Abstract: Methods, systems, and computer programs are presented for switching a network packet. One method includes operations for receiving a packet having a media access control (MAC) address, and for switching the packet by a first packet switching device (PSD) when the MAC address is present in a first memory. Further, the method includes operations for transferring the packet to a second PSD when the MAC address is absent from the first memory and present in a second memory associated with the second PSD, and for transferring the packet to a third PSD when the MAC address is absent from the first memory and the second memory.

Abstract: Methods, systems, and computer programs are presented for splicing a client-server connection. One method includes an operation for splicing a client-server network connection by creating a first network connection between the client and a network device and a second network connection between the network device and the server. The method includes an operation for configuring in the network device a network processing unit (NPU) with a first and second offsets for the first and second network connections respectively. The incoming packets for the first and second network connections are then sent to the NPU for processing, which processes the packets in hardware to achieve low packet latency. The NPU adjusts the sequence number of the incoming packets of the first and second network connections based on the respective first and second offsets. The incoming packets are then sent to the destination after being processed.

Abstract: Methods, systems, and computer programs are presented for managing a global network topology. One method includes an operation for generating, by a network device, a local topology identifying which network entities are connected to each external port of the network device. The network device is configured to execute a network device operation system (ndOS), and the network device is configured to share information associated with the local topology with other ndOS network devices that execute ndOS. Further, the method includes an operation for receiving one or more remote local topologies from respective one or more ndOS network devices. The network device generates a global topology based on the local topology and the one or more remote local topologies, where the global topology is shared by the network device and the ndOS network devices executing ndOS, and the global topology identifies which entities are connected to one or more of the ndOS network devices.

Abstract: Methods, systems, and computer programs are presented for a switching server. One switching server includes a server, a switch module coupled to the server, and a switch controller coupled to the server and to the switch module. The server includes a processor executing an operating system that includes a network driver, and the network driver includes a first network device operating system (ndOS) program. Further, the switch module includes a switch fabric and input/output ports. The switch controller includes a processor and non-volatile storage, where the processor is configured to execute a second ndOS program. The first and second ndOS programs implement a global networking policy for a plurality of devices executing ndOS programs, the global networking policy including a definition for switching incoming packets through the plurality of devices executing the ndOS programs.

Abstract: Methods, systems, and computer programs are presented for managing network switching. A network device operating system (ndOS) program includes instructions for exchanging switching policy regarding switching network packets in a plurality of ndOS devices having ndOS programs. The first ndOS program is executed in a first ndOS device, and the switching policy is exchanged with other ndOS programs via multicast messages. Further, the ndOS program includes instructions for exchanging resource control messages with the other ndOS devices to implement service level agreements in the switching fabric, where the ndOS switching devices cooperate to enforce the service level agreements. Further yet, the ndOS program includes instructions for receiving changes to the switching policy, and instructions for propagating the received changes to the switching policy via message exchange between the ndOS programs. The ndOS devices are managed as a single logical switch that spans the plurality of ndOS devices.

Abstract: Methods, systems, and computer programs are presented for switching a network packet. One method includes operations for receiving a packet having a media access control (MAC) address, and for switching the packet by a first packet switching device (PSD) when the MAC address is present in a first memory. Further, the method includes operations for transferring the packet to a second PSD when the MAC address is absent from the first memory and present in a second memory associated with the second PSD, and for transferring the packet to a third PSD when the MAC address is absent from the first memory and the second memory.

Abstract: A system that includes a layer 2 fabric, a first host, and a second host. The layer 2 fabric includes a first network device and a second network device. The first host is connected to the first network device and includes a first virtual machine (VM). The second host is connected to the second network device and includes a second VM. The layer 2 fabric includes a virtual network including the first VM and the second VM and the first virtual network is managed by a virtual network manager executing on the first network device.

Abstract: Methods, systems, and computer programs are presented for providing a program to a server. One method includes an operation for receiving a request by a switching device from a first server, the request being for a boot image for booting the first server. In addition, the method includes operations for determining if the boot image is available from non-volatile storage in the switching device, and for forwarding the request to a second server when the boot image is absent from the non-volatile storage. Further, the method includes an operation for sending the boot image to the first server from the switching device when the boot image is available from the non-volatile storage.

