Abstract: A method of generating packets in the data plane of a forwarding element is provided. The method selects a configuration set from a plurality of configuration sets of based on a triggering event. The method generates a set of packets using a packet template that corresponds to the selected configuration set. The method sets values of a plurality of the packet fields to identify different information such as the destination of packets. The method places the generated set of packets into an ingress pipeline of the forwarding element.

Abstract: A method of identifying a failed egress path of a hardware forwarding element. The method detects an egress link failure in a data plane of the forwarding element. The method generates a link failure signal in the data plane identifying the failed egress link. The method generates a packet that includes the identification of the egress link based on the link failure signal. The method sets the status of the egress link to failed in the data plane based on the identification of the egress link in the generated packet.

Abstract: A synchronous packet-processing pipeline whose data paths are populated with data-plane stateful processing units (DSPUs) is provided. A DSPU is a programmable processor whose operations are synchronous with the dataflow of the packet-processing pipeline. A DSPU performs every computation with fixed latency. Each DSPU is capable of maintaining a set of states and perform its computations based on its maintained set of states. The programming of a DSPU determines how and when the DSPU updates one of its maintained states. Such programming may configure the DSPU to update the state based on its received packet data, or to change the state regardless of the received packet data.

Abstract: A synchronous packet-processing pipeline whose data paths are populated with data-plane stateful processing units (DSPUs) is provided. A DSPU is a programmable processor whose operations are synchronous with the dataflow of the packet-processing pipeline. A DSPU performs every computation with fixed latency. Each DSPU is capable of maintaining a set of states and perform its computations based on its maintained set of states. The programming of a DSPU determines how and when the DSPU updates one of its maintained states. Such programming may configure the DSPU to update the state based on its received packet data, or to change the state regardless of the received packet data.

Abstract: A method of performing bidirectional forwarding detection (BFD) by a hardware forwarding element that includes a set of ingress pipelines and a set of egress pipelines. Each ingress pipeline includes a packet generator. A packet generator in a first pipeline periodically generates a pair of packets to monitor the health of a particular egress link. The pair includes a BFD transmit packet and a BFD dummy transmit packet. The method forwards each dummy BFD transmit packet to a first egress pipeline and increments a counter at the first egress pipeline. Each BFD packet is transmitted through the particular egress link to a network node. BFD packets received from the network node are forwarded to the first egress pipeline and the value of the counter is rest. The method marks the particular egress link as failed when the value of the counter exceeds a predetermined threshold.

Abstract: A novel method for replicating and filtering multicast packet in a physical network is provided. Upon receiving a packet, the method generates a set of metadata as ingress replication context for the received packet based on the content of the receive packet. The generated ingress replication context includes a multicast group identifier, a replication identifier, a first layer exclusion identifier, and a second layer exclusion identifier. The method performs multicast replication of the packet by identifying logical ports and/or logical domains that are to be excluded from the multicast replication based on the content of the generated ingress replication context.

Abstract: A synchronous packet-processing pipeline whose data paths are populated with data-plane stateful processing units (DSPUs) is provided. A DSPU is a programmable processor whose operations are synchronous with the dataflow of the packet-processing pipeline. A DSPU performs every computation with fixed latency. Each DSPU is capable of maintaining a set of states and perform its computations based on its maintained set of states. The programming of a DSPU determines how and when the DSPU updates one of its maintained states. Such programming may configure the DSPU to update the state based on its received packet data, or to change the state regardless of the received packet data.

Abstract: A synchronous packet-processing pipeline whose data paths are populated with data-plane stateful processing units (DSPUs) is provided. A DSPU is a programmable processor whose operations are synchronous with the dataflow of the packet-processing pipeline. A DSPU performs every computation with fixed latency. Each DSPU is capable of maintaining a set of states and perform its computations based on its maintained set of states. The programming of a DSPU determines how and when the DSPU updates one of its maintained states. Such programming may configure the DSPU to update the state based on its received packet data, or to change the state regardless of the received packet data.

Abstract: A synchronous packet-processing pipeline whose data paths are populated with data-plane stateful processing units (DSPUs) is provided. A DSPU is a programmable processor whose operations are synchronous with the dataflow of the packet-processing pipeline. A DSPU performs every computation with fixed latency. Each DSPU is capable of maintaining a set of states and perform its computations based on its maintained set of states. The programming of a DSPU determines how and when the DSPU updates one of its maintained states. Such programming may configure the DSPU to update the state based on its received packet data, or to change the state regardless of the received packet data.

Abstract: A synchronous packet-processing pipeline whose data paths are populated with data-plane stateful processing units (DSPUs) is provided. A DSPU is a programmable processor whose operations are synchronous with the dataflow of the packet-processing pipeline. A DSPU performs every computation with fixed latency. Each DSPU is capable of maintaining a set of states and perform its computations based on its maintained set of states. The programming of a DSPU determines how and when the DSPU updates one of its maintained states. Such programming may configure the DSPU to update the state based on its received packet data, or to change the state regardless of the received packet data.

Abstract: Methods and apparatus are disclosed for applying network policy to communications originating at operating system virtual interfaces. In an example embodiment, a network device is networked with a switch. The network device may include a first operating system interface, a virtualization adapter, and an input output port. In an example embodiment, the virtualization adapter receives a first frame from the first operating system interface. The virtualization adapter may tag the first frame to indicate an association between the first frame and the first operating system interface. The first frame may then be transmitted with a second frame being associated with a second operating system interface, to the switch via the input output port. In an example embodiment, the switch is configured to receive the frame, examine a tag and then to enforce a network policy upon the first frame, based on the tag.

