Distributed network control system with a distributed hash table
    21.
    发明授权
    Distributed network control system with a distributed hash table 有权
    具有分散式哈希表的分布式网络控制系统

    公开(公告)号:US08775594B2

    公开(公告)日:2014-07-08

    申请号:US13218433

    申请日:2011-08-25

    IPC分类号: G06F15/173

    摘要: A network control system that includes several controllers for managing several switching elements and a distributed hash table (DHT) formed across the controllers for storing data regarding the switching elements that is accessible by the controllers. Each hash table serves as a DHT instance. In some embodiments, the DHT instances of all controller instances collectively store one set of records that is indexed based on hashed indices for quick access. These records are distributed across the different controller instances to minimize the size of the records within each instance and to allow for the size of the DHT to be increased by adding other DHT instances. According to this scheme, each DHT record is not stored in each controller instance. In fact, in some embodiments, each DHT record is stored in at most one controller instance.

    摘要翻译: 一种网络控制系统,其包括用于管理多个交换元件的多个控制器和跨越控制器形成的分布式哈希表(DHT),用于存储关于控制器可访问的交换元件的数据。 每个哈希表用作DHT实例。 在一些实施例中,所有控制器实例的DHT实例共同地存储基于用于快速访问的散列索引进行索引的一组记录。 这些记录分布在不同的控制器实例之间,以最小化每个实例中记录的大小,并允许通过添加其他DHT实例来增加DHT的大小。 根据该方案,每个DHT记录不存储在每个控制器实例中。 事实上,在一些实施例中,每个DHT记录被存储在至多一个控制器实例中。

    NETWORK CONTROL APPARATUS AND METHOD WITH PORT SECURITY CONTROLS
    25.
    发明申请
    NETWORK CONTROL APPARATUS AND METHOD WITH PORT SECURITY CONTROLS 有权
    网络控制装置和方法与端口安全控制

    公开(公告)号:US20130058341A1

    公开(公告)日:2013-03-07

    申请号:US13177546

    申请日:2011-07-06

    IPC分类号: H04L12/56

    摘要: Port security in some embodiments is a technique to apply to a particular port of a logical switching element such that the network data entering and existing the logical switching element through the particular logical port have certain addresses that the switching element has restricted the logical port to use. For instance, a logical switching element may restrict a particular logical port to one or more certain network addresses. To enable a logical port of a logical switch for port security, the control application of some embodiments receives user inputs that designate a particular logical port and a logical switch to which the particular logical port belongs. The control application in some embodiments formats the user inputs into logical control plane data specifying the designation. The control application in some embodiments then converts the logical control plane data into logical forwarding data that specify port security functions.

    摘要翻译: 一些实施例中的端口安全性是应用于逻辑交换元件的特定端口的技术,使得通过特定逻辑端口进入和存在逻辑交换元件的网络数据具有某些地址,交换元件已经限制了要使用的逻辑端口 。 例如,逻辑交换单元可以将特定逻辑端口限制为一个或多个特定网络地址。 为了启用用于端口安全性的逻辑交换机的逻辑端口,一些实施例的控制应用接收指定特定逻辑端口和特定逻辑端口所属的逻辑交换机的用户输入。 在一些实施例中,控制应用将用户输入格式化成指定指定的逻辑控制平面数据。 一些实施例中的控制应用随后将逻辑控制平面数据转换为指定端口安全功能的逻辑转发数据。

    PACKET PROCESSING IN A NETWORK WITH HIERARCHICAL MANAGED SWITCHING ELEMENTS
    26.
    发明申请
    PACKET PROCESSING IN A NETWORK WITH HIERARCHICAL MANAGED SWITCHING ELEMENTS 有权
    网络处理与分层管理的切换要素

    公开(公告)号:US20130058334A1

    公开(公告)日:2013-03-07

    申请号:US13225553

    申请日:2011-09-06

    IPC分类号: H04L12/56

    摘要: Some embodiments provide a managed network for implementing a logical switching element. The managed network includes several managed edge switching elements that are each for (1) receiving packets for forwarding through the logical switching element and (2) forwarding packets that are known to the managed edge switching element to other managed edge switching elements in the several managed edge switching elements. The managed network includes a set of managed non-edge switching elements for (1) receiving packets from the several managed edge switching elements that are unknown to a particular managed edge switching element in the several managed edge switching elements and (2) forwarding packets to the several managed edge switching elements that are unknown to the several managed edge switching elements.

    摘要翻译: 一些实施例提供用于实现逻辑交换元件的受管网络。 管理网络包括几个管理边缘交换元件,每个管理边缘交换元件分别用于(1)接收用于通过逻辑交换元件转发的分组;以及(2)将被管理边缘交换元件已知的分组转发到多个管理的其他管理边缘交换元件 边缘开关元件。 管理网络包括一组管理的非边缘交换元件,用于(1)从几个管理边缘交换元件中的特定管理边缘交换元件未知的几个管理边缘交换元件接收分组,以及(2)将分组转发到 几个管理边缘交换元件对于几个管理边缘交换元件是未知的。

    Network control apparatus and method for populating logical datapath sets

    公开(公告)号:US10103939B2

    公开(公告)日:2018-10-16

    申请号:US13269409

    申请日:2011-10-07

    摘要: For a network control system that receives, from a user, logical datapath sets that logically express desired forwarding behaviors that are to be implemented by a set of managed switching elements, a controller for managing several managed switching elements that forward data in a network that includes the managed switching elements is described. The controller includes a set of modules for detecting a change in one or more managed switching elements and for updating logical datapath set based on the detected change. The logical datapath set is for subsequent translation into a set of physical forwarding behaviors of the managed switching elements.