Huawei Technologies Co., Limited

Yuping Zhao

Xinyu Hu

Qian Cao

Yuming Xie

Jian Ye Chen

Liang Zhang

Hong Fei Zhou

Hongbo Zhao

Rong Zou

Hao Wang

Rui Chen

Hongguang Guan

Jian Chen

Hanyu Wei

Jijun Li

Dongtian Yang

An Internet Protocol Security (IPsec) acceleration method includes generating, by an Internet Key Exchange (IKE) device, an IKE link establishment session packet according to an IPSec configuration parameter and a security policy in a security policy database (SPD), sending, by the IKE device, the IKE link establishment session packet to a peer device, establishing a security association (SA) with the peer device, and sending, by the IKE module, the SA to a data forwarding device, where the IKE device and the data forwarding device are discrete devices.

IPSec acceleration method, apparatus, and system

A virtual machine live migration method, apparatus, and system relating to the field of communications technologies are disclosed. The method includes: in a process of live migration of a target virtual machine, obtaining pre-recorded storage location information corresponding to target service configuration information, where the target service configuration information is used by a target virtual acceleration component corresponding to the target virtual machine to perform service processing; reading the target service configuration information in a storage location corresponding to the storage location information; and sending the target service configuration information to a destination server, so that the destination server stores the target service configuration information. In the present disclosure, a service processing failure can be avoided.

Virtual machine live migration method, apparatus, and system

An accelerator loading apparatus obtains an acceleration requirement, where the acceleration requirement includes an acceleration function of a to-be-created virtual machine and acceleration performance of the to-be-created virtual machine. The accelerator loading apparatus determines a target accelerator that meets the acceleration function of the to-be-created virtual machine and the acceleration performance of the to-be-created virtual machine. The accelerator loading apparatus determines an image corresponding to the target accelerator, and sends an image loading command to a target host in which the target accelerator is located, where the image loading command is used to enable the target host to load the image for the target accelerator based on the image loading command.

Dynamic hardware accelerator selection and loading based on acceleration requirements

An accelerator loading apparatus obtains an acceleration requirement, where the acceleration requirement includes an acceleration function and acceleration performance of a to-be-created virtual machine, determines an image that meets the acceleration function and the acceleration performance, and determines a target host in which an available accelerator that can load the image is located, and then sends an image loading command to the target host. The image loading command includes a descriptor of the image, and is used to enable the target host to load the image for the available accelerator. In the method, a target host that can create the virtual machine may be determined based on the acceleration function and the acceleration performance of the to-be-created virtual machine, and an image used for acceleration is loaded to an available accelerator of the target host, to implement dynamic accelerator loading and deployment.

Accelerator loading method, system, and apparatus

A driver loading method and a server, where when receiving a service request, the server determines a first global index and a first global virtual function (VF) identifier corresponding to a first function description of a designated function included in the service request, determines a virtual machine (VM) corresponding to the service request, associates the first global VF identifier with the VM, allocates a first local index on the VM to the designated function, creates a correspondence between the first local index and the first function description, and sends the correspondence to the VM. The VM loads, according to the correspondence, a driver of the designated function for a first VF corresponding to the first global VF identifier. According to the foregoing method, different drivers can be loaded for VFs that have different functions and that are virtualized by a Peripheral Component Interconnect Express (PCIe) device.

Virtual function driver loading method and server using global and local identifiers corresponding to locations of the virtual functions

A method for implementing fault detection includes: instructing, by a detection device, a detected device to configure a detected path and a return path, where the detected path is a path from a first physical port of the detected device to a second physical port of the detected device via a target unit of the detected device, the return path is a path from the second physical port to the detection device, and the target unit is a VNF or an accelerator; sending a detection packet to the detected device through the first physical port; and when receiving the detection packet transmitted through the detected path and the return path, determining that the detected path is not faulty. According to the method, it can be further determined that the path that passes through the VNF or the accelerator is not faulty.

Multi-path fault detection

An Internet Protocol Security (IPSec) acceleration method, an apparatus, and a system, where the method includes generating, by an Internet Key Exchange (IKE) device, an IKE link establishment session packet according to an IPSec configuration parameter and a security policy in a security policy database (SPD), sending, by the IKE device, the IKE link establishment session packet to a peer device, establishing a security association (SA) with the peer device, and sending, by the IKE module, the SA to a data forwarding device. The IKE device and the data forwarding device are discrete devices. In this way, the IKE device and the data forwarding device can be deployed in different devices in order to increase the IPSec speed.

