A multi-chip module (MCM) may include a substrate, and first and second physical-layer (PHY) chips mounted on the substrate. In some implementations, the first PHY chip includes a multiplexer and a PHY circuit. The multiplexer is configured to receive a multiplexed data stream from a media access control (MAC) device, to demultiplex the multiplexed data stream into first and second data streams, to output the first data stream to the PHY circuit, and to output the second data stream to the second PHY chip. In some implementations, the first PHY includes a router and a PHY circuit. The router is configured to receive a plurality of data packets from a MAC device, to route one or more of the data packets having a first address to the PHY circuit, and to route one or more of the data packets having a second address to the second PHY chip.

The communication node includes an entry memory adapted to store a preset number of the control information entries, each stipulating the processing applied to a packet received, in association with the user information, and a packet processor that references the entry memory to process the packet received. The communication node also includes an entry management section that exercises control so that, on the basis of a preset reference, the proportion of the number of the control information entries for one user stored in the entry memory to the number of the control information entries storable in the entry memory will not surpass a preset value.

An inline-bypass switch system includes: a first inline-bypass switch appliance having a first bypass component, a second bypass component, a first switch coupled to the first bypass component and the second bypass component, and a first controller; and a second inline-bypass switch appliance having a third bypass component, a fourth bypass component, a second switch coupled to the third bypass component and the fourth bypass component, and a second controller; wherein the first controller in the first inline-bypass switch appliance is configured to provide one or more state signals that is associated with a state of the first inline-bypass switch appliance; and wherein the second controller in the second inline-bypass switch appliance is configured to control the second bypass component based at least in part on the one or more state signals.

A system may receive, by a switching component of the system, network traffic to be provided to an I/O component of the network device. The system may route, by the switching component, the network traffic to the I/O component based on whether the I/O component is connected to the switching component via the first connections and/or via second connections. The first connections may be connections via a chassis of the system. The second connections may be connections via a connector component that is removable from the switching component. The network traffic may be routed via the first connections and the second connections when the I/O component is connected via the first connections and the second connections. The network traffic may be routed via the first connections and not via the second connections when the I/O component is connected via the first connections and not via the second connections.

Provided is a hybrid network end system device for a network system with an end system unit and a switch. The switch here exhibits at least one first port of the switch and a second port of the switch for connection with the network system.

One or more techniques and/or systems are provided for network isolation. For example, nodes within a mesh of devices may be configured with routing rules, main routing tables, and alternative routing tables, such as at a layer-3 network layer. The routing rules may specify that packets received from downstream are to be routed upstream to either a gateway or a backhaul device for evaluation as to whether such packets are allowed to be communicated back downstream to destination recipients using main routing tables. An isolation rule may be configured to specify whether to block or allow packets. In an example, the gateway may either block or allow packets based upon whether a source and destination are within a same virtual local area network or are within different virtual local area networks. In this way, selective device isolation may be provided, such as at the layer-3 network layer.

Provided is an end system device for a network system with a first port for connection with the network system, a second port for connection with the network system, a local interface and a switching device. The switching device is designed to switch into a first or a second mode. In the first mode, the switching device is set up to relay data received at the first and second port to the local interface, and relay data received at the local interface to the first port and the second port. In the second mode, the switching device is set up to relay data received at the first port to the second port or to the local interface, relay data received at the second port to the first port or to the local interface, and relay data received at the local interface to the first port and the second port.

A packet relay apparatus, which is configured to transmit from a mirror port a mirror packet copied from one of a packet to be received and a packet to be transmitted, the packet relay apparatus comprising: a packet receiving module configured to receive a packet from an input port; a security judgment module configured to judge whether or not the packet is possibly one of an attack and an attack sign; a mirror processing module configured to generate, when it is judged that the packet is possibly one of an attack and an attack sign, a replica of the packet as the mirror packet; and a transmitting module configured to transmit the mirror packet from the mirror port.

At an application executing in conjunction with a vSwitch a determination is made that a first flow from a first VM is experiencing congestion. The first flow is selected for throttling. a second flow is also selected for throttling, the second flow using a portion of a network path used by the first flow in a data network. At the application, a total CWND adjustment is distributed between the first flow and the second flow. A first CWND value associated with the first flow is adjusted by a first portion of the total CWND window, and a second CWND value associated with the second flow is adjusted by a second portion of the total CWND window.

A runtime state of a virtual port associated with a virtual machine (“VM”) is persisted as the VM is migrated from a source host to a destination host. In certain embodiments, a virtual switch forwards network frames between the VM and the physical network interface via the virtual port. During migration of the VM, the runtime state of the virtual port is transferred to the destination host and applied at the second host to a virtual port associated with a second virtual switch at the destination host. The runtime state of the virtual port at the source host is then cleared, and the second virtual switch at the destination host forwards network frames between the migrated VM and the physical network interface of the destination host using the virtual port at the second host.