Abstract: A Call Response System comprising modules that are mutually interfaced for sharing parameters. Firstly, a data-collection module, for collecting parameters of an incoming call and of a recipient for the incoming call. Secondly, a dynamic-scripting module for configuring a response scenario according to prioritized combinations of the parameters and for substituting a component for at least one respective open variable within the configured scenario. Finally, a call-response module for transmitting aspects of the component substituted configured scenario, and for recording aspects of the transmitted scenario.

Abstract: A connectivity manager (CM) of a provider network selects, from a plurality of ERGs (edge resource groups), a particular ERG comprising an edge router and a network marker translation agent to be used for routing traffic between a resource collection of a VCS (virtual computing service) and a client network. The CM detects a condition that triggers the selection of a second ERG to be used for at least a subset of the resource collection's traffic, and initiates a set of configuration changes to enable the use of the second ERG for connectivity between the first resource collection and the client network.

Abstract: A communicating apparatus receives a request command which requires a response, and determines whether the communication mode of a partner apparatus corresponding to the request command matches a communication mode executed by the self communicating apparatus. If it is determined that the communication mode of the partner apparatus matches the communication mode executed by the self communicating apparatus, the communicating apparatus transmits a response command to the request command. If it is determined that the communication mode of the partner apparatus does not match the communication mode executed by the self communicating apparatus, the communicating apparatus transmits no response command to the request command.

Abstract: Embodiments relate to identifying a topology of a network based on information identifying adjacent devices from each of the devices in the network. In one embodiment, each device identifies one or more adjacent devices within one hop and stores information identifying the one or more adjacent devices. A requesting device aggregates information identifying one or more adjacent devices of each device and identifies the topology of the network based on the aggregated information. By each device storing and transmitting information identifying adjacent devices connected within one hop, amount of information stored in each device and bandwidth of information exchanged can be reduced.

Abstract: A system including a receiver and a processing pipeline. The receiver is configured to generate a data block by encapsulating a data packet in a header portion and a tail portion that do not include valid information bits. The processing pipeline is configured to, in a first processing stage, store the data block, and store, separately from the data block, additional information associated with the data block. The processing pipeline is further configured to, without modifying a length of the data block, either add bits to the header portion or the tail portion to increase the length of the data packet or subtract bits from the data packet to decrease the length of the data packet, and modify the additional information in accordance with the bits added to the header portion or the tail portion or the bits subtracted from the data packet.

Abstract: A processor includes a front end, an execution pipeline, and a binary translator. The front end includes logic to receive an instruction and to dispatch the instruction to a binary translator. The binary translator includes logic to determine whether the instruction includes a control-flow instruction, identify a source address of the instruction, identify a target address of the instruction, determine whether the target address is a known destination based upon the source address, and determine whether to route the instruction to the execution pipeline based upon the determination whether the target address is a known destination based upon the source address. The target address includes an address to which execution would indirectly branch upon execution of the instruction.

Abstract: Some embodiments provide a novel network control system that provides publications for managing different slices (e.g., logical and/or physical entities) of a network. The publications are published from publisher controllers in the network control system to subscriber controllers. The network control system uses publications with generation numbers and buffered subscribers to implement the fixed points in order to help maintain a consistent network state. The information published with a publication is useful for resolving conflicts in the network control system when multiple publisher controllers provide conflicting inputs to a subscriber controller.

Abstract: Some embodiments provide a method for a first network controller located at a first domain that manages a logical network spanning several physical domains including the first domain. Upon reconnection to a second network controller located at a second physical domain of the several physical domains after a period of disconnect, the method receives a first set of updates indicating modifications to logical network state from the second network controller. The method reconciles any conflicts between (i) the logical network state stored at the first controller, (ii) the first set of updates received from the second network controller, and (iii) updates received from other network controllers located at different physical domains of the several physical domains. The method transmits a second set of updates to the second controller indicating modifications to the logical network state based on the reconciliation of conflicts.

Abstract: A packet is received at an ingress port of a network device. Based on forwarding information in the packet, an adjacency point is generated using a forwarding information database. If the packet is a routed packet, the adjacency pointer is used as an index to an entry in a media access control (MAC) table that identifies an egress port for the packet. If the packet is not a routed packet, a search is performed in the MAC table to locate an entry in the MAC table that identifies an egress port for the packet.

