Abstract: A system that provides services to clients may receive and service requests, various ones of which may require different amounts of work. The system may determine whether it is operating in an overloaded or underloaded state based on a current work throughput rate, a target work throughput rate, a maximum request rate, or an actual request rate, and may dynamically adjust the maximum request rate in response. For example, if the maximum request rate is being exceeded, the maximum request rate may be raised or lowered, dependent on the current work throughput rate. If the target or committed work throughput rate is being exceeded, but the maximum request rate is not being exceeded, a lower maximum request rate may be proposed. Adjustments to the maximum request rate may be made using multiple incremental adjustments. Service request tokens may be added to a leaky token bucket at the maximum request rate.

Abstract: The process includes acquiring, from a relay device that relays a packet between a first communication device and a second communication device, a plurality of first delay times generated by a round trip of the packet between the first communication device and the relay device, and a plurality of second delay times generated by a round trip of the packet between the second communication device and the relay device, sorting separately the plurality of first delay times and the plurality of second delay times based on a length of a delay time, and calculating device delay times based on a first delay calculation that calculates a difference between each of the plurality of first delay times and each of the plurality of second delay times in a same rank after the sorting.

Abstract: Methods and apparatus for efficient data transmit and receive operations using polling of memory queues associated with interconnect fabric interface. In one embodiment, Non-Transparent Bridge (NTB) technology used to transact the data transmit/receive operations and a hardware accelerator card used implement a notification mechanism in order to optimize of receive queue polling are disclosed. The accelerator card comprises a notification address configured to signal the presence of data, and a notification acknowledgement region configured to store flags associated with memory receive queues. In one implementation, the interconnect fabric is based on PCIe technology, including up to very large fabrics and numbers of hosts/devices for use in ultra-high performance applications such as for example data centers and computing clusters.

Abstract: Systems and methods are provided to use a custom tuple definition to route packets of network traffic. Each packet can correspond to a different custom tuple definition based on the custom tuple definitions provided. Each custom tuple definition may be applied to a subset of network traffic based on certain parameters. A stateful network routing service may intercept packets and determine a tuple value for the packet based on a corresponding tuple definition and information from the packet. The stateful network routing service may route the packet based on the tuple value of the packet to a network appliance. Further, subsequent packets associated with the same tuple value may be routed to the same network appliance. In some embodiments, the custom tuple definition may be used to determine multiple tuple values for a subset of network traffic.

Abstract: A system, method, and computer-readable medium for performing a traffic routing operation. The traffic routing operation includes: establishing a plurality of virtual private network (VPN) connections within an information handling system; obtaining a configuration policy for each of the plurality of VPN connections, the configuration policy for each of the plurality of VPN connections comprising an indication of at least one type of supported link of a plurality of links; configuring a plurality of queues for packets being communicated via the plurality of virtual private network connections, the plurality of queues being greater than the plurality of VPN connections; creating a tunnel indication for each of the plurality of VPN connections; mapping the tunnel indication for each of the plurality of VP connections to a respective queue of the plurality of queues; and, mapping each queue of the plurality of queues to a link of a particular VPN connection.

Abstract: An abuse using a legitimate communication used for executing a business sequence is detected. A legitimate communication determination processing unit 22 determines whether or not a communication packet received by a communication destination device is a legitimate communication packet permitted by a monitoring target system 10 based on meta information extracted by a packet collection processing unit 21, a sequence packet identification processing unit 23 determines whether or not the communication packet determined to be the legitimate communication packet by the legitimate communication determination processing unit 22 is a communication packet constituting the business sequence, and a sequence establishment determination processing unit 24 determines whether or not the business sequence related to the communication packet determined to constitute the business sequence by the sequence packet identification processing unit 23 is established.

Abstract: A digital optical data network system for improving information security in Passive Optical Networks (“PON”) by providing virtual information separation in the router, such as a premise router, or routers interfacing the entire PON, such as by utilizing virtual routing and forwarding, thus allowing safe data traffic between multiple carriers, service providers accessing the PON and multiple end users on the PON such as tenants in a building, employees of a business entity, or subscribers in a residential community.

