Abstract: A data communication network includes a plurality of primary virtual bridges, interconnected by primary virtual connections so as to transmit and receive data packets over the network to and from edge devices connected thereto. One or more backup virtual bridges, each associated with at least one of the primary virtual bridges, are connected by at least one secondary virtual connection to at least another one of the primary virtual bridges, so that upon a failure of one of the primary virtual bridges with which it is associated, the backup virtual bridge transmits and receives the data packets over the network via the at least one secondary virtual connection in place of the at least one of the primary virtual bridges.

Abstract: A method for handling traffic in a communication network includes setting an aggregate limit on a total rate of transmission of information by a group of flows to be transmitted over the network, and setting a respective individual limit on an individual rate of transmission by each of the flows in the group. When the information carried by packets in any given one of the flows is in excess of the respective individual limit, the packets in excess of the respective individual limit in the given one of the flows are tagged with a first excess flow tag. When the total rate of transmission of the information is in excess of the aggregate limit, the packets in excess of the aggregate limit are tagged with a second excess flow tag. Resources in the network are allocated to convey the packets responsive to the first and second excess flow tags.

Abstract: A data communication network includes a plurality of primary virtual bridges, interconnected by primary virtual connections so as to transmit and receive data packets over the network to and from edge devices connected thereto. One or more backup virtual bridges, each associated with at least one of the primary virtual bridges, are connected by at least one secondary virtual connection to at least another one of the primary virtual bridges, so that upon a failure of one of the primary virtual bridges with which it is associated, the backup virtual bridge transmits and receives the data packets over the network via the at least one secondary virtual connection in place of the at least one of the primary virtual bridges.

Abstract: A method for communication includes configuring a plurality of ring nodes to communicate over a communication network that includes two or more overlapping communication rings, each ring including two unidirectional ringlets in mutually-opposite directions. A data packet including one or more header fields is accepted at an ingress ring node. An egress ring node to which the data packet is to be forwarded by the ingress ring node is determined. A subset of the rings including one or more common rings that are connected to both the ingress and egress ring nodes is identified. A ringlet of a ring among the one or more common rings is selected responsively to a respective value of at least one of the header fields of the packet. The data packet is forwarded from the ingress ring node to the egress ring node over the selected ringlet.

Abstract: A method for communication over a bi-directional ring network includes provisioning a virtual private local area network service (VPLS) over the bi-directional ring network. The VPLS includes connection termination points provisioned respectively on a plurality of the nodes so as to connect each of the plurality of the nodes to a second network external to the ring network. As long as the nodes and spans are fully operational, one or more of the connection termination points are maintained in a deactivated state, so that no more than one of the connection termination points to the second network is active. The nodes exchange messages indicative of a failure associated with the bi-directional ring network, causing at least one of the deactivated connection termination points to be activated so as to maintain connectivity among the users of the VPLS without creating a loop in the VPLS via the second network.

Abstract: A performance management unit manages a primary interface and a standby or secondary interface to two channels of an optical communications network having APS capabilities. Each performance parameter is associated with three counters. First and second counters are linked to registers of the primary and the secondary ports, and the third counter is linked to the registers of the currently active port. When a protection switch occurs, the first and second counters are immediately read and reset. The third counter continues accumulating data, but becomes associated with the new active port. At the end of a read interval, the third counter correctly reflects the number of data received, regardless of switchovers between the primary and secondary channels.

Abstract: A method for data communications includes receiving a time-division-multiplexed (TDM) input signal on a first circuit, the signal including an input sequence of frames of data, each such frame divided into sections for carrying respective sub-rate payloads. After determining which of the sections are active, such that the data in the sub-rate payloads of the active sections include user data, and which of the sections are inactive, the user data in the active sections are encapsulated into data packets for transmission over a packet network, while omitting from the packets at least some of the data from the inactive sections.

Abstract: A method for measuring latency in a bi-directional ring network includes transmitting a latency measurement packet from an originating node to a peer node and noting a time of receipt of the packet at the peer node. The packet is then transmitted back to the originating node in the opposite direction, while recording in the packet an indication of a peer node difference between a time of transmission of the packet from the peer node to the originating node and the time of receipt of the packet at the peer node. A time of return of the packet to the originating node is noted, so as to determine an originating node difference between a time of transmission of the packet from the originating node to the peer node and the time of return of the packet to the originating node. The latency is calculated by taking a difference between the originating node difference and the peer node difference.

Abstract: A method for communication via a ring network that includes a plurality of nodes. The method includes receiving at a first node in the ring network a data packet transmitted over a virtual private LAN service (VPLS), the data packet including an identification of the VPLS. The first node reads the identification from the data packet. Responsively to reading the identification, the first node forwards the data packet to at least one second node in the ring network that is associated with the VPLS.

