Abstract: In a switching network, each of a plurality of lower tier entities is coupled to each of multiple master switches at an upper tier by a respective one of multiple links. At each of the multiple master switches, a plurality of virtual ports each corresponding to a respective one of a plurality of remote physical interfaces (RPIs) at the lower tier are implemented on each of a plurality of ports. Each of the plurality of lower tier entities implements a respective egress port mapping indicating which of its plurality of RPIs transmits egress data traffic through each of its multiple links to the multiple master switches. In response to failure of one of the multiple links coupling a particular lower tier entity to a particular master switch, the particular lower tier entity updates its egress port mapping to redirect egress data traffic to another of the multiple master switches without packet dropping.

Abstract: A communication protocol in a layer two (L2) network switch comprises, in response to a service request by a source node, registering the source node for packet communication service. The protocol further comprises forwarding one or more packets from the registered source node to one or more destination nodes. The protocol further comprises receiving packets from one or more destination nodes and forwarding each received packet to a corresponding registered node.

Abstract: Management and provisioning of networking traffic may be provided by bundling virtual channels into a group. A global policy may be applied to the bundle so that virtual ports providing services to a client may be managed by referring to the global policy of the bundle. The channels comprising the bundle may span multiple physical ports and in some cases, multiple physical switches. Thus, policy management may be avoided at the port level and instead, be handled as groups of channels implementing a client service.

Abstract: Management and provisioning of networking traffic may be provided by bundling virtual channels into a group. A global policy may be applied to the bundle so that virtual ports providing services to a client may be managed by referring to the global policy of the bundle. The channels comprising the bundle may span multiple physical ports and in some cases, multiple physical switches. Thus, policy management may be avoided at the port level and instead, be handled as groups of channels implementing a client service.

Abstract: In a switching network, each of a plurality of lower tier entities is coupled to each of multiple master switches at an upper tier by a respective one of multiple links. At each of the multiple master switches, a plurality of virtual ports each corresponding to a respective one of a plurality of remote physical interfaces (RPIs) at the lower tier are implemented on each of a plurality of ports. Each of the plurality of lower tier entities implements a respective egress port mapping indicating which of its plurality of RPIs transmits egress data traffic through each of its multiple links to the multiple master switches. In response to failure of one of the multiple links coupling a particular lower tier entity to a particular master switch, the particular lower tier entity updates its egress port mapping to redirect egress data traffic to another of the multiple master switches without packet dropping.

Abstract: A switching network includes first, second and third switches coupled for communication, such that the first and third switches communicate data traffic via the second switch. The first switch is operable to request transmission credits from the third switch, receive the transmission credits from the third switch and perform transmission of data traffic in reference to the transmission credits. The third switch is operable to receive the request for transmission credits from the first switch, generate the transmission credits and transmit the transmission credits to the first switch via the second switch. The second switch is operable to modify the transmission credits transmitted by the third switch prior to receipt of the transmission credits at the first switch.

Abstract: A switching network has a plurality of switches including at least a switch and a managing master switch. At the managing master switch, a first capability vector (CV) is received from the switch. The managing master switch determines whether the first CV is compatible with at least a second CV in a network membership data structure that records CVs of multiple switches in the switching network. In response to detecting an incompatibility, the managing master switch initiates an image update to an image of the switch. In response to a failure of the image update at the switch, the switch boots utilizing a mini-DC module that reestablishes communication between the switch with the managing master switch and retries the image update.

Abstract: In one embodiment, a method for applying security policy in an overlay network includes receiving a request, including a packet, for a communication path through an overlay network, determining whether a security policy is to be applied to the packet based on at least one of: contents of the packet, first information, and second information, selecting a communication path between a source physical switch and a destination physical switch, wherein the selected communication path directly connects the source physical switch to the destination physical switch when it is determined to not apply the security policy to the packet, and the selected communication path connects the source physical switch to the destination physical switch via a security appliance when it is determined to apply the security policy to the packet, and sending the selected communication path to the source physical switch.

Abstract: Packet processing logic of a host system's virtualization manager detects packets on the ingress or the egress path to/from a virtual port having three bitmap arrays for processing packets within a virtual local area network (VLAN). The logic checks the VLAN identifier (VID) of the packet to determine, based on an offset position within the corresponding bitmap array, whether the port supports the VLAN. Both the ingress array offset position and egress array offset positions correspond to the value of the VID, and are set within the specific bitmap array during configuration of the VLAN on the port. When the VLAN is supported by the port, the logic enables the packet to be processed by the port. Otherwise, the logic discards the packet. A strip bitmap array indicates when a packet's VID should be removed prior to forwarding the packet on the egress of a port (or destination port).

Abstract: In one embodiment, a system for classifying traffic in an overlay network includes a processor adapted for executing logic, logic adapted for receiving an overlay packet, logic adapted for determining at least one characteristic of the overlay packet and/or one or more inner packets of the overlay packet in order to classify the overlay packet, logic adapted for associating a flow identifier to the overlay packet, logic adapted for determining one or more policies to associate with the flow identifier, wherein the one or more policies are based on the at least one characteristic of the overlay packet and/or the one or more inner packets of the overlay packet, and logic adapted for storing the flow identifier in a header of the overlay packet. More systems, methods, and computer program products for classifying traffic in an overlay network are presented in accordance with other embodiments.

