Abstract: Virtual machine environments are provided in the switches that form a network, with the virtual machines executing network services previously performed by dedicated appliances. The virtual machines can be executed on a single multi-core processor in combination with normal switch functions or on dedicated services processor boards. Packet processors analyze incoming packets and add a services tag containing services entries to any packets. Each switch reviews the services tag and performs any network services resident on that switch. This allows services to be deployed at the optimal locations in the network. The network services may be deployed by use of drag and drop operations. A topology view is presented, along with network services that may be deployed. Services may be selected and dragged to a single switch or multiple switches. The management tool deploys the network services software, with virtual machines being instantiated on the switches as needed.

Abstract: Virtual machine environments are provided in the switches that form a network, with the virtual machines executing network services previously performed by dedicated appliances. The virtual machines can be executed on a single multi-core processor in combination with normal switch functions or on dedicated services processor boards. Packet processors analyze incoming packets and add a services tag containing services entries to any packets. Each switch reviews the services tag and performs any network services resident on that switch. This allows services to be deployed at the optimal locations in the network. The network services may be deployed by use of drag and drop operations. A topology view is presented, along with network services that may be deployed. Services may be selected and dragged to a single switch or multiple switches. The management tool deploys the network services software, with virtual machines being instantiated on the switches as needed.

Abstract: Techniques for virtualizing hardware hash tables in a networking system are provided. In one embodiment, the networking system can maintain a plurality of virtual hash tables corresponding to a plurality of hardware hash tables in the networking system. For each hardware hash table and its corresponding virtual hash table, the networking system can intercept operations directed to the hardware hash table and apply the intercepted operations to the virtual hash table. The networking system can then selectively install and/or uninstall virtual hash table entries to/from the hardware hash table in view of the operations.

Abstract: A protocol identifies and configures rings in a network topology automatically in order to simplify and quicken the actions that need to be performed in response to addition, deletion and shuffle of network nodes in that topology. Such rings do not need to be identified and configured manually. The protocol involves two separate sequentially performed phases. In the first phase, the protocol can automatically identify all rings that are present within a Virtual Local Area Network (VLAN) topology. In the second phase, the protocol can automatically configure each node of each such ring in conformity with the Ethernet Ring Protection (ERP) protocol. After this ERP configuration has been performed, the failure of a link within the network will not require every network node to re-learn paths through the network; instead, the nodes that are required to re-learn such paths can be limited to those within the particular ring that contained the failed link.

Abstract: Techniques for organizing and grouping memory contents related to multicast routing so as to enable more efficient multicast operations. For PIM multicast routing, techniques are provided for organizing and grouping multicast routing information into data structures according to a plurality of dimensions such that multicast routing cache entries are accessible when performing a multicast routing operation by traversing the one or more data structures according to at least two of the dimensions.

Abstract: Intelligent services are provided in a storage network using intelligent service modules that can be cabled to a switch external to the switch chassis and yet be managed as part of the switch's logical domain. Data and management communications between the intelligent service module and the core switch are provided through a “soft-backplane” implemented using in-band communications through cabling attached between the switch and the intelligent service module rather than through hardwired backplane within the chassis. Management communications from management software is directed to the switch, which handles the management functions relating to the intelligent service module or forwards the management requests to the intelligent service module for processing.

Abstract: Techniques for efficiently distributing data packets in a network device are provided. In one embodiment, the network device can store a plurality of virtual IP addresses and a plurality of real server IP addresses in an SRAM-based table. The network device can then perform a lookup into the SRAM-based table to determine whether an incoming data packet is part of a first class of data packets destined for a virtual IP address in the plurality of virtual IP addresses, or is part of a second class of data packets originating from a real server IP address in the plurality of real server IP addresses.

Abstract: Techniques for end-to-end network bandwidth optimization using software defined networking are provided. In one embodiment, a computer system can receive information regarding a flow to be admitted to a network, where the flow is associated with a source and a destination. The computer system can further calculate, for each path in a plurality of paths between the source and the destination, a projected utilization of the path in view of the flow. If the projected utilization of the shortest path in the plurality of paths is less than or equal to a target utilization threshold, the computer system can assign the flow to the shortest path. Otherwise, the computer system can select a path in the plurality of paths that comes closest to the target utilization threshold without exceeding the threshold and can assign the flow to that selected path.

Abstract: The WAN optimization devices delay ACK until the ACK is actually received from the target while opening up the TCP window. When the ACK is received and forwarded, the TCP window is reduced in size. If there are mirrored WAN optimization devices, the original WAN optimization device sends the datagram across the WAN and at the same time sends the datagram to the mirroring WAN optimization device. When the mirroring WAN optimization device ACKs the mirrored datagram, the original WAN optimization device ACKs the host. When the ACK across the WAN is received, the mirroring WAN optimization device gets the ACK forwarded and deletes the mirrored datagram. On a loss of a device, the TCP connection transitions to the mirroring WAN optimization device, which closes the LAN TCP window and transmits all un-ACKed data. Then upon success the mirroring WAN optimization device reopens the LAN TCP window.

