H04L69/325

SECURE PRIVATE TRAFFIC EXCHANGE IN A UNIFIED NETWORK SERVICE
20230045949 · 2023-02-16 ·

Traffic is received at an interface of a compute server. Identity information associated with the traffic is determined including an identifier of a customer to which the traffic is attributable. An egress policy configured for the first customer is used to determine whether the traffic is allowed to be transmitted to a destination where that destination is a resource of a second customer. If the traffic is allowed to be transmitted, the traffic and identity information is transmitted over a cross-customer GRE tunnel to a namespace of the second costumer on the compute server. An ingress policy configured for the second customer is used to determine whether the traffic is allowed to be transmitted to the destination, and if it is, then the traffic is transmitted.

Provisioning logical entities in a multidatacenter environment

A system provisions global logical entities that facilitate the operation of logical networks that span two or more datacenters. These global logical entities include global logical switches that provide L2 switching as well as global routers that provide L3 routing among network nodes in multiple datacenters. The global logical entities operate along side local logical entities that are for operating logical networks that are local within a datacenter.

Provisioning logical entities in a multidatacenter environment

A system provisions global logical entities that facilitate the operation of logical networks that span two or more datacenters. These global logical entities include global logical switches that provide L2 switching as well as global routers that provide L3 routing among network nodes in multiple datacenters. The global logical entities operate along side local logical entities that are for operating logical networks that are local within a datacenter.

Configuration method for implementation in a network using a dynamic routing protocol
11575575 · 2023-02-07 · ·

A configuration method includes: receiving, by a first device of a network, a first control message having configuration elements for activating a dynamic routing protocol in the network; configuring by the first device setup parameters for establishing sessions according to the protocol used by the first device on the basis of configuration elements included in the first message; if the configuration elements in the message include a management instruction for handling sessions according to the protocol in the network, executing by the first device the at least one management instruction; and if the configuration elements in the message include a setting for directing propagation of the configuration elements in the network, dispatching by the first device in accordance with the propagation setting at least one second control message to at least one second device of the network, which includes all or some of the configuration elements.

Configuration method for implementation in a network using a dynamic routing protocol
11575575 · 2023-02-07 · ·

A configuration method includes: receiving, by a first device of a network, a first control message having configuration elements for activating a dynamic routing protocol in the network; configuring by the first device setup parameters for establishing sessions according to the protocol used by the first device on the basis of configuration elements included in the first message; if the configuration elements in the message include a management instruction for handling sessions according to the protocol in the network, executing by the first device the at least one management instruction; and if the configuration elements in the message include a setting for directing propagation of the configuration elements in the network, dispatching by the first device in accordance with the propagation setting at least one second control message to at least one second device of the network, which includes all or some of the configuration elements.

UPLINK SEGMENTATION OFFLOAD TO MODEM

This disclosure provides a method, apparatus, and computer-readable medium for wireless communication at a modem, comprising receiving, via an interface with a host, an internet protocol (IP) packet including a first transport protocol header and a first IP header. The IP packet has a size greater than a maximum transport unit (MTU) size allowable for each packet transmitted over a communication link. The modem segments the IP packet into a plurality of segments based on a segment size indicated by a segmentation policy. Each segment includes a respective derived segment transport protocol header and a respective derived segment IP header derived from the IP packet. Each of these derived headers includes at least one field based on the segmentation policy, and each of the segment transport protocol headers includes a checksum for the respective segment. Additionally, the modem transmits the plurality of segments over the communication link.

Multi-path traffic selection for ports in overlay networks

In some embodiments, a method receives a packet for a flow from a first application in a first workload to a second application in a second workload. The packet includes an inner header that includes layer 4 information for the first application. The method determines if a setting indicates an outer source port in an outer header should be generated using layer 4 information from the inner header. The setting is based on an analysis of packet types in the flow to determine if fragmented packets are sent. When the setting indicates the outer source port in the outer header should be generated using layer 4 information from the inner header, the method generates the outer source port using the layer 4 information for the first application from the inner header. The packet is encapsulated using the outer header, wherein the outer header includes the outer source port.

Mixing Segments With Different Sizes For Segment Routing
20230035009 · 2023-02-02 ·

A method implemented by a first node in a segment routing (SR) network domain includes receiving, from a second node of another network domain, a packet that is to pass through the SR network domain in accordance with segment identifiers (SIDs). The method also includes obtaining compressed SIDs corresponding to some of the SIDs. The method includes generating, by the first node, a segment routing header (SRH) having a list of segments and a segment left (SL) field. The method finally includes adding the SRH to the packet, and forwarding the packet with the SRH to a third node in the SR network domain.

Method, System, and Computer Program Product for Translating Messages
20230088119 · 2023-03-23 ·

A computer-implemented method includes: installing a first message protocol on a transaction terminal based on a provider thereof; installing an adapter layer on the terminal, the adapter layer including a mapping from the first message protocol to a standard message protocol; reading payment data from a payment device, the payment data associated with a transaction; generating a message including the payment data according to the first message protocol; translating the message from the first message protocol to the standard message protocol with the adapter layer to form a transaction message; and communicating the transaction message to a transaction processing system.

Method, System, and Computer Program Product for Translating Messages
20230088119 · 2023-03-23 ·

A computer-implemented method includes: installing a first message protocol on a transaction terminal based on a provider thereof; installing an adapter layer on the terminal, the adapter layer including a mapping from the first message protocol to a standard message protocol; reading payment data from a payment device, the payment data associated with a transaction; generating a message including the payment data according to the first message protocol; translating the message from the first message protocol to the standard message protocol with the adapter layer to form a transaction message; and communicating the transaction message to a transaction processing system.