An ICN-over-IP architecture, which supports ICN-dependent IP addresses, is provided as an integrated architecture requiring small changes within the network, utilizing the incrementally introduced ICN-enabled IP routers efficiently where ICN-enabled IP routers are distributed within/across domains and are capable of coordinating among others based on domain or ICN imposed policies. System, devices and methods are provided achieving improved performance with the introduction of additional ICN-enabled IP routers within/across domains, and continuing to perform efficiently by relying on the principles of the current IP forwarding and taking advantage of IP's currently available features.

The techniques describe forwarding multicast traffic using a multi-level cache in a network device forwarding plane for determining a set of outgoing interfaces of the network device on which to forward the multicast traffic. For example, a multi-level cache is configured to store a multicast identifier of a multicast packet and multicast forwarding information associated with the multicast identifier, such as identification of one or more egress packet processors of the network device to which the multicast packet is to be sent for forwarding to the set of one or more egress network devices, and/or outgoing interfaces of the network device toward each egress network device of the set of one or more egress network devices. The multi-level cache is also configured to store respective multicast identifiers that are to be encapsulated with outgoing multicast packets that are forwarded to the set of one or more egress network devices.

The techniques described herein include isolating network traffic between tenants using a programmable switch that routes network traffic directly to the appropriate virtual private cloud (VPC) and/or virtual machine (VM).

A program to be executed to perform a packet processing operation on a packet associated with a resource group, as well as security settings of the resource group, are received. The program is transmitted to a set of fast path nodes which were assigned to the resource group based on the group's metadata. With respect to a particular packet, security operations based on the settings are performed and the program is executed at a fast path node. Based at least partly on the results of the program, a packet routing action corresponding to the received packet is performed.

A method for accessing a forwarding entry and a network device are provided. In an example, a cache receives, from a forwarding component, an entry reading command which carries a storage address in a storage of a first forwarding entry to be read. The cache locally searches for a first Hash bucket in a valid state according to the storage address of the first forwarding entry, the first Hash bucket containing a storage address identical to that of the first forwarding entry. If the first Hash bucket is found, the cache transmits, to the forwarding component, the first forwarding entry cached in cache space corresponding to the first Hash bucket. If not found, the cache reads the first forwarding entry from the storage and transmits the first forwarding entry to the forwarding component when the first Hash bucket is not found.

A method, apparatus, switch, device for packet forwarding and storage medium are disclosed. The method includes: obtaining a packet to be forwarded; detecting whether a first data table contains connection cache information corresponding to the packet; obtaining a first identifier of the connection cache information from the first data table if the first data table contains the connection cache information corresponding to the packet; obtaining connection information corresponding to the connection cache information from a second data table, and determining a second identifier of the connection cache information, wherein the second identifier is a current connection identifier corresponding to the connection cache information and changes when the connection information changes; and forwarding the packet based on the connection cache information if the second identifier is the same as the first identifier. The method for packet forwarding according an embodiment of the present application can reduce errors in packet forwarding.

An apparatus is disclosed to compress packets, the apparatus comprising; a data analyzer to identify a new destination address and a protocol identifier of an input packet corresponding to a new destination node and a communication system between the new destination node and a source node; a compression engine to utilize a plurality of compression functions based on the new destination address and the protocol identifier and reduce a size of the input packet; a compression analyzer to identify a reduced packet and a compression function identifier corresponding to the reduced packet, the compression function identifier associated with one of the compression functions; and a source modifier to construct a packet to include the compression function identifier by modifying unregistered values of a protocol identifier by a difference associated with the compression function identifier, the packet to inform the new destination node of a compression function.

A method and a router device for managing memory for network overlay routes with fallback route support prioritization may be provided. A network overlay route as a candidate network overlay route may be obtained at a router for storage in a memory. The memory may store a plurality of network overlay routes for forwarding user plane traffic in a network. An assessment for storage of the candidate network overlay route based on a priority level indicator of the candidate network overlay route may be performed. The priority level indicator may be indicative of a fallback route support level of the candidate network overlay route in the router. Based on the assessment, at least one of the following may be performed: adding the candidate network overlay route to the memory and refraining from adding the candidate network overlay route to the memory.

A network device receives a packet from a client device, and identifies, based on receiving the packet, a destination of the packet. The network device determines, based on information included in an application cache, an application associated with the destination of the packet, where the first network device, the client device, and the application cache are included in a first local network. The network device determines, based on the information included in the application cache, a policy rule associated with the application, and applies the policy rule to the packet.

A method and a traffic processing unit (200) for handling traffic in a communication network when the traffic is distributed across a set of traffic processing units. When receiving a packet of a traffic flow distributed to said traffic processing unit, the traffic processing unit (200) assigns a packet class to the received packet, which class can be active or inactive in the traffic processing unit. The traffic processing unit obtains state information of the assigned packet class. If the packet class is detected as active the state information is retrieved from a local storage (200C) in the traffic processing unit, and if the packet class is detected as inactive the state information is fetched from a central storage (204). The traffic processing unit then performs stateful packet processing of the received packet based on the obtained state information.