Abstract: In one embodiment, a switch includes a processor and logic integrated with and/or executable by the processor to receive details about which link aggregation (LAG) information about a first peer switch will be exchanged with the switch, send to the first peer switch, prior to receiving the LAG information about the first peer switch, details about which LAG information about the switch will be exchanged with the first peer switch, receive the LAG information about the first peer switch, store the LAG information about the first peer switch, and use the LAG information about the first peer switch and the LAG information about the switch to determine load balancing across one or more connections between the switch and the first peer switch.

Abstract: A clustered network may include a plurality of switch boxes where a master switch box may communicate and control hardware devices in remote switch boxes. The switch boxes in the network may each include a multiplexer, for example, a field programmable array (FPGA) that may process message requests related to hardware devices of a switch box. If the hardware device is in a remote switch box, then the FPGA of the master switch box may process the status data from the remote switch box so that a local processor in the master switch box can read the status data.

Abstract: A tool for supporting load distribution across one or more logical switch routers in a distributed system. The tool includes a first software module configurable to launch and monitor one or more application processes within the one or more logical switch routers in the distributed system. The tool includes a second software module configurable to manage a plurality of system information for the one or more logical switch routers in the distributed system. The tool includes a third software module configurable to control and manage a plurality of system resources in the distributed system. The tool includes a fourth software module configurable to control and manage a plurality of physical ports and a plurality of virtual ports in the distributed system. The tool includes a fifth software module configurable to manage a plurality of load distribution policies for the one or more logical switch routers in the distributed system.

Abstract: According to one embodiment, a system includes at least one switching distributed line card (DLC) configured to apply Access Control Lists (ACLs) on each switching interface of the at least one switching DLC to direct certain received packets to at least one appliance DLC to have deep packet inspection services performed on the certain received packets, and at least one central switch fabric coupler (SFC) in communication with the at least one switching DLC, where the at least one appliance DLC and the at least one switching DLC are connected to the at least one central SFC. Other systems, methods and computer program products for providing scalable virtual appliance cloud (SVAC) services are described in more embodiments.

Abstract: In one embodiment, an apparatus includes a memory, a hardware processor, and logic integrated with and/or executable by the processor. The logic is configured to receive one or more software defined network (SDN) routes dictating a path through a network comprising a plurality of devices. The logic is also configured to store the one or more SDN routes to the memory along with one or more traditional routes learned by the apparatus and/or configured by an administrator, and indicate the one or more SDN routes as being of a type different from the traditional routes. Moreover, the logic is configured to receive a priority ordering for a plurality of routes stored in the memory from the SDN controller, the plurality of routes including at least one SDN route, and construct a route information base (RIB) based on the plurality of routes and the priority ordering.

Abstract: A scheduler may run a script. The script may have a plurality of configuration commands for a network device. A first configuration command of the plurality of configuration commands may be called to begin. A script engine may determine whether a termination request has been received. The script engine may run the first configuration command when it is determined the termination request is not received. While the first configuration command is running, the script engine may receive the termination request. Instead of terminating immediately upon detection of a termination request, the first configuration command may complete.

Abstract: A tool for forwarding plane support in a distributed system utilizing a three-tiered architecture. The tool receives one or more messages, wherein the one or more messages include a plurality of state information. The tool determines a distribution scope for the one or more messages based, at least in part, on the plurality of state information. The tool determines a destination endpoint ID for the one or more messages, wherein the destination endpoint ID identifies one or more switch units to receive the one or more messages. The tool sends the one or more messages to a forwarding plane agent for distribution to the one or more switch units based, at least in part, on the distribution scope and the destination endpoint ID.

Abstract: According to one embodiment, a method includes performing functionality of a management plane and a control plane for a switch system using a processor of an external host coupled to the switch system via one or more peripheral component interconnect express (PCIe) ports. The method also includes providing a direct memory access (DMA) facility between the external host and switching logic of the switch system. The switch system includes a PCIe interface block coupled to PCIe ports configured to couple to external PCIe devices. Also, the PCIe interface block includes logic configured to provide DMA for each PCIe lane thereof. The switch system also includes multiple switched Ethernet ports configured to couple to one or more external Ethernet devices and switching logic configured to switch between the multiple switched Ethernet ports and the PCIe ports using DMA and a local processor coupled to the PCIe interface block.

Abstract: In one embodiment, a computer program product includes a computer readable storage medium having program instructions embodied therewith. The embodied program instructions are readable/executable by a processor to receive, by the processor, a packet via a network fabric, the network fabric having a plurality of interconnected fabric switches. The embodied program instructions are also readable/executable by the processor to determine, by the processor, a path through the network fabric by consulting a source-routing table. Moreover, the embodied program instructions are readable/executable by the processor to store, by the processor, source-routing information to a packet header for the packet, the source-routing information including the path. In addition, the embodied program instructions are readable/executable by the processor to send, by the processor, the packet according to an indication in the source-routing information.

Abstract: Management and provisioning of networking traffic may be provided by bundling virtual channels into a group. A global policy may be applied to the bundle so that virtual ports providing services to a client may be managed by referring to the global policy of the bundle. The channels comprising the bundle may span multiple physical ports and in some cases, multiple physical switches. Thus, policy management may be avoided at the port level and instead, be handled as groups of channels implementing a client service.