Abstract: Disclosed herein, among others, is a media streaming system, comprising a registrar server, a media stream providing device, and a media stream receiving device. The registrar server is configured to register a piece of connection information associated with the media stream providing device, the connection information comprising a local network location, a public network location, a broker location, and a proxy location. The media stream receiving device is configured to obtain the connection information from the registrar server, and to commence measuring simultaneously, based on the aforementioned locations, first, second, third, and fourth costs for connecting to the media stream providing device via a local path, a remote path, a peer-to-peer path, and a proxy-assisted path, respectively. The media stream receiving device then selects one of those paths based on the measured costs.

Abstract: Embodiments disclosed herein provide systems and methods for dividing packet content for transmission over diverse wireless links. In a particular embodiment, a method provides generating a packet for transmission to a destination and examining the packet to determine if content within the packet qualifies for transmission over diverse wireless links comprising a first wireless link and a second wireless link. The method further provides, if the content qualifies for transmission over the diverse wireless links, generating a first alternate packet that contains a first portion of the content and a second alternate packet that contains a second portion of the content. The method further provides transferring the first alternate packet over the first wireless link for delivery to the destination and transferring the second alternate packet over the second wireless link for delivery to the destination.

Abstract: A virtual network (VN) realization method and system are provided. The method includes setting a VN-AP in a data center network and/or a broadband network. A service deployment and management function entity receives a VN service request from a user to generate feature information of the VN; a PC/VM automatically discovers the VN-AP, the automatically discovered VN-AP generates the VN forwarding table entry of the PC/VM after the PC/VM passes the identity authentication of the VN, and performs tunnel encapsulation according to the VN forwarding table entry to forward a packet from the PC/VM. By discovering a VN-AP for processing a VN automatically, the disclosure realizes the automatic and rapid deployment of the VN.

Abstract: A multilink-based data transmission method includes establishing separately, by a first device, first tunnels in different types of links in which the first device and a second device have established a communication connection, establishing, by the first device, a second tunnel that crosses the first tunnels established in the multiple different types of links, analyzing, by the first device, a load state of each first tunnel crossed by the second tunnel, and selecting a first tunnel used to transmit a target packet, and encapsulating, by the first device, the target packet into the second tunnel, and sending, to the second device, through the first tunnel used to transmit the target packet, the packet encapsulated into the second tunnel. Correspondingly, a data transmission device is provided. A utilization rate of links supported by a network device can be improved with the method and device.

Abstract: Aspects of the present disclosure are directed to methods and systems for securing mobile computing applications with distributed keys. In one aspect, a computer implemented method or computer readable media include steps electronically receiving, at a computer processor of a computing device, a first security key fragment based on a user input to the computing device; electronically receiving, at the computer processor, a second security key fragment from a network connected storage entity; and electronically concatenating, at the computer processor, the first security key fragment and the second security key fragment to generate a third security key.

Abstract: A method for providing cloud embedding using Network followed by Compute Load Balancing (NCLB) by mapping one or more virtual links over one or more physical links while balancing network resources, and mapping one or more virtual nodes over one or more physical nodes while balancing different types of computational resources.

Abstract: A network component that processes or sends multi-destination frame via a wireless radio link. In one example embodiment, the network component may receive the multi-destination frame that comprises a control block type, a receiver list, and one or more data packets in a wireless radio network. The network component may determine the control block type and the receiver list from the multi-destination frame. The receiver list may reference a plurality of receivers and the control block type may indicate a type of receiver list. The network component may receive one or more data frames. In another example embodiment, the network component may generate a multi-destination frame that comprises the control block type, a receiver list associated with the control block type, a header, and the one or more data frames and send the multi-destination frame to a plurality of receivers.

Abstract: A system and method for enabling the interchange of enterprise data through an open platform is disclosed. This open platform can be based on a standardized interface that enables parties to easily connect to and use the network. Services operating as senders, recipients, and in-transit parties can therefore leverage a framework that overlays a public network.

Abstract: According to one embodiment, a non-transitory computer readable medium comprising instructions which, when executed by one or more hardware processors, causes performance of operation comprising: determining that a client device, in a first Internet Protocol (IP) subnet, is subscribed to a multicast group; determining that the client device is no longer in the first IP subnet; responsive to determining that the client device is no longer in the first IP subnet, transmitting a message on behalf of the client device to unsubscribe the client device from the multicast group is shown.

