Abstract: A device includes a converged input/output controller that includes a physical target storage media controller, a physical network interface controller and a gateway between the storage media controller and the network interface controller, wherein gateway provides a direct connection for storage traffic and network traffic between the storage media controller and the network interface controller.

Abstract: An electronic apparatus includes a first translation table that stores information of a first address and a second address; a second translation table that, in response to a condition being satisfied, stores the information of the first address and the second address based on the first translation table; at least one processor configured to translate the first address of a first packet to the second address based on the first translation table; and a forwarding manager that, in response to a second packet including the first address being received and the information of the first address and the second address being stored in the second translation table, translates the first address of the second packet to the second address based on the second translation table, prior to allocating the second packet to the at least one processor.

Abstract: In one embodiment, a method comprises identifying a fat tree network topology comprising top-of-fabric (ToF) switching devices, an intermediate layer of intermediate switching devices connected to each of the ToF switching devices, and a layer of leaf network devices; and causing a first leaf network device to initiate establishment of first and second redundant multicast trees for multicasting of data packets, including: causing first and second ToF switching devices to operate as roots of the first and second multicast trees according to first and second attribute types, respectively, causing the first leaf network device to select first and second of the intermediate switching devices as first and second flooding relays belonging to the first and second attribute types, respectively, and causing the first and second flooding relays to limit propagation of registration messages generated by the first leaf network device to the first and second ToF switching devices, respectively.

Abstract: In a system formed of user devices, a home access point routing device connected to an Internet Service Provider, performance issues such as contention and interference on the home network can be determined. The home access point is arranged to monitor IP Flow information for data sessions between user devices and remote servers over a wireless or powerline Ethernet home network and performance issues are determined by the home access point or by a management server.

Abstract: This application provides a network slice configuration method, apparatus, and system, and pertains to the field of wireless communications technologies. The method includes: after receiving a management request of a network slice, obtaining or determining, by a network slice manager, network resource information corresponding to a subnet included in the network slice, and then sending, in a form of a subnet management request to a subnet manager, the network resource information corresponding to the subnet, so that the subnet manager configures the corresponding subnet based on the network resource information corresponding to the subnet. In this application, network slice configuration efficiency can be improved.

Abstract: A solid-state drive and a performance optimization method for the solid-state drive are provided. The performance optimization method for the solid-state drive includes the following steps: detecting a queue depth of the solid-state drive to determine a use proportion of the queue depth; determining whether an access speed of the solid-state drive is raisable when the use proportion of the queue depth is higher than a first threshold proportion, so as to raise the access speed of the solid-state drive; and determining whether the access speed of the solid-state drive is reduceable when the use proportion of the queue depth is lower than a second threshold proportion, so as to reduce the access speed of the solid-state drive.

Abstract: This technology enables directed broadcasts in network fabrics. To enable a directed broadcast, a control plane node is configured to resolve directed broadcast addresses by mapping the directed broadcast address to a subnet address associated with the network fabric. A fabric border node receives a directed broadcast, extracts a destination address associated with the directed broadcast, and transmits a request to the control plane node to resolve the destination address. The control plane node retrieves the stored mapping and generates a map reply to the fabric border node with a multicast destination comprising the network fabric subnet address. The fabric border node encapsulates the directed broadcast with a header comprising the multicast destination and forwards the encapsulated directed broadcast to fabric edge nodes, which decapsulate the directed broadcast and deliver a data set from the directed broadcast to appropriate end point devices.

Abstract: A service packet sending method and device include receiving, by a first network device, a Transmission Control Protocol (TCP) packet from a second network device, where the TCP packet includes a service identifier, obtaining, by the first network device, based on the service identifier, a priority of a service, obtaining a TCP window based on the priority of the service, sending a TCP acknowledgement (ACK) packet including the TCP window to the second network device to enable the second network device to calculate a size of a service packet to be sent to the first network device.

Abstract: Example routing systems and methods are described. In one implementation, a first set of routing systems is interfaced with a network connection via a network interface. A second set of routing systems interfaced with a secure system is configured to receive information from the first set of routing systems via a first unidirectional data channel. In some embodiments, the first set of routing systems is configured to receive information from the second set of routing systems via a second unidirectional data channel. The secure system is not visible from the network interface.

