Abstract: A computing system stores source code files in a hierarchy of database tables. A plugin, executable within a source code editor, is configured to: receive, by way of uniform resource locators (URLs) related to the computational instance, table names of the database tables, and file names of the source code files; cause the editor to display, on a first pane of a graphical user interface (GUI), a menu of the table and file names; receive a selection of a file name; receive, by way of a URL, a source code file with the file name; cause the editor to display, on a second pane of the GUI, an editable representation of the source code file; receive a command to store the source code file (which was modified by way of the second pane); and transmit, by way of the URL, the source code file as modified.

Abstract: A method is described that enables communication between two disjoined networks with overlapping IP address ranges. An intermediary function in each of the networks and a unique IP address pool are deployed to facilitate the communication. This method also enables communications between one network with a group of networks with overlapping IP address ranges.

Abstract: Systems and methods utilize network destination identifiers, such as IP addresses, that are simultaneously advertised from multiple locations. The network destination identifiers may be announced in multiple geographic regions. Network traffic routed to devices advertising the network destination identifiers may be routed to appropriate endpoints. When a device receives such traffic, it may send the traffic to an endpoint in a network served by the device. In some instances, such as when such an endpoint is not available, the network traffic may be sent to another network that is served by another device that advertises the network destination identifiers.

Abstract: In certain embodiments, a communication (comm) network has interconnected comm systems and a mapping engine, each comm system having one or more Layer 1 (L1) components physically connected to one or more Layer 2 (L2) components, wherein components are physically connected to L1 components of different comm systems. Logical connections between the L2 components of the different comm systems are determined using a link-layer discovery process (LLDP), and physical connections between the L1 and L2 components of each comm system are determined using LLDP snooping. The mapping engine queries the L2 components for LLDP results and the L1 components for LLDP snooping results and generates end-to-end mappings for circuits between the L2 components of the different comm systems, where the end-to-end mappings are represented in a circuit inventory database that can be accessed to avoid system outages when the network is modified.

Abstract: Techniques for community detection based on DNS querying patterns are disclosed. For example, techniques for community detection based on DNS querying patterns for anomaly detection and monitoring efficiencies are disclosed. In some embodiments, a system, process, and/or computer program product for community detection based on DNS querying patterns includes receiving DNS log files, wherein the DNS log files include a DNS query and a DNS response for resolution of the DNS query; generating a graph based on the DNS log files; identifying a plurality of communities using the graph based on DNS querying patterns; and detecting an anomaly in DNS activity associated with one or more of the communities based on a DNS querying rule.

Abstract: Some embodiments use one or more FPGAs and external memories associated with the FPGAs to implement large, hash-addressable tables for a data plane circuit. These embodiments configure at least one message processing stage of the DP circuit to store (1) a first plurality of records for matching with a set of data messages received by the DP circuit, and (2) a redirection record redirecting data messages that do not match the first plurality of records to a DP egress port associated with the memory circuit. These embodiments configure an external memory circuit to store a larger, second set of records for matching with redirected data messages received through the DP egress port associated with the memory circuit. This external memory circuit is a hash-addressable memory in some embodiments.

Abstract: A system comprising: a plurality of mobile edge caches integrated within a corresponding plurality of mobile environments; a local network manager coupled to each edge cache device in each mobile environment to provide network connectivity to client devices within each mobile environment; a mobile high speed network interface coupled to each mobile edge cache within each mobile environment to establish a high bandwidth link to one or more fixed high speed network interfaces when the mobile environment is within range; a fixed core cache to store content titles owned by a content provider, the content titles to be distributed to the plurality of mobile edge caches, each content title comprising a plurality of title segments; wherein the content provider is to maintain a primary website to provide access to each content title by streaming apps installed on client devices, a streaming app running on a first client device within a first mobile environment to generate a request for a first content title responsive

Abstract: A method, apparatus, and computer program product are provided to access a web site. In the context of a method, the method includes acquiring a web address that meets a preset condition, determining a server corresponding to the web address and establishing a transport layer connection therewith. The method further includes upon receiving an instruction for accessing a website corresponding to the web address, using the transport layer connection to send a network request to the server for acquiring the webpage content of the website. Such method can save time for establishing a transport layer connection, thereby improving the efficiency of accessing a web site.

