CN104272656A - 软件定义网络中的网络反馈 - Google Patents
软件定义网络中的网络反馈 Download PDFInfo
- Publication number
- CN104272656A CN104272656A CN201380022889.7A CN201380022889A CN104272656A CN 104272656 A CN104272656 A CN 104272656A CN 201380022889 A CN201380022889 A CN 201380022889A CN 104272656 A CN104272656 A CN 104272656A
- Authority
- CN
- China
- Prior art keywords
- strategy
- controller
- network
- software defined
- equipment
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/42—Centralised routing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0893—Assignment of logical groups to network elements
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0896—Bandwidth or capacity management, i.e. automatically increasing or decreasing capacities
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/34—Signalling channels for network management communication
- H04L41/342—Signalling channels for network management communication between virtual entities, e.g. orchestrators, SDN or NFV entities
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/02—Capturing of monitoring data
- H04L43/026—Capturing of monitoring data using flow identification
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/20—Arrangements for monitoring or testing data switching networks the monitoring system or the monitored elements being virtualised, abstracted or software-defined entities, e.g. SDN or NFV
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L47/00—Traffic control in data switching networks
- H04L47/10—Flow control; Congestion control
- H04L47/24—Traffic characterised by specific attributes, e.g. priority or QoS
- H04L47/2483—Traffic characterised by specific attributes, e.g. priority or QoS involving identification of individual flows
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/22—Parsing or analysis of headers
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0894—Policy-based network configuration management
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0895—Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
Abstract
本发明的实施例提供了一种能够向软件定义网络中的控制器提供反馈的计算系统。计算系统包括策略管理模块和耦合到策略管理模块的通信模块。在运行过程中,策略管理模块识别指示数据流将如何被处理的本地策略并且识别与策略相关联的数据流。通信模块构建对于来自软件定义网络中的控制器的流定义的请求。流定义指示在软件定义网络中所述数据流如何被处理。
Description
技术领域
本公开内容涉及网络管理。更具体地说,本公开内容涉及一种用于促进软件定义网络中的网络反馈的方法和系统。
背景技术
互联网的指数增长使它成为异构数据流的普遍传输介质。这种异构性导致了对带宽与日俱增的需求。因此,设备供应商争相制造具有通用功能的更大更快的交换机,例如使用软件定义数据流,以有效传递更多通信量。然而,交换机的复杂程度不可能无止境地增加。它受限于比如物理空间,功耗和设计复杂性。此外,更高更通用功能的交换机通常更复杂、更昂贵。
软件定义流是数据通信网络中的一种新模式。任何支持软件定义流的网络可被称为软件定义网络。软件定义网络的示例可以是OpenFlow网络,其中网络管理员可以基于流定义来配置交换机如何运行,流定义可以跨越网络协议的不同层来定义。软件定义网络将控制相应网络设备(如,路由器和交换机)所需智能分开并且将控制机制分担给远程控制设备(通常是独立服务器或终端设备)。因此,软件定义网络为在网络中管理数据流提供了完整的控制和灵活性。
尽管支持软件定义流为网络带来令人满意的特性,但是在促进用于生成和管理软件定义网络中的流定义时仍然存在一些尚未解决的问题。
发明内容
本发明的实施例提供了一种能够向软件定义网络中的控制器提供反馈的计算系统。计算系统包括策略管理模块和耦合到策略管理模块的通信模块。在运行过程中,策略管理模块识别指示数据流将如何被处理的本地策略并且识别与策略相关联的数据流。通信模块构建对于来自软件定义网络中的控制器的流定义的请求。流定义指示在软件定义网络中所述数据流如何被处理。
在本实施例的变体中,通信模块将数据包识别为属于所述数据通信量流。策略管理模块随后确定所述数据包是否与所述策略相匹配,并且响应于所述数据包与所述策略相匹配而指令所述通信模块来构建所述请求。
在本实施例的变体中,软件定义网络是支持OpenFlow的网络。
在本实施例的变体中,计算系统是向软件定义网络提供服务的装置,并且策略与所述服务相关联。
在本实施例的变体中,计算系统也包括耦合到策略管理模块的策略执行模块。策略执行模块将请求标记为强制执行的,以指示所述请求的强制执行。
在进一步的变体中,计算系统也包括耦合到策略执行模块的脚本引擎。脚本引擎接收可被脚本引擎识别的格式的策略。
在进一步的变体中,计算系统也包括控制模块,其作为软件定义网络的控制器来操作计算系统。
附图说明
图1A图示依据本发明实施例的具有网络反馈支持的示例性软件定义网络。
图1B依据本发明的实施例、结合图1A的示例图示软件定义网络中的数据流卸载。
图2A呈现了图示依据本发明实施例的、在软件定义网络中智能网络设备提供反馈给控制器的过程的流程图。
图2B呈现了图示依据本发明的实施例、软件定义网络中的控制器基于来自智能网络设备的反馈生成流定义的过程的流程图。
图3图示依据本发明实施例的、通过智能网络设备进行策略执行的示例性软件定义网络。
图4A呈现了图示依据本发明实施例的、智能网络设备提供策略执行的反馈给软件定义网络中的控制器的过程的流程图。
图4B呈现了图示依据本发明实施例的、软件定义网络中的控制器基于来自智能网络设备的策略执行的反馈生成流定义的过程的流程图。
图5图示依据本发明实施例的具有作为控制器来操作的智能网络设备的示例性软件定义网络。
图6呈现了图示依据本发明实施例的、在软件定义网络中作为控制器操作的智能网络设备基于本地策略执行来生成流定义的过程的流程图。
图7图示依据本发明实施例的、在软件定义网络中能够给控制器提供反馈的示例性计算系统。
在这些图中,相似的参考标号指代相同的附图元素。
具体实施方式
以下描述被呈现以使本领域技术人员能够制造和使用本发明,并且以下描述是在特定应用及其要求的背景下被提供的。对公开的实施方式的多种修改对本领域技术人员是显而易见的,并且这里定义的一般原则在不背离本发明的精神和范围下可以被应用于其他实施方式和应用中。因此,本发明不局限于所展示的实施方式,而适用于与权利要求书一致的最广泛的范围。
在本发明的实施例中,在软件定义网络中基于网络状况和策略生成流定义的问题按如下方式解决:(1)在软件定义网络中,提供有关网络状况的反馈给控制器,从而允许控制器基于反馈来生成流定义;以及(2)由一个或多个智能网络设备在控制器上强制执行网络策略。
在软件定义网络中控制器通过生成包括规则和对应动作的流定义来提供转发智能(即,控制平面)。软件定义网络中的交换机是基于流定义操作的典型的被动实体。允许控制器基于软件定义网络的状况来控制交换机通常是可取的。理想情况下,控制器作为独立设备,应该提供适应于网络状况的流定义(例如使用OpenFlow定义的那些)。然而,使用现有技术,控制器一般基于本地配置和策略而不使用软件定义网络中可用的信息或状态来生成流定义。因此,控制器的有效性是有限的并且可能不会捕获网络的当前状况。
这里描述的上述问题的解决方案是双重的。首先,在软件定义网络中,能够做出关于网络状况决策的一个或多个智能网络设备,可以提供关于网络状况的反馈给控制器。这样的反馈采用控制器可识别和分析的格式。一旦接收到反馈,控制器分析这个反馈并基于反馈所指示的网络状况做出更智能的决策。为支持网络反馈,控制器也能够从智能网络设备接收反馈消息并依此生成流定义。
其次,除了允许智能网络设备提供反馈以外,控制器可以协助强制执行特定的配置和策略。许多智能网络设备要求复杂网络情景的表达,这通过简单网络反馈通常是做不到的。在本发明的实施例中,智能网络设备实施本地配置或策略来捕获复杂的网络状况,特别包括复杂的情景,并强制控制器生成反映配置和策略的流定义。在一些实施例中,如果智能网络设备有足够的能力(例如,处理和存储能力),设备可以作为控制器来操作,从而在软件定义网络中消除对作为控制器操作的单独设备的需求。
在本公开内容中,术语“软件定义网络”指代通过在流定义中指定与流关联的动作来便于对相应数据流进行控制的网络。控制器可以是服务器,其与软件定义网络相耦合而在软件定义网络中提供相应的交换机及流定义。流定义可以包括优先级数值,指定流的规则,以及该流的动作(例如,转发端口或“丢弃”)。流定义的规则可以指定例如在十元组中的任意值的结合{输入端口,虚拟局域网(VLAN)标识,介质访问控制(MAC)源和目的地址,以太网类型,网际协议(IP)源和目的地址,网际协议,传输控制协议(TCP)源和目的端口}。其他包头域也可以被包括在流规则中。根据它的特异性,流规则可以对应于网络中的一个或多个流。各数据包一经匹配规则,软件定义网络中的交换机便将采取对应流定义中的动作。软件定义网络的示例包括、但不限于OpenFlow,如Open Networking Foundation(ONF)规范“OpenFlow Switch Specification”中所描述的那样,上述规范可从http://www.openflow.org/documents/openflow-spec-v1.1.0.pdf获得,并且通过引用而并入本文。
在本公开内容中,软件定义网络中能够处理软件定义流的交换机被称为“软件可定义”交换机。这样的软件可定义交换机可以包括处理软件定义流的端口和为了常规包转发(例如,层2/以太网交换,或IP路由)而预留的端口,后者在本公开内容中被称为“普通端口”。流定义通常包括一个或多个软件可定义输入端口,该定义适用于这些端口。通过任何端口到达的任何流潜在地可以是通用流定义的匹配。
术语“策略”在通常意义上被使用,指代为与任意网络层相关联的数据流提供特定动作的任何操作或操作组。任何与网络设备对数据流做出决策相关联的动作都可以被称为“策略”。术语“智能网络设备”也在通常意义上被使用,指代网络中能够做出决策、感知网络状况、和/或实施策略的任何设备。“智能网络设备”可以是与交换机分离的设备,或运行在交换机中的硬件或软件模块。能够提供服务(即,网络所要求的特定功能)的“智能网络设备”也可以被认为是装置。在本公开内容中,术语“智能网络设备”和“装置”可以互换使用。
在一些实施例中,软件定义网络是结构交换机,并且软件定义网络中的各交换机是结构交换机的成员交换机。结构交换机可以是以太网结构交换机。在以太网结构交换机中,耦合成任意拓扑结构的任意数量的交换机可以在逻辑上表现为单个交换机。任何新交换机可以无需任何人工配置以“即插即用”方式加入或离开结构交换机。结构交换机对于终端设备表现为单个逻辑交换机。
尽管本公开内容采用基于OpenFlow的示例来呈现,但是本发明的实施例不限于使用OpenFlow或特定的开放系统互联参考模型(OSI参考模型)层而定义的网络。在本公开内容中,术语“软件定义网络”在通常意义上被使用,并且可以指代任何通过控制器、基于软件定义规则来促进数据流交换的网络。术语“流定义”同样在通常意义上被使用,并且可以指代任何识别属于特定流的数据帧和/或规定交换机应当如何处理帧的规则。
术语“终端设备”可以指代主机、常规的层2交换机、或任何其他类型的网络设备。此外,终端设备可以被耦合到远离网络的任何交换机或主机上。终端设备也可以是若干网络设备接入网络的聚集点。
术语“消息”指代可在网络上一起被传输的一组二进制位。“消息”不应被解读为将本发明的实施例局限于任何特定网络层。“消息”可被指代一组二进制位的其他名词取代,例如“帧”、“包”、“单元”、或“数据报”。术语“帧”在通常意义上被使用,并且不应被解读为将本发明的实施例局限于层2网络。“帧”可被指代一组二进制位的其他名词取代,例如“包”、“单元”、或“数据报”。
术语“交换机”在通常意义上被使用,并且可以指代运行在任何网络层的任何独立的或结构交换机(fabric switch)。“交换机”不应被解读为将本发明的实施例局限于层2网络。任何能够转发通信量给终端设备的设备可以被认为是“交换机”。“交换机”的示例包括、但不限于:层2交换机、层3路由器、多链接半透明互联(TRILL)路由桥(RBridge)、光纤路由器、或结构交换机。
术语“以太网结构交换机”指代若干互联的物理交换机,它们组成单个可扩展的逻辑交换机。在结构交换机中,任意数量的交换机可以被连接成拓扑结构,并且整组交换机共同充当单个逻辑交换机。这个特征使得有可能使用很多更小、便宜的交换机来构造大的结构交换机,该结构交换机从外部被视为单个逻辑交换机。
图1A图示依据本发明实施例的具有网络反馈支持的示例性软件定义网络。软件网络100包括能够处理软件定义流的软件可定义交换机101、102、103、104、105和106。控制器120在逻辑上耦合到网络100中的所有软件可定义交换机。控制器120和网络100中的相应交换机之间的逻辑连接可以包括一个或多个物理链路。终端设备112和118被分别耦合到交换机104和101。终端设备112可以是运行虚拟机114和116的物理主机。智能网络设备130被耦合到交换机103。在一些实施例中,设备130是向网络100提供服务(例如,防火墙保护,负载均衡,入侵检测/防护,网络/设备虚拟化等)的装置。
在一些实施例中,虚拟机116作为虚拟安全设备来操作,该虚拟安全设备具有检测特定网络状况例如网络100上的安全攻击的必要智能。在运行过程中,虚拟机116检测网络100中的一个或多个交换机上的攻击。然而,因为虚拟机116是虚拟设备,与其他虚拟机例如虚拟机114共享物理资源,所以虚拟机116没有足够的能力(例如,处理和/或存储需求)来保护整个网络免于攻击。此外,虚拟机116没有网络100的全局视图。例如,虚拟机116不知道设备130。
为了解决这个问题,一旦检测到攻击,虚拟机116便构建包括所检测到的攻击的反馈消息并发送该消息至控制器120。该反馈消息采用控制器120已知的格式。虚拟机116可以与控制器120通过一个或多个物理链路建立逻辑连接132来交换信息。在一些实施例中,控制器120包括能够接收和处理来自网络设备的反馈的软件/硬件模块,从而允许控制器做出更智能的决策以及解决反馈所指出的问题。控制器120接收反馈消息并识别当前网络状况(例如,识别所检测到的攻击)。控制器120随后生成一个或多个流定义来反击以及将流定义分发给与攻击相关联的交换机。
例如,当虚拟机115检测到来自终端设备118的攻击,虚拟机116在反馈消息中包括该信息。因此,控制器120也知晓了来自终端设备118的已检测的攻击的关联。作为响应,控制器120将进行反击的流定义分发给交换机101。交换机101使用数据结构(例如,链表)来存储流定义并将流定义合并到硬件中(例如,在内容可寻址存储器或CAM中)的查找信息中。这种流定义的示例可以包括、但不限于:丢弃从与所检测的攻击相关联的IP地址(在本例中为终端设备118的IP地址)接收的所有通信量,特定种类的通信量的重定向以做进一步检查、转发潜在有害的通信量到筛选或过滤设备、以及这些动作的任意组合。
除了虚拟机116外,控制器120可以接收来自设备130的反馈。设备130可以通过一个或多个物理链路建立与控制器120的逻辑连接来交换信息。因为虚拟机116和设备130各自独立地提供反馈给控制器120,所以反馈不是相互协调的。例如,控制器120可以从虚拟机116和设备130在不同时间点接收两个相关的反馈消息。这些反馈消息可以影响反映相同策略的流定义的生成。因此,控制器120可以做出关于是否基于特定反馈消息来生成流定义的最后决策。一旦接收到来自虚拟机116的反馈消息,控制器120便可以等待一段时间来接收来自其他网络设备即设备130的反馈消息。一旦控制器120接收来自虚拟机116和设备130的反馈消息,控制器120便处理这些反馈并决定是否生成流定义。注意,来自虚拟机116和设备130的反馈可以对应于相关(例如,相互依赖的)或不相关的事件。
智能网络设备,比如设备130,通常是昂贵的。例如,使用现有技术,设备130的每端口成本可以显著地高于标准交换机,例如交换机101和105。通常,通过设备130的通信量越大,发生的成本越高。例如,通过设备130的大量数据通信量要求设备130配备有大量昂贵的处理器和更多存储器。因此,将通信量从昂贵设备例如设备130卸载到相对便宜的交换机例如交换机101和105,可以带来显著的成本降低。
图1B依据本发明的实施例,结合图1A的示例图示软件定义网络中的数据流卸载。在运行过程中,终端设备112中的虚拟机114发起与终端设备118的双向数据通信140。在这个示例中,终端设备118可以是数据服务器。数据通信140的上行数据流路径142和下行数据流路径144-1通过设备130来接收设备130提供的特定服务。将下行数据流路径144-1从昂贵设备130卸载到相对便宜的交换机101和105,可以带来显著的成本降低。
使用现有技术,网络100可以允许智能网络设备比如设备130仅处理上行流的通信量。例如,如果设备130是负载均衡装置,则网络100允许设备130通过仅检查上行流路径142的通信量来对网络100中的通信量做负载均衡。然后,通过从设备130卸载数据通信量可以带来显著成本降低,仅检查上行流路径142的通信量会带来一些局限。通过不检查下行流路径144-1的通信量,设备130无法进行基于内容的负载均衡(其通常需要同时检查部分下行数据流144-1)或实现更高级的安全特征,例如“SYN攻击”防护。例如,如果终端设备118是视频服务器,则下行流路径144-1的通信量包括到虚拟机114的流传输视频。基于内容的负载均衡可以仅通过检查部分下行流路径144-1来执行。因此,使用现有技术,通过卸载所有下行通信量来获得成本降低限制了可以提供给网络100的服务。
为了解决这一问题,设备130提供反馈给控制器120以部分或全部卸载选择性的下行流。例如,设备130首先检查下行通信量的几个包,并提供与下行通信量相关联的服务。之后,如果下行流路径144-1的通信量是带宽密集的(例如,视频流或大文件共享),则设备130可以构建请求控制器120生成用于卸载来自设备130的通信量的流定义的反馈消息。设备130可以通过识别与流路径相关联的端口号(例如,对应于端口号8080的所有视频流)或检查属于下行流路径144-1的通信量的数据包的包头,来识别下行流路径144-1的通信量为带宽密集的。在设备130将下行流路径144-1识别为用于卸载的候选之后,设备130创建相应的反馈消息。在一些实施例中,反馈消息识别了下行流路径144-1并且可以包括一个或多个期望的将在下行流路径144-1的通信量上执行的动作(例如,网络地址转换或NAT)。
一旦接收到反馈消息,控制器120便检测下行流路径144-1以作为用于卸载的候选。在一些实施例中,控制器120进一步识别更合适的路径用于虚拟机114和终端设备118之间的数据通信140。更合适路径的示例可以包括、但不限于:更短距离的数据路径,更少跳的数据路径,更低拥塞的数据路径,更高/更低使用率的数据路径,以及更低延迟的数据路径。在图1B的示例中,下行流路径144-1的最合适的路径可以是通过交换机101和105而绕过交换机102的路径。控制器120生成指令交换机101通过下行流路径144-2来转发通信量到交换机105的流定义,这个路径是对应于下行流路径144-1的已进行卸载的下行流路径。控制器120可能生成另一流定义,其指令交换机105通过下行流路径144-2将通信量转发到终端设备112。控制器120分别发送这些流定义到交换机101和105。因此,交换机101和105从设备130卸载通信量并重定向通信量通过下行流路径144-2。尽管图1B的示例描述了基于网络反馈的下行流路径144-1的数据卸载,但是如果需要的话,控制器120可以生成用于对上行流路径142、或对上行数据流路径142和下行数据流路径144-1同时进行卸载的流定义。
从智能网络设备卸载通信量可以允许部署众多更小、更便宜的智能网络设备而非昂贵高性能设备,以便以分布式的方式来提供服务。例如,如果智能网络设备130是防火墙,则设备130可以借助于流卸载。从设备130卸载带宽密集的数据流提供了高可扩展性。在这样场景下,智能但较低性能的防火墙相对于较低智能但较高吞吐量的防火墙更适合于网络100。因此,反馈机制和设备130的智能允许网络100在不要求更昂贵、更高性能设备的情况下接收服务。
因为设备130不检查下行流路径144-2的通信量,所以下行流路径144-2的控制消息也绕过设备130。然而,一旦数据通信140中断,交换机101和105则需要移除对应的流定义实体。此外,设备130需要清除与数据通信140相关联的状态。因此,设备130需要接收控制消息以知晓数据通信140的当前状态。为了达到这个目的,当设备130发送反馈消息给控制器120时,设备130可以指示仅数据通信140的数据包(即,非控制包)需要从设备130卸载。因此,下行数据包遵循下行流路径144-2,而下行控制包遵循下行流路径144-1。
当设备130检测到数据通信140的中断时,设备130构建指示数据通信140的中断的通知消息。设备130发送这个消息给控制器120。控制器120随后为交换机101和105生成指令消息,该指令消息包括用于移除与数据通信140相关联的流定义的指令。例如,当交换机101接收到指令消息时,交换机101移除与流路径142、144-1和144-2相关联的流定义。通过检查控制消息,设备130在不间断进行的通信期间可以促进除操纵(例如,服务器失败)之外的其他服务。
网络反馈
在图1B的示例中,智能网络设备130提供反馈给控制器120。一旦接收到反馈,控制器120便基于反馈生成流定义。图2A呈现了图示依据本发明实施例的、在软件定义网络中智能网络设备提供反馈给控制器的过程的流程图。设备首先识别与设备相关联的数据流(操作202)并检查数据流是否需要设备所提供的服务(操作204)。注意,设备可能不提供任何服务。
如果数据流需要设备所提供的服务,则设备在数据流上执行该服务(操作206)。例如,如果设备是防火墙,则在操作206中,设备检查数据流是否被允许继续。设备可以基于该服务可选地检查数据流是否有效(操作208)。一些服务,比如负载均衡,不需要有效性检查。如果所识别的数据流是无效的,则设备对无效流执行规定的动作(操作220)。例如,如果设备是入侵防护设备,则设备通过检查流是否是入侵流来检查流的有效性。如果是,则规定的动作可以是丢弃该入侵流。
如果所识别的流是有效的,则设备检查是否针对这个流调用策略(操作210)。例如,如果数据流是视频流,则针对数据流的策略可以是从设备卸载数据流,如结合图1B所述。如果策略被调用,则设备基于策略生成对流定义的请求(操作212)并构建包括该请求的反馈消息(操作214)。设备随后发送这个反馈消息给软件定义网络的控制器(操作216)。这个反馈消息采用控制器可识别和可分析的格式。如果策略没有被调用(操作210)或者发送消息给控制器后(操作216),设备基于它的转发表来转发这个数据流通信量(操作218)。
图2B呈现了图示依据本发明的实施例、软件定义网络中的控制器基于来自智能网络设备的反馈生成流定义的过程的流程图。一旦从智能网络设备接收到请求流定义的反馈消息(操作252),控制器便检查是否控制器具有任何其他相关的请求(操作254)。这个操作确保控制器考虑所有相关的请求来生成流定义,如结合图1A所述。如果控制器具有任何其他相关的请求,则控制器取回相关的请求(操作256)。如果控制器没有任何其他相关的请求(操作254)或取回相关的请求之后(操作256),控制器分析请求以生成流定义(操作258)。
控制器随后检查请求是否是当前可寻址的(操作260)。因为控制器具有网络的全局视图,所以控制器可以决定来自设备的请求是否是可寻址的。例如,如果请求是针对改变数据流的路径的并且被改变的路径转移了来自另一个为流提供了必需服务的设备的数据通信量,则控制器可以将请求视为不可寻址的。如果请求是当前不可寻址的,则控制器可以可选地保存这个请求以供将来评估(操作270)。否则,控制器基于请求生成一个或多个流定义(操作262)。控制器识别与流定义相关联的交换机(操作264),构建包括流定义的通知消息(操作266),并发送相应的通知消息给对应的识别出的交换机(操作268)。
策略执行
在图1B的示例中,智能网络设备130可以请求控制器120生成流定义。然而,这个请求的执行点是控制器120,其中控制器120决定是否处理这个请求。然而,软件定义网络100中的设备130也可以作为网络策略的执行点,其中设备130可以强制控制器120生成流定义。图3图示依据本发明实施例的、通过智能网络设备进行策略执行的示例性软件定义网络。
软件定义网络300包括软件可定义交换机301、302、303、304、305和306,它们能够处理软件定义流。控制器320在逻辑上耦合到在网络300中的所有软件可定义交换机。控制器320和网络300中相应交换机之间的逻辑连接可以包括一个或多个物理链路。终端设备312和314被分别耦合到交换机305和301。智能网络设备330和340被分别耦合到交换机302和304。在一些实施例中,设备330和340中的一个或两者是向网络300提供服务(例如,防火墙保护,负载均衡,入侵检测/防护,网络/设备虚拟化等)的装置。
在一些实施例中,设备330可以作为策略执行点来操作。设备330允许网络管理员以灵活的方式表达一个或多个策略。基于这些策略,设备330显式地强制控制器320生成一个或多个流定义。设备330可以与控制器320通过一个或多个逻辑链路建立逻辑连接332以交换信息。注意,虽然网络300包括许多智能网络设备,但不是所有设备都需要成为执行点。例如,网络300包括设备330和340。然而,设备340在软件定义网络中并不作为执行点来操作而作为普通智能网络设备来操作,例如图1B的示例中的设备130。
在图3的示例中,网络管理员可以表达特定的策略给设备330。例如,策略可以指示设备330监测对特定电子邮件账户的所有访问。因为用户可以从有互联网访问的任何地址访问该电子邮件账户,所以任何访问该电子邮件账户的数据通信量都需要监测。设备330可以针对相应的访问维护状态。使用现有技术,这种程度的密集大规模检查超出了常规控制器320的范围。因此,对于这种策略执行,设备330比控制器320更适合。在一些实施例中,网络管理员使用一种应用脚本引擎(例如,OpenScript)来表达策略。
如果设备330检测到任何从IP地址对这个电子邮件账户的恶意访问,则监测与这个IP地址相关联的所有活动(例如,从这个IP地址对其他电子邮件账户或服务的访问)是可取的。然而,其他来自这个IP地址的通信量可能不通过设备330。此外,设备330可能不便于这种额外的监测。因此,需要额外的网络级别策略来监测来自这个IP地址的所有通信量。为了便于全网络监测,设备330强制控制器320为网络300中的交换机生成一个或多个流定义以提供这种监测。
假设设备330检测到来自终端设备324针对数据流的策略匹配(例如,从恶意IP地址对电子邮件账户的恶意访问)。因此,设备330调用第二策略(例如,监测来自这个恶意IP地址的所有通信量)。设备330指示控制器320生成对应于第二策略的流定义。一旦接收到这个指令,控制器320生成流定义并发送流定义到网络300中的一个或多个对应交换机。在一些实施例中,网络300可以进一步包括一个监测设备350。对应于第二策略的流定义可以指定相应的交换机来转发所有与这个恶意IP地址相关联的通信量给监测设备350。因此,如果交换机305检测到来自恶意IP地址的数据流,则交换机305转发这个流给交换机306,交换机306继而转发这个流给监测设备350。监测设备350可以检查接收到的流并收集有关所有恶意活动的信息。
图4A呈现了图示依据本发明实施例的、智能网络设备提供策略执行的反馈给软件定义网络中的控制器的过程的流程图。设备识别相应的本地流(操作402)。设备随后检查接收到的与这个流相关联的数据通信量(操作404)并将流的特征与所表达的强制执行的策略进行比较(操作406)。该策略可以由网络管理员使用应用脚本引擎来表达。设备检测是否策略已经针对这个流被触发(操作410),这个策略可以是与所表达的策略不同的策略,如结合图3所述。
