Abstract: A memory of a network device is divided into first blocks, each first block being divided into second blocks, and each second block including a first storage space and second storage space. When a packet is stored, second blocks occupied by the packet are determined based on a packet length and a first storage space length, and the packet is stored into a first storage space of each of the second blocks. For each of the second blocks, a PD corresponding to the second block is generated, and stored into a second storage space of the second block. When a packet is read, the second blocks to be read are determined based on a start address of the packet. A packet fragment is read from a first storage space of the second blocks to be read, and the read packet segments are composed into the second packet to be sent.

Abstract: Provided are a method and a device for forwarding a video-on-demand flow, which may be applied to a network with virtualization of network functions. In an example of the method, for a Virtual Broadband Remote Access Server (vBRAS) Service Orchestrator (vBRASSO) managing at least one vBRAS in a vBRAS resource pool in the network with virtualization of network functions, if a particular vBRAS completes user authentication, the vBRASSO determines a Point Of Presence (POP) switch for forwarding a video-on-demand flow to the user based on the user information from the vBRAS, and notifies the POP switch of a route for forwarding the video-on-demand flow to the user in such a way that the POP switch advertises the route to a core router configured to receive the video-on-demand flow from a video-playing source in the network with virtualization of network functions.

Abstract: Methods, systems for preventing an APT attack and non-transitory machine-readable storage mediums are disclosed. In one aspect, communication data is obtained in a network, association analysis is performed for the communication data, threat data is obtained from the communication data based on an association analysis result, each piece of the obtained threat data is mapped to a corresponding APT attack phase based on a kill chain model; and for each piece of threat data, prevention is performed for a network entity associated with the piece of the threat data based on prevention strategies corresponding to the plurality of APT attack phases.

Abstract: The present disclosure provides a path selection method and apparatus. The method comprises: receiving a traffic scheduling request, wherein the traffic scheduling request comprises a requirement for path selection, a source node, and a destination node; determining, for each dedicated line cloud comprising both a source virtual node connected with the source node and a destination virtual node connected with the destination node, a dedicated line corresponding to the dedicated line cloud as a traffic forwarding path when static attribute of a link between the source node and the respective source virtual node and a link between the destination node and the respective destination virtual node, and/or a dynamic attribute of a link between the respective source virtual node and the respective destination virtual node satisfy the requirement for path selection. The present disclosure can implement path selection based on bandwidth and quality in a point-to-multipoint network by a controller.

Abstract: A method and an apparatus for forwarding a packet in a Multi-Protocol Label Switching (MPLS) network are provided. Based on an example of the method, a Provider Edge (PE) device assigns a private network application identifier to a received Internet Protocol (IP) packet and sends a Multi-Protocol Label Switching (MPLS) packet that is generated based on the IP packet and carries the private network application identifier in an extension label. In this way, when receiving the MPLS packet, a Provider (P) device may identify the private network application to which the MPLS packet belongs based on the private network application identifier in the extension tag.

Abstract: The present disclosure relates to packet forwarding including: determining, according to a forwarding table, an outgoing interface aggregation group corresponding to an incoming interface having received a packet, wherein the forwarding table indicating a relationship between the incoming interface and the outgoing interface aggregation group; selecting, when the outgoing interface aggregation group includes at least one outgoing interface which belongs to the same NUMA node as the incoming interface, a first outgoing interface for sending the packet from the at least one outgoing interface, wherein the NUMA node being non-uniform memory access architecture node; and sending the packet through the first outgoing interface.

Abstract: The present disclosure provides an IPv6 stateless address auto-configuration method, a network device and a host. The method includes: sending a router advertisement RA message to a host, wherein the RA message includes a prefix information option, and the prefix information option includes a prefix and a flag. The host performs IPv6 stateless address auto-configuration according to the prefix and the flag.

Abstract: In an example, when a network device receives a route advertised by a Border Gateway Protocol (BGP) neighbor, the network device distributes the route to hardware thereof, records the route into a linked list of routes to be advertised, and determines a BGP state of the device. If the BGP state indicates waiting to advertise a route, the network device updates the BGP state to advertising a route after a set time length and advertises a route in the linked list of routes to be advertised. If the BGP state indicates advertising a route, the network device advertises a route in the linked list of routes to be advertised.

Abstract: A method and an apparatus for generating an Ipv6 multicast address are provided. The method includes: a client generates an IPv6 multicast address of a multicast group based on obtained location information of a target device. Further, after the client generates an IPv6 multicast address based on the location information, joins the multicast group based on the IPv6 multicast address, the client receives data from a multicast source to the multicast group.

Abstract: Provided are a method and an apparatus for forwarding a packet. Based on an example of the method, in a case of receiving an upstream Q-in-Q protocol packet through a port connected to an access device, an Edge Stream Gateway (ESGW) device forwards the upstream Q-in-Q protocol packet to a Virtual Broadband Remote Access Server (vBRAS) device through a Virtual eXtensible Local Area Network (VXLAN) tunnel between the ESGW device and the vBRAS device; in a case of receiving an upstream Q-in-Q data packet through a port connected to the access device, the ESGW device removes a Q-in-Q tag of the upstream Q-in-Q data packet, determines that a destination Media Access Control (MAC) address of the upstream Ethernet data packet without the Q-in-Q tag is an MAC address of the ESGW device, and performs layer-3 forwarding based on a destination IP address of the upstream Ethernet data packet.

