Abstract: A method implemented by a path computation element centralized controller (PCECC), the method comprises: receiving a service request to provision for a service from a first edge node and a second edge node in a network; computing a path for a label switched path (LSP) from the first edge node to the second edge node in response to the service request; reserving label information for forwarding traffic of the service on the LSP; and sending a label update message to a third node on the path to facilitate forwarding of the traffic of the service on the path, wherein the label update message comprises the label information.

Abstract: Various systems, methods and devices adaptively manage the multicast delivery of multiple media programs. Each of the media programs is encoded into multiple media streams, each stream having a different bitrate, frame rate, resolution or other encoding parameter. A computer receives feedback about the delivery of the multiple streams and automatically adapts the number of streams available for at least one of the multiple media programs in response to the received feedback. This allows resources to be applied to those multicast streams having the greatest user demand.

Abstract: The invention relates to a proxy node comprising means for managing a proxy table, a receiver for receiving a message from a first resource restricted device, said message being intended to at least one corresponding destination device, control means for checking whether an entry for the first resource restricted device is included in the set of entries of the proxy table, the set of entries of the proxy table indicating the set of resource-restricted devices the proxy node is in charge of, a transmitter for forwarding the message depending on the result of the proxy table checking, the means for managing the proxy table being arranged for cleaning the proxy table of the entry relative to the resource-restricted device by monitoring the relative usage of the proxy node for forwarding messages for the resource restricted device with the usage of competitor proxy nodes for forwarding messages for the resource restricted device.

Abstract: Disclosed are methods for managing transactions in a software defined network (SDN). A method performed in a controller may comprise generating a group message for modifying flow entries of a plurality of flow tables related to each other in a switch; and transmitting the group message to the switch. Thus, a plurality of flow tables having relevance to each other can be simultaneously modified so that modifications on a plurality of switches can be synchronized, and consistency of them can be guaranteed.

Abstract: A method is provided in one example embodiment and may include receiving a packet by a forwarder in an Information-Centric Networking (ICN) network; determining Bit Index Explicit Replication (BIER) information associated with the packet; and forwarding the packet based, at least in part, on the BIER information associated with the packet. The packet can be an interest packet or a data packet received by the forwarder in the ICN network.

Abstract: For logical multicasting in overlay networks, at a data processing system, an original unicast packet is received from a first component in a first computing node in an overlay network. To cause multicasting in the overlay network the received original unicast packet was unicast by the first computing node only to the data processing system, and a multicast data structure for the overlay network is maintained only by the data processing system, the multicast data structure containing information of each receiver that is configured to receive unicast packets during logical multicasting in the overlay network. From a set of subscriber receivers in the multicast data structure, a subset of the subscriber receivers is selected. A copy of the original unicast packet is unicast to each subscriber receiver in the subset.

Abstract: A memory network includes a plurality of memory nodes each identifiable by an ordinal number m, and a set of links divided into N subsets of links, where each subset of links is identifiable by an ordinal number n. For each subset of the plurality of N subsets of links, each link in the subset connects two memory nodes that have ordinal numbers m differing by b(n-1), where b is a positive number. Each of the memory nodes is communicatively coupled to a processor via at least two non-overlapping pathways through the plurality of links.

Abstract: A method of synchronizing a reference oscillator frequency of a first network analyzer with a reference oscillator frequency of a second network analyzer through a device under test (DUT) includes measuring a drift in a transmitted signal measured at the second network analyzer. The method includes connecting the first network analyzer to a first end of the DUT and connecting the second network analyzer to a second end of the DUT. A local oscillator (LO) signal of the first network analyzer is locked to a reference frequency of the first network analyzer. A LO signal of the second network analyzer is locked to a reference frequency of the second network analyzer. A RF signal is transmitted from the first network analyzer to the second network analyzer and an intermediate frequency (IF) of the transmitted signal is generated using the LO signal of the second network analyzer. The second network analyzer measures the transmitted IF signal.

Abstract: Computerized aspects monitor listening virtual local area network ports for multicast packets from hypervisor virtual machines that meet a multicast group definition, and retrieve source addresses for original hypervisor sources of detected ones of the multicast packets, bind the retrieved addresses to the multicast packets to generate encapsulated packets, and forward the encapsulated packets as user datagram protocol unicast packets to a destination address of a virtual extensible helper daemon defined for a destination hypervisor of a second virtual local area network. The destination address meets the multicast group definition for the first virtual local area network, and the second virtual local area network is geographically remote from and different from the first virtual local area network, and thus the aspects send the first user datagram protocol unicast packet through an internet protocol router to the designated receiving port.

