Abstract: A communication method includes a first network device obtaining a first route and a second route from a second network device. A first network segment corresponding to the first route is a subnet segment of a second network segment corresponding to the second route. The second route is an aggregated route, and the first route indicates that the first network segment is unreachable. The first network device switches a next hop of the aggregated route based on the first route.

Abstract: A system for facilitating enhanced virtual channel switching in a node of a distributed computing environment is provided. During operation, the system can allocate flow control credits for a first virtual channel to an upstream node in the distributed computing environment. The system can receive, via a message path comprising the upstream node, a message on the first virtual channel based on the allocated flow control credits. The system can then store the message in a queue associated with an input port and determine whether the message is a candidate for changing the first virtual channel at the node based on a mapping rule associated with the input port. If the message is a candidate, the system can associate the message with a second virtual channel indicated in the mapping rule in the queue. Subsequently, the system can send the message from the queue on the second virtual channel.

Abstract: A method, apparatus and product for sub-networks based cyber security. One method comprises detecting a device connecting to a local network which is divided into subnets; determining a usage profile of the device; automatically selecting a subnet to connect the device based on the usage profile; and connecting the device to the selected subnet in the local network. Another method comprises monitoring communication traffic of devices in each of the subnets of a local network; performing anomaly detection to detect an abnormal communication of a device connected to a subnet; blocking the abnormal communication of the device; and removing the device from the subnet and connecting the device to a quarantine subnet of the local network, whereby reducing connectivity of the device with other devices connected to the local network.

Abstract: A communication system is a communication system connected to an upper network and a lower network, and includes at least one intermediate communication device including a plurality of upper ports for inputting and outputting optical signals to and from the upper network, and a plurality of lower ports for inputting and outputting optical signals to and from the lower network, the intermediate communication device being configured to relay communication between the upper network and the lower network, a switching device that is connected to the upper and lower networks and the plurality of upper and lower ports, switches a connection between the upper network and the plurality of upper ports, and switches a connection between the lower network and a plurality of lower ports, and a control device that outputs, to the switching device, an instruction to switch the connection by the switching device according to a communication status between the upper network and the lower network.

Abstract: An apparatus including circuitry configured for: obtaining at least one spatial audio signal which can be rendered consistent with a content consumer user movement, the at least one spatial audio signal including at least one audio signal and at least one spatial parameter associated with the at least one audio signal, wherein the at least one audio signal defines an audio scene; rendering the at least one spatial audio signal to be at least partially consistent with a content consumer user movement and obtain at least one first rendered audio signal; obtaining at least one augmentation audio signal; rendering at least a part of the at least one augmentation audio signal to obtain at least one augmentation rendered audio signal; mixing the at least one first rendered audio signal and the at least one augmentation rendered audio signal to generate at least one output audio signal.

Abstract: One embodiment of the invention features a system that includes a first virtual appliance and a second virtual appliance that support a transfer of content between an on-premises network and a public cloud network. Deployed as part of the on-premises network, the first virtual appliance translates a network address assigned to the content stored within a first non-transitory storage medium, which is associated with on-premises host residing within a first subnetwork of the on-premises network, to a temporary address associated with a second subnetwork. Deployed as part of the public cloud network, the second virtual appliance translates the temporary address back to the network address. The content, such as a software instance, is stored within a second non-transitory storage medium of the public cloud network with a network address identical to the network address used when stored within the first non-transitory storage medium pertaining to the on-premises network.

Abstract: A data management services architecture includes architectural components that run in both a storage and compute domains. The architectural components redirect storage requests from the storage domain to the compute domain, manage resources allocated from the compute domain, ensure compliance with a policy that governs resource consumption, deploy program code for data management services, dispatch service requests to deployed services, and monitor deployed services. The architectural components also include a service map to locate program code for data management services, and service instance information for monitoring deployed services and dispatching requests to deployed services. Since deployed services can be stateless or stateful, the services architecture also includes state data for the stateful services, with supporting resources that can expand or contract based on policy and/or service demand. The architectural components also include containers for the deployed services.

Abstract: A network node (21), which is placed within a core network, receives a message from a transmission source (30) placed outside the core network. The message includes an indicator indicating whether or not the message is addressed to a group of one or more MTC devices attached to the core network. The network node (21) determines to authorize the transmission source (30), when the indicator indicates that the message is addressed to the group. Further, the message includes an ID for identifying whether or not the message is addressed to the group. The MTC device determines to discard the message, when the ID does not coincide with an ID allocated for the MTC device itself. Furthermore, the MTC device communicates with the transmission source (30) by use of a pair of group keys shared therewith.

