication information indicates that application context migration between a first application server and a second application server is completed, the target transport layer proxy network element performs transport layer processing on a packet on a second path based on a second context of the target transport layer proxy network element, and transmits, on the second path, a packet obtained through the transport layer processing. Hence, a packet loss can be avoided.

An information synchronization method includes sending, by a controller, a first message to a network device, where the first message carries control routing protocol (CRP) routing entry information, and is used to advertise a CRP route, and the first message includes first identification information, and after receiving the first message, storing, by a forwarding device, the CRP routing entry information into a CRP routing table of the network device as indicated by the first identification information. Hence, because a route advertised by the controller and a route advertised using a routing protocol between forwarding devices are stored in different routing tables, a related application of the route advertised using the routing protocol between the forwarding devices is not affected.