如果没有策略被触发,则设备继续检查通信量(操作404)。否则,设备基于被触发的策略生成对流定义的请求(操作412)并标记这个请求为“强制执行的”(操作414)。设备随后构建包括这个请求的反馈消息(操作416)并发送这个反馈消息给软件定义网络的控制器(操作418)。这样,控制器识别这个请求为来自执行点。在一些实施例中,设备标记这个反馈请求为“强制执行的”。设备可以基于设备所提供的一项服务可选地检查流是否有效(操作420)。如果所识别的数据流是无效的,则设备对无效流执行规定的动作(操作424)。如果所识别的数据流是有效的,则设备转发这个数据流通信量给从其接收这个数据流通信量的本地交换机(操作426)。注意,设备也可以提供非强制执行的反馈给控制器,如结合图2A所述。
图4B呈现了图示依据本发明实施例的、软件定义网络中的控制器基于来自智能网络设备的策略执行的反馈生成流定义的过程的流程图。一旦从智能网络设备接收到请求流定义的反馈消息(操作452),控制器检查请求是否是强制执行的(操作454)。接收到的反馈消息或请求可以指示强制执行。如果请求不是强制执行的,则控制器检查是否控制器具有任何其他相关的请求(操作456)。如果控制器具有任何其他相关的请求,则控制器取回相关的请求(操作460)。如果控制器没有任何其他相关的请求(操作456)或在取回相关的请求之后(操作460),控制器分析请求以生成流定义(操作462)。
控制器随后检查请求是否是当前可寻址的(操作464)。如果请求当前不可寻址,则控制器可以可选地保存这个请求以供将来评估(操作466)。如果请求是强制执行的(操作454)或请求是当前可寻址的(操作464),则控制器基于请求生成一个或多个流定义(操作470)。控制器识别与流定义相关联的交换机(操作472),构建包括流定义的通知消息(操作474),并发送相应的通知消息给对应的识别出的交换机(操作476)。
集成控制器
在一些实施例中,智能网络设备可以作为软件定义网络中的控制器而不是单独的控制器来操作。图5图示依据本发明实施例的具有作为控制器来操作的智能网络设备的示例性软件定义网络。网络500包括两个软件定义网络552和554。网络552包括软件可定义交换机501、502、503和504。智能网络设备532作为网络552的控制器来操作。尽管设备532仅被物理地耦合到交换机504,但是设备532在逻辑上耦合到网络552中的所有软件可定义交换机。设备532和网络552中相应的交换机之间的逻辑连接可以包括一个或多个物理链路。终端设备512和514被分别耦合到交换机501和502。
类似地,网络554包括软件可定义交换机505、506、507和508。智能网络设备534作为网络554的控制器来操作。尽管设备534仅被物理地耦合到交换机505,但是设备534在逻辑上耦合到网络554中的所有软件可定义交换机。设备534和网络554中相应的交换机之间的逻辑连接可以包括一个或多个物理链路。终端设备516被耦合到交换机507。网络554还包括另一智能网络设备536。尽管设备536不是控制器,但是设备536仍可以作为一个或多个策略的执行点来操作。
如结合图3所述,设备532和534能够接收所表达的策略。在一些实施例中,设备532和534支持应用脚本引擎来表达策略。设备532和534作为策略执行点来操作,并使用它们各自空闲的能力(例如,处理和存储)以作为控制器来操作。因为主机托管(co-location)的缘故,设备532和534不需要显式地指示控制器生成任何流定义。相反,基于策略,设备532和534可以本地生成相应的流定义。
尽管传统的控制器可以基于运行在控制器上的一个或多个应用提供灵活性,但是这些传统的控制器通常被装备用来仅处理异常数据包。此外,管理大型网络的单个控制器通常不能扩展来处理密集的通信量。如果智能网络设备532和534有足够的能力,则设备532和534可以通过提供灵活的策略执行和将大型网络(如网络500)划分成独立受控的小网络(如网络552和554)来克服这种限制。这样,设备532和534在网络中提供灵活的平台来部署策略并适合作为控制器来操作。
图6呈现了图示依据本发明实施例的、在软件定义网络中作为控制器操作的智能网络设备基于本地策略执行来生成流定义的过程的流程图。设备识别相应的本地流(操作602)。设备随后检查接收到的与这个流相关联的数据通信量(操作604)并将流的特征与所表达的强制执行的策略进行比较(操作606)。该策略可以由网络管理员使用应用脚本引擎来表达。设备检测策略是否已经针对这个流被触发(操作610),这个策略可以是与所表达的策略不同的策略,如结合图3所述。
如果没有策略被触发,则设备继续检查数据通信量(操作604)。否则,设备基于策略生成一个或多个流定义(操作612)。设备识别与流定义相关联的交换机(操作614),构建包括流定义的通知消息(操作616),并发送相应的通知消息给对应的识别出的交换机(操作618)。设备可以基于设备所提供的服务可选地检查流是否有效(操作620)。如果所识别的数据流是无效的,则设备对无效流执行规定的动作(操作622)。如果所识别的数据流是有效的,则设备转发这个数据流通信量给从其接收这个数据流的本地交换机(操作624)。
示例性交换机
图7图示依据本发明实施例的、在软件定义网络中能够给控制器提供反馈的示例性计算系统。在这个示例中,计算系统700包括通用处理器712、存储器714、若干通信端口702、策略管理模块720、被耦合到策略管理模块720的通信模块740、数据包处理器710、和存储设备750。存储器714可以是非瞬态存储器,它保存有指令,当这些指令被处理器712执行时会使得计算系统700提供反馈给控制器、执行所提供的反馈、和/或作为控制器来操作计算系统。计算系统700可以具有和控制器的逻辑连接,该逻辑连接类似于软件定义网络中软件可定义交换机和控制器之间的逻辑连接。在一些实施例中,软件定义网络是支持OpenFlow的网络。
策略管理模块720可以是基于软件、硬件或两者结合的模块。例如,策略管理模块720可以是存储在存储设备中的一组指令,并且当被处理器运行时执行前面提及的方法。策略管理模块720也可以部分或全部在硬件中实现,例如在专用集成电路(ASIC)芯片或现场可编程门阵列(FPGA)中实现。策略管理模块720识别指示数据流将如何被处理的策略。这个策略可以是安全的、操作的、或数据转发策略。运行过程中,策略管理模块720识别与策略相关联的数据流。基于该识别,通信模块740构建包括来自控制器的对流定义的请求的反馈消息。流定义指示在软件定义网络中数据流如何被处理。数据包处理器710通过通信端口702之一传输这个消息。一旦接收到属于这个数据流的数据包,通信模块740便标识该数据包与数据流的关联。
策略管理模块720决定数据包是否与策略匹配。如果数据包与策略匹配,则策略管理模块720指令通信模块740构建反馈消息,如结合图1A所述。策略管理模块720也在数据包和控制包之间进行区分,并相应地将数据包与策略相匹配,如结合图1B所述。在一些实施例中,计算系统700包括服务模块760,它作为装置来操作计算系统700。服务模块760向软件定义网络提供与策略相关联的服务。
在一些实施例中,计算系统700也包括策略执行模块730,它被耦合到策略管理模块720中。策略执行模块730标记反馈消息中的请求为强制执行的,这表明请求的强制执行。计算系统700也可以包括脚本引擎732,其与策略执行模块730相关联。脚本引擎732能够接收采用可识别格式的所表达的策略。例如,如果脚本引擎732是基于OpenScript的应用脚本引擎,则采用OpenScript格式的脚本代码来表达的任何策略都可以被脚本引擎732识别。
在一些实施例中,计算系统700也包括控制模块760,其作为软件定义网络中的控制器来操作计算系统700。控制模块760为计算系统700提供控制器所要求的所有必要的功能。例如,控制模块760为软件定义网络生成相应的流定义。注意,这种生成与任何其他控制器独立开来(即,计算系统700所控制的交换机不被任何其他控制器主动控制)。控制模块760在软件定义网络中识别一个或多个与流定义相关联的交换机。通信模块740随后为交换机构建包括流定义的通知消息。
注意,以上提到的模块可以在硬件及软件中实现。在实施例中,这些模块被存储在存储器中的计算机可执行指令实体化,该存储器在计算系统700中被耦合到一个或多个处理器。当被执行时,这些指令使得处理器执行前面提及的功能。
总之,本发明的实施例提供了一种用于在软件定义网络中向控制器提供反馈的计算系统和方法。在实施例中,计算系统包括策略管理模块和耦合到策略管理模块的通信模块。运行过程中,策略管理模块识别指示数据流将如何被处理的本地策略并识别与该策略相关联的数据流。在软件定义网络中,通信模块构建来自控制器的对流定义的请求。流定义指示在软件定义网络中数据流如何被处理。
这里描述的方法和过程可以被实例化为代码和/或数据,其可以被存储在计算机可读的永久存储介质中。当计算机系统读取和执行存储在计算机可读的永久存储介质中的代码和/或数据时,计算机系统执行这些实例化为数据结构和代码并且被存储在介质中的方法和过程。
这里描述的方法和过程可以被执行和/或被包括在硬件模块或装置中。这些模块或装置可以包括、但不限于:专用集成电路(ASIC)芯片,现场可编程门阵列(FPGA),在特定时间执行特定软件模块或一段代码的专用的或共享的处理器,和/或其他已知或后期开发的可编程逻辑设备。当硬件模块或装置被激活时,它们执行包括其中的方法和过程。
对本发明实施例的上述描述仅被呈现用以图示和描述的目的。它们不用以穷尽或限制本公开内容。因此,许多修改和变化对本领域从业者是显而易见的。本发明的范围在所附权利要求书中限定。
Claims (21)
1.一种计算系统,包括:
策略管理模块,可配置用以:
识别指示数据流将如何被处理的本地策略;以及
识别与所述策略相关联的数据流;以及
通信模块,耦合到所述策略管理模块并且可配置用以构建对于来自软件定义网络中的控制器的流定义的请求,其中所述流定义指示在所述软件定义网络中所述数据流如何被处理。
2.根据权利要求1所述的计算系统,其中所述通信模块进一步可配置用以将数据包识别为属于数据通信量流;并且
其中所述策略管理模块进一步可配置用以:
确定所述数据包是否与所述策略相匹配;以及
响应于所述数据包与所述策略相匹配而指令所述通信模块来构建所述请求。
3.根据权利要求1所述的计算系统,其中所述软件定义网络是支持OpenFlow的网络。
4.根据权利要求1所述的计算系统,其中所述计算系统是向所述软件定义网络提供服务的装置;并且
其中所述策略与所述服务相关联。
5.根据权利要求1所述的计算系统,进一步包括策略执行模块,所述策略执行模块耦合到所述策略管理模块并且可配置用以将所述请求标记为强制执行的,以指示所述请求的强制执行。
6.根据权利要求5所述的计算系统,进一步包括脚本引擎,所述脚本引擎与所述策略执行模块相关联并且可配置用以接收策略,其中所接收的策略采用可被所述脚本引擎识别的格式。
7.根据权利要求5所述的计算系统,进一步包括控制模块,所述控制模块可配置用以作为所述软件定义网络的控制器来操作所述计算系统。
8.一种计算机可执行的方法,包括:
通过计算机识别指示数据流将如何被处理的本地策略;
识别与所述策略相关联的数据流;以及
构建对于来自软件定义网络中的控制器的流定义的请求,其中所述流定义指示在所述软件定义网络中所述数据流如何被处理。
9.根据权利要求8所述的方法,进一步包括:
将数据包识别为属于所述数据通信量流;
确定所述数据包是否与所述策略相匹配;以及
响应于所述数据包与所述策略相匹配而构建所述请求。
10.根据权利要求8所述的方法,其中所述软件定义网络是支持OpenFlow的网络。
11.根据权利要求8所述的方法,其中所述计算机是向所述软件定义网络提供服务的装置;并且
其中所述策略与所述服务相关联。
12.根据权利要求8所述的方法,进一步包括将所述请求标记为强制执行的,以指示所述请求的强制执行。
13.根据权利要求12所述的方法,进一步包括接收采用本地可识别脚本表达的策略。
14.根据权利要求12所述的方法,进一步包括作为所述软件定义网络的控制器来操作所述计算机。
15.一种非瞬态计算机可读存储介质,所述非瞬态计算机可读存储介质存储有指令,所述指令在被计算机执行时使得所述计算机执行一种方法,所述方法包括:
识别指示数据流将如何被处理的本地策略;
识别与所述策略相关联的数据流;以及
构建对于来自软件定义网络中的控制器的流定义的请求,其中所述流定义指示在所述软件定义网络中所述数据流如何被处理。
16.根据权利要求15所述的非瞬态计算机可读存储介质,其中所述方法进一步包括:
将数据包识别为属于数据通信量流;
确定所述数据包是否与所述策略相匹配;以及
响应于所述数据包与所述策略相匹配而构建所述请求。
17.根据权利要求15所述的非瞬态计算机可读存储介质,其中所述软件定义网络是支持OpenFlow的网络。
18.根据权利要求15所述的非瞬态计算机可读存储介质,其中所述计算机是向所述软件定义网络提供服务的装置;并且
其中所述策略与所述服务相关联。
19.根据权利要求15所述的非瞬态计算机可读存储介质,其中所述方法进一步包括将所述请求标记为强制执行的,以指示所述请求的强制执行。
20.根据权利要求19所述的非瞬态计算机可读存储介质,其中所述方法进一步包括接收采用本地可识别脚本表达的策略。
21.根据权利要求19所述的非瞬态计算机可读存储介质,其中所述方法进一步包括作为所述软件定义网络的控制器来操作所述计算机。
Applications Claiming Priority (5)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US201261649034P | 2012-05-18 | 2012-05-18 | |
US61/649,034 | 2012-05-18 | ||
US13/890,150 US9374301B2 (en) | 2012-05-18 | 2013-05-08 | Network feedback in software-defined networks |
US13/890,150 | 2013-05-08 | ||
PCT/US2013/041191 WO2013173482A1 (en) | 2012-05-18 | 2013-05-15 | Network feedback in software-defined networks |
Publications (2)
Publication Number | Publication Date |
---|---|
CN104272656A true CN104272656A (zh) | 2015-01-07 |
CN104272656B CN104272656B (zh) | 2019-06-14 |
Family
ID=49582267
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201380022889.7A Active CN104272656B (zh) | 2012-05-18 | 2013-05-15 | 计算系统、计算机可执行的方法以及计算机可读存储介质 |
Country Status (4)
Country | Link |
---|---|
US (2) | US9374301B2 (zh) |
EP (1) | EP2850780B1 (zh) |
CN (1) | CN104272656B (zh) |
WO (1) | WO2013173482A1 (zh) |
Cited By (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN105991457A (zh) * | 2015-02-10 | 2016-10-05 | 鸿富锦精密工业(深圳)有限公司 | 交换机、控制设备及其管理方法 |
CN108293039A (zh) * | 2015-11-17 | 2018-07-17 | 慧与发展有限责任合伙企业 | 处理网络威胁 |
CN111788793A (zh) * | 2018-03-05 | 2020-10-16 | 施瓦哲工程实验有限公司 | 在软件定义的网络中的触发报警动作和报警触发的网络流 |
CN111835551A (zh) * | 2019-04-16 | 2020-10-27 | 罗伯特·博世有限公司 | 运行通信基础设施中的网络部件和监控实体的方法和设备 |
CN111835551B (zh) * | 2019-04-16 | 2024-04-30 | 罗伯特·博世有限公司 | 运行通信基础设施中的网络部件和监控实体的方法和设备 |
Families Citing this family (79)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8743885B2 (en) | 2011-05-03 | 2014-06-03 | Cisco Technology, Inc. | Mobile service routing in a network environment |
US9571523B2 (en) | 2012-05-22 | 2017-02-14 | Sri International | Security actuator for a dynamically programmable computer network |
US9444842B2 (en) | 2012-05-22 | 2016-09-13 | Sri International | Security mediation for dynamically programmable network |
US9325569B2 (en) * | 2012-06-29 | 2016-04-26 | Hewlett Packard Enterprise Development Lp | Implementing a software defined network using event records that are transmitted from a network switch |
US20140115126A1 (en) * | 2012-10-19 | 2014-04-24 | Electronics And Telecommunications Research Institute | System for controlling and verifying open programmable network and method thereof |
US9413667B2 (en) * | 2013-02-15 | 2016-08-09 | Telefonaktiebolaget Lm Ericsson (Publ) | Methods and network nodes for traffic steering based on per-flow policies |
US9794379B2 (en) | 2013-04-26 | 2017-10-17 | Cisco Technology, Inc. | High-efficiency service chaining with agentless service nodes |
US9407540B2 (en) | 2013-09-06 | 2016-08-02 | Cisco Technology, Inc. | Distributed service chaining in a network environment |
US9124506B2 (en) | 2013-06-07 | 2015-09-01 | Brocade Communications Systems, Inc. | Techniques for end-to-end network bandwidth optimization using software defined networking |
WO2014205119A1 (en) * | 2013-06-18 | 2014-12-24 | The Regents Of The University Of Colorado, A Body Corporate | Software-defined energy communication networks |
CN105393515B (zh) * | 2013-07-26 | 2019-05-10 | 中兴通讯(美国)公司 | 自适应软件定义的联网控制器及用于虚拟化联网的系统 |
RU2637471C2 (ru) * | 2013-10-09 | 2017-12-04 | Нек Корпорейшн | Система связи, аппаратура связи и способ управления связью |
US9300585B2 (en) * | 2013-11-15 | 2016-03-29 | Cisco Technology, Inc. | Shortening of service paths in service chains in a communications network |
CN103647658B (zh) * | 2013-11-27 | 2016-12-07 | 华为技术有限公司 | 一种软件定义网络系统中网络设备的管理方法和控制器 |
US20150180769A1 (en) * | 2013-12-20 | 2015-06-25 | Alcatel-Lucent Usa Inc. | Scale-up of sdn control plane using virtual switch based overlay |
WO2015112159A1 (en) * | 2014-01-24 | 2015-07-30 | Hewlett-Packard Development Company, L.P. | Proposal generation for a network |
US9755969B2 (en) | 2014-03-04 | 2017-09-05 | International Business Machines Corporation | Route tracing in software defined networks |
US9479443B2 (en) | 2014-05-16 | 2016-10-25 | Cisco Technology, Inc. | System and method for transporting information to services in a network environment |
US9379931B2 (en) | 2014-05-16 | 2016-06-28 | Cisco Technology, Inc. | System and method for transporting information to services in a network environment |
KR102136039B1 (ko) * | 2014-06-30 | 2020-07-20 | 알까뗄 루슨트 | 소프트웨어 정의 네트워크에서의 보안 |
TW201605198A (zh) | 2014-07-31 | 2016-02-01 | 萬國商業機器公司 | 智慧網路管理裝置以及管理網路的方法 |
US9497207B2 (en) * | 2014-08-15 | 2016-11-15 | International Business Machines Corporation | Securing of software defined network controllers |
US10055240B2 (en) | 2014-09-23 | 2018-08-21 | At&T Intellectual Property I, L.P. | Service creation and management |
US9942158B2 (en) * | 2014-09-25 | 2018-04-10 | Dell Products L.P. | Data traffic policy management system |
US10644950B2 (en) | 2014-09-25 | 2020-05-05 | At&T Intellectual Property I, L.P. | Dynamic policy based software defined network mechanism |
US9762508B2 (en) | 2014-10-02 | 2017-09-12 | Microsoft Technology Licensing, Llc | Relay optimization using software defined networking |
US10285110B2 (en) | 2014-11-04 | 2019-05-07 | At&T Intellectual Property I, L.P. | Intelligent traffic routing |
US10417025B2 (en) | 2014-11-18 | 2019-09-17 | Cisco Technology, Inc. | System and method to chain distributed applications in a network environment |
USRE48131E1 (en) | 2014-12-11 | 2020-07-28 | Cisco Technology, Inc. | Metadata augmentation in a service function chain |
US9660909B2 (en) | 2014-12-11 | 2017-05-23 | Cisco Technology, Inc. | Network service header metadata for load balancing |
KR101645598B1 (ko) * | 2014-12-18 | 2016-08-08 | 광주과학기술원 | 네트워크에서의 침입 탐지 방법 |
CN104580168B (zh) * | 2014-12-22 | 2019-02-26 | 华为技术有限公司 | 一种攻击数据包的处理方法、装置及系统 |
US10033572B2 (en) | 2015-03-11 | 2018-07-24 | International Business Machines Corporation | Resiliency in ethernet fabric architectures by event notification |
US9853874B2 (en) | 2015-03-23 | 2017-12-26 | Brocade Communications Systems, Inc. | Flow-specific failure detection in SDN networks |
US9912536B2 (en) | 2015-04-01 | 2018-03-06 | Brocade Communications Systems LLC | Techniques for facilitating port mirroring in virtual networks |
US9762402B2 (en) | 2015-05-20 | 2017-09-12 | Cisco Technology, Inc. | System and method to facilitate the assignment of service functions for service chains in a network environment |
US9749401B2 (en) | 2015-07-10 | 2017-08-29 | Brocade Communications Systems, Inc. | Intelligent load balancer selection in a multi-load balancer environment |
US10296744B1 (en) * | 2015-09-24 | 2019-05-21 | Cisco Technology, Inc. | Escalated inspection of traffic via SDN |
US9654465B2 (en) * | 2015-10-01 | 2017-05-16 | Sprint Communications Company L.P. | Software-defined network threat control |
US10447605B2 (en) * | 2015-10-27 | 2019-10-15 | Avago Technologies International Sales Pte. Limited | Flow-based host discovery in SDN networks |
US10541873B2 (en) | 2015-11-20 | 2020-01-21 | Hewlett Packard Enterprise Development Lp | Determining violation of a network invariant |
US10063468B2 (en) | 2016-01-15 | 2018-08-28 | Cisco Technology, Inc. | Leaking routes in a service chain |
US11044203B2 (en) | 2016-01-19 | 2021-06-22 | Cisco Technology, Inc. | System and method for hosting mobile packet core and value-added services using a software defined network and service chains |
US10187306B2 (en) | 2016-03-24 | 2019-01-22 | Cisco Technology, Inc. | System and method for improved service chaining |
US10931793B2 (en) | 2016-04-26 | 2021-02-23 | Cisco Technology, Inc. | System and method for automated rendering of service chaining |
