Abstract: A method is implemented by a switch in a Software Defined Networking (SDN) network to trace packets belonging to a flow. The method includes setting a value in a first field and a second field associated with the packet to indicate that tracing is enabled for the packet, where the second field is a field that is not used for packet matching, determining, at a second flow table, whether tracing is enabled for the packet based on the value in the first field, transmitting a trace message for the packet to a trace collector in response to a determination that tracing is enabled for the packet, setting a value in the first field to indicate that tracing is disabled for the packet, resubmitting the packet to the second flow table, and copying the value in the second field to the first field before directing the packet to another flow table.

Abstract: A method is implemented by a network device functioning as a controller in a Software Defined Networking (SDN) network to configure a switch in the SDN network to process packets on behalf of a Service Function Chain (SFC) proxy so that the packets can bypass the SFC proxy. The method includes receiving a translation rule for an SFC encapsulation from the SFC proxy, transmitting SFC proxy bypass instructions to the switch that cause the switch to translate packets belonging to a flow associated with the SFC encapsulation according to the translation rule for the SFC encapsulation and to forward the packets belonging to the flow associated with the SFC encapsulation to a service function while bypassing the SFC proxy, and transmitting an indication to the SFC proxy that the packets belonging to the flow associated with the SFC encapsulation are to bypass the SFC proxy.

Abstract: A packet distribution scheme for forwarding incoming packets to servers in a network. Depending on a hash value of the incoming flow's identification parameters, a hash flow table or database is queried to determine the server to which the packet is to be forwarded. If multiple flows have the same hash index and are associated with different servers, a secondary flow table or database is queried for determining the server. In an example implementation, only the secondary flow table is configured to store fully qualified flow identification parameters whereas the hash flow table is operative to store reduced or compressed state information.

Abstract: A method of operating a load balancing switch may include providing a flow entry in a flow table, the flow entry may include a match pattern that is satisfied by a data flow identification, and the flow entry may identify a first server. A first data packet including a first data flow identification may be received, and the first data packet may be transmitted to the first server responsive to the first data flow identification satisfying the match pattern. After transmitting the first data packet to the first server, the flow entry may be modified so that the flow entry identifies the first server and a second server. After modifying the flow entry, a second data packet including a second data flow identification may be received, and the second data packet may be transmitted to the first and second servers responsive to the second data flow identification satisfying the match pattern.

Abstract: A method of operating a load balancing switch may include providing a flow entry in a flow table, the flow entry may include a match pattern that is satisfied by a data flow identification, and the flow entry may identify a first server. A first data packet including a first data flow identification may be received, and the first data packet may be transmitted to the first server responsive to the first data flow identification satisfying the match pattern. After transmitting the first data packet to the first server, the flow entry may be modified so that the flow entry identifies the first server and a second server. After modifying the flow entry, a second data packet including a second data flow identification may be received, and the second data packet may be transmitted to the first and second servers responsive to the second data flow identification satisfying the match pattern.

Abstract: A packet distribution scheme for forwarding incoming packets to servers in a network. Depending on a hash value of the incoming flow's identification parameters, a hash flow table or database is queried to determine the server to which the packet is to be forwarded. If multiple flows have the same hash index and are associated with different servers, a secondary flow table or database is queried for determining the server. In an example implementation, only the secondary flow table is configured to store fully qualified flow identification parameters whereas the hash flow table is operative to store reduced or compressed state information.

Abstract: A load balancing system may include a switch coupled with a plurality of servers and a controller. A flow table may include default flow entries with each default flow entry including a different match pattern. At least one of the default flow entries may include a match pattern with an unrestricted character so that the match pattern having the unrestricted character is satisfied by a plurality of data flow identifications. Each of the default flow entries may include an action to be performed for data packets having data flow identifications that satisfy its match pattern. A data packet including a data flow identification for a data flow may be received from a client device. A default flow entry having a match pattern that is satisfied by the data flow identification is identified, and the data packet is processed in accordance with the action for the identified default flow entry.

Abstract: A network device to detect large flows includes a card to receive packets of flows. The device includes a large flow detection module including a serial multiple-stage filter module including series filter modules including a lead filter module and a tail filter module. Each filter module includes counters. The serial filter module is to serially increment the counters to reflect the flows, and is to increment counters that correspond to flows of subsequent filter modules only after all counters that correspond to the flows of all prior filter modules have been incremented serially up to maximum values. The serial filter module is to detect flows that correspond to counters of the tail filter module that have been incremented up to maximum values as the large flows. The large flow detection module includes a lead filter removal module to remove the lead filter module from the start of the series.

Abstract: A network device to detect large flows includes a card to receive packets of flows. The device includes a large flow detection module including a serial multiple-stage filter module including series filter modules including a lead filter module and a tail filter module. Each filter module includes counters. The serial filter module is to serially increment the counters to reflect the flows, and is to increment counters that correspond to flows of subsequent filter modules only after all counters that correspond to the flows of all prior filter modules have been incremented serially up to maximum values. The serial filter module is to detect flows that correspond to counters of the tail filter module that have been incremented up to maximum values as the large flows. The large flow detection module includes a lead filter removal module to remove the lead filter module from the start of the series.

Abstract: A load balancing system may include a switch coupled with a plurality of servers and a controller. A flow table may include default flow entries with each default flow entry including a different match pattern. At least one of the default flow entries may include a match pattern with an unrestricted character so that the match pattern having the unrestricted character is satisfied by a plurality of data flow identifications. Each of the default flow entries may include an action to be performed for data packets having data flow identifications that satisfy its match pattern. A data packet including a data flow identification for a data flow may be received from a client device. A default flow entry having a match pattern that is satisfied by the data flow identification is identified, and the data packet is processed in accordance with the action for the identified default flow entry.

Abstract: Flow and module level debugging in a system. An applicable filter-set comprising at least one user defined flow and at least one module corresponding to the at least one user defined flow are identified. An incoming message flow is then tagged with information of the applicable filter-set. Further, the at least one module is detected for debugging corresponding to the user defined flow based on the tagged information of the incoming message flow. Log statements are then generated for the at least one module detected for debugging.