Abstract: Methods, systems, and devices are described for managing virtual network services provided to a network by a self-contained network services system. A controller application may receive a request for a change in network services provided by the self-contained network services system to the network. A new software configuration for a number of network services modules of the self-contained networks services system may be determined based on the received request, and the network services modules may be dynamically configured according to the determined new software configuration. The network and a router associated with the network services system may also be reconfigured to distribute traffic among the network services modules in accordance with the requested change in network services.

Abstract: Systems, methods, and devices are provided for managing hash table lookups. In certain network devices, a hash table having multiple buckets may be allocated for network socket lookups. Network socket information for multiple open network socket connections may be distributed among the buckets of the hash table. For each of the buckets of the hash table, at least a subset of the network socket information that is most likely to be used may be identified, and the identified subset of most likely to be used network socket information may be promoted at each bucket to a position having a faster lookup time than a remaining subset of the network socket information at that bucket.

Abstract: Methods, systems, and devices are described for managing socket lookups in an operating system of a device providing high-speed network services using multi-level hash tables. A system includes a listen socket lookup hash table and a connection socket lookup hash table. The listen socket lookup hash table includes a number of buckets configured to store listen socket lookup data for network connections. The connection socket lookup hash table includes a number of buckets configured to store connection socket lookup data for the network connections. The buckets in each of the hash tables may be individually locked. In certain examples, a third table may store binding data based on the data stored in the listen socket lookup hash table and the connection socket lookup hash table.

Abstract: Systems, methods, and devices are provided for managing state lookup data in a hash table. A network device handling incoming and outgoing packets may implement a state management hash table with a number of buckets selected such that an average number of open network socket connections associated with each bucket is between about 0 and about 10. The hash table may implement fine-grained locking by associating a separate lock with each bucket, thereby allowing for parallel state management threads to access multiple buckets of the hash table simultaneously.

Abstract: Methods, systems, and devices are described for managing virtual network services provided to a network. Network services may be provided to a client network having a first network fabric at a self-contained network services system implementing a number of redundant instances of a network service application. The self-contained network services system may have a second network fabric. The second network fabric may be adapted to distribute network service tasks received from the client network which are associated with the network service application among the redundant instances of the network service application.

Abstract: Methods, systems, and devices are described for managing virtual network services provided to a network. A number of processors in a self-contained network services module may execute a number of separate network service application instances associated with providing network services to the network. State information for each network service application instance may be stored within a shared memory, and a fault in one of the network service application instances may be identified based on the stored state information. The identified fault may be dynamically remedied in the one of the network service application instances.