Abstract: A protocol identifies and configures rings in a network topology automatically in order to simplify and quicken the actions that need to be performed in response to addition, deletion and shuffle of network nodes in that topology. Such rings do not need to be identified and configured manually. The protocol involves two separate sequentially performed phases. In the first phase, the protocol can automatically identify all rings that are present within a Virtual Local Area Network (VLAN) topology. In the second phase, the protocol can automatically configure each node of each such ring in conformity with the Ethernet Ring Protection (ERP) protocol. After this ERP configuration has been performed, the failure of a link within the network will not require every network node to re-learn paths through the network; instead, the nodes that are required to re-learn such paths can be limited to those within the particular ring that contained the failed link.

Abstract: One embodiment of the present invention provides a switch. The switch includes a port to couple to a second switch. The switch also includes a control mechanism configured to maintain a set of configuration information for a virtual cluster switch which includes a number of member switches. The set of configuration information includes global configuration information for the virtual cluster switch and switch-specific configuration information for one or more member switches. In addition, the set of configuration information is replicated and stored at each member switch.

Abstract: One embodiment of the present invention provides a computing system. The computing system includes processing circuitry, one or more ports, a persistent storage module, and a management module. The persistent storage module stores a plurality of persistent storage instances associated with a plurality of switch groups. A respective persistent storage instance stores configuration information associated with a switch group in a data structure. The management module identifies at least two switch groups, which are associated with a logical network, from the plurality of switch groups and configures a respective virtual network representing the logical network in a respective identified switch group. The management module also maintains a mapping between a respective virtual network and the logical network.

Abstract: One embodiment of the present invention provides a switch in a network of interconnected switches. The switch includes a storage device, a hardware management apparatus, and a layer-2 management apparatus. The storage device stores a forwarding table, which includes an entry comprising a MAC address and an egress port for the MAC address. The hardware management apparatus determines whether a destination MAC address of a frame is present in a hardware table in memory of the switch. The layer-2 management apparatus, in response to a determination that the destination MAC address is not present in the hardware table, looks up a first entry comprising the destination MAC address in the forwarding table, and creates a second entry comprising the destination MAC address in the hardware table based on the first entry.

Abstract: One embodiment of the present invention provides a network device that facilitates configuration orchestration. During operation, the system interprets a configuration command and stores a data structure representing a set of business logic. The business logic can be triggered by the configuration command, a local condition, or both. Furthermore, the system configures the switch according to an outcome of the business logic.

Abstract: One embodiment of the present invention provides a switch. The switch includes a fabric switch module and a border module. The fabric switch module maintains a membership in a first fabric switch. The fabric switch includes a plurality of switches and operates as a single logical switch. The border module determines that the egress switch identifier in a first encapsulation header of a first packet is associated with a switch outside of the fabric switch. The first packet is forwardable in the first fabric switch based on the first encapsulation header. In response to the determination, the border module changes the ingress switch identifier in the first encapsulation header of the first packet to a first virtual switch identifier associated with a first virtual switch. This first virtual switch externally represents the first fabric switch.

Abstract: Methods and techniques for flooding packets on a per-virtual-network basis are described. Some embodiments provide a method (e.g., a switch) which determines an internal virtual network identifier based on one or more fields in a packet's header. Next, the method performs a forwarding lookup operation based on the internal virtual network identifier. If the forwarding lookup operation succeeds, the method can process and forward the packet accordingly. However, if the forwarding lookup operation fails, the method can determine a set of egress ports based on the internal virtual network identifier. Next, for each egress port in the set of egress ports, the method can flood the packet if a virtual network identifier in the packet's header is associated with the egress port. Flooding packets on a per-virtual-network basis can substantially reduce the amount of resources required to flood the packet when a forwarding lookup operation fails.

Abstract: One embodiment of the present invention provides a switch. The switch comprises one or more ports, a link management module and a load balancing module. The link management module operates a port of the one or more ports of the switch in conjunction with a remote switch to form a virtual link aggregation. The load balancing module generates an index of a weight distribution vector based on address information of a multicast group associated with the virtual link aggregation. A slot of the weight distribution vector corresponds to a respective switch participating in the virtual link aggregation. In response to the index indicating a slot corresponding to the switch, the load balancing module designates the switch as primary switch for the multicast group, which is responsible for forwarding multicast data of the multicast group via the virtual link aggregation.

Abstract: One embodiment of the present invention provides a switch. The switch includes a storage device, a mapping module, and a packet processor. During operation, the mapping module maintains a first and a second mappings. The first mapping, which can be in the storage device, is between a first service tunnel identifier and a first virtual local area network (VLAN) identifier. The second mapping is between the first VLAN identifier and an indicator, which indicates whether the switch is elected as a designated forwarder of multi-destination traffic for the first service tunnel identifier. If the indicator indicates that the switch is the designated forwarder of multi-destination traffic for the first service tunnel identifier, the packet processor determines an egress port, which corresponds to the first service tunnel, for a packet belonging to multi-destination traffic of the first VLAN.