Abstract: One or more implementations of the present specification relate to blockchain-based cross-chain data access methods and apparatuses, and electronic devices. An access request that is specific to target data and that is sent by a node device is obtained. The target data is stored in a target blockchain of a multi-chain system that comprises a plurality of blockchains. The access request comprises an access path of the target data. The target blockchain that the target data is located in is determined based on the access path of the target data. A corresponding data access driver configured for the target blockchain is determined based on the access path of the target data. The data access driver is invoked to parse the access request and to access the target data.

Abstract: The present invention is directed to systems and methods for providing secure dynamic address resolution and communication. Accordingly, a node may include processor and memory having instructions thereon, that when executed, cause the node to pair with another node. The pairing may include creating a DNS record on the node including a current address associated with the second node, this current address may be dynamically updated. The instructions may further allow the node to transmit a message to the second node, based on a resolved address from the DNS record on the first node. Authentication, dynamic message encryption and the provision of a DNS cache may further be implemented on the node.

Abstract: A system for managing electronic mail (email) from among email recipients may include an email management server configured to store an email reply-impermissible flag for email conversation threads and user devices each associated with a given email recipient from among the email recipients. Each user device may be configured to display a given email having a corresponding email conversation thread associated therewith and communicate an email reply status query message to the email management server for the given email. The email management server may be configured to determine if the email reply-impermissible flag is set for the corresponding email conversation thread based upon the email reply status query message for the given email, and if so, cooperate with a corresponding user device to disable replying to the given email, otherwise cooperate with the corresponding user device to permit replying to the given email.

Abstract: Examples provided herein are directed to a computing device and media playback system sharing access to a media service corresponding to a media application installed on the computing device. In one example, a media playback system may be configured to (i) receive from the computing device an authorization code that corresponds to a media application installed on the computing device that is authorized to access media from a media service, (ii) transmit to the media service an authorization request with the authorization code, (iii) receive from the media service an authorization token that facilitates obtaining media from the media service, and (iv) transmit to the media service a request for media for playback by the media playback system, where the request for media includes the authorization token.

Abstract: A communication network (3020) is a bus type communication network that communicably connects each battery module (2000). In the battery module (2000), a communication identifier that is used in communication through the communication network (3020) is set. A transmission unit (2020) transmits identifier information to all of the other battery modules (2000) through the communication network (3020). The identifier information indicates a candidate identifier that is a candidate of the communication identifier. A communication arbitration unit (2060) performs communication arbitration for the identifier information transmitted by the transmission unit (2020). In a case of winning in the communication arbitration, a decision unit (2080) decides the candidate identifier indicated in the transmitted identifier information as the communication identifier used by the battery module (2000).

Abstract: According to an example of a method for forwarding a packet, a ESGW device decapsulates a received downstream data packet to obtain a downstream IP data packet when a destination MAC address of the downstream data packet is an MAC address of the ESGW device; determines a matching ARP entry of an IP address of a target user terminal based on the destination IP address of the downstream IP data packet to obtain a session ID of the target user terminal; determines a length field of a PPPoE header by a microcode, and obtains a pre-stored fixed-value field of the PPPoE header from a data storage area; encapsulates the downstream IP data packet into a downstream PPPoE data packet based on the session ID, the length field, and the fixed-value field, and forwards the downstream PPPoE data packet through an egress port of the matching ARP entry.

Abstract: A domain name access method and a device are described. As described herein, a domain name server (DNS) server performs resolution on a domain name requested by the terminal device. The DNS server may then send an internet protocol (IP) address of an application server obtained through the resolution and use condition information to the terminal device. With this, communication efficiency of the terminal device can be improved, and waste of transmission resources in a communications system is also avoided.

Abstract: A method of providing a set of network addresses associated with a managed forwarding element (MFE) in a logical network that includes a set of data compute nodes (DCNs). The DCNs are hosted on a set of physical hosts. Each DCN is connected to an MFE on the corresponding host. The method receives a request to translate an MFE into a set of network addresses, the request comprising an identification of the MFE. The method identifies a logical network entity associated with the MFE based on the identification of the MFE. The method identifies a set of network addresses associated with the identified network entity and provides the set of network addresses as the set of network addresses associated with the identified network entity.

Abstract: The present disclosure is related to a computer-implemented method and system for distinguishing human-driven Doman Name System (DNS) queries from Machine-to-Machine (M2M) DNS queries. The method includes receiving a DNS query, which includes a domain name, generating a probability score for the domain name based on one or more predetermined rules, and categorizing the DNS query as a human-driven DNS query or a M2M DNS query based on the probability score.