Abstract: A base station distributed unit transmits, to a wireless device and via a radio link, packets received from a base station central unit. The base station distributed unit detects an outage of the radio link. The base station distributed unit transmits to the base station central unit, a parameter indicating the outage. The base station distributed unit receives from the base station central unit, an indication of a release of a wireless device context of the wireless device. The base station distributed unit releases the wireless device context.

Abstract: An example method can include tracking, by a network device, a plurality of attributes associated with a plurality of unique client device identifiers stored in a tracking table; deriving, by the network device, a training data set based on the plurality of attributes; and generating, by the network device, a plurality of clusters by inputting the derived training data set to an unsupervised machine learning mechanism. The example method can include receiving, by the network device, a labeling of the plurality of unique client device identifiers in the tracking table based at least on the plurality of clusters; generating, by the network device, a plurality of classifiers by inputting the labelled tracking table to a supervised machine learning mechanism; and classifying, by the network device, a new unique client device identifier in the tracking table based at least on the plurality of classifiers.

Abstract: The present disclosure describes methods and apparatus for supporting QoS and media flow mapping over simultaneous connection for a user equipment (UE), when the simultaneous connections are established over heterogeneous systems having different QoS models, such as 3GPP LTE (4G) QoS model and 3GPP 5G QoS model. The 4G and 5G networks may share the user plane and/or share a policy server. In one aspect, methods for consolidating and distributing the QoS for the NGBR flow and bearer across simultaneous PDN connection over 4G and PDU session over 5G to the same data network (DN) or different DNs are provided. In another aspect, methods are provided for mapping one or more media flows of a multimedia session, such as an IMS session, over simultaneous 4G and 5G connections for a UE are provided, where the 4G connection and the 5G connection for the UE may or may not share the assigned IP address for the UE.

Abstract: A virtual network monitoring apparatus includes an acquisition unit configured to acquire first network information, the first network information being network information possessed by a virtual machine control unit functioning as an orchestrator, and second network information, the second network information being network information possessed by a virtual machine generated by the virtual machine control unit among network information on a virtual network to which the virtual machine is connected, and a generation unit configured to generate a traffic filter indicating a filter for traffic flowing through the virtual network on the basis of the first network information and the second network information.

Abstract: A policy control method, an apparatus, and a system, where the method includes: receiving, by a session management network element, a first message from a terminal device, where the first message includes a quality of service (QoS) rule identifier and a first operation indication; sending, by the session management network element, a second message to a policy control network element, where the second message includes a policy and charging control (PCC) rule identifier corresponding to the QoS rule identifier and a second operation indication corresponding to the first operation indication; and receiving, by the policy control network element, the second message, and performing, by the policy control network element on a PCC rule corresponding to the PCC rule identifier, a second operation indicated by the second operation indication.

Abstract: Methods and apparatus for enhancing connectivity for a device backhauled by a wireline communication network. In one embodiment, the device comprises a small-cell or other wireless base station that is backhauled by a DOCSIS system within a managed HFC network, and the method and apparatus enable enhanced connection of user devices serviced by the base station (such as 3GPP UE or CBRS FWA) to a core entity for e.g., authentication and packet session establishment. In one implementation, enhanced Cable Termination System (CMTS) and cable modem (CM) devices coordinate to allocate prioritized service flows to traffic sourced from the base station. These service flows can selectively bypass extant DOCSIS protocols which might otherwise increase connection latency (including connection failure) such as AQM (active queue management) and packet dropping algorithms. In some variants, upstream service flow data rates can also be enhanced through temporary utilization of higher-order modulation and/or coding schemes.

