Huawei Technologies Co., Limited

Shenzhen Feika Technology Co., Ltd.

Xinyu Hu

Yuping Zhao

Hong Fei Zhou

Jian Chen

Qian Cao

Liang Zhang

Xiaojun Zhang

Hongguang Guan

Yuming Xie

Jun Wu

Jian Ye Chen

Yali Wang

Rui Chen

Jinwei Xia

Xiaoyun Si

Hongbo Zhao

Huiying Xu

Dongtian Yang

Yaqi Liu

Nursing machine

A data stream classification model updating method is disclosed. Determining, based on packet information of a current data stream and a behavior classification model, a first data stream class corresponding to the current data stream; determining, based on a target correspondence and a common feature of the current data stream, a second data stream class corresponding to the current data stream, where the target correspondence is a correspondence between a plurality of common features and a plurality of data stream classes; and if the first data stream class is different from the second data stream class, obtaining correction data corresponding to the current data stream, where the correction data includes the packet information of the current data stream and the second data stream class, and the correction data is used as a training sample to update the behavior classification model.

Data stream classification model updating method and related device

A hardware acceleration method includes obtaining compilation policy information and a source code, where the compilation policy information indicates that a first code type matches a first processor and a second code type matches a second processor; analyzing a code segment in the source code according to the compilation policy information; determining a first code segment belonging to the first code type or a second code segment belonging to the second code type; compiling the first code segment into a first executable code; sending the first executable code to the first processor; compiling the second code segment into a second executable code; and sending the second executable code to the second processor.

Hardware acceleration method, compiler, and device

A data stream classification method includes obtaining, based on a packet feature of a current data stream and a behavior classification model, at least one first confidence that is of the current data stream and that corresponds to at least one data stream class, where the behavior classification model is based on a plurality of data stream samples; obtaining, based on feature information of the current data stream and a content classification model, at least one second confidence that is of the current data stream and that corresponds to the at least one data stream class, where the content classification model is based on one or more historical data streams; and determining a data stream class of the current data stream based on the at least one first confidence and the at least one second confidence.

Data stream classification method and related device

An Internet Protocol Security (IPsec) acceleration method includes generating, by an Internet Key Exchange (IKE) device, an IKE link establishment session packet according to an IPSec configuration parameter and a security policy in a security policy database (SPD), sending, by the IKE device, the IKE link establishment session packet to a peer device, establishing a security association (SA) with the peer device, and sending, by the IKE module, the SA to a data forwarding device, where the IKE device and the data forwarding device are discrete devices.

IPSec acceleration method, apparatus, and system

A virtual machine live migration method, apparatus, and system relating to the field of communications technologies are disclosed. The method includes: in a process of live migration of a target virtual machine, obtaining pre-recorded storage location information corresponding to target service configuration information, where the target service configuration information is used by a target virtual acceleration component corresponding to the target virtual machine to perform service processing; reading the target service configuration information in a storage location corresponding to the storage location information; and sending the target service configuration information to a destination server, so that the destination server stores the target service configuration information. In the present disclosure, a service processing failure can be avoided.

Virtual machine live migration method, apparatus, and system

An accelerator loading apparatus obtains an acceleration requirement, where the acceleration requirement includes an acceleration function of a to-be-created virtual machine and acceleration performance of the to-be-created virtual machine. The accelerator loading apparatus determines a target accelerator that meets the acceleration function of the to-be-created virtual machine and the acceleration performance of the to-be-created virtual machine. The accelerator loading apparatus determines an image corresponding to the target accelerator, and sends an image loading command to a target host in which the target accelerator is located, where the image loading command is used to enable the target host to load the image for the target accelerator based on the image loading command.

Dynamic hardware accelerator selection and loading based on acceleration requirements

A hardware acceleration method includes: obtaining compilation policy information and a source code, where the compilation policy information indicates that a first code type matches a first processor and a second code type matches a second processor, analyzing a code segment in the source code according to the compilation policy information, determining a first code segment belonging to the first code type or a second code segment belonging to the second code type, compiling the first code segment into a first executable code, sending the first executable code to the first processor, compiling the second code segment into a second executable code, and sending the second executable code to the second processor.