Abstract: The invention provides a computer simulation system for simulating a data centre. The simulation system uses a logical representation of the data centre to perform the simulation. This logical representation includes a plurality of nodes representing devices in the data centre. Each node has an input for applied load and outputs for electrical power drawn and losses in the form of heat output. Each node also has a function for calculating the outputs from the inputs. A first set of connections between the nodes represent electrical power drawn by one device in the data centre from another device in the data centre. A second set of connections between the nodes represent a thermal load applied by one device in the data centre to another device in the data centre. The simulator can be run for a series of different operating conditions to map data centre efficiency, for example, or to assess the impact of different IT devices on the data centre.

Abstract: A method for implementing an on-premises process broker. The method may include receiving parameter data from a system of engagement, whereby the parameter data includes a query goal. The method may include storing the parameter data in a cache. The method may include preparing a REST call using programming logic based on the parameter data. The method may include transmitting the prepared REST call to a system of record. The method may further include receiving response data from the system of record based on the transmitted REST call. The method may also include updating the parameter data in the cache based on the response data. The method may include determining whether the query goal is satisfied. The method may also include transmitting the parameter data to the system of engagement based on determining the query goal is satisfied.

Abstract: Techniques for transforming data based on a virtual topology are disclosed. A computer network is associated with a physical topology and a virtual topology. A physical topology is a particular arrangement of digital devices. A virtual topology is a description of a particular arrangement of virtual topology entities (VTEs). VTEs of the virtual topology are instantiated on digital devices of the physical topology. A processing component associated with a particular VTE processes data to perform one or more functions of the particular VTE. An emulation component associated with the particular VTE modifies the data to emulate performance of the functions by the particular VTE.

Abstract: Aspects of the present disclosure involve systems, methods, computer program products, and the like, for correlating information associated with one networking transmission protocol, such as Internet Protocol version 6 (IPv6), to information associated with a different networking transmission protocol, such as Internet Protocol version 6 (IPv4). More specifically, when resolving an Internet Protocol (IP) address associated with a requesting device to a network, the system may base the resolved destination on one or more attributes of a known address to build a network mapping of the received IP address. In one specific example, an IPv6 address is received and associated with a known IPv4 address to map the network.

Abstract: Systems and methods for out-of-band communications in the domain name system (DNS) are disclosed. Embodiments include a system for negotiating DNS services in the DNS. The system includes an in-band communication channel connecting a first party and a second party, and one or more out-of-band communication channels connecting the first party and the second party. The first party performs messaging for the DNS services with the second party using the in-band communication channel. Further, the first party advertises terms of the DNS service offered by the second party using the one or more out-of-band communication channels.

Abstract: A system includes a security controller located within a central-zone in communication with a provisioned agent operating on an edge-zone device. The security controller may implement controller-blind security control on the edge-zone device by making security authorization determinations using a secure-operation confidence analysis performed by the provisioned agent. The provisioned agent, operating within the edge-zone, may have access to un-sanitized data, which may be unavailable to the security controller in the central-zone. The security controller may provide condition-descriptors via a secure-operation confidence assignment matrix. Using the condition-descriptors, the provisioned agent determine feedback, which may include a secure-operation confidence coefficient, based on the un-sanitized data to which the security controller is blind.

Abstract: The DNS-based method of transmitting data provides a telecommunication method for transmitting user-selectable data through the Domain Name System (DNS). Selected data is encoded as an alphanumeric character string on a user device. A uniform resource locator (URL) having a domain part and a host part is generated, where the host part is constructed from the alphanumeric character string. The URL is transmitted from the user device to a local DNS server. The URL is forwarded from the local DNS server to an authoritative DNS server associated with a domain name of the domain part. A set of response bytes, which are responsive to the user-selectable data encoded as the alphanumeric character string of the host part, is generated at the domain and transmitted from the authoritative DNS server to the local DNS server. The set of response bytes are transmitted from the local DNS server to the user device.

Abstract: A proxy server has a proxy callback interface to receive a webhook call from a callback producer server of a web service, the webhook call including a webhook channel address and payload callback data. A proxy server database stores a callback record comprising the payload callback data in a proxy server database. A query interface receives a callback query from a callback consumer server, the callback query identifying the webhook channel address. The query interface further configured to identify a plurality of callback records associated with the webhook channel address stored within the proxy server database after receipt of a previous callback query from the callback consumer server, and return the plurality of callback records to the callback client responsive to the callback query.