Abstract: A switching network includes an upper tier and a lower tier including a plurality of lower tier entities. A master switch in the upper tier, which has a plurality of ports each coupled to a respective lower tier entity, implements on each of the ports a plurality of virtual ports each corresponding to a respective one of a plurality of remote physical interfaces (RPIs) at the lower tier entity coupled to that port. Data traffic communicated between the master switch and RPIs is queued within virtual ports that correspond to the RPIs on lower tier entities with which the data traffic is communicated. The master switch enforces priority-based flow control (PFC) on data traffic of a given virtual port by transmitting, to a lower tier entity on which a corresponding RPI resides, a PFC data frame specifying priorities for at least two different classes of data traffic communicated by the particular RPI.

Abstract: In one embodiment, a method for exchanging overlay tunnel information includes receiving an information exchange packet, at a first end point station, from each end point station in a virtual network having a specified virtual network identifier (VNID); and processing each received information exchange packet to retrieve information about connections at each end point station in the virtual network having the specified VNID, wherein each end point station either terminates or originates a tunnel shared by the first end point station in an overlay network. In this way, the information may be used to respond to address resolution protocol (ARP) requests sent locally in lieu of flooding the ARP request. Other systems, methods, and computer program products are also presented regarding the overlay tunnel information exchange protocol, according to various embodiments.

Abstract: In one embodiment, a system includes logic adapted for receiving, at a first end point station, an information exchange packet from each end point station in a virtual network having a specified virtual network identifier (VNID) and logic adapted for processing each received information exchange packet to retrieve information about connections at each end point station in the virtual network having the specified VNID, wherein each end point station either terminates or originates a tunnel shared by the first end point station in an overlay network. In this way, the information may be used to respond to address resolution protocol (ARP) requests sent locally in lieu of flooding the ARP request. Other systems, methods, and computer program products are also presented regarding the overlay tunnel information exchange protocol, according to various embodiments.

Abstract: A switching network includes an upper tier and a lower tier including a plurality of lower tier entities. A master switch in the upper tier, which has a plurality of ports each coupled to a respective lower tier entity, implements on each of the ports a plurality of virtual ports each corresponding to a respective one of a plurality of remote physical interfaces (RPIs) at the lower tier entity coupled to that port. Data traffic communicated between the master switch and RPIs is queued within virtual ports that correspond to the RPIs on lower tier entities with which the data traffic is communicated. The master switch enforces priority-based flow control (PFC) on data traffic of a given virtual port by transmitting, to a lower tier entity on which a corresponding RPI resides, a PFC data frame specifying priorities for at least two different classes of data traffic communicated by the particular RPI.

Abstract: In one embodiment, a system includes a network having a plurality of switches and one or more devices connected to one or more of the plurality of switches, a software defined network (SDN) controller connected to one or more of the plurality of switches in the network, the SDN controller having logic integrated with and/or executable by a processor, the logic being adapted to determine SDN routes through the network between the one or more devices and each of the plurality of switches and send one or more SDN routes to each switch in the network capable of communicating with the SDN controller. In other embodiments, methods and computer program products are also described for providing SDN routes through a network.

Abstract: A communication protocol in a layer two (L2) network switch comprises, in response to a service request by a source node, registering the source node for packet communication service. The protocol further comprises forwarding one or more packets from the registered source node to one or more destination nodes. The protocol further comprises receiving packets from one or more destination nodes and forwarding each received packet to a corresponding registered node.

Abstract: A communication protocol in a layer two (L2) network switch comprises, in response to a service request by a source node, registering the source node for packet communication service. The protocol further comprises forwarding one or more packets from the registered source node to one or more destination nodes. The protocol further comprises receiving packets from one or more destination nodes and forwarding each received packet to a corresponding registered node.

Abstract: A distributed device architecture includes a master device and one or more member devices. A simple network management protocol (SNMP) agent of a master device receives an SNMP request from a managing device. Where the SNMP request pertains to a given member device, and where the SNMP request requires involvement of the given member device to fulfill the SNMP request, the master device generates a non-SNMP request corresponding to the SNMP request and transmits the non-SNMP request to the given member device. A non-SNMP agent of the given member device processes the non-SNMP request and transmits processing results back to the master device. The master device generates an SNMP response corresponding to the processing results, and the SNMP agent of the master device transmits the SNMP response back to the managing device.

Abstract: A switching network includes first, second and third switches coupled for communication, such that the first and third switches communicate data traffic via the second switch. The first switch is operable to request transmission credits from the third switch, receive the transmission credits from the third switch and perform transmission of data traffic in reference to the transmission credits. The third switch is operable to receive the request for transmission credits from the first switch, generate the transmission credits and transmit the transmission credits to the first switch via the second switch. The second switch is operable to modify the transmission credits transmitted by the third switch prior to receipt of the transmission credits at the first switch.

Abstract: Systems and methods are provided for controlling a network switch. At least one forwarding element of the distributed switch is positioned at a first location of a network. A control element of the distributed switch is positioned at a second location of the network. The at least one forwarding element is controlled from the control element by establishing a communication between the forwarding element and the control element via the network.