Abstract: The present disclosure relates to a data transmission method and apparatus in an optoelectronic hybrid network. The method is: receiving an RDMA transmission request, and determining an RDMA transmission type and a to-be-transmitted data volume for data transmission according to the RDMA transmission request; determining a preset encapsulation format corresponding to the RDMA transmission type for data transmission and the to-be-transmitted data volume for data transmission; receiving to-be-transmitted data and encapsulating the to-be-transmitted data into a to-be-transmitted data packet of the determined preset encapsulation format; selecting a switching link for data transmission from an optical switching link and an electrical switching link according to a size of the to-be-transmitted data packet; and sending the to-be-transmitted data packet to a peer end based on the selected switching link for data transmission.

Abstract: An attack stream identification method, apparatus, and device on a software defined network is presented, where an invalid stream filter table is stored in a switch, and the method includes the steps of the switch receives a data packet of a data stream and searches, according to a characteristic value of the data packet, the invalid stream filter table for a state field of a filter entry; when the state field is a suspected attack stream state or a non-attack stream state, the switch sends a report message to a controller, determines a rate value for sending the report message to the controller, and fills the rate value in a rate field of the filter entry; and when the rate value is greater than a preset rate threshold, the switch changes the state field of the filter entry to an attack stream state.

Abstract: A data packet sending method and apparatus. The method includes: sending a policy request message that carries header information of a data packet to one or more controllers when a forwarding table of a first switch does not have a forwarding entry that matches the header information of the data packet; receiving a policy response message sent by a controller, where the policy response message includes a controller-determined forwarding path; selecting a forwarding path from received controller-determined forwarding paths; informing the selected forwarding path to a second switch on the selected forwarding path to forward the data packet after receiving the data packet, where the second switch is a switch besides the first switch on the selected forwarding path; and forwarding the data packet according to the selected forwarding path.

Abstract: A data flow statistics collection method, a switch, and a controller. The data flow statistics collection method includes recording first identification information and second identification information in the first flow entry if a part of fields in a data packet match a flow entry and the flow entry is the last flow entry corresponding to the to-be-counted flow object, where the first identification information identifies that the first part of fields match the first flow entry and the second identification information identifies that at least one second part of fields in the data packet respectively match a second flow entry in at least one second flow table. The data flow statistics collection method also includes performing, in the first flow entry, statistics collection on the to-be-counted flow object, and recording statistical information of the to-be-counted flow object. In this way, statistics collection on the to-be-counted flow object is implemented.

Abstract: A flow entry delivery method and a communication system are provided. The communication system includes a controller and N switches. After receiving a packet-in message sent by a source switch, the controller determines a forwarding path for forwarding to-be-forwarded data. Then, the controller generates a corresponding flow entry for each of the N switches in the forwarding path separately, and generates a corresponding control instruction for each of other N?1 switches except the source switch in the forwarding path separately. After encapsulating the generated N flow entries and N?1 control instructions into the Nth command packet, the controller sends the Nth command packet to the Nth switch of the N switches, so that the Nth switch transmits the N flow entries in the forwarding path according to the Nth control instruction in the Nth command packet.

Abstract: The present disclosure relates to a data transmission method and apparatus in an optoelectronic hybrid network. The method is: receiving an RDMA transmission request, and determining an RDMA transmission type and a to-be-transmitted data volume for data transmission according to the RDMA transmission request; determining a preset encapsulation format corresponding to the RDMA transmission type for data transmission and the to-be-transmitted data volume for data transmission; receiving to-be-transmitted data and encapsulating the to-be-transmitted data into a to-be-transmitted data packet of the determined preset encapsulation format; selecting a switching link for data transmission from an optical switching link and an electrical switching link according to a size of the to-be-transmitted data packet; and sending the to-be-transmitted data packet to a peer end based on the selected switching link for data transmission.

Abstract: The present disclosure discloses a flow table matching method and apparatus and an OpenFlow switching system to implement matching of any field in any data flow without changing existing hardware logic or a standard protocol. The method includes: receiving a jump instruction and a match instruction that are delivered by a controller for a first flow table; creating a first flow entry in the first flow table; receiving a flow mode message delivered by the controller for a second flow table; and creating a second flow entry in the second flow table. The present disclosure lays a foundation for implementing really flexible and programmable software-defined networking, assists a network service operator in reducing capital expenditures and operation expenditures, and enables a traditional IP network to have more flexible network abstraction and management capabilities for a real-time service.

Abstract: A data packet sending method and apparatus. The method includes: sending a policy request message that carries header information of a data packet to one or more controllers when a forwarding table of a first switch does not have a forwarding entry that matches the header information of the data packet; receiving a policy response message sent by a controller, where the policy response message includes a controller-determined forwarding path; selecting a forwarding path from received controller-determined forwarding paths; informing the selected forwarding path to a second switch on the selected forwarding path to forward the data packet after receiving the data packet, where the second switch is a switch besides the first switch on the selected forwarding path; and forwarding the data packet according to the selected forwarding path.

Abstract: An attack stream identification method, apparatus, and device on a software defined network is presented, where an invalid stream filter table is stored in a switch, and the method includes the steps of the switch receives a data packet of a data stream and searches, according to a characteristic value of the data packet, the invalid stream filter table for a state field of a filter entry; when the state field is a suspected attack stream state or a non-attack stream state, the switch sends a report message to a controller, determines a rate value for sending the report message to the controller, and fills the rate value in a rate field of the filter entry; and when the rate value is greater than a preset rate threshold, the switch changes the state field of the filter entry to an attack stream state.

Abstract: A data flow statistics collection method, a switch, and a controller. The data flow statistics collection method includes recording first identification information and second identification information in the first flow entry if a part of fields in a data packet match a flow entry and the flow entry is the last flow entry corresponding to the to-be-counted flow object, where the first identification information identifies that the first part of fields match the first flow entry and the second identification information identifies that at least one second part of fields in the data packet respectively match a second flow entry in at least one second flow table. The data flow statistics collection method also includes performing, in the first flow entry, statistics collection on the to-be-counted flow object, and recording statistical information of the to-be-counted flow object. In this way, statistics collection on the to-be-counted flow object is implemented.

Abstract: The present disclosure discloses a flow table matching method and apparatus and an OpenFlow switching system to implement matching of any field in any data flow without changing existing hardware logic or a standard protocol. The method includes: receiving a jump instruction and a match instruction that are delivered by a controller for a first flow table; creating a first flow entry in the first flow table; receiving a flow mode message delivered by the controller for a second flow table; and creating a second flow entry in the second flow table. The present disclosure lays a foundation for implementing really flexible and programmable software-defined networking, assists a network service operator in reducing capital expenditures and operation expenditures, and enables a traditional IP network to have more flexible network abstraction and management capabilities for a real-time service.

Abstract: A flow entry delivery method and a communication system are provided. The communication system includes a controller and N switches. After receiving a packet-in message sent by a source switch, the controller determines a forwarding path for forwarding to-be-forwarded data. Then, the controller generates a corresponding flow entry for each of the N switches in the forwarding path separately, and generates a corresponding control instruction for each of other N?1 switches except the source switch in the forwarding path separately. After encapsulating the generated N flow entries and N?1 control instructions into the Nth command packet, the controller sends the Nth command packet to the Nth switch of the N switches, so that the Nth switch transmits the N flow entries in the forwarding path according to the Nth control instruction in the Nth command packet.