Abstract: A data forwarding device includes a plurality of server interface units, a plurality of virtual network card units and a network interface unit. A server interface unit of the plurality of server interface units is to obtain a data frame to be sent by a virtual network card driver running on a server corresponding to the server interface unit and obtain a first fusion descriptor, and to send the first fusion descriptor and the data frame to a virtual network card unit that corresponds to the virtual network card driver, wherein the first fusion descriptor comprises a type of the descriptor and a length of the data frame. The virtual network card unit is to process the data frame according to the first fusion descriptor, and to send a processed data frame to the network interface unit. The network interface unit is to forward the processed data frame to an external network.

Abstract: A service logic layer module receives an application message forwarded by a network device, classifies and identifies an application type of the application message, and determines a first processing operation to be performed to the application message based on an identification result. The service logic layer module receives a processing result returned from a data processing layer module, and determines a second processing operation based on the processing result. When the processing operation is an I/O processing operation for a single task, the data processing layer module controls I/O concurrency processing of the single task and returns a final processing result to the service logic layer module. When the processing operation is a data searching operation, the data processing layer module performs the data searching operation to obtain a final searching result, and returns the final searching result to the service logic layer module.

Abstract: A method to create virtual machines is provided. An initially empty primary copy-on-write (COW) image of a base disk image is created, and an initially empty secondary COW image of the primary COW image is created. A virtual machine is booted from the secondary COW image. Writes by the virtual machine are stored in the secondary COW image. When the secondary COW image reaches a capacity threshold, data of the secondary COW image is committed into the primary COW image and then the secondary COW is cleared of data.

Abstract: A method of establishing network connection between a network device and a WLAN is disclosed. The method includes: determining whether there is previous security association between the network device and the WLAN at the time of requesting for network association, and establishing a new security association between the network device and the WLAN using security data generated in the course of establishing the previous security association if there is the previous security association.

Abstract: A network device configures a unique ring number for each interface in a ring network and stores the ring number. The network device receives a RSVP confirmation packet from a next-hop network device, storing a route object record contained in the RSVP confirmation packet. The network device parses the route object record of the primary tunnel, searches for an end network device on the primary tunnel in the same ring network, sets the end network device as a destination network device of a protection tunnel of the network device, sets the network device as a start network device of the protection tunnel, and store path information of the protection tunnel. An interface of the end network device has the same ring number with an egress interface of the network device.

Abstract: The present disclosure provides a method and apparatus for forwarding a packet, wherein the method comprising: for each Virtual Machine (VM) in the server, obtaining relevant information of a virtual Network Interface Controller (vNIC) of the VM, and associating the obtained relevant information with a local virtual port, wherein the relevant information includes a Media Access Control (MAC) address of the vNIC, a Virtual eXtensible Local Area Network (VXLAN) Network Identifier (VNI) of the VXLAN where the vNIC is located, and a Virtual Local Area Network (VLAN) Identifier (ID) of a VLAN associated with the VXLAN where the vNIC is located; after receiving an Ethernet packet sent by the server, searching a VNI according to a source MAC address of the Ethernet packet and a VLAN ID; and according to the searched VNI, encapsulating the Ethernet packet, obtaining a VXLAN packet, and forwarding the VXLAN packet.

Abstract: According to an example, in a method for calculating a route, a first network device may add a protocol attribute supported by a link to a link state protocol data unit (LSP) of the first network device according to a protocol attribute supported by a port of the first network device and a protocol attribute supported by a port of a neighbor network device when establishing an adjacency, and may flood the LSP. The first network device may receive a LSP from a neighbor network device, parse a protocol attribute supported by a link contained in the received LSP, record the protocol attribute supported by the link contained in the received LSP in local network topology information, to obtain updated network topology information. And the first network device may calculate a route according to the updated network topology information. A network device and a computing device may calculate a route.

Abstract: A packet forwarding control method is described in which a candidate core backbone (CB) set corresponding to a port extender (PE) device is determined in accordance with a predetermined first selection rule when a ring topology is formed.

Abstract: According to an example, port negotiation between FCFs is implemented through initiation of a negotiation to an opposite party corresponding to a VFC port on a FCF within a VLAN corresponding to each VSAN supported by the VFC port on the FCF. The port negotiation also includes a determination of an intersection of the VSAN and the VLAN supported by the VFC port and the VSAN and the VLAN supported by the opposite party corresponding to the VFC port on the FCF and performance of an ELP negotiation within the intersection of the VSAN and the VLAN.

Abstract: According to an example, a packet to be processed is compared with a rule in a combined access control list (ACL), wherein the combined ACL includes rules corresponding to different service types.

Abstract: When communication from a first virtual device to a second virtual device is received, it is determined a first virtual interface associated with the first virtual device and a second virtual interface associated with the second virtual device. It is then determined a first security domain associated with the first virtual interface and a second security domain associated with the second virtual interface to implement a security policy between the first security domain and second security domain. The communication between the virtual devices is allowed or blocked.