Abstract: Techniques are presented for evaluating Equal Cost Multi-Path (ECMP) performance in a network that includes a plurality of nodes. According to an example embodiment, a method is provided that includes obtaining information indicating equal cost multi-path (ECMP) paths in the network and a branch node in the network. For the branch node in the network, the method includes instantiating a virtual network function that simulates an ECMP hashing algorithm employed by the branch node to select one of multiple egress interface of the branch node; providing to the virtual network function for the branch node, a query containing entropy information as input to the ECMP hashing algorithm that returns interface selection results; and obtaining from the virtual network function a reply that includes the interface selection results. The method further includes evaluating ECMP performance in the network based on the interface selection results obtained for the branch node.

Abstract: There is provided managing a data flow between a source node and a recipient node. A method comprises storing, at the source node, data frames into a buffer for transmission to the recipient node over a host-to-host protocol connection; measuring, at the source node, a connection quality of the host-to-host protocol connection; adjusting, at the source node, one or more target parameters of the transmission on the basis of the measured connection quality; transmitting, by the source node, data frames from the buffer to the recipient node on the basis of a Last-In, First-Out (LIFO) method and the adjusted one or more target parameters.

Abstract: An electronic device includes a memory controller having an improved operation speed. The memory controller includes a processor configured to generate commands for accessing data stored in a main memory, a scheduling circuit configured to store the commands and output the commands according to a preset criterion, and a filtering circuit configured to store information on an address of the main memory corresponding to a write command among the commands, provide a pre-completion response for the write command to the scheduling circuit upon receiving the write command, and provide the write command to the main memory.

Abstract: To implement low-delay and highly reliable communication in a more suitable manner. A communication apparatus including: a control unit that performs control such that data are transmitted to a transmission destination via at least any one of a plurality of channels shared in communication with each of a plurality of apparatuses; and a determination unit that determines whether or not the plurality of channels is available for transmission of the same data, in which the control unit performs control such that in a case where at least one of the plurality of channels has continued to be available for data transmission beyond a period set for the channel, data are transmitted by use of the channel.

Abstract: Systems and methods for reducing the amount of messages transmitted in large-scale distributed mesh networks are disclosed. Network components include transceivers and memory storing instructions which, when executed by a processing unit, reduce transmissions made by the transceiver within the network. The instructions executed by processing unit could (1) create an expiration parameter to limit the number of times a signal is retransmitted, (2) form groups of network components from which one or a few of the group network components are designated to respond on behalf of the group, (3) keep advertising transmissions dormant by default until called upon, (4) employ a time delay parameter for a time interval in which no transmission may be made, and (5) include message IDs in control signals that are transmitted.

Abstract: Methods, systems, and computer-readable storage media for receiving a record including a set of attributes, each attribute having an attribute value, the record representing automatic execution of an IT process within a managed system, retrieving a model representing historical executions of the IT process and including a set of distribution parameters associated with a first type of attribute and a set of probability distributions associated with a second type of attribute, determining, for a first attribute, a first score based on distribution parameters and a value, determining, for a second attribute, a second score based on a probability distribution and a value, the second attribute being of the second type of attribute, and selectively indicating that the IT process is anomalous based on an outlier score.

Abstract: A mechanism which enables management of frequency resources while suppressing a calculation amount under an environment where location information of a communication device changes. A management server including: a creating unit to create list information; an acquiring unit to acquire a step size relating to transmission power setting of the communication device; a re-creation judging unit to judge whether or not to re-create the list information based on first location information when the list information has been created last time, second location information to be judged and the step size; and a notification unit to notify the communication device which uses the list information, of the re-created list information in a case where it is judged to re-create the list information and the list information created last time in a case where it is judged not to re-create the list information.

Abstract: For a managed network, some embodiments provide a method for a set of service nodes in an active-active service node cluster in conjunction with a host computer hosting a destination data compute node (DCN) to improve the efficiency of directing a data message to a service node storing state information for the flow to which the data message belongs. a first service node receives a data message in a particular data message flow for which it does not maintain state information. The first service node then identifies a second service node to process the data message and forwards the data message to the second service node. The second service node sends state information for the particular data message flow to the first service node, for the first service node to use to process subsequent data messages in the particular data message flow.

