Abstract: An embodiment method of loop suppression in a layer-two transit network with multiprotocol label switching (MPLS) encapsulation includes receiving a packet at a provider edge (PE) router for the layer-two transit network. The packet is stored in a non-transitory memory on the PE router. The packet is stored according to a packet data structure having an MPLS label field and a layer-two header. A time-to-live (TTL) attribute is then determined for the packet. The TTL attribute is written to the non-transitory memory in the MPLS label field. The packet is then routed according to information in the layer-two header.

Abstract: A method and an apparatus for cross-service-zone communication, and a data center network. When a first virtual machine in a server sends a packet to a second virtual machine, the server determines, through searching, whether a routing table of a tenant to which the first virtual machine belongs exists on the server; when the routing table of the tenant to which the first virtual machine belongs does not exist on the server, send the packet to a gateway; receive the routing table of the tenant to which the first virtual machine belongs sent by the gateway through a service zone manager; and forward a subsequent packet of the first virtual machine according to the routing table; where the first virtual machine and the second virtual machine are located in different service zones.

Abstract: Embodiments are provided herein for creating virtual networks with service chains, such as n-tier networks, in the cloud. In an embodiment, a network diagram for a virtual network is received from a user via a graphical user interface. The network diagram comprises elements that represent virtual or physical network components. The network components include switches, routers, firewalls, links, service appliances, virtual machines, servers, or other network components. Upon successfully validating the network diagram, via a validation step, the network diagram is compiled into application programming interface (API) calls ready for execution. The executed APIs are used to establish the virtual network on a physical network infrastructure. The virtual network comprises virtual network components corresponding to the elements or the network diagram.

Abstract: Embodiments are provided for securing source routing using public key based digital signature. If a protected source route is tampered with, a public key based method allows a downstream node to detect the tampering. The method is based on using digital signatures to protect the integrity of source routes. When creating a source route for a traffic flow, a designated network component computes a digital signature and adds the digital signature to the packets. When the packets are received at a node on the route, the node uses the digital signature and a public key to verify the source route and determines accordingly whether the source route has been tampered with. If tampering is detected, the receiving node stops the forwarding of the packets.

Abstract: System and method embodiments are provided to improve offloading traffic from mobile operators networks via a WiFi network. The embodiments also include schemes to offload traffic between WiFi networks. The embodiments include a network component comprising a WiFi management entity (WiME) configured to serve as an anchor point for a user device at a WiFi network and communicate with a management entity at a wireless network using OpenFlow protocol to handle a plurality of control and mobility functionalities for traffic in the WiFi network, wherein the control and mobility functionalities include offloading traffic for the user device from the wireless network to the WiFi network.

Abstract: System and method embodiments are provided to improve offloading traffic from mobile operators networks via a WiFi network. The embodiments also include schemes to offload traffic between WiFi networks. The embodiments include a network component comprising a WiFi management entity (WiME) configured to serve as an anchor point for a user device at a WiFi network and communicate with a management entity at a wireless network using OpenFlow protocol to handle a plurality of control and mobility functionalities for traffic in the WiFi network, wherein the control and mobility functionalities include offloading traffic for the user device from the wireless network to the WiFi network.

Abstract: A method implemented by a hypervisor located in a first network device (ND), the method comprising sending to and receiving from a second ND a first type of packet, wherein each packet of the first type of packet comprises media access control (MAC) layer information of a client; and sending to and receiving from a third ND a second type of packet, wherein each packet of the second type of packet contains no client MAC layer information.