Abstract: One embodiment of the present invention provides a switch. The switch includes a service management module and a packet processor. During operation, the service management module identifies a service provided by an appliance coupled to the switch via a local port. The packet processor constructs a notification message for a remote switch. The notification message includes information about the service and the appliance. In this way, the switch allows the remote switch to request the service.

Abstract: Techniques for performing efficient topology failure detection in SDN networks are provided. In one embodiment, a computer system (e.g., an SDN controller) can transmit a first message to a first network device, where the first message instructs the first network device to begin sending probe packets to a second network device at a predetermined rate. The computer system can further transmit a second message to the second network device, where the second message instructs the second network device to monitor for the probe packets sent by the first network device and to notify the computer system when one or more of the probe packets are not received by the second network device. If the computer system receives such a notification from the second network device, the computer system can determine that a port, link, or node failure has occurred between the first and second network devices.

Abstract: A hypervisor preferably provides VM identification, priority and LUN/LBA range information to the HBA when a VM is created. Alternatively, the HBA can determine that a LUN/LBA range is new and request VM identity, priority and LUN/LBA range from the hypervisor. The HBA creates a table containing the VM identification, priority and LUN/LBA range. The HBA then detects operations directed to the LUN/LBA range and does a lookup to determine VM identification and priority. VM identification and priority are then mapped into a field in a frame using a unique identifier. The unique identifier can either be placed using reserved bits on the existing Fiber Channel (FC) header or can use bits in an additional header, such as a modified IFR header.

Abstract: One embodiment of the present invention provides a computing system. The computing system includes a packet processor, a buffer management module, a data monitoring module, and a flow control module. The packet processor identifies a class of service indicating priority-based flow control associated with a remote computing system from a notification message. The buffer management module creates a buffer dedicated for frames belonging to the class of service from the remote computing system in response to identifying the class of service. The data monitoring module detects a potential overflow of the buffer. The flow control module operates in conjunction with the packet processor to generate a pause frame in response to detecting a potential overflow.

Abstract: Embodiments of the present invention provide a method for allowing efficient allocation of data center resources in a virtualized data center. In one step, network information is obtained from a network using an application resource broker (ARB). In another step, data center information is obtained from a virtual center server using the ARB. In another step, a set of application traffic metrics and a set of virtualized infrastructure metrics are determined using the ARB based on the obtained network information and data center information respectively. The ARB is implemented on a computer system.

Abstract: One embodiment of the present invention provides a switch capable of processing software-defined data flows. The switch includes an identifier management module and a flow definition management module. During operation, the identifier management module allocates a logical identifier to a link aggregation port group which includes a plurality of ports associated with different links. The flow definition management module processes a flow definition corresponding to the logical identifier, applies the flow definition to ports in the link aggregation port group, and update lookup information for the link aggregation port group based on the flow definition.

Abstract: Use of a Location ID in addition to normal information to allow development of non-shortest path routes. The edge switches which terminate the distance links between locations are identified. Shortest path routes are determined for all switches in the same location. For each edge switch, routes over the distance links to other locations are determined, marking the interface connected to the distance links. The two determined sets of routes are combined. For devices directly connected to the edge switch, only the marked interface is used to reach the other location. For switches directly connected to the edge switch, use only routes from non-marked interfaces to marked interfaces and remove any routes from marked to marked or non-marked to non-marked interfaces. This operation for the directly connected switches allows single hops that are non-shortest path to an edge switch and removes certain potential loopback situations due to shortest path routes.

Abstract: A diagnostic testing utility is used to perform online path diagnostic tests to troubleshoot components in a path that contribute to performance degradations and check application level data integrity, while traffic is allowed to flow as normal. To perform the diagnostic tests, two HBA or CNA ports at each end of a path are identified and used to send test frames to perform the diagnostic tests. The entire diagnostic procedure is performed without taking any ports or servers offline.

Abstract: A mechanism to allow provisioning and use of BYOD (Bring Your Own Device) for authorized access in the enterprise network through a 3G/4G/Wi-Fi access network is provided. A brokering entity in the mobile packet core is provisioned for each authorized employee with enterprise specific rules for security and steering of user traffic. An Enterprise Container is defined as entity on the User Equipment that is self-contained virtual machine with enterprise sanctioned applications. An intelligent mechanism for and steering of signaling and traffic from such BYOD devices to the brokering entity is defined. At any time by using the personal container or the default behavior of the user equipment the user can get mobile service as if the Enterprise Container did not exist. Further, when such employment relationship is terminated the user's BYOD needs to be restored to its pre-employment functionality.

Abstract: One embodiment of the present invention provides a switch. The switch includes a port to couple to a second switch. The switch also includes a control mechanism configured to maintain a set of configuration information for a virtual cluster switch which includes a number of member switches. The set of configuration information includes global configuration information for the virtual cluster switch and switch-specific configuration information for one or more member switches. In addition, the set of configuration information is replicated and stored at each member switch.

