Huawei Technologies Co., Limited

Hewei Liu

Kun Li

Yunlong Shi

Azoulay Iko

Zechao Meng

Lei Qiao

A service scheduling method, including: obtaining scheduling information of multiple services deployed on a network device; generating scheduling logic according to the scheduling information, invoking, according to the generated scheduling logic, each processing module to process a packet received by the network device, and invoking, according to the scheduling point information of each service, a corresponding service at a scheduling point of each service. Accordingly, the embodiments of the present invention also provide a service scheduling apparatus and a network device.

Dynamic generation and adjustment of scheduling logic for packet processing by sets of processing modules

A session monitoring method is used for determining session information in a service server, and the session information includes at least one type of current session information or historical session information. The current session information is sent to a control device, and the current session information is used by the control device to determine a control instruction. The historical session information is sent to an analysis device, and the historical session information is used by the analysis device to analyze a historical session. The current session information is analyzed, so as to obtain an analysis result of the current session information. Therefore, data is separately processed according to a requirement. This facilitates implementation of a session monitoring solution, reduces resource consumption, and meets a service requirement of session monitoring.

Session monitoring method, apparatus, and system

An apparatus for processing an attack behavior of a cloud application in a cloud computing system, including a policy manager configured to store a security determining rule and a malicious application processing rule, a security analyzer configured to receive application behavior data from a security detector, and send the application behavior data to a security processor when the cloud application running on the cloud host has an attack behavior, and the security processor is configured to invoke, according to the malicious application processing rule, an interface provided by a cloud controller in order to process the cloud application having an attack behavior. The apparatus performs security protection based on an application level of cloud computing, which can prevent mutual attack between different applications on a same host, and reduce impact on a normal application.

Method, apparatus and system for processing attack behavior of cloud application in cloud computing system

A service scheduling method, including: obtaining scheduling information of multiple services deployed on a network device; generating scheduling logic according to the scheduling information, invoking, according to the generated scheduling logic, each processing module to process a packet received by the network device, and invoking, according to the scheduling point information of each service, a corresponding service at a scheduling point of each service. Accordingly, the embodiments of the present invention also provide a service scheduling apparatus and a network device. In the embodiments of the present invention, by using the foregoing technical solutions, a conventional packet processing process is segmented in detail, multiple service scheduling points are defined, and a required service is flexibly scheduled according to a packet processing result, which avoids repeated scheduling, improves flexibility and performance of service scheduling, and increases competitiveness of a network device.

Dynamic generation and adjustment of scheduling logic for packet processing

A policy processing method and network device. The method includes: performing a mixed orchestration on all service rules corresponding to multiple services, so as to construct multiple condition sets; performing, according to the constructed multiple condition sets, unified condition matching on packet feature information of a received network packet, and outputting a condition matching result set; and calling, a service application to execute a policy action corresponding to each condition identifier in the condition matching result set. In solutions of the embodiments of the present invention, by performing a mixed orchestration on multiple service rules, all service rules are organized in a unified manner, information required by all services is extracted in one packet scanning process, and only one matching and rule verification process is required. Thereby, redundant operations between multiple services are reduced, and device integration and performance are improved.

Growing community of inventors

Hangzhou, China

Hewei Liu