Abstract: A dynamic controller to automatically generate layer 3 network connections between devices and/or networks associated with a virtual computing environment in response to a request for such connections is provided such that communications associated with the computing environment may be transmitted between the endpoints. For example, the dynamic controller may connect one or more cloud service provider networks, one or more customer-controlled data centers, one or more customer networks, and the like, based on information provided in a connection request. A layer 3 communication controller may also be instantiated within a core network that manages the flow of communications between the connected networks, such as by translating messages between the connected networks so that messages intended for a connected network may match the supported communication protocols of that network and/or providing one or more security features to the transmitted communications.

Abstract: A method (100) for managing the provision of a service between origin and destination endpoints over a communication network is disclosed. The communication network comprises at least two Autonomous Systems (ASs) and an Abstraction and Control of Traffic Engineered Networks Virtual Network (VN) between the origin and destination endpoints. The method comprises defining, at each of the origin and destination endpoints, a service segregation loopback interface corresponding to a subset of traffic belonging to the service (110). The method further comprises binding the subset of traffic to the VN by exposing the service segregation loopback interface defined at the destination endpoint as routing next hop only to traffic belonging to the subset (120).

Abstract: An electronic device, a network switch and an interrupt transmitting and receiving method are provided. The electronic device includes a slave chip and a main chip. The slave chip is configured to generate a plurality of data segments and at least one interrupt message and includes an encoder. The encoder is configured to encode the data segments and the interrupt message to generate a digital data. The interrupt message is arranged between the data segments. The main chip, which is coupled to the slave chip, is configured to receive the digital data and includes a decoder and a control circuit. The decoder is configured to decode the digital data to obtain the data segments and the interrupt message. The control circuit is coupled to the decoder and is configured to process the interrupt message.

Abstract: Systems and methods are provided for supporting scalable multi-homed routing for virtual switch based host channel adapter (HCA) virtualization in a subnet. An exemplary method can provide one or more switches, a plurality of host channel adapters, a plurality of hypervisors, and a plurality of virtual machines. The method can arrange the plurality of host channel adapters with one or more of a virtual switch with prepopulated local identifiers (LIDs) architecture or a virtual switch with dynamic LID assignment architecture. The method can further perform a multi-homed routing for the subnet, wherein at least one of the plurality of host channel adapters comprises two virtual switches, wherein the two virtual switches are treated as endpoints of the subnet, and wherein the multi-homed routing for the subnet ensures that each the two virtual switches are routed through independent paths.

Abstract: One embodiment of the invention features a system including a first gateway and a second gateway that operate in concert to support a migration of a software component from an on-premises network to a public cloud network while preserving an Internet Protocol (IP) address assigned to the software component. The first gateway deployed as part of the on-premises network, and the second gateway deployed as part of the public cloud network. The first and second gateways are in communication via a secure communication path. To support migration of the software component to the public cloud network while retaining its IP address, the second gateway is configured to resolve a media access control (MAC) address for an on-premises host connected to the on-premises network. Similarly, the first gateway is configured to resolve a MAC address for a cloud host connected to the public cloud network.

Abstract: A method, apparatus and product for sub-networks based cyber security. One method comprises detecting a device connecting to a local network which is divided into subnets; determining a usage profile of the device; automatically selecting a subnet to connect the device based on the usage profile; and connecting the device to the selected subnet in the local network. Another method comprises monitoring communication traffic of devices in each of the subnets of a local network; performing anomaly detection to detect an abnormal communication of a device connected to a subnet; blocking the abnormal communication of the device; and removing the device from the subnet and connecting the device to a quarantine subnet of the local network, whereby reducing connectivity of the device with other devices connected to the local network.

Abstract: The disclosure provides an approach for dynamically reprogramming network and network infrastructure in response to VM mobility. The approach provides a hypervisor layer that can observe changes in VM-host relationships and reprogram the associated network and network infrastructure to maintain network communication. The hypervisor layer notifies an elastic network interface of a new IP address to include within its whitelist in response to VM migration to that elastic network interface.

