Abstract: Provided are a security protection method and apparatus. The security protection method includes: generating software versions based on diversity compilation, and constructing a software version pool using the software versions as heterogeneous functional equivalents; and dynamically deploying a software version on a network element according to the software version pool.

Abstract: Provided are a security protection method and apparatus. The security protection method includes: generating software versions based on diversity compilation, and constructing a software version pool using the software versions as heterogeneous functional equivalents; and dynamically deploying a software version on a network element according to the software version pool.

Abstract: Disclosed is an NAT implementation system, comprising: a controller and an Openflow switch. The Controller delivers a flow table and an improved group table. The Openflow switch receives the flow table and the improved group table, and matches, according to an address translation matching rule recorded in the flow table, a data packet that address translation needs to be performed on; and performs translation between a private address and a public IP address according to an address translation rule recorded in the improved group table, and sends the data packet out by using an address after translation. Further disclosed are an NAT implementation method and Openflow switch. By using the present invention, the flow table and the improved group table only need to be sent to the Openflow switch at once, and the Openflow switch does not need to frequently interact with the Controller, so that a forwarding delay of the data packet is shortened and the network transmission efficiency is improved.

Abstract: A method for implementing a service and a service system, wherein the method includes: storing a service node address of a service in a peer-to-peer (P2P) node corresponding to a service identifier of the service in a P2P overlay network; a user equipment sending a service request including the service identifier to the P2P overlay network after acquiring the service identifier; a P2P node in the P2P overlay network receiving the service request sent by the user equipment, then acquiring the service node address from the P2P overlay network according to the service identifier and sending the service request to a corresponding service node according to the service node address. The service system includes a user equipment, a service node and a P2P overlay network. The present invention provides service routing based on the P2P overlay network.