Abstract: A system for congestion control using a flow level transmit mechanism is disclosed. In some embodiments, the system comprises a source SFA and a receive SFA. The source SFA is configured to detect and classify a congestion notification packet (CNP) generated based on congestion in a network; select a receive block from a plurality of receive blocks based on the CNP; forward the CNP to a dedicated congestion notification queue of the receive block; identify a transmit queue from a plurality of transmit blocks based on processing the congestion notification queue, wherein the transmit queue originated a particular transmit flow causing the congestion; and stop the transmit queue.

Abstract: A multi-plane, multi-protocol memory switch system is disclosed. In some embodiments, a memory switch includes a plurality of switch ports, the memory switch connectable to one or more root complex (RC) devices through one or more respective switch ports of the plurality of switch ports, and the memory switch connectable to a set of endpoints through a set of other switch ports of the plurality of switch ports, wherein the set includes zero or multiple endpoints; a cacheline exchange engine configured to provide a data-exchange path between two endpoints and to map an address space of one endpoint to an address space of another endpoint; and a bulk data transfer engine configured to facilitate data-exchange between two endpoints as a source-destination data stream, one endpoint being designated a source address and another endpoint being designated a destination address.

Abstract: A server fabric adapter (SFA) communication system is disclosed. In some embodiments, the SFA communication system comprises an SFA communicatively coupled to a plurality of controlling hosts, a plurality of endpoints, and a plurality of network ports. The SFA is configured to receive a network packet from a network port of the plurality of network ports; separate the network packet into different portions, each portion including a header or a payload; map each portion of the network packet to: (i) a controlling host of the plurality controlling hosts, the controlling host being designated as a destination controlling host, or (ii) an endpoint of the plurality of endpoints, the endpoint being designated as a destination endpoint; and forward a respective portion of the network packet to the destination controlling host or the destination endpoint.

Abstract: A network-displaced direct storage architecture transports storage commands over a network interface. In one implementation, the architecture maps, at hosts, block storage commands to remote direct memory access operations (e.g., over converged Ethernet). The mapped operations are communicated across the network to a network storage appliance. At the network storage appliance, network termination receives the mapped commands, extracts the operation and data, and passes the operation and data to a storage device that implements the operation on a memory.

Abstract: A network function virtualization security and trust system includes a network device that operates as a virtualized network device with virtualized services provided on the network device by network nodes included in the system. Security and trust within the system can include hardware authentication of the network nodes and the network device to obtain a level of security of the hardware provisioning the operation of the virtualized services. Security and trust can also include authentication of the services being used on the virtualized network device. Services authentication can be based on monitoring and analysis of the cooperative operation of the services in the virtualized network device. The virtualized services can be dynamically changed, added or stopped. Hardware authentication and dynamic services authentication in accordance with changes in the virtualized services can dynamically maintain a level of security across the devices and the virtualized services.

Abstract: The present disclosure describes a networking switch of a network and method for operating the networking switch. The networking switch communicates within the network using datagrams, such as packets and/or frames. The frames include packets of a first communication protocol or layer having headers of the first communication protocol or layer. In some situations, the packets of the first communication protocol or layer are embedded with packets of a second communication protocol or layer. Often times, one or more fields of headers of the first communication protocol or layer convey substantially similar or redundant information, such as routing information to provide an example, as one or more fields of headers of the second communication protocol or layer.

Abstract: A system, method and a computer readable medium for processing packets transmitted using relaxed order in an ordered multi-path network are provided. Packets associated with a data flow from the ordered multi-path network are received out of order. The received packets are reassembled into a sequential order, without gaps, prior to being delivered to a protocol stock for sequential processing.

Abstract: A network-displaced direct storage architecture transports storage commands over a network interface. In one implementation, the architecture maps, at hosts, block storage commands to remote direct memory access operations (e.g., over converged Ethernet). The mapped operations are communicated across the network to a network storage appliance. At the network storage appliance, network termination receives the mapped commands, extracts the operation and data, and passes the operation and data to a storage device that implements the operation on a memory.

Abstract: A network-displaced direct storage architecture transports storage commands over a network interface. In one implementation, the architecture maps, at hosts, block storage commands to remote direct memory access operations (e.g., over converged Ethernet). The mapped operations are communicated across the network to a network storage appliance. At the network storage appliance, network termination receives the mapped commands, extracts the operation and data, and passes the operation and data to a storage device that implements the operation on a memory.

