Computing devices and method for performing a secure neighbor discovery. A local computing device transmits an encrypted local node identifier and an encrypted local challenge to a remote computing device. The remote computing device generates a local challenge response based on the local challenge; and transmits an encrypted remote node identifier and an encrypted local challenge response to the local computing device. The local computing device determines that the received local challenge response corresponds to an expected local challenge response generated based on the local challenge. The remote computing device further transmits an encrypted remote challenge. The local computing device generates a remote challenge response based on the remote challenge; and transmits an encrypted remote challenge response to the remote computing device. The remote computing device determines that the received remote challenge response corresponds to an expected remote challenge response generated based on the remote challenge.
H04L 9/32 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité comprenant des moyens pour vérifier l'identité ou l'autorisation d'un utilisateur du système
Method and computing devices for enforcing packet order based on packet marking. Upon occurrence of a link failure, a first device reallocates traffic initially forwarded through the failed link to an alternative link and marks the reallocated traffic with a first flag. Upon recovery of the failed link, the reallocated traffic is forwarded again through the recovered link and marked with a second flag different from the first flag. A second device calculates a reference inter-packet time for received traffic marked with the first flag. For received traffic marked with the second flag, the second device calculates a current inter-packet time. The current inter-packet time is compared with the reference inter-packet time, to determine if the traffic marked with the second flag shall be forwarded immediately or if the forwarding shall be delayed.
09 - Appareils et instruments scientifiques et électriques
42 - Services scientifiques, technologiques et industriels, recherche et conception
Produits et services
Software, in particular communication and networking software, data and file management and database software, web application and server software, application software for cloud computing services, cloud computing software, cloud server software, computer software for use in the field of data centers, computer software for networking a data center; Information technology, in particular communications equipment, computer networking and data communications equipment, telecommunications networks, communications networks, networking devices, network communication equipment, network communication apparatus; Data storage devices and media, in particular network-attached storage [NAS] and computer network-attached storage [NAS] hardware, computers and computer hardware, computer servers; Data processing equipment and accessories (electrical and mechanical), in particular computers and computer hardware, network servers and network access server hardware. IT services; Software development, programming and implementation, in particular design and development of operating software for accessing and using a cloud computing network; Hosting services, software as a service, and rental of software, in particular providing temporary use of on-line non-downloadable operating software for computer networks and servers; Hosting services, software as a service, and rental of software, in particular providing temporary use of online non-downloadable software for accessing and using a cloud computing network, cloud computing, cloud storage services for electronic files, cloud storage services for electronic data; Hosting services, software as a service, and rental of software, in particular providing virtual computer systems through cloud computing, providing virtual computer environments through cloud computing; IT consultancy, advisory and information services, in particular consulting services in the field of cloud computing and consulting in the field of cloud computing networks and applications; IT security, protection and restoration; Computer hardware development; Rental of computer hardware and facilities; Provision of data centre facilities.
09 - Appareils et instruments scientifiques et électriques
42 - Services scientifiques, technologiques et industriels, recherche et conception
Produits et services
(1) Cloud servers; cloud storage gateways; computer software for connecting computers and for enabling cloud computing; computer software used for running cloud computing based applications; network access server operating software; software for cloud infrastructure management and automation
(2) Computer software for use in the field of data centers, namely, software for the management and operation of a computer network (1) Advisory services in the field of cloud computing networks and applications; computer software consultancy; design and development of operating software for accessing and using a cloud computing network; installation, updating and maintenance of computer software; software as a service (SAAS) featuring software for running cloud computing based applications
5.
METHOD AND COMPUTING DEVICE FOR ENFORCING FUNCTIONAL FILTERING RULES IN A POD INFRASTRUCTURE
The present method and computer device store a plurality of functional filtering rules in memory, each functional filtering rule being based on at least one of a namespace and a pod type. A data structure providing a mapping between pods and Internet Protocol (IP) addresses is stored in the memory. Upon receipt or transmission of an IP packet, a source IP address and a destination IP address are extracted from the IP packet. A source pod corresponding to the source IP address and a destination pod corresponding to the destination IP address are determined using the data structure. Each pod belongs to one of a plurality of namespaces and one of a plurality of pod types. The method and computer further identify and apply a functional filtering rule among the plurality of functional filtering rules that is matched for the source pod and destination pod respective namespaces and pod types.
