Abstract:
A data packet forwarding solution, which relates to the field of network transmission. A virtual switch in the solution saves a flow entry as an aging flow entry deleted from a flow table in a switch, and receives a reporting data packet generated according to a forwarding data packet when the forwarding data packet fails to match each flow entry in the flow table in the switch and a secure channel between the switch and the controller is faulty, delivers an aging flow entry matching the reporting data packet from an aging flow table to the switch, where the aging flow table includes one or more flow entries that are deleted as aging flow entries from a flow table in the switch.
Abstract:
Embodiments of the present invention disclose a method for acquiring, by an SDN switch, an exact flow entry, applied to an SDN network, where the SDN network includes an SDN controller and multiple SDN switches, the SDN controller communicates with each SDN switch in an inband communication manner, and the method includes: first establishing, by a first SDN switch, a reliable connection to the SDN controller; then, sending a first control message based on a packet corresponding to a protocol for the reliable connection; adding path information of the first SDN switch to the control message; and subsequently, also adding, by each SDN switch that receives the first control message, path information of each SDN switch to the first control message, so that finally, the SDN controller knows an entire path, so as to deliver a flow table to the first SDN switch.
Abstract:
Embodiments of the present invention disclose a method for acquiring, by an SDN switch, an exact flow entry, applied to an SDN network, where the SDN network includes an SDN controller and multiple SDN switches, the SDN controller communicates with each SDN switch in an inband communication manner, and the method includes: first establishing, by a first SDN switch, a reliable connection to the SDN controller; then, sending a first control message based on a packet corresponding to a protocol for the reliable connection; adding path information of the first SDN switch to the control message; and subsequently, also adding, by each SDN switch that receives the first control message, path information of each SDN switch to the first control message, so that finally, the SDN controller knows an entire path, so as to deliver a flow table to the first SDN switch.
Abstract:
An application start method includes obtaining a target application list when a size of free memory is greater than a preset threshold. The target application list is used to store one or more application identifiers of one or more applications whose memory is released. The application start method further includes starting, in the background, a process of an application identified in the target application list.
Abstract:
An information security verification method comprises obtaining, by a terminal, abstract information of to-be-verified information and an identification code, where the identification code is used to identify a sender that sends the to-be-verified information to the terminal, then sending an information security verification request to the sender of the to-be-verified information based on the identification code, where the information security verification request includes the abstract information of the to-be-verified information, and finally receiving a verification result from the sender, where the verification result indicates whether the sender has ever sent information same as the to-be-verified information.
Abstract:
A flow entry configuration method, apparatus, and system are disclosed. The method includes: reporting, by a switch, information about a data packet of a first service to a controller, receiving a flow entry delivered by the controller according to the information and a flow table structure, determining a first target service path matching the flow entry of the first service, determining a target hardware flow table according to a preconfigured correspondence between the service path and a hardware flow table of the switch, and configuring a flow entry of the target hardware flow table according to the flow entry of the first service. Therefore, no matter to which controller the switch is connected, the switch can successfully configure, in the hardware flow table, the flow entry used to implement the first service, so as to successfully process the first service, thereby reducing a probability of failure in service processing.
Abstract:
A method for constructing a multipath forwarding rule, an apparatus, and a system. A controller invokes a multipath algorithm to generate multiple paths for a data stream; the controller generates a multiport rule of a forwarding device according to the multiple paths; the controller generates metadata according to the multiport rule of each forwarding device, where the metadata includes information for indicating at least one forwarding port of the forwarding device; the controller generates a flow entry establishment indication; the controller sends the flow entry establishment indication to a forwarding device, such that each forwarding device selects the at least one forwarding port of the forwarding device according to the flow entry establishment indication, to forward the data stream.
Abstract:
A data packet forwarding solution, which relates to the field of network transmission. A virtual switch in the solution saves a flow entry as an aging flow entry deleted from a flow table in a switch, and receives a reporting data packet generated according to a forwarding data packet when the forwarding data packet fails to match each flow entry in the flow table in the switch and a secure channel between the switch and the controller is faulty, delivers an aging flow entry matching the reporting data packet from an aging flow table to the switch, where the aging flow table includes one or more flow entries that are deleted as aging flow entries from a flow table in the switch.