Abstract: In one embodiment, a computer-implemented method of managing a virtual local area network (VLAN) domain associated with a network is provided. In this embodiment, the method comprises: defining a VLAN domain comprising a list of a plurality of connectively coupled ports of the network associated with the VLAN domain; and assigning at least one VLAN associated with the plurality of connectively coupled ports. In another embodiment, a system for managing virtual local area networks (VLANs) in a network is provided. In this embodiment, the system comprises a network provisioning module for defining a VLAN domain comprising a list of a plurality of connectively coupled ports of the network associated with the VLAN domain and assigning at least one VLAN associated with the plurality of connectively coupled ports.

Abstract: Aspects of the subject disclosure may include, for example, a virtual network element that includes a plurality of virtual machine modules configured to process a plurality of control packets in a virtualized telecommunication network. A classifier module is configured to receive telecommunications traffic that includes the plurality of control packets and a plurality of data packets, to separate the plurality of control plane data from the at least one data packet, and to forward the plurality of control packets to selected ones of the plurality of virtual machine modules. A forwarding device, coupled to the classifier module and separate from the plurality of virtual machine modules, is configured to forward the plurality of data packets in the virtualized telecommunication network. Other embodiments are disclosed.

Abstract: An OPC UA session is interpreted as a single transaction according to the invention. In this case, a transaction means that all service calls, apart from the abovementioned calls, are initially only simulated and are not executed and the execution of the service calls is shifted to the termination of the transaction. Each operation inside a session is formally checked and then simulated. The simulated result or the result of the formal check is immediately sent to the client. The client therefore receives a preview of the result of the operations. If the client determines that one of the operations carried out would not lead to the desired result, the client can reject the operations. If the client wants the set operation to be carried out, the client terminates the current session.

Abstract: An information processing apparatus includes a memory, and a processor coupled to the memory and configured to obtain function information indicating a hardware function of a first station-side device on a physical network and communication state information indicating a communication state of the first station-side device, based on the function information, generate setting information for switching a first communication between the first station-side device and a terminal device to a second communication between a second station-side device on a virtual network and the terminal device, specify, based on the communication state information, a time period in which the first communication is not executed, specify switching time which is in the identified time period and at which the first communication is to be switched to the second communication, and cause, based on the setting information and the specified switching time, the second station-side device to start the second communication.

Abstract: Systems and techniques are described for path selection. A packet can be transparently intercepted at an intermediary device. Next, the intermediary device may modify one or more bits in the header of the packet. The intermediary device can then forward the packet to the next hop device. In some network configurations, the modifications to the one or more bits in the header of the packet may cause a downstream device to select a path that is different from the path that would have been selected by the downstream device if the one or more bits in the header of the packet had not been modified. A path selection policy can be used to determine whether or not one or more bits in the header of the packet are to be modified.

Abstract: The present disclosure discloses a method and system for achieving enhanced performance for application message handling. The disclosed system includes a device and is configured to receive, at a first processing layer implemented by the device, a message addressed to a first port. The system is further configured to modify the message to be addressed to a second port indicated in a body of the message prior to forwarding the message to a second processing layer implemented by the device. Furthermore, the system is configured to forward, by the first processing layer to the second processing layer, the modified message addressed to the second port.

Abstract: A method, apparatus and product for sub-networks based cyber security. One method comprises detecting a device connecting to a local network which is divided into subnets; determining a usage profile of the device; automatically selecting a subnet to connect the device based on the usage profile; and connecting the device to the selected subnet in the local network. Another method comprises monitoring communication traffic of devices in each of the subnets of a local network; performing anomaly detection to detect an abnormal communication of a device connected to a subnet; blocking the abnormal communication of the device; and removing the device from the subnet and connecting the device to a quarantine subnet of the local network, whereby reducing connectivity of the device with other devices connected to the local network.

Abstract: A connection management message that uses a proxy attribute is received, wherein the connection management message includes information on a first proxy queue pair and a second proxy queue pair, wherein the first proxy queue pair provides communication between a proxy node and an initiator node in a switchless network, and wherein the second proxy queue pair provides communication between the proxy node and a target node in the switchless network. The connection management message that uses the proxy attribute, channels datagrams received from the initiator node to the target node in the switchless network.

Abstract: Converged network management application and system is provided that delivers a management platform as a service that can view and/or manage all managed networks in the aggregate, or any one of them individually (including individual devices within the managed networks), in a secure and efficient manner, providing continuously available intelligence in real time on the managed networks and systems, and overcoming integration issues including conflicting address schemas, the need to avoid unnecessary infrastructure, and the need acquire all necessary information in real time within applicable memory and bandwidth constraints.