Abstract: Techniques for persisting data stored in volatile memory across a warm boot. One or more portions (referred to as “warm memory”) of volatile memory of the system can be reserved and configured such that the data stored by these portions is not affected by a warm boot thereby resulting in the data stored being persisted across a warm boot.

Abstract: Techniques for efficiently updating routing information in a network device such as a router. According to an embodiment of the present invention, information is stored identifying one or more nodes and leaves owned or advertised by the nodes. When a change occurs in a network environment, information is stored identifying one or more nodes and leaves that have changes associated with them. The routing information in the network device is then updated for only those nodes and leaves that have changes associated with them.

Abstract: An Ethernet/Fiber Channel network interface device which can be configured by a user to operate on an FC SAN, a CEE network or both. In one embodiment the configuration can be done using jumpers or connections to the pins of a chip, thus allowing a manufacturer to only inventory one device for use with either or both networks. In a second embodiment the configuration can be done in software by setting registers and memory values on the device. This embodiment allows the device to be changed between configurations without removing it from the server or blade. The devices according to the preferred embodiments further reduce power consumption by shutting down portions of the chip not needed based on the configuration of the device.

Abstract: A solution for virtual router redundancy for server virtualization includes, at a network device configured as a backup router of a virtual router, examining a packet stored in a memory of the network device. Responsive to the examining, the network device determines whether to forward the packet via a network towards a destination or to send the packet via the network to a master router of the virtual router for forwarding of the packet, by the master router, towards the destination.

Abstract: A large port count Fiber Channel switch. The large port count switch comprises multiple small switches. Inter-Switch links connect the small switches within the large port count switch. A set of routing rules governs the path data follows through the large port count switch.

Abstract: In a network device comprising redundant management processors and one or more linecard processors situated on one or more linecards, a linecard processor maintains multicast information that is synchronized with multicast information, or a portion thereof, maintained by an active management processor. When a switchover is performed due to which a previous standby management processor becomes the new active management processor, the switchover is performed without interrupting any multicast routing services provided by the network device. For example, a switchover may be performed in order to upgrade a linecard processor to a new software version.

Abstract: Virtual machine environments are provided in the switches that form a network, with the virtual machines executing network services previously performed by dedicated appliances. The virtual machines can be executed on a single multi-core processor in combination with normal switch functions or on dedicated services processor boards. Packet processors analyze incoming packets and add a services tag containing services entries to any packets. Each switch reviews the services tag and performs any network services resident on that switch. This allows services to be deployed at the optimal locations in the network. The network services may be deployed by use of drag and drop operations. A topology view is presented, along with network services that may be deployed. Services may be selected and dragged to a single switch or multiple switches. The management tool deploys the network services software, with virtual machines being instantiated on the switches as needed.

Abstract: Improved debugging capabilities for network packet path tracing. Embodiments trace both the control and data planes. During control plane operations each switch appends its identity to the payload, providing a full trace of the control plan path. Responses containing the forward path payload are provided back at each hop, the responses being routing back by tracing back the forward direction control plane. The data plane is monitored by setting traps along the control plane path, with responses at each hop that indicate a given switch has been used being returned along the control plane path.

Abstract: In at least some disclosed embodiments, a method includes a) creating a first stub file on a target file server, b) creating a t-stub file at the location of the source directory, c) disabling performance of operations on the source data while allowing completion of operations in progress, d) copying the source data into a hidden directory on the target file server, thus creating target data, e) overwriting the first stub file by renaming the target data, f) enabling performance of operations on the target data, g) performing queued operations on the target data, and h) deleting the source data from the source file server.

Abstract: An embodiment of an electronic system includes a printed circuit board (PCB) including fluid flow channel extending through the PCB. In addition, the electronic system includes an electronic component including a bottom surface and positioned on the PCB over the fluid flow channel to thereby expose the bottom surface of the electronic component to fluid flow through the fluid flow channel.

Abstract: A port monitor monitors network traffic that passes through a port of a switch. Frame flows routed through the switch are counted by hardware frame counting logic, which includes a content-addressable memory (CAM) and counters corresponding to various frame flows. Port monitor software includes logical containers (“buckets”), which are used to record and sort counts of the frame flows from hardware based on activity of the frame flows. Frame flow sorting is based on confidence building algorithms such that the thrashing of frame flows between buckets is reduced. Storage and sorting of the frame flows in software allows the activity level of any number of frame flows associated with the switch to be counted, regardless of hardware limitations on how many frame flows can be counted. This allows a real-time analysis of frame flows and a determination of frame flows that are major users of Fiber Channel bandwidth.