Method for fast network re-optimization
    5.
    发明授权
    Method for fast network re-optimization 有权
    快速网络重新优化的方法

    公开(公告)号:US07433315B2

    公开(公告)日:2008-10-07

    申请号:US10753796

    申请日:2004-01-07

    摘要: A fast and efficient method for network re-optimization is described. In one embodiment, the technique uses an algorithm that requires limited aggregate information to continually monitor the network for re-optimization opportunities. The re-optimization of the present invention enables a network to accommodate more traffic without adding capacity. The re-optimization of the present invention is performed only when network efficiency benefits above a predetermined threshold may be obtained. In addition, a least-cost set of sessions is determined to perform the re-routing of the present invention to attain the desired network efficiency.

    摘要翻译: 描述了一种快速有效的网络重新优化方法。 在一个实施例中,该技术使用需要有限聚合信息的算法来连续监视网络以进行重新优化机会。 本发明的重新优化使得网络能够容纳更多的流量而不增加容量。 只有当网络效率有益于高于预定阈值时才执行本发明的重新优化。 此外,确定了一个成本最低的会话集,以执行本发明的重新路由以达到期望的网络效率。

    SECURING SOFTWARE DEFINED NETWORKS VIA FLOW DEFLECTION
    8.
    发明申请
    SECURING SOFTWARE DEFINED NETWORKS VIA FLOW DEFLECTION 有权
    通过流量偏移来保护软件定义的网络

    公开(公告)号:US20140089506A1

    公开(公告)日:2014-03-27

    申请号:US13627003

    申请日:2012-09-26

    IPC分类号: G06F15/173

    摘要: A flow deflection capability is provided for deflecting data flows within a Software Defined Network (SDN) in order to provide security for the SDN. A flow forwarding rule is generated for a first network element of the SDN based on detection of a condition (e.g., TCAM utilization condition, CPU utilization condition, or the like) associated with the first network element. The flow forwarding rule is generated by a control element of the SDN or the first network element of the SDN. The flow forwarding rule is indicative that at least a portion of new flow requests received at the first network element are to be forwarded from the first network element to a second network element of the SDN. The flow forwarding rule may specify full flow deflection or selective flow deflection.

    摘要翻译: 提供流量偏转能力用于偏转软件定义网络(SDN)内的数据流,以便为SDN提供安全性。 基于与第一网元相关联的条件(例如,TCAM利用条件,CPU利用条件等)的检测,为SDN的第一网元生成流转发规则。 流转发规则由SDN的控制元素或SDN的第一网元生成。 流转发规则指示在第一网元接收到的新流请求的至少一部分将从第一网元转发到SDN的第二网元。 流量转移规则可以指定全流量偏转或选择性流量偏转。

    Method and apparatus for transparent cloud computing with a virtualized network infrastructure
    9.
    发明授权
    Method and apparatus for transparent cloud computing with a virtualized network infrastructure 有权
    具有虚拟化网络基础架构的透明云计算的方法和装置

    公开(公告)号:US08369333B2

    公开(公告)日:2013-02-05

    申请号:US12582939

    申请日:2009-10-21

    IPC分类号: H04L12/56

    摘要: A capability is provided for providing transparent cloud computing with a virtualized network infrastructure. A method for enabling use of a resource of a data center as an extension of a customer network includes receiving, at a forwarding element (FE), a packet intended for a virtual machine hosted at an edge domain of the data center, determining a VLAN ID of the VLAN for the customer network in the edge domain, updating the packet to include the VLAN ID of the VLAN for the customer network in the edge domain, and propagating the updated packet from the FE toward virtual machine. The edge domain supports a plurality of VLANs for a respective plurality of customer networks. The packet includes an identifier of the customer network and a MAC address of the virtual machine. The VLAN ID of the VLAN for the customer network in the edge domain is determined using the identifier of the customer network and the MAC address of the virtual machine. The FE may be associated with the edge domain at which the virtual machine is hosted, an edge domain of the data center that is different than the edge domain at which the virtual machine is hosted, or the customer network. Depending on the location of the FE at which the packet is received, additional processing may be provided as needed.

    摘要翻译: 提供了一种提供透明云计算与虚拟化网络基础架构的能力。 用于使数据中心的资源能够用作客户网络的扩展的方法包括在转发元件(FE)处接收旨在用于驻留在数据中心的边缘域的虚拟机的分组,确定VLAN 边缘域中客户网络的VLAN ID,更新报文,包括边缘域中客户网络的VLAN的VLAN ID,并将更新的报文从FE传播到虚拟机。 边缘域为相应的多个客户网络支持多个VLAN。 该分组包括客户网络的标识符和虚拟机的MAC地址。 边缘域中客户网络的VLAN的VLAN ID使用客户网络的标识符和虚拟机的MAC地址来确定。 FE可以与托管虚拟机的边缘域,数据中心的边缘域与虚拟机所在的边缘域或客户网络相关联。 根据接收到分组的FE的位置,可以根据需要提供额外的处理。

    Method and apparatus for coincidence counting for estimating flow statistics
    10.
    发明授权
    Method and apparatus for coincidence counting for estimating flow statistics 有权
    用于估计流量统计的符合计数的方法和装置

    公开(公告)号:US07957272B2

    公开(公告)日:2011-06-07

    申请号:US11372895

    申请日:2006-03-10

    IPC分类号: G01R31/08

    摘要: The invention includes a method and apparatus for determining a coincidence count associated with a traffic flow in a network. The method includes receiving a first packet having a first flow identifier associated with one of the traffic flows, comparing the first flow identifier of the first packet to each of a plurality of other flow identifiers associated with a respective plurality of other packets, and determining a coincidence count associated with the first flow identifier based on the comparison of the first flow identifier to each of the plurality of other flow identifiers. The method for determining a coincidence count associated with one of a plurality of traffic flows may be extended for determining respective coincidence counts associated with a plurality of traffic flows. The determined coincidence counts may be used for determining at least one traffic flow statistic.

    摘要翻译: 本发明包括一种用于确定与网络中的业务流相关联的重合计数的方法和装置。 该方法包括接收具有与业务流中的一个相关联的第一流标识符的第一分组,将第一分组的第一流标识符与与相应多个其他分组相关联的多个其他流标识符中的每一个进行比较,以及确定 基于第一流标识符与多个其他流标识符中的每一个的比较,与第一流标识符相关联的重合计数。 可以扩展用于确定与多个业务流中的一个业务流相关联的一致计数的方法,以确定与多个业务流相关联的相应重合计数。 确定的重合计数可用于确定至少一个交通流量统计量。