Network control apparatus and method with port security controls
    1.
    发明授权
    Network control apparatus and method with port security controls 有权
    具有端口安全控制的网络控制装置和方法

    公开(公告)号:US08958292B2

    公开(公告)日:2015-02-17

    申请号:US13177546

    申请日:2011-07-06

    摘要: Port security in some embodiments is a technique to apply to a particular port of a logical switching element such that the network data entering and existing the logical switching element through the particular logical port have certain addresses that the switching element has restricted the logical port to use. For instance, a logical switching element may restrict a particular logical port to one or more certain network addresses To enable a logical port of a logical switch for port security, the control application of some embodiments receives user inputs that designate a particular logical port and a logical switch to which the particular logical port belongs. The control application in some embodiments formats the user inputs into logical control plane data specifying the designation. The control application in some embodiments then converts the logical control plane data into logical forwarding data that specify port security functions.

    摘要翻译: 一些实施例中的端口安全性是应用于逻辑交换元件的特定端口的技术,使得通过特定逻辑端口进入和存在逻辑交换元件的网络数据具有某些地址,交换元件已经限制了要使用的逻辑端口 。 例如,逻辑交换单元可以将特定的逻辑端口限制到一个或多个特定的网络地址。为了实现用于端口安全的逻辑交换机的逻辑端口,一些实施例的控制应用接收指定特定逻辑端口的用户输入和 特定逻辑端口所属的逻辑交换机。 在一些实施例中,控制应用将用户输入格式化成指定指定的逻辑控制平面数据。 一些实施例中的控制应用随后将逻辑控制平面数据转换为指定端口安全功能的逻辑转发数据。

    NETWORK CONTROL APPARATUS AND METHOD WITH PORT SECURITY CONTROLS
    2.
    发明申请
    NETWORK CONTROL APPARATUS AND METHOD WITH PORT SECURITY CONTROLS 有权
    网络控制装置和方法与端口安全控制

    公开(公告)号:US20130058341A1

    公开(公告)日:2013-03-07

    申请号:US13177546

    申请日:2011-07-06

    IPC分类号: H04L12/56

    摘要: Port security in some embodiments is a technique to apply to a particular port of a logical switching element such that the network data entering and existing the logical switching element through the particular logical port have certain addresses that the switching element has restricted the logical port to use. For instance, a logical switching element may restrict a particular logical port to one or more certain network addresses. To enable a logical port of a logical switch for port security, the control application of some embodiments receives user inputs that designate a particular logical port and a logical switch to which the particular logical port belongs. The control application in some embodiments formats the user inputs into logical control plane data specifying the designation. The control application in some embodiments then converts the logical control plane data into logical forwarding data that specify port security functions.

    摘要翻译: 一些实施例中的端口安全性是应用于逻辑交换元件的特定端口的技术,使得通过特定逻辑端口进入和存在逻辑交换元件的网络数据具有某些地址,交换元件已经限制了要使用的逻辑端口 。 例如,逻辑交换单元可以将特定逻辑端口限制为一个或多个特定网络地址。 为了启用用于端口安全性的逻辑交换机的逻辑端口,一些实施例的控制应用接收指定特定逻辑端口和特定逻辑端口所属的逻辑交换机的用户输入。 在一些实施例中,控制应用将用户输入格式化成指定指定的逻辑控制平面数据。 一些实施例中的控制应用随后将逻辑控制平面数据转换为指定端口安全功能的逻辑转发数据。

    DEPLOYMENT OF HIERARCHICAL MANAGED SWITCHING ELEMENTS
    4.
    发明申请
    DEPLOYMENT OF HIERARCHICAL MANAGED SWITCHING ELEMENTS 有权
    分配管理的开关元件的部署

    公开(公告)号:US20130058331A1

    公开(公告)日:2013-03-07

    申请号:US13288023

    申请日:2011-11-02

    IPC分类号: H04L12/56

    摘要: Some embodiments provide a method that identifies several higher level switching elements for facilitating lower level switching elements to forward packets among network hosts. The method establishes a set of tunnels among the lower level switching elements and the higher level switching elements. At least one tunnel is established between a lower level switching element and a higher level switching element. For each higher level switching element in the several higher level switching elements, the method identifies a first set of forwarding data that specifies forwarding of packets between the higher level switching element and the several lower level switching elements. For each lower level switching element in the several lower level switching elements, the method identifies a second set of forwarding data that specifies forwarding of packets between the lower level switching element, the several of network hosts, and the several higher level switching elements.