Abstract: A computer-implemented method of handling Ethernet packets in a passive optical network (PON) is disclosed. The method comprises generating, by the one or more processors, an initial envelope header that indicates that the initial envelope header is not a preamble replacement; transmitting, over the PON, by the one or more processors, the initial envelope header; accessing, by the one or more processors, an eight-byte block from a first Ethernet packet of a plurality of Ethernet packets; in response to the eight-byte block being an Ethernet preamble, generating, by the one or more processors, a first envelope header that indicates that the envelope header is a preamble replacement; and transmitting, over the PON, by the one or more processors, the first envelope header.

Abstract: Implementations of enhanced service monitoring technology are disclosed herein. In one example implementation, a collaboration service is hosted in a data center environment. The data center environment includes computing facilities and a service application executed on the computing facilities to provide at least a portion of the collaboration service. The service application includes a monitoring service that monitors the computing facilities and other resources running in the data center environment that provide at least another portion of the collaboration service.

Abstract: In some examples, a method includes receiving, by a first ingress network device of a network, a source tree join route message from an egress network device of the network, the source tree join route message specifying a multicast source and a multicast group, and in response to receiving, by the first ingress network device, a source active auto-discovery route message from a second ingress network device of the network indicating that the second ingress network device has switched from using a shared multicast tree to using a shortest path tree to deliver multicast traffic from the multicast source, electing one of the first ingress network device or the second ingress network device as a single active forwarder for forwarding the multicast traffic received from the multicast source for the multicast group.

Abstract: In some examples, a controller for a network includes a path computation module configured for execution by one or more processors to obtain configuration information for at least one point-to-multipoint label switched path (P2MP LSP); obtain, from the network via at least one protocol, network topology information defining a network topology for the network; determine, based on the network topology, a first solution comprising first respective paths through the network for the at least one P2MP LSP; determine, after generating a modified network topology based on the network topology, a second solution comprising second respective paths through the network for the at least one P2MP LSP. The controller also includes a path provisioning module configured for execution by the one or more processors to configure the network with the solution of the first solution and the second solution having the lowest total cost.

Abstract: Packet data corresponding to a multicast (MC) packet received by a network device is stored in a packet memory. A header of the MC packet is analyzed to determine two or more ports via which the MC packet is to be transmitted. It is determined that two or more pending read requests are to read packet data from a particular memory location in the packet memory. In response to determining that the two or more pending read requests are to read packet data from the particular memory location, the packet data is read a single time from the particular memory location. Respective instances of the packet data read from the particular memory location are provided to respective two or more read client devices for subsequent transmission of the packet data via the two or more ports determined by the packet processor.

Abstract: An approach is provided in which an information handling system establishes a resource reservation protocol (RSVP) session corresponding to a flow between a first entity and a second entity operating within a computer environment that implements a network virtualization overlay protocol. Once the RSVP session is established, the information handling system encapsulates data packets of the flow based on the network virtualization overlay protocol and, in turn, sends the encapsulated data packet over the computer network with a quality of service (QoS) assurance level that is based on the established RSVP session.

Abstract: A method of identifying a network condition between a pair of network devices, wherein one of the devices comprises a processor capable of executing instructions for forming a media stream for transmission over the network, the method comprising: monitoring a measure of delay in receiving media over the network; monitoring a measure of load on the processor; and identifying a network condition in dependence on a change in the measure of delay and the measure of load on the processor.

Abstract: In one embodiment, an apparatus includes a processing circuit and logic integrated with and/or executable by the processing circuit. The logic is configured to cause the processing circuit to handle Internet Group Membership Protocol (IGMP) messages received from other devices in a network. Also, the logic is configured to cause the processing circuit to create a general query solicit (GQS) message configured to solicit a general query (GQ) from a multicast snooping querier coupled with the apparatus. In another embodiment, a method includes handling, using a switch in a network, IGMP messages received from other devices in the network, and creating, using the switch, a GQS message configured to solicit a GQ from a multicast snooping querier coupled with the switch. Other systems, methods, and computer program products are described in more embodiments.

Abstract: In one embodiment, a first Protocol Independent Multicast (PIM) router includes port interfaces to receive multicast traffic from a first network and forward the traffic to at least one receiver, which is in a sub-network including other PIM routers, and a routing processor configured, in response to a decision for the first PIM router to relinquish being a designated router, to generate a PIM Hello message with a first option descriptor and a first priority, the first option descriptor indicating a staggered handoff process, and send the PIM Hello message, receipt of the PIM Hello message by the other PIM routers being operative to result in a designated router election electing a new designated router, the new designated router being operative to initiate the staggered handoff process causing the first PIM router to continue forwarding traffic until the new designated router has built a multicast routing tree.