Abstract: Methods, systems, and computer-readable media for collecting route-based traffic metrics in a service-oriented system are disclosed. A first service in a service-oriented system receives an inbound request from a second service. From the inbound request, the first service extracts, a route identifier representing an upstream route including the second service. The first service stores the route identifier and a counter representing a number of inbound requests with the route identifier that have been received by the first service over a current window of time. The first service sends, to a traffic metric collection system, a metric message comprising the route identifier and the counter. Traffic metric data is determined by the traffic metric collection system using the metric message from the first service and one or more additional metric messages from one or more additional services. The traffic metric data indicates one or more flows of requests through the services.

Abstract: Policy enforcement previously available for web proxy access methods is extended and applied to layer 3 packets flowing through VPN channels. With these extensions, a common security policy is possible that is enforceable between VPN proxied access and VPN tunneled access. Equivalent security policy to tunnel based VPN access without comprising the inherent performance, scalability and application compatibility advantages tunnel based VPNs have over their proxy based VPN counterparts.

Abstract: Various aspects of the present disclosure generally relate to wireless communication. In some aspects, a wireless communication device may receive a system information block (SIB) including configuration information associated with configuring operation of a plurality of repeaters, wherein repeaters in the plurality of repeaters are configured to receive signals from first wireless communication devices and forward the signals to second wireless communication devices. The wireless communication device may communicate in a set of resources based at least in part on the configuration information included in the SIB. Numerous other aspects are provided.

Abstract: Various embodiments disclosed herein provide for a codeblock segmentation configuration system. A base station can configure the segmentation rate or segment size, which can control the number of codeblock segments a transport block is segmented into, based on the transmission reliability and predicted interference to a mobile device. An increased number of segments can improve throughput and efficiency when interference is low and signal to noise ratios are high, but can increase latency when interference is high and signal to noise is low. The base station can determine or predict transmission reliability based on the speed of mobile devices, the location and/or distance to the mobile device, as well as the long term signal to noise ratios.

Abstract: For efficiently handling network traffic via a fixed access, classification of UL data traffic in a communication device may be accomplished in a reflective mode by detecting identifiers of outgoing uplink data packets which are complementary to identifiers of incoming downlink data packets. The downlink data packets are already assigned to the traffic classes. The outgoing uplink data packets carrying the complementary identifier are assigned to the same traffic class as the incoming downlink data packets. For this purpose, the communication device is provided with a traffic classificator. In the reflective mode, the traffic classificator locally generates uplink packet classification rules by monitoring received downlink data packets.

Abstract: A system and method for managing congestion in a multi-hop wireless network, employing congestion notification messages. The technology has three main components: a mechanism at the Medium Access (MAC) layer for determining when a given source or transit node is deemed congested; a mechanism at the Network Layer (NL) determining how to propagate this information to applications, including suitably combining overload indications received from neighbors; and a mechanism at the Transport Layer (TL) of each source of traffic for determining when a source is generating excessive traffic, and combining it with Medium Access Control (MAC)-based overload indication from downstream nodes, thus providing a multi-layer approach to traffic throttling.

Abstract: A computer executed process can be configured to identify a network traffic flow of a source network device. The process can select a traffic fidelity rate from a plurality of traffic fidelity rates for sending information regarding the network traffic flow to a digital twin device corresponding to the source network device. The process can transmit the information regarding the network traffic flow to the digital twin device according to the traffic fidelity rate. The digital twin device can be configured to replicate at least one operation of the source network device with respect to the network traffic flow.

