Patent classifications
H04L2101/686
DETERMINING WHETHER TO RATE LIMIT TRAFFIC
Some embodiments provide a method for a gateway datapath that executes on a gateway device to implement logical routers for a set of logical networks and process traffic between the logical networks and an external network. The method receives a data message at the gateway device. To process the data message, the method executes a set of processing stages that includes a processing stage for a particular logical router. As part of the processing stage for the particular logical router, the method (i) uses an access control list (ACL) table to determine whether the data message is subject to rate limiting controls defined for the particular logical router and (ii) only when the data message is subject to rate limiting controls, determines whether to allow the data message according to a rate limiting mechanism for the particular logical router.
Systems and methods to operate devices with domain name system (DNS) caches
Described embodiments provide systems and methods for invalidating a cache of a domain name system (DNS) information based on changes in internet protocol (IP) families. A mobile device having one or more network interfaces configured to communicate over a plurality of networks using a plurality of internet protocol (IP) families is configured to maintain a cache storing DNS information of one or more IP addresses of a first IP family of the plurality of IP families used by the mobile device for a connection to a first network of the plurality of networks. The device can detect a change in the connection of the mobile device from the first network using the first IP family to a second network using a second IP family different from the first IP family and flush at least the DNS information of one or more IP addresses of the first IP family from the cache to prevent use by the mobile device of an IP address that corresponds to an invalid cache entry.
METHOD AND APPARATUS FOR ALLOCATING CTDB-BASED VIRTUAL IP ADDRESS, AND DISTRIBUTED STORAGE DEVICE
Disclosed are a Cluster Trivial Database (CTDB)-based virtual Internet Protocol (IP) address allocation method and apparatus, a distributed storage device, and a computer-readable storage medium. The method is applied to a distributed storage cluster. A known IP Version 4 (IPV4) virtual IP address parameter and available IPV4 virtual IP address parameter corresponding to an IPV4 virtual IP address and a known IP Version 6 (IPV6) virtual IP address parameter and available IPV6 virtual IP address parameter corresponding to an IPV6 virtual IP address may be acquired to obtain an IPV4 allocation result and an IPV6 allocation result by calculation respectively, and then virtual IP addresses are allocated to each normal node by use of the IPV4 allocation result and the IPV6 allocation result.
TECHNIQUES FOR PERFORMING DOMAIN NAME SYSTEM SUPPORT
This disclosure describes techniques for performing domain name system (DNS) support on public resolvers. For instance, an electronic device may send a query to a local DNS resolver. The electronic device may then receive an answer from the local DNS resolver that includes a pattern. Using the answer, the electronic device may generate a DNS packet that includes at least the answer and a query for a first Internet Protocol (IP) address associated with a first IP version, such as IPv6. The electronic device may then send the DNS packet to a public DNS resolver. Using the DNS packet, the public DNS resolver may generate a synthesized IP address associated with the first IP version. For example, the public DNS resolver may identify a second IP address associated with a second IP version, such as IPv4, and generate the synthesized IP address using the second IP address and the answer.
METHOD AND SYSTEM FOR OPERATING A VEHICULAR DATA NETWORK BASED ON A LAYER-2 PERIODIC FRAME BROADCAST, IN PARTICULAR A ROUTING PROTOCOL
Method for operating a network node of a wireless digital data network based on broadcast layer-2 periodic frames, wherein said network is composed by a plurality of network nodes, wherein each network node is either a mobile node equipped with an on-board unit (OBU) node, or is a static node equipped with a road-side unit (RSU) node, said method comprising a current network node of the plurality of network nodes carrying out the following steps: periodically broadcasting a Network Status Information (NSI) frame which comprises: the node identifier and a type of node of the current network node; receiving broadcasted NSI frames from neighbouring network nodes of the plurality of network nodes reachable by the current network node through wireless communication; for any one received NSI frame, storing the received NSI frame in an entry in a NSI table (NSIT) if the received NSI frame was the first received NSI frame from a neighbouring network node, or otherwise, if the received NSI frame was not the first received NSI frame from the neighbouring network node, updating a previously stored NSIT entry with the received NSI frame; marking as expired or deleting any previously entered NSIT entry after a predetermined period of time has passed after receiving or updating said any previously entered NSIT entry. Also an electronic network node of a wireless digital data network, wherein said network node is programmed to carry out the method.
NETWORK LAYER REACHABLE INFORMATION TRANSMISSION METHOD, SYSTEM, AND APPARATUS AND NETWORK DEVICE
A transmit device may generate a first part and a second part that are used to advertise a plurality of pieces of network layer reachable information (NLRI) of pieces of destination end information. The first part includes a common information field corresponding to the pieces of NLRI, the common information field includes same information in the pieces of NLRI, the second part includes private information fields corresponding to the plurality of pieces of NLRI, and each of the private information fields includes information other than the same information in NLRI corresponding to each private information field. The first part and the second part may be carried in an advertisement packet, to implement compression and sending of information used to advertise the pieces of NLRI, thereby improving efficiency of advertising a route by the transmit device without affecting normal running of a service.
Internet address structure analysis, and applications thereof
An analysis system automates IP address structure discovery by deep analysis of sample IPv6 addresses using a set of computational methods, namely, information-theoretic analysis, machine learning, and statistical modeling. The system receives a sample set of IP addresses, computes entropies, discovers and mines address segments, builds a network model of address segment inter-dependencies, and provides a graphical display with various plots and tools to enable a network analyst to navigate and explore the exposed IPv6 address structure. The structural information is then applied as input to applications that include: (a) identifying homogeneous groups of client addresses, e.g., to assist in mapping clients to content in a CDN; (b) supporting network situational awareness efforts, e.g., in cyber defense; (c) selecting candidate targets for active measurements, e.g., traceroutes campaigns, vulnerability assessments, or reachability surveys; and (d) remotely assessing a network's addressing plan and address assignment policy.
IP tolerance and signaling interworking
In an attempt to establish a communication session between a first communication entity and a second communication entity, a first message is received. For example, the first message may be a SIP INVITE message. A determination is made, based on a registration message from the first communication entity and/or the second communication entity, that at least one of the first communication entity or the second communication entity is Internet Protocol (IP) version intolerant. In response to determining that the at least one of the first communication entity or the second communication entity is IP version intolerant, one or more IP addresses are adapted in messages (e.g., the SIP INVITE message) for establishing the communication session. The adaption changes/removes the one or more IP addresses to a different IP version to ensure proper IP compatibility.
APPLICATION SERVER ACCESS METHOD AND TERMINAL
The present disclosure relates to application server access methods and terminals. One example method includes in response to a terminal failing to connect to an application server by using an IPv6 address, setting an accessed domain name to a restricted domain name, and, when the accessed domain name is re-accessed later, connecting to the application server by directly using an IPv4 address.
METHOD AND DEVICE FOR ALLOCATING AND OBTAINING IP ADDRESS
This application provides a method for allocating an IP address, including: establishing, by a session management network element, a session for a terminal apparatus, where the session is used for transmitting a data packet via a control plane network element; allocating, by the session management network element, an IP address to the terminal apparatus; and sending, by the session management network element, the data packet to the terminal apparatus via a mobility management network element, where the data packet includes the IP address. In a case in which the terminal apparatus can obtain the IP address without establishing an additional connection channel, the terminal apparatus can obtain the IP address more flexibly, and occupation of excessive signaling resources can be avoided.