Abstract: A distributed neighbor discovery module is disclosed where all neighbor discovery operations and functionalities may be distributed to a switch device processor. Each neighbor discovery process on a switch device may run as an individual neighbor discovery router node. There may be no coordination between neighbor discovery processes occurring on different switch devices. All other traffic, including both IPv6 control traffic and data traffic destined to the router may be processed by the central controller processor.

Abstract: A distributed neighbor discovery module is disclosed where all neighbor discovery operations and functionalities may be distributed to a switch device processor. Each neighbor discovery process on a switch device may run as an individual neighbor discovery router node. There may be no coordination between neighbor discovery processes occurring on different switch devices. All other traffic, including both IPv6 control traffic and data traffic destined to the router may be processed by the central controller processor.

Abstract: Some implementations provide a method for managing switches in a data center that includes: (1) establishing a connection from one switch to another switch in the data center, the data center providing a plurality of virtual local area networks (VLANs), each VLAN including at least one Virtual Machine and capable of spanning across more than one of the plurality of switches; (2) provisioning device prefixes for IPv6 addresses, a given device prefix corresponding to a particular VLAN on a particular switch in the data center, the given device prefix included in a host address of a particular virtual machine, the particular virtual machine hosted on a server computer, the sever computer connected to the particular switch without additional intervening switches; (3) configuring a hardware memory to include prefix information and address information; and (4) transferring packets by using the prefix information and the address information.

Abstract: Some implementations provide a method for managing switches in a data center that includes: (1) establishing a connection from one switch to another switch in the data center, the data center providing a plurality of virtual local area networks (VLANs), each VLAN including at least one Virtual Machine and capable of spanning across more than one of the plurality of switches; (2) provisioning device prefixes for IPv6 addresses, a given device prefix corresponding to a particular VLAN on a particular switch in the data center, the given device prefix included in a host address of a particular virtual machine, the particular virtual machine hosted on a server computer, the sever computer connected to the particular switch without additional intervening switches; (3) configuring a hardware memory to include prefix information and address information; and (4) transferring packets by using the prefix information and the address information.

Abstract: Some implementations provide a method for managing switches in a data center that includes: (1) establishing a connection from one switch to another switch in the data center, the data center providing a plurality of virtual local area networks (VLANs), each VLAN including at least one Virtual Machine and capable of spanning across more than one of the plurality of switches; (2) provisioning device prefixes for IPv6 addresses, a given device prefix corresponding to a particular VLAN on a particular switch in the data center, the given device prefix included in a host address of a particular virtual machine, the particular virtual machine hosted on a server computer, the sever computer connected to the particular switch without additional intervening switches; (3) configuring a hardware memory to include prefix information and address information; and (4) transferring packets by using the prefix information and the address information.

Abstract: Systems and methods are provided to detect when a virtual machine moves across a switch device boundary, keep existing application sessions alive, and provide optimal forwarding for new application sessions with graceful address migration. Virtual machine movement can be detected on the new switching device by comparing the Device ID in the Source Address of the ND-NA with the Device ID of the new switching device. A temporary hardware forwarding sub-optimal path is maintained for existing application sessions. A new IP address is assigned to the moved virtual machine and an optimal forwarding path is programmed in hardware for new application sessions. The temporary sub-optimal hardware forwarding path is removed after all old application are terminated.

Abstract: A distributed neighbor discovery module is disclosed where all neighbor discovery operations and functionalities may be distributed to a switch device processor. Each neighbor discovery process on a switch device may run as an individual neighbor discovery router node. There may be no coordination between neighbor discovery processes occurring on different switch devices. All other traffic, including both IPv6 control traffic and data traffic destined to the router may be processed by the central controller processor.

Abstract: A distributed neighbor discovery module is disclosed where all neighbor discovery operations and functionalities may be distributed to a switch device processor. Each neighbor discovery process on a switch device may run as an individual neighbor discovery router node. There may be no coordination between neighbor discovery processes occurring on different switch devices. All other traffic, including both IPv6 control traffic and data traffic destined to the router may be processed by the central controller processor.

