Network control apparatus and method with port security controls
    1.
    发明授权
    Network control apparatus and method with port security controls 有权
    具有端口安全控制的网络控制装置和方法

    公开(公告)号:US08958292B2

    公开(公告)日:2015-02-17

    申请号:US13177546

    申请日:2011-07-06

    Abstract: Port security in some embodiments is a technique to apply to a particular port of a logical switching element such that the network data entering and existing the logical switching element through the particular logical port have certain addresses that the switching element has restricted the logical port to use. For instance, a logical switching element may restrict a particular logical port to one or more certain network addresses To enable a logical port of a logical switch for port security, the control application of some embodiments receives user inputs that designate a particular logical port and a logical switch to which the particular logical port belongs. The control application in some embodiments formats the user inputs into logical control plane data specifying the designation. The control application in some embodiments then converts the logical control plane data into logical forwarding data that specify port security functions.

    Abstract translation: 一些实施例中的端口安全性是应用于逻辑交换元件的特定端口的技术,使得通过特定逻辑端口进入和存在逻辑交换元件的网络数据具有某些地址,交换元件已经限制了要使用的逻辑端口 。 例如,逻辑交换单元可以将特定的逻辑端口限制到一个或多个特定的网络地址。为了实现用于端口安全的逻辑交换机的逻辑端口,一些实施例的控制应用接收指定特定逻辑端口的用户输入和 特定逻辑端口所属的逻辑交换机。 在一些实施例中,控制应用将用户输入格式化成指定指定的逻辑控制平面数据。 一些实施例中的控制应用随后将逻辑控制平面数据转换为指定端口安全功能的逻辑转发数据。

    NETWORK CONTROL APPARATUS AND METHOD WITH PORT SECURITY CONTROLS
    2.
    发明申请
    NETWORK CONTROL APPARATUS AND METHOD WITH PORT SECURITY CONTROLS 有权
    网络控制装置和方法与端口安全控制

    公开(公告)号:US20130058341A1

    公开(公告)日:2013-03-07

    申请号:US13177546

    申请日:2011-07-06

    Abstract: Port security in some embodiments is a technique to apply to a particular port of a logical switching element such that the network data entering and existing the logical switching element through the particular logical port have certain addresses that the switching element has restricted the logical port to use. For instance, a logical switching element may restrict a particular logical port to one or more certain network addresses. To enable a logical port of a logical switch for port security, the control application of some embodiments receives user inputs that designate a particular logical port and a logical switch to which the particular logical port belongs. The control application in some embodiments formats the user inputs into logical control plane data specifying the designation. The control application in some embodiments then converts the logical control plane data into logical forwarding data that specify port security functions.

    Abstract translation: 一些实施例中的端口安全性是应用于逻辑交换元件的特定端口的技术,使得通过特定逻辑端口进入和存在逻辑交换元件的网络数据具有某些地址,交换元件已经限制了要使用的逻辑端口 。 例如,逻辑交换单元可以将特定逻辑端口限制为一个或多个特定网络地址。 为了启用用于端口安全性的逻辑交换机的逻辑端口,一些实施例的控制应用接收指定特定逻辑端口和特定逻辑端口所属的逻辑交换机的用户输入。 在一些实施例中,控制应用将用户输入格式化成指定指定的逻辑控制平面数据。 一些实施例中的控制应用随后将逻辑控制平面数据转换为指定端口安全功能的逻辑转发数据。

    NETWORK CONTROL APPARATUS AND METHOD FOR CREATING AND MODIFYING LOGICAL SWITCHING ELEMENTS
    3.
    发明申请
    NETWORK CONTROL APPARATUS AND METHOD FOR CREATING AND MODIFYING LOGICAL SWITCHING ELEMENTS 有权
    网络控制装置和创建和修改逻辑切换元件的方法

    公开(公告)号:US20120147898A1

    公开(公告)日:2012-06-14

    申请号:US13269543

    申请日:2011-10-07

    Abstract: A network controller for managing several managed switching elements that forward data in a network that includes the managed switching elements. The network controller is further for creating a logical switching element to be implemented in a set of managed switching elements. The network controller includes a set of modules for receiving input data specifying a logical switching element and for creating, based on the received input data, a set of logical switch constructs for the logical switching element by performing a set of database join operations. At least one of the logical switch constructs is for facilitating non-forwarding behavior of the logical switching element.

    Abstract translation: 一种网络控制器,用于管理在网络中转发包括所述被管理的交换元件的数据的多个被管理的交换单元。 网络控制器还用于创建要在一组管理的交换元件中实现的逻辑交换元件。 网络控制器包括一组模块,用于接收指定逻辑交换元件的输入数据,并且用于通过执行一组数据库连接操作来创建基于所接收的输入数据的逻辑交换元件的一组逻辑交换结构。 逻辑交换结构中的至少一个用于促进逻辑交换元件的非转发行为。

    Network control apparatus and method for creating and modifying logical switching elements
    4.
    发明授权
    Network control apparatus and method for creating and modifying logical switching elements 有权
    用于创建和修改逻辑交换元件的网络控制装置和方法

    公开(公告)号:US09525647B2

    公开(公告)日:2016-12-20

    申请号:US13269543

    申请日:2011-10-07

    Abstract: A network controller for managing several managed switching elements that forward data in a network that includes the managed switching elements. The network controller is further for creating a logical switching element to be implemented in a set of managed switching elements. The network controller includes a set of modules for receiving input data specifying a logical switching element and for creating, based on the received input data, a set of logical switch constructs for the logical switching element by performing a set of database join operations. At least one of the logical switch constructs is for facilitating non-forwarding behavior of the logical switching element.

