A novel design of a gateway that handles traffic in and out of a network by using a datapath daemon is provided. The datapath daemon is a run-to-completion process that performs various data-plane packet-processing operations at the edge of the network. The datapath daemon dispatches packets to other processes or processing threads outside of the daemon by utilizing a user space network stack.

A method of streaming media content over a network from a media cache node is described. The method includes receiving a request for a media content item from a client device, the request comprising an address identifying a media content item to be streamed. In response to the request, a streaming engine process is allocated to the media content item for fulfilling the request. Based on the address identifying the media content item, a location comprising a media cache node able to provide the media content item is determined and the media content item is streamed to the client device using the streaming engine process allocated to the media content item. Further methods of streaming a media content item and providing access to media content are also described.

An ICN-over-IP architecture, which supports ICN-dependent IP addresses, is provided as an integrated architecture requiring small changes within the network, utilizing the incrementally introduced ICN-enabled IP routers efficiently where ICN-enabled IP routers are distributed within/across domains and are capable of coordinating among others based on domain or ICN imposed policies. System, devices and methods are provided achieving improved performance with the introduction of additional ICN-enabled IP routers within/across domains, and continuing to perform efficiently by relying on the principles of the current IP forwarding and taking advantage of IP's currently available features.

The techniques describe forwarding multicast traffic using a multi-level cache in a network device forwarding plane for determining a set of outgoing interfaces of the network device on which to forward the multicast traffic. For example, a multi-level cache is configured to store a multicast identifier of a multicast packet and multicast forwarding information associated with the multicast identifier, such as identification of one or more egress packet processors of the network device to which the multicast packet is to be sent for forwarding to the set of one or more egress network devices, and/or outgoing interfaces of the network device toward each egress network device of the set of one or more egress network devices. The multi-level cache is also configured to store respective multicast identifiers that are to be encapsulated with outgoing multicast packets that are forwarded to the set of one or more egress network devices.

Disclosed is a method for managing a MAC address table by a network node, the method including: defining a first running time and a second running time for a timer; and the method further including: receiving a frame; applying the first running time in the timer defined for a source of the received frame in response to a detection that an address of a destination missing in the MAC address table; and applying a second running time in the timer for MAC address of the source of the received frame and in the timer for the MAC address of the destination in response to a detection that the address of the destination is present in the MAC address table. Also disclosed is a network node, a computer program product and a communication system.

The techniques described herein include isolating network traffic between tenants using a programmable switch that routes network traffic directly to the appropriate virtual private cloud (VPC) and/or virtual machine (VM).

A program to be executed to perform a packet processing operation on a packet associated with a resource group, as well as security settings of the resource group, are received. The program is transmitted to a set of fast path nodes which were assigned to the resource group based on the group's metadata. With respect to a particular packet, security operations based on the settings are performed and the program is executed at a fast path node. Based at least partly on the results of the program, a packet routing action corresponding to the received packet is performed.

A method for accessing a forwarding entry and a network device are provided. In an example, a cache receives, from a forwarding component, an entry reading command which carries a storage address in a storage of a first forwarding entry to be read. The cache locally searches for a first Hash bucket in a valid state according to the storage address of the first forwarding entry, the first Hash bucket containing a storage address identical to that of the first forwarding entry. If the first Hash bucket is found, the cache transmits, to the forwarding component, the first forwarding entry cached in cache space corresponding to the first Hash bucket. If not found, the cache reads the first forwarding entry from the storage and transmits the first forwarding entry to the forwarding component when the first Hash bucket is not found.

A method, apparatus, switch, device for packet forwarding and storage medium are disclosed. The method includes: obtaining a packet to be forwarded; detecting whether a first data table contains connection cache information corresponding to the packet; obtaining a first identifier of the connection cache information from the first data table if the first data table contains the connection cache information corresponding to the packet; obtaining connection information corresponding to the connection cache information from a second data table, and determining a second identifier of the connection cache information, wherein the second identifier is a current connection identifier corresponding to the connection cache information and changes when the connection information changes; and forwarding the packet based on the connection cache information if the second identifier is the same as the first identifier. The method for packet forwarding according an embodiment of the present application can reduce errors in packet forwarding.

An apparatus is disclosed to compress packets, the apparatus comprising; a data analyzer to identify a new destination address and a protocol identifier of an input packet corresponding to a new destination node and a communication system between the new destination node and a source node; a compression engine to utilize a plurality of compression functions based on the new destination address and the protocol identifier and reduce a size of the input packet; a compression analyzer to identify a reduced packet and a compression function identifier corresponding to the reduced packet, the compression function identifier associated with one of the compression functions; and a source modifier to construct a packet to include the compression function identifier by modifying unregistered values of a protocol identifier by a difference associated with the compression function identifier, the packet to inform the new destination node of a compression function.