Abstract: Some embodiments provide a data-plane forwarding circuit that can be configured to learn about a new message flow and to maintain metadata about the new message flow without first having a control plane first configure the data plane to maintain metadata about the flow. To perform its forwarding operations, the data plane includes several data message processing stages that are configured to process the data tuples associated with the data messages received by the data plane. In some embodiments, parts of the data plane message-processing stages are also configured to operate as a flow-tracking circuit that includes (1) a flow-identifying circuit to identify message flows received by the data plane, and (2) a first set of storages to store metadata about the identified flows.

Abstract: Techniques and solutions are described for providing access to data using web services, such as OData services. OData services can be dynamically added to a routing table used by a router. The router can be statically registered with an application instance, such as a server associated with the application instance. A web service can be generated from a definition of a data artefact, such as a table or view, stored in a database. A virtual data artefact corresponding to the data artefact can be generated, and used to generate the web service. A message service can cause web services to be generated when a data artefact is added or changed.

Abstract: Some embodiments provide techniques for optimized programming of forwarding data in network device hardware. An operating system executing on the network device receives information associated with a network topology of a network(s) to which the network device belongs. Based on this information, the operating system can generate various data structures that facilitate the routing and forwarding of data through the network device. Based on the generated data structures, the operating system may then program hardware resources in the network device in order to implement routing and forwarding operations stored in the data structures. During generation of the data structures, the operating system may perform some operations to optimize the programing of the hardware resources in a manner that reduces the amount of hardware resources that would otherwise be used without such optimizations.

Abstract: Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (1) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane. For instance, in some embodiments, each forwarding plane connects to a machine or service node through a port that receives data messages from, or supplies data messages to, the machine or service node.

Abstract: A zone merging system includes a first FC networking device that is associated with one or more first FC networking device zones and a second FC networking device that is associated with one or more second FC networking device zones, wherein each of the one or more first and second FC networking device zones identifies a plurality of zone member devices. The second FC networking device performs limited zone merging operations subsequent to establishing a link with the first FC networking device. The limited zone merging operations include merging, via the link with first FC networking device zones, each of the second FC networking device zones that identifies at least one zone member device that is not local to the second FC networking device, while not merging each of the second FC networking device zones that identify only zone members that are local to the second FC networking device.

Abstract: A system comprising nodes configured to form a network including virtual links in an overlay network provisioned over an underlay network. The system includes tenant networks formed in the network, and each tenant network corresponds to a tenant of the network. The system includes control planes, and each control plane is a component of a tenant network and includes routing algorithms corresponding to traffic classes. The tenant network is configured to use feedback data of link conditions of the tenant network with at least one routing algorithm to control routing of tenant traffic of a corresponding traffic class.

Abstract: A symmetric flow response path from an Autonomous System (AS) can be forced by using a same edge gateway for ingress and egress of communications with an Internet source. An asymmetric flow response path from an AS can be used by using different edge gateways for ingress and egress of communications with an Internet source. An anycast IP address can be used for selecting egress edge gateways of an AS. Packets in an AS can be redirected to selected egress edge gateways of the AS.

Abstract: A method and system for content filtering. A network repository function unit registers a session management function unit. The session management function unit initiates a session in response to a session request from a user equipment. The session management function unit accesses a subscriber profile stored by a data management unit, and the subscriber profile includes one or more content filtering settings. In response to the session being established, the session management function unit is configured to determine data packets for the user equipment to be filtered based on the one or more content filtering settings. Absent triggering an instruction to be sent via a Gx interface, an access and mobility management function (AMF) unit is configured to select the session management function unit in compliance with the one or more content filtering settings for filtering the data packets for the user equipment.

Abstract: A virtual network device increases the effective number of local physical ports by converting each of the local physical ports into a plurality of virtual local physical ports, and the effective number of network physical ports by converting each of the network physical ports into a plurality of virtual network physical ports.