An accelerator loading apparatus obtains an acceleration requirement, where the acceleration requirement includes an acceleration function and acceleration performance of a to-be-created virtual machine, determines an image that meets the acceleration function and the acceleration performance, and determines a target host in which an available accelerator that can load the image is located, and then sends an image loading command to the target host. The image loading command includes a descriptor of the image, and is used to enable the target host to load the image for the available accelerator. In the method, a target host that can create the virtual machine may be determined based on the acceleration function and the acceleration performance of the to-be-created virtual machine, and an image used for acceleration is loaded to an available accelerator of the target host, to implement dynamic accelerator loading and deployment.

Accelerator loading method, system, and apparatus

A driver loading method and a server, where when receiving a service request, the server determines a first global index and a first global virtual function (VF) identifier corresponding to a first function description of a designated function included in the service request, determines a virtual machine (VM) corresponding to the service request, associates the first global VF identifier with the VM, allocates a first local index on the VM to the designated function, creates a correspondence between the first local index and the first function description, and sends the correspondence to the VM. The VM loads, according to the correspondence, a driver of the designated function for a first VF corresponding to the first global VF identifier. According to the foregoing method, different drivers can be loaded for VFs that have different functions and that are virtualized by a Peripheral Component Interconnect Express (PCIe) device.

Virtual function driver loading method and server using global and local identifiers corresponding to locations of the virtual functions

A method for implementing fault detection includes: instructing, by a detection device, a detected device to configure a detected path and a return path, where the detected path is a path from a first physical port of the detected device to a second physical port of the detected device via a target unit of the detected device, the return path is a path from the second physical port to the detection device, and the target unit is a VNF or an accelerator; sending a detection packet to the detected device through the first physical port; and when receiving the detection packet transmitted through the detected path and the return path, determining that the detected path is not faulty. According to the method, it can be further determined that the path that passes through the VNF or the accelerator is not faulty.

Multi-path fault detection

An Internet Protocol Security (IPSec) acceleration method, an apparatus, and a system, where the method includes generating, by an Internet Key Exchange (IKE) device, an IKE link establishment session packet according to an IPSec configuration parameter and a security policy in a security policy database (SPD), sending, by the IKE device, the IKE link establishment session packet to a peer device, establishing a security association (SA) with the peer device, and sending, by the IKE module, the SA to a data forwarding device. The IKE device and the data forwarding device are discrete devices. In this way, the IKE device and the data forwarding device can be deployed in different devices in order to increase the IPSec speed.

Ipsec acceleration method, apparatus, and system

The present invention discloses a method and an apparatus for implementing acceleration processing on a VNF. In the present invention, an acceleration request of performing acceleration processing on a virtualized network function VNF is received; a hardware acceleration device capable of performing acceleration processing on the VNF is determined according to the acceleration request; and an acceleration resource of the hardware acceleration device is allocated to the VNF, so as to perform acceleration processing on the VNF. According to the present invention, a corresponding hardware acceleration device can be dynamically selected for and allocated to a VNF, implementing virtualized management on the hardware acceleration device, and improving resource utilization.

Method and apparatus for implementing acceleration processing on VNF

A hardware acceleration method, a compiler, and a device, to improve code execution efficiency and implement hardware acceleration. The method includes: obtaining, by a compiler, compilation policy information and source code, where the compilation policy information indicates that a first code type matches a first processor and a second code type matches a second processor; analyzing, by the compiler, a code segment in the source code according to the compilation policy information, and determining a first code segment belonging to the first code type or a second code segment belonging to the second code type; and compiling, by the compiler, the first code segment into first executable code, and sending the first executable code to the first processor; and compiling the second code segment into second executable code, and sending the second executable code to the second processor.

A network service processing method and apparatus are provided. The method includes: partitioning a field-programmable gate array (FPGA) or a network processor (NP) into multiple mutually isolated service processing resources; receiving a first configuration instruction, where the first configuration instruction includes a first service configuration execution file; performing service configuration on a service processing resource according to the first service configuration execution file, so that the service processing resource performs service processing on a to-be-processed service packet; receiving a forwarding rule used when service forwarding is to be performed on the to-be-processed service packet; and receiving the to-be-processed service packet sent by a user terminal, and distributing the to-be-processed service packet to the service processing resource by using the forwarding rule, so that the service processing resource performs service processing on the to-be-processed service packet.

Growing community of inventors

Nanjing, China

Xinyu Hu