Abstract: A device provides layer two (L2) services between customer networks that are coupled by one or more intermediate computer networks. The device comprises a routing process that receives label information for a label switched path (LSP) through the intermediate networks. The device further comprises a L2 service that receives L2 service information from a device associated with second customer networks. In accordance with the label information, the device transports L2 communications between the first and second customer networks through the one or more intermediate networks. By utilizing label information in this manner, the device may minimize the impact of providing L2 services through the intermediate networks.

Abstract: Embodiments of an N-Port ID virtualization (NPIV) proxy module, NPIV proxy switching system, and methods are generally described herein. Other embodiments may be described and claimed. In some embodiments, login requests are distributed over a plurality of available N-ports to allow servers to be functionally coupled to F-ports of a plurality of fiber-channel (FC) switches. Fiber-channel identifiers (FCIDs) are assigned to the servers in response to the logon requests to provide single end-host operations for each of the servers.

Abstract: Techniques are described for providing QoS guarantees when coupling layer two (L2) networks via an intermediate Multi-protocol Label Switching (MPLS) network. A network device, such as a router, receives a request to transport data from an L2 connection. The request specifies one of more characteristics of the L2 connection, such as bandwidth, color, end-to-end delay, jitter, a security requirement, or a classification of traffic for the L2 connection. The network device selects a label switched path (LSP) through the MPLS network based on the characteristics of the L2 connection, and forwards the data from the L2 connection via the selected LSP. In this manner, an LSP and, in particular, one or more forwarding next hops for the LSP, is selected that provides a “virtual” L2 connection, or pseudo-wire, that more closely emulates a direct L2 connection between the L2 networks.

Abstract: A router receives a control plane message for constructing a first LSP to a destination within a network that conforms to a first type of LSP. The control plane message includes a label for the first LSP and an identifier that identifies a first type of data traffic. The router receives a second control plane message for constructing a second LSP that conforms to the first type of LSP. The second control plane message includes a label for the second LSP and an identifier that identifies a second type of data traffic. The router installs forwarding state in accordance with policies that associate the first and second types of data traffic with different LSPs of a second type that each traverse different paths through the network, and forwards packets via the interface in accordance with the installed forwarding state.

Abstract: A device provides layer two (L2) services between customer networks that are coupled by one or more intermediate computer networks. The device comprises a routing process that receives label information for a label switched path (LSP) through the intermediate networks. The device further comprises a L2 service that receives L2 service information from a device associated with second customer network. In accordance with the label information, the device transports L2 communications between the first and second customer networks through the one or more intermediate networks. By utilizing label information in this manner, the device may minimize the impact of providing L2 services through the intermediate networks.

Abstract: Techniques are described for automatically selecting virtual private network (VPN) site-IDs for each customer site within a VPN established over a network. The techniques described herein enable a network router within a VPN to automatically allocate unique site-IDs for each customer site included in the VPN in a dense manner. In some cases, the VPNs may comprise virtual private local area network (LAN) service (VPLS) domains that transmit layer two (L2) traffic between customer sites, i.e., VPLS sites, via the network. For example, a network service provider may configure a network device, such as a router, to belong to one or more VPNs. When a customer site within one of the VPNs connects to the router, the router configures the customer site on the router. The router then automatically selects a site-ID for the customer site configured on the router.

Abstract: A device provides layer two (L2) services between customer networks that are coupled by one or more intermediate computer networks. The device comprises a routing process that receives label information for a label switched path (LSP) through the intermediate networks. The device further comprises a L2 service that receives L2 service information from a device associated with second customer networks. In accordance with the label information, the device transports L2 communications between the first and second customer networks through the one or more intermediate networks. By utilizing label information in this manner, the device may minimize the impact of providing L2 services through the intermediate networks.

Abstract: A router receives a control plane message for constructing a first LSP to a destination within a network that conforms to a first type of LSP. The control plane message includes a label for the first LSP and an identifier that identifies a first type of data traffic. The router receives a second control plane message for constructing a second LSP that conforms to the first type of LSP. The second control plane message includes a label for the second LSP and an identifier that identifies a second type of data traffic. The router installs forwarding state in accordance with policies that associate the first and second types of data traffic with different LSPs of a second type that each traverse different paths through the network, and forwards packets via the interface in accordance with the installed forwarding state.

Abstract: Techniques are described for providing QoS guarantees when coupling layer two (L2) networks via an intermediate Multi-protocol Label Switching (MPLS) network. A network device, such as a router, receives a request to transport data from an L2 connection. The request specifies one of more characteristics of the L2 connection, such as bandwidth, color, end-to-end delay, jitter, a security requirement, or a classification of traffic for the L2 connection. The network device selects a label switched path (LSP) through the MPLS network based on the characteristics of the L2 connection, and forwards the data from the L2 connection via the selected LSP. In this manner, an LSP and, in particular, one or more forwarding next hops for the LSP, is selected that provides a “virtual” L2 connection, or pseudo-wire, that more closely emulates a direct L2 connection between the L2 networks.