Abstract: According to an example of a method for forwarding a packet, a ESGW device decapsulates a received downstream data packet to obtain a downstream IP data packet when a destination MAC address of the downstream data packet is an MAC address of the ESGW device; determines a matching ARP entry of an IP address of a target user terminal based on the destination IP address of the downstream IP data packet to obtain a session ID of the target user terminal; determines a length field of a PPPoE header by a microcode, and obtains a pre-stored fixed-value field of the PPPoE header from a data storage area; encapsulates the downstream IP data packet into a downstream PPPoE data packet based on the session ID, the length field, and the fixed-value field, and forwards the downstream PPPoE data packet through an egress port of the matching ARP entry.

Abstract: A system is provided that permits the use of classification information that can be interpreted by a computer system. To this end, a system and method may be provided for creating classification information that may be interpreted by a computer system. Such classification information may be associated with content, and permit a computer system to process the content based on the classification information. In one example, classification information may be associated by a user, system, or process with a portion of content, and a computer system processes the content based on the classification information. For instance, the classification information may cause content to be processed in a particular way, presented to a user by a particular application program, cause the content to be forwarded to a particular user, or otherwise influence how the content is handled.

Abstract: A user device receives a first media item that is associated with a second media item. The device determines that a playback state for the device indicates that the device is paired with an alternative playback device. The device sends the playback state in a request for the second media item, receives the second media item in a first format for playback on the user device and in a second format for playback on the alternative playback device. The device determines whether the playback state of the device is the same. The device displays a first graphical representation of the second media item in the first format on the user device if the user device is no longer paired with the alternative playback device and displays a second graphical representation of the second media item in the second format on the user device if the user device is still paired with the alternative playback device.

Abstract: Techniques are provided for optimizing the operations of an ICN, particularly for an ICN with clustered nodes. A cluster head node may function as an orchestrator and a coordinator for efficient caching, routing, and computing and for co-existence of ICN and IP nodes in the network. A content store of an ICN router may include an indication of the time after which data expires and the new data is to be swapped in place of the expired data after that point in time. Digital rights management (DRM) enforcement is provided by managing access to a DRM engine in at least one of the ICN nodes in a cluster. Congestion control is provided by minimizing the number of ICN scoped interest requests and thereby minimizing the potentially high volume of data responses. These techniques optimize interest packet forwarding and processing through collaboration with neighboring ICN nodes.

Abstract: In general, this disclosure describes a service peering exchange for creating and managing service-to-service paths among applications. For example, a service peering exchange with network connectivity with multiple networks may receive application programming interface (API) data describing APIs for services provided, e.g., by enterprises or cloud service providers (CSPs) and accessible via the networks using service requests. Such services may include, for example, data storage, eCommerce, billing, marketing, customer relationship management (CRM), social media, digital media, financial, weather, search, and other services accessible using machine-to-machine communication over a network. An administrator or customer of the service peering exchange may configure policies that are applied by the service peering exchange to orchestrate service-to-service paths among different services accessible via the different networks.

Abstract: There is provided a method in a network element of a radio communication network, the method comprising: grouping, by the network element, a plurality of discovery patterns into at least two groups, wherein each discovery pattern comprises one or more discovery slots on radio resources for detecting discovery signals by a network node; associating at least one of the groups with a first spatial parameter and at least one other group with a second spatial parameter; and transmitting configuration information enabling a network node to utilize a discovery pattern belonging to a group associated with a spatial parameter that corresponds to spatial information of the network node.

Abstract: An information handling system includes a baseboard management controller (BMC) configured to communicate with a processor via a BMC-to-Operating System (OS) communication link, and a first device coupled to the processor and including a Management Component Transport Protocol (MCTP) module. The MCTP module provides access to a first manageability feature of the first device. A BMC agent a) receives a first MCTP command from the BMC via the BMC-To-OS communication link, the first MCTP command to configure the first manageability feature, and b) provides the first MCTP command to the MCTP module.

Abstract: A server configured to accept a request from a client terminal includes a storage configured to store a description file including a script to cause the client terminal to perform a confirmation process to confirm availability of access to a predetermined host server with a predetermined port number, and a unit configured to transmit the description file stored in the storage to the client terminal based on the request.