Ipsec acceleration method, apparatus, and system

A network service processing method and apparatus are provided. The method includes: partitioning a field-programmable gate array (FPGA) or a network processor (NP) into multiple mutually isolated service processing resources; receiving a first configuration instruction, where the first configuration instruction includes a first service configuration execution file; performing service configuration on a service processing resource according to the first service configuration execution file, so that the service processing resource performs service processing on a to-be-processed service packet; receiving a forwarding rule used when service forwarding is to be performed on the to-be-processed service packet; and receiving the to-be-processed service packet sent by a user terminal, and distributing the to-be-processed service packet to the service processing resource by using the forwarding rule, so that the service processing resource performs service processing on the to-be-processed service packet.

Network service processing method and apparatus

Embodiments of the present invention disclose a method, a device, and a system for obtaining a cost between nodes. The method includes: receiving, by a first server, a first cost request message from a client, where the first cost request message includes a first source node list, a first candidate node list, and a cost type; and calculating a cost between each source node in the first source node list and each candidate node in the first candidate node list according to the cost type. Network traffic management and optimization are implemented by using the technical solutions provided in the embodiments of the present invention, in which a cost between nodes is acquired from servers hierarchically deployed by an Internet service provider ISP and used as a basis of node selection.

Method, device, and system for acquiring cost between nodes

The disclosure relates to a method, device and system for processing content. In the method: a server receives a content acquiring request transmitted by a terminal. The server determines a first storage node list according to a mapping relation acquired in advance between contents and storage nodes. The first storage node list includes a plurality of first storage nodes that store a first content corresponding to the content acquiring request. The server transmits a sorting request to a network storage management server and receives a sorting result transmitted by the network storage management server. The sorting result includes priorities of the plurality of first storage nodes. The server transmits a content acquiring response to the terminal, where the content acquiring response includes first access information and priority of at least one of the first storage nodes.

Method, device and system for processing content

Embodiments of the present invention provide a method, an apparatus, and a proxy server for selecting cache replacement policies to reduce manual participation and switch cache replacement policies automatically. The method includes: obtaining statistical data of multiple cache replacement policies that are running simultaneously; and switching, according to an event of policy decision for cache replacement policies and the statistical data, an active cache replacement policy to a cache replacement policy that complies with a policy decision requirement. The automatic switching of cache replacement policies lowers the technical requirements on administrators. In addition, in the operation process of a proxy cache, a cache replacement policy that is applicable to a current scenario and meets a performance expectation of a user can be selected automatically, so as to make the technical solution feature good adaptability. Compared with the existing solution in which only a cache replacement policy is used throughout, the technical solution of the present invention can improve the performance of the proxy cache.

Method, apparatus, proxy server, and system for selecting cache replacement policies

Methods, systems and devices for transmitting DHCP message are provided according to the present invention so that encrypted transmission of user sensitive information is achieved. The method includes receiving, by a Dynamic Host Configuration Protocol (DHCP) server, a DHCP request from a DHCP relay agent, wherein the request carries encrypted relay agent options; decrypting, by the DHCP server, the encrypted relay agent options to obtain the relay agent options. With the present invention, safe transmission of the user sensitive information in the DHCP message is ensured.

Method, system and apparatus for transmitting DHCP messages

The present invention relates to mobile communications, and discloses a method and device for requesting and allocating connection point addresses. Therefore, transmission errors of subsequent messages of a terminal are avoided when the MIP registration of the terminal fails. The method includes: receiving a request for an IP address from a terminal and a MIP registration result of the terminal; and returning a response indicative of IP address allocation failure if the registration result is registration failure.

Method and device for requesting and allocating connection point address

A method, system, and apparatus for diagnosing a route in a network based on a Diameter protocol are provided. The method includes the following steps. A source Diameter node generates a diagnosis message and sends it. An intermediate Diameter node adds diagnosis information thereof to the diagnosis message after receiving it and forwards it until the diagnosis message is forwarded to a Diameter server capable of processing the diagnosis message or a Diameter node incapable of forwarding the diagnosis message. The Diameter server or the Diameter node generates a response message and sends it carrying diagnosis information thereof, information in the diagnosis message, and a response type. The intermediate Diameter node adds the diagnosis information thereof to the response message after receiving it, and forwards it until the response message is forwarded to the source Diameter node. The source Diameter node parses the response message to obtain route related information.

Growing community of inventors

Nanjing, China

Yuping Zhao