The present method and computer device store a plurality of functional filtering rules in memory, each functional filtering rule being based on at least one of a namespace and a pod type. A data structure providing a mapping between pods and Internet Protocol (IP) addresses is stored in the memory. Upon receipt or transmission of an IP packet, a source IP address and a destination IP address are extracted from the IP packet. A source pod corresponding to the source IP address and a destination pod corresponding to the destination IP address are determined using the data structure. Each pod belongs to one of a plurality of namespaces and one of a plurality of pod types. The method and computer further identify and apply a functional filtering rule among the plurality of functional filtering rules that is matched for the source pod and destination pod respective namespaces and pod types.
Computing device and method for generating a functional IPv6 address of a pod. The computing device stores at least one namespace, at least one associated pod type for each namespace, and an IPv6 base prefix. A namespace is selected among the at least one namespace and a pod type is selected among the at least one pod type associated to the selected namespace. The computing device creates a pod corresponding to the selected namespace and pod type. The computing device generates a pod identifier which uniquely identifies the pod at the computing device level. The computing device generates a namespace field based on the selected namespace and a pod type field based on the selected pod type. The computing device generates a functional IPv6 address of the pod by combining at least the IPv6 base prefix, the namespace field, the pod type field, and the pod identifier.
Method and computing devices for enforcing packet order based on packet marking. Upon occurrence of a link failure, a first device reallocates traffic initially forwarded through the failed link to an alternative link and marks the reallocated traffic with a first flag. Upon recovery of the failed link, the reallocated traffic is forwarded again through the recovered link and marked with a second flag different from the first flag. A second device calculates a reference inter-packet time for received traffic marked with the first flag. For received traffic marked with the second flag, the second device calculates a current inter-packet time. The current inter-packet time is compared with the reference inter-packet time, to determine if the traffic marked with the second flag shall be forwarded immediately or if the forwarding shall be delayed.
Computing devices and method for performing a secure neighbor discovery. A local computing device transmits an encrypted local node identifier and an encrypted local challenge to a remote computing device. The remote computing device generates a local challenge response based on the local challenge; and transmits an encrypted remote node identifier and an encrypted local challenge response to the local computing device. The local computing device determines that the received local challenge response corresponds to an expected local challenge response generated based on the local challenge. The remote computing device further transmits an encrypted remote challenge. The local computing device generates a remote challenge response based on the remote challenge; and transmits an encrypted remote challenge response to the remote computing device. The remote computing device determines that the received remote challenge response corresponds to an expected remote challenge response generated based on the remote challenge.
H04L 9/32 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité comprenant des moyens pour vérifier l'identité ou l'autorisation d'un utilisateur du système
H04L 12/751 - Mise à jour ou découverte de la topologie
H04L 29/06 - Commande de la communication; Traitement de la communication caractérisés par un protocole
H04L 29/12 - Dispositions, appareils, circuits ou systèmes non couverts par un seul des groupes caractérisés par le terminal de données
Computing device and methods for performing synchronization and resynchronization of networking information with a server. During standard operations, local networking data discovered by the computing device are transmitted to the server, and server networking data (discovered by the server) are received from the server. Upon occurrence of a pre-defined event at the computing device preventing exchange of information between the computing device and the server, a resynchronization of the local networking data and server networking data is performed. The synchronization and resynchronization mechanisms are based on unique version numbers respectively generated by the computing device and the server.