Abstract: Some implementations provide a method for managing switches in a data center that includes: (1) establishing a connection from one switch to another switch in the data center, the data center providing a plurality of virtual local area networks (VLANs), each VLAN including at least one Virtual Machine and capable of spanning across more than one of the plurality of switches; (2) provisioning device prefixes for IPv6 addresses, a given device prefix corresponding to a particular VLAN on a particular switch in the data center, the given device prefix included in a host address of a particular virtual machine, the particular virtual machine hosted on a server computer, the sever computer connected to the particular switch without additional intervening switches; (3) configuring a hardware memory to include prefix information and address information; and (4) transferring packets by using the prefix information and the address information.

Abstract: Systems and methods are provided to detect when a virtual machine moves across a switch device boundary, keep existing application sessions alive, and provide optimal forwarding for new application sessions with graceful address migration. Virtual machine movement can be detected on the new switching device by comparing the Device ID in the Source Address of the ND-NA with the Device ID of the new switching device. A temporary hardware forwarding sub-optimal path is maintained for existing application sessions. A new IP address is assigned to the moved virtual machine and an optimal forwarding path is programmed in hardware for new application sessions. The temporary sub-optimal hardware forwarding path is removed after all old application are terminated.

Abstract: A distributed neighbor discovery module is disclosed where all neighbor discovery operations and functionalities may be distributed to a switch device processor. Each neighbor discovery process on a switch device may run as an individual neighbor discovery router node. There may be no coordination between neighbor discovery processes occurring on different switch devices. All other traffic, including both IPv6 control traffic and data traffic destined to the router may be processed by the central controller processor.

Abstract: Systems and methods are provided to support a large number of hosts while keeping the size of the FIB CAM low. Higher scalability may be achieved by consuming less FIB CAM space as hosts are added to a network. An L3 switching module may be provided capable of supporting a large number of virtual machines and/or hosts while maintaining a small FIB CAM size on a multiple device virtual switching system with port or device level aggregation.

Abstract: Embodiments described herein may disclose systems and methods to employ an enhanced tracker in a P2P scenario to increase P2P performance and efficiency. After receiving a request for content the tracker may assist in obtaining as many chunks of the requested content as possible from the plurality of peers on the local network and may obtain any chunks of the requested content not obtained from the plurality of peer on the local network from a randomly selected list of remote peers.

Abstract: A method for detecting a suspicious packet flow in a packet-switched network comprises the computer-implemented step of receiving a first packet in which the SYN bit but not the ACK or RST bit of the packet's TCP header is set. If a specified first time has elapsed, a packet counter associated with the destination address of the flow is incremented. A determination as to whether the packet counter is greater than a specified threshold values is made. If the packet counter is greater than the threshold value, a notification message is generated. In one embodiment, information identifying a packet flow is aggregated to an aggregation cache based on the destination address of the flow.

Abstract: A technique that may be used to limit the amount of flooding that occurs for a particular virtual local area network (VLAN) in a data network. Limits are established for VLANs processed by an intermediate node. Each limit indicates a number of forwarding database entries that may be associated with a particular VLAN. If the number of entries in the forwarding database reaches the limit established for a particular VLAN, an action is taken which may include limiting the amount of flooding that occurs for that VLAN.

Abstract: A method for detecting a suspicious packet flow in a packet-switched network comprises the computer-implemented step of receiving a first packet in which the SYN bit but not the ACK or RST bit of the packet's TCP header is set. If a specified first time has elapsed, a packet counter associated with the destination address of the flow is incremented. A determination as to whether the packet counter is greater than a specified threshold values is made. If the packet counter is greater than the threshold value, a notification message is generated. In one embodiment, information identifying a packet flow is aggregated to an aggregation cache based on the destination address of the flow.