Abstract: In a communication network that includes a plurality of nodes interconnected by links, a method for routing a data flow includes receiving a request to allocate one or more resources in the network so as to carry the data flow between first and second ones of the nodes over one of a plurality of paths therebetween, each such path including a respective sequence of the links. For the links included in each of the paths, respective levels of use of the requested resources due to communications in process over the network are determined. The path that is to carry the data flow is selected responsive to the determined levels of use of the requested resources on the links included in each of the paths.

Abstract: Communication apparatus includes a plurality of interface cards, including a central interface card and spoke interface cards, which are adapted to link communication lines to a network. A protection bus includes multiple spoke connections that link the central interface card to the spoke interface cards in a partial star configuration, such that on at least one of the spoke connections there are two of the spoke interface cards connected together to the central interface card.

Abstract: A method for assigning bandwidth in a network including nodes coupled by links arranged in a physical topology, the method including: defining between the nodes logical connections associated with a data transmission service to be provided over the network, the logical connections having a connection topology different from the physical topology, and determining respective bandwidth requirements for the logical connections based on parameters of the service. The method further includes mapping the connection topology to the physical topology, so that each of the logical connections is associated with one or more links of the physical topology, and allocating a bandwidth for the service on each of the links in response to the bandwidth requirements of the logical connections and to the mapping.

Abstract: A method for communication includes setting respective overbooking ratios for multiple categories of data traffic, and assigning respective bandwidth allocations to a plurality of connections for transmitting the data traffic in one or more of the categories over a network. The data traffic from the connections is coupled into respective queues, such that each of the queues is associated with one or more of the connections. Respective weights are computed for the queues responsively to the bandwidth allocations and to the overbooking ratios of the categories of the data traffic to be transmitted on the connections that are associated with each of the queues. A multiplexer multiplexes among the queues responsively to the respective weights so as to transmit the data traffic from the connections over a link in the network.

Abstract: A method for self-testing of an electronic system that includes a main module and subsidiary modules, which are connected to the main module by data lines, at least some of which may be idle. One of the idle lines is selected to serve as an aid line, and the subsidiary module to which the aid line is connected is instructed to loop back traffic reaching the subsidiary module via the aid line. Another idle line is selected for testing, and a switch in the main module is configured to link the aid line and the line under test. The subsidiary module to which the line under test is connected transmits test traffic over the idle line to the main module. If the test traffic does not return to the subsidiary module within a predetermined period of time, a failure is reported.

Abstract: A communication network includes a communication medium and a plurality of communication nodes, mutually coupled by the communication medium so as to form a ring, over which each of the nodes is configured to transmit traffic to the other nodes in both clockwise and counterclockwise directions around the ring. At least one of the nodes is configured to receive the traffic in only one of the directions at any given time.

Abstract: A method for fault protection in a bidirectional ring network includes transmitting first and second flows of packets around the bidirectional ring network while defining the first flow as a wrapping flow and the second flow as a non-wrapping flow. Upon detection by a node in the network that a segment of the network proximal to the node has failed, the packets in the first flow are wrapped at the node between clockwise and counterclockwise directions on the network so as to avoid the failed segment, while the packets in the second flow are not wrapped.

Abstract: A method and apparatus for transmitting data over a channel having a variable transmission rate. A transmitter determines the rate of transmission of the data over the channel and receives a datagram for transmission over the channel at the determined rate of transmission. The transmitter divides the datagram into fragments of a size no greater than a size limit that is set for the datagram responsive to the determined rate of transmission and transmits the fragments over the channel.

Abstract: A method for establishing a connection with a guaranteed bandwidth for transmitting data over a logical link that includes a plurality of parallel physical links between first and second endpoints. A link bandwidth is allocated on each of the physical communication links so as to include a predefined safety margin, based on either a failure protection policy, or a measure of fluctuation that occurs in a rate of data transmission over the physical links, or both. A sum of the allocated link bandwidth over the plurality of the parallel physical links is substantially greater than the guaranteed bandwidth of the connection. The data are conveyed over the logical link by distributing the data for transmission among the physical links in accordance with the allocated link bandwidth.

Abstract: A performance management unit manages a primary interface and a standby or secondary interface to two channels of an optical communications network having APS capabilities. Each performance parameter is associated with three counters. First and second counters are linked to registers of the primary and the secondary ports, and the third counter is linked to the registers of the currently active port. When a protection switch occurs, the first and second counters are immediately read and reset. The third counter continues accumulating data, but becomes associated with the new active port. At the end of a read interval, the third counter correctly reflects the number of data received, regardless of switchovers between the primary and secondary channels.

Abstract: A method for data communications includes receiving a time-division-multiplexed (TDM) input signal carrying a payload comprising data and determining whether the data comprise synchronous or non-synchronous data. A first encapsulation scheme is selected if the data comprise synchronous data, and a second encapsulation scheme is selected if the data comprise non-synchronous data. The data are encapsulated for transmission over a packet-switched network in accordance with the selected encapsulation scheme.