Abstract: Techniques are presented herein for distributing address information of host devices in a network. At a first router device, a packet is received from a first host device that is destined for a second host device. The first host device is dually-connected to the first router and a second router device. The second router device is part of a virtual port channel pair with the first router device. A message is sent to the second router device, the message indicating that the first host device is connected to the second router device. The packet is encapsulated with an overlay header and is sent to a third router device that is connected to the second host device. The encapsulated packet contains a Layer 2 address associated with the first host device and a Layer 3 address associated with the first host device.

Abstract: A decoding device according to an embodiment includes: a reception memory for storing received image; a frame buffer for storing a reference image; a decoding unit for decoding the received image based on the reference image stored in the frame buffer; a reference image storage for storing the decoded image, decoded by the decoding unit, in the frame buffer as the reference image; and an output image selection unit for selecting the reference image stored in the frame buffer as an output image when the reception memory underflows and selecting the decoded image as the output image when the reception memory does not underflow.

Abstract: Content service(s) to device(s) is provided. Availability of broadcast transmission of said content is determined after an indication is signaled that a dedicated unicast radio bearer is needed/is not needed for reception of said content. Subsequent to reception of the indication the content is transmitted over a dedicated unicast radio bearer or broadcasting. Transmission of the content can be supported by an indication of a need for a continued network connection for the device even when the amount of unicast traffic over the connection in a core network does not justify maintenance of the connection to cause the core network to refrain from releasing said network connection. Unicasting of content to a device moving from a first to a second cell can be continued based on signaling of a message to a control entity of a second cell, the message providing information of the identity of the service(s).

Abstract: A multicast destination table contains a list of links. The list of links includes the main link that is currently in use and alternate links to reach the same destination. The links in the list of links are ordered based on a metric. Each of the links is stored as an entry in the multicast destination table. A multicast replication engine traverses the list of links until an enabled link in the list of links is reached, and replicates a packet according to data associated with the enabled link in the list of links.

Abstract: A method of performing an update packet sequence number packet ready command (drop packet mode operation) is described herein. A first packet ready command is received from a memory system via a bus and onto a first network interface circuit. The first packet ready command includes a multicast value. A first communication mode is determined as a function of the multicast value. The multicast value indicates a single packet was communicated by a second network interface circuit. A packet sequence number stored in a memory unit is updated. The memory unit is included in the first network interface circuit. The first network interface circuit does not free the first packet from the memory system. The network interface circuits and the memory system are included on an Island-Based Network Flow Processor. The bus is a Command/Push/Pull (CPP) bus.

Abstract: In the context of a dynamic adaptation of a transmission data rate of a terminal device in a wireless communication network, predefined transmission profiles that correspond to respective data rates are associated respectively with reception sensitivities. A server performs an optimization of said transmission data rate in successive stages, and decides to switch to a new stage according to a frame delivery rate with respect to a predefined threshold. The server selects the transmission profile to be applied by the terminal device while keeping at least a predefined margin, dependent on the stage at which the operation is performed, between received signal strength indication and reception sensitivity corresponding to said transmission profile.

Abstract: Aspects of the subject technology relate to systems for arbitrating direct forwarder (“DF”) instantiation between VPC peers used to facilitating the transport of bidirectional multicast traffic over a L2/L3 network boundary. In some aspects, arbitration of DF instantiation on a given VPC peer can include determining a first set of metrics for a first VPC switch, determining a second set of metrics for a second VPC switch, and determining, at the first VPC switch, whether to instantiate a designated forwarder (DF) operation based on a comparison of the first set of metrics and the second set of metrics. Methods and machine-readable media are also provided.

Abstract: Provided is an image transmission system including an image control device, and at least two signal processing devices. The signal processing devices each include an image receiver configured to selectively receive one or more images transmitted using multicast based on image control information transmitted from the image control device, one or more image processing units configured to perform an image process on an image received by the image receiver based on the image control information, and an image sender configured to transmit an image subjected to the image process by the image processing unit based on the image control information, the image being transmitted using multicast.