Abstract: Systems and methods described herein provide selective synchronization of DNS records. A synchronization data store is synchronized by: obtaining a complete set of domain name system (DNS) records for a first data center; and copying the complete set of DNS records to the synchronization data store. After the synchronization data store is initialized, at a particular time interval, a snapshot of the complete set of DNS records is repeatedly collected. Differences between the copied complete set of DNS records of the synchronization data store and the snapshot of the complete set of DNS records are identified. The synchronization data store is updated with the differences and a determination is made as to whether the differences should be implemented at a second data center. When the differences should be implemented at the second data center, the differences are propagated to the second data center, otherwise they are not.

Abstract: In an illustrative embodiment, the present disclosure relates to systems, methods, and an industrial internet of things (IIOT) platform and environment for generating a device integration definition to be used for configuring a new device type for interoperability with the IIOT platform and environment, where the device integration definition includes a standardized format in a programming language syntax, the device integration definition is customizable using code hook templates for issuing commands to the device type, and the device integration definition is customizable using control templates for applying the device integration definition as a foundation for preparing a graphical user interface for configuring devices of the device type with the IIOT platform and environment.

Abstract: A system may retrieve a packet in a network edge of a computer network. The system may identify a source address of the packet and a domain name that is being resolved that is associated with the packet and determining a time to live for the domain name, based at least in part on a record associated with the domain name. The server may further determine a relevance value indicative of an importance of a server associated with the domain name based at least in part on a frequency of the domain name in a domain name system list comprising a plurality of servers associated with a plurality of domain names, wherein the frequency is normalized by the time to live for the domain name. The system may sort the domain name system list according to the relevance value.

Abstract: Aspects of the present disclosure involve systems, methods, computer program products, and the like, for providing a proxy server or scrubbing service for an authoritative domain name server (DNS) of a CDN to prevent or otherwise mitigate attacks on the server. The proxy server may receive incoming requests to the authoritative DNS and determine which requests are valid and which are potentially part of an attack on the network. In one embodiment, the proxy server may then “scrub” or otherwise remove the requests of the attack to mitigate the effect of the attack on the network. For example, the proxy server may ignore the request, may direct the request to a “dead-end” server or other device to prevent overloading of the target device, may instruct a device from which the request was sent to discard the request, etc.

Abstract: Techniques to perform the dynamic configuration of load-balanced relay operations are described. In one embodiment, an apparatus may comprise a first load balancer component, a second load balancer component, a first relay server component, a second relay server component, and a persistent shared-memory storage component. The apparatus may be operative to perform the dynamic configuration of load-balanced relay operations for a two-tier relay system using persistent shared-memory storage in which a session identifier received from client devices is used to coordinate the activities of the relay server components based on information shared via the persistent shared-memory storage component. Other embodiments are described and claimed.

Abstract: The disclosure generally relates to a vulnerability management system configured to implement an asset-based identification algorithm to identify, update, and otherwise reconcile assets in a network according to various identification attributes that are ordered on a spectrum from authoritative to speculative based on an ability that each identification attribute has to accurately link a host to a given asset. The identification algorithm may further enable an elastic asset-based licensing approach, wherein each asset that is scanned in a current licensing period consumes a single license and licenses are reclaimed from any old assets that are not scanned in a current licensing period (i.e., the old assets do not count towards a total licensed asset count. Furthermore, asset counts may be allowed to temporarily exceed the total licensed asset count without requiring license upsells, with true-up payments only required if and/or when asset counts reflect general expansion of a customer network.

Abstract: Methods and apparatus for efficiently establishing communications connections, e.g., for a secondary application, are described. A device to device communications network has established routing paths, e.g., corresponding to a first application. Different segments of the network use different gateways. Individual communications devices within a segment of the network may have incomplete information on the routing within the segment. A wireless communications device advertises the gateway device which it uses for the first application. A first communications device seeking to establish a communications connection with a second communications device for a second application uses obtained gateway information to make transmission and/or routing decisions, e.g., identifying a third communications device which can bridge a routing path gap between two segments of the network.

Abstract: Techniques for determining connectivity may include: defining predetermined configurations, each including a predetermined zoning configuration of a network and selection criteria indicating when to transition into and activate the predetermined configuration; loading the predetermined configurations; activating a first of the predetermined configurations that includes a first predetermined zoning configuration and first selection criteria; receiving current I/O workload and/or performance information for the network; determining whether the current I/O workload and/or performance information for the network matches second selection criteria associated with a second of the predetermined configurations that is different from the first predetermined configuration currently activated; and responsive to determining the current I/O workload and/or performance information matches the second selection criteria, activating the second predetermined configuration that is different from the first predetermined configura

Abstract: One or more computing devices, systems, and/or methods for transferring subscriptions are provided. For example, a user (e.g., and/or a device associated with the user) of a communication platform may request to transfer a plurality of subscriptions from a first account to a second account. Access information associated with the first account may be used to access a first storage space of the first account, the plurality of subscriptions may be identified based upon the first storage space, and the plurality of subscriptions may (e.g., concurrently) be transferred from the first account to the second account.