Abstract: One embodiment of the present invention provides a switch in a network of interconnected switches. The switch includes a network extension module, which maintains a mapping between a first virtual local area network (VLAN) identifier and a first global VLAN identifier of a network extension group. The network extension group is represented by a range of global VLAN identifiers for a tenant. A global VLAN identifier is persistent in a respective switch of the network and represents a virtual forwarding domain in the network. During operation, the network extension module includes the global VLAN identifier in a packet belonging to the first VLAN.

Abstract: Methods and devices to allow multiple operating system images to simultaneously access a Fiber Channel fabric through a common host bus adapter port are described. For each requesting operating system image, a fabric switch maintains a unique port identifier value and a unique fabric channel address so that each operating system image may be uniquely identified across the fabric.

Abstract: Long distance cloud migration (LDCM) to overcome the limitations faced by the cloud migration techniques over long distance, high speed WAN infrastructures. LDCM overcomes the negative effects of existing TCP/IP mechanisms on the efficient use of available bandwidth. LDCM also acts as an acceleration engine to optimize various hypervisor, storage and security applications.

Abstract: One embodiment of the present invention provides a system for facilitating synchronization of MAC addresses in a fabric switch. During operation, the system divides a number of media access control (MAC) addresses associated with devices coupled to an interface of the switch. The system then computes a checksum for a respective chunk of MAC addresses. In addition, the system broadcasts MAC address information of the chunk to facilitate MAC address synchronization in a fabric switch of which the switch is a member, and to manage the chunks and their corresponding checksum, thereby correcting an unsynchronized or race condition in the fabric switch.

Abstract: One embodiment of the present invention provides a switch system. The switch includes a port that couples to a server hosting a number of virtual machines. The switch also includes a link tracking module. During operation, the link tracking module determines that reachability to at least one end host coupled to a virtual cluster switch of which the switch is a member is disrupted. The link tracking module then determines that at least one virtual machine coupled to the port is affected by the disrupted reachability, and communicates to the server hosting the affected virtual machine about the disrupted reachability.

Abstract: One embodiment of the present invention provides a switch in a software-defined network. The switch includes at least one port, a flow management module, and forwarding circuitry. The port is capable of receiving a frame belonging to a software-defined data flow and a frame belonging to a regular data flow. The flow management module logically partitions the port for the frame belonging to the software-defined data flow from the frame belonging to the regular data flow. The forwarding circuitry forwards the frame belonging to the software-defined data flow based on a flow definition in a local flow table. The flow definition indicates how the software-defined data flow is processed in a software-defined network.

Abstract: An intelligent system and a method in a packet network to utilize the radio network resource and the core network resource in an optimized way so that more high priority, critical devices are granted access to the network while throttling the low priority, non-critical devices with the same given resource. The system collects all the necessary information from the signaling exchange between the radio access network and the core network and takes the device subscription characteristics and statically or dynamically defined throttling behavior rules into consideration to choose the optimal behavior to handle the requests from devices at any given time including deciding to reject the requests for certain types of devices under certain network conditions while granting the requests for other types of devices.

Abstract: Handling of ELS REQ and RSP packets that contain addresses in the payload is shifted to the edge fabric switches connected to the node devices issuing and receiving the ELS REQ packet, the ingress and egress switches. This allows the ELS REQ and RSP packet payload address modification operations to be removed from the tasks handled by the router processor. As this removes a processing burden from the router processors, those router processors are free to handle other normal operations, thus allowing more processor bandwidth to be provided to those other operations, which allows further growth of the network as one limitation has been removed. The need to replicate or provide commands between switches or routers is avoided as there are no redundant paths at that point.

Abstract: In a network where there are two local area networks (LANs) connected over a wide area network (WAN) by paralleled LAN to WAN devices at each end of the WAN, Transmission Control Protocol (TCP) connections may be requested by a first near end LAN to WAN device and received at a first far end LAN to WAN device but the acknowledgement may be returned to a second far end LAN to WAN device. The second far end LAN to WAN device contacts the first far end LAN to WAN device and the TCP connection is moved to the second far end LAN to WAN device, which provides the acknowledgement to the first near end LAN to WAN device to complete the TCP connection. Similar operations occur during active TCP connection operation but with certain queued data being flushed during the TCP connection transfer.

Abstract: A system and an algorithm in a mobile core network to distribute the data load across multiple data processing entities. The system is seen as having one data plane entity to the external entities like routers; hence the system can scale without needing to update the external nodes. In general when a data plane processing entity is added or removed, a new distribution rule is provided to the remaining data plane processing entities. Only after some number of sessions have been migrated does the new distribution get provided to the data distribution entities. This delay allows sufficient sessions to be migrated to minimize the overall number of packets that have to be forwarded for processing. This benefit can be maximized by taking advantage of cellular network's idle mode behavior and by migrating the sessions while they are in idle mode.

Abstract: Techniques for performing intelligent load balancer selection in a multi-load balancer environment are provided. In one embodiment, a computer system can generate a user interface for deploying a virtual IP address (VIP) on a load balancer in a network environment, where the network environment includes a plurality of load balancers, and where the user interface presents a plurality of criteria for selecting one of the plurality of load balancers. The computer system can further receive, from a user, a selection of one or more of the plurality of criteria, and can collect, from each load balancer in the plurality of load balancers, statistics that are relevant to the one or more criteria. The computer system can then select a load balancer from among the plurality of load balancers based on the one or more criteria and the collected statistics.