Abstract: A malicious attack detection method includes receiving, by a controller, a packet-in message sent by a switch, sending, by the controller, an abnormal flow entry to the switch, receiving, by the controller, a triggering count sent by the switch, where the triggering count is a quantity of times that the abnormal flow entry is triggered, and determining, according to the triggering count, whether a malicious attack is initiated.

Abstract: A dialing test method, a dialing test system, and a computing node relate to the network field. In this method, a dialing test system respectively creates a two dialing test ports on two computing nodes, where both Internet Protocol (IP) addresses of the two dialing test ports are IP addresses of a dialing test network, and the dialing test network does not overlap a service network of a virtual machine (VM). The dialing test system separately deploys respective dialing test resources for the two dialing test ports, and the dialing test resources does not overlap a resource of the VM on the two computing nodes, and the dialing test system triggers a dialing test procedure such that a dialing test task is executed between the two dialing test ports using the dialing test resources.

Abstract: A malicious attack detection method includes receiving, by a controller, a packet-in message sent by a switch, sending, by the controller, an abnormal flow entry to the switch, receiving, by the controller, a triggering count sent by the switch, where the triggering count is a quantity of times that the abnormal flow entry is triggered, and determining, according to the triggering count, whether a malicious attack is initiated.

Abstract: An optical transceiver and a method of making the same. The optical transceiver includes a base/housing having a roughened or darkened optics mounting surface, a transmitter optical subassembly (TOSA), a receiver optical subassembly (ROSA), a beam splitter mount secured to or mounted on the roughened or darkened optics mounting surface, a beam splitter secured to or mounted on the beam splitter mount, and an optical fiber adapter. The TOSA includes a laser diode configured to convert a received electrical signal to an outgoing optical signal. The ROSA includes a photodiode configured to convert a received optical signal to an outgoing electrical signal. The beam splitter is transparent to one of the outgoing and received optical signals and is configured to reflect the other. The optical fiber adapter is configured to hold an optical fiber that receives the outgoing optical signal and provides the received optical signal.

Abstract: A malicious attack detection method includes: receiving, by a controller, a Packet-in message sent by a switch, where the Packet-in message includes a source host identifier and a destination host identifier of a data packet for which the switch does not find a flow entry; when determining that a host indicated by the destination host identifier does not exist in an SDN network, sending, by the controller, an abnormal flow entry to the switch; receiving, by the controller, a triggering count sent by the switch, where the triggering count is a quantity of times that the abnormal flow entry is triggered; and determining, according to the triggering count, whether a malicious attack is initiated. According to the method, a malicious attack from a host can be detected, a data processing volume of a controller can be reduced, and performance of the controller can be improved.

Abstract: An optical transceiver and a method of making the same. The optical transceiver includes a base/housing having a roughened or darkened optics mounting surface, a transmitter optical subassembly (TOSA), a receiver optical subassembly (ROSA), a beam splitter mount secured to or mounted on the roughened or darkened optics mounting surface, a beam splitter secured to or mounted on the beam splitter mount, and an optical fiber adapter. The TOSA includes a laser diode configured to convert a received electrical signal to an outgoing optical signal. The ROSA includes a phoiodiode configured to convert a received optical signal to an outgoing electrical signal. The beam splitter is transparent to one of the outgoing and received optical signals and is configured to reflect the other. The optical fiber adapter is configured to hold an optical fiber that receives the outgoing optical signal and provides the received optical signal.

Abstract: A preset flow table matching policy in a switching device is set, a flow table for processing data by a switching device that the data needs to pass through during forwarding and an action that needs to be executed in the flow table are generated according to the matching policy and capability information of the switching device, and the flow table is sent to the switching device that the data needs to pass through during forwarding such that the control device may generate, according to different flow table information of the switching device and with reference to different data forwarding policies, a corresponding flow table to be executed by the switching device, which manages switching devices of different types, and enables a switching device that has multiple flow tables to flexibly implement a data forwarding function in use of a preset policy.

Abstract: A dialing test method, a dialing test system, and a computing node relate to the network field. In this method, a dialing test system respectively creates a two dialing test ports on two computing nodes, where both Internet Protocol (IP) addresses of the two dialing test ports are IP addresses of a dialing test network, and the dialing test network does not overlap a service network of a virtual machine (VM). The dialing test system separately deploys respective dialing test resources for the two dialing test ports, and the dialing test resources does not overlap a resource of the VM on the two computing nodes, and the dialing test system triggers a dialing test procedure such that a dialing test task is executed between the two dialing test ports using the dialing test resources.

Abstract: A malicious attack detection method includes: receiving, by a controller, a Packet-in message sent by a switch, where the Packet-in message includes a source host identifier and a destination host identifier of a data packet for which the switch does not find a flow entry; when determining that a host indicated by the destination host identifier does not exist in an SDN network, sending, by the controller, an abnormal flow entry to the switch; receiving, by the controller, a triggering count sent by the switch, where the triggering count is a quantity of times that the abnormal flow entry is triggered; and determining, according to the triggering count, whether a malicious attack is initiated. According to the method, a malicious attack from a host can be detected, a data processing volume of a controller can be reduced, and performance of the controller can be improved.

Abstract: A preset flow table matching policy in a switching device is set, a flow table for processing data by a switching device that the data needs to pass through during forwarding and an action that needs to be executed in the flow table are generated according to the matching policy and capability information of the switching device, and the flow table is sent to the switching device that the data needs to pass through during forwarding such that the control device may generate, according to different flow table information of the switching device and with reference to different data forwarding policies, a corresponding flow table to be executed by the switching device, which manages switching devices of different types, and enables a switching device that has multiple flow tables to flexibly implement a data forwarding function in use of a preset policy.

Abstract: A method for distributing routing instructions to a plurality of nodes within an OpenFlow Software Defined Network (SDN) using a logically centralized multi-controller that comprises a plurality of controllers, wherein the method comprises receiving a plurality of incoming data packets, storing a plurality of current flow tables, queuing the incoming data packets, wherein the incoming data packets are queued based on the order received, processing the incoming data packets based on the order the incoming data packets were queued, wherein the incoming data packets that are first to be queued are the first to be processed, generating a plurality of flow tables by processing the incoming data packets, and transmitting the flow tables to the plurality of nodes when the flow tables have not been previously generated.

Abstract: A method for distributing routing instructions to a plurality of nodes within an OpenFlow Software Defined Network (SDN) using a logically centralized multi-controller that comprises a plurality of controllers, wherein the method comprises receiving a plurality of incoming data packets, storing a plurality of current flow tables, queuing the incoming data packets, wherein the incoming data packets are queued based on the order received, processing the incoming data packets based on the order the incoming data packets were queued, wherein the incoming data packets that are first to be queued are the first to be processed, generating a plurality of flow tables by processing the incoming data packets, and transmitting the flow tables to the plurality of nodes when the flow tables have not been previously generated.