Abstract: Service aware network devices coordinate function chains of virtual functions. The network devices are aware of which virtual functions exist and how to interconnect them in the most efficient manner and define and process service graphs that can be maintained, monitored and redirected. The network devices themselves implement and manage the service graphs, as opposed to the virtual servers that host the virtual functions.

Abstract: System, method and apparatus for network congestion management and network resource isolation. A high level network usage and device architecture is provided that can satisfy buffering and network bandwidth resource management for data center networks. The congestion management can be defined to bring the reaction point closer to the network ports. In one embodiment, the reaction point is resident in a network interface card (NIC).

Abstract: A system and method for credit-based link level flow control. In one embodiment, a byte-based flow control mechanism is based on a sender effectively maintaining a buffer state at the receiver. In maintaining a buffer state at the receiver, the sender is provided with information regarding byte expansion at the receiver. This byte-expansion information can be used by the sender to identify the amount of additional storage needed by the receiver when storing a packet transmitted by the sender in the receiver's packet buffer.

Abstract: A network function virtualization security and trust system includes a network device that operates as a virtualized network device with virtualized services provided on the network device by network nodes included in the system. Security and trust within the system can include hardware authentication of the network nodes and the network device to obtain a level of security of the hardware provisioning the operation of the virtualized services. Security and trust can also include authentication of the services being used on the virtualized network device. Services authentication can be based on monitoring and analysis of the cooperative operation of the services in the virtualized network device. The virtualized services can be dynamically changed, added or stopped. Hardware authentication and dynamic services authentication in accordance with changes in the virtualized services can dynamically maintain a level of security across the devices and the virtualized services.

Abstract: The present disclosure describes a networking switch of a network and method for operating the networking switch. The networking switch communicates within the network using datagrams, such as packets and/or frames. The frames include packets of a first communication protocol or layer having headers of the first communication protocol or layer. In some situations, the packets of the first communication protocol or layer are embedded with packets of a second communication protocol or layer. Often times, one or more fields of headers of the first communication protocol or layer convey substantially similar or redundant information, such as routing information to provide an example, as one or more fields of headers of the second communication protocol or layer.

Abstract: A universal network interface controller (UNIC) is provided for interfacing a host computer to a switch fabric, a packet network, or both. The UNIC includes encapsulation logic configured to encapsulate a CBP communication for transmission as switch fabric data on the switch fabric. Finally, the UNIC includes transmit logic configured to transmit the encapsulated CBP communication to the remote CBP device using the switch fabric.

Abstract: A method of transferring data in a network is provided. Data is received at a sub-switch of a first bundled switch having a plurality of sub-switches, the sub-switch being configured to only couple to connections external to the first bundled switch. The method also includes transferring the data from the first bundled switch using a multi-lane cable coupled to a second bundled switch, a first end of the multi-lane cable coupled to a sub-switch in the first bundled switch and a second end of the multi-lane cable coupled to at least two sub-switches in the second bundled switch.

Abstract: Service aware network devices coordinate function chains of virtual functions. The network devices are aware of which virtual functions exist and how to interconnect them in the most efficient manner and define and process service graphs that can be maintained, monitored and redirected. The network devices themselves implement and manage the service graphs, as opposed to the virtual servers that host the virtual functions.

Abstract: A universal network interface controller (UNIC) is provided for interfacing a host computer to a switch fabric, a packet network, or both. The UNIC includes encapsulation logic configured to encapsulate a CBP communication for transmission as switch fabric data on the switch fabric. Finally, the UNIC includes transmit logic configured to transmit the encapsulated CBP communication to the remote CBP device using the switch fabric.

Abstract: Systems and methods for handling virtual machine packets are provided. In some aspects, a method includes receiving, by a network interface controller, an indicator of a packet from a virtual machine. The indicator bypasses a virtual switch coupled to the virtual machine. The method also includes determining, in response to receiving the indicator, whether the packet is designated for accelerated processing. The method also includes providing the indicator to the virtual switch for processing if the packet is determined not to be designated for accelerated processing. The method also includes processing, by the network interface controller, the packet for transmission if the packet is determined to be designated for accelerated processing.

Abstract: A universal network interface controller (UNIC) is provided for interfacing a host computer to a switch fabric, a packet network, or both. The UNIC includes encapsulation logic configured to encapsulate a CBP communication for transmission as switch fabric data on the switch fabric. Finally, the UNIC includes transmit logic configured to transmit the encapsulated CBP communication to the remote CBP device using the switch fabric.