    摘要翻译: 一些实施例提供了一种识别多个更高级别的交换元件以促进下层交换元件在网络主机之间转发分组的方法。 该方法在较低级别的开关元件和较高级别的开关元件之间建立一组隧道。 在较低级别的开关元件和较高级别的开关元件之间建立至少一个通道。 对于多个较高级别的交换单元中的每个较高级别的交换单元,该方法识别第一组转发数据,该第一组转发数据指定在较高级别的开关元件和多个较低级别的开关元件之间转发分组。 对于多个下层交换单元中的每个下级交换单元,该方法识别第二组转发数据,该第二组转发数据指定在下层交换单元,若干网络主机与多个较高级别的交换单元之间转发分组。

    NETWORK CONTROL APPARATUS AND METHOD FOR CREATING AND MODIFYING LOGICAL SWITCHING ELEMENTS
    5.
    发明申请
    NETWORK CONTROL APPARATUS AND METHOD FOR CREATING AND MODIFYING LOGICAL SWITCHING ELEMENTS 有权
    网络控制装置和创建和修改逻辑切换元件的方法

    公开(公告)号:US20120147898A1

    公开(公告)日:2012-06-14

    申请号:US13269543

    申请日:2011-10-07

    IPC分类号: H04L12/56

    摘要: A network controller for managing several managed switching elements that forward data in a network that includes the managed switching elements. The network controller is further for creating a logical switching element to be implemented in a set of managed switching elements. The network controller includes a set of modules for receiving input data specifying a logical switching element and for creating, based on the received input data, a set of logical switch constructs for the logical switching element by performing a set of database join operations. At least one of the logical switch constructs is for facilitating non-forwarding behavior of the logical switching element.

    摘要翻译: 一种网络控制器,用于管理在网络中转发包括所述被管理的交换元件的数据的多个被管理的交换单元。 网络控制器还用于创建要在一组管理的交换元件中实现的逻辑交换元件。 网络控制器包括一组模块,用于接收指定逻辑交换元件的输入数据,并且用于通过执行一组数据库连接操作来创建基于所接收的输入数据的逻辑交换元件的一组逻辑交换结构。 逻辑交换结构中的至少一个用于促进逻辑交换元件的非转发行为。

    Network control apparatus and method for creating and modifying logical switching elements
    6.
    发明授权
    Network control apparatus and method for creating and modifying logical switching elements 有权
    用于创建和修改逻辑交换元件的网络控制装置和方法

    公开(公告)号:US09525647B2

    公开(公告)日:2016-12-20

    申请号:US13269543

    申请日:2011-10-07

    摘要: A network controller for managing several managed switching elements that forward data in a network that includes the managed switching elements. The network controller is further for creating a logical switching element to be implemented in a set of managed switching elements. The network controller includes a set of modules for receiving input data specifying a logical switching element and for creating, based on the received input data, a set of logical switch constructs for the logical switching element by performing a set of database join operations. At least one of the logical switch constructs is for facilitating non-forwarding behavior of the logical switching element.

    摘要翻译: 一种网络控制器,用于管理在网络中转发包括所述被管理的交换元件的数据的多个被管理的交换单元。 网络控制器还用于创建要在一组管理的交换元件中实现的逻辑交换元件。 网络控制器包括一组模块,用于接收指定逻辑交换元件的输入数据,并且用于通过执行一组数据库连接操作来创建基于所接收的输入数据的逻辑交换元件的一组逻辑交换结构。 逻辑交换结构中的至少一个用于促进逻辑交换元件的非转发行为。

    Network control apparatus and method for populating logical datapath sets

    公开(公告)号:US10103939B2

    公开(公告)日:2018-10-16

    申请号:US13269409

    申请日:2011-10-07

    摘要: For a network control system that receives, from a user, logical datapath sets that logically express desired forwarding behaviors that are to be implemented by a set of managed switching elements, a controller for managing several managed switching elements that forward data in a network that includes the managed switching elements is described. The controller includes a set of modules for detecting a change in one or more managed switching elements and for updating logical datapath set based on the detected change. The logical datapath set is for subsequent translation into a set of physical forwarding behaviors of the managed switching elements.