Abstract: The present disclosure provides a method of sending an inter-base station message between a first and second base station in a cellular telecommunications network, wherein the inter-base station message is transmitted via a relay component, the method including the relay component receiving a first inter-base station message from a first base station, wherein the first inter-base station message includes: a first address portion identifying a second and third base station, and a first content portion; the relay component transmitting a second inter-base station message to the second base station, the second inter-base station message including: a second address portion identifying the second base station, and a second content portion; and the relay component transmitting a third inter-base station message to the third base station, the third inter-base station message including: a third address portion identifying the third base station, and a third content portion, wherein the second and third content portio

Abstract: A method, receiver device and terminal for signaling an adaptation request to adapt a coding/decoding of real-time signals of a real-time communication session, from a receiver device to a sender device. The method is such that the adaptation request relates to a demand for aggregation and/or redundancy of frames, that it is generated according to the existence of a signaling parameter arising from a phase of negotiation of codecs used during initialization of the communication session and in that it is transported via a real-time protocol of RTP type.

Abstract: A system and method for automatically scaling consumer servers in a data processing system. To build an automatic scaling system, the present disclosure allows consumers to obtain additional information, e.g., the number of events that await to be read from an aggregator when receiving an event from the aggregator. This additionally obtained number provides a direct gauge for the data processing system to determine when the consumers are over-provisioned, i.e., when the number of events left to be read is close to zero, as well as when the consumers are under-provisioned, e.g., when the number of events left to be read continues to increase. As a result, the consumers can be automatically scaled to handle the dynamic data processing demand while providing optimal resource allocation.

Abstract: A first node of a packet switched network transmits at least one flow of protocol data units of a network to at least one output context of one of a plurality of second nodes of the network. The first node includes X virtual output queues (VOQs). The first node receives, from at least one of the second nodes, at least one fair rate record. Each fair rate record corresponds to a particular second node output context and describes a recommended rate of flow to the particular output context. The first node allocates up to X of the VOQs among flows corresponding to i) currently allocated VOQs, and ii) the flows corresponding to the received fair rate records. The first node operates each allocated VOQ according to the corresponding recommended rate of flow until a deallocation condition obtains for the each allocated VOQ.

Abstract: A video transmission method, system and a device includes a sending device that generates and sends a source video stream, where the source video stream includes a plurality of video data packets, each video data packet includes discard indication information, a discard priority indicated by discard indication information included in a first video data packet is higher than a discard priority indicated by discard indication information included in a second video data packet, video data in a video frame whose frame type is a non-reference B frame is encapsulated into the first video data packet, and video data in a video frame whose frame type is an I frame, a P frame, or a reference B frame is encapsulated into the second video data packet.

Abstract: In one illustrative example, a user plane function (UPF) may detect initial traffic for an application for a user equipment (UE) for which no current dedicated Quality of Service (QoS) flow is established. In response, the UPF may send, to a control plane function, a message which indicates a request for creating a dedicated QoS Flow for traffic for the application for the UE. The message may include flow metadata and an application identifier obtained in detecting the initial traffic. A QoS Flow may then be created for the traffic based on a selected QoS policy associated with the application identifier. Subsequently, the UPF may determine that a measured time period of traffic inactivity for the QoS Flow is outside a limit set by a threshold. Based on the determining, the UPF may send, to the control plane function, a message which indicates a request for deleting the QoS Flow.

Abstract: A method for correlating discarded network traffic with network policy events in a network includes receiving a flow record. The flow record includes initial network flow information in a standard flow record format. Discarded network traffic information associated with each network policy is received from a network policy enforcement device. Network traffic is discarded based on a network traffic policy. The received flow record is correlated with the received discarded network traffic information. The discarded network traffic information is encoded into the received flow record based on the correlation while maintaining the initial network flow information to yield an enhanced flow record.

Abstract: Systems and methods provide for Selective Tracking of Acknowledgments (STACKing) to improve buffer utilization and traffic shaping for one or more network devices. A network device can identify a first flow that corresponds to a predetermined traffic class and a predetermined congestion state. The device can determine a current window size and congestion threshold of the first flow. In response to a determination to selectively track a portion of acknowledgments of the first flow, the device can track, in main memory, information of a first portion of acknowledgments of the first flow. The device can exclude, from one or more buffers, a second portion of acknowledgments of the first flow. The device can re-generate and transmit segments corresponding to the second portion of acknowledgments at a target transmission rate based on traffic shaping policies for the predetermined traffic class and congestion state.