Abstract: Presented herein are hybrid approaches to multi-destination traffic forwarding in overlay networks that can be used to facilitate interoperability between head-end-replication-support network devices (i.e., those that only use head-end-replication) and multicast-support network devices (i.e., those that only use native multicast). By generally using existing tunnel end-points (TEPs) supported functionality for sending multi-destination traffic and enhancing the TEPs to receive multi-destination traffic with the encapsulation scheme they do not natively support, the presented methods and systems minimize the required enhancements to achieve interoperability and circumvents any hard limitations that the end-point hardware may have. The present methods and systems may be used with legacy hardware that are commissioned or deployed as well as new hardware that are configured with legacy protocols.

Abstract: Components, methods, and systems allowing acceleration components to transmit messages are provided. An acceleration component for use among a first plurality of acceleration components, associated with a first top-of-rack (TOR) switch, to transmit messages to other acceleration components in an acceleration plane configurable to provide service acceleration for a service is provided. The acceleration component includes a transport component configured to transmit a first point-to-point message to a second acceleration component, associated with a second TOR switch different form the first TOR switch, and to a third acceleration component, associated with a third TOR switch different from the first TOR switch and the second TOR switch. The transport component may be configured to broadcast a second point-to-point message to all of a second plurality of acceleration components associated with the second TOR switch and to all of a third plurality of acceleration components associated with the third TOR switch.

Abstract: A computing resource service receives a request from a customer to assign a domain name to a computing resource. The computing resource service may submit a query to a domain name system service to determine whether the domain name has been reserved for the customer. The domain name system service may provide an encrypted alias record corresponding to the requested domain name and specifying one or more identifiers of customers for whom the domain name has been reserved. The computing resource service may decrypt the alias record and determine whether the customer corresponds to one of the one or more identifiers within the alias record. If the customer does correspond to one of the one or more identifiers within the alias record, the computing resource service may assign the domain name to the computing resource.

Abstract: Metadata associated with IoT devices is stored. The metadata may include categories associated with the IoT devices. At least a first category may be hierarchical such that the first category includes at least two hierarchical levels, with each hierarchical level including at least two categories, and such that each category in a hierarchical level that is below another hierarchical level is a subset of one of the categories in the hierarchical levels above that hierarchical level. User information associated with users is stored. A request associated with one of the users and further associated with access to at least one of the IoT devices is received. Responsive to the request, the access is selectively granted to the at least one of the IoT devices based upon the stored user information and the stored metadata.

Abstract: An apparatus and method for channel switching comprising encapsulating a plurality of IP datagrams associated with a plurality of real time audio/visual (A/V) streams or a plurality of file objects onto a plurality of MPE sections; inserting the plurality of MPE sections into one of a plurality of elementary streams; and multiplexing the plurality of elementary streams associated with the plurality of real time A/V streams or the plurality of file objects into a plurality of non-consecutive bursts, wherein the plurality of elementary streams are adjacent in a channel line-up. In one aspect, the plurality of non-consecutive bursts is transmitted to a DVB-H receiver with a limited memory size for enabling fast channel switching. In one aspect, the channel line-up is presented in an electronic service guide (ESG).

Abstract: Methods, apparatus, and systems for reliable replication mechanisms based on active-passive HFI protocols build on top of non-reliable multicast fabric implementations. Under a first hardware-based scheme, a reliable replication mechanism is (primarily) implemented via Host Fabric Interfaces (HFIs) coupled to (or integrated in) nodes coupled to a non-reliable fabric. Under this approach, the HFIs take an active role in ensuring reliable delivery of multicast messages to each of multiple target nodes. Under a second hybrid software/hardware scheme, software running on nodes is responsible for determining whether target nodes have confirmed delivery of multicast messages and sending retry messages for cases in which delivery is not acknowledged within a timeout period. At the same time, the HFIs on the target nodes are responsible for generating reply messages containing acknowledgements rather than software running on the target nodes.

Abstract: Some embodiments provide a method for configuring a logical router to exchange routing data with a neighboring router through a dynamic routing protocol. The logical router is implemented as multiple routing components. The method receives identification data for the neighboring router with which to peer the logical router. Based on the identification data, the method identifies a subset of the routing components to peer with the neighboring router. The method generates configuration data for each routing component in the identified subset. Each identified routing component uses the configuration data to exchange routing data with the neighboring router through the dynamic routing protocol.