US10419550B2 (en) | 2016-07-06 | 2019-09-17 | Cisco Technology, Inc. | Automatic service function validation in a virtual network environment |
US10218616B2 (en) | 2016-07-21 | 2019-02-26 | Cisco Technology, Inc. | Link selection for communication with a service function cluster |
US10320664B2 (en) | 2016-07-21 | 2019-06-11 | Cisco Technology, Inc. | Cloud overlay for operations administration and management |
US10225270B2 (en) | 2016-08-02 | 2019-03-05 | Cisco Technology, Inc. | Steering of cloned traffic in a service function chain |
US10218593B2 (en) | 2016-08-23 | 2019-02-26 | Cisco Technology, Inc. | Identifying sources of packet drops in a service function chain environment |
US10361969B2 (en) | 2016-08-30 | 2019-07-23 | Cisco Technology, Inc. | System and method for managing chained services in a network environment |
US20180183799A1 (en) * | 2016-12-28 | 2018-06-28 | Nanning Fugui Precision Industrial Co., Ltd. | Method and system for defending against malicious website |
US10225187B2 (en) | 2017-03-22 | 2019-03-05 | Cisco Technology, Inc. | System and method for providing a bit indexed service chain |
US10523512B2 (en) * | 2017-03-24 | 2019-12-31 | Cisco Technology, Inc. | Network agent for generating platform specific network policies |
US10257033B2 (en) | 2017-04-12 | 2019-04-09 | Cisco Technology, Inc. | Virtualized network functions and service chaining in serverless computing infrastructure |
US10884807B2 (en) | 2017-04-12 | 2021-01-05 | Cisco Technology, Inc. | Serverless computing and task scheduling |
US10333855B2 (en) | 2017-04-19 | 2019-06-25 | Cisco Technology, Inc. | Latency reduction in service function paths |
US10554689B2 (en) | 2017-04-28 | 2020-02-04 | Cisco Technology, Inc. | Secure communication session resumption in a service function chain |
US10735275B2 (en) | 2017-06-16 | 2020-08-04 | Cisco Technology, Inc. | Releasing and retaining resources for use in a NFV environment |
US10798187B2 (en) | 2017-06-19 | 2020-10-06 | Cisco Technology, Inc. | Secure service chaining |
US10397271B2 (en) | 2017-07-11 | 2019-08-27 | Cisco Technology, Inc. | Distributed denial of service mitigation for web conferencing |
US10673698B2 (en) | 2017-07-21 | 2020-06-02 | Cisco Technology, Inc. | Service function chain optimization using live testing |
US11063856B2 (en) | 2017-08-24 | 2021-07-13 | Cisco Technology, Inc. | Virtual network function monitoring in a network function virtualization deployment |
US10791065B2 (en) | 2017-09-19 | 2020-09-29 | Cisco Technology, Inc. | Systems and methods for providing container attributes as part of OAM techniques |
US11018981B2 (en) | 2017-10-13 | 2021-05-25 | Cisco Technology, Inc. | System and method for replication container performance and policy validation using real time network traffic |
US10541893B2 (en) | 2017-10-25 | 2020-01-21 | Cisco Technology, Inc. | System and method for obtaining micro-service telemetry data |
US10581684B2 (en) | 2017-12-06 | 2020-03-03 | Schweitzer Engineering Laboratories, Inc. | Network management via a secondary communication channel in a software defined network |
US10812392B2 (en) | 2018-03-05 | 2020-10-20 | Schweitzer Engineering Laboratories, Inc. | Event-based flow control in software-defined networks |
US10560390B2 (en) | 2018-03-05 | 2020-02-11 | Schweitzer Engineering Laboratories, Inc. | Time-based network operation profiles in a software-defined network |
US10454715B1 (en) | 2018-05-03 | 2019-10-22 | At&T Intellectual Property I, L.P. | Virtual private wire service interworking |
US10666612B2 (en) | 2018-06-06 | 2020-05-26 | Cisco Technology, Inc. | Service chains for inter-cloud traffic |
EP3748562A1 (en) * | 2019-05-08 | 2020-12-09 | EXFO Solutions SAS | Timeline visualization & investigation systems and methods for time lasting events |
US11436053B2 (en) | 2019-05-24 | 2022-09-06 | Microsoft Technology Licensing, Llc | Third-party hardware integration in virtual networks |
US11425033B2 (en) | 2020-03-25 | 2022-08-23 | Schweitzer Engineering Laboratories, Inc. | SDN flow path modification based on packet inspection |
US11201759B1 (en) | 2020-07-08 | 2021-12-14 | Schweitzer Engineering Laboratories, Inc. | Reconfigurable dual-ring network redundancy |
US11743189B2 (en) * | 2020-09-14 | 2023-08-29 | Microsoft Technology Licensing, Llc | Fault tolerance for SDN gateways using network switches |
US11677663B2 (en) | 2021-08-12 | 2023-06-13 | Schweitzer Engineering Laboratories, Inc. | Software-defined network statistics extension |
US11722437B2 (en) * | 2021-09-14 | 2023-08-08 | Netscout Systems, Inc. | Configuration of a scalable IP network implementation of a switch stack |
US11882002B2 (en) | 2022-06-22 | 2024-01-23 | Schweitzer Engineering Laboratories, Inc. | Offline test mode SDN validation |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2011132568A1 (ja) * | 2010-04-19 | 2011-10-27 | 日本電気株式会社 | スイッチ、及びフローテーブル制御方法 |
US20110273988A1 (en) * | 2010-05-10 | 2011-11-10 | Jean Tourrilhes | Distributing decision making in a centralized flow routing system |
CN102301663A (zh) * | 2011-07-06 | 2011-12-28 | 华为技术有限公司 | 一种报文处理方法及相关设备 |
CN102349268A (zh) * | 2009-03-09 | 2012-02-08 | 日本电气株式会社 | OpenFlow通信系统和OpenFlow通信方法 |
Family Cites Families (531)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US829529A (en) | 1906-01-31 | 1906-08-28 | John N Keathley | Cotton-chopper. |
US5309433A (en) | 1992-06-18 | 1994-05-03 | International Business Machines Corp. | Methods and apparatus for routing packets in packet transmission networks |
EP0578207B1 (en) | 1992-07-06 | 1999-12-01 | Microsoft Corporation | Method for naming and binding objects |
US5390173A (en) | 1992-10-22 | 1995-02-14 | Digital Equipment Corporation | Packet format in hub for packet data communications system |
US5802278A (en) | 1995-05-10 | 1998-09-01 | 3Com Corporation | Bridge/router architecture for high performance scalable networking |
US5684800A (en) | 1995-11-15 | 1997-11-04 | Cabletron Systems, Inc. | Method for establishing restricted broadcast groups in a switched network |
US5983278A (en) | 1996-04-19 | 1999-11-09 | Lucent Technologies Inc. | Low-loss, fair bandwidth allocation flow control in a packet switch |
US6085238A (en) | 1996-04-23 | 2000-07-04 | Matsushita Electric Works, Ltd. | Virtual LAN system |
US5878232A (en) | 1996-12-27 | 1999-03-02 | Compaq Computer Corporation | Dynamic reconfiguration of network device's virtual LANs using the root identifiers and root ports determined by a spanning tree procedure |
EP1013131A2 (en) | 1997-03-13 | 2000-06-28 | Urizen Ltd. | Apparatus and method for expanding communication networks |
US20010005527A1 (en) | 1997-03-31 | 2001-06-28 | Kathleen Michelle Vaeth | Thin film fabrication |
US6331983B1 (en) | 1997-05-06 | 2001-12-18 | Enterasys Networks, Inc. | Multicast switching |
US6041042A (en) | 1997-05-27 | 2000-03-21 | Cabletron Systems, Inc. | Remote port mirroring system and method thereof |
US5959968A (en) | 1997-07-30 | 1999-09-28 | Cisco Systems, Inc. | Port aggregation protocol |
US6185214B1 (en) | 1997-09-11 | 2001-02-06 | 3Com Corporation | Use of code vectors for frame forwarding in a bridge/router |
JP3075251B2 (ja) | 1998-03-05 | 2000-08-14 | 日本電気株式会社 | 非同期転送モード交換網における仮想パス帯域分配システム |
US7430164B2 (en) | 1998-05-04 | 2008-09-30 | Hewlett-Packard Development Company, L.P. | Path recovery on failure in load balancing switch protocols |
US5973278A (en) | 1998-05-07 | 1999-10-26 | Eaton Corporation | Snap acting charge/discharge and open/closed indicators displaying states of electrical switching apparatus |
US7346063B1 (en) | 1998-07-08 | 2008-03-18 | Broadcom Corporation | Memory management unit for a network switch |
US6335935B2 (en) | 1998-07-08 | 2002-01-01 | Broadcom Corporation | Network switching architecture with fast filtering processor |
IL125272A0 (en) | 1998-07-08 | 1999-03-12 | Galileo Technology Ltd | Vlan protocol |
EP0993156B1 (en) | 1998-10-05 | 2007-01-03 | Alcatel | Network switching device with forwarding database tables populated based on use |
US6185241B1 (en) | 1998-10-29 | 2001-02-06 | Xerox Corporation | Metal spatial filter to enhance model reflectivity in a vertical cavity surface emitting laser |
US6438106B1 (en) | 1998-12-22 | 2002-08-20 | Nortel Networks Limited | Inter-class schedulers utilizing statistical priority guaranteed queuing and generic cell-rate algorithm priority guaranteed queuing |
US6771610B1 (en) | 1999-01-19 | 2004-08-03 | 3Com Corporation | Spanning tree with protocol for bypassing port state transition timers |
WO2000072533A1 (en) * | 1999-05-21 | 2000-11-30 | Broadcom Corporation | Stacked network switch configuration |
US6542266B1 (en) | 1999-06-24 | 2003-04-01 | Qwest Communications International Inc. | System and method for providing broadband data service |
JP4148605B2 (ja) | 1999-08-06 | 2008-09-10 | 富士通株式会社 | ネットワークシステムおよびサーバ |
US6498781B1 (en) | 1999-08-13 | 2002-12-24 | International Business Machines Corporation | Self-tuning link aggregation system |
KR100876060B1 (ko) | 1999-08-25 | 2008-12-26 | 알러간, 인코포레이티드 | 활성화가능한 재조합 신경독 |
US7061877B1 (en) | 1999-09-10 | 2006-06-13 | Georgia Tech Reseach Corporation | System and method for providing high speed wireless media access |
EP1260061A2 (en) | 2000-02-22 | 2002-11-27 | Top Layer Networks, Inc. | System and method for flow mirroring in a network switch |
JP2001313670A (ja) | 2000-04-28 | 2001-11-09 | Oki Electric Ind Co Ltd | ネットワーク管理方法 |
AU2001256635A1 (en) | 2000-05-11 | 2001-11-20 | Firemedia Communications (Israel) Ltd. | Three-dimensional switch providing packet routing between multiple multimedia buses |
JP4168574B2 (ja) | 2000-06-02 | 2008-10-22 | 株式会社日立製作所 | パケット転送装置、パケット転送制御方法、及びパケット転送装置の設定方法 |
AU7170301A (en) | 2000-06-29 | 2002-01-14 | Cachestream Corp | Virtual multicasting |
US7924837B1 (en) | 2000-07-31 | 2011-04-12 | Avaya Communication Israel Ltd. | IP multicast in VLAN environment |
US6633761B1 (en) | 2000-08-11 | 2003-10-14 | Reefedge, Inc. | Enabling seamless user mobility in a short-range wireless networking environment |
US6870840B1 (en) | 2000-08-16 | 2005-03-22 | Alcatel | Distributed source learning for data communication switch |
US8619793B2 (en) | 2000-08-21 | 2013-12-31 | Rockstar Consortium Us Lp | Dynamic assignment of traffic classes to a priority queue in a packet forwarding device |
US7373425B2 (en) | 2000-08-22 | 2008-05-13 | Conexant Systems, Inc. | High-speed MAC address search engine |
CA2355473A1 (en) | 2000-09-29 | 2002-03-29 | Linghsiao Wang | Buffer management for support of quality-of-service guarantees and data flow control in data switching |
US6937576B1 (en) | 2000-10-17 | 2005-08-30 | Cisco Technology, Inc. | Multiple instance spanning tree protocol |
JP2002135410A (ja) | 2000-10-26 | 2002-05-10 | Kddi Research & Development Laboratories Inc | アクセスネットワークシステム |
US6920503B1 (en) | 2000-10-28 | 2005-07-19 | Redback Networks Inc. | Tunnel interworking |
US6957269B2 (en) | 2001-01-03 | 2005-10-18 | Advanced Micro Devices, Inc. | Method and apparatus for performing priority-based flow control |
US6912592B2 (en) | 2001-01-05 | 2005-06-28 | Extreme Networks, Inc. | Method and system of aggregate multiple VLANs in a metropolitan area network |
WO2002061510A2 (en) | 2001-01-31 | 2002-08-08 | Lancope, Inc. | Network port profiling |
US7016352B1 (en) | 2001-03-23 | 2006-03-21 | Advanced Micro Devices, Inc. | Address modification within a switching device in a packet-switched network |
US7450595B1 (en) | 2001-05-01 | 2008-11-11 | At&T Corp. | Method and system for managing multiple networks over a set of ports |
US7102996B1 (en) | 2001-05-24 | 2006-09-05 | F5 Networks, Inc. | Method and system for scaling network traffic managers |
US20070116422A1 (en) | 2001-06-06 | 2007-05-24 | Reynolds Thomas A | Photoresponsive polyimide based fiber |
US6956824B2 (en) | 2001-06-14 | 2005-10-18 | Tropic Networks Inc. | Extension of link aggregation protocols over the network |
US20040001433A1 (en) | 2001-07-18 | 2004-01-01 | Gram Charles Andrew | Interactive control of network devices |
US7382787B1 (en) | 2001-07-30 | 2008-06-03 | Cisco Technology, Inc. | Packet routing and switching device |
WO2003015352A1 (en) | 2001-08-01 | 2003-02-20 | Nokia Corporation | Apparatus and method for flow scheduling based on priorities in a mobile network |
WO2003013433A2 (en) | 2001-08-06 | 2003-02-20 | Euro-Celtique S.A. | Sequestered antagonist formulations |
JP2003069573A (ja) | 2001-08-23 | 2003-03-07 | Allied Tereshisu Kk | 情報記録媒体を用いたネットワーク機器の管理システム及び方法 |
US7173934B2 (en) | 2001-09-10 | 2007-02-06 | Nortel Networks Limited | System, device, and method for improving communication network reliability using trunk splitting |
US20030084219A1 (en) | 2001-10-26 | 2003-05-01 | Maxxan Systems, Inc. | System, apparatus and method for address forwarding for a computer network |
US20070094465A1 (en) | 2001-12-26 | 2007-04-26 | Cisco Technology, Inc., A Corporation Of California | Mirroring mechanisms for storage area networks and network based virtualization |
US20030123393A1 (en) | 2002-01-03 | 2003-07-03 | Feuerstraeter Mark T. | Method and apparatus for priority based flow control in an ethernet architecture |