Abstract: A managed boot process system includes a management device coupled to a networking device through a network. The networking device includes a storage system with an assured boot image, a plurality of runtime images, and a plurality of session data, and a memory system having boot instructions. A processing system in the networking device stores the plurality of session details in the storage system during a management session with the management device and prior to a reboot. The processing system then performs a reboot and executes the boot instructions to load the assured boot image. The networking device then uses the session details to restart the management session without reauthorization subsequent to loading the assured boot image and prior to loading a runtime image. The networking device then provides a graphical user interface over the network to the management device and uses it to receive a management instruction for execution.

Abstract: A device may activate a layer 3 interface of the device based on activation of a first layer 2 interface associated with the layer 3 interface. The device may detect activation of a second layer 2 interface, associated with the layer 3 interface, after activating the layer 3 interface. The device may activate a filter to prevent transfer of network traffic via the second layer 2 interface based on detecting activation of the second layer 2 interface. The device may perform duplicate address detection, in association with the second layer 2 interface, for a layer 3 network address assigned to the device. The device may determine whether the layer 3 network address is a duplicate network address based on performing the duplicate address detection. The device may selectively maintain or deactivate the filter based on determining whether the layer 3 network address is a duplicate network address.

Abstract: Measures for processing data in a packet-switched network. A first device is configured to snoop control packets of a predetermined control plane protocol in the network. The predetermined control plane protocol is operated by a plurality of other devices in the network to obtain Layer 2 information on the basis of known Layer 3 information. The first device does not operate the predetermined control plane protocol in the network. At the first device, in response to identifying that a given snooped packet was generated according to the predetermined control plane protocol. Layer 3 information associated with a second device in the plurality is extracted from the given snooped control plane protocol packet on the basis of known Layer 2 information associated with the second device. The second device is connected to the first device.

Abstract: A controller is coupled by a connection box to layer two nodes, such as top-of rack (TOR) switches. The controller manages control plane operations and forwards port extension data, such as IEEE 802.1BR protocol data to the connection box and the layer two nodes. The port extension data included information identifying a virtual path that includes ports in the connection box and one or more of the nodes. The connection box and the nodes handle forwarding plane operations. The virtual path is associated with the destination, such as a client device or a server device, and the port extension data causes traffic intended for the destination to be forwarded to the destination via the virtual path.

Abstract: Embodiments are disclosed for networked computing devices and methods of managing talker and listener attributes in a network. In some embodiments, a computing device comprises a networking device that receives and propagates data streams and information relating to the data streams to other devices in a network and a processor. The computing device also comprises a storage device that stores the information related to the data streams and instructions executable by the processor to receive a first talker attribute, selectively discard a second talker attribute, the second talker attribute being stored on the storage device prior to receiving the first talker attribute, and store the first talker attribute.

Abstract: Provided is a novel approach for connecting servers to peripherals, such as NICs, HBAs, and SAS/SATA controllers. Also provided are systems for arranging peripherals within one or more I/O directors, which are connected to the servers over an Ethernet network. Such arrangement allows sharing the same resource among multiple servers.

Abstract: Converged network management application and system is provided that delivers a management platform as a service that can view and/or manage all managed networks in the aggregate, or any one of them individually (including individual devices within the managed networks), in a secure and efficient manner, providing continuously available intelligence in real time on the managed networks and systems, and overcoming integration issues including conflicting address schemas, the need to avoid unnecessary infrastructure, and the need acquire all necessary information in real time within applicable memory and bandwidth constraints.

Abstract: Described herein are systems and methods for testing the application quality of service in addition to the network quality of service to electronic devices, for example where the electronic devices are located within a massive user presence environment. The systems and methods further comprise improving the quality of service to the electronic devices by making changes to the telecommunication network on a predictive basis based upon future events that result in a massive user presence. The techniques described herein improve the functioning of the network and improve the functioning of applications running on electronic devices.

Abstract: The present invention provides a mechanism for fast routing of data in a Storage Area Network. A protocol interface module (PIM) interfaces with outside networks and the storage devices, such as over fiber channel (FC). The PIM encapsulates received data into a streaming protocol, enabling storage processors to direct data to/from the appropriate physical disk in a similar manner to the directing of network messages over the Internet or other network.