Abstract: Embodiments disclosed herein relate to systems, devices, and methods for determining the Internet Protocol Version 4 (IPv4) address and the Internet Protocol Version 6 (IPv6) address of a purported end user device to use for detection and filtering of invalid traffic (IVT). In an exemplary embodiment, a method comprises receiving, at a domain only supporting IPv4, a request from the purported end user device over a network, wherein the purported end user device comprises an IPv6 address and an IPv4 address. The method further comprises redirecting, by the domain only supporting IPv4, the request to a domain supporting IPv6. The method further comprises measuring ad traffic and/or performing user tracking using the IPv4 and IPv6 addresses and fulfilling the request from the purported end user device.

Abstract: A data center failure management system and method in a Software Defined Networking (SDN) deployment. In one embodiment, an SDN controller associated with the data center is configured to learn new flows entering the data center and determine which flows require flow stickiness. Responsive to the determination, the SDN controller generates commands to one or more switching nodes and/or one or more border gateway nodes to redirect the sticky flows arriving at the switching nodes via ECMP routes from the gateway nodes or avoid the ECMP routes by the gateway nodes in order to overcome certain failure conditions encountered in the data center, an external network, or both.

Abstract: Some embodiments provide a method for a network slice selector. From an electronic device, the method receives a connection initiation message for a connection between the electronic device and a network domain. The method exchanges a set of connection initiation messages with the electronic device to set up the connection. The method receives a data message belonging to the connection from the electronic device. The method selects one of multiple network slices to which the electronic device has access as the network slice for the connection based on analysis of the received data message. The method forwards the data message and subsequent data messages belonging to the connection onto the selected network slice to be delivered to the network domain.

Abstract: A device receives network information associated with a network and server information associated with one or more server devices, wherein the network is associated with a network device and the one or more server devices. The device generates, based on the network information and the server information, an encapsulation profile for a tunnel encapsulation path and a route profile for the tunnel encapsulation path. The device provides, to the network device, the encapsulation profile for the tunnel encapsulation path and the route profile for the tunnel encapsulation path, and provides, to the one or more server devices, the encapsulation profile for the tunnel encapsulation path. The tunnel encapsulation path is provided between the network device and the one or more server devices, via the network, based on the encapsulation profile for the tunnel encapsulation path and the route profile for the tunnel encapsulation path.

Abstract: A communications method is established enabling exposure notification, contact tracing and movement tracking by using Bluetooth or other nearby communications technology for communicating with nearby smartphones and mobile devices, and for data exchange both to alert participants of possible exposure to someone who they have recently been in contact with, and who has subsequently been positively diagnosed, or potentially diagnosed as having, a novel coronavirus or other highly contagious disease, and to trace and identify containers, packages, envelopes and other objects that may have been in contact with a person or object carrying or potentially carrying the virus or disease.

Abstract: An apparatus for optimization for Spanning Tree Protocol (“STP”) data network includes an egress filter setting circuit in a first network node that sets an egress filter to discard data packets at an egress port of the first network node connected to a second network node in response to receiving an egress filter bridge protocol data unit (“BPDU”) message from the second network node indicating that a link between the first network node and the second network node is a redundant link. The network nodes are layer-2 STP bridges. The apparatus includes, in the first network node, an egress filter timeout circuit that resets a timer in response to receiving the egress filter BPDU message, and a filter clear circuit that clears the egress filter to allow data packets to be sent from the egress port to the second network node in response to the timer reaching a timeout.

Abstract: A software-defined data center, and a deployment method for a service cluster are described therein. An SDN controller manages a cluster by using a shared IP address. The SDN controller obtains an online virtual machine event that is sent by an edge switch accessed by a new online virtual machine; obtains a MAC address of the new online virtual machine, and identifies the new online virtual machine; then identifies whether an IP address of the new online virtual machine is a shared IP address; and if the IP address of the new online virtual machine is the shared IP address, deploys the new online virtual machine to a service cluster corresponding to the shared IP address. The SDN controller automatically completes creation, capacity expansion of the service cluster, so that no manual intervention from a tenant is required, and tenant experience is good.

