Abstract: In one embodiment, an apparatus includes a memory, a hardware processor, and logic integrated with and/or executable by the processor. The logic is configured to receive one or more software defined network (SDN) routes dictating a path through a network comprising a plurality of devices. The logic is also configured to store the one or more SDN routes to the memory along with one or more traditional routes learned by the apparatus and/or configured by an administrator, and indicate the one or more SDN routes as being of a type different from the traditional routes. Moreover, the logic is configured to receive a priority ordering for a plurality of routes stored in the memory from the SDN controller, the plurality of routes including at least one SDN route, and construct a route information base (RIB) based on the plurality of routes and the priority ordering.

Abstract: According to one embodiment, an apparatus includes a processor and logic integrated with and/or executable by the processor. The logic is configured to determine paths between a plurality of switches connected together in a system by performing path calculations based on a topology of the system. The logic is also configured to calculate one or more disjoint multi-paths from among the paths, the one or more disjoint multi-paths connecting a source device to a destination device. The source device is connected to a first switch of the plurality of switches, and the destination device is connected to a second switch of the plurality of switches. Moreover, the logic is configured to write the one or more disjoint multi-paths into a forwarding table of at least one device. Other systems and computer program products are presented according to more embodiments.

Abstract: In one embodiment, an apparatus includes a processor and logic integrated with and/or executable by the processor. The logic is configured to communicate with a first physical switch, a second physical switch, and an overlay network that connects the first physical switch to the second physical switch. The logic is also configured to receive a request for a communication path through the overlay network for a packet, the request including at least the packet, first information about a source of the packet, the source of the packet being connected to the first physical switch, and second information about a most closely connected physical switch to a destination of the packet. Moreover, the logic is configured to determine the destination of the packet, the destination of the packet being connected to the second physical switch. Also, the logic is configured to determine whether to apply a security policy to the packet.

Abstract: In one embodiment, an apparatus includes a buffer memory, at least one ingress port, at least one egress port, at least one processor, and logic integrated with and/or executable by the at least one processor, the logic being configured to communicate with a software-defined network (SDN) controller, store one or more look-up tables in a first portion of the buffer memory, receive a packet using an ingress port, and determine an egress port for the packet. In another embodiment, a method for switching packets in a SDN includes storing one or more took-up tables in a first portion of a buffer memory of a SDN-capable switching device, receiving a packet using an ingress port of the switching device, and determining an egress port for the packet.

Abstract: In one embodiment, a system includes a network having a plurality of switches and one or more devices connected to one or more of the plurality of switches, a software defined network (SDN) controller connected to one or more of the plurality of switches in the network, the SDN controller having logic integrated with and/or executable by a processor, the logic being adapted to determine SDN routes through the network between the one or more devices and each of the plurality of switches and send one or more SDN routes to each switch in the network capable of communicating with the SDN controller. In other embodiments, methods and computer program products are also described for providing SDN routes through a network.

Abstract: According to one embodiment, a data center fabric network system includes a controller, a plurality of switches connected to the controller via a plurality of communication links, a source device connected to at least a first switch of the plurality of switches, a destination device connected to at least a second switch of the plurality of switches, and wherein the controller is adapted for: creating a topology of the data center fabric network system, determining paths between the plurality of switches, calculating one or more disjoint multi-paths from the source device to the destination device based on the topology, and writing the one or more disjoint multi-paths into a forwarding table of at least one of: the source device, the first switch, and a nearest shared switch to the source device.

Abstract: A method for determining disjoint multi-paths in a data center fabric network system, according to one embodiment, includes creating a topology of a data center fabric network system, wherein the system comprises a plurality of switches; determining paths between the plurality of switches; calculating one or more disjoint multi-paths from a source device to a destination device in the system; and writing the one or more disjoint multi-paths into a forwarding table of at least one of: the source device and a nearest shared switch to the source device.

Abstract: In one embodiment, a method for applying security policy in an overlay network includes receiving a request, including a packet, for a communication path through an overlay network, determining whether a security policy is to be applied to the packet based on at least one of: contents of the packet, first information, and second information, selecting a communication path between a source physical switch and a destination physical switch, wherein the selected communication path directly connects the source physical switch to the destination physical switch when it is determined to not apply the security policy to the packet, and the selected communication path connects the source physical switch to the destination physical switch via a security appliance when it is determined to apply the security policy to the packet, and sending the selected communication path to the source physical switch.

Abstract: A first cluster includes first switching devices that are compatible with a software-defined networking (SDN) protocol. A second cluster includes second switching devices within or partially overlapping the first cluster. Each second switching device is compatible with a protocol for an open systems interconnection (OSI) model layer. The first switching devices include one or more border switching devices located at a boundary between the first cluster and the second cluster. Each border switching device is also compatible with the protocol for the OSI model layer. The first switching devices effect first multipathing through the network except through the second cluster, and the second switching devices effect second multipathing just through the second cluster of the network. As such, the first switching devices and the second switching devices together effect end-to-end multipathing through both the first cluster and the second cluster of the network.

Abstract: Each of a network fabric controller device and a network fabric forwarder devices includes network connecting hardware and network managing logic. The network connecting hardware of the devices connects them to a singly contiguous network fabric including switching devices that route data between initiator nodes and target nodes and that have routing logic programmable by the controller device. The controller device does not directly route the data themselves. The network managing logic of the devices effects multipaths for transmission of the data through the singly contiguous network fabric from the initiator node to the target nodes via programming of the routing logic of the switching devices.

