Aspects of the present disclosure are directed to dynamically adjusting control plane policing throughput of low (or lower) priority control plane traffic to permit higher throughput. The drop rate for low or lower priority control plane traffic can be determined to be above a threshold value. The processor utilization can be determined to be operating under normal utilization (or at a utilization within a threshold utilization value). The control plane policing for control plane traffic for the low or lower class of service can be increased (or decreased) to permit lower class of service control traffic to be transmitted using higher class of service resources without adjusting the priority levels for the lower class of service control traffic.

A method and system for accelerating monitoring of network traffic. The method may include receiving, at a network chip of a network device, a network traffic data unit; selecting, by the network chip, the network traffic data unit based on a traffic sampling rate; processing, by the network chip, the network traffic data unit to obtain sample information; truncating the network traffic data unit to obtain a network traffic data unit portion; generating a flow sample header comprising the sample information; storing, in storage of the network chip, a flow sample comprising the flow sample header and the network traffic data unit portion; constructing a flow datagram comprising the flow sample and a plurality of other flow samples; sending the flow datagram to a collector; and clearing the flow sample and the plurality of other flow samples from the storage of the network chip.

A multi-endpoint adapter device includes a plurality a duplicator device that is coupled to the network port and the plurality of endpoint subsystems that are each configured to couple with a respective processing subsystem. The duplicator device receives, via the network port, a data payload and determines that the data payload is to be provided to each of a first processing subsystem via a first endpoint subsystem that is included in the plurality of endpoint subsystems, and a second processing subsystem via a second endpoint subsystem that is included in the plurality of endpoint subsystems. The duplicator device then duplicates the data payload to provide a first duplicated data payload and a second duplicated data payload. The duplicator device then provides the first duplicated data payload to the first endpoint subsystem and provides the second duplicated data payload to the second endpoint subsystem.

This disclosure describes a traffic control method and a related apparatus. When receiving a publish packet sent by a client, a serving end queries a window value of a flow control window of the client, and compares the window value with a preset window threshold. The serving end rejects the publish packet when the window value is equal to the window threshold, or when the window value is greater than the window threshold, decreases the window value by a preset value, and processes the publish packet. Thus, the problem that the serving end cannot process, in time, a message sent by the client because the client sends the message too fast when the message is transmitted between the client and the serving end, can be avoided so that communication can be normally performed.

In an embodiment, header information of messages is altered to specify a window within which to receive information, so that the messages sent by a remote device will be sent at a rate that a network can receive messages. The sending of acknowledgements of messages are paced to control window growth. Bandwidth is allocated to a plurality of flows such that the satisfied flows require less bandwidth than an amount of bandwidth allocated to each unsatisfied flow.

A packet processing device includes: a non-priority packet storage that stores the non-priority packet; a gate provided on an output side of the non-priority packet storage; plural priority packet storages that respectively store the priority packet; a distributer that guides a received priority packet to a priority packet storage corresponding to a delay time of a route through which the received priority packet is transmitted; a timing setting unit that sets different read cycles to respective priority packet storages; a read controller that reads priority packets from the plural priority packet storages according to the read cycles; and a gate controller that controls the gate according to the timings on which the read priority packets are output. When the read controller reads a first priority packet from one of the priority packet storages, the read controller reads a second priority packet from another priority packet storage.

An example method comprises receiving, by a first PHY of a first transceiver, a timing packet, timestamping, by the first transceiver, the timing packet and providing the timing packet to a first intermediate node, determining a first offset between the first intermediate node and the first transceiver, updating a first field within the timing packet with the first offset between the first intermediate node and the first transceiver, the offset being in the direction of the second transceiver, receiving the timing packet by a second transceiver, the timing packet including the first field, information within the first field being at least based on the first offset, determining a second offset between the second transceiver and an intermediate node that provided the timing packet to the second transceiver and correcting a time of the second transceiver based on the information within the first field and the second offset.

A system and a method for receiving data packets at the inputs of two data handlers. Each data handler compares address data in the individual data packet with a first and a second list of addresses and forward packets to each other, so that data packets with one of the first addresses are fed to one data handler and packets with one of the second addresses are fed to the other data handler. The data handlers output the data packets received so that one data handler outputs all packets with addresses of the first addresses and the other data handler outputs all packets with addresses of the second addresses.

A switch in a slice-based network can be used to enforce quality of service (QoS). Agents can run in the switches, such as in the core of each switch. The switches can sort ingress packets into slice-specific ingress queues in a slice-based pool. The slices can have different QoS prioritizations. A switch-wide policing algorithm can move the slice-specific packets to egress interfaces. Then, one or more user-defined egress policing algorithms can prioritize which packets are sent out into the network first based on slice classifications.

A method of monitoring traffic, the method being carried out by a router acting as a gateway between a first and second network, the method comprising: after establishment of a TCP connection between a first device on the first network and a second device on the second network: receiving a plurality of data packets sent from the first device over the TCP connection; sending a TCP ACK packet to the first device in response to each data packet of the plurality of data packets; storing said data packets without sending them to the second device; examining at least part of the plurality of the stored data packets in order to determine whether to block or allow the TCP connection; in the event that it is determined to allow the TCP connection: sending each of the stored data packets to the second device; in the event that it is determined to block the TCP connection: sending a TCP RST message to each of the first and second devices in order to close the TCP connection.