US7327748B2 (en) | 2002-01-28 | 2008-02-05 | Alcatel Lucent | Enterprise switching device and method |
US20030152075A1 (en) | 2002-02-14 | 2003-08-14 | Hawthorne Austin J. | Virtual local area network identifier translation in a packet-based network |
WO2003071749A1 (fr) | 2002-02-20 | 2003-08-28 | Mitsubishi Denki Kabushiki Kaisha | Reseau d'elements mobiles |
US7688960B1 (en) | 2002-02-26 | 2010-03-30 | Sprint Communications Company L.P. | Method and system for separating business and device logic in a computing network system |
CA2477962C (en) | 2002-03-01 | 2013-07-16 | Enterasys Networks, Inc. | Location aware data network |
US20030174706A1 (en) | 2002-03-15 | 2003-09-18 | Broadcom Corporation | Fastpath implementation for transparent local area network (LAN) services over multiprotocol label switching (MPLS) |
US7315545B1 (en) | 2002-03-29 | 2008-01-01 | Nortel Networks Limited | Method and apparatus to support differential internet data packet treatment in a base station controller |
TW550902B (en) | 2002-04-03 | 2003-09-01 | Accton Technology Corp | Method of setting network configuration and device and system thereof |
US7209435B1 (en) | 2002-04-16 | 2007-04-24 | Foundry Networks, Inc. | System and method for providing network route redundancy across Layer 2 devices |
US20030208616A1 (en) | 2002-05-01 | 2003-11-06 | Blade Software, Inc. | System and method for testing computer network access and traffic control systems |
US20090279558A1 (en) | 2002-05-06 | 2009-11-12 | Ian Edward Davis | Network routing apparatus for enhanced efficiency and monitoring capability |
US7206288B2 (en) | 2002-06-12 | 2007-04-17 | Cisco Technology, Inc. | Methods and apparatus for characterizing a route in fibre channel fabric |
US20040003094A1 (en) | 2002-06-27 | 2004-01-01 | Michael See | Method and apparatus for mirroring traffic over a network |
FI113127B (fi) | 2002-06-28 | 2004-02-27 | Ssh Comm Security Corp | Yleislähetyspakettien välittäminen turvallisissa tietokoneiden välisissä tietoliikenneyhteyksissä |
US7330897B2 (en) | 2002-07-09 | 2008-02-12 | International Business Machines Corporation | Methods and apparatus for storage area network component registration |
JP3757917B2 (ja) | 2002-08-20 | 2006-03-22 | 日本電気株式会社 | パケット転送装置、パケット転送方法解決サーバ、dnsサーバ、ネットワークシステム及びプログラム |
US7453888B2 (en) | 2002-08-27 | 2008-11-18 | Alcatel Lucent | Stackable virtual local area network provisioning in bridged networks |
US7316031B2 (en) | 2002-09-06 | 2008-01-01 | Capital One Financial Corporation | System and method for remotely monitoring wireless networks |
US7397768B1 (en) | 2002-09-11 | 2008-07-08 | Qlogic, Corporation | Zone management in a multi-module fibre channel switch |
WO2004032426A1 (en) | 2002-10-04 | 2004-04-15 | Telefonaktiebolaget Lm Ericsson (Publ.) | Isolation of hosts connected to an access network |
US7647427B1 (en) | 2002-10-18 | 2010-01-12 | Foundry Networks, Inc. | Redundancy support for network address translation (NAT) |
US7292581B2 (en) | 2002-10-24 | 2007-11-06 | Cisco Technology, Inc. | Large-scale layer 2 metropolitan area network |
US20080133760A1 (en) | 2002-11-02 | 2008-06-05 | Berkvens Winfried Antonius Hen | Method and Apparatus Allowing Remote Access in Data Networks |
US7424014B2 (en) | 2002-11-12 | 2008-09-09 | Cisco Technology, Inc. | System and method for local packet transport services within distributed routers |
US7397794B1 (en) | 2002-11-21 | 2008-07-08 | Juniper Networks, Inc. | Systems and methods for implementing virtual switch planes in a physical switch fabric |
KR100480366B1 (ko) | 2002-12-24 | 2005-03-31 | 한국전자통신연구원 | E-pon의 가상 랜 구성 시스템 및 방법, 그 프로그램이 저장된 기록매체 |
US7417950B2 (en) | 2003-02-03 | 2008-08-26 | Ciena Corporation | Method and apparatus for performing data flow ingress/egress admission control in a provider network |
JP4103816B2 (ja) | 2003-02-12 | 2008-06-18 | 松下電器産業株式会社 | ルータ設定方法及びルータ装置 |
JP4256693B2 (ja) | 2003-02-18 | 2009-04-22 | 株式会社日立製作所 | 計算機システム、i/oデバイス及びi/oデバイスの仮想共有方法 |
US20040225725A1 (en) | 2003-02-19 | 2004-11-11 | Nec Corporation | Network system, learning bridge node, learning method and its program |
US20040165595A1 (en) | 2003-02-25 | 2004-08-26 | At&T Corp. | Discovery and integrity testing method in an ethernet domain |
US7411973B2 (en) | 2003-03-11 | 2008-08-12 | Broadcom Corporation | System and method for interfacing with a management system |
KR100619006B1 (ko) | 2003-03-28 | 2006-08-31 | 삼성전자주식회사 | 고효율 프로젝션 시스템 |
US7486674B2 (en) | 2003-04-28 | 2009-02-03 | Alcatel-Lucent Usa Inc. | Data mirroring in a service |
US7370346B2 (en) | 2003-04-29 | 2008-05-06 | Hewlett-Packard Development Company, L.P. | Method and apparatus for access security services |
US7688736B1 (en) | 2003-05-05 | 2010-03-30 | Marvell International Ltd | Network switch with quality of service flow control |
US7516487B1 (en) | 2003-05-21 | 2009-04-07 | Foundry Networks, Inc. | System and method for source IP anti-spoofing security |
JP4449903B2 (ja) | 2003-06-11 | 2010-04-14 | 日本電気株式会社 | ルータ装置およびネットワーク接続方式 |
US8555352B2 (en) | 2003-06-20 | 2013-10-08 | Juniper Networks, Inc. | Controlling access nodes with network transport devices within wireless mobile networks |
US7480258B1 (en) | 2003-07-03 | 2009-01-20 | Cisco Technology, Inc. | Cross stack rapid transition protocol |
US7463579B2 (en) | 2003-07-11 | 2008-12-09 | Nortel Networks Limited | Routed split multilink trunking |
US7593346B2 (en) | 2003-07-31 | 2009-09-22 | Cisco Technology, Inc. | Distributing and balancing traffic flow in a virtual gateway |
JP4123088B2 (ja) | 2003-08-06 | 2008-07-23 | 株式会社日立製作所 | ストレージネットワーク管理装置及び方法 |
US7380025B1 (en) | 2003-10-07 | 2008-05-27 | Cisco Technology, Inc. | Method and apparatus providing role-based configuration of a port of a network element |
JP2007507990A (ja) | 2003-10-14 | 2007-03-29 | ラプター・ネツトワークス・テクノロジー・インコーポレイテツド | 分散スイッチング構造を備えるスイッチングシステム |
WO2005043814A1 (en) | 2003-10-31 | 2005-05-12 | Juniper Networks, Inc. | Enforcing access control on multicast transmissions |
US8050180B2 (en) | 2003-10-31 | 2011-11-01 | Brocade Communications Systems, Inc. | Network path tracing method |
US8179808B2 (en) | 2003-10-31 | 2012-05-15 | Brocade Communication Systems, Inc. | Network path tracing method |
WO2005050950A1 (en) | 2003-11-13 | 2005-06-02 | Cryptek, Inc. | System and method for traversing access control metadata across multiple network domains |
US20050111352A1 (en) | 2003-11-21 | 2005-05-26 | Boon Ho | Method and system for monitoring a network containing routers using a backup routing protocol |
US7558273B1 (en) | 2003-12-23 | 2009-07-07 | Extreme Networks, Inc. | Methods and systems for associating and translating virtual local area network (VLAN) tags |
WO2005067532A2 (en) | 2004-01-14 | 2005-07-28 | Riverstone Networks, Inc. | Managing processing utilization in a network node |
US7701948B2 (en) | 2004-01-20 | 2010-04-20 | Nortel Networks Limited | Metro ethernet service enhancements |
US7764688B2 (en) | 2004-01-20 | 2010-07-27 | Nortel Networks Limited | Ethernet differentiated services |
US7333508B2 (en) | 2004-01-20 | 2008-02-19 | Nortel Networks Limited | Method and system for Ethernet and frame relay network interworking |
US7310664B1 (en) | 2004-02-06 | 2007-12-18 | Extreme Networks | Unified, configurable, adaptive, network architecture |
US7849098B1 (en) | 2004-02-06 | 2010-12-07 | Vmware, Inc. | Providing multiple concurrent access to a file system |
US7843907B1 (en) | 2004-02-13 | 2010-11-30 | Habanero Holdings, Inc. | Storage gateway target for fabric-backplane enterprise servers |
US7843906B1 (en) | 2004-02-13 | 2010-11-30 | Habanero Holdings, Inc. | Storage gateway initiator for fabric-backplane enterprise servers |
US7860097B1 (en) | 2004-02-13 | 2010-12-28 | Habanero Holdings, Inc. | Fabric-backplane enterprise servers with VNICs and VLANs |
US8090805B1 (en) | 2004-02-17 | 2012-01-03 | Cisco Technology, Inc. | System and method for performing cascaded lookups to forward packets |
US7477894B1 (en) | 2004-02-23 | 2009-01-13 | Foundry Networks, Inc. | Methods and apparatus for handling wireless roaming among and across wireless area networks |
US20050195813A1 (en) | 2004-02-23 | 2005-09-08 | Sinett Corporation | Unified architecture for wired and wireless networks |
WO2005088938A1 (en) | 2004-03-10 | 2005-09-22 | Enterasys Networks, Inc. | Method for network traffic mirroring with data privacy |
US20050220096A1 (en) | 2004-04-06 | 2005-10-06 | Robert Friskney | Traffic engineering in frame-based carrier networks |
WO2005109886A2 (en) | 2004-04-30 | 2005-11-17 | Vulcan Inc. | Controlling one or more media devices |
JP4373271B2 (ja) | 2004-05-14 | 2009-11-25 | 富士通株式会社 | ノード網における仮想lanの網構成を把握する方法およびプログラム |
GB2414623B (en) | 2004-05-27 | 2006-05-17 | 3Com Corp | Distributed bridging with synchronization of forwarding databases |
JP2005347943A (ja) | 2004-06-01 | 2005-12-15 | Hitachi Ltd | ネットワーク中継装置及びその制御方法 |
JP4397292B2 (ja) | 2004-07-09 | 2010-01-13 | 富士通株式会社 | 制御パケットループ防止方法及びそれを用いたブリッジ装置 |
FR2873524B1 (fr) | 2004-07-22 | 2006-10-27 | Alcatel Sa | Reseau local a groupe(s) virtuel(s) d'equipements de coeur propres a la commutation de niveau deux |
US7466712B2 (en) | 2004-07-30 | 2008-12-16 | Brocade Communications Systems, Inc. | System and method for providing proxy and translation domains in a fibre channel router |
EP1782293A2 (en) | 2004-08-20 | 2007-05-09 | Enterasys Networks, Inc. | System, method and apparatus for traffic mirror setup, service and security in communication networks |
US7460527B2 (en) | 2004-08-20 | 2008-12-02 | Cisco Technology, Inc. | Port aggregation for fibre channel interfaces |
US7463597B1 (en) | 2004-08-27 | 2008-12-09 | Juniper Networks, Inc. | Spanning tree protocol synchronization within virtual private networks |
US7570604B1 (en) | 2004-08-30 | 2009-08-04 | Juniper Networks, Inc. | Multicast data trees for virtual private local area network (LAN) service multicast |
US8116307B1 (en) | 2004-09-23 | 2012-02-14 | Juniper Networks, Inc. | Packet structure for mirrored traffic flow |
US7764768B2 (en) | 2004-10-06 | 2010-07-27 | Alcatel-Lucent Usa Inc. | Providing CALEA/legal intercept information to law enforcement agencies for internet protocol multimedia subsystems (IMS) |
US7508757B2 (en) | 2004-10-15 | 2009-03-24 | Alcatel Lucent | Network with MAC table overflow protection |
US8238347B2 (en) | 2004-10-22 | 2012-08-07 | Cisco Technology, Inc. | Fibre channel over ethernet |
US7801125B2 (en) | 2004-10-22 | 2010-09-21 | Cisco Technology, Inc. | Forwarding table reduction and multipath network forwarding |
JP4481147B2 (ja) | 2004-10-28 | 2010-06-16 | 富士通株式会社 | Macアドレス学習装置 |
US7136550B2 (en) | 2004-10-28 | 2006-11-14 | Corning Incorporated | Single-fiber launch/receive system for biosensing applications |
GB2419701A (en) | 2004-10-29 | 2006-05-03 | Hewlett Packard Development Co | Virtual overlay infrastructure with dynamic control of mapping |
EP1657853A1 (en) | 2004-11-12 | 2006-05-17 | STMicroelectronics (Research & Development) Limited | Roaming network stations using a MAC address identifier to select a new access point |
US8700799B2 (en) | 2004-11-12 | 2014-04-15 | Brocade Communications Systems, Inc. | Methods, devices and systems with improved zone merge operation by operating on a switch basis |
US8005084B2 (en) | 2004-11-30 | 2011-08-23 | Broadcom Corporation | Mirroring in a network device |
US8285907B2 (en) * | 2004-12-10 | 2012-10-09 | Intel Corporation | Packet processing in switched fabric networks |
US7502319B2 (en) | 2004-12-10 | 2009-03-10 | Electronics And Telecommunications Research Institute | Ethernet packet transmission apparatus and method |
US7808992B2 (en) | 2004-12-30 | 2010-10-05 | Cisco Technology, Inc. | Platform independent implementation of private VLANS |
US20070036178A1 (en) | 2005-02-02 | 2007-02-15 | Susan Hares | Layer 2 virtual switching environment |
US20060184937A1 (en) | 2005-02-11 | 2006-08-17 | Timothy Abels | System and method for centralized software management in virtual machines |
US8565124B2 (en) | 2005-03-04 | 2013-10-22 | Nec Corporation | Node, network, correspondence relationship generation method and frame transfer program |
US7586895B2 (en) | 2005-04-01 | 2009-09-08 | Cisco Technology, Inc. | Performing extended lookups on MAC-based tables including level 3 multicast group destination addresses |
US7616578B2 (en) | 2005-04-11 | 2009-11-10 | Cisco Technology, Inc. | Forwarding traffic flow information using an intelligent line card |
US7673068B2 (en) | 2005-04-18 | 2010-03-02 | Alcatel Lucent | Method and system for implementing a high availability VLAN |
GB2425681A (en) | 2005-04-27 | 2006-11-01 | 3Com Corporaton | Access control by Dynamic Host Configuration Protocol snooping |
US7835370B2 (en) | 2005-04-28 | 2010-11-16 | Cisco Technology, Inc. | System and method for DSL subscriber identification over ethernet network |
US8751649B2 (en) | 2005-06-07 | 2014-06-10 | Extreme Networks | Port management system |
US20060285499A1 (en) | 2005-06-17 | 2006-12-21 | Broadcom Corporation | Loop detection for a network device |
US7571447B2 (en) | 2005-06-20 | 2009-08-04 | International Business Machines Corporation | Loose coupling of web services |