Abstract: Methods, systems, and computer programs are presented for switching a network packet. One method includes operations for receiving a packet having a media access control (MAC) address, and for switching the packet by a first packet switching device (PSD) when the MAC address is present in a first memory. Further, the method includes operations for transferring the packet to a second PSD when the MAC address is absent from the first memory and present in a second memory associated with the second PSD, and for transferring the packet to a third PSD when the MAC address is absent from the first memory and the second memory.

Abstract: Methods, systems, and computer programs are presented for managing a switching layer fabric. A network device operating system (ndOS) program includes program instructions for exchanging switching policy regarding a switching of network packets in a plurality of ndOS switching devices having respective ndOS programs executing therein. The first ndOS program is executed in a first ndOS switching device, and the switching policy is exchanged with other ndOS programs via multicast messages. Further, the ndOS program includes program instructions for exchanging resource control messages with the other ndOS switching devices to implement service level agreements in the switching layer fabric, where the ndOS switching devices cooperate to enforce the service level agreements. Further yet, the ndOS program includes program instructions for receiving changes to the switching policy, and program instructions for propagating the received changes to the switching policy via message exchange between the ndOS programs.

Abstract: A network switch includes ports, memory, and a processor. The switch is operable to switch packets of a layer 2 network, and the memory is for storing a tunneling engine computer program. The processor executes the tunneling engine, where the processor identifies a second switch operable to switch layer-2 network packets. The identification includes detecting that the second switch is connected to the network switch over a layer 3 connection, and the tunneling engine creates a tunnel over the layer 3 connection between the switches to exchange layer-2 packets. The tunnels encapsulates and decapsulates the packets that are exchanged between the switches. When the processor determines that a packet from a first node to a second node that is connected to the second switch, the processor creates an encapsulation flow on the network switch to encapsulate packets from the first node to the second node over the tunnel.

Abstract: Methods, systems, and computer programs are presented for networking communications. One method includes an operation for receiving a packet in a first format by a virtual driver providing a communications interface of a first type (CI1), the first format being for CI1. Further, the method includes an operation for encapsulating the packet in a second format by a processor, the second format being for a communications interface of a second type (CI2) different from CI1. In addition, the method includes an operation for sending the encapsulated packet in the second format to a switch module. The switch module includes a switch fabric, one or more CI1 ports, and one or more CI2 ports, and the switch module transforms the packet back to the first format to send the packet in the first format to a CI1 network via one of the CI1 ports in the switch module.

Abstract: One networking device includes a switch module, a server, and a switch controller. The switch module has ports with a communications interface of a first type (CI1) and ports with a communications interface of a second type (CI2). The server, coupled to the switch module via a first CI2 coupling, includes a virtual CI1 driver, which provides a CI1 interface in the server, defined to exchange CI1 packets with the switch module via the first CI2 coupling. The virtual CI1 driver includes a first network device operating system (ndOS) program. The switch controller, in communication with the switch module via a second CI2 coupling, includes a second ndOS program controlling, in the switch module, a packet switching policy defining the switching of packets through the switch module or switch controller. The first and second ndOS programs exchange control messages to maintain a network policy for the switch fabric.

Abstract: One networking device includes a switch module, a server, and a switch controller. The switch module has ports with a communications interface of a first type (CI1) and ports with a communications interface of a second type (CI2). The server, coupled to the switch module via a first CI2 coupling, includes a virtual CI1 driver, which provides a CI1 interface in the server, defined to exchange CI1 packets with the switch module via the first CI2 coupling. The virtual CI1 driver includes a first network device operating system (ndOS) program. The switch controller, in communication with the switch module via a second CI2 coupling, includes a second ndOS program controlling, in the switch module, a packet switching policy defining the switching of packets through the switch module or switch controller. The first and second ndOS programs exchange control messages to maintain a network policy for the switch fabric.