Abstract: A method and an apparatus for diagnosing a network and a machine readable storage medium thereof are provided. As an example, the method of diagnosing a network comprises: a first AP running in a WLAN Doctor mode tests WLAN service quality provided by a second AP located in a diagnosis region of the first AP by simulating a client.

Abstract: A method and an apparatus for transmitting data and a network device are provided. In an example of the method, after an interface board and a logical channel both corresponding to first data to be sent are determined, when the logical channel has a capability to send the first data, second data is obtained by adding header information of an interface board identifier and a logical channel identifier to the first data, and stored in a buffer corresponding to the logical channel. Next, when the second data is sent, the second data is read from the buffer, the interface board identifier and the logical channel identifier are obtained from the header information of the read second data, the first data is obtained by removing the header information from the read second data, and the obtained first data is sent to the interface board corresponding to the interface board identifier.

Abstract: A method of displaying network topology and a network management device are disclosed. The method includes: determining a sub-network that can be abstracted from the original network topology, wherein the sub-network includes at least two network devices as well as a network link and a network interface between the at least two network devices; abstracting the at least two network devices, as well as the network link and the network interface between the at least two network devices included in the sub-network and obtaining a virtual network device; and displaying a current network topology, the current network topology including the virtual network device which is generated after abstracting the sub-network.

Abstract: A receiving core reads a packet from an ingress interface, wherein the ingress interface is an interface corresponding to a forwarding group to which the receiving core belongs; the receiving core sends the read packet to a forwarding core in the forwarding group; and the forwarding core sends the packet to a corresponding egress interface.

Abstract: A packet transmission method and apparatus are disclosed. The method comprises: determining whether an opposite DR-member device is connected to a first type of device, where the first type of device is a device connected to the opposite DR-member device but not connected to the local DR-member device, wherein when required to send a packet of a specified type, the packet is sent to the opposite DR-member device if the opposite DR-member device is connected to the first type of device; and the packet is prohibited from being sent to the opposite DR-member device if the opposite DR-member device is not connected to the first type of device.

Abstract: Roaming methods and hosts are provided. In the present disclosure, a TCP/IP connection established between a host and an opposite end is modified from binding a first IP address of the host in a current first network to binding a host address within the first IP address which does not change during host roaming, so that all parameters associated with the TCP/IP connection established between the host and the opposite end do not change when the host roams from the first network to a second network.

Abstract: A network device includes a switch chip and a CPU, wherein the switch chip at least includes a CPU interface, and the CPU at least includes a media access controller and a Buffer. The network device further includes a conversion apparatus. The conversion apparatus receives a first packet uploaded by the switch chip to the CPU through the CPU interface, obtains a second packet by migrating a private information header in an Ethernet header of the first packet to a specified position of the first packet, calculates a Cyclic Redundancy Check, CRC, code of the second packet, obtains a third packet by replacing a CRC code already carried in the second packet with the calculated CRC code, and sends the third packet to the Buffer on the CPU for buffering, wherein the specified position is a position other than the Ethernet header in the first packet.

Abstract: A method and an apparatus for authenticating an access are provided. When a first interface of a BRAS device does not find a user entry corresponding to a user terminal, the first interface sends an authentication request packet including terminal information of the user terminal to an AAA server. The AAA server notifies a second interface already accessed by the user terminal to delete a user entry corresponding to the user terminal when determining that the user terminal is an authenticated terminal and a roaming terminal, and sends an authentication success packet to the first interface when determining the deletion is completed, so that the first interface allows access of the user terminal and records the user entry corresponding to the user terminal in the first interface.

Abstract: A method and device for preventing a failure processing delay are provided in the disclosure. In an example, when the number of queue elements in an equivalence class time-window queue reaches a set threshold (denoted as N) in a set time-window, it means that there are N Bidirectional Forwarding Detection (BFD) sessions in the same equivalence class set, that detect Down events. It thus can be intelligently inferred that a public network path carrying the N BFD sessions breaks down. For processing a failure in time and reducing data stream loss on an upper layer, the present disclosure may allow reporting a corresponding Down event for each BFD session in the equivalence class set to which the N BFD sessions belong.

Abstract: A NAT method, apparatus and device are provided. According to the method, a target IP address and its reference port are obtained from a NAT resource pool, the reference port being a port in a corresponding consecutive port range. A first five-tuple is generated based on the target IP address, the reference port and an original five-tuple of the packet, and a second five-tuple is obtained by masking first-class bits of the reference port of the first five-tuple. Based on a hash result of the second five-tuple, a target bit indicating a non-conflicting state is determined from a pre-constructed bitmap. The state indicated by the target bit is set to be a conflicting state, and a target five-tuple is generated based on the target bit. The target five-tuple and the original five-tuple are recorded in a session table, and the packet is NAT-processed based on the target five-tuple.