Abstract: A controller device for a network provides data associated with pipeline capabilities of a programmable switch. The programmable switch receives data associated with pipeline capabilities of the programmable switch. The pipeline capabilities include a plurality of flow tables and allowable table transitions for each of the flow tables. The programmable switch determines that a first flow table and a second flow table are mutually independent based on the allowable table transitions for each of the flow tables. The programmable switch configures a pipeline for data flow in the computing device, the pipeline comprising a plurality of pipeline stages, a particular pipeline stage comprising the first flow table and the second flow table.

Abstract: A system and method for polling a plurality of client devices of different types are provided. A reboot and polling tool pre-polls client devices, where the pre-poll is specific to a type of client device and identifies a state of the client devices. The reboot and polling tool then executes a script on the client devices that changes the state of the plurality of client devices. After the script is executed, the reboot and polling tool post-polls the client devices where the post-poll is specific to the type of client device and the post-poll provides information that identifies changes in the state of the client devices caused by the script.

Abstract: A control system includes an encoder and a control device that controls a target object by using information transmitted from the encoder by serial communication. The encoder includes a position information generating unit that generates position information made of a predetermined amount of data and including absolute position data of an object to be detected; a configuration information generating unit that generates configuration information representing a ratio of the absolute position data in the amount of data during serial communication; and a transmission unit that transmits, to the control device, the position information and the configuration information as a series of serial data. The control device includes a reception unit that receives the position information and the configuration information transmitted from the encoder; and a control unit that processes the position information received by the reception unit on the basis of the configuration information received by the reception unit.

Abstract: A method for performing code block segmentation for wireless transmission using concatenated forward error correction encoding includes receiving a transport block of data for transmission having a transport block size, along with one or more parameters that define a target code rate. A number N of inner code blocks needed to transmit the transport block is determined. A number M-outer code blocks may be calculated based on the number of inner code blocks and on encoding parameters for the outer code blocks. The transport block may then be segmented and encoded according to the calculated encoding parameters.

Abstract: System and method for supporting subnet number aliasing in a high performance computing environment. In accordance with an embodiment, a fabric member can be assigned, by a global fabric manager, an alias fabric local subnet number in order to keep a fabric running after a fabric reconfiguration. The alias fabric local subnet number can be assigned for a period of time, the period of time being static, configurable, or indefinite.

Abstract: In general, techniques are described for enhancing operations of virtual networks. In some examples, a network system includes a plurality of servers interconnected by a switch fabric comprising a plurality of switches interconnected to form a physical network. Each of the servers comprises an operating environment executing one or more virtual machines in communication via one or more virtual networks. The servers comprise a set of virtual routers configured to extend the virtual networks to the operating environments of the virtual machines. A virtual router of the set of virtual routers is configured to prepare tunnel packets by forwarding packets received from virtual machines to an IPSec kernel executing in a host operating network stack, receiving the ESP packets back from the IPSec kernel and forwarding the ESP packets across the virtual networks.

Abstract: A service process control method and a network device, where the method includes selecting, according to an execution policy of at least one service deployed on a network device, M data processors for processing a packet received by the network device, determining a processing sequence for the selected M data processors to process the packet, and invoking the selected M data processors to sequentially process, according to the processing sequence, the packet. An execution sequence for a data processor to process the packet is dynamically generated according to a policy set corresponding to the service, thereby reducing an unnecessary processing process and redundant information collection in a service execution procedure, improving service processing flexibility, and enhancing overall performance of the device.

Abstract: Disclosed is a method that includes calculating, at a collector receiving a data flow and via a hashing algorithm, all possible hashes associated with at least one virtual attribute associated with the data flow to yield resultant hash values. Based on the resultant hash values, the method includes computing a multicast address group and multicasting the data flow to n leafs based on the multicast address group. At respective other collectors, the method includes filtering received sub-flows of the data flow based on the resultant hashes, wherein if a respective hash is owned by a collector, the respective collector accepts and saves the sub-flow in a local switch collector database. A scalable, distributed netflow is possible with the ability to respond to queries for fabric-level netflow statistics even on virtual constructs.

