Abstract: In a method for providing communication integrity within a distributed database computer system, a first node of a plurality of nodes transmits a change notification to a second node of the plurality of nodes. The change notification indicates that the first node has changed from a first version to a second version. The first node receives at least one change confirmation from the second node. The change confirmation confirms acknowledgment of the change notification by the second node and by a third node of the plurality of nodes. The first node updates a version table of the first node to show that the second node and the third node know that the first node has changed from the first version to the second version.

Abstract: Embodiments of the invention provide a method for load balancing a networking system comprising multiple computing nodes. The method comprises maintaining one or more data sets on at least one computing node. The method further comprises receiving, from each computing node, a load information unit for the computing node, wherein the load information unit relates to resource usage on the computing node. For each computing node, the method determines whether the load information for the computing node exceeds a corresponding load threshold for the computing node. A data set on at least one computing node is transferred to another computing node when the load information for the at least one computing node exceeds a corresponding load threshold for the at least one computing node.

Abstract: Embodiments of the invention provide a method for data replication in a networking system comprising multiple computing nodes. The method comprises maintaining a data set on at least two computing nodes of the system. The method further comprises receiving a data update request for the data set, wherein the data update request includes a data update for the data set. The data set on the at least two computing nodes is updated based on the data update request received.

Abstract: In a method for providing communication integrity within a distributed database computer system, a first node of a plurality of nodes transmits a change notification to a second node of the plurality of nodes. The second node is a neighbor of the first node. The first node receives at least one change confirmation from the second node. The change confirmation confirms acknowledgment of the change notification by the second node and by a third node of the plurality of nodes. The third node is not a neighbor of the first node. Responsive to receiving the at least one change confirmation, the first node determines that all the plurality of nodes have acknowledged the change notification.

Abstract: In the context of a client sub-system that requires the use of directory services on behalf of a tenant (such as an overlay tenant), learning an identity of a server node, that can provide such directory services by: (i) sending, by the client sub-system to a first server node, a first directory service request for directory service for a first tenant; (ii) receiving, by the client sub-system, a first acknowledgement from a second server node; and (iii) learning, by the client sub-system, that the second server node can provide directory service for the first tenant based upon the first acknowledgement.

Abstract: Management of virtual resources may be provided by interconnecting a plurality of virtual appliances with common executable software services. A data packet may be sent through multiple virtual appliances invoking services within each if rules stored within respective virtual appliances correspond to a request for service in the data packet. The data packet may be passed through multiple virtual appliances prior to being returned to a hypervisor.

Abstract: In the context of a client sub-system that requires the use of directory services on behalf of a tenant (such as an overlay tenant), learning an identity of a server node, that can provide such directory services by: (i) sending, by the client sub-system to a first server node, a first directory service request for directory service for a first tenant; (ii) receiving, by the client sub-system, a first acknowledgement from a second server node; and (iii) learning, by the client sub-system, that the second server node can provide directory service for the first tenant based upon the first acknowledgement.

Abstract: A distributed system includes first-tier entities, and a master entity in communication with each first-tier entity. The master entity provides a single access point through which an administrator can submit commands to manage all entities. The master entity maintains a table of virtual slots. Each virtual slot points to one of the first-tier entities, and each first-tier entity is pointed to by at least one virtual slot. The processor runs an RPC (remote procedure call) client to submit RPC requests to the first-tier entities, and determines a destination first-tier entity for a given RPC request in response to which virtual slot the administrator submits a command. The distributed system can include second-tier entities, each indirectly communicating with the master entity through a first-tier entity. The table has a virtual slot for each second-tier entity, which points to the first-tier entity acting as proxy for the second-tier entity.

Abstract: Embodiments of the invention provide a method for load balancing a networking system comprising multiple computing nodes. The method comprises maintaining one or more data sets on at least one computing node. The method further comprises receiving, from each computing node, a load information unit for the computing node, wherein the load information unit relates to resource usage on the computing node. For each computing node, the method determines whether the load information for the computing node exceeds a corresponding load threshold for the computing node. A data set on at least one computing node is transferred to another computing node when the load information for the at least one computing node exceeds a corresponding load threshold for the at least one computing node.

Abstract: To partition a distributed fabric system, at least one system port is allocated to each switching domain of multiple non-overlapping switching domains in a distributed fabric system. Multiple different look-up tables are produced, wherein each look-up table corresponds to a different switching domain of the multiple non-overlapping switching domains in the distributed fabric system. Each system port is associated with the look-up table of the multiple look-up tables that corresponds to the switching domain to which that system port is allocated. The look-up table associated with each system port has at least one table entry for each other system port allocated to the same switching domain as that system port.

Abstract: In a distributed network environment, a first virtual machine sends a first virtual machine control information to a first network system. The first network system sends a first control information to a first network control system in response to receiving the first virtual machine control information. The first network control system sends a portion of the first control information to a number of network systems. The first network control system sends a second control information to the first network system. The first virtual machine sends a first packet to the first network system which generates a unicast packet using a portion of the first packet and a portion of the second control information. A second network system receives and processes the unicast packet. The second network system sends a copy of the processed unicast packet to a second virtual machine associated with a second tenant.