Abstract: A first cluster includes first switching devices that are compatible with a software-defined networking (SDN) protocol. A second cluster includes second switching devices within or partially overlapping the first cluster. Each second switching device is compatible with a protocol for an open systems interconnection (OSI) model layer. The first switching devices include one or more border switching devices located at a boundary between the first cluster and the second cluster. Each border switching device is also compatible with the protocol for the OSI model layer. The first switching devices effect first multipathing through the network except through the second cluster, and the second switching devices effect second multipathing just through the second cluster of the network. As such, the first switching devices and the second switching devices together effect end-to-end multipathing through both the first cluster and the second cluster of the network.

Abstract: A first cluster includes first switching devices that are compatible with a software-defined networking (SDN) protocol. A second cluster includes second switching devices within or partially overlapping the first cluster. Each second switching device is compatible with a protocol for an open systems interconnection (OSI) model layer. The first switching devices include one or more border switching devices located at a boundary between the first cluster and the second cluster. Each border switching device is also compatible with the protocol for the OSI model layer. The first switching devices effect first multipathing through the network except through the second cluster, and the second switching devices effect second multipathing just through the second cluster of the network. As such, the first switching devices and the second switching devices together effect end-to-end multipathing through both the first cluster and the second cluster of the network.

Abstract: In one embodiment, a system includes a system includes a hardware processor and logic implemented with and/or executable by the processor to determine that expiration of a timer has occurred, and in response to expiration of the timer, import entries from a media access control (MAC) address table stored by a switch controller into a MAC address table stored by a switch until the MAC address table stored by the switch is full, where the logic to import entries includes logic to import entries in the MAC address table stored by the switch controller determined to be more often used into the MAC address table stored by the switch before entries determined to be less often used.

Abstract: In one embodiment, a system includes a processor adapted for running a switch controller application, logic configured for detecting a switch in a network, logic configured for determining that the switch is capable of communicating via the switch controller application, and logic configured for overwriting a default rule for handling unknown unicast packets in the switch such that the switch sends any unknown unicast packet received by the switch to the system instead of flooding when an unknown unicast packet is received. In another embodiment, a method includes detecting a switch in a network, determining that the switch is capable of communicating via a switch controller application, and overwriting a default rule for handling unknown unicast packets in the switch such that the switch sends any unknown unicast packet received by the switch to the switch controller instead of flooding when an unknown unicast packet is received.

Abstract: According to one embodiment, a system includes a switch controller in communication with a plurality of switches in a switch cluster via a communication protocol, at least one switch in the switch cluster being configured to connect to a host, wherein the switch controller is configured to: maintain a Layer-3 (L3) host table configured to store entries including address information for hosts connected directly to the switch cluster, apply a policy to all existing entries in the L3 host table, and remove one or more existing entries according to the policy in order to reduce a number of entries in the L3 host table. In other embodiments, systems, computer program products, and methods for managing a L3 host table in software defined network (SDN)-based switch clusters having L3 distributed router functionality are presented.

Abstract: According to one embodiment, Layer-3 (L3) distributed router functionality is provided to a switch cluster by receiving an address resolution protocol (ARP) request packet from a first host at an entry switch in a switch cluster, a switch controller being in communication with the entry switch, and the ARP request packet including a virtual router IP address of the switch controller as a target, forwarding the ARP request packet to the switch controller after adding a header that adheres to a communication protocol used by the switch controller, receiving an ARP response packet from the switch controller indicating: a source IP address corresponding to a virtual router of the switch controller and a SMAC corresponding to the switch controller, forwarding the ARP response packet to the first host after stripping the communication protocol header, and setting the virtual router as a default gateway for traffic received from the first host.

Abstract: In one embodiment, a method for providing link aggregation (LAG) to heterogeneous switches includes receiving, at a switch controller, LAG requests forwarded by switches and determining that multiple LAG requests corresponding to a server have been received, grouping the multiple LAG requests into LAG groups according to a switch from which they were received and correlating all the LAG groups with the server, instructing each of the switches to setup a LAG group with the server according to the LAG groups determined by the switch controller, and creating alternate flows that correspond to flows through each of the switches to the server through direction from the switch controller. The switches may rely upon OpenFlow to communicate with the switch controller, in some approaches. In addition, other methods for providing LAG to heterogeneous switches are also described, along with systems and computer program products which provide LAG to heterogeneous switches.

Abstract: Each of a network fabric controller device and a network fabric forwarder devices includes network connecting hardware and network managing logic. The network connecting hardware of the devices connects them to a singly contiguous network fabric including switching devices that route data between initiator nodes and target nodes and that have routing logic programmable by the controller device. The controller device does not directly route the data themselves. The network managing logic of the devices effects multipaths for transmission of the data through the singly contiguous network fabric from the initiator node to the target nodes via programming of the routing logic of the switching devices.

Abstract: Each of a network fabric controller device and a network fabric forwarder devices includes network connecting hardware and network managing logic. The network connecting hardware of the devices connects them to a singly contiguous network fabric including switching devices that route data between initiator nodes and target nodes and that have routing logic programmable by the controller device. The controller device does not directly route the data themselves. The network managing logic of the devices effects multipaths for transmission of the data through the singly contiguous network fabric from the initiator node to the target nodes via programming of the routing logic of the switching devices.

Abstract: In one embodiment, a method for applying security policy in an overlay network includes receiving a request, including a packet, for a communication path through an overlay network, determining whether a security policy is to be applied to the packet based on at least one of: contents of the packet, first information, and second information, selecting a communication path between a source physical switch and a destination physical switch, wherein the selected communication path directly connects the source physical switch to the destination physical switch when it is determined to not apply the security policy to the packet, and the selected communication path connects the source physical switch to the destination physical switch via a security appliance when it is determined to apply the security policy to the packet, and sending the selected communication path to the source physical switch.