Abstract: Some embodiments of the invention provide a method for reporting congestion in a network that includes several forwarding elements. In a data plane circuit of one of the forwarding elements, the method detects that a queue in the switching circuit of the data plane circuit is congested, while a particular data message is stored in the queue as it is being processed through the data plane circuit. In the data plane circuit, the method then generates a report regarding the detected queue congestion, and sends this report to a data collector external to the forwarding element. To send the report, the data plane circuit in some embodiments duplicates the particular data message, stores it in the duplicate data message information regarding the detected queue congestion, and sends the duplicate data message to the external data collector.

Abstract: Techniques are disclosed for notifying network control software of new and moved source MAC addresses. In one embodiment, a switch may redirect a packet sent by a new or migrated virtual machine to the network control software as a notification. The switch does not forward the packet, thereby protecting against denial of service attacks. The switch further adds to a forwarding database a temporary entry which includes a “No_Redirect” flag for a new source MAC address, or updates an existing entry for a source MAC address that hits in the forwarding database by setting the “No_Redirect” flag. The “No_Redirect” flag indicates whether a notification has already been sent to the network control software for this source MAC address. The switch may periodically retry the notification to the network control software, until the network control software validates the source MAC address, depending on whether the “No_Redirect” is set.

Abstract: Techniques are disclosed for notifying network control software of new and moved source MAC addresses. In one embodiment, a switch may redirect a packet sent by a new or migrated virtual machine to the network control software as a notification. The switch does not forward the packet, thereby protecting against denial of service attacks. The switch further adds to a forwarding database a temporary entry which includes a “No_Redirect” flag for a new source MAC address, or updates an existing entry for a source MAC address that hits in the forwarding database by setting the “No_Redirect” flag. The “No_Redirect” flag indicates whether a notification has already been sent to the network control software for this source MAC address. The switch may periodically retry the notification to the network control software, until the network control software validates the source MAC address, depending on whether the “No_Redirect” is set.

Abstract: Examples described herein relate to a network element comprising an ingress pipeline and at least one queue from which to egress packets. The network element can receive a packet and generate a congestion notification packet at the ingress pipeline to a sender of the packet based on detection of congestion in a target queue that is to store the packet and before the packet is stored in a congested target queue. The network element can generate a congestion notification packet based on a queue depth of the target queue and likelihood the target queue is congested. The likelihood the queue is congested can be based on a probabilistic function including one or more of Proportional-Integral (PI) or Random Early Detection (RED). The network element can determine a pause time for the sender to pause sending particular packets based at least on a time for the target queue to drain to a target level.

Abstract: Some embodiments of the invention provide a method for reporting congestion in a network that includes several forwarding elements. In a data plane circuit of one of the forwarding elements, the method detects that a queue in the switching circuit of the data plane circuit is congested, while a particular data message is stored in the queue as it is being processed through the data plane circuit. In the data plane circuit, the method then generates a report regarding the detected queue congestion, and sends this report to a data collector external to the forwarding element. To send the report, the data plane circuit in some embodiments duplicates the particular data message, stores it in the duplicate data message information regarding the detected queue congestion, and sends the duplicate data message to the external data collector.

Abstract: Some embodiments of the invention provide a method for reporting congestion in a network that includes several forwarding elements. In a data plane circuit of one of the forwarding elements, the method detects that a queue in the switching circuit of the data plane circuit is congested, while a particular data message is stored in the queue as it is being processed through the data plane circuit. In the data plane circuit, the method then generates a report regarding the detected queue congestion, and sends this report to a data collector external to the forwarding element. To send the report, the data plane circuit in some embodiments duplicates the particular data message, stores it in the duplicate data message information regarding the detected queue congestion, and sends the duplicate data message to the external data collector.

Abstract: Techniques are disclosed for notifying network control software of new and moved source MAC addresses. In one embodiment, a switch detects packets sent by a new or migrated virtual machine, and sends a copy of a detected packet to the network control software as a notification. The switch further learns the source MAC address, thereby permitting the entry to be used for normal forwarding prior to validation of the entry and the VM associated therewith by the network control software. Until the network control software has validated the VM, the switch may periodically retry the notification to the network control software. “No_Redirect” and “Not_Validated” flags may be used to indicate whether a notification has already been attempted and thus no retry is necessary, and that the VM associated with the VM has not yet been validated, respectively.

Abstract: A tool for partitioning a switch into one or more logical switches in a distributed system. The tool creates, by one or more computer processors, one or more logical switch routers, based, at least in part, on a user configuration. The tool assigns, by one or more computer processors, based, at least in part, on a user configuration, one or more ports to the one or more logical switch routers. The tool manages, by one or more computer processors, the one or more logical switch routers.

Abstract: A tool for assigning virtual port channels to one or more logical switch routers in a distributed system. The tool receives, by one or more computer processors, a request to assign a virtual port channel to a second logical switch router. The tool sends, by one or more computer processors, a request to negotiate a link-down on the channel on a first logical switch router to a universal fiber port on the first logical switch router for processing. The tool sends, by one or more computer processors, a request to create the channel on the second logical switch router to a second interface manager on the second logical switch router for processing. The tool sends, by one or more computer processors, a request to negotiate a link up on the channel on the second logical switch router to the universal fiber port on the first logical switch router for processing.

Abstract: A tool for forwarding plane support in a distributed system utilizing a three-tiered architecture. The tool receives one or more messages, wherein the one or more messages include a plurality of state information. The tool determines a distribution scope for the one or more messages based, at least in part, on the plurality of state information. The tool determines a destination endpoint ID for the one or more messages, wherein the destination endpoint ID identifies one or more switch units to receive the one or more messages. The tool sends the one or more messages to a forwarding plane agent for distribution to the one or more switch units based, at least in part, on the distribution scope and the destination endpoint ID.

Abstract: Embodiments presented herein describe techniques for isolating multicast and broadcast frames to a traffic class that is separate from a traffic class used for unicast frames. According to one embodiment, a network switch receives an incoming Ethernet virtual local area network (VLAN)-tagged frame. The switch evaluates priority bits of the VLAN tag of the frame. The switch also determines a type of frame (e.g., whether the frame is unicast, broadcast, multicast, or flood). Based on the priority field values and the type of the frame, the switch identifies a mapping of the frame to a particular traffic class. The network switch assigns the frame to the traffic class.

Abstract: Embodiments presented herein describe techniques for isolating multicast and broadcast frames to a traffic class that is separate from a traffic class used for unicast frames. According to one embodiment, a network switch receives an incoming Ethernet virtual local area network (VLAN)-tagged frame. The switch evaluates priority bits of the VLAN tag of the frame. The switch also determines a type of frame (e.g., whether the frame is unicast, broadcast, multicast, or flood). Based on the priority field values and the type of the frame, the switch identifies a mapping of the frame to a particular traffic class. The network switch assigns the frame to the traffic class.

Abstract: A tool for forwarding plane support in a distributed system utilizing a three-tiered architecture. The tool receives one or more messages, wherein the one or more messages include a plurality of state information. The tool determines a distribution scope for the one or more messages based, at least in part, on the plurality of state information. The tool determines a destination endpoint ID for the one or more messages, wherein the destination endpoint ID identifies one or more switch units to receive the one or more messages. The tool sends the one or more messages to a forwarding plane agent for distribution to the one or more switch units based, at least in part, on the distribution scope and the destination endpoint ID.

Abstract: A tool for forwarding plane support in a distributed system. The tool receives, by one or more computer processors, one or more messages. The tool determines, by one or more computer processors, a distribution scope for the one or more messages. The tool determines, by one or more computer processors, a destination endpoint ID for the one or more messages. The tool sends, by one or more computer processors, the one or more messages to one or more forwarding plane agents.

Abstract: A networking system, and more particularly an interface management subsystem, offers logical interface abstraction for networking system software. The networking system generally transmits data via a hardware interface. All software components in the control and forwarding plane use a Logical Interface (LIF) that is a logical representation of the hardware interface. A mapping occurs between the LIF and hardware interface used to transmit the data. Each LIF is represented by an LIF identifier used to store and retrieve logical interface records to and from shared memory accessible to all protocols and applications in the control and forwarding plane. The efficient storage and retrieval of such logical interface records allows for a global unique view of network interfaces, avoidance of data replication in each networking system software application's memory space, etc.

Abstract: In one embodiment, a service provider management device provides a plurality of redundant fabric motifs, each indicating a subgraph pattern of logical connections for network segments of a virtual data center, and receives virtual data center tenant selection of one or more of the redundant fabric motifs for particular pairs of data center segments of the virtual data center. After determining available physical data center resources that correspond to the tenant selection of one or more of the redundant fabric motifs for particular pairs of data center segments, logical connections may then be established between particular network segments for the virtual data center according to the available physical data center resources corresponding to the tenant selection of one or more of the redundant fabric motifs for particular pairs of data center segments.

Abstract: In one embodiment a method includes at first a network device, identifying an attribute of the first network device, selecting a function that defines how the attribute is to be summarized together with a same attribute of a second network device, generating a message that comprises a set of information comprising an identification of the attribute and the function, and sending the message to, e.g., a next higher node in a network hierarchy of which the network device is a part. Multiple such messages may be received at an aggregation node that then summarizes the attributes according to respective functions, and sends or publishes a summarized version of the attributes to a still next higher node in the network hierarchy.

Abstract: A networking system, and more particularly an interface management subsystem, offers logical interface abstraction for networking system software. The networking system generally transmits data via a hardware interface. All software components in the control and forwarding plane use a Logical Interface (LIF) that is a logical representation of the hardware interface. A mapping occurs between the LIF and hardware interface used to transmit the data. Each LIF is represented by an LIF identifier used to store and retrieve logical interface records to and from shared memory accessible to all protocols and applications in the control and forwarding plane. The efficient storage and retrieval of such logical interface records allows for a global unique view of network interfaces, avoidance of data replication in each networking system software application's memory space, etc.

Abstract: A tool for forwarding plane support in a distributed system. The tool receives, by one or more computer processors, one or more messages. The tool determines, by one or more computer processors, a distribution scope for the one or more messages. The tool determines, by one or more computer processors, a destination endpoint ID for the one or more messages. The tool sends, by one or more computer processors, the one or more messages to one or more forwarding plane agents.

Abstract: Embodiments presented herein describe techniques for isolating multicast and broadcast frames to a traffic class that is separate from a traffic class used for unicast frames. According to one embodiment, a network switch receives an incoming Ethernet virtual local area network (VLAN)-tagged frame. The switch evaluates priority bits of the VLAN tag of the frame. The switch also determines a type of frame (e.g., whether the frame is unicast, broadcast, multicast, or flood). Based on the priority field values and the type of the frame, the switch identifies a mapping of the frame to a particular traffic class. The network switch assigns the frame to the traffic class.