Abstract: A method for filtering internet traffic is provided. The method may include using a private network for receiving a request message from an electronic device within the private network and identifying the type of the electronic device. When the electronic device is identified as a non-IoT type device, the method may include transmitting the request message through the non-IoT output channel and when the electronic device is identified as an IoT type device the method may include transmitting the request message through the IoT output channel. The method may further include using an IP address filter gateway for filtering incoming traffic to a web server, the filtering may include granting device access to the web server when the request message is received through the non-IoT output channel and denying access to the web server when the request message is received through the IoT output channel.

Abstract: A method, an apparatus, and a system are provided for load balancing of a service chain. The method includes: receiving, by a flow classifier, a service chain selection and control policy sent by a policy and charging rules function (PCRF) unit; hashing, by the flow classifier according to a hash quantity, a service flow corresponding to a service chain identifier, to obtain multiple subflows, and adding the service chain identifier and hashing factors to packets of the subflows, where different subflows correspond to different hashing factors; and sending, by the flow classifier, the packets of the subflows after the service chain identifier and the hashing factors are added, to a forwarding device.

Abstract: Steering clients between access points (APs) or other sources of wireless signaling is contemplated. The client steering may be used to supplant or augment roaming capabilities of the clients with independent steering decisions made at the APs such as by utilizing information shared between the APs to generate a steering threshold for use in assessing whether clients should be steered from one AP to another.

Abstract: Methods for, and network elements in, packet or optical transport networks are disclosed, including a network element comprising non-transitory computer readable medium storing computer-executable instructions configured as one or more software agents that when executed with computer hardware: determine a state of the network element, comprising comparing a current state of transient properties of the network element against a predetermined, expected state of the transient properties of the network element; and verify a state of other network elements or paths in the transport network by comparing a current state of one or more network-level constraints of the other network elements or paths against a predetermined, expected state of the one or more network-level constraints on the other network elements or paths. The computer hardware may further positively or negatively acknowledge received instructions to apply a configuration to the network element based on the determination and/or verification.

Abstract: A network device includes a switching system for directing packets between ingress ports and egress ports of the network device. The network device also includes a switching system manager that makes an identification of a state change of a virtual output queue of the switching system; and performs an action set, based on the state change, to modify a latency of the virtual output queue to meet a predetermined latency in response to the identification.

Abstract: This application provides quality of service monitoring methods, systems, and devices for monitoring quality of service of communication links. One method comprises: obtaining an identifier of a service flow of a terminal device, a quality of service monitoring parameter of a communication link for transmitting the service flow, and correlation information associated with the communication link, the correlation information correlates the identifier of the service flow with an access type adopted by the communication link, wherein the access type is a 3rd generation partnership project (3GPP) access or a non-3GPP access; and monitoring the quality of service of the communication link for the access type based on the identifier of the service flow, the quality of service monitoring parameter, and the correlation information.

Abstract: A method for communicating a data packet, the method includes receiving a data packet that supports a packet wash operation. The method determines whether the data packet can be forwarded along a network path towards a destination node without any modification. If the data packet cannot be forwarded along the network path towards the destination node without modification, the method determines whether conditions are met for performing the packet wash operation on the data packet. If the conditions are met, the packet wash operation is performed to generate a washed data packet. The packet wash operation generates the washed data packet by modifying a size of a payload of the data packet based on a packet wash specification that associates attributes to a plurality of data payload portions of the payload of the data packet. The washed data packet is forwarded along the network path towards the destination node.

Abstract: Apparatuses, systems, and methods for a wireless device to perform substantially concurrent communications with a next generation network node and a legacy network node. The wireless device may be configured to stablish a first wireless link with a first cell according to a RAT, where the first cell operates in a first system bandwidth and establish a second wireless link with a second cell according to a RAT, where the second cell operates in a second system bandwidth. Further, the wireless device may be configured to perform uplink activity for both the first RAT and the second RAT by TDM uplink data for the first RAT and uplink data for the second RAT if uplink activity is scheduled according to both the first RAT and the second RAT.

