A plurality of computer nodes communicate using seemingly random Internet Protocol source and destination addresses. Data packets matching criteria defined by a moving window of valid addresses are accepted for further processing, while those that do not meet the criteria are quickly rejected. Improvements to the basic design include (1) a load balancer that distributes packets across different transmission paths according to transmission path quality; (2) a DNS proxy server that transparently creates a virtual private network in response to a domain name inquiry; (3) a large-to-small link bandwidth management feature that prevents denial-of-service attacks at system chokepoints; (4) a traffic limiter that regulates incoming packets by limiting the rate at which a transmitter can be synchronized with a receiver; and (5) a signaling synchronizer that allows a large number of nodes to communicate with a central node by partitioning the communication function between two separate entities.

Agile network protocol for secure communications with assured system availability

Method and apparatus providing connection-oriented services for packet switched data communications networks. Directory services include distributed discovery of MAC addresses and protocol alias addresses. Topology services include a link state topology exchange among switches, which provides each switch with a complete topology graph of the network. This enables an access switch receiving a data packet to determine a complete path from a source end system to a destination end system. Another service includes resolution of broadcast frames to unicast frames, in order to reduce the amount of broadcast traffic. Policy restrictions may be applied prior to connection setup. Path determination services enable multiple paths from a source to a destination. Connection management includes source routed mapping of connections on the desired path. A distributed call rerouting service is provided wherein if a link on an active path fails, each switch receives a topology change notification and unmaps any connection involving the failed link. A broadcast/unknown service provides restricted flooding of nonresolvable packets. Furthermore, connection-oriented switching is provided based on the source and destination MAC addresses as a connection identifier. Still further, resolution of networks outside the switch domain is enabled by access switches listening for network and server route advertisements and maintaining best routes to said networks and servers. The best route metrics may be combined with best path metrics to determine a path from a first access switch to an egress switch connected to the external network.

Distributed connection-oriented services for switched communication networks

The Wireless Integrated Network Sensor Next Generