Abstract: An attack stream identification method, apparatus, and device on a software defined network is presented, where an invalid stream filter table is stored in a switch, and the method includes the steps of the switch receives a data packet of a data stream and searches, according to a characteristic value of the data packet, the invalid stream filter table for a state field of a filter entry; when the state field is a suspected attack stream state or a non-attack stream state, the switch sends a report message to a controller, determines a rate value for sending the report message to the controller, and fills the rate value in a rate field of the filter entry; and when the rate value is greater than a preset rate threshold, the switch changes the state field of the filter entry to an attack stream state.

Abstract: A data reading method, a data processing device, and a data processing system are provided. The method, executed by a first control node, includes receiving a reading message forwarded by a data switching device, where the reading message is used to instruct the first control node to read first data, and the reading message is sent by a second control node to the data switching device; if a data status identifier of the first data in a first storage node is a valid identifier, reading the first data from the first storage node, and sending the read first data to the data switching device, so that the data switching device forwards the read first data to the second control node, where the valid identifier indicates that the first data on the first storage node is available. The present application ensures that the latest first data in the node group is read.

Abstract: A data reading method, a data processing device, and a data processing system are provided. The method, executed by a first control node, includes receiving a reading message forwarded by a data switching device, where the reading message is used to instruct the first control node to read first data, and the reading message is sent by a second control node to the data switching device; if a data status identifier of the first data in a first storage node is a valid identifier, reading the first data from the first storage node, and sending the read first data to the data switching device, so that the data switching device forwards the read first data to the second control node, where the valid identifier indicates that the first data on the first storage node is available. The present application ensures that the latest first data in the node group is read.

Abstract: An attack stream identification method, apparatus, and device on a software defined network is presented, where an invalid stream filter table is stored in a switch, and the method includes the steps of the switch receives a data packet of a data stream and searches, according to a characteristic value of the data packet, the invalid stream filter table for a state field of a filter entry; when the state field is a suspected attack stream state or a non-attack stream state, the switch sends a report message to a controller, determines a rate value for sending the report message to the controller, and fills the rate value in a rate field of the filter entry; and when the rate value is greater than a preset rate threshold, the switch changes the state field of the filter entry to an attack stream state.

Abstract: An apparatus comprising a Converged Port Controller (CPC) comprising a plurality of first ports and a plurality of second ports, and an Ethernet Switch Fabric (ESF) coupled to the second ports, wherein the CPC is configured to receive a plurality of Fiber Channel over Ethernet (FCoE) frames on the first ports, modify at least some of the FCoE frames, thereby producing modified FCoE frames, and transmit the FCoE frames on the second ports. An apparatus comprising at least one processor configured to implement a method comprising receiving a plurality of FCoE frames, a plurality of Fiber Channel (FC) frames, and a plurality of Ethernet frames, modifying the FCoE frames, thereby producing modified FCoE frames, encapsulating the FC frames in an Ethernet format, thereby producing a plurality of second FCoE frames, and switching the modified FCoE frames, the second FCoE frames, and the Ethernet frames using an Ethernet switch fabric.

Abstract: An apparatus comprising a Converged Port Controller (CPC) comprising a plurality of first ports and a plurality of second ports, and an Ethernet Switch Fabric (ESF) coupled to the second ports, wherein the CPC is configured to receive a plurality of Fiber Channel over Ethernet (FCoE) frames on the first ports, modify at least some of the FCoE frames, thereby producing modified FCoE frames, and transmit the FCoE frames on the second ports. An apparatus comprising at least one processor configured to implement a method comprising receiving a plurality of FCoE frames, a plurality of Fiber Channel (FC) frames, and a plurality of Ethernet frames, modifying the FCoE frames, thereby producing modified FCoE frames, encapsulating the FC frames in an Ethernet format, thereby producing a plurality of second FCoE frames, and switching the modified FCoE frames, the second FCoE frames, and the Ethernet frames using an Ethernet switch fabric.

Abstract: A method for Generic Framing Procedure (GFP) encapsulation includes: cascading a plurality of protocol data units to form a cascaded packet; and encapsulating the cascaded packet to obtain a GFP frame. A device for GFP encapsulation includes a cascading module, for cascading a plurality of protocol data units to form a cascade packet, and a GFP encapsulation module, for encapsulating the cascade packet to obtain a GFP frame. According to the method and the device, the occupation rate of the payload in a single GFP frame is increased and thus transmission efficiency is improved.

Abstract: A method for implementing multicast based on a Multi-Service Transport Platform (MSTP), by establishing a Label Switch Path (LSP) multicast tree branch from a source network node based on the MSTP to multiple destination network nodes. According to the LSP multicast tree branch, data packets can be transmitted in multicast manner from the source network node to multiple destination network nodes, so that the procedure of network node's transmitting the data packets to multiple parts is simplified. In the present invention embodiment, LSP is utilized and multiple protocols label switch is supported, so that service protection function, flow management and flow engineering can be implemented and good QoS guarantee can be provided, which is suitable for large-scale network construction; while the multicast method is simplified and effective, operational and controllable management upon communication networks can be implemented to provide reliable QoS guarantee for network terminals.