Abstract: Methods, systems, and computer programs are presented for networking communications. One method includes an operation for receiving a packet in a first format by a virtual driver providing a communications interface of a first type (CI1), the first format being for CI1. Further, the method includes an operation for encapsulating the packet in a second format by a processor, the second format being for a communications interface of a second type (CI2) different from CI1. In addition, the method includes an operation for sending the encapsulated packet in the second format to a switch module. The switch module includes a switch fabric, one or more CI1 ports, and one or more CI2 ports, and the switch module transforms the packet back to the first format to send the packet in the first format to a CI1 network via one of the CI1 ports in the switch module.

Abstract: Systems, methods, and computer programs are presented for managing network traffic. A network switch includes a switch fabric and a resource coherency and analytics engine (RCAE) coupled to the switch fabric. The RCAE includes one or more virtualizable resource groups (VRGs) for managing network traffic flow across a plurality of network switches on the network. Further, the RCAE is operable to add network entities to each VRG, add flows to each VRG, and add other VRGs to each VRG. A virtualizable resource control list (VRCL), associated with each VRG, identifies which network entities in the VRG can communicate with each other, which network entities in the VRG can communicate with network entities in other VRGs, and a guaranteed bandwidth for the VRG associated with the VRCL. Furthermore, the RCAE is operable to exchange messages with other RCAEs in other network switches to implement traffic policies defined by each VRCL.

Abstract: Systems, methods, and computer programs are presented for managing network traffic. A network switch includes a switch fabric and a resource coherency and analytics engine (RCAE) coupled to the switch fabric. The RCAE includes one or more virtualizable resource groups (VRGs) for managing network traffic flow across a plurality of network switches on the network. Further, the RCAE is operable to add network entities to each VRG, add flows to each VRG, and add other VRGs to each VRG. A virtualizable resource control list (VRCL), associated with each VRG, identifies which network entities in the VRG can communicate with each other, which network entities in the VRG can communicate with network entities in other VRGs, and a guaranteed bandwidth for the VRG associated with the VRCL. Furthermore, the RCAE is operable to exchange messages with other RCAEs in other network switches to implement traffic policies defined by each VRCL.

Abstract: A computer readable medium that includes computer readable program code embodied therein. The computer readable medium causes the computer system to receive, by a data link rule enforcer, a packet from a packet source of the packets, and obtain a data link rule applying to a data link. The data link is operatively connected to the packet source, and the data link is associated with a media access control (MAC) address. The computer readable medium further causes the computer system to determine, by the data link rule enforcer, whether the packet complies with the data link rule, and drop, by the data link rule enforcer, the packet when the packet fails to comply with the data link rule.

Abstract: Systems, methods, and computer programs are presented for managing network traffic. A network switch includes a switch fabric and a resource coherency and analytics engine (RCAE) coupled to the switch fabric. The RCAE includes one or more virtualizable resource groups (VRGs) for managing network traffic flow across a plurality of network switches on the network. Further, the RCAE is operable to add network entities to each VRG, add flows to each VRG, and add other VRGs to each VRG. A virtualizable resource control list (VRCL), associated with each VRG, identifies which network entities in the VRG can communicate with each other, which network entities in the VRG can communicate with network entities in other VRGs, and a guaranteed bandwidth for the VRG associated with the VRCL. Furthermore, the RCAE is operable to exchange messages with other RCAEs in other network switches to implement traffic policies defined by each VRCL.

Abstract: A system for distributing network traffic among direct hardware access datapaths, comprising: a processor; one or more activated PNICs; a host operating system; and a virtual machine (VM). Each activated PNIC sends and receives data packets over a network. Each activated PNIC is configured with a virtual function. The VM includes a VNIC and a virtual link aggregator configured to maintain a list identifying each activated PNIC. Virtual function mappings for the VM associate the VM with virtual functions for the activated PNICs. The virtual link aggregator selects the first activated PNIC for servicing a network connection and determines a virtual function for the first activated PNIC. The VNIC for the first activated PNIC uses the virtual function to directly transfer network traffic for the network connection between the VM and the first activated PNIC.