Abstract: A network device includes multiple ports, for communicating over a communication network, and packet processing circuitry. The packet processing circuitry is configured to receive via the ports packets belonging to a plurality of multicast flows, to receive, for each of the multicast flows, (i) a first configuration that specifies clients that are to receive the multicast flow prior to a specified switch-over time, and (ii) a second configuration that specifies the clients that are to receive the multicast flow after the specified switch-over time, to forward the multicast flows via the ports in accordance with the first configuration, to extract from a field in at least one of the packets a value that is indicative of the switch-over time, and, based on the extracted value, to switch-over forwarding of the multicast flows from the first configuration to the second configuration simultaneously at the switch-over time.

Abstract: Disclosed herein are system, method, and computer program product embodiments for selectively decoding a multicast subframe in a multi-user frame for a wireless communications protocol. Embodiments include transmitting a request frame including a multicast group address for a multicast group to an access point (AP). The AP can determine a multicast identifier for the multicast group based on the multicast group address in the request frame. The AP can also transmit a response frame including the determined multicast identifier to a station (STA). The STA can receive a multi-user frame containing a multicast subframe from the AP. The STA can determine whether the multicast subframe is destined for the STA based on the determined multicast identifier and a multicast identifier stored in a preamble of the multi-user frame. The STA can determine whether to decode the multicast subframe based on the determination of whether the multicast subframe is destined for the STA.

Abstract: Embodiments of this application provide a bit-forwarding ingress router, a bit-forwarding router, and an OAM test method, and pertain to the field of multicast networks. A first BFR receives an OAM request packet from a BFIR; the first BFR determines, according to the OAM request packet, that a destination BFR corresponding to the OAM request packet is the first BFR; and the first BFR obtains a first OAM response packet according to an ID of the BFIR, and sends the first OAM response packet to the BFIR. According to the method and the apparatus that are provided in the embodiments of this application, a problem that a BFIR cannot diagnose or handle a transmission fault when the fault occurs during transmission of a multicast packet can be resolved, which helps implement connectivity testing by using an OAM packet and enables testing of multiple BFERs.

Abstract: Methods, apparatus, and articles of manufacture to provide a multicast virtual private network (MVPN) are disclosed. An example method to transmit multicast data over a communication network includes receiving, at a first machine, a multicast data packet from an ingress provider edge router of the communication network, the multicast data packet associated with a multicast route, and transmitting a first replication of the multicast data packet from the first machine to a second machine via a first unicast path. The first replication of the multicast data packet includes a first label provided by the second machine to identify the multicast route in the second machine. Example methods further include receiving the first replication of the multicast data packet at the second machine via the first unicast path, and replicating the multicast data packet from the second machine to an egress provider edge router of the communication network.

Abstract: In one embodiment, a server receives an authentication request from a device in a computer network, and authenticates the device. Then, upon receiving a service announcement from the authenticated device, the server determines authenticity of the service announcement from the authenticated device, and redistributes the service announcement into the computer network only when the service announcement from the authenticated device is an authentic service announcement.

Abstract: A standardized hot-pluggable transceiving unit implementing bandwidth optimization functionalities. The transceiving unit comprises a first connector receiving a signal comprising a source video payload. The transceiving unit comprises a processing unit performing a scaling of the source video payload. The scaling consists in generating a scaled video payload by applying a scaling ratio to the source video payload. The transceiving unit comprises a second connector outputting an IP flow transporting the scaled video payload. In an alternative bandwidth optimization implementation, the first connector receives a plurality of source IP flows each transporting a source video payload. The processing unit selects one among the plurality of source IP flows, and generates outbound IP packets of an outbound IP flow based on stored characteristics of the outbound IP flow. The outbound IP packets transporting the source video payload of the selected source IP flow are outputted by the second connector.

Abstract: A controller of a software-define network receives a notification of a change to a configuration of data delivery devices of the network. In response, the controller determines whether flows of respective flow tables of the data delivery devices are affected by accessing flow mappings maintained in a memory of the controller. The respective flow tables of the data delivery devices affected by the configuration change include a pattern of information fields and actions that corresponds to a pattern of information fields and actions of the flow mappings in the memory of the controller. The controller sends instructions to the affected data delivery devices to perform an asynchronous activity on the respective flow tables that includes a cleanup of the flows of the respective flow tables of the affected data delivery devices, performed in repetitive sweeps of the one or more data delivery devices, until completion of the cleanup.

Abstract: A digital broadcast receiving apparatus capable of executing a function with a higher added value can include: a broadcast receiving unit configured to receive broadcasting data of broadcasting program contents and location information from a broadcast transmission path, a reference destination for obtaining data related to the broadcasting data being described in the location information; a communication unit configured to receive communication data of the program contents from the reference destination described in the location information via a communication line; a recording/reproducing unit configured to record and reproduce the broadcasting data of the broadcasting program contents received by the broadcast receiving unit; an outputting unit configured to output the broadcasting data of the broadcasting program contents reproduced from the recording/reproducing unit to external equipment; and a server function unit for external equipment.

