Patent classifications
H04L12/743
Communication system, virtual machine server, virtual network management apparatus, network control method, and program
Each virtual machine server includes: means for generating, when a virtual machine is connected to a virtual network via a virtual network management apparatus, local identification information unique per virtual switch and setting the local identification information as a VLAN ID of a port of a virtual switch, the port having been connected to the virtual machine; and means for notifying the virtual network management apparatus of a correspondence relationship between the virtual network to which the virtual machine has been connected and the local identification information. The virtual network management apparatus instructs, on the basis of the notification, the switch control apparatus to control the virtual network by using the local identification information unique per virtual switch as a match condition.
Access control list-based port mirroring techniques
Embodiments presented herein describe techniques for selecting incoming network frames to be mirrored using an access control list. According to one embodiment, an incoming frame is received. Upon determining that the incoming frame matches an entry in the access control list, a mirror field of the entry is evaluated. The mirror field identifies at least one mirroring action to perform on the frame. The identified mirroring action is performed on the frame.
Method and apparatus for modifying address information in signaling messages to ensure in-path devices remain in signaling path between endpoints
Contact information in SIP signaling messages is modified at each in-path network device during the signaling process (along with storage of mapping information) to allow the in-path network devices (and proxy server) to identify the next (or previous) hop device in the path, and thus, maintain the path taken by signaling messages early on during the signaling process. Subsequent request and response signaling messages transmitted during the session follow this path, which ensures that the in-path network devices remain in the SIP signaling path.
MULTI-DIMENSIONAL PACKET CLASSIFICATION
Methods, media, and systems for implementing packet routing rules are provided for herein. In some embodiments, a packet routing rule is received that is to be applied to network packets in accordance with conditions identified by the packet routing rule. The conditions including a first condition associated with a first header field and a second condition associated with a second header field. In embodiments, a first cost associated with searching a first classifier for the packet routing rule utilizing the first condition and a second cost associated with searching a second classifier for the packet routing rule utilizing the second condition can then be determined. The packet routing rule can then be stored in a selected one of the first and second classifiers, based, at least in part, on the first and second cost. Other embodiments may be described and/or claimed herein.
SYSTEMS AND METHODS FOR ROUTING NETWORK PACKETS BETWEEN MULTI-CORE INTERMEDIARIES
The present disclosure is directed towards systems and methods routing network packets between multi-core intermediaries. A processor of a plurality of processors on a client-side intermediary device may receive a packet from a client device. The processor may be identified by a core identifier. The processor may calculate a first set of source port addresses based on a first key and the core identifier. The processor may identify a target server-side intermediary device and a target processor based on data received with the packet or metadata received from the target server-side intermediary device. The processor may calculate a second set of port addresses based on a second key and the target core identifier. The processor may identify a port address common to both the first set and second set of port addresses. The processor may replace the original source port address in the packet with the identified port address.
Mitigating neighbor discovery-based denial of service attacks
In one embodiment, a device in a network determines whether a destination address of a packet received by the device is within a neighbor discovery (ND) cache of the device. The device determines whether the destination address is not in a set of addresses used to generate an address lookup array or possibly in the set of addresses used to generate the address lookup array, in response to determining that the destination address of the packet is not within the ND cache. The device performs address resolution for the destination address of the packet, in response to determining that the destination address of the packet is possibly in the set of addresses used to generate the address lookup array.
SOFTWARE-DEFINED NETWORK-BASED METHOD AND SYSTEM FOR IMPLEMENTING CONTENT DISTRIBUTION NETWORK
A software-defined network-based method and system for implementing a content distribution network. An application function, control function, and network entity resource of a CDN are added respectively to an application layer, control layer, and data forwarding layer of an SDN. When a request for a CDN application is received, the SDN application layer generates resource requirement and service scheduling information based on the request, and transmits a reservation request for a resource required by the CDN application to an SDN control layer. The SDN control layer allocates a resource required by the CDN application to combine network load balancing and path policies and to generate a content routing table for data transmission, generating and transmitting L2 and L3 forwarding tables to the SDN data forwarding layer. When it receives content distribution and content delivery requests, the SDN data forwarding layer executes a CDN service-related operation based on the forwarding tables.
DECENTRALIZED PROCESSING OF GLOBAL NAMING SYSTEMS
Provided herein are methods, networks, systems, and media for providing global naming services with blockchains without a centralized server.
Load balancing overlay network traffic using a teamed set of network interface cards
In one embodiment, a server includes a processor and logic integrated with and/or executable by the processor. The logic is configured to hash at least a portion of a packet according to a hashing algorithm to obtain a hash value. The logic is also configured to select an uplink with which to forward the packet based on the hash value. In another embodiment, a method includes hashing at least a portion of at least one packet according to a hashing algorithm to obtain a hash value using an accelerated network interface card (NIC) of a server. The accelerated NIC is configured to provide overlay functionality. The method also includes selecting an uplink, based on the hash value, from a plurality of uplinks available to send traffic out to a network using the accelerated NIC.
Prefix-aware weighted cost multi-path group reduction
Methods and systems for generating a forwarding table for a packet switch. The system includes a route manager for the packet switch, configured to identify a plurality of multi-path groups each corresponding to a respective initial set of routing entries in the forwarding table and generate, for one or more multi-path groups, at least one replacement set of routing entries with fewer routing entries than the initial set corresponding to the respective multi-path group. The route manager selects, based on a traffic reduction cost metric, one or more of the replacement sets of routing entries, each corresponding to a different respective multi-path group, and updates the forwarding table with the selected replacement sets. In some implementations, the traffic reduction cost metric includes a traffic characteristic. In some implementations, the packet switch participates in a software-defined network (SDN) and the route manager is part of an SDN controller.