Abstract: A policy enforcer device may determine a value of multiple controls included on a control device. The multiple controls may be associated with zones of a facility. The policy enforcer device may determine, based on the values of the plurality of controls, relative amounts of bandwidth to allocate, of a total amount of available bandwidth, to the zones of the facility; and control one or more network devices to provide the determined amounts of bandwidth to the zones of the facility.

Abstract: Methods and systems for hardware-accelerated packet multicasting are provided. According to one embodiment, a first packet to be multicast to a first destination and a second packet to be multicast to a second destination are received. The first and second packets are classified in accordance with different virtual routers (VRs) of multiple VRs instantiated by a virtual routing engine (VRE) of a virtual routing system by determining a first selected VR to multicast the first packet and a second selected VR to multicast the second packet. For each of the first and second packets: a routing context of the VRE is switched to a routing context associated with the selected VR; at least a portion of the packet is read from one of multiple multicast address spaces associated with the selected VR; and the packet is forwarded to the destination.

Abstract: In a multi-tenancy information processing system, a necessary setting change item and a target NW device are specified at the time of changing a configuration of a virtual machine of a tenant. A management server 116 includes a device management table 352 for each tenant and each segment, in which an NW setting item set for a network (NW) device is stored for each of the NW devices corresponding to the segment of the tenant, in advance. The management server 116 receives a configuration change request including type information on a request representing addition, deletion, or movement of the virtual machine, an identifier of a target tenant, and an identifier of a target segment.

Abstract: A combination of a common key routing (CKR) method and data proxy architecture (DPA) method may be used to route communication messages in a telecommunication network to achieve improved data locality and reduce secondary key lookups. A processor in a multiprocessor computing system may receive a first communication message that includes subscriber identifiers that uniquely identify a subscriber, generate a common key based on the subscriber identifiers, identify a first logical scalable unit that includes a first database memory that stores subscriber data relating to the subscriber via a database application programming interface (API) and the common key, store the first communication message in the first database memory included in the first logical scalable unit, and receive a second communication message in response to storing the first communication message in the first database memory and routing the second communication message to another component the telecommunication network.

Abstract: A combination of a common key routing (CKR) method and a data locality table (DLT) method may be used to route communication messages in a telecommunication network to achieve improved data locality and reduce secondary key lookups. A processor in a multiprocessor computing system may receive a first communication message that includes subscriber identifiers that uniquely identify a subscriber, generate a common key based on the subscriber identifiers included in the first communication message, and identify a first logical scalable unit that includes a first database memory that stores subscriber data relating to the subscriber by querying a data locality table with the common key. The processor may also identify a first application processor in the multiprocessor computing system that is part of the first logical scalable unit and send the first communication message to the first application processor.

Abstract: The disclosure discloses a processing method for a stateful Path Computation Element (PCE) and a stateful PCE. The method includes: the stateful PCE completes path computation of the stateful PCE, and reserves or locks resources needed by a computed path; the stateful PCE receives a first notification message, wherein the first notification message is used for notifying the stateful PCE of a path which is unsuccessfully established during a Resource Reservation Protocol (RSVP) signalling procedure or a path which is successfully deleted during an RSVP signalling procedure; and the stateful PCE releases resources needed by the path notified by the first notification message. The disclosure improves the real-time property and accuracy of the resource information which the stateful PCE is aware of, and the accuracy of the path computation of the PCE, so as to avoid resource conflict.

Abstract: A network component comprising a control plane controller configured to implement a method comprising transmitting routing and wavelength assignment (RWA) information to at least one adjacent control plane controller, wherein the RWA information is transmitted using an interior gateway protocol (IGP). Included is a method comprising communicating a message comprising RWA information to at least one adjacent control plane controller, wherein the message comprises an indication whether the RWA information is static or dynamic. Also included is an apparatus comprising a control plane controller configured to communicate data to at least one adjacent control plane controller, wherein the data comprises RWA information, and wherein the data comprises an indicator that indicates whether the RWA information is associated with a node, a link, or both.

Abstract: Systems and methods for controlling Quality-of-Service (“QoS”) in a Virtual Private Network (“VPN”) in a transport network providing a plurality of QoS bearers. The methods involve: establishing, between two VPN endpoints, a plurality of VPN tunnels through the transport network, including at least a default VPN tunnel associated with a first QoS bearer and an alternate VPN tunnel associated with a second QoS bearer; receiving and analyzing a data block; applying a VPN policy to assign the data block to either default VPN tunnel or alternate VPN tunnel; and encapsulating the data block in a transport data block including at least one indicator. The indicator specifies whether the transport data block is to be communicated by the transport network using the first QoS bearer or second QoS bearer.