KR100653634B1 (ko) | 2005-06-23 | 2006-12-06 | 조창환 | 네트워크 트래픽 제어 시스템 및 방법 |
GB0516158D0 (en) | 2005-08-05 | 2005-09-14 | Univ Montfort | An apparatus and method for `non-contact' electrical impedance imaging |
US8095774B1 (en) | 2007-07-05 | 2012-01-10 | Silver Peak Systems, Inc. | Pre-fetching data into a memory |
US7937756B2 (en) | 2005-08-19 | 2011-05-03 | Cpacket Networks, Inc. | Apparatus and method for facilitating network security |
US20070053294A1 (en) | 2005-09-02 | 2007-03-08 | Michael Ho | Network load balancing apparatus, systems, and methods |
WO2007033204A2 (en) | 2005-09-12 | 2007-03-22 | Nortel Networks Limited | Forwarding plane data communications channel for ethernet transport networks |
US9143841B2 (en) | 2005-09-29 | 2015-09-22 | Brocade Communications Systems, Inc. | Federated management of intelligent service modules |
DE102005048585A1 (de) | 2005-10-06 | 2007-04-12 | Robert Bosch Gmbh | Teilnehmer und Kommunikationscontroller eines Kommunikationssystems und Verfahren zur Realisierung einer Gateway-Funktionalität in einem Teilnehmer eines Kommunikationssystems |
CN100442772C (zh) | 2005-10-19 | 2008-12-10 | 华为技术有限公司 | 一种桥接转发方法 |
US9497600B2 (en) | 2005-10-28 | 2016-11-15 | Hewlett Packard Enterprise Development Lp | Service chaining |
US7697528B2 (en) | 2005-11-01 | 2010-04-13 | Nortel Networks Limited | Multilink trunking for encapsulated traffic |
US7903647B2 (en) | 2005-11-29 | 2011-03-08 | Cisco Technology, Inc. | Extending sso for DHCP snooping to two box redundancy |
CN100442776C (zh) | 2005-12-06 | 2008-12-10 | 杭州华三通信技术有限公司 | 在三层交换机上实现组播转发的方法 |
US8175074B2 (en) | 2005-12-12 | 2012-05-08 | Telefonaktiebolaget L M Ericsson (Publ) | Method and devices for specifying the quality of service in a transmission of data packets |
US7716240B2 (en) * | 2005-12-29 | 2010-05-11 | Nextlabs, Inc. | Techniques and system to deploy policies intelligently |
US20070177597A1 (en) | 2006-02-02 | 2007-08-02 | Yu Ju | Ethernet connection-based forwarding process |
US7835378B2 (en) | 2006-02-02 | 2010-11-16 | Cisco Technology, Inc. | Root node redundancy for multipoint-to-multipoint transport trees |
US7929420B2 (en) | 2006-02-02 | 2011-04-19 | Avaya, Inc. | Method and apparatus for learning VRRP backup routers |
US7639605B2 (en) | 2006-02-08 | 2009-12-29 | Cisco Technology, Inc. | System and method for detecting and recovering from virtual switch link failures |
US7885398B2 (en) | 2006-03-06 | 2011-02-08 | Alcatel Lucent | Multiple criteria based load balancing |
US8189575B2 (en) | 2006-03-13 | 2012-05-29 | Rockstar Bidco, L.P. | Modular scalable switch architecture |
US7962566B2 (en) | 2006-03-27 | 2011-06-14 | Sap Ag | Optimized session management for fast session failover and load balancing |
CN101064682B (zh) | 2006-04-29 | 2010-08-04 | 华为技术有限公司 | 光网络终端及其报文处理方法 |
US7948977B2 (en) | 2006-05-05 | 2011-05-24 | Broadcom Corporation | Packet routing with payload analysis, encapsulation and service module vectoring |
US8160080B1 (en) | 2006-05-08 | 2012-04-17 | Marvell Israel (M.I.S.L.) Ltd. | Implementation of reliable synchronization of distributed databases |
JP2007318553A (ja) | 2006-05-26 | 2007-12-06 | Fujitsu Ltd | ネットワーク管理方法 |
US7653056B1 (en) | 2006-06-02 | 2010-01-26 | World Wide Packets, Inc. | Virtual switching using a provisional identifier to conceal a user identifier |
US8018938B1 (en) | 2006-06-02 | 2011-09-13 | World Wide Packets, Inc. | Translating between a switching format and a transport format |
JP4834493B2 (ja) | 2006-08-25 | 2011-12-14 | アラクサラネットワークス株式会社 | ネットワーク中継装置、および、ネットワーク中継装置の制御方法 |
CN100583825C (zh) | 2006-08-30 | 2010-01-20 | 华为技术有限公司 | 最短路径桥中对称树的生成方法 |
US8169912B2 (en) | 2006-08-31 | 2012-05-01 | Futurewei Technologies, Inc. | System for dynamic bandwidth adjustment and trading among peers |
US8774215B2 (en) | 2006-09-01 | 2014-07-08 | Emulex Corporation | Fibre channel over Ethernet |
US8396945B2 (en) | 2006-09-11 | 2013-03-12 | Alcatel Lucent | Network management system with adaptive sampled proactive diagnostic capabilities |
JP2008079175A (ja) | 2006-09-25 | 2008-04-03 | Alaxala Networks Corp | フレーム転送システム |
US20080080517A1 (en) | 2006-09-28 | 2008-04-03 | At & T Corp. | System and method for forwarding traffic data in an MPLS VPN |
US9178793B1 (en) | 2006-09-29 | 2015-11-03 | Yahoo! Inc. | Engine for processing content rules associated with locations in a page |
US8208463B2 (en) | 2006-10-24 | 2012-06-26 | Cisco Technology, Inc. | Subnet scoped multicast / broadcast packet distribution mechanism over a routed network |
US7697556B2 (en) | 2006-10-26 | 2010-04-13 | Telefonaktiebolaget L M Ericsson (Publ) | MAC (media access control) tunneling and control and method |
US7720889B1 (en) | 2006-10-31 | 2010-05-18 | Netapp, Inc. | System and method for nearly in-band search indexing |
WO2008056838A1 (en) | 2006-11-08 | 2008-05-15 | Chang Hwan Cho | System and method for controlling network traffic |
US20080112400A1 (en) | 2006-11-15 | 2008-05-15 | Futurewei Technologies, Inc. | System for Providing Both Traditional and Traffic Engineering Enabled Services |
US7599901B2 (en) | 2006-12-06 | 2009-10-06 | Microsoft Corporation | Processing data-centric business models |
US20080159277A1 (en) | 2006-12-15 | 2008-07-03 | Brocade Communications Systems, Inc. | Ethernet over fibre channel |
US20080181243A1 (en) | 2006-12-15 | 2008-07-31 | Brocade Communications Systems, Inc. | Ethernet forwarding in high performance fabrics |
US20080159260A1 (en) | 2006-12-15 | 2008-07-03 | Brocade Communications Systems, Inc. | Fibre channel over ethernet frame |
US8973098B2 (en) | 2007-01-11 | 2015-03-03 | International Business Machines Corporation | System and method for virtualized resource configuration |
US7706255B1 (en) | 2007-01-29 | 2010-04-27 | Solace Systems, Inc. | Communications apparatus with redundant switching or backpressure mechanism |
US20080181196A1 (en) | 2007-01-31 | 2008-07-31 | Alcatel Lucent | Link aggregation across multiple chassis |
US8259720B2 (en) | 2007-02-02 | 2012-09-04 | Cisco Technology, Inc. | Triple-tier anycast addressing |
US20100046471A1 (en) | 2007-02-06 | 2010-02-25 | Mitsubishi Electric Corporation | Communication system, communication apparatus, wireless base station, and wireless terminal station |
JP4259581B2 (ja) | 2007-02-07 | 2009-04-30 | 日立電線株式会社 | スイッチングハブおよびlanシステム |
US7796594B2 (en) | 2007-02-14 | 2010-09-14 | Marvell Semiconductor, Inc. | Logical bridging system and method |
US9661112B2 (en) | 2007-02-22 | 2017-05-23 | International Business Machines Corporation | System and methods for providing server virtualization assistance |
US8140696B2 (en) | 2007-03-12 | 2012-03-20 | International Business Machines Corporation | Layering serial attached small computer system interface (SAS) over ethernet |
US8077721B2 (en) | 2007-03-15 | 2011-12-13 | Cisco Technology, Inc. | Methods and apparatus providing two stage tunneling |
US7916741B2 (en) | 2007-04-02 | 2011-03-29 | William Marsh Rice University | System and method for preventing count-to-infinity problems in ethernet networks |
US7936670B2 (en) | 2007-04-11 | 2011-05-03 | International Business Machines Corporation | System, method and program to control access to virtual LAN via a switch |
US8078704B2 (en) | 2007-04-12 | 2011-12-13 | Hewlett-Packard Development Company, L.P. | Provisioning of a service environment using web services |
US8301686B1 (en) | 2007-04-16 | 2012-10-30 | Citrix Systems, Inc. | Systems and methods for decentralized computing |
US7873038B2 (en) | 2007-04-30 | 2011-01-18 | Hewlett-Packard Development Company, L.P. | Packet processing |
EP1995543A1 (fr) | 2007-05-10 | 2008-11-26 | AGC Flat Glass Europe SA | Echangeur de chaleur pour oxygène |
US7724674B2 (en) | 2007-05-16 | 2010-05-25 | Simula Innovations As | Deadlock free network routing |
JP4862743B2 (ja) | 2007-05-17 | 2012-01-25 | 日本電気株式会社 | ノード、通信方法およびノード用プログラム |
US20080298248A1 (en) | 2007-05-28 | 2008-12-04 | Guenter Roeck | Method and Apparatus For Computer Network Bandwidth Control and Congestion Management |
US7945941B2 (en) | 2007-06-01 | 2011-05-17 | Cisco Technology, Inc. | Flexible access control policy enforcement |
US8054833B2 (en) | 2007-06-05 | 2011-11-08 | Hewlett-Packard Development Company, L.P. | Packet mirroring |
US8817817B2 (en) | 2007-06-06 | 2014-08-26 | Hewlett-Packard Development Company, L.P. | Method for ethernet power savings on link aggregated groups |
US20080310342A1 (en) | 2007-06-12 | 2008-12-18 | Cisco Technology, Inc. | Addressing Messages in a Two-Tier Network |
US8321908B2 (en) | 2007-06-15 | 2012-11-27 | Cisco Technology, Inc. | Apparatus and method for applying network policy at a network device |
US7898959B1 (en) | 2007-06-28 | 2011-03-01 | Marvell Israel (Misl) Ltd. | Method for weighted load-balancing among network interfaces |
US8615008B2 (en) | 2007-07-11 | 2013-12-24 | Foundry Networks Llc | Duplicating network traffic through transparent VLAN flooding |
GB0713785D0 (en) | 2007-07-16 | 2007-08-22 | Cellfire Security Technologies | Voice over IP system |
US7836332B2 (en) | 2007-07-18 | 2010-11-16 | Hitachi, Ltd. | Method and apparatus for managing virtual ports on storage systems |
US20090044270A1 (en) | 2007-08-07 | 2009-02-12 | Asaf Shelly | Network element and an infrastructure for a network risk management system |
US7864712B2 (en) | 2007-07-20 | 2011-01-04 | Cisco Technology, Inc. | Preventing loops in networks operating different protocols to provide loop-free topology |
US8166205B2 (en) | 2007-07-31 | 2012-04-24 | Cisco Technology, Inc. | Overlay transport virtualization |
US7969989B2 (en) | 2007-08-07 | 2011-06-28 | Emulex Design & Manufacturing Corporation | High performance ethernet networking utilizing existing fibre channel arbitrated loop HBA technology |
US7729296B1 (en) | 2007-09-07 | 2010-06-01 | Force 10 Networks, Inc. | Distributed BPDU processing for spanning tree protocols |
US20090080345A1 (en) | 2007-09-21 | 2009-03-26 | Ericsson, Inc. | Efficient multipoint distribution tree construction for shortest path bridging |
US8798056B2 (en) | 2007-09-24 | 2014-08-05 | Intel Corporation | Method and system for virtual port communications |
US20090079560A1 (en) | 2007-09-26 | 2009-03-26 | General Electric Company | Remotely monitoring railroad equipment using network protocols |
EP2582092A3 (en) | 2007-09-26 | 2013-06-12 | Nicira, Inc. | Network operating system for managing and securing networks |
US7751329B2 (en) | 2007-10-03 | 2010-07-06 | Avaya Inc. | Providing an abstraction layer in a cluster switch that includes plural switches |
JP5030063B2 (ja) | 2007-10-05 | 2012-09-19 | 本田技研工業株式会社 | ナビゲーション装置およびナビゲーションシステム |
US7975033B2 (en) | 2007-10-23 | 2011-07-05 | Virtudatacenter Holdings, L.L.C. | System and method for initializing and maintaining a series of virtual local area networks contained in a clustered computer system |
US8923328B2 (en) | 2007-11-07 | 2014-12-30 | Brocade Communications Systems, Inc. | Method and system for facilitating application-oriented quality of service in a fibre channel network |
FR2923969B1 (fr) | 2007-11-16 | 2012-11-23 | Canon Kk | Procede de gestion de trames dans un reseau global de communication, produit programme d'ordinateur, moyen de stockage et tete de tunnel correspondants |
CN101911602A (zh) | 2007-11-16 | 2010-12-08 | 爱立信股份有限公司 | 包含使用is-is层级的自组织可缩放以太网的远程通信的方法和系统 |
US8117495B2 (en) | 2007-11-26 | 2012-02-14 | Stratus Technologies Bermuda Ltd | Systems and methods of high availability cluster environment failover protection |
JP5069356B2 (ja) | 2007-11-26 | 2012-11-07 | テレフオンアクチーボラゲット エル エム エリクソン(パブル) | データ伝送ネットワークにおけるアドレス解決のための技術 |
US8194674B1 (en) | 2007-12-20 | 2012-06-05 | Quest Software, Inc. | System and method for aggregating communications and for translating between overlapping internal network addresses and unique external network addresses |
US7796593B1 (en) | 2007-12-21 | 2010-09-14 | Juniper Networks, Inc. | Router using internal flood groups for flooding VPLS traffic |
US7860093B2 (en) | 2007-12-24 | 2010-12-28 | Cisco Technology, Inc. | Fast multicast convergence at secondary designated router or designated forwarder |
CN101471899A (zh) | 2007-12-26 | 2009-07-01 | 上海贝尔阿尔卡特股份有限公司 | 一种支持传感器网络数据访问方法及其接入网关、系统 |
US8018841B2 (en) | 2007-12-31 | 2011-09-13 | Ciena Corporation | Interworking an ethernet ring network and an ethernet network with traffic engineered trunks |
JP2009187368A (ja) | 2008-02-07 | 2009-08-20 | Hitachi Ltd | Usbポートの共有制御方法 |
US20090245137A1 (en) | 2008-03-03 | 2009-10-01 | Green Hills Software, Inc. | Highly available virtual stacking architecture |
US20090222879A1 (en) | 2008-03-03 | 2009-09-03 | Microsoft Corporation | Super policy in information protection systems |
US8230069B2 (en) | 2008-03-04 | 2012-07-24 | International Business Machines Corporation | Server and storage-aware method for selecting virtual machine migration targets |
CN101960801B (zh) | 2008-03-04 | 2014-05-21 | 法国电信公司 | 用于确定将根节点链接到多个叶节点的点到多点树的技术 |
JP5176604B2 (ja) | 2008-03-05 | 2013-04-03 | 富士通株式会社 | 通信装置および通信方法 |
US7801137B2 (en) | 2008-03-11 | 2010-09-21 | Cisco Technology, Inc. | Receiver-based construction of point-to-multipoint trees using path computation elements in a computer network |
