METHOD AND SYSTEM FOR PROVISIONING RESOURCES IN CLOUD COMPUTING

    公开(公告)号:WO2019091387A1

    公开(公告)日:2019-05-16

    申请号:PCT/CN2018/114279

    申请日:2018-11-07

    Inventor: XU, Wei SUN, Yan

    Abstract: Methods and apparatuses of allocating resources in a network of computing service nodes to applications are provided. Based on a first service level agreement (SLA) for a first application, a number of physical central processing unit cores and respective quantities of additional physical resources needed are determined to satisfy the first SLA (510); one or more of the service nodes are selected that collectively have available the number of physical CPU cores and the respective quantities of the one or more additional physical resources wherein the one or more additional physical resources comprise a last level cache (LLC) (520); a first virtual machine on one of the selected service nodes is allocated for the first application (530); the number of physical CPU cores and the respective quantities of the one or more additional physical resources on the selected service nodes are reserved for use by the first virtual machine (540).

    HIERARCHICAL PATTERN MATCHING FOR DEEP PACKET ANALYSIS

    公开(公告)号:WO2018196557A1

    公开(公告)日:2018-11-01

    申请号:PCT/CN2018/081490

    申请日:2018-03-31

    Inventor: SUN, Yan XU, Wei

    Abstract: A method comprising receiving, by a network element, a data packet, searching, by the network element, the received data packet at a first hierarchical level to determine whether a substring of a string of a regular expression exists in the received data packet, searching, by the network element when the search of the received data packet at the first hierarchical level finds a match, the received data packet at a second hierarchical level to determine whether the string of the regular expression exists in the received data packet, and transmitting, by the network element, the received data packet to a next network element along an original path of the received data packet without searching the received data packet at a third hierarchical level when the search of the received data packet at the first or second hierarchical level does not find a match.

    METHOD AND APPARATUS FOR SCALABLE SORTING OF DATA SET
    3.
    发明申请
    METHOD AND APPARATUS FOR SCALABLE SORTING OF DATA SET 审中-公开
    数据集可分级分配的方法和装置

    公开(公告)号:WO2016107497A1

    公开(公告)日:2016-07-07

    申请号:PCT/CN2015/098780

    申请日:2015-12-24

    CPC classification number: G06F9/46 G06F7/06 G06F7/22

    Abstract: A method and apparatus for a scalable sorting of a data set in a database on a computer system. A number of contiguous ranges spanning the data set are defined. Each individual data value of the data set is assigned to a range to which it falls into. The values in the ranges are then sorted. The sorting can be performed by different nodes in parallel. Once the sorting is completed, the results are stored in contiguous memory locations. This results the overall data set being sorted.

    Abstract translation: 一种用于在计算机系统上的数据库中的数据集的可伸缩排序的方法和装置。 定义跨越数据集的多个连续范围。 将数据集的每个单独的数据值分配给它所属的范围。 然后对范围中的值进行排序。 排序可以由不同的节点并行执行。 排序完成后,结果将存储在连续的内存位置。 这导致整个数据集被排序。

    A MULTI-CORE LOCK-FREE RATE LIMITING APPARATUS AND METHOD

    公开(公告)号:WO2018137581A1

    公开(公告)日:2018-08-02

    申请号:PCT/CN2018/073647

    申请日:2018-01-22

    Abstract: An apparatus, such as a network element, comprises a receiver to receive a plurality of packets. A memory stores instructions and forms a first and second set of virtual queues to store the plurality of packets. A processor having one or more cores with one or more packet classifiers provides a classification of a packet in the plurality of packets. The processor in communication with the memory executes instructions to transfer the packet from the receiver to a virtual queue in the first set of virtual queues based on the classification. The processor also transfers the packet from the virtual queue to a transmitter based on a demand rate value and supply rate value associated with the virtual queue.

    REACHABILITY MATRIX FOR NETWORK VERIFICATION SYSTEM

    公开(公告)号:WO2021006869A1

    公开(公告)日:2021-01-14

    申请号:PCT/US2019/040829

    申请日:2019-07-08

    Inventor: SUN, Yan XU, Wei

    Abstract: A network verification system processes a network forwarding state into atomic predicates and compresses a network routing table into an atomic predicates indexes set. A transitive closure among all pairs of nodes in the network is calculated from the atomic predicates and atomic predicates indexes set to recursively generate for respective nodes an all-pair reachability matrix M n of the network, from which a reachability report for the network is generated. The reachability report may be used to dynamically program the network. The calculated all-pair reachability matrix M n identifies a loop in the network when any element on a diagonal of the all-pair reachability matrix M n is not an empty set and a black hole in the network when all elements in a row of the all-pair reachability matrix M n comprise an empty set. The all-pair reachability matrix M n may be updated by recalculating only elements affected by an update.