Abstract: A network element in a data center includes a plurality of servers and a switch. The switch includes a plurality of physical ports, a packet-forwarding table, and an application program interface (API) for modifying a packet-forwarding behavior of the switch. The packet-forwarding table determines a packet-traffic distribution across the servers by mapping packet traffic arriving at the switch to the plurality of ports. Each port of the plurality of physical ports is in communication with one of the servers. The network element further includes means for determining in real time the packet-traffic distribution across the servers, and means for dynamically changing the packet-traffic distribution across the servers in response to the determined packet-traffic distribution by modifying the packet-forwarding behavior of the switch through the API of the switch.

Abstract: A system and method executed by a server for connecting with a client over a Fiber Channel (FC) network. The method includes receiving, from the client over the FC network, a first Small Computer System Interface (SCSI) request to establish a virtual connection, assigning an identifier to the virtual connection, responding to the first SCSI request by sending a first SCSI response, including the virtual connection identifier to the client over the FC network, receiving, from the client, a second SCSI request including the virtual connection identifier and a descriptor for a server process at the server, and associating the virtual connection with a server process at the server corresponding to the server process descriptor.

Abstract: A network management apparatus includes a first storage unit, a second storage unit, and a controller. The first storage unit stores therein communication groups included in the same subnet and information about communication devices belonging to the respective communication groups in association with each other. The second storage unit stores therein for each of the communication devices a port of a relaying device connected to the communication device as a connection destination port. The controller allows the relaying devices to perform communication between the connection destination ports on the basis of the first storage unit and the second storage unit to allow communication only between the communication devices belonging to the same communication group.

Abstract: A method and apparatus for dynamic network link acceleration provides a managed communication link for accelerated and reliable network communication between a client and other network devices. In one or more embodiments, a client computing device which generates communication packets of a first type is enhanced with a front end mechanism which selectively encodes the data packets into packets of a second type. The data packets which are encoded into a second type are transmitted over a managed communication link which may provide error correction, security, quality of service, and other services including acceleration of communications.

Abstract: Systems and techniques are described for path selection. A packet can be transparently intercepted at an intermediary device. Next, the intermediary device may modify one or more bits in the header of the packet. The intermediary device can then forward the packet to the next hop device. In some network configurations, the modifications to the one or more bits in the header of the packet may cause a downstream device to select a path that is different from the path that would have been selected by the downstream device if the one or more bits in the header of the packet had not been modified. A path selection policy can be used to determine whether or not one or more bits in the header of the packet are to be modified.

Abstract: A transport system comprises 2 apparatuses. The first transport apparatus notifies, for each of first physical ports, to the second transport apparatus, a valid first lane count and identification information of the first physical port. The second transport apparatus is configured to: obtain, for each of second physical ports, a valid second lane count and identification information of the second physical port; associate, based on the valid second lane count and the identification information of the second physical port, and the valid first lane count and the identification information of the first physical port, the identification information of the first and second physical port; and transmit, when data including identification information of one of the first physical ports is transmitted, the data from the second physical port that is identified by the identification information associated with the identification information of the one of the first physical ports.

Abstract: Upon receipt of an intercepted first Ethernet Frame, a communication system converts the first Ethernet Frame into a second Ethernet Frame including a second identifier based on the first identifier and the conversion information, and sends the second Ethernet Frame toward a first input/output port identified by the second identifier. The system, in sending an Ethernet Frame on which communication service has been executed from the virtual machine, converts the Ethernet Frame on which the communication service has been executed into a third Ethernet Frame including a third identifier identifying a second input/output port of the virtual machine which has executed the communication service. The system converts the third Ethernet Frame into the first Ethernet Frame including the first identifier based on the third identifier and the conversion information and sends the first Ethernet Frame toward the destination of the first Ethernet Frame.

Abstract: Systems and methods for managing distributed data using any of a plurality of data models are disclosed. One method includes receiving a data request from one of a plurality of database interfaces, each database interface associated with a different data model type. The method further includes translating the data request to a second data request based at least in part on a data model neutral description of a data model in the data store that is associated with data and the database interface, wherein the data store maintains descriptions of each of a plurality of different data models corresponding to the different data model types. The method also includes executing the second data request, thereby reflecting the data request in data storage such that data is managed consistently across each of the plurality of database interfaces.

Abstract: The subject disclosure is directed towards a technology by which computing devices such as a phone and a personal computer may reliably communicate internet protocol (IP)-based network data to one another via an unreliable point-to-point data transfer mechanism such as a USB connection. To this end, each computing device includes a bi-directional proxy component (e.g., a proxy and reliable transfer tunnel), that processes network data into packets for transmission over the point-to-point connection, and processes received packets into internet protocol (IP)-based network data for a network connection. Also described are an acknowledgement and sequence number-based mechanism that ensures reliable point-to-point data transfers, and a flow control mechanism that prevents a recipient from receiving more data than it can handle until ready.