Abstract: A first user instruction for turning on a communication unit of a communication apparatus is detected. An instruction which is performed firstly, out of the first user instruction and a second user instruction for turning on a communication unit of the other communication apparatus, is determined. Based on this determination result, data designated by a user is transmitted from the communication apparatus to another communication apparatus.

Abstract: The present invention discloses a method, an apparatus, and a system for forwarding a packet in a multi-topology network, relating to the field of communications technologies. The method includes: receiving, by an ingress node in the multi-topology network, a packet sent by a first network, and obtaining information of an ingress interface receiving the packet; where the first network is a network except the multi-topology network; obtaining a routing information base RIB or a forwarding information base FIB of a corresponding downlink topology according to the information of the ingress interface; and forwarding the packet to an egress node in the multi-topology network according to the RIB or the FIB of the corresponding downlink topology.

Abstract: A real-time transport packet creating system and method are provided for use with a source terminal, a destination terminal and a real-time transport packet. The real-time transport packet creating device includes a receiver, a latency generator and a transmitter. The receiver can receive the real-time transport packet from the source terminal at a first time. The latency generator can generate an output real-time transport packet. The transmitter can transmit the output real-time transport packet to the destination terminal at a second time. The output real-time transport packet is based on the received real-time transport packet, the first time and the second time.

Abstract: An apparatus includes at least one processing unit configured to execute a virtual network appliance and a virtual machine. The virtual network appliance includes a virtual NIC driver configured to transfer packets to and from a physical port of the apparatus. The virtual network appliance also includes an internal network interface configured to transfer the packets to and from the virtual machine through a hypervisor. The virtual network appliance further includes an aggregator configured to transfer the packets between the virtual NIC driver and the internal network interface.

Abstract: Methods and apparatus related to control information reporting over wireless communication channels are described. Various embodiments include communicating control information format definition information over a wireless link. For example, in some embodiments, a base station downloads control information reporting format definition information, e.g., corresponding to a new release or a custom reporting format, into a wireless terminal. As another example, a wireless terminal generates a custom control information reporting format, that it intends to use, and communicates definition information corresponding to the generated custom control reporting format to a base station.

Abstract: A method for processing data packets in a communication network includes establishing a path for a flow of the data packets through the communication network. At a node along the path having a plurality of aggregated ports, a port is selected from among the plurality to serve as part of the path. A label is chosen responsively to the selected port. The label is attached to the data packets in the flow at a point on the path upstream from the node. Upon receiving the data packets at the node, the data packets are switched through the selected port responsively to the label.

Abstract: In one embodiment, a node determines an intention to transmit a diversely forwarded packet through a computer network, and as such, transmits a first version of the packet having a packet identifier (ID) and a first distinguisher value to a first next-hop node, and transmits a second version of the packet having the same packet ID and a second distinguisher value different from the first distinguisher value to a second next-hop node different from the first next-hop node. In another embodiment, a next-hop node that receives the packet determines whether any previously received packet at the next-hop node had a same packet ID and a different distinguisher value. In response to determining that no previously received packet has the same packet ID and different distinguisher value, the next-hop node stores the packet ID and the distinguisher value, and forwards the packet to a selected next-hop node.

Abstract: A network device may be configured to define a Layer 2 domain, wherein the Layer 2 domain defines a data link layer broadcast domain and assign an access interface to the Layer 2 domain. The network device may be further configured to assign a double Virtual Local Area Network (VLAN) identifier to the access interface in the Layer 2 domain, wherein the double VLAN identifier includes an inner VLAN identifier and an outer VLAN identifier, receive a data unit via the access interface, wherein the data unit includes the double VLAN identifier, and associate the data unit with the defined Layer 2 domain, based on the data unit being received via the access interface and based on the data unit including the assigned double VLAN identifier.

Abstract: Routing path calculation apparatus and methods are disclosed. Calculation of routing paths within different routing areas of a communication system is handled by respective routing path calculation devices. Multiple devices may be requested to perform respective routing path calculations for segments of a routing path between endpoints in different routing areas. Recalculations may be requested from the same or different devices in the event of a change in a routing area that affects a segment of a routing path. A routing path calculation device, whether or not in this type of distributed routing path calculation system, may determine whether a previously configured path exists between an intermediate node of a calculated routing path, and take the previously configured path into account in calculating the routing path if it is determined that a previously configured path exists. The previously configured path may be an Interior Gateway Protocol (IGP) shortcut, for example.

