40 results about "Network service header" patented technology

A database is populated with geographic locations for network devices by providing a node on a network and making a connection into a network service provider (NSP) point of presence (POP) to obtain a connection to the network via the NSP. A message is then transmitted to the node over the network connection obtained from the NSP. The message is received at the node and a source network identifier is extracted from the message. The source network identifier is then associated with a known geographic location for the POP in a database. The foregoing steps are then repeated for multiple different POPs. Also, a database is populated with geographic locations for network devices by providing a node on a network and making a connection into a network service provider (NSP) point of presence (POP) to obtain a connection to the network via the NSP. A message is then transmitted to the node over the network connection obtained from the NSP. The message is received at the node and a source network identifier is extracted from the message. The route over the network between the node and the POP is then probed to obtain network identifiers for routers along the route. The foregoing steps are then repeated for multiple different POPs.

The invention discloses a network access behavior-based access control method and system for a wireless local area network. The method comprises the following steps: a network side acquires information of data packets of different network service types in a BSS (Base Station Subsystem) according to a network service type; the network side establishes information of a network flow statistical table of the BSS according to the acquired information of the data packets of different network service types, wherein the information of the network flow statistical table comprises source sites, destination sites, service types, network access behavior durations and network access behavior occurring time of the data packets; and the network side generates information of the relation among the network service type, corresponding time and corresponding network data flow of each site in the BSS according to the established information of the network statistical table of the BSS, and performs access control according to the generated information of the relation among the sites in the BSS. By applying the method and the system, the problem of effective distribution of network resources in the wireless local area network is solved.

Virtual machine environments are provided in the switches that form a network, with the virtual machines executing network services previously performed by dedicated appliances. The virtual machines can be executed on a single multi-core processor in combination with normal switch functions or on dedicated services processor boards. Packet processors analyze incoming packets and add a services tag containing services entries to any packets. Each switch reviews the services tag and performs any network services resident on that switch. This allows services to be deployed at the optimal locations in the network. The network services may be deployed by use of drag and drop operations. A topology view is presented, along with network services that may be deployed. Services may be selected and dragged to a single switch or multiple switches. The management tool deploys the network services software, with virtual machines being instantiated on the switches as needed.

A system leveraging the authentication control plane of a communications network to influence the associated Network Service header (NSH) values on a per subscriber packet basis; thus presenting a subscriber aware service chain header on which influences the processing of virtualized network function (VNF). This system implements vendor specific attributes (VSA) within the authentication provider platform to create an association of subscriber identity which may include MAC address, MAC and IP address as a tuple, circuit identifier string, realm based authentication data, IMSI, in part or in addition to leveraging DHCP Relay information sub options that may be present, which when processed inherit one or multiple vendor specific attributes from the authentication platform. These VSA values, each no greater than 2 bytes define the payload headers the participating subscriber gateway will shim to its layer 2 payload for processing as a Service Chain through one or multiple virtual network functions located elsewhere in the network.

The present invention discloses a network service searching method based on a P2P network double-layer ring-shaped routing structure, and belongs to the computer network service retrieval field. The present invention aims to resolve a technical problem that network service searching efficiency and accuracy are significantly reduced because a conventional searching manner is only limited to keyword matching. A used technical solution is: the method organizes network service registered nodes based on a double-layer ring-shaped routing structure P2P network, integrates with difference of node capabilities in an actual network, fully uses a dynamic mechanism of searching and positioning nodes in the P2P network, and clusters the registered nodes by using a service field ontology concept mapping range according to types of services provided by the registered nodes, so that network service registration and discovery of a specific field is concentrated on a small quantity of continuous nodes of an outer ring in the double-layer ring-shaped structure.

The invention provides an SFC service data forwarding method and an SFC network system, and the method comprises the steps: enabling a classifier to receive a service message, and generating an SFC message based on the service message; enabling the classifier to generate a network service header NSH according to the forwarding path information of the service message, and fill the ToS field in theNSH with quality of service QoS information corresponding to the service message; and enabling the classifier to encapsulate the NSH in the SFC message, and forward the SFC message based on the QoS information carried by the ToS field. According to the method and the SFC network system provided by the invention, a QoS mechanism can be provided for the SFC network, so that the service flow of the service chain is forwarded according to the priority, the service quality of high-grade users is ensured, the operation capability is improved, and the system overhead is not increased.

The invention provides a message forwarding method and device, wherein a flow classification node determines a business chain which requires to save the specified information in the network service header NSH. When the data message is received, a first NSH is encapsulated for the data message and sent to a first node of the business chain if the data message matches the above business chain. The first NSH carries a retention mark, and the retention mark is used for indicting that a tail node of the business chain retains the specified information in the first NSH. And then the specified information in the first NSH is retained which is based on the retention mark in the first NSH encapsulated for the data message without cleaning the whole NSH when the tail node of the specified business chain receives the date message. The message forwarding method and device have the advantages that the business chain achieves that information is preserved on demand, and the purpose of business chain, business chain attribute information and data center transmission via the operation and maintenance tool dynamically displays the data message is satisfied.

The invention relates to the technical field of cloud host network utilization, and in particular to a method for performing cross-network service access based on a cloud host. The method for performing cross-network service access based on the cloud host disclosed by the invention comprises the following steps: 1, a cloud host with a fixed external network IP address is obtained; 2, a VPN and a network service access agent tool are set up on the cloud host; 3, the VPN user is configured to have a fixed dialup IP address, and a mapping relationship of the network service access agent is configured; 4, the VPN is dialed up on the host providing the cross-network service of the intranet, a fixed IP is directly distributed, and a fixed association is established with the cloud host; and 5, the external network accesses the intranet service through the cloud host, and jumps to the intranet service by the agent tool, thereby implementing the cross-network service access of the external network through the cloud host. The invention solves the problem that the intranet cannot provide the fixed external network service, and utilizes the low price characteristic of the service host to reduce the cost of obtaining the public network IP, which provides an efficient and feasible method for small-scale external network access services.

The invention provides a message forwarding method and device based on a service function chain. The method comprises the following steps: identifying a local VPN virtual local area network of a tenant to which a received first Ethernet message belongs; searching a global VPN ID mapped to the local VPN in the VPN mapping relationship of the tenant; searching a first service function chain node based on the service function chain forwarding table; packaging the first Ethernet message into a first NSH message with a first NSH network service header according to the found first service function chain node, wherein the first NSH head carries a global VPN ID; searching a first virtual extensible local area network (VXLAN) tunnel reaching the first service function link node in a forwarding instance of the service function link domain; and packaging the first NSH message into a first VXLAN message according to the first VXLAN tunnel, and sending the first VXLAN message through an output portof the first VXLAN tunnel.