US7792148B2 (en) | 2008-03-31 | 2010-09-07 | International Business Machines Corporation | Virtual fibre channel over Ethernet switch |
US8227615B2 (en) | 2008-03-31 | 2012-07-24 | Vertex Pharmaceutical Incorporated | Pyridyl derivatives as CFTR modulators |
US8743740B2 (en) | 2008-04-08 | 2014-06-03 | At&T Intellectual Property I, L.P. | Methods and apparatus to implement a partial mesh virtual private local area network service |
US7911982B1 (en) | 2008-05-01 | 2011-03-22 | Juniper Networks, Inc. | Configuring networks including spanning trees |
JP5360607B2 (ja) | 2008-05-16 | 2013-12-04 | 日本電気株式会社 | Pciエクスプレススイッチ、pciエクスプレスシステム、及びネットワーク制御方法 |
US8195774B2 (en) | 2008-05-23 | 2012-06-05 | Vmware, Inc. | Distributed virtual switch for virtualized computer systems |
US8160063B2 (en) | 2008-06-09 | 2012-04-17 | Microsoft Corporation | Data center interconnect and traffic engineering |
US8565248B2 (en) | 2008-06-26 | 2013-10-22 | Cisco Technology, Inc. | Pure control-plane approach for on-path connection admission control operations in multiprotocol label switching virtual private networks |
US7873711B2 (en) | 2008-06-27 | 2011-01-18 | International Business Machines Corporation | Method, system and program product for managing assignment of MAC addresses in a virtual machine environment |
US7941539B2 (en) | 2008-06-30 | 2011-05-10 | Oracle America, Inc. | Method and system for creating a virtual router in a blade chassis to maintain connectivity |
KR101508794B1 (ko) | 2008-07-09 | 2015-04-06 | 삼성전자주식회사 | Ndef 메시지에서 선택적으로 레코드들을 보안하기 위한 방법 |
US8102791B2 (en) | 2008-07-25 | 2012-01-24 | Newport Media, Inc. | Interleaver address generation in turbo decoders for mobile multimedia multicast system communication systems |
GB2461955A (en) | 2008-07-25 | 2010-01-27 | Gnodal Ltd | Ethernet bridge or router employing a distributed MAC address table |
US8102781B2 (en) | 2008-07-31 | 2012-01-24 | Cisco Technology, Inc. | Dynamic distribution of virtual machines in a communication network |
US8830845B2 (en) | 2008-08-04 | 2014-09-09 | Ciena Corporation | Packet switch modeling and using a packet switch model to test a packet switch |
CN101645880B (zh) | 2008-08-06 | 2013-09-11 | 华为技术有限公司 | 基于线路捆绑的数据帧转发方法和装置 |
US9426095B2 (en) | 2008-08-28 | 2016-08-23 | International Business Machines Corporation | Apparatus and method of switching packets between virtual ports |
US8259569B2 (en) | 2008-09-09 | 2012-09-04 | Cisco Technology, Inc. | Differentiated services for unicast and multicast frames in layer 2 topologies |
US8134922B2 (en) | 2008-09-12 | 2012-03-13 | Cisco Technology, Inc. | Reducing flooding in a bridged network |
US8392606B2 (en) | 2008-09-23 | 2013-03-05 | Synapse Wireless, Inc. | Wireless networks and methods using multiple valid network identifiers |
US8223633B2 (en) | 2008-10-03 | 2012-07-17 | Brocade Communications Systems, Inc. | Port trunking at a fabric boundary |
US7944812B2 (en) | 2008-10-20 | 2011-05-17 | International Business Machines Corporation | Redundant intermediary switch solution for detecting and managing fibre channel over ethernet FCoE switch failures |
US8571052B2 (en) | 2008-10-24 | 2013-10-29 | International Business Machines Corporation | Determining the configuration of an ethernet fabric |
US9100269B2 (en) | 2008-10-28 | 2015-08-04 | Rpx Clearinghouse Llc | Provisioned provider link state bridging (PLSB) with routed back-up |
US7962647B2 (en) | 2008-11-24 | 2011-06-14 | Vmware, Inc. | Application delivery control module for virtual network switch |
US8392496B2 (en) | 2008-12-19 | 2013-03-05 | Watchguard Technologies, Inc. | Cluster architecture for network security processing |
US7929554B2 (en) | 2008-12-23 | 2011-04-19 | Cisco Technology, Inc. | Optimized forwarding for provider backbone bridges with both I and B components (IB-PBB) |
US8509248B2 (en) | 2008-12-29 | 2013-08-13 | Juniper Networks, Inc. | Routing frames in a computer network using bridge identifiers |
US8054832B1 (en) | 2008-12-30 | 2011-11-08 | Juniper Networks, Inc. | Methods and apparatus for routing between virtual resources based on a routing location policy |
US8331362B2 (en) | 2008-12-30 | 2012-12-11 | Juniper Networks, Inc. | Methods and apparatus for distributed dynamic network provisioning |
US8255496B2 (en) | 2008-12-30 | 2012-08-28 | Juniper Networks, Inc. | Method and apparatus for determining a network topology during network provisioning |
US7820853B2 (en) | 2008-12-31 | 2010-10-26 | Celanese International Corporation | Integrated process for the production of vinyl acetate from acetic acid via ethyl acetate |
US8336079B2 (en) | 2008-12-31 | 2012-12-18 | Hytrust, Inc. | Intelligent security control system for virtualized ecosystems |
CN101771678B (zh) * | 2008-12-31 | 2014-04-16 | 华为技术有限公司 | 一种管理视图及视图触发的方法及装置 |
CN101459618B (zh) | 2009-01-06 | 2011-01-19 | 北京航空航天大学 | 虚拟机网络的数据包转发方法和装置 |
JP5168166B2 (ja) | 2009-01-21 | 2013-03-21 | 富士通株式会社 | 通信装置および通信制御方法 |
US9043621B2 (en) | 2009-01-21 | 2015-05-26 | Hitachi, Ltd. | Power-saving network management server, network system, and method of determining supply of power |
JP2010177722A (ja) | 2009-01-27 | 2010-08-12 | Nec Corp | スイッチ装置、カード、fdb情報の管理方法及びプログラム |
US20100192225A1 (en) * | 2009-01-28 | 2010-07-29 | Juniper Networks, Inc. | Efficient application identification with network devices |
US8098572B2 (en) | 2009-02-03 | 2012-01-17 | Google Inc. | Interface monitoring for link aggregation |
CN102754388B (zh) | 2009-02-13 | 2016-03-23 | Adc长途电讯有限公司 | 用于与物理层信息一起使用的网络管理系统 |
US8213336B2 (en) | 2009-02-23 | 2012-07-03 | Cisco Technology, Inc. | Distributed data center access switch |
US8218553B2 (en) | 2009-02-25 | 2012-07-10 | Juniper Networks, Inc. | Load balancing network traffic on a label switched path using resource reservation protocol with traffic engineering |
US8595479B2 (en) | 2009-02-25 | 2013-11-26 | Cisco Technology, Inc. | Aggregation of cryptography engines |
US8274980B2 (en) | 2009-02-26 | 2012-09-25 | International Business Machines Corporation | Ethernet link aggregation |
US7787480B1 (en) | 2009-03-04 | 2010-08-31 | Juniper Networks, Inc. | Routing frames in a trill network using service VLAN identifiers |
US8238340B2 (en) | 2009-03-06 | 2012-08-07 | Futurewei Technologies, Inc. | Transport multiplexer—mechanisms to force ethernet traffic from one domain to be switched in a different (external) domain |
US8155150B1 (en) | 2009-03-11 | 2012-04-10 | Juniper Networks, Inc. | Cooperative MAC learning/aging in highly distributed forwarding system |
US7912091B1 (en) | 2009-03-18 | 2011-03-22 | Extreme Networks, Inc. | Traffic forwarding in a traffic-engineered link aggregation group |
US8665886B2 (en) | 2009-03-26 | 2014-03-04 | Brocade Communications Systems, Inc. | Redundant host connection in a routed network |
JP5054056B2 (ja) | 2009-03-26 | 2012-10-24 | アラクサラネットワークス株式会社 | ネットワークシステム、コアスイッチ、エッジスイッチ、データ中継方法 |
US8918631B1 (en) | 2009-03-31 | 2014-12-23 | Juniper Networks, Inc. | Methods and apparatus for dynamic automated configuration within a control plane of a switch fabric |
KR101460848B1 (ko) | 2009-04-01 | 2014-11-20 | 니시라, 인크. | 가상 스위치를 구현 및 관리하는 방법 및 장치 |
US8213313B1 (en) | 2009-04-15 | 2012-07-03 | Tellabs Operations, Inc. | Methods and apparatus for shared layer 3 application card in multi-service router |
US8000336B2 (en) | 2009-04-21 | 2011-08-16 | Voltaire Ltd. | Spanning tree root selection in a hierarchical network |
US8116213B2 (en) | 2009-04-24 | 2012-02-14 | Verizon Patent And Licensing Inc. | Tracing routes and protocols |
US9727508B2 (en) | 2009-04-27 | 2017-08-08 | Intel Corporation | Address learning and aging for network bridging in a network processor |
US8027354B1 (en) | 2009-04-29 | 2011-09-27 | Cisco Technology, Inc. | Network consolidation for virtualized servers |
US8874709B2 (en) | 2009-05-01 | 2014-10-28 | Futurewei Technologies, Inc. | Automatic subnet creation in networks that support dynamic ethernet-local area network services for use by operation, administration, and maintenance |
US8429647B2 (en) | 2009-05-06 | 2013-04-23 | Vmware, Inc. | Virtual machine migration across network by publishing routes to the associated virtual networks via virtual router after the start of migration of the virtual machine |
US20100287262A1 (en) | 2009-05-08 | 2010-11-11 | Uri Elzur | Method and system for guaranteed end-to-end data flows in a local networking domain |
US9282057B2 (en) | 2009-05-11 | 2016-03-08 | Brocade Communication Systems, Inc. | Flexible stacking port |
US8351431B2 (en) | 2009-05-13 | 2013-01-08 | Avaya Inc. | Method and apparatus for providing fast reroute of a multicast packet within a network element to an available port associated with a multi-link trunk |
US8472443B2 (en) | 2009-05-15 | 2013-06-25 | Cisco Technology | Port grouping for association with virtual interfaces |
US8401026B2 (en) | 2009-05-18 | 2013-03-19 | Cisco Technology, Inc. | Achieving about an equal number of active links across chassis in a virtual port-channel environment |
US8165122B2 (en) | 2009-05-26 | 2012-04-24 | Alcatel Lucent | System and method for converting unicast client requests into multicast client requests |
US8170038B2 (en) | 2009-05-27 | 2012-05-01 | International Business Machines Corporation | Two-layer switch apparatus to avoid first layer inter-switch link data traffic in steering packets through bump-in-the-wire service applications |
US8174984B2 (en) | 2009-05-29 | 2012-05-08 | Oracle America, Inc. | Managing traffic on virtualized lanes between a network switch and a virtual machine |
US7944860B2 (en) | 2009-06-04 | 2011-05-17 | Cisco Technology, Inc. | Preventing loss of network traffic due to inconsistent configurations within the network |
US8199753B2 (en) | 2009-06-05 | 2012-06-12 | Juniper Networks, Inc. | Forwarding frames in a computer network using shortest path bridging |
US8289977B2 (en) | 2009-06-10 | 2012-10-16 | International Business Machines Corporation | Two-layer switch apparatus avoiding first layer inter-switch traffic in steering packets through the apparatus |
US8098656B2 (en) | 2009-06-26 | 2012-01-17 | Avaya, Inc. | Method and apparatus for implementing L2 VPNs on an IP network |
US8102760B2 (en) | 2009-06-30 | 2012-01-24 | Alcatel Lucent | Method for reconvergence after failure in a dual-homing network environment |
US8351352B1 (en) | 2009-07-15 | 2013-01-08 | Eastlake Iii Donald E | Methods and apparatus for RBridge hop-by-hop compression and frame aggregation |
EP2454887B1 (en) | 2009-07-16 | 2013-09-11 | Telefonaktiebolaget LM Ericsson (publ) | Technique for providing an asymmetric multipoint call between a plurality of network nodes |
US8204061B1 (en) | 2009-07-23 | 2012-06-19 | Cisco Technology, Inc. | Virtual port channel switches with distributed control planes |
US8125928B2 (en) | 2009-07-24 | 2012-02-28 | Juniper Networks, Inc. | Routing frames in a shortest path computer network for a multi-homed legacy bridge node |
US8341725B2 (en) | 2009-07-30 | 2012-12-25 | Calix, Inc. | Secure DHCP processing for layer two access networks |
US8503329B2 (en) | 2009-08-05 | 2013-08-06 | Cisco Technology, Inc. | Signaling of attachment circuit status and automatic discovery of inter-chassis communication peers |
US8504690B2 (en) | 2009-08-07 | 2013-08-06 | Broadcom Corporation | Method and system for managing network power policy and configuration of data center bridging |
US8175107B1 (en) | 2009-08-18 | 2012-05-08 | Hewlett-Packard Development Company, L.P. | Network routing based on MAC address subnetting |
IL200504A0 (en) | 2009-08-20 | 2011-08-01 | Eci Telecom Ltd | Technique for dual homing interconnection between communication networks |
US8369332B2 (en) | 2009-08-21 | 2013-02-05 | Alcatel Lucent | Server-side load balancing using parent-child link aggregation groups |
US8706905B1 (en) | 2009-08-24 | 2014-04-22 | Qlogic, Corporation | Method and system for routing information in a network |
CN101645797B (zh) * | 2009-08-25 | 2011-04-13 | 华为技术有限公司 | 自动保护倒换方法、设备和系统 |
US8339994B2 (en) | 2009-08-27 | 2012-12-25 | Brocade Communications Systems, Inc. | Defining an optimal topology for a group of logical switches |
US8756344B2 (en) | 2009-09-04 | 2014-06-17 | Equinix, Inc. | Network to network interface (NNI) for multiple private network service providers |
JP5334769B2 (ja) | 2009-09-10 | 2013-11-06 | 独立行政法人物質・材料研究機構 | 高強度ボルト |
US8369347B2 (en) | 2009-09-14 | 2013-02-05 | Futurewei Technologies, Inc. | Fiber channel over Ethernet and fiber channel switching based on Ethernet switch fabrics |
US8599850B2 (en) | 2009-09-21 | 2013-12-03 | Brocade Communications Systems, Inc. | Provisioning single or multistage networks using ethernet service instances (ESIs) |
US8914598B2 (en) | 2009-09-24 | 2014-12-16 | Vmware, Inc. | Distributed storage resource scheduler and load balancer |
US8599864B2 (en) | 2009-10-08 | 2013-12-03 | Brocade Communications Systems, Inc. | Transit switches in a network of logical switches |
US20110085560A1 (en) | 2009-10-12 | 2011-04-14 | Dell Products L.P. | System and Method for Implementing a Virtual Switch |
US8320386B2 (en) | 2009-10-13 | 2012-11-27 | Motorola Mobility Llc | Aggregating ports while allowing access to singleton ports |