Abstract: A system and an algorithm in a mobile core network to distribute the data load across multiple data processing entities. The system is seen as having one data plane entity to the external entities like routers; hence the system can scale without needing to update the external nodes. In general when a data plane processing entity is added or removed, a new distribution rule is provided to the remaining data plane processing entities. Only after some number of sessions have been migrated does the new distribution get provided to the data distribution entities. This delay allows sufficient sessions to be migrated to minimize the overall number of packets that have to be forwarded for processing. This benefit can be maximized by taking advantage of cellular network's idle mode behavior and by migrating the sessions while they are in idle mode.

Abstract: One embodiment of the present invention provides a layer-3 forwarding device. The layer-3 forwarding device includes a processor and a computer-readable storage medium. The computer-readable storage medium stores instructions which when executed by the processor cause the processor to perform a method. The method comprises determining whether the layer-3 forwarding device is a leaf layer-3 forwarding device of a multicast distribution tree of a multicast group in a routed network based on a multicast topology discovery message from a root layer-3 forwarding device of the multicast distribution tree. If the layer-3 forwarding device is the leaf layer-3 forwarding device, the method comprises constructing a multicast topology report message. This multicast topology report message includes topology information of the multicast group in the routed network associated with the layer-3 forwarding device.

Abstract: Copy capability moved into the SAN fabric and provided as a data mover service. A well-known address is utilized to receive copy commands from the hosts. Each switch in the fabric contains a front end or service interface which receives the copy command and manages access control or zoning and LUN mapping. LUN mapping and zoning are based on shared databases. Assuming correct zoning, the service interface will perform any necessary LUN mapping on the received copy command and forward the command to a copy engine to perform the copy operation. The switch service interface also maintains copy operation status, querying the copy engine if necessary, so that any host status requests are also simply handled. Additionally, if multiple copy engines are present, the switches can communicate to perform load balancing.

Abstract: In one embodiment, a system and method for managing a network deduplication dictionary is disclosed. According to the method, the dictionary is divided between available deduplication engines (DDE) in deduplication devices that support shared dictionaries. The fingerprints are distributed to different DDEs based on a hash function. The hash function takes the fingerprint and hashes it and based on the hash result, it selects one of the DDEs. The hash function could select a few bits from the fingerprint and use those bits to select a DDE.

Abstract: Techniques for end-to-end network bandwidth optimization using software defined networking are provided. In one embodiment, a computer system can receive information regarding a flow to be admitted to a network, where the flow is associated with a source and a destination. The computer system can further calculate, for each path in a plurality of paths between the source and the destination, a projected utilization of the path in view of the flow. If the projected utilization of the shortest path in the plurality of paths is less than or equal to a target utilization threshold, the computer system can assign the flow to the shortest path. Otherwise, the computer system can select a path in the plurality of paths that comes closest to the target utilization threshold without exceeding the threshold and can assign the flow to that selected path.

Abstract: One embodiment of the present invention provides a switch. The switch includes a virtual network module and a forwarding module. The virtual network module includes a global virtual local area network (VLAN) tag in a packet. The global VLAN tag is mapped to an edge VLAN tag in the packet and is associated with a datacenter domain. The datacenter domain indicates a set of ports associated with a datacenter. The forwarding module identifies an egress edge port for the packet based on the global VLAN tag.

Abstract: One embodiment of the present invention provides a switch. The switch includes a packet processor and a device management module. During operation, the packet processor constructs a notification message containing a Transparent Interconnection of Lots of Links (TRILL) Routing Bridge (RBridge) identifier associated with a Fiber Channel router. The device management module operates in conjunction with the packet processor and terminates TRILL forwarding for a received TRILL packet with the RBridge identifier as an egress RBridge identifier.

Abstract: One embodiment of the present invention provides a switch. The switch includes a switch group module, a persistent storage module, and a distributed configuration management module. The switch group module maintains a membership in a switch group. The switch group includes a plurality of switches and operates as a single switch. The persistent storage module stores configuration information associated with the switch group in a table, which includes one or more columns for attribute values of the configuration information, in a local persistent storage. The distributed configuration management module verifies whether the configuration information is eligible for a distributed commit to the switch group. If the configuration information is eligible for the distributed commit, the distributed configuration management module commits the configuration information to the persistent storage and switch modules of the switch.

Abstract: A framework for reliably communicating port information in a system of devices is provided. In one embodiment, each device in the system of devices can create a first record that includes port information pertaining to a plurality of ports of the device, where the plurality of ports are usable for communicatively coupling the device to other devices in the system of devices. The device can further receive, from the other devices in the system of devices, one or more second records including port information pertaining to the ports of the other devices, and can store the first record and the one or more second records in a data store maintained locally on the device. The device can then forward copies of the first record and the one or more second records out of each of the plurality of ports, thereby causing the copies of the first record and the one or more second records to be communicated to the other devices in the system of devices.

Abstract: Techniques for aggregating hardware routing resources in a system of devices are provided. In one embodiment, a device in the system of devices can divide routing entries in a software routing table of the system into a plurality of route subsets. The device can further assign each route subset in the plurality of route subsets to one or more devices in the system. The device can then install, for each route subset that is assigned to the device, routing entries in the route subset into a hardware routing table of the device.