Abstract: This application provides a path switching method and a related apparatus. In the path switching process, an ECMP table includes a first ECMP index of a first path group and a second ECMP index of a second path group; when all paths in the first path group have failed, a path group identifier corresponding to the first ECMP index may be changed from valid to invalid in the ECMP table, indicating that all paths in the first path group are unavailable. In this case, a path group identifier corresponding to the second ECMP index is valid, indicating that the second path group includes an available path, thereby completing switching between an active path and a standby path. In this process, only an identifier corresponding to the ECMP index needs to be updated, and therefore, the time consumed is relatively short, and the path switching delay can be effectively reduced.

Abstract: Disclosed are systems, methods, and non-transitory computer-readable media for providing real-time media streams. A cloud-based communication platform receives an incoming communication request to establish a communication session and executes a set of communication instructions associated with the incoming communication request. The set communication instructions includes a command to execute a real-time media stream in relation to the communication session. The command includes data designating a network destination to receive the real-time media stream. The cloud-based communication platform initiates the communication session between client devices and initiates the real-time media stream to the network destination. The real-time media stream concurrently transmitting at least a portion of the media transmitted between the client devices to the network destination.

Abstract: According to the present invention, in order to allow enhancement in the transmitting efficiency of a transmission system using link aggregation, if the bandwidth usage rates of the physical links constituting the LAG are imbalanced, identification information of a factor packet that serves as a factor for the imbalance is estimated on the basis of a distribution rule and the second information about a data amount. In addition, the factor packet is distributed to physical links to which the factor packet is distributed, and a packet that is not the factor packet is distributed according to the distribution rule, which is based on, for each of the physical links constituting the LAG, a remaining bandwidth obtained by subtracting the usage bandwidth of the factor packet distributed to said physical link from the maximum available bandwidth of said physical link.

Abstract: Some embodiments configure an edge forwarding element to perform service insertion operations to identify stateful services to perform for data messages received for forwarding by the edge forwarding element at multiple virtual interfaces of the edge forwarding element. The service insertion operation, in some embodiments, includes applying a set of service insertion rules. The service insertion rules (1) specify a set of criteria and a corresponding action to take for data messages matching the criteria and (2) are associated with a set of interfaces to which the service insertion rules are applied. In some embodiments, the action is specified using a universally unique identifier (UUID) that is then used as a matching criteria for a subsequent policy lookup that identifies a type of service insertion and a set of next hop data.

Abstract: Disclosed herein are methods, systems, and processes for performing optimized batched packet processing in deep packet inspection (DPI) computing systems. A batch of network packets is received. A stateless processing operation is performed for the batch that includes updating a current time for the batch, decoding the network packets in the batch, creating a flow-hash lookup key for each decoded network packet, and generating a first output that includes the current time and corresponding flow-hash lookup keys for the decoded network packets. Next, a stateful processing operation is performed for the batch that includes accessing the first output of the stateless processing operation, dividing the batch into multiple sub-batches, performing a parallel flow-hash table lookup operation on the network packets that are part of the sub-batches, and generating a second output that includes the sub-batches with associated packet flows.

Abstract: A data processing method implemented by a controller includes after receiving a processing request from a specified node carrying identifiers of a plurality of computing nodes configured to execute a specified calculation task, determining a target switching device from switching devices that are configured to connect to the plurality of computing nodes, and separately sending, to the target switching device and the specified node, routing information used to indicate data forwarding paths between the plurality of computing nodes and the target switching device. The target switching device is configured to combine, based on the routing information, data reported by the plurality of computing nodes, and then send combined data to each computing node. The specified node is configured to send the routing information to each computing node, and each computing node may report data to the target switching device based on the routing information.