US8693485B2 (en) | 2009-10-14 | 2014-04-08 | Dell Products, Lp | Virtualization aware network switch |
WO2011053973A1 (en) | 2009-11-02 | 2011-05-05 | Marvell World Trade Ltd. Et Al. | Switching apparatus and method based on virtual interfaces |
US20110113146A1 (en) | 2009-11-10 | 2011-05-12 | Li Gordon Yong | Dynamic quality of service (qos) setup over wired and wireless networks |
CN102088388B (zh) | 2009-12-02 | 2014-04-02 | 上海贝尔股份有限公司 | 自动分配/获取虚拟局域网配置信息的方法及设备 |
US7937438B1 (en) | 2009-12-07 | 2011-05-03 | Amazon Technologies, Inc. | Using virtual networking devices to manage external connections |
US20110134802A1 (en) | 2009-12-09 | 2011-06-09 | Cisco Technology, Inc. | Determining A Routing Tree For Networks With Different Routing Protocols |
WO2011074516A1 (ja) | 2009-12-15 | 2011-06-23 | 日本電気株式会社 | ネットワークシステムとその制御方法、及びコントローラ |
US8705513B2 (en) | 2009-12-15 | 2014-04-22 | At&T Intellectual Property I, L.P. | Methods and apparatus to communicatively couple virtual private networks to virtual machines within distributive computing networks |
US8270420B2 (en) | 2009-12-15 | 2012-09-18 | Hewlett-Packard Development Company, L.P. | iSCSI to FCoE gateway |
US8295291B1 (en) | 2009-12-21 | 2012-10-23 | Juniper Networks, Inc. | Computation of next hops within layer two networks |
US8161156B2 (en) | 2009-12-30 | 2012-04-17 | Verizon Patent And Licensing, Inc. | Feature delivery packets for peer-to-peer based feature network |
JP5673557B2 (ja) | 2010-01-04 | 2015-02-18 | 日本電気株式会社 | ネットワークシステム、コントローラ、ネットワーク制御方法 |
US8446817B2 (en) | 2010-01-19 | 2013-05-21 | Cisco Technology, Inc. | Distributed virtual fibre channel over Ethernet forwarder |
US8804732B1 (en) | 2010-01-29 | 2014-08-12 | Trapeze Networks, Inc. | Methods and apparatus for separate control and data planes in a wireless network |
JP5493926B2 (ja) * | 2010-02-01 | 2014-05-14 | 日本電気株式会社 | インタフェース制御方式、インタフェース制御方法、及びインタフェース制御用プログラム |
US8619595B2 (en) | 2010-02-05 | 2013-12-31 | Cisco Technology, Inc. | Fault isolation in trill networks |
CN102158386B (zh) | 2010-02-11 | 2015-06-03 | 威睿公司 | 系统管理程序级的分布式负载平衡 |
US8423901B2 (en) | 2010-03-15 | 2013-04-16 | International Business Machines Corporation | Displaying content outside IFRAME container |
US8873401B2 (en) | 2010-03-16 | 2014-10-28 | Futurewei Technologies, Inc. | Service prioritization in link state controlled layer two networks |
US8996720B2 (en) | 2010-03-16 | 2015-03-31 | Brocade Communications Systems, Inc. | Method and apparatus for mirroring frames to a remote diagnostic system |
US8369335B2 (en) | 2010-03-24 | 2013-02-05 | Brocade Communications Systems, Inc. | Method and system for extending routing domain to non-routing end stations |
US8249069B2 (en) | 2010-03-30 | 2012-08-21 | Cisco Technology, Inc. | Forwarding multi-destination packets in a network with virtual port channels |
JP5190084B2 (ja) | 2010-03-30 | 2013-04-24 | 株式会社日立製作所 | 仮想マシンのマイグレーション方法およびシステム |
WO2011121664A1 (en) | 2010-03-31 | 2011-10-06 | Hitachi, Ltd. | Communication network control system and control method |
US8599854B2 (en) | 2010-04-16 | 2013-12-03 | Cisco Technology, Inc. | Method of identifying destination in a virtual environment |
US8611352B2 (en) | 2010-04-20 | 2013-12-17 | Marvell World Trade Ltd. | System and method for adapting a packet processing pipeline |
US8345692B2 (en) | 2010-04-27 | 2013-01-01 | Cisco Technology, Inc. | Virtual switching overlay for cloud computing |
US8867552B2 (en) | 2010-05-03 | 2014-10-21 | Brocade Communications Systems, Inc. | Virtual cluster switching |
US8625616B2 (en) | 2010-05-11 | 2014-01-07 | Brocade Communications Systems, Inc. | Converged network extension |
US9461840B2 (en) | 2010-06-02 | 2016-10-04 | Brocade Communications Systems, Inc. | Port profile management for virtual cluster switching |
US9270486B2 (en) | 2010-06-07 | 2016-02-23 | Brocade Communications Systems, Inc. | Name services for virtual cluster switching |
US8989186B2 (en) | 2010-06-08 | 2015-03-24 | Brocade Communication Systems, Inc. | Virtual port grouping for virtual cluster switching |
CA2797278A1 (en) | 2010-05-03 | 2011-11-10 | Brocade Communications Systems, Inc. | Virtual cluster switching |
US9231890B2 (en) | 2010-06-08 | 2016-01-05 | Brocade Communications Systems, Inc. | Traffic management for virtual cluster switching |
US8520595B2 (en) | 2010-05-04 | 2013-08-27 | Cisco Technology, Inc. | Routing to the access layer to support mobility of internet protocol devices |
US8335236B2 (en) | 2010-05-06 | 2012-12-18 | Cisco Technology, Inc. | FCoE isolated port channels and FCoE session resynchronization in vPC/MCEC environments using DCBXP |
US8724456B1 (en) | 2010-05-19 | 2014-05-13 | Juniper Networks, Inc. | Network path selection for multi-homed edges to ensure end-to-end resiliency |
US9491085B2 (en) | 2010-05-24 | 2016-11-08 | At&T Intellectual Property I, L.P. | Methods and apparatus to route control packets based on address partitioning |
CA2781060C (en) | 2010-05-28 | 2016-03-08 | Huawei Technologies Co., Ltd. | Virtual layer 2 and mechanism to make it scalable |
US8667171B2 (en) | 2010-05-28 | 2014-03-04 | Microsoft Corporation | Virtual data center allocation with bandwidth guarantees |
US9628293B2 (en) | 2010-06-08 | 2017-04-18 | Brocade Communications Systems, Inc. | Network layer multicasting in trill networks |
US8446914B2 (en) | 2010-06-08 | 2013-05-21 | Brocade Communications Systems, Inc. | Method and system for link aggregation across multiple switches |
US9806906B2 (en) | 2010-06-08 | 2017-10-31 | Brocade Communications Systems, Inc. | Flooding packets on a per-virtual-network basis |
US10033650B2 (en) | 2010-06-08 | 2018-07-24 | Brocade Communication Systems Llc | Preserving quality of service across trill networks |
US20110299533A1 (en) | 2010-06-08 | 2011-12-08 | Brocade Communications Systems, Inc. | Internal virtual network identifier and internal policy identifier |
US9608833B2 (en) | 2010-06-08 | 2017-03-28 | Brocade Communications Systems, Inc. | Supporting multiple multicast trees in trill networks |
US9246703B2 (en) | 2010-06-08 | 2016-01-26 | Brocade Communications Systems, Inc. | Remote port mirroring |
US8619788B1 (en) | 2010-06-14 | 2013-12-31 | Juniper Networks, Inc. | Performing scalable L2 wholesale services in computer networks |
US8897134B2 (en) | 2010-06-25 | 2014-11-25 | Telefonaktiebolaget L M Ericsson (Publ) | Notifying a controller of a change to a packet forwarding configuration of a network element over a communication channel |
CN104396192B (zh) | 2010-06-29 | 2018-03-06 | 华为技术有限公司 | 不对称网络地址封装 |
US8842679B2 (en) | 2010-07-06 | 2014-09-23 | Nicira, Inc. | Control system that elects a master controller instance for switching elements |
US8588081B2 (en) | 2010-07-14 | 2013-11-19 | Cisco Technology, Inc. | Monitoring a flow set to detect faults |
US8873551B2 (en) | 2010-07-30 | 2014-10-28 | Cisco Technology, Inc. | Multi-destination forwarding in network clouds which include emulated switches |
US8451717B2 (en) | 2010-07-30 | 2013-05-28 | Alcatel Lucent | Method and apparatus for rapid switchover from primary to standby multicast trees |
US8767735B2 (en) | 2010-08-04 | 2014-07-01 | Alcatel Lucent | System and method for multi-chassis link aggregation |
US8472447B2 (en) | 2010-08-04 | 2013-06-25 | Alcatel Lucent | IP multicast snooping and routing with multi-chassis link aggregation |
US9049098B2 (en) | 2010-08-05 | 2015-06-02 | Cisco Technology, Inc. | Discovery of services provided by application nodes in a network |
US8553710B1 (en) | 2010-08-18 | 2013-10-08 | Juniper Networks, Inc. | Fibre channel credit-based link flow control overlay onto fibre channel over ethernet |
US8891438B2 (en) | 2010-09-08 | 2014-11-18 | Intel Corporation | Packet-data network and methods for RAN-agnostic multimedia content distribution |
CN102404181B (zh) | 2010-09-08 | 2014-10-08 | 华为技术有限公司 | 应用链路状态路由的二层协议中的地址对应关系发送方法 |
US8718071B2 (en) | 2010-09-10 | 2014-05-06 | Futurewei Technologies, Inc. | Method to pass virtual local area network information in virtual station interface discovery and configuration protocol |
US8665267B2 (en) | 2010-09-24 | 2014-03-04 | Adobe Systems Incorporated | System and method for generating 3D surface patches from unconstrained 3D curves |
US8705502B2 (en) | 2010-10-20 | 2014-04-22 | Cisco Technology, Inc. | Using encapsulation to enable 802.1 bridging across 802.11 links |
US20120099602A1 (en) | 2010-10-25 | 2012-04-26 | Brocade Communications Systems, Inc. | End-to-end virtualization |
US8634297B2 (en) | 2010-11-01 | 2014-01-21 | Cisco Technology, Inc. | Probing specific customer flow in layer-2 multipath networks |
CN102148749B (zh) | 2010-11-05 | 2013-11-06 | 华为技术有限公司 | 一种交换机端口扩展的方法及装置 |
US8583978B2 (en) | 2010-11-09 | 2013-11-12 | Cisco Technology, Inc. | Multicast message retransmission |
US8756602B2 (en) | 2010-11-14 | 2014-06-17 | Brocade Communications Systems, Inc. | Virtual machine and application migration over local and wide area networks without timeout |
US8762668B2 (en) | 2010-11-18 | 2014-06-24 | Hitachi, Ltd. | Multipath switching over multiple storage systems |
US8614950B2 (en) | 2010-11-30 | 2013-12-24 | Marvell Israel (M.I.S.L) Ltd. | Load balancing hash computation for network switches |
US8705526B1 (en) | 2010-12-03 | 2014-04-22 | Juniper Networks, Inc. | Extending VPLS support for CE lag multi-homing |
US8521884B2 (en) | 2010-12-15 | 2013-08-27 | Industrial Technology Research Institute | Network system and method of address resolution |
US8806031B1 (en) | 2010-12-15 | 2014-08-12 | Juniper Networks, Inc. | Systems and methods for automatically detecting network elements |
US20120163164A1 (en) | 2010-12-27 | 2012-06-28 | Brocade Communications Systems, Inc. | Method and system for remote load balancing in high-availability networks |
US9379975B2 (en) | 2011-01-05 | 2016-06-28 | Nec Corporation | Communication control system, control server, forwarding node, communication control method, and communication control program |
US8559335B2 (en) | 2011-01-07 | 2013-10-15 | Jeda Networks, Inc. | Methods for creating virtual links between fibre channel over ethernet nodes for converged network adapters |
CN102098237B (zh) | 2011-01-27 | 2012-11-28 | 大唐移动通信设备有限公司 | 一种网关设备及使用方法、信息传输方法及设备 |
US8776207B2 (en) | 2011-02-16 | 2014-07-08 | Fortinet, Inc. | Load balancing in a network with session information |
US9246810B2 (en) | 2011-03-11 | 2016-01-26 | Broadcom Corporation | Hash-based load balancing with per-hop seeding |
US8755383B2 (en) | 2011-03-21 | 2014-06-17 | Avaya, Inc. | Usage of masked ethernet addresses between transparent interconnect of lots of links (TRILL) routing bridges |
US8675433B2 (en) | 2011-03-22 | 2014-03-18 | Taiwan Semiconductor Manufacturing Company, Ltd. | Sense amplifier |
US8964537B2 (en) | 2011-03-30 | 2015-02-24 | Fujitsu Limited | Method and system for egress policy indications |
US8761005B2 (en) | 2011-04-26 | 2014-06-24 | Dell Products L.P. | Multi-chassis link aggregation on network devices |
US9270572B2 (en) | 2011-05-02 | 2016-02-23 | Brocade Communications Systems Inc. | Layer-3 support in TRILL networks |
US9054999B2 (en) | 2012-05-09 | 2015-06-09 | International Business Machines Corporation | Static TRILL routing |
US20120287785A1 (en) | 2011-05-14 | 2012-11-15 | International Business Machines Corporation | Data traffic handling in a distributed fabric protocol (dfp) switching network architecture |
US8605626B2 (en) | 2011-05-18 | 2013-12-10 | Cisco Technology, Inc. | Method and apparatus for preserving extensions in multi-vendor trill networks |
US20120294192A1 (en) | 2011-05-19 | 2012-11-22 | Hitachi, Ltd. | Method and apparatus of connectivity discovery between network switch and server based on vlan identifiers |
US8792501B1 (en) | 2011-05-25 | 2014-07-29 | Juniper Networks, Inc. | Active-active multi-homing with multi-chassis pseudowire link aggregation |
EP2715982B1 (en) | 2011-06-02 | 2017-08-02 | Hewlett-Packard Enterprise Development LP | Network virtualization |
EP2723020B1 (en) | 2011-06-17 | 2019-11-06 | Huawei Technologies Co., Ltd. | Method and ethernet switching device for detecting loop position in ethernet |
US9497073B2 (en) | 2011-06-17 | 2016-11-15 | International Business Machines Corporation | Distributed link aggregation group (LAG) for a layer 2 fabric |
US8812727B1 (en) * | 2011-06-23 | 2014-08-19 | Amazon Technologies, Inc. | System and method for distributed load balancing with distributed direct server return |
US9736065B2 (en) | 2011-06-24 | 2017-08-15 | Cisco Technology, Inc. | Level of hierarchy in MST for traffic localization and load balancing |
US9288288B2 (en) | 2011-06-27 | 2016-03-15 | Marvell Israel (M.I.S.L) Ltd. | FCoE over trill |
US8948056B2 (en) | 2011-06-28 | 2015-02-03 | Brocade Communication Systems, Inc. | Spanning-tree based loop detection for an ethernet fabric switch |
US8559302B2 (en) | 2011-06-29 | 2013-10-15 | Fujitsu Limited | Systems and methods for distributed service protection across plug-in units |
US8537810B2 (en) | 2011-06-29 | 2013-09-17 | Telefonaktiebolaget L M Ericsson (Publ) | E-tree using two pseudowires between edge routers with enhanced learning methods and systems |
