H04L61/2503

Datapath for multiple tenants

A novel design of a gateway that handles traffic in and out of a network by using a datapath pipeline is provided. The datapath pipeline includes multiple stages for performing various data-plane packet-processing operations at the edge of the network. The processing stages include centralized routing stages and distributed routing stages. The processing stages can include service-providing stages such as NAT and firewall. The gateway caches the result previous packet operations and reapplies the result to subsequent packets that meet certain criteria. For packets that do not have applicable or valid result from previous packet processing operations, the gateway datapath daemon executes the pipelined packet processing stages and records a set of data from each stage of the pipeline and synthesizes those data into a cache entry for subsequent packets.

Method, apparatus, medium, and device for scheduling access request

An access request scheduling method includes determining a city and a city operator corresponding to an access source IP segment; selecting, from cloud delivery nodes of the city operator, a preferred node of the access source IP segment; determining a mapping relationship between the access source IP segment and an IP of the preferred node; and issuing the mapping relationship to scheduling agent modules of the cloud delivery nodes in a network.

Method, apparatus, medium, and device for scheduling access request

An access request scheduling method includes determining a city and a city operator corresponding to an access source IP segment; selecting, from cloud delivery nodes of the city operator, a preferred node of the access source IP segment; determining a mapping relationship between the access source IP segment and an IP of the preferred node; and issuing the mapping relationship to scheduling agent modules of the cloud delivery nodes in a network.

Hybrid network communication method, device, and system
11706324 · 2023-07-18 · ·

A hybrid network communication method is disclosed. A gateway device receives a first association request of a multimode device through a first physical interface, where the first association request includes a MAC address of a second physical interface of the multimode device. The gateway device receives a second association request of the multimode device through a third physical interface, where the second association request includes a MAC address of a fourth physical interface of the multimode device. The gateway device obtains an IPv6 address of the multimode device, and records a first correspondence and a second correspondence. The first correspondence includes the IPv6 address of the multimode device, the MAC address of the second physical interface, and the first physical interface. The second correspondence includes the IPv6 address of the multimode device, the MAC address of the fourth physical interface, and the third physical interface.

Hybrid network communication method, device, and system
11706324 · 2023-07-18 · ·

A hybrid network communication method is disclosed. A gateway device receives a first association request of a multimode device through a first physical interface, where the first association request includes a MAC address of a second physical interface of the multimode device. The gateway device receives a second association request of the multimode device through a third physical interface, where the second association request includes a MAC address of a fourth physical interface of the multimode device. The gateway device obtains an IPv6 address of the multimode device, and records a first correspondence and a second correspondence. The first correspondence includes the IPv6 address of the multimode device, the MAC address of the second physical interface, and the first physical interface. The second correspondence includes the IPv6 address of the multimode device, the MAC address of the fourth physical interface, and the third physical interface.

Telecommunication and multimedia management method and apparatus

A telecommunication and multimedia management apparatus and method that supports voice and other media communications and that enables users to: (i) participate in multiple conversation modes, including live phone calls, conference calls, instant voice messaging or tactical communications; (ii) review the messages of conversations in either a live mode or a time-shifted mode and to seamlessly transition back and forth between the two modes; (iii) participate in multiple conversations either concurrently or simultaneously; (iv) archive the messages of conversations for later review or processing; and (v) persistently store media either created or received on the communication devices of users. The latter feature enables users to generate or review media when either disconnected from the network or network conditions are poor and to optimize the delivery of media over the network based on network conditions and the intention of the users participating in conversations.

Application instance address translation method and apparatus

This application discloses example application instance address translation methods. One example method includes receiving, by a control plane device from a mobile edge cloud control device, an address of a target application instance of an application service accessed by a terminal. The control plane device can then send the address of the target application instance to a first user plane device. The control plane device can then instruct the first user plane device to set, as the address of the target application instance, a destination address of an uplink packet that is of the terminal and is associated with the application service.

Application instance address translation method and apparatus

This application discloses example application instance address translation methods. One example method includes receiving, by a control plane device from a mobile edge cloud control device, an address of a target application instance of an application service accessed by a terminal. The control plane device can then send the address of the target application instance to a first user plane device. The control plane device can then instruct the first user plane device to set, as the address of the target application instance, a destination address of an uplink packet that is of the terminal and is associated with the application service.

In-band management interface with user space datapath
11695591 · 2023-07-04 · ·

A method of utilizing the same hardware network interface card (NIC) in a gateway of a datacenter to communicate datacenter tenant packet traffic and packet traffic for a set of applications that execute in the user space of the gateway and utilize a network stack in the kernel space of the gateway. The method sends and receives packets for the datacenter tenant packet traffic through a packet datapath in the user space. The method sends incoming packets from the NIC to the set of applications through the datapath in the user space, a user-kernel transport driver connecting the kernel network stack to the datapath in the user space, and the kernel network stack. The method receives outgoing packets at the NIC from the set of applications through the kernel network stack, the user-kernel transport driver, and the data path in the user space.

SECURE NETWORKING ENGINE FOR A SECURE NETWORKING SYSTEM
20230006968 · 2023-01-05 ·

Methods, systems, and computer storage media for providing a local protocol server associated with a secure networking engine that provides client-side forwarding in a secure networking system. The local protocol server (e.g., local TCP/UDP server)—on a client device—operates based on client-side forwarding operations that include: IP assignment, operating system (OS) routing, destination network address translation, and original destination retrieval to support accessing a network resource (e.g., socket connection) on the client device and support communications between client applications on the client device and the local protocol server on the same client device. In this way, the local protocol server supports communications of a diverse set of data traffic or network traffic (e.g., different types of cross-platform communications), where the diverse set of network traffic is initially communicated from a client application and processed for network security operations at the local protocol sever of within the same client device.