Abstract: A method for communication includes receiving a packet at a first node for transmission over a link to a second node. The data in the packet is divided into a sequence of cells of a predetermined data size. The cells have respective sequence numbers. The cells are transmitted in sequence over the link, while storing the transmitted cells in a buffer at the first node. The first node receives acknowledgments indicating the respective sequence numbers of the transmitted cells that were received at the second node. Upon receiving an indication at the first node that a transmitted cell having a given sequence number was not properly received at the second node, the stored cells are retransmitted from the buffer starting from the cell with the given sequence number.

Abstract: A system and method for executed by a server for communicating between the server and a client over a Fiber Channel (FC) network. The method includes receiving, from the client, a first SCSI request including an identifier for a virtual connection and a descriptor for a server process at the server, creating a socket to the server process using the process descriptor, associating the socket with the virtual connection, receiving, from the client, a second SCSI request, including the virtual connection identifier and a call message, and writing the call message to the socket associated with the virtual connection.

Abstract: The disclosure generally relates to mechanisms to protect hybrid networking equipment at a port level granularity and thereby provide capabilities to specify the protection of client services on a port-by-port basis. For example, in one embodiment, a Virtual Connection Point (VCP) may be established as a termination point for a transport-side network connection and configured as a Layer 1 bridge/select connection to switch among any one of a plurality of backplane Layer 1 termination points. The plurality of backplane Layer 1 termination points may be protected using a link aggregation group, wherein a Layer 2 switch may be established to direct packets between the link aggregation group and the VCP configured as the Layer 1 bridge/select connection.

Abstract: Methods and systems are provided for steering network packets. According to one embodiment, a dynamically configurable steering table is stored within a memory of each network interface of a networking routing/switching device. The steering table represents a mapping that logically assigns each of the network interfaces to one of multiple packet processing resources of the network routing/switching device. The steering table has contained therein information indicative of a unique identifier/address of the assigned packet processing resource. Responsive to receiving a packet on a network interface, the network interface performs Layer 1 or Layer 2 steering of the received packet to the assigned packet processing resource by retrieving the information indicative of the unique identifier/address of the assigned packet processing resource from the steering table based on a channel identifier associated with the received packet and the received packet is processed by the assigned packet processing resource.

Abstract: A method is provided in one example and includes receiving a first packet of a connection between a client and a server. The first packet is tagged with a tag comprising a member id of a service node in a service cluster that includes a plurality of nodes having distinct member ids. The method can also include mapping the member id to the service node in a tag-to-node map; receiving a second packet of the connection, where the second packet is tagged with the tag comprising the member id; determining the service node from the tag-to-node map; and forwarding the second packet to the service node.

Abstract: An in-vehicle infotainment method and device, the in-vehicle infotainment device including a first processor for executing a web application, and a second processor for outputting vehicle data to the first processor. The first processor includes a first-processor-side inter-node communication (INC) interface module for transmitting and receiving information to and from the second processor. The second processor includes a second-processor-side INC interface module for transmitting and receiving information to and from the first processor. The first processor constructs a data structure including at least one lower node and a higher node of the lower node according to the vehicle data received from the second processor, locates vehicle data of the same attribute as internal values of lower nodes belonging to the same higher node of the data tree, and outputs the data tree to the web application.

Abstract: An information handling system includes a network switching device coupled to a network and a host processing system. The network switching device includes a physical link with an associated virtual link. The host processing system includes a virtual machine and a network interface device coupled to the physical link. The network interface device includes a virtual network interface associated with the virtual machine. The virtual link is associated with the virtual network interface such that communication between the network and the virtual machine is provided via the virtual link and the virtual network interface.

Abstract: Disclosed are various embodiments of a network switch for storing a prefix address and a mask corresponding to the prefix address, the prefix address and the mask each representing a binary value, the mask representing a number of significant bits of an address beginning with a most significant bit. The network switch obtains a network frame via one of a plurality of network interfaces, the network frame comprising a network address in a header of the network frame, the network address being a binary value representing a physical address of a network interface device. The network switch determines a truth value associated with a comparison of a mask number of bits of the prefix and network addresses, the truth value indicating an equivalence of the comparison. In response to the truth value, the network switch may initiate at least one action associated with the network frame.