Abstract: According to an example, a file transfer protocol data transmission method applied in a stack system includes an FTP server master process receiving a file transfer request from an FTP client, for a file requested by the file transfer request, the FTP server master process judging whether the file and the FTP server master process are in a same chassis, when the file and the FTP server master process are not in the same chassis, the FTP server master process sends a file transfer notice to an FTP server slave process running on a chassis which is in the stack system and which the file is in.

Abstract: A method is provided for a master apparatus of a Virtual Router Redundancy Protocol (VRRP) in a dual-homed node that is a part of a dual-homed network to implement a Layer 3 apparatus. The dual-homed network includes the dual-homed node and a Layer 2 MPLS-Transport Profile (MPLS-TP) network. The method includes monitoring a state of an uplink, when the monitoring detects that the uplink has a failure, notifying an original backup apparatus of the VRRP to perform a master-backup switch, and notifying a downlink apparatus of the master apparatus of the VRRP that a remote link has a failure, thereby causing the downlink apparatus to switch a working channel within the MPLS-TP network. The method includes, when a notification indicating that the master-backup switch has been performed is received from the original backup apparatus of the VRRP, switching to a backup apparatus of the VRRP.

Abstract: Based on an example, two forwarding pipelines are configured in a software defined networking (SDN) switch. After receiving, from an SDN controller, a flow entry adding instruction comprising a flow entry to be added and a table identifier (ID) indicating a flow table that the flow entry is to be added to, an SDN switch adds the flow entry into the flow table corresponding to the table ID, wherein the flow table is in the first forwarding pipeline or the second forwarding pipeline. If the flow table and its next flow table are in different forwarding pipelines, the SDN switch adds an action of forwarding to the internal interface to the flow entry.

Abstract: At least two Ethernet sub-interfaces are established on a first Ethernet interface and a second Ethernet interface of a first device, and each Ethernet sub-interface is assigned to a VLAN. The Ethernet sub-interfaces on the same Ethernet interface are assigned to different VLANs, and Ethernet sub-interfaces of the first Ethernet interface and the second Ethernet interface which belong to the same VLAN are added into a link-aggregation group to establish an aggregated link with a second device.

Abstract: A network management apparatus according to an example may configure virtual Media Access Control (MAC) addresses for virtual machines (VMs). A virtual MAC addresses may include a Uniqueness identifier (ID), a DC ID, a Device ID and a Host ID. A number of bytes of the virtual MAC address may be equal to a number of bytes of an actual MAC address of the VM. VMs accessing the same access layer device in the same data center may have the same Uniqueness ID, DC ID, and Device ID and have different Host IDs. VMs accessing different access layer devices and in the same data center may have the same Uniqueness ID and DC ID and have different Device IDs.

Abstract: According to an example, to forward a packet, an access layer device searches a Layer 2 forwarding table according to a source Media Access Control (MAC) address of the packet, and replaces the source MAC address with a mapped virtual MAC address in a matching Layer 2 forwarding entry. The Layer 2 forwarding table is searched according to a destination MAC address of the Ethernet packet. In response to determining that a Layer 2 forwarding entry matching the destination MAC address of the Ethernet packet does not include a MAC address mapped to the destination MAC address, Very Large Layer 2 (VLL2) network protocol encapsulation is performed on the Ethernet packet of which the source MAC address is replaced according to an egress port in the Layer 2 forwarding entry matching the destination MAC address; and the Ethernet packet encapsulated with a VLL2 network protocol header is sent via the egress port.

Abstract: A member device of a stacked switches system sends a first received unicast packet via an inter-group stack port which belongs to an aggregated stack link group on a forwarding path towards a different stack group when the first received unicast packet is to be egressed by another member device in the different stack group. The member device is further to send a second received unicast packet via an intra-group stack port on a forwarding path towards another member device in a same stack group when the second received unicast packet which is to be egressed by the another member device in the same stack group. The member device is further to send a third received unicast packet via a data port on the member device which associates with a egress port identification of the third received unicast packet when the third received unicast packet is to be egressed by the member device.

Abstract: According to an example, a service coordination apparatus may include a processor that is to determine whether each GLB node-pair in a node-pair state table is at a normal state after receiving a DNS request. If a GLB node-pair in the node-pair state table is not at the normal state, a second DNS response may be sent to a node sending the DNS request according to a DNS parsing list. If each GLB node-pair in the node-pair state table is at the normal state, a proximity list may be inquired. If a record corresponding to the DNS request is searched out from the proximity list, a first DNS response may be sent to the node sending the DNS request according to the searched out record. If not, a second DNS response may be sent to the node sending the DNS request according to the DNS parsing list.

Abstract: A network device maintains a sharing token bucket for all sessions in a semi-connection state; a packet is received by the network device; a flow control for the packet is performed by using the sharing token bucket when determining the packet conforms to the semi-connection state; and a flow control for the packet is performed by using a dedicated token bucket of a session corresponding to the packet when determining the packet conforms to a full-connection state.