Abstract: A distributed fabric system comprises a plurality of independent network elements interconnected by inter-switch links and assigned to a same group. Each network element includes a switching chip, a processor, and memory storing program code that is executed by the processor. The program code of each network element includes a device configuration (DC) stacking module and a switch discovery protocol (SDP) module. The SDP module of each network element, when executed, discovers each other network element in the group and elects one of the network elements as a master network element. The SDP module of the master network element, when executed, sends messages to the DC-stacking module of the master network element. Each sent message identifies one of the network elements in the group. The DC stacking module of the master network element, when executed, maintains a record of all network elements that are currently members in the group.

Abstract: Implementation of a secure network may be provided by analyzing packet traffic for sensitive information. Network processing elements found to be processing sensitive information may be classified as needing higher security. The classified network processing elements may be moved into a group of secure network processing elements.

Abstract: A distributed fabric system has distributed line card (DLC) chassis and scaled-out fabric coupler (SFC) chassis. Each DLC chassis includes a network processor and fabric ports. Each network processor of each DLC chassis includes a fabric interface in communication with the DLC fabric ports of that DLC chassis. Each SFC chassis includes a fabric element and fabric ports. A communication link connects each SFC fabric port to one DLC fabric port. Each communication link includes cell-carrying lanes. Each fabric element of each SFC chassis collects per-lane statistics for each SFC fabric port of that SFC chassis. Each SFC chassis includes program code that obtains the per-lane statistics collected by the fabric element chip of that SFC chassis. A network element includes program code that gathers the per-lane statistics collected by each fabric element of each SFC chassis and integrates the statistics into a topology of the entire distributed fabric system.

Abstract: A distributed fabric system has distributed line card (DLC) chassis and scaled-out fabric coupler (SFC) chassis. Each DLC includes a network processor and fabric ports. Each network processor of each DLC includes a fabric interface in communication with the fabric ports of that DLC. Each SFC includes at least one fabric element and SFC fabric ports. A fabric communication link connects each SFC fabric port to one DLC fabric port. Each fabric communication link includes cell-carrying lanes. Each fabric element of each SFC detects connectivity between each SFC fabric port of that SFC and one DLC fabric port over a fabric communication link. Each SFC includes program code that reads connectivity matrix from fabric element chips and sends connection information corresponding to the detected connectivity from that SFC to a central agent. A network element includes the central agent, which, when executed, constructs a topology of the distributed fabric system from the connection information sent from each SFC.

Abstract: A distributed fabric system comprises a plurality of independent network elements interconnected by inter-switch links and assigned to a same group. Each network element includes a switching chip, a processor, and memory storing program code that is executed by the processor. The program code of each network element includes a device configuration (DC) stacking module and a switch discovery protocol (SDP) module. The SDP module of each network element, when executed, discovers each other network element in the group and elects one of the network elements as a master network element. The SDP module of the master network element, when executed, sends messages to the DC-stacking module of the master network element. Each sent message identifies one of the network elements in the group. The DC stacking module of the master network element, when executed, maintains a record of all network elements that are currently members in the group.

Abstract: To partition a distributed fabric system, at least one system port is allocated to each switching domain of multiple non-overlapping switching domains in a distributed fabric system. Multiple different look-up tables are produced, wherein each look-up table corresponds to a different switching domain of the multiple non-overlapping switching domains in the distributed fabric system. Each system port is associated with the look-up table of the multiple look-up tables that corresponds to the switching domain to which that system port is allocated. The look-up table associated with each system port has at least one table entry for each other system port allocated to the same switching domain as that system port.

Abstract: A distributed fabric system has distributed line card (DLC) chassis and scaled-out fabric coupler (SFC) chassis. Each DLC chassis includes a network processor and fabric ports. Each network processor of each DLC chassis includes a fabric interface in communication with the DLC fabric ports of that DLC chassis. Each SFC chassis includes a fabric element and fabric ports. A communication link connects each SFC fabric port to one DLC fabric port. Each communication link includes cell-carrying lanes. Each fabric element of each SFC chassis collects per-lane statistics for each SFC fabric port of that SFC chassis. Each SFC chassis includes program code that obtains the per-lane statistics collected by the fabric element chip of that SFC chassis. A network element includes program code that gathers the per-lane statistics collected by each fabric element of each SFC chassis and integrates the statistics into a topology of the entire distributed fabric system.

Abstract: A switch includes network ports and a network processor with a fabric interface that provides SerDes (Serializer/Deserializer) channels. The network processor divides each packet received over the network ports into cells and distributes the cells across the SerDes channels. Fabric ports of the switch communicate with the fabric interface to transmit cells to and receive cells from the fabric interface. The switch is selectively configurable as a standalone switch by connecting each fabric port of the switch to another of the fabric ports of the switch, as a member of a switch stack by connecting each fabric port of the switch to a different other switch through one fabric port of that other switch, or as a member of a distributed fabric system by connecting each fabric port of the switch to a different scaled-out fabric coupler (SFC) chassis by an SFC fabric port of that SFC chassis.

Abstract: Implementation of a secure network may be provided by analyzing packet traffic for sensitive information. Network processing elements found to be processing sensitive information may be classified as needing higher security. The classified network processing elements may be moved into a group of secure network processing elements.