Method and computing devices for enforcing packet order based on packet marking. Upon occurrence of a link failure, a first device reallocates traffic initially forwarded through the failed link to an alternative link and marks the reallocated traffic with a first flag. Upon recovery of the failed link, the reallocated traffic is forwarded again through the recovered link and marked with a second flag different from the first flag. A second device calculates a reference inter-packet time for received traffic marked with the first flag. For received traffic marked with the second flag, the second device calculates a current inter-packet time. The current inter-packet time is compared with the reference inter-packet time, to determine if the traffic marked with the second flag shall be forwarded immediately or if the forwarding shall be delayed.
H04L 12/833 - Marquage des paquets ou modification de la priorité des paquets en raison de congestion ou pour empêcher une congestion
H04L 12/703 - Prévention ou récupération du défaut de routage, p.ex. reroutage, redondance de route "virtual router redundancy protocol" [VRRP] ou "hot standby router protocol" [HSRP]
H04L 12/707 - Prévention ou récupération du défaut de routage, p.ex. reroutage, redondance de route "virtual router redundancy protocol" [VRRP] ou "hot standby router protocol" [HSRP] par redondance des chemins d’accès
H04L 12/721 - Procédures de routage, p.ex. routage par le chemin le plus court, routage par la source, routage à état de lien ou routage par vecteur de distance
12.
METHOD AND COMPUTING DEVICES FOR ENFORCING PACKET ORDER BASED ON PACKET MARKING
Method and computing devices for enforcing packet order based on packet marking. Upon occurrence of a link failure, a first device reallocates traffic initially forwarded through the failed link to an alternative link and marks the reallocated traffic with a first flag. Upon recovery of the failed link, the reallocated traffic is forwarded again through the recovered link and marked with a second flag different from the first flag. A second device calculates a reference inter-packet time for received traffic marked with the first flag. For received traffic marked with the second flag, the second device calculates a current inter-packet time. The current inter-packet time is compared with the reference inter-packet time, to determine if the traffic marked with the second flag shall be forwarded immediately or if the forwarding shall be delayed.
Computing device and methods for performing synchronization and resynchronization of networking information with a server. During standard operations, local networking data discovered by the computing device are transmitted to the server, and server networking data (discovered by the server) are received from the server. Upon occurrence of a pre-defined event at the computing device preventing exchange of information between the computing device and the server, a resynchronization of the local networking data and server networking data is performed. The synchronization and resynchronization mechanisms are based on unique version numbers respectively generated by the computing device and the server.
Server and methods for performing synchronization and resynchronization of networking information with client devices. During standard operations, client networking data discovered by a given client device are received by the server from the given client device, stored by the server, and forwarded by the server to other client devices. Client networking data from the other client devices received and stored by the server are forwarded to the given client device. Upon occurrence of a pre-defined event at the given client device preventing exchange of information between the given client device and the server, a resynchronization of the client networking data is performed between the given client device and the server. The synchronization and resynchronization mechanisms are based on unique version numbers respectively generated by the server and the given client device.
Computing device and methods for performing synchronization and resynchronization of networking information with a server. During standard operations, local networking data discovered by the computing device are transmitted to the server, and server networking data (discovered by the server) are received from the server. Upon occurrence of a pre-defined event at the computing device preventing exchange of information between the computing device and the server, a resynchronization of the local networking data and server networking data is performed. The synchronization and resynchronization mechanisms are based on unique version numbers respectively generated by the computing device and the server.
Server and methods for performing synchronization and resynchronization of networking information with client devices. During standard operations, client networking data discovered by a given client device are received by the server from the given client device, stored by the server, and forwarded by the server to other client devices. Client networking data from the other client devices received and stored by the server are forwarded to the given client device. Upon occurrence of a pre-defined event at the given client device preventing exchange of information between the given client device and the server, a resynchronization of the client networking data is performed between the given client device and the server. The synchronization and resynchronization mechanisms are based on unique version numbers respectively generated by the server and the given client device.
