Abstract: A network device employs a transmitter configured to transmit a registration request to a software defined network (SDN) controller. The network device employs a receiver to receive a reply from the SDN controller. The reply indicates a plurality of provider edge (PE) devices coupled to a carrier network. The network device employs a processor to cause the transmitter and receiver to establish a plurality of asymmetric connections to a virtual private network (VPN) operating over a wide area network (WAN) via the PE devices.

Abstract: Techniques are presented to stitch existing virtual private networks (VPNs), such as MPLS based VPNs, with virtual private clouds (VPCs) in public cloud data centers. The stitching architecture can be realized by configuring a virtual routing application (VRA) in the VPCs and configuring virtual routing applications and a virtual routing application controller in the existing VPN. For VPCs in public clouds that do not have a VRA, traffic can be default routed to VPCs with a VRA.

Abstract: A method for performing virtual private cloud (VPC) routing across multiple public cloud environments. In an embodiment, the method creates a first virtual routing agent (VRA) for a first VPC of a first public cloud. The method sends a registration request to a VRA controller, wherein the registration request comprises a data structure that includes communication parameters of the first VRA. The method receives the communication parameters of other VRAs for other VPCs located in other public cloud environments from the VRA controller. The method uses the communication parameters of the other VRAs for overlay routing of data packets from the first VPC of the first public cloud to other VPCs of other public clouds via the other VRAs of the other VPCs.

Abstract: A method, an apparatus, and a system are provided for load balancing of a service chain. The method includes: receiving, by a flow classifier, a service chain selection and control policy sent by a policy and charging rules function (PCRF) unit; hashing, by the flow classifier according to a hash quantity, a service flow corresponding to a service chain identifier, to obtain multiple subflows, and adding the service chain identifier and hashing factors to packets of the subflows, where different subflows correspond to different hashing factors; and sending, by the flow classifier, the packets of the subflows after the service chain identifier and the hashing factors are added, to a forwarding device.

Abstract: A method, an apparatus, and a system are provided for load balancing of a service chain. The method includes: receiving, by a flow classifier, a service chain selection and control policy sent by a policy and charging rules function PCRF unit; hashing, by the flow classifier according to a hash quantity, a service flow corresponding to a service chain identifier, to obtain multiple subflows, and adding the service chain identifier and hashing factors to packets of the subflows, where different subflows correspond to different hashing factors; and sending, by the flow classifier, the packets of the subflows after the service chain identifier and the hashing factors are added, to a forwarding device.

Abstract: A method implemented in a network engine comprising receiving, by a service function (SF) orchestrator in the network engine, a registration request message from a third-party SF manager requesting registration of a SF comprising one or more SF instances in a network, wherein the registration request message comprises vendor identification information identifying a vendor of the SF and SF identification information identifying the SF, receiving a capability information message from the third-party SF manager indicating vendor-specific capability information associated with the SF, receiving a service request message from a service client requesting a network service and one or more policies for the service, generating the network service by utilizing the one or more SF instances according to the one or more policies and the vendor-specific capability information, and sending the one or more policies to the one or more SF instances.

Abstract: Disclosed are a flow classifier, policy and charging rules function unit and controller. The flow classifier receives a service chain selection control policy sent by a policy and charging rules function unit. The service chain selection control policy includes a corresponding relation between an application type and an identifier of a service chain. The service chain is a path formed by a forwarding device and a value-added service device both of which a service flow with the application type needs to pass through. The flow classifier detects the service flow with the application type based on the service chain selection control policy and adds the identifier of the service chain to a message of the service flow. The flow classifier sends the message of the service flow with the added identifier of the service chain to a forwarding device directly connected to the flow classifier.

Abstract: A method implemented by a global resource orchestrator (GRO) includes receiving, multiple virtual network function (VNF) resource container (RC) table update messages comprising multiple VNF RC tables from multiple VNF forwarders, where each of the VNF RC tables comprises information about multiple VNF instances (VNFIs), receiving VNF RC connectivity matrix update messages from the VNF forwarders, where each of the VNF RC connectivity matrix update message indicates which of the VNF RCs that a VNF forwarder sending the VNF RC connectivity matrix update message is connected to.

Abstract: Disclosed are a flow classifier, policy and charging rules function unit and controller. The flow classifier receives a service chain selection control policy sent by a policy and charging rules function unit. The service chain selection control policy includes a corresponding relation between an application type and an identifier of a service chain. The service chain is a path formed by a forwarding device and a value-added service device both of which a service flow with the application type needs to pass through. The flow classifier detects the service flow with the application type based on the service chain selection control policy and adds the identifier of the service chain to a message of the service flow. The flow classifier sends the message of the service flow with the added identifier of the service chain to a forwarding device directly connected to the flow classifier.

Abstract: A network component comprising a receiver configured to receive an outgoing frame from a local host, a logic circuit configured to map a destination address (DA) for a target host in the outgoing frame to a DA for a target location of the target host and encapsulate the outgoing frame using the DA for the target location, and a transmitter configured to receive a pre-encapsulated outgoing frame from a local switch, and send the pre-encapsulated outgoing frame to a gateway at a target location, wherein the transmitter does not encapsulate frames received from local switches and decapsulates an incoming frame from a remote gateway destined towards local hosts.