Abstract: A method retrieves and displays an alternative webpage in response to an initially-requested webpage no longer being available. A browser on a client device sends a request to a web server for an original webpage, which is associated with an original Universal Resource Locator (URL). The browser receives an error response, from the web server, which indicates that the original webpage no longer exists. A search engine on the client device searches for multiple alternative Universal Resource Locators (URLs), which are based on variations from the original URL. An alternative webpage that is associated with one of the multiple alternative URLs is then displayed on the client device.

Abstract: Systems, methods, and devices for resolving a network address include a Domain Name System (DNS) server configured to receive a request for a resource from a client device, determine a source IP address of the client device, and determine whether the source IP address is included in a source client list. In response to determining that the source IP address is not included in the source client list, the DNS server may determine whether a default view datastore includes a record for requested resource. If the default view datastore does not include a record for requested resource, the DNS server may determine whether the requested resource is included in the view datastore. If the requested resource is included in the view datastore, the DNS server may generate and send to the client device a response message that includes a SIPNOTDEFINED indication.

Abstract: Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a private domain name system (DNS) receives a DNS lookup request from a computing system of a plurality of computing systems associated with a private communication group, and forwards the DNS lookup request to a public DNS. The private DNS further receives a public address associated with the DNS lookup request from the public DNS, translates the public address to a private address, and transfers the private address to the requesting computing system.

Abstract: A system includes a first MODEM configured to generate a first data packet (including a first virtual routing and forwarding (VRF) instance identifier associated with a first service, a first user group, or both) based on a first radio-frequency (RF) signal and a second MODEM configured to generate a second data packet (including a second VRF instance identifier associated with a second service, a second user group, or both) based on a second RF signal. The system includes a network device configured to receive the first data packet, transmit a first packet (including a first header that includes a first indicator associated with a first VRF instance) to a first device via a network, receive the second data packet, and transmit a second packet (including a second header that includes a second indicator associated with a second VRF instance) to a second device via the network.

Abstract: A method includes determining, by a storage unit, to place a pointer in a hash table that is stored in local memory of the storage unit. The method further includes executing, by the storage unit, a hash function on addressing information relating to the pointer to produce a hash resultant. The method further includes executing, by the storage unit, a second function on related data to the addressing information or to the pointer to produce an auxiliary resultant. The method further includes storing, by the storage unit, the hash resultant and the auxiliary resultant as an entry in the hash table for the pointer, wherein, when a hash collision occurs with respect to the hash resultant, the storage unit utilizes the auxiliary resultant to resolve the hash collision.

Abstract: A method for execution by one or more processing modules of one or more computing devices of a dispersed storage network (DSN), the method begins by determining, in advance of a DSN data access request, an optimal routing configuration for the DSN data access request to a collection of one or more DS processing units. The method continues by assigning a final destination identifier (FDI) to the collection of one or more DS processing units. The method continues by associating a request router with the collection of one or more DS processing units and distributing the optimal routing configuration to each of the collection of one or more DS processing units and to the associated request router.

Abstract: A database query may be determined based on a database query definition. The database query definition may include a filter criterion that contains a wildcard match, which may include a first fixed portion and a second wildcard portion. The first fixed portion may include one or more combining characters. The database query may include a first query portion including a first canonical representation of the first fixed portion that omits the one or more characters. The database query may include a second query portion including a second canonical representation of the first fixed portion. The database query may be executed to select a result set that includes a plurality of query result values by applying the second query portion to filter values accessed by the first query portion.

Abstract: Embodiments of the present invention provide an SDN, a method for forwarding a packet by an SDN, and an apparatus. The SDN includes an SDN controller and an SDN switch, the SDN switch includes a processor and a data path, and the SDN switch further includes: a first transceiver, configured to: receive a first packet, determine that the first packet is to be sent to the SDN controller, and forward the first packet to a channel agent module; and the channel agent module, configured to: add address information of the SDN controller to the first packet, encapsulate the first packet into a second packet, and send the second packet to the controller. The first transceiver is further configured to receive a third packet sent by the SDN controller, and forward the third packet to the channel agent module.