Computing devices and methods for transmitting and receiving optimized tunneling IP packets. At the entry point of a tunnel, an IP packet comprising at least one header is received. If data comprised in one of the at least one header of the received IP packet are redundant with data comprised in one or more tunneling header of a tunneling IP packet, then the redundant header is removed from the received IP packet. The tunneling IP packet encapsulating the received IP packet (with its redundant header removed) is transmitted. A header removal field is positioned in the tunneling IP packet to indicate the positive determination of redundancy. At the exit point of the tunnel, the tunneling IP packet is received. The header removal field and the one or more tunneling header of the tunneling IP packet are used for identifying the previous determination of redundancy and recreating the removed header.
Computing devices and methods for transmitting and receiving optimized tunneling IP packets. At the entry point of a tunnel, an IP packet comprising at least one header is received. If data comprised in one of the at least one header of the received IP packet are redundant with data comprised in one or more tunneling header of a tunneling IP packet, then the redundant header is removed from the received IP packet. The tunneling IP packet encapsulating the received IP packet (with its redundant header removed) is transmitted. A header removal field is positioned in the tunneling IP packet to indicate the positive determination of redundancy. At the exit point of the tunnel, the tunneling IP packet is received. The header removal field and the one or more tunneling header of the tunneling IP packet are used for identifying the previous determination of redundancy and recreating the removed header.
Computing devices and method for performing a secure neighbor discovery. A local computing device transmits an encrypted local node identifier and an encrypted local challenge to a remote computing device. The remote computing device generates a local challenge response based on the local challenge; and transmits an encrypted remote node identifier and an encrypted local challenge response to the local computing device. The local computing device determines that the received local challenge response corresponds to an expected local challenge response generated based on the local challenge. The remote computing device further transmits an encrypted remote challenge. The local computing device generates a remote challenge response based on the remote challenge; and transmits an encrypted remote challenge response to the remote computing device. The remote computing device determines that the received remote challenge response corresponds to an expected remote challenge response generated based on the remote challenge.
H04L 12/751 - Mise à jour ou découverte de la topologie
H04L 29/06 - Commande de la communication; Traitement de la communication caractérisés par un protocole
H04L 9/06 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité l'appareil de chiffrement utilisant des registres à décalage ou des mémoires pour le codage par blocs, p. ex. système DES
Computing devices and method for performing a secure neighbor discovery. A local computing device transmits an encrypted local node identifier and an encrypted local challenge to a remote computing device. The remote computing device generates a local challenge response based on the local challenge; and transmits an encrypted remote node identifier and an encrypted local challenge response to the local computing device. The local computing device determines that the received local challenge response corresponds to an expected local challenge response generated based on the local challenge. The remote computing device further transmits an encrypted remote challenge. The local computing device generates a remote challenge response based on the remote challenge; and transmits an encrypted remote challenge response to the remote computing device. The remote computing device determines that the received remote challenge response corresponds to an expected remote challenge response generated based on the remote challenge.
H04L 9/32 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité comprenant des moyens pour vérifier l'identité ou l'autorisation d'un utilisateur du système
H04L 12/751 - Mise à jour ou découverte de la topologie
H04L 29/06 - Commande de la communication; Traitement de la communication caractérisés par un protocole
H04L 29/12 - Dispositions, appareils, circuits ou systèmes non couverts par un seul des groupes caractérisés par le terminal de données
21.
Computing device and method for generating a fabric-wide IPV6 address
Computing device and method for generating a fabric-wide IPv6 address in a data center comprising a plurality of fabrics. A configuration file is stored in a memory of a computing device. The configuration file comprises an Internet Protocol version 6 (IPv6) base prefix and a fabric identifier. A processing unit of the computing device determines a host identifier. The processing unit generates an IPv6 prefix, by combining the IPv6 base prefix stored in the configuration file and the fabric identifier stored in the configuration file. The processing unit generates an IPv6 address, by combining the IPv6 prefix and the host identifier. The processing unit further advertises the generated IPv6 address.
G06F 15/16 - Associations de plusieurs calculateurs numériques comportant chacun au moins une unité arithmétique, une unité programme et un registre, p. ex. pour le traitement simultané de plusieurs programmes
H04L 29/12 - Dispositions, appareils, circuits ou systèmes non couverts par un seul des groupes caractérisés par le terminal de données
H04L 12/24 - Dispositions pour la maintenance ou la gestion
22.