    Abstract translation: 一种网络控制器,用于管理在网络中转发包括所述被管理的交换元件的数据的多个被管理的交换单元。 网络控制器还用于创建要在一组管理的交换元件中实现的逻辑交换元件。 网络控制器包括一组模块,用于接收指定逻辑交换元件的输入数据,并且用于通过执行一组数据库连接操作来创建基于所接收的输入数据的逻辑交换元件的一组逻辑交换结构。 逻辑交换结构中的至少一个用于促进逻辑交换元件的非转发行为。

    Flow generation from second level controller to first level controller to managed switching element
    7.
    发明授权
    Flow generation from second level controller to first level controller to managed switching element 有权
    从第二级控制器到第一级控制器到管理型开关元件的流量生成

    公开(公告)号:US09444651B2

    公开(公告)日:2016-09-13

    申请号:US13589043

    申请日:2012-08-17

    CPC classification number: H04L12/66 H04L41/044 H04L45/04

    Abstract: A network control system that includes a first set of network controllers for (i) receiving a logical control plane definition of a logical switching element that couples to both a first set of network hosts in a first domain and a second set of network hosts in a second domain, (ii) translating the logical control plane definition of the logical switching element into a first set of flow entries in a first logical forwarding plane, and (iii) translating the first set of flow entries into a second set of flow entries in a second logical forwarding plane. The network control system includes a second set of network controllers in the first domain for (i) receiving a portion of the second set of flow entries and (ii) translating the portion of the second set of flow entries into a third set of flow entries in a physical control plane.

    Abstract translation: 一种网络控制系统,其包括第一组网络控制器,用于(i)接收逻辑交换元件的逻辑控制平面定义,所述逻辑交换元件耦合到第一域中的第一组网络主机和第二组网络主机 第二域,(ii)将逻辑交换元件的逻辑控制平面定义转换为第一逻辑转发平面中的第一组流条目,以及(iii)将第一组流条目转换为第二组流条目 第二个逻辑转发平面。 网络控制系统包括第一域中的第二组网络控制器,用于(i)接收第二组流条目的一部分,以及(ii)将第二组流条目的部分转换成第三组流条目 在物理控制平面。

    Federating interconnection switching element network to two or more levels
    8.
    发明授权
    Federating interconnection switching element network to two or more levels 有权
    将互连交换单元网络联合到两个或更多层次

    公开(公告)号:US09137052B2

    公开(公告)日:2015-09-15

    申请号:US13589049

    申请日:2012-08-17

    CPC classification number: H04L12/66 H04L41/044 H04L45/04

    Abstract: A network control system for interconnecting several separate networks. The system includes i) several interconnection switching elements, each of which is for connecting one of the separate networks to a common interconnecting network, ii) a first set of network controllers for managing a first set of the interconnection switching elements at a first set of separate networks in order for machines at different networks within the first set to communicate with each other, iii) a second set of network controllers for managing a second set of interconnection switching elements at a second set of separate networks in order for machines at different networks within the second set to communicate with each other, and iv) a third set of network controllers for managing the first and second sets of network controllers in order for machines at networks in the first set to communicate with machines at networks in the second set.

    Abstract translation: 用于互连几个单独网络的网络控制系统。 该系统包括:i)多个互连交换元件,每个互连开关元件用于将单独网络中的一个连接到公共互连网络; ii)第一组网络控制器,用于在第一组互连网络中管理第一组互连交换元件 单独的网络,以便在第一组内的不同网络上的机器彼此通信; iii)第二组网络控制器,用于在第二组不同网络处管理第二组互连交换元件,以便在不同网络处的机器 在第二组内相互通信,以及iv)用于管理第一组和第二组网络控制器的第三组网络控制器,以便第一组中的网络上的机器与第二组中网络处的机器进行通信。

    Method and apparatus for robust packet distribution among hierarchical managed switching elements
    10.
    发明授权
    Method and apparatus for robust packet distribution among hierarchical managed switching elements 有权
    层次化管理交换元件之间鲁棒数据包分发的方法和装置

    公开(公告)号:US08964528B2

    公开(公告)日:2015-02-24

    申请号:US13218470

    申请日:2011-08-26

    CPC classification number: H04L45/745

    Abstract: For a network that includes several managed edge switching elements and several managed non-edge switching elements that are for implementing a logical switching element, some embodiments provide a method of distributing packet processing across the several managed non-edge switching elements. The method receives a packet for processing through the logical switching element. Based on a determination that the packet needs to be processed by a managed non-edge switching element, the method determines a particular managed non-edge switching element of the several managed non-edge switching elements to forward the packet. The method forwards the packet to the particular managed non-edge switching element for the particular managed non-edge switching element to process the packet.

    Abstract translation: 对于包括若干管理边缘交换元件的网络和用于实现逻辑交换元件的若干受管理的非边缘交换元件,一些实施例提供跨多个受管理的非边缘交换元件分发分组处理的方法。 该方法通过逻辑交换元件接收用于处理的分组。 基于确定分组需要由被管理的非边缘切换元件来处理,该方法确定若干受管理的非边缘交换元件的特定的受管理非边缘交换元件以转发该分组。 该方法将分组转发到用于特定的受管理非边缘交换元件的特定的受管理的非边缘交换元件以处理分组。

Patent Agency Ranking