Abstract: An apparatus including a service network and a plurality of Layer 2 sites connected by the service network via a plurality of gateways is provided. The gateways are configured to map a plurality of Internet Protocol (IP) addresses of a plurality of hosts under a plurality of virtual local area networks (VLANs) in a plurality of Layer 2 sites to a plurality of addresses (e.g., MAC or others) of the corresponding other gateways, inform the other gateways in other Layer 2 sites of the IP addresses mapped under each of the VLANs in the local Layer 2 sites, and forward data frames originated from the hosts in the local Layer 2 sites to the other gateways in the other Layer 2 sites when destinations of the data frames are residing in the other Layer 2 sites.

Abstract: A method implemented by a controller in a software defined network (SDN), the method comprising sending, to an overlay edge node, a query message comprising a client specific multicast address, receiving, from the overlay edge node, one or more report messages corresponding to the query message, wherein each of the one or more report messages comprises an address of each of one or more virtual machines (VMs) coupled to the overlay edge node, and updating membership of a multicast group, which is identified by the client specific multicast address, such that the one or more VMs are members in the updated membership of the multicast group.

Abstract: A method implemented by a controller in a software defined network (SDN), the method comprising sending, to an overlay edge node, a query message comprising a client specific multicast address, receiving, from the overlay edge node, one or more report messages corresponding to the query message, wherein each of the one or more report messages comprises an address of each of one or more virtual machines (VMs) coupled to the overlay edge node, and updating membership of a multicast group, which is identified by the client specific multicast address, such that the one or more VMs are members in the updated membership of the multicast group.

Abstract: A network device employs a transmitter configured to transmit a registration request to a software defined network (SDN) controller. The network device employs a receiver to receive a reply from the SDN controller. The reply indicates a plurality of provider edge (PE) devices coupled to a carrier network. The network device employs a processor to cause the transmitter and receiver to establish a plurality of asymmetric connections to a virtual private network (VPN) operating over a wide area network (WAN) via the PE devices.

Abstract: When there is a change from a first service chain instance path to a second service chain instance path, the head-end node of the second service chain instance path is notified to include information that specifies the second service chain instance path in data packets to be routed on the second service chain instance path. That information is used to route those data packets until the nodes in the second service chain instance path complete installation of a new steering policy. When those nodes have installed the new steering policy, the information that specifies the second service chain instance path may no longer be included in data packets, and the steering policy is then used to route the data packets.

Abstract: A method implemented by a global resource orchestrator (GRO) includes receiving, multiple virtual network function (VNF) resource container (RC) table update messages comprising multiple VNF RC tables from multiple VNF forwarders, where each of the VNF RC tables comprises information about multiple VNF instances (VNFIs), where each of the VNFIs is an instance of a VNF executable at one of the VNF RCs, receiving VNF RC connectivity matrix update messages from the VNF forwarders, where each of the VNF RC connectivity matrix update message indicates which of the VNF RCs that a VNF forwarder sending the VNF RC connectivity matrix update message is connected to, generating, a node-VNF RC connectivity matrix based on the multiple VNF RC connectivity matrix update messages, where the matrix indicates which VNF RCs that each VNF forwarder has access to, and storing the matrix and the VNF RC tables.

Abstract: A network component including a receiver configured to receive a plurality of Internet Protocol (IP) addresses for a plurality of hosts in a plurality of external Layer 2 networks located at a plurality of physical locations and interconnected via a service, a logic circuit configured to map the IP addresses of the hosts in the external Layer 2 networks to a plurality of Media Access Control (MAC) addresses of a plurality of corresponding gateways in the same external Layer 2 networks, and a transmitter configured to send to the external Layer 2 networks a plurality of a plurality of IP addresses for a plurality of local hosts in a local Layer 2 network coupled to the external Layer 2 networks via the service.

Abstract: A method implemented by a path computation element (PCE), comprising receiving a path computation request to compute a network path for a source-destination pair in a service chain (SC) network, wherein the path computation request comprises at least one network routing constraint and a service function (SF) input associated with a plurality of SFs, computing a plurality of network paths through the network for the source-destination pair according to the network routing constraint, selecting at least a first of the network paths according to the SF input, and sending a path computation response indicating at least the first network path in response to the received path computation request.

Abstract: Service function chaining is a sequence of service function instances that traffic flows need to traverse through in order. Those service function instances are not required to reside on the direct path and traffic flow, but steered through network nodes. Service function instances and network nodes process the packets that carry a service function chain (SFC) header. The packets are encapsulated by a virtual network overlay header and forwarded through the service function instances in an SFC. The SFC header in specific format will prompt the network nodes to re-route the packets in the traffic flow using destination based forwarding or path based forwarding method in the packet network as well as an SDN controller and/or in-band control plane, and able to carry the metadata with the packets.

Abstract: A method implemented by a network controller, comprising receiving an address filter from a service chain orchestrator, wherein the address filter comprises a plurality of service instance (SI) addresses associated with a plurality of SIs in a network, obtaining network topology information from a plurality of service function (SF) forwarders controlled by the network controller, wherein the network topology information indicates a plurality of network devices communicatively coupled to the plurality of controlled SF forwarders, and wherein at least some of the network devices are SI hosting devices, and generating a service chain topology map by building mappings between at least some of the plurality of controlled SF forwarders, the SI hosting devices, and the plurality of SIs according to the network topology information and the address filter.