Abstract: A method, non-transitory storage medium, and apparatus are presented for configuration management of a distributed virtual switch including components distributed on different entities in a computing system is provided. In an exemplary embodiment, a snapshot of a configuration of the distributed virtual switch is received from a management plane configured to manage the distributed virtual switch. The snapshot may include settings for the configuration at a time of taking the snapshot. A persistent storage location independent from the management plane is designated for storing the received snapshot of the configuration. After the snapshot is taken, the configuration may be retrieved from the persistent storage location and the settings of the configuration may be applied to the distributed virtual switch, a new distributed virtual switch, or an existing distributed virtual switch.

Abstract: A method for formatting a signal in a mobile communication system by appending a plurality of medium access control headers to a plurality of medium access control-service data units for data transfer between a mobile station and network in the mobile communication system. If the service data units have the same characteristics, a medium access control-protocol data unit is formed by successively coupling the service data units to any one of the medium access control headers. If the service data units have different characteristics, the protocol data unit is formed by sequentially coupling each of the service data units and each of the medium access control headers. The formed protocol data unit is then transformed into a transport block with a predetermined size.

Abstract: A data processing apparatus includes multiple processing means that are connected in a ring shape via corresponding communication means respectively. Each communication means includes a reception means for receiving data from a previous communication means, and a transmission means for transmitting data to a next communication means. Connection information is assigned to each of the reception means and the transmission means. The communication means, when receiving a packet that has same connection information as one assigned to its reception means, causes the corresponding processing means to perform data processing on the packet, sets the connection information assigned to its transmission means to the packet, and transmits the packet to the next communication means, and when receiving a packet that has connection information that is not same as one assigned to its reception means, transmits the packet to the next communication means without changing the connection information of the packet.

Abstract: A methodology is described for achieving efficient forwarder appointments. Such efficient appointment may provide an equal load on each participating routing bridge in the TRILL LAN. Load may be viewed as the number of VLANs for which a given node is an appointed forwarder. Furthermore, efficient appointment may be executed with a minimum of traffic disruption. Minimal disruption may be ensured by forwarder appointments by moving a minimum number of VLANs to ensure an equal load on each participating routing bridge.

Abstract: Some embodiments provide a method of operating several logical networks over a network virtualization infrastructure. The method defines a managed physical switching element (MPSE) that includes several ports for forwarding packets to and from a plurality of virtual machines. Each port is associated with a unique media access control (MAC) address. The method defines several managed physical routing elements (MPREs) for the several different logical networks. Each MPRE is for receiving data packets from a same port of the MPSE. Each MPRE is defined for a different logical network and for routing data packets between different segments of the logical network. The method provides the defined MPSE and the defined plurality of MPREs to a plurality of host machines as configuration data.

Abstract: Some embodiments provide a method for a computing device serving as a host machine in a logical network. The method executes several virtual machines that are in several different segments of the logical network. The method operates a managed physical routing element (MPRE) for routing data packets between different segments of the logical network. The MPRE includes several logical interfaces, each of which is for receiving data packets from a different segment of the logical network. Each of the logical interfaces is addressable by a network layer address. The method intercepts an Address Resolution Protocol (ARP) broadcast message when the destination address matches the network address of one of the logical interfaces. The method formulates an ARP reply to the ARP broadcast message.

Abstract: Disclosed are various embodiments of a network switch for storing a prefix address and a mask corresponding to the prefix address, the prefix address and the mask each representing a binary value, the mask representing a number of significant bits of an address beginning with a most significant bit. The network switch obtains a network frame via one of a plurality of network interfaces, the network frame comprising a network address in a header of the network frame, the network address being a binary value representing a physical address of a network interface device. The network switch determines a truth value associated with a comparison of a mask number of bits of the prefix and network addresses, the truth value indicating an equivalence of the comparison. In response to the truth value, the network switch may initiate at least one action associated with the network frame.