COMPUTING DEVICE AND METHOD FOR GENERATING A FABRIC-WIDE IPV6 ADDRESS
Computing device and method for generating a fabric-wide IPv6 address in a data center comprising a plurality of fabrics. A configuration file is stored in a memory of a computing device. The configuration file comprises an Internet Protocol version 6 (IPv6) base prefix and a fabric identifier. A processing unit of the computing device determines a host identifier. The processing unit generates an IPv6 prefix, by combining the IPv6 base prefix stored in the configuration file and the fabric identifier stored in the configuration file. The processing unit generates an IPv6 address, by combining the IPv6 prefix and the host identifier. The processing unit further advertises the generated IPv6 address.
Method and computing device performing a fabric deployment in a data center. The computing device stores a configuration file comprising first and second IPv6 base prefixes, and a fabric identifier. The computing device generates a host identifier, a fabric-wide IPv6 prefix by combining the first IPv6 base prefix and the fabric identifier, and a fabric-wide IPv6 address by combining the fabric-wide IPv6 prefix and the host identifier. The computing device determines a local node identifier and a local link identifier for a communication interface of the computing device. The computing device performs a (secure) neighbor discovery procedure for determining a remote node identifier and a remote link identifier for a communication interface of a remote computing device. The computing device generates a link IPv6 address based on the second IPv6 base prefix and at least some of: the local node and link identifiers, and the remote node and link identifiers.
H04L 12/24 - Dispositions pour la maintenance ou la gestion
H04L 12/751 - Mise à jour ou découverte de la topologie
H04L 9/32 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité comprenant des moyens pour vérifier l'identité ou l'autorisation d'un utilisateur du système
24.
Computing device and method for generating a link IPV6 address
Computing device (located in a fabric of a data center) and method for generating a link IPv6 address. The computing device determines a local node identifier and a local link identifier for a communication interface of the computing device. The computing device receives from a remote computing device a remote node identifier and a remote link identifier for a remote communication interface of the remote computing device. Based on a comparison of the local and remote node identifiers, the link IPv6 address is generated by using an IPv6 base prefix, the local node identifier, the remote node identifier, the local link identifier, the remote link identifier, and an indicator that the local node identifier is greater or lower than the remote node identifier. A network configuration of the computing device is performed by generating a fabric-wide IPv6 address and one or more link IPv6 address.
Computing device (located in a fabric of a data center) and method for generating a link IPv6 address. The computing device determines a local node identifier and a local link identifier for a communication interface of the computing device. The computing device receives from a remote computing device a remote node identifier and a remote link identifier for a remote communication interface of the remote computing device. Based on a comparison of the local and remote node identifiers, the link IPv6 address is generated by using an IPv6 base prefix, the local node identifier, the remote node identifier, the local link identifier, the remote link identifier, and an indicator that the local node identifier is greater or lower than the remote node identifier. A network configuration of the computing device is performed by generating a fabric-wide IPv6 address and one or more link IPv6 address.
09 - Appareils et instruments scientifiques et électriques
42 - Services scientifiques, technologiques et industriels, recherche et conception
Produits et services
Computer software for use in the field of data centers, in particular computer software for networking a data center. Computer software consultancy; Installation, maintenance, and updating of computer software.
09 - Appareils et instruments scientifiques et électriques
42 - Services scientifiques, technologiques et industriels, recherche et conception
Produits et services
(1) Computer software for use in the field of data centers, namely, software for the management and operation of a computer network (1) Computer software consultancy; Installation, maintenance, and updating of computer software
09 - Appareils et instruments scientifiques et électriques
42 - Services scientifiques, technologiques et industriels, recherche et conception
Produits et services
(1) Computer software for use in the field of data centers, namely, software for the management and operation of a computer network (1) Computer software consultancy; Installation, maintenance, and updating of computer software