US20130003738A1 (en) | 2011-06-29 | 2013-01-03 | Brocade Communications Systems, Inc. | Trill based router redundancy |
US20130003549A1 (en) | 2011-06-30 | 2013-01-03 | Broadcom Corporation | Resilient Hashing for Load Balancing of Traffic Flows |
US8467375B2 (en) | 2011-07-07 | 2013-06-18 | Ciena Corporation | Hybrid packet-optical private network systems and methods |
US8705551B2 (en) | 2011-07-27 | 2014-04-22 | Fujitsu Limited | Method and system for management of flood traffic over multiple 0:N link aggregation groups |
US20130034015A1 (en) | 2011-08-05 | 2013-02-07 | International Business Machines Corporation | Automated network configuration in a dynamic virtual environment |
US20130034094A1 (en) | 2011-08-05 | 2013-02-07 | International Business Machines Corporation | Virtual Switch Data Control In A Distributed Overlay Network |
US8798055B1 (en) | 2011-08-11 | 2014-08-05 | Juniper Networks, Inc. | Forming a multi-device layer 2 switched fabric using internet protocol (IP)-routed / switched networks |
US8867403B2 (en) | 2011-08-18 | 2014-10-21 | International Business Machines Corporation | Virtual network overlays |
US8762501B2 (en) * | 2011-08-29 | 2014-06-24 | Telefonaktiebolaget L M Ericsson (Publ) | Implementing a 3G packet core in a cloud computer with openflow data and control planes |
US8966499B2 (en) | 2011-09-09 | 2015-02-24 | Microsoft Technology Licensing, Llc | Virtual switch extensibility |
US9185056B2 (en) | 2011-09-20 | 2015-11-10 | Big Switch Networks, Inc. | System and methods for controlling network traffic through virtual switches |
US8804736B1 (en) | 2011-09-23 | 2014-08-12 | Juniper Networks, Inc. | Network tunneling using a label stack delimiter |
JP5836042B2 (ja) | 2011-10-04 | 2015-12-24 | 株式会社日立製作所 | 管理サーバプログラム |
CN102378176B (zh) | 2011-10-18 | 2015-07-01 | 京信通信系统(中国)有限公司 | 一种gsm网络接入系统 |
US8885643B2 (en) | 2011-11-04 | 2014-11-11 | Futurewei Technologies, Inc. | Method for multicast flow routing selection |
US9450870B2 (en) | 2011-11-10 | 2016-09-20 | Brocade Communications Systems, Inc. | System and method for flow management in software-defined networks |
US8819267B2 (en) | 2011-11-16 | 2014-08-26 | Force10 Networks, Inc. | Network virtualization without gateway function |
CN103139037B (zh) | 2011-11-30 | 2016-05-18 | 国际商业机器公司 | 用于实现灵活的虚拟局域网的方法和装置 |
US8738756B2 (en) | 2011-12-01 | 2014-05-27 | International Business Machines Corporation | Enabling co-existence of hosts or virtual machines with identical addresses |
US8942139B2 (en) | 2011-12-07 | 2015-01-27 | International Business Machines Corporation | Support for converged traffic over ethernet link aggregation (LAG) |
EP2777220B1 (en) | 2011-12-07 | 2016-08-17 | Huawei Technologies Co., Ltd. | Method to carry fcoe frames over a trill based network |
US8995272B2 (en) | 2012-01-26 | 2015-03-31 | Brocade Communication Systems, Inc. | Link aggregation in software-defined networks |
US8868735B2 (en) * | 2012-02-02 | 2014-10-21 | Cisco Technology, Inc. | Wide area network optimization |
JP5831264B2 (ja) | 2012-02-02 | 2015-12-09 | 富士通株式会社 | 情報処理システム、情報処理装置およびプログラム |
CN104115464B (zh) * | 2012-02-22 | 2017-09-29 | 诺基亚通信公司 | 控制访问 |
US9059912B2 (en) | 2012-02-27 | 2015-06-16 | Verizon Patent And Licensing Inc. | Traffic policing for MPLS-based network |
US9154416B2 (en) | 2012-03-22 | 2015-10-06 | Brocade Communications Systems, Inc. | Overlay tunnel in a fabric switch |
EP2833576A1 (en) | 2012-03-28 | 2015-02-04 | Fujitsu Optical Components Limited | Lan multiplexer apparatus |
CN102594711B (zh) | 2012-03-28 | 2014-11-26 | 杭州华三通信技术有限公司 | 一种在边缘设备上的报文转发方法和边缘设备 |
US9184995B2 (en) | 2012-04-11 | 2015-11-10 | Gigamon Inc. | Traffic visibility in an open networking environment |
US8989188B2 (en) | 2012-05-10 | 2015-03-24 | Cisco Technology, Inc. | Preventing leaks among private virtual local area network ports due to configuration changes in a headless mode |
IN2014MN02415A (zh) | 2012-05-22 | 2015-08-21 | Hughes Network Systems Llc | |
US9106578B2 (en) | 2012-05-31 | 2015-08-11 | Hewlett-Packard Development Company, L.P. | Core network architecture |
CN103490967B (zh) | 2012-06-13 | 2018-04-27 | 中兴通讯股份有限公司 | 别名、多链路透明互连trill报文处理方法及装置 |
US9081603B2 (en) | 2012-07-09 | 2015-07-14 | Cisco Technology, Inc. | Packet forwarding optimization with virtual machine mobility by comparing device identifiers to determine VM movement |
US9143439B2 (en) | 2012-07-23 | 2015-09-22 | Cisco Technology, Inc. | System and method for cluster link aggregation control in a network environment |
CN102801599B (zh) | 2012-07-26 | 2015-09-30 | 华为技术有限公司 | 一种通信方法和系统 |
US9001672B2 (en) | 2012-07-27 | 2015-04-07 | Alcatel Lucent | System, method and apparatus conforming path cost criteria across multiple ABRs |
US8855117B2 (en) | 2012-08-08 | 2014-10-07 | Cisco Technology, Inc. | Scalable media access control protocol synchronization techniques for fabric extender based emulated switch deployments |
US9602430B2 (en) | 2012-08-21 | 2017-03-21 | Brocade Communications Systems, Inc. | Global VLANs for fabric switches |
US20140059225A1 (en) | 2012-08-21 | 2014-02-27 | Iosif Gasparakis | Network controller for remote system management |
US8937865B1 (en) | 2012-08-21 | 2015-01-20 | Juniper Networks, Inc. | Scheduling traffic over aggregated bundles of links |
CN103685006B (zh) | 2012-08-30 | 2016-12-21 | 杭州华三通信技术有限公司 | 一种在边缘设备上的报文转发方法和边缘设备 |
US9083645B2 (en) | 2012-09-07 | 2015-07-14 | Dell Products L.P. | Systems and methods providing reverse path forwarding compliance for a multihoming virtual routing bridge |
US20140086253A1 (en) | 2012-09-26 | 2014-03-27 | Futurewei Technologies, Inc. | Overlay Virtual Gateway for Overlay Networks |
US9036476B2 (en) | 2012-09-28 | 2015-05-19 | Juniper Networks, Inc. | Maintaining load balancing after service application with a network device |
US8971173B1 (en) | 2012-09-28 | 2015-03-03 | Juniper Networks, Inc. | Methods and apparatus for scalable resilient networks |
US8948181B2 (en) | 2012-10-23 | 2015-02-03 | Cisco Technology, Inc. | System and method for optimizing next-hop table space in a dual-homed network environment |
US20140140243A1 (en) | 2012-11-16 | 2014-05-22 | Rockstar Consortium Us Lp | Method and apparatus for layer 2 fast re-configuration in a routing bridge network |
US9438447B2 (en) | 2012-12-18 | 2016-09-06 | International Business Machines Corporation | Flow distribution algorithm for aggregated links in an ethernet switch |
US9300582B2 (en) | 2012-12-19 | 2016-03-29 | Cisco Technology, Inc. | Method and apparatus for forwarding information base scaling |
US9350558B2 (en) | 2013-01-09 | 2016-05-24 | Dell Products L.P. | Systems and methods for providing multicast routing in an overlay network |
US8982692B2 (en) | 2013-02-28 | 2015-03-17 | Dell Products L.P. | System and method for rapid link failure handling |
US9251115B2 (en) | 2013-03-07 | 2016-02-02 | Citrix Systems, Inc. | Dynamic configuration in cloud computing environments |
US9143444B2 (en) | 2013-03-12 | 2015-09-22 | International Business Machines Corporation | Virtual link aggregation extension (VLAG+) enabled in a TRILL-based fabric network |
US9401818B2 (en) | 2013-03-15 | 2016-07-26 | Brocade Communications Systems, Inc. | Scalable gateways for a fabric switch |
US10404621B2 (en) | 2013-03-15 | 2019-09-03 | Oracle International Corporation | Scalable InfiniBand packet-routing technique |
US9059909B2 (en) | 2013-06-04 | 2015-06-16 | Dell Products L.P. | System and method for configuration of link aggregation groups |
US9699001B2 (en) | 2013-06-10 | 2017-07-04 | Brocade Communications Systems, Inc. | Scalable and segregated network virtualization |
US9565028B2 (en) | 2013-06-10 | 2017-02-07 | Brocade Communications Systems, Inc. | Ingress switch multicast distribution in a fabric switch |
US9374323B2 (en) | 2013-07-08 | 2016-06-21 | Futurewei Technologies, Inc. | Communication between endpoints in different VXLAN networks |
US9130775B2 (en) | 2013-07-10 | 2015-09-08 | Cisco Technology, Inc. | Support for virtual extensible local area network segments across multiple data center sites |
US9419892B2 (en) | 2013-09-30 | 2016-08-16 | Juniper Networks, Inc. | Methods and apparatus for implementing connectivity between edge devices via a switch fabric |
US9426546B2 (en) | 2013-10-21 | 2016-08-23 | Global Foundries Inc. | Maintaining a fabric name across a distributed switch |
US9912612B2 (en) | 2013-10-28 | 2018-03-06 | Brocade Communications Systems LLC | Extended ethernet fabric switches |
US9264347B2 (en) | 2013-12-27 | 2016-02-16 | Dell Products L.P. | N-node virtual link trunking (VLT) systems control plane |
US10243863B2 (en) | 2014-02-04 | 2019-03-26 | Nokia Solutions And Networks Oy | Service scaling in communications |
US9858104B2 (en) | 2014-09-24 | 2018-01-02 | Pluribus Networks, Inc. | Connecting fabrics via switch-to-switch tunneling transparent to network servers |
US9524173B2 (en) | 2014-10-09 | 2016-12-20 | Brocade Communications Systems, Inc. | Fast reboot for a switch |
US10417025B2 (en) | 2014-11-18 | 2019-09-17 | Cisco Technology, Inc. | System and method to chain distributed applications in a network environment |
US9979704B2 (en) | 2014-12-17 | 2018-05-22 | Cisco Technology, Inc. | End-to-end security for virtual private service chains |
US9626255B2 (en) | 2014-12-31 | 2017-04-18 | Brocade Communications Systems, Inc. | Online restoration of a switch snapshot |
US9628407B2 (en) | 2014-12-31 | 2017-04-18 | Brocade Communications Systems, Inc. | Multiple software versions in a switch group |
US10067780B2 (en) | 2015-10-06 | 2018-09-04 | Cisco Technology, Inc. | Performance-based public cloud selection for a hybrid cloud environment |
-
2013
- 2013-05-08 US US13/890,150 patent/US9374301B2/en active Active
- 2013-05-15 EP EP13727447.8A patent/EP2850780B1/en active Active
- 2013-05-15 WO PCT/US2013/041191 patent/WO2013173482A1/en active Application Filing
- 2013-05-15 CN CN201380022889.7A patent/CN104272656B/zh active Active
-
2016
- 2016-02-18 US US15/047,539 patent/US9998365B2/en active Active
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN102349268A (zh) * | 2009-03-09 | 2012-02-08 | 日本电气株式会社 | OpenFlow通信系统和OpenFlow通信方法 |
WO2011132568A1 (ja) * | 2010-04-19 | 2011-10-27 | 日本電気株式会社 | スイッチ、及びフローテーブル制御方法 |
US20110273988A1 (en) * | 2010-05-10 | 2011-11-10 | Jean Tourrilhes | Distributing decision making in a centralized flow routing system |
CN102301663A (zh) * | 2011-07-06 | 2011-12-28 | 华为技术有限公司 | 一种报文处理方法及相关设备 |
Cited By (8)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN105991457A (zh) * | 2015-02-10 | 2016-10-05 | 鸿富锦精密工业(深圳)有限公司 | 交换机、控制设备及其管理方法 |
CN105991457B (zh) * | 2015-02-10 | 2019-04-30 | 南宁富桂精密工业有限公司 | 交换机、控制设备及其管理方法 |
CN108293039A (zh) * | 2015-11-17 | 2018-07-17 | 慧与发展有限责任合伙企业 | 处理网络威胁 |
US10749895B2 (en) | 2015-11-17 | 2020-08-18 | Hewlett Packard Enterprise Development Lp | Handling network threats |
CN108293039B (zh) * | 2015-11-17 | 2021-08-10 | 慧与发展有限责任合伙企业 | 处理网络威胁的计算设备、方法和存储介质 |
CN111788793A (zh) * | 2018-03-05 | 2020-10-16 | 施瓦哲工程实验有限公司 | 在软件定义的网络中的触发报警动作和报警触发的网络流 |
CN111835551A (zh) * | 2019-04-16 | 2020-10-27 | 罗伯特·博世有限公司 | 运行通信基础设施中的网络部件和监控实体的方法和设备 |
CN111835551B (zh) * | 2019-04-16 | 2024-04-30 | 罗伯特·博世有限公司 | 运行通信基础设施中的网络部件和监控实体的方法和设备 |
Also Published As
Publication number | Publication date |
---|---|
WO2013173482A1 (en) | 2013-11-21 |
US9374301B2 (en) | 2016-06-21 |
US9998365B2 (en) | 2018-06-12 |
US20160173393A1 (en) | 2016-06-16 |
CN104272656B (zh) | 2019-06-14 |
EP2850780B1 (en) | 2019-07-10 |
EP2850780A1 (en) | 2015-03-25 |
US20130311675A1 (en) | 2013-11-21 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN104272656A (zh) | 软件定义网络中的网络反馈 | |
US10680951B2 (en) | System and method for processing and forwarding transmitted information | |
JP5864758B2 (ja) | バーチャルスイッチを介してネットワークトラフィックをコントロールするシステム及び方法 | |
KR101703088B1 (ko) | Sdn 기반의 통합 라우팅 방법 및 그 시스템 | |
CN104303467B (zh) | 一种交换机及其操作方法 | |
KR101527786B1 (ko) | 하이브리드 sdn 네트워크 관리 방법 | |
US9590922B2 (en) | Programmable and high performance switch for data center networks | |
EP3720075B1 (en) | Data transmission method and virtual switch | |
CN102461089A (zh) | 用于使用标签进行策略执行的方法和设备 | |
JP5402688B2 (ja) | パケット転送システム、パケット転送システム内におけるパケット集中回避方法 | |
WO2023114184A1 (en) | Encrypted data packet forwarding | |
JP2015231131A (ja) | ネットワーク中継装置、同装置を用いたDDoS防御方法および負荷分散方法 | |
KR20180058594A (ko) | Sdn/tap 어플리케이션 | |
US9912575B2 (en) | Routing network traffic packets through a shared inline tool | |
Ahmad et al. | Protection of centralized SDN control plane from high-rate Packet-In messages | |
KR101707073B1 (ko) | Sdn 기반의 에러 탐색 네트워크 시스템 | |
US9531716B1 (en) | Service enabled network | |
US20190222468A1 (en) | Remote in-band management of a network interface controller | |
CN116938666A (zh) | 一种数据处理方法和相关设备 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
TA01 | Transfer of patent application right | ||
TA01 | Transfer of patent application right |
Effective date of registration: 20181105 Address after: Singapore Singapore Applicant after: Annwa high tech Limited by Share Ltd Address before: American California Applicant before: Brocade Communications Systems, Inc. |
|
GR01 | Patent grant | ||
GR01 | Patent grant |