Abstract: Some embodiments provide a network system that includes several non-edge switching elements that are each for forwarding network data to other non-edge switching elements. The network system includes several edge switching elements that are each for (1) coupling to a set of network hosts and (2) forwarding network data to the non-edge switching elements and to the set of network hosts. Each of the non-edge switching elements of the several non-edge switching elements is further for forwarding network data to the several edge switching elements. The network system includes a set of network controllers for (1) receiving a definition of a logical switching element that couples to the sets of network hosts and (2) managing the several edge switching elements by configuring the several edge switching elements to forward network data between the sets of network hosts based on the definition of the logical switching element.

Abstract: A network communication system comprises a cloud network and at least one physical machine. The cloud network comprises at least one physical switch. Each the physical machine comprises a plurality of virtual machines and a virtual switch. Each of the virtual machines is connected to the at least one physical switch in the cloud network through the virtual switch. The virtual switch encapsulates a destination machine address of an egress frame sent by the virtual machines, attaches a destination switch address to the egress frame to be forwarded to the at least one physical switch, and receives and analyzes an ingress frame obtained from the at least one physical switch, so as to convert the destination switch address of the ingress frame to the destination machine address, for forwarding the ingress frame to one of the virtual machines.

Abstract: The present invention is applicable to the field of communications and provides a session establishment method and apparatus. The method includes: acquiring an infrastructure virtual circuit IVC corresponding to a user equipment UE; sending a virtual local area network VLAN label corresponding to the IVC to a customer location function set, so that the customer location function set adds the VLAN label to a packet of the UE, where the VLAN label is configured by an L2 session control functional entity for the IVC; and notifying an L2 forwarding functional entity of the VLAN label, so that the L2 forwarding functional entity forwards, to the IVC, the packet sent by the customer location function set and added with the VLAN label. In the present invention, a case in which the L2 forwarding functional entity needs to store a large MAC table is avoided, and packet forwarding efficiency is improved.

Abstract: In one embodiment, a router may store a “neighbor table” for storing the router's Border Gateway Protocol (BGP) neighbors. Each neighbor corresponds to a virtual routing and forwarding (VRF) instance and associated VRF identifier (ID), and the neighbor table indexes the BGP neighbors according to their respective VRF ID. In response to initiating a BGP update generation for a BGP table having BGP network entries, each entry having an associated VRF ID that indicates to which VRF instance the BGP entry is to be advertised, a single lookup operation for each BGP entry is performed into the neighbor table based on the corresponding VRF ID of each BGP entry to determine a corresponding VRF update group of indexed BGP neighbors to which each BGP entry is to be advertised. Accordingly, a shared BGP update may be generated for each VRF update group for the initiated BGP update generation.

Abstract: Various exemplary embodiments relate to a method of acknowledging a pseudowire (PW) status message by a PW node, the method including: receiving at the PW node a PW status message from a peer node; determining that acknowledging the PW status message will reduce the number of PW status messages sent by the peer node; and sending an acknowledgement message to the peer node acknowledging the receipt of the PW status message from the peer node.

Abstract: An example method for co-operative load sharing and redundancy in distributed service chains is provided and includes deriving a service chain comprising a plurality of services in a distributed virtual switch (DVS) network environment, where a first service node provides a first portion of a specific service in the plurality of services to a packet traversing the network, and a second service node provides a second portion of the specific service to the packet, and configuring service forwarding tables at virtual Ethernet Modules associated with respective service nodes in the service chain. In a specific embodiment, the first service node and the second service node provide substantially identical service functions to the packet, wherein the specific service comprises the service functions. In various embodiments, each service node tags each packet to indicate a service completion history of service functions performed on the packet at the service node.

Abstract: Techniques are provided for hosting a first virtual switch and one or more virtual machines (VMs) configured to be part of a virtual LAN (VLAN). The first virtual switch enables communications among the VMs arranged in one or more private VLANs (PVLANs). The first virtual switch receives a packet from a source VM that is evaluated for source identifier information associated and destination identifier information associated with a destination VM serviced by a second virtual switch for which the packet is destined. An evaluation result is obtained. Based on the evaluation result, the first virtual switch determines whether the source and destination VMs belong to a same PVLAN and drops the packet if the source VM and the destination VM do not belong to the same PVLAN.

Abstract: A Software Defined Network (SDN) includes a plurality of forwarding devices and a routing control device located separate from the forwarding devices. The routing control device, establishes paths to and from the network forwarding devices. Using such paths, forwarding devices send the routing control device information reflecting the topology if the network. Embodiments disclosed herein enable automatic discovery of the topology of the network and the paths to and from the routing control device.