Abstract: A tool for forwarding plane support in a distributed system. The tool receives, by one or more computer processors, one or more messages. The tool determines, by one or more computer processors, a distribution scope for the one or more messages. The tool determines, by one or more computer processors, a destination endpoint ID for the one or more messages. The tool sends, by one or more computer processors, the one or more messages to one or more forwarding plane agents.

Abstract: An improved system and method for network switching that provides the ability to automatically and seamlessly migrate policies for network hosts under certain conditions to local or remote switch ports. The improved switch automatically migrates switch policies for virtual and physical hosts from a source port to a destination port when hosts have been physically moved or replaced. For elements that have failed, the improved switch also migrates host network policies for both physical hosts and virtual machines when the old host network policy will maintain serviceability of the element when applied to the new port.

Abstract: According to one embodiment, a system includes a processor and logic integrated with and/or executable by the processor, the logic being configured to identify a security issue affecting a first peer in one or more secure transmission control protocol/user datagram protocol (TCR/UDP) sessions, inform a second peer about the security issue using the first peer of the one or more TCP/UDP sessions, and perform at least one action in response to identifying and/or being informed about the security issue. In another embodiment, a method for providing a secure TCP/UDP session includes identifying a security issue affecting a first peer in one or more TCP/UDP sessions, informing a second peer about the security issue using the first peer of the one or more TCP/UDP sessions, and performing at least one action in response to identifying and/or being informed about the security issue.

Abstract: In one embodiment, a method includes sending a request to one or more distributed fabric protocol (DFP) system members in order to retrieve one or more events from the one or more DFP system members, receiving one or more acknowledgements to the request from the one or more DFP system members at a local network switch of a DFP system master, upon receipt of at least one packet in which the one or more events are encapsulated as data: decoding the at least one packet to retrieve details of the one or more events using a dedicated processor of the DFP system master, creating and sending a message signaled interrupt (MSI) comprising the details of the one or more events to a local processor of the DFP system master using the dedicated processor, and reading the MSI using the local processor of the DFP system master.

Abstract: According to one embodiment, a method includes informing a second peer about a security issue in one or more secure transmission control protocol/user datagram protocol (TCP/UDP) using a first peer of the one or more TCP/UDP sessions. The method also includes performing at least one action at the first peer in response to detecting the security issue. The at least one action resolves the security issue, avoids the security issue, or resolves and avoids the security issue. Also, the at least one action includes informing, via a socket call or an extension of a socket call on the one or more TCP/UDP sessions, one or more applications operating on the second peer to limit information exchange based on a severity of the security issue. Other systems, methods, and computer program products are described in accordance with more embodiments.

Abstract: A networking system, and more particularly an interface management subsystem, offers logical interface abstraction for networking system software. The networking system generally transmits data via a hardware interface. All software components in the control and forwarding plane use a Logical Interface (LIF) that is a logical representation of the hardware interface. A mapping occurs between the LIF and hardware interface used to transmit the data. Each LIF is represented by an LIF identifier used to store and retrieve logical interface records to and from shared memory accessible to all protocols and applications in the control and forwarding plane. The efficient storage and retrieval of such logical interface records allows for a global unique view of network interfaces, avoidance of data replication in each networking system software application's memory space, etc.

Abstract: A method includes receiving a first packet having a first virtual local area network (VLAN) identifier (ID) directly from a first virtual switch using a first physical overlay switch located at an edge of an internet protocol (IP) network, encapsulating the first packet with an overlay header and tunneling the first encapsulated packet via Layer-3 operations across the IP network to a second physical overlay switch in response to a determination that a source of the packet is physically separated from a destination of the packet by the IP network, receiving a second encapsulated packet having a second overlay header from the second physical overlay switch, de-encapsulating the second encapsulated packet to create a second packet having a second VLAN ID, and sending the second packet having the second VLAN ID directly to the first virtual switch operating in the first hypervisor domain.

Abstract: A process of diagnosing and debugging a network element remotely may employ sending of performance data to a third party evaluator for processing of the data. A mobile device may interface with the network element and request evaluation of the performance by the third party evaluator. Large memory loads may be sent to the third party evaluator where intensive processing may be performed. The results of the processing by the third party evaluator may be sent to the mobile device for viewing by a user.

Abstract: A process of diagnosing and debugging a network element remotely may employ sending of performance data to a third party evaluator for processing of the data. A mobile device may interface with the network element and request evaluation of the performance by the third party evaluator. Large memory loads may be sent to the third party evaluator where intensive processing may be performed. The results of the processing by the third party evaluator may be sent to the mobile device for viewing by a user.

Abstract: In one embodiment, a networking system includes a physical switch and a scalable and distributed virtual control plane. The switch is adapted to receive a first packet, classify the first packet to produce a packet classification, generate a second packet based on the first packet, and forward the second packet. The scalable and distributed virtual control plane has a physical host server adapted to host a plurality of virtual machines (VMs), each VM providing a control plane for a particular protocol, and a network connecting the switch to the server. In addition, the plurality of VMs are adapted to receive the second packet, retrieve information about the first packet, handle processing of the first packet using the information to obtain forwarding information, encapsulate the first packet into a third packet including the forwarding information, and forward the third packet according to the forwarding information.