H04L12/915

Dynamic allocation of network bandwidth

A bandwidth reallocation circuit can monitor data traffic to and/or from logical network segments (LNSs) of a segmented network. As the data traffic rate to and/or from individual LNSs changes, the bandwidth reallocation circuit can dynamically reallocate the total bandwidth among the LNSs to meet changing bandwidth needs. Thus, as some of the LNSs become busy with data traffic, network bandwidth can be temporarily borrowed for less active LNSs. This can result in more efficient use of the network bandwidth capacity of the network than has been achieved in the prior art, which can significantly increase the speed at which data can be uploaded and/or downloaded to the individual LNSs.

Efficient and scalable method for handling RX packet on a MR-IOV array of NICS

There is provided a method for operating of network cards in computing systems. The method comprises: detecting resource utilization of all network cards of computing systems connected via the one or more networks; monitoring network statistics of the network, the monitoring the network statistics including: evaluating whether a resource utilization of each network card connected to the one more networks is larger than a threshold; and determining an operation of each network card connected to the network according to and the detected resource utilization and the monitored network statistics.

Method for enhancing security access to a node in a homogenous cloud computing environment

A method, system and computer-usable medium are disclosed for controlling access to a node deployed in a cloud environment. A new node, based upon a common image, is created in a cloud computing environment. A unique set of randomized system parameters are then generated for the new node, which is then mapped to a set of generic system parameters. A request to access the new node is intercepted, which contains the generic system parameters. The intercepted access request is then parsed to extract the set of generic system parameters, which are then replaced with the unique set of randomized system parameters associated with the target node to generate a modified access request. The modified access request is then forwarded to the target node.

DIFFERENTIATED ROUTING SYSTEM AND METHOD

A differentiated routing system is provided for routing a communication service according to an access point of a subscriber terminal to a first network domain. The system includes a computing system executing a core routing engine (CRE) that receives a request for a communication service from the subscriber terminal. When the communication service is to be routed to a second network domain, the CRE identifies an access point at which the subscriber terminal accesses the first network domain, includes a tag in the request according to the identified access point. The tag includes information to be used by the second network domain for routing the communication service. The CRE then transmits the request to the second network domain.

Resource management for peripheral component interconnect-express domains

Embodiments of the present invention provide a solution for managing inter-domain resource allocation in a Peripheral Component Interconnect-Express (PCIe) network. One processor among a plurality of link processors is elected as a management processor. The management processor obtains information about available resources of PCIe network. When a resource request from a request processor is received, the management processor allocates a resource of the available resources to the requesting processor. The management processor instructs one or more link processors to program one or more inter-domain NTBs through which the traffic between the allocated resource and the requesting processor is going to flow according to the memory address information of the allocated resource, to allow cross-domain resource access between the requesting processor and the allocated resource.

Advertising traffic engineering information with the border gateway protocol for traffic engineered path computation

In general, techniques are described for distributing traffic engineering (TE) link information across network routing protocol domain boundaries using a routing protocol. In one example, a network device logically located within a first routing protocol domain includes a routing protocol module executing on a control unit to execute an exterior gateway routing protocol. The routing protocol module of the network device receives an exterior gateway routing protocol advertisement from a router logically located within a second routing protocol domain and decodes traffic engineering information for a traffic engineering link from the exterior gateway routing protocol advertisement. A path computation module of the network device computes a traffic engineered path by selecting the traffic engineering link for inclusion in the traffic engineered path based on the traffic engineering information.

SOFTWARE-DEFINED NETWORKING MULTI-ORCHESTRATOR SYSTEM

Disclosed is an orchestrator, which efficiently manages various applications and management services that are running in a SDN environment. The SDN multi-orchestrator system includes an application layer orchestrator for orchestrating multiple applications provided by a SDN application layer that provides the applications by utilizing network resources with programmatic manners, a control layer orchestrator for orchestrating resource allocation between resource requirements from the applications and for controlling data packet transmission using virtual and physical network resources in a resource layer and a management layer orchestrator for managing multiple management services provided by management layer to coordinate the application layer and the control layer. Accordingly, the multi-orchestrator structure may provide management and orchestration functions in consideration of the characteristics of respective layers, thus providing a more rapid and efficient orchestration function via specialization and automation.

Linked identifiers for multiple domains

A method for providing a link identifier (LID), wherein the method comprises obtaining a first identifier block (IDB) that identifies an external interface within a first domain using a first identifying scheme, obtaining a second IDB that identifies a second external interface within a second domain using a second identifying scheme, creating the LID that comprises the first IDB and the second IDB, and advertising the LID to one or more external entities.

Apparatus and method for multilateral one-way communication

An apparatus and a method for multilateral one-way communication are provided. The apparatus includes a one-way input module unit, detachably mounted to a plurality of slots formed in a rail, for receiving data from an external transmission host and for transmitting the received data to an internal network through one-way communication; a one-way output module unit, mounted detachably to the plurality of slots formed in the rail, for transferring data of interest to an internal network through one-way communication, and transmitting data of interest to an external reception host, and a two-way module unit, mounted detachably to the plurality of slots formed in the rail, for performing data communication between the transmission host and the reception host in a bidirectional mode.

Content capability clearing house systems and methods

A content capability clearing house that can act as a trusted and neutral mediator among network providers to manage rich content capabilities among multiple networks is provided. Content capabilities that can be brokered include, but are not limited to, quality of service and content screening. In an embodiment, a content capability clearing house includes a receiver that receives content capability request messages and other messages from network providers. A content capability request message includes a quality of service request and/or a subscriber profile request for use with content screening and subscriber specific advertisements. The present invention includes a series of methods for determining content capabilities for data transmission over a transaction between a content provider and a subscriber in which a content capability clearing house is used to efficiently broker and manage the capability among multiple network providers.