Abstract: Examples of the present disclosure provide a method of migrating a virtual machine. In response to receiving information of a newly added port, a first controller within a software defined network may search for a matching destination Internet protocol address within a first neighbor relationship table when an IP address contained in the information of the newly added port is taken as a source IP address. The first controller may send flow tables relating to the matching destination IP address to a destination virtual switching device of a migrated virtual machine, and update flow tables stored in virtual switching devices managed by the first controller. The first controller may send a migration success message including the information of the newly added port to a second controller, to enable the second controller to update flow tables stored in virtual switching devices managed by the second controller.

Abstract: A method is implemented by a network device for providing a quick change Internet Protocol television (IPTV) service with reduced delay for transitioning to quick change IPTV channels by configuring a multicast address of the IPTV channel to a static group. The static group is assigned to a loopback interface of the network device. The method includes receiving multicast data traffic for a multicast group of a quick change IPTV channel identified by the static group assigned to the loopback interface, and discarding the multicast data traffic for the multicast group of the quick change IPTV channel.

Abstract: A method and a device for receiving a multicast frame in a wireless LAN are disclosed. The method for receiving a multicast frame in a wireless LAN comprises the steps of: combining, by an STA, an AP on the basis of an initial access frame transmitted by the AP through a primary channel; setting, by the STA, an operating channel as an exclusive multicast channel on a first time resource, wherein the first time resource and the primary channel are indicated on the basis of the initial access frame; receiving, by the STA, the multicast frame from the AP through the exclusive multicast channel on the first time resource; setting, by the STA, the operating channel as the primary channel on a second time resource; and receiving, by the STA, a unicast frame from the AP through the primary channel on the second time resource.

Abstract: A memory system includes a memory and a controller. The memory includes a first memory chip and a second memory chip. The controller controls the memory. Each of the first and second memory chips includes string units and blocks including the string units. The memory holds information indicating a partial bad block including a bad string unit, and indicating which one of string units is the bad string unit in the partial bad block.

Abstract: A method and system for reducing changes in a designated router (DR) of a protocol independent multicast (PIM) protocol are disclosed. The method includes: after a PIM device joins a shared network, an interface of the PIM device receiving a Hello message sent by other PIM device in the shared network, wherein the Hello message carries a DR address option; and the interface of the PIM device using a currently used DR address carried in the Hello message as a DR address of the interface.

Abstract: A parameter determination apparatus is provided with: an input/output I/F configured to receive topology information representing connections between nodes included in a communication system, and node pair information indicating node pairs that communicate with each other; a parameter determination unit configured to simultaneously determine, based on the topology information and the node pair information, a group formed of 1 or more node pairs and a transmission rate to be assigned to the group; and a parameter setting unit configured to give notification of the group and the transmission rate to the nodes included in the communication system. In this way, network utilization efficiency is increased.

Abstract: The present disclosure relates to a slave device control method, for transmitting a control message along with group start data and group end data to a slave device by a master device so as to set a start point and an end point of the slave device in a sub group, and for allowing the master device to check a network topology using a topology collection message so as to effectively generate a sub group.

Abstract: A method for creating a secure network is provided. The method comprises establishing an overlay domain to control routing between overlay edge routers based on an underlying transport network, wherein said establishing comprises running an overlay management protocol to exchange information within the overlay domain; in accordance with the overlay management protocol defining service routes that exist exclusively within the overlay domain wherein each overlay route includes information on at least service availability within the overlay domain; and selectively using the service routes to control routing between the overlay edge routers; wherein the said routing is through the underlying transport network in a manner in which said overlay routes is shared with the overlay edge routers but not with the underlying transport network via the overlay management protocol.

Abstract: The application provides a service routing packet processing method and apparatus. The method includes: receiving, by a first service router SR, a first service routing packet; querying, by the first SR, a service routing table according to path identification information and identification information of a source service node SN that are carried in the first service routing packet, to determine identification information of a destination SN, where the service routing table includes a correspondence between the path identification information, the identification information of the source SN, and the identification information of the destination SN; generating, by the first SR, a second service routing packet according to the identification information of the destination SN and the first service routing packet; and sending, by the first SR, the second service routing packet. According to the technical solutions of the present invention, support of an independent SN for service routing can be implemented.