    SYSTEM AND METHOD FOR PACKET CLASSIFICATION USING MULTIPLE SECURITY DATABASES
    8.
    发明申请
    SYSTEM AND METHOD FOR PACKET CLASSIFICATION USING MULTIPLE SECURITY DATABASES 审中-公开
    用于使用多个安全数据库的分组分类的系统和方法

    公开(公告)号:WO2018059278A1

    公开(公告)日:2018-04-05

    申请号:PCT/CN2017/102304

    申请日:2017-09-19

    Abstract: A packet classification system is provided, including a first security database and a second security database for use in connection with packet classification in accordance with an Internet security protocol. The packet classification system further includes processing circuitry in communication with the first security database and the second security database, with the processing circuitry configured to identify at least one aspect of at least one packet received by the processing circuitry, select either the first security database or the second security database as a selected security database, based on the at least one aspect of the at least one packet, select at least one of a plurality of algorithms to classify the at least one packet, wherein the selection of the at least one algorithm is based on a criteria related to the at least one packet, and classify the at least one packet, utilizing the selected security database.

    Abstract translation: 提供了一种分组分类系统,其包括第一安全数据库和第二安全性数据库,用于根据因特网安全协议与分组分类结合使用。 分组分类系统还包括与第一安全数据库和第二安全数据库通信的处理电路,处理电路被配置为识别由处理电路接收的至少一个分组的至少一个方面,选择第一安全数据库或 基于所述至少一个分组的所述至少一个方面,将所述第二安全数据库选择为选择的安全数据库,选择多个算法中的至少一个来对所述至少一个分组进行分类,其中选择所述至少一个算法 基于与所述至少一个分组相关的标准,并且利用所选安全数据库对所述至少一个分组进行分类。

    MEMORY ADDRESSING MECHANISM USING BUFFER OF HIERARCHY OF COLLISION FREE HASH TABLES
    9.
    发明申请
    MEMORY ADDRESSING MECHANISM USING BUFFER OF HIERARCHY OF COLLISION FREE HASH TABLES 审中-公开
    使用冲突层次缓冲器的存储器寻址机制

    公开(公告)号:WO2016070793A1

    公开(公告)日:2016-05-12

    申请号:PCT/CN2015/093695

    申请日:2015-11-03

    CPC classification number: G06F12/1018 G06F12/0864 G06F17/30949

    Abstract: Methods and apparatuses for insertion, searching, deletion, and load balancing using a hierarchical series of hash tables are described herein. The techniques disclosed provide nearly collision free or deterministic hash functions using a bitmap as a pre-filter. The hash functions have different priorities and one hashing result will be used to perform main memory access. For the hash functions, two hash bitmaps are used to store valid data and collision information. There is no collision allowed in the hash tables except for the hash table with the lowest priority. The hash tables and bitmaps may be stored in one or more caches in (e.g., a cache of a CPU, Block RAMs in FPGAs, etc. ) which perform much faster than main memory.

    Abstract translation: 这里描述了使用分级序列的散列表来插入,搜索,删除和负载平衡的方法和装置。 所公开的技术使用位图作为前置滤波器提供了几乎无冲突的或确定性的散列函数。 哈希函数具有不同的优先级,一个散列结果将用于执行主内存访问。 对于哈希函数,使用两个哈希位图来存储有效的数据和冲突信息。 散列表中不存在冲突,除了优先级最低的哈希表外。 散列表和位图可以存储在执行比主存储器快得多的(例如,CPU的高速缓存,FPGA中的块RAM等)中的一个或多个高速缓存中。

    NETWORKING SERVICE LEVEL AGREEMENTS FOR COMPUTER DATACENTERS

    公开(公告)号:WO2018188619A1

    公开(公告)日:2018-10-18

    申请号:PCT/CN2018/082753

    申请日:2018-04-12

    Abstract: A service level agreement (SLA) system is provided for multi-tenant cloud computing to enable provisioning of computing instances for tenants with a networking SLA. A networking SLA may specify a bandwidth requirement, for example, between instances to be scheduled for a tenant in a datacenter. The SLA system evaluates nodes in the datacenter based on a remaining capacity of links associated with nodes implementing the networking SLA. A modular system is provided to enable integration of the SLA system into existing cloud computing infrastructures. The cloud management system may query the SLA system to determine nodes in the datacenter capable of meeting a networking SLA. The list may be ordered to indicate nodes having better capacity to fulfill the networking SLA. The cloud management system can utilize the ordered list of nodes in scheduling instance deployments for tenant requests.

Patent Agency Ranking