Abstract: An apparatus includes a first edge device configured to receive a data unit destined to a peripheral processing device that is operatively coupled to a network interconnect via a LAG associated with a second edge device and a third edge device. The first edge device is configured to select an edge device set that includes the third edge device and excludes the second edge device, from a group of edge device sets. Each edge device set from the group of edge device sets is directly coupled to the peripheral processing device. The first edge device is configured to send an instance of the data unit to each edge device from the edge device set such that the third edge device sends an instance of the data unit to the peripheral processing device based on a selection method that omits ports on the second edge device as potential selections.

Abstract: A method and system for parallel processing of data messages in a healthcare communication network for coordinating concurrent processing of messages between computer systems over a network. The method and system include determining if a precondition for immediate processing of a message for a clinical workflow type exists, and whether or not the precondition is fulfilled, by looking up a message type and a workflow type of the message in a preconditions table database.

Abstract: Techniques for using traceroute with tunnels and cloud-based systems for determining measures of network performance are presented. Systems and methods include receiving a request from a client to perform a reverse trace; requesting a trace to an endpoint that is one of an egress router and a tunnel client, wherein there is a tunnel between i) the destination and ii) the one of the egress router and the tunnel client; receiving a response to the trace; and sending details associated with the response to the client so that the client aggregates these details with details from one or more additional legs to provide an overall view of a service path between the client and the destination.

Abstract: A service function chain (SFC) based multi-tenancy processing method. The method includes collecting data sets from service function chain enabled domains through tenant aware service function delegators and utilizing the data sets for a massive data processing function. A first delegator among the tenant aware service function delegators collects a first data set from a first service function in an instance of a first service function chain enabled domain among the service function chain enabled domains and sends the first data set to a tenant aware service function. A second delegator among the tenant aware service function delegators collects a second data set from a second service function in an instance of a second service function chain enabled domain among the service function chain enabled domains and sends the second data set to the tenant aware service function.

Abstract: System and techniques for publisher control in an information centric network (ICN) are described herein. Named data criteria to identify data for a workload may be constructed. A discriminator for potential publishers of the data may be constructed. An interest packet may be transmitted based on the named data criteria and the discriminator and a response to the interest packet received from one of the potential publishers.

Abstract: Embodiments of the present invention are directed to a wildcard matching solution that uses a combination of static random access memories (SRAMs) and ternary content addressable memories (TCAMs) in a hybrid solution. In particular, the wildcard matching solution uses a plurality of SRAM pools for lookup and a spillover TCAM pool for unresolved hash conflicts.

Abstract: A packet processing system and method for enabling real-time packet processing while preventing an unnecessary delay increase are provided. A terminal 10-1 and a terminal 10-2 that transmit different types of packets in real time, a communication device 30 that processes packets transmitted by the terminal 10-1, and a packet processing device 100 disposed in a communication path of the packet from the terminal 10-1 and the terminal 10-2 to the communication device. The packet processing device 100 determines a processing method for the packets received from the terminal 10-1 based on the packets received from the terminal 10-2, creates a processing method determination table, and creates a processing method list. The terminal information packet processing unit 124 processes the packets received from the terminal 10-1 per packet unit based on the processing method list.

Abstract: A resource allocation method is provided, the method includes: receives a resource scheduling request by a first side unit (RSU) sent from a first vehicle to everything (V2X) communication group which comprises vehicles in a same driving direction; allocating communication resources for the first V2X communication group. A road side unit is also provided. By utilizing embodiments of the present disclosure, rationality of resource allocation can be improved, qualities of vehicle communication links and channels in the communication group is stable and a performance of vehicle networking can be fully realized.

Abstract: Technologies for providing a multi-tenant local breakout switching and dynamic load balancing include a network device to receive network traffic that includes a packet associated with a tenant. Upon a determination that the packet is encrypted, a secret key associated with the tenant is retrieved. The network device decrypts a payload from the packet using the secret key. The payload is indicative of one or more characteristics associated with network traffic. The network device evaluates the characteristics and determines whether the network traffic is associated with a workload requesting compute from a service hosted by a network platform. If so, the network device forwards the network traffic to the service.

Abstract: System and method for isolating network traffic of multiple users across a network of a computing platform. For example, a method includes receiving data at a networking device of a computing platform. The networking device includes a plurality of routing tables. Each routing table of the plurality of routing tables is associated with a different user of multiple users of the computing platform. A user of the multiple users is identified based at least in part on the received data. In response to identifying the user of the multiple users based at least in part on the received data, a routing table of the plurality of routing tables is identified based at least in part on the identified user. A route from the identified routing table is determined based at least in part on the received data. The received data is sent across a network of the computing platform according to the determined route. The method is performed using one or more processors.

Abstract: An apparatus for use in a packet-based communication system, comprises an input and an output. The apparatus is configured to receive a stream of data packets, having an inter-packet spacing, and store the received data packets and information representing the inter-packet spacing in a buffer, wherein the data packets are no longer than a common maximum data-packet length. The apparatus is further configured to schedule, at intervals, all the contents of the buffer except for a constant amount, into a respective container of a sequence of containers and, if the container then contains an incomplete data packet, schedule the remainder of the incomplete packet into the container. The apparatus is further configured to send the sequence of containers, wherein the positions of the data packets within the containers depend on the received inter-packet spacing, and wherein the constant amount is equal to or greater than the common maximum data-packet length.

Abstract: Embodiments for extending managed switching network in a computing environment. Security policy and authentication functionality may be extended and implemented in a virtualization layer of a virtual switch locally installed on a computer of a user for network switching in a network.

Abstract: Network access is provided to a networking device. In one approach, a method includes: obtaining, by a gateway, access rules for a networking device; providing, by the gateway, one or more dedicated networking tunnels between the gateway and respective remote gateways to one or more respective network segments, wherein the networking device is authorized to access the one or more network segments by the access rules; and routing, by the gateway, networking packets from the networking device based on source address information in the networking packets to the one or more dedicated networking tunnels, and based on destination address information in the networking packets, routing the networking packets to a selection of the one or more dedicated networking tunnels.

Abstract: Embodiments provide techniques for providing return-link routing in a hybrid communications network that includes a number of different networks having different characteristics. User terminal routing systems (UTRSs) provide interfaces between local user networks and the multiple communications networks of the hybrid network. Each UTRS can include a routing table having stored mappings that are populated according to forward-link communications (implicitly or explicitly), each associating a respective one of a plurality of routing table entries with one of the communications networks. When a UTRS receives return-link data from its respective local user network, the received data indicates a destination node. The UTRS can determine which of the stored mappings corresponds to the destination node and can route the received return-link data over a selected one of the communications networks in accordance with the identified one of the mappings.

Abstract: A data processing method includes obtaining, by a session management function (SMF) network element from an external network element, a media access control (MAC) address of a terminal device and an Internet Protocol (IP) address corresponding to the MAC address, and sending, by the SMF network element, the MAC address and the IP address to a first user plane function (UPF) network element, where the MAC address and the IP address are used to send an Address Resolution Protocol (ARP) message, and the ARP message includes the MAC address and the IP address.

Abstract: A flexible Ethernet (FlexE) frame forwarding method, including receiving a first frame through a FlexE client input channel, obtaining a first channel identifier used to indicate the FlexE client input channel and a first subchannel identifier carried in the first frame, where the first subchannel identifier is used to indicate a logical subchannel of the FlexE client input channel, searching a preset forwarding table based on the first channel identifier and the first subchannel identifier to obtain a second channel identifier and a second subchannel identifier, where the second channel identifier is used to indicate a FlexE client output channel, and the second subchannel identifier is used to indicate a logical subchannel of the FlexE client output channel, and forwarding the first frame based on the second channel identifier and the second subchannel identifier.

Abstract: A novel method for troubleshooting a logical network is provided. The logical network has logical forwarding elements operating inside virtual network forwarding engines. The method receives a source identifier and a destination identifier that correspond to nodes in the logical network. The method then retrieves a set of network data from a virtual network forwarding engine and identifies a path in the logical network by traversing the logical network according to the retrieved set of network data. This traversal starts at an initial network node that is identified by the source identifier and continues through a set of next-hop network nodes that are each identified based on the destination identifier. At least some of the network nodes are logical ports associated with logical forwarding elements implemented by the virtual network forwarding engine. The method then reports the set of traversed logical nodes.