Abstract: Virtual machine environments are provided in the switches that form a network, with the virtual machines executing network services previously performed by dedicated appliances. The virtual machines can be executed on a single multi-core processor in combination with normal switch functions or on dedicated services processor boards. Packet processors analyze incoming packets and add a services tag containing services entries to any packets. Each switch reviews the services tag and performs any network services resident on that switch. This allows services to be deployed at the optimal locations in the network. The network services may be deployed by use of drag and drop operations. A topology view is presented, along with network services that may be deployed. Services may be selected and dragged to a single switch or multiple switches. The management tool deploys the network services software, with virtual machines being instantiated on the switches as needed.

Abstract: One embodiment of the present invention provides a switch. The switch includes a storage device, a rule management module, a network identifier module, and a packet processor. During operation, the rule management module stores, in the storage device, a first mapping that maps a virtual network identifier of a tunnel to a rule for classifying traffic. The virtual network identifier identifies a virtualized network associated with the tunnel. The network identifier module generates, for a virtualization manager of a virtual machine, a control packet comprising a representation of the first mapping for a respective local end device. The network identifier module then obtains, from a notification packet from the virtualization manger, a second mapping that maps the virtual network identifier to an identifier of the virtual machine and an identifier of the tunnel.

Abstract: Embodiments described herein provide a switch. The switch can include one or more ports, a communication module, and a flow rule management module. During operation, the communication module obtains a flow rule from a notification message from a controller of a software-defined network. The flow rule management module then determines whether a priority value of the flow rule is in a local flow table. The flow table can store flow rules received from the controller. If the priority value of the flow rule is not in the local flow table, the flow rule management module stores the flow rule in a location of the flow table allocated for the priority value.

Abstract: An application launcher and management framework (ALM framework) is provided for enabling and managing the execution of external applications (e.g., third party applications) on a network device. The ALM framework enables external applications to be executed and managed on a network device based upon configuration information specified for the external applications. In certain embodiments, the ALM framework enables an external application to be executed within the network device's network operating system (NOS) as if the application was provided as part of the NOS. By enabling the external application to be integrated with the network device's NOS, the ALM framework enables several services provided by the NOS to be made available to the external application.

Abstract: Packets or data units and their related credit returns each include an assigned phase value. When a credit test is desired, the phase value of outgoing data units is changed, for example from 0 to 1, and a new counter is set to a value of the outstanding credits having the original phase value. With each original phase credit received, the counter value is decremented. When a credit having the new phase value is received, the counter value indicates the amount of any credit error and appropriate corrections may be made.

Abstract: One embodiment of the present invention provides a switch. The switch includes a network-virtualization module, an update module, an acknowledgment module, and an election module. During operation, the network-virtualization module establishes a forwarding segment for an end device multi-homed with the switch and a second switch. The forwarding segment can be identified by a segment identifier persistent in the switch and the second switch. The update module constructs, for the second switch, a first route update message comprising an indicator value for the forwarding segment. The acknowledgment determines the indictor value in a second route update message from the second switch as an acknowledgment for the first route update message. If the switch receives the acknowledgment from a respective switch participating in the forwarding segment, the election module initiates a designated forwarder election for the forwarding segment.

Abstract: One embodiment of the present invention provides a switch in a network of interconnected switches. The switch includes a storage device, a hardware management apparatus, and a layer-2 management apparatus. The storage device stores a forwarding table, which includes an entry comprising a MAC address and an egress port for the MAC address. The hardware management apparatus determines whether a destination MAC address of a frame is present in a hardware table in memory of the switch. The layer-2 management apparatus, in response to a determination that the destination MAC address is not present in the hardware table, looks up a first entry comprising the destination MAC address in the forwarding table, and creates a second entry comprising the destination MAC address in the hardware table based on the first entry.

Abstract: One embodiment of the present invention provides a network device that facilitates configuration orchestration. During operation, the system interprets a configuration command and stores a data structure representing a set of business logic. The business logic can be triggered by the configuration command, a local condition, or both. Furthermore, the system configures the switch according to an outcome of the business logic.

Abstract: One embodiment of the present invention provides a switch in a software-defined network. The switch includes at least one port, a flow management module, and forwarding circuitry. The port is capable of receiving a frame belonging to a software-defined data flow and a frame belonging to a regular data flow. The flow management module logically partitions the port for the frame belonging to the software-defined data flow from the frame belonging to the regular data flow. The forwarding circuitry forwards the frame belonging to the software-defined data flow based on a flow definition in a local flow table. The flow definition indicates how the software-defined data flow is processed in a software-defined network.

Abstract: One embodiment of the present invention provides a switch in a network of interconnected switches. The switch includes a network extension module, which maintains a mapping between a first virtual local area network (VLAN) identifier and a first global VLAN identifier of a network extension group. The network extension group is represented by a range of global VLAN identifiers for a tenant. A global VLAN identifier is persistent in a respective switch of the network and represents a virtual forwarding domain in the network. During operation, the network extension module includes the global VLAN identifier in a packet belonging to the first VLAN.

Abstract: One embodiment of the present invention provides a switch system. The switch includes a port that couples to a server hosting a number of virtual machines. The switch also includes a link tracking module. During operation, the link tracking module determines that reachability to at least one end host coupled to a virtual cluster switch of which the switch is a member is disrupted. The link tracking module then determines that at least one virtual machine coupled to the port is affected by the disrupted reachability, and communicates to the server hosting the affected virtual machine about the disrupted reachability.

Abstract: A system and method is disclosed for seamless network management monitoring when a device or Virtual Machine migrates. As part of a network management monitoring system and method, a separate distinct identifier is designated to each port and each device or VM being monitored. When a device is located a specific port a correlation between the distinct identifier of that port and the distinct identifier of the device is stored in a correlation table and monitored. Once this correlation changes, the network management monitoring system recognizes a migration has occurred and updates the correlation table to correlate the new port's distinct identifier with the device's distinct identifier. Parameters that were set up to be monitored for the device can then continue to be monitored at the new location.

Abstract: Systems, methods and software useful for overcoming network congestion problems including head-of-line blocking issues and other network congestion problems. In certain aspects, flow control mechanisms implemented in a switch device or other network device manage buffer and system level resources using a scheduler to control the amount of data requested from a local SAN fabric. Switches and other network devices configured according to the present invention monitor each individual SCSI task, and are configured to apply flow control measures to each active session when buffering resources become scarce, such as when buffering data for a slower-speed WAN link or TCP/IP based interconnects of any speed.

Abstract: In a Fiber Channel SAN and its included routers, each router contains only the LSAN zones that contain devices attached to edge fabrics which are connected to the router. LSAN zone entries include the fabric ID (FID) of each device in addition to the WWN. When a router obtains a new zone database for a newly connected or changed fabric, the router scans the LSAN zone entries for fabric IDs matching a fabric connected to the router and stores those entries. All other LSAN zone entries are not stored. In this manner the size of the relevant tables are reduced, which allows for greater expansion of the SAN as a whole.

Abstract: Techniques for validating configuration changes in a mixed node topology are provided. In one embodiment, a device can identify a link to be removed from a topology comprising a plurality of nodes, where the plurality of nodes includes one or more nodes of a first type and one or more nodes of a second type. The device can then determine whether the removal of the link from the topology would require data traffic between two nodes of the first type to pass through a node of the second type.

Abstract: Techniques for performing flow-specific failure detection in SDN networks are provided. In one embodiment, a computer system (e.g., an SDN controller) can determine a flow to be monitored in a network. The computer system can then transmit first and second messages to first and second network devices in the network respectively, where the first network device is an upstream device in the flow, where the second network device is a downstream device in the flow, and where the first and second messages instruct the first and second network devices to collect local data rate information for the flow.

Abstract: Techniques for reducing broadcast and multicast traffic in a stacking system are provided. In one embodiment, a master device in the stacking system can automatically determine a minimal set of VLAN associations for stacking links in the stacking system. The minimal set of VLAN associations can avoid unnecessary transmission of broadcast or multicast packets through the system's topology.

Abstract: One embodiment of the present invention provides a switch that facilitates name services in a virtual cluster switch. The switch includes a name service database indicating at least one media access control (MAC) address learned at a second switch. The switch also includes a control mechanism. During operation, the control mechanism distributes information on a locally learned MAC address to the second switch. In addition, the control mechanism receives information on a MAC address learned at the second switch.

Abstract: One embodiment of the present invention provides a switching system. The switching system includes a plurality of line cards, each of which includes one or more ports, a processor, one or more switch fabric cards for facilitating switching among the line cards, and a memory storing instructions for facilitating efficient hot-swapping. During operation, the switching system identifies a hot-swapping event of a first switch fabric card based on a data structure indicating the one or more switch fabric cards. The hot-swapping event indicates insertion or removal of the first switch fabric card while the switching system remains in an operational state. The switching system then determines an event type associated with the hot-swapping event and manages the first switch fabric card based on the determined event type.

Abstract: One embodiment of the present invention provides a switch. The switch includes a storage device, a rule management module, an inner packet module, and a packet processor. During operation, the rule management module obtains a rule associated with a data flow within tunnel encapsulation of a tunnel. This rule indicates how the flow is to be processed at the switch. The rule management module then applies an initial rule to a respective line card of the switch. The initial rule is derived from a virtual network identifier, which is associated with the tunnel, of the obtained rule. The inner packet module determines that a first inner packet, which is encapsulated with a first encapsulation header, belongs to the flow without decapsulating the first encapsulation header. The rule management module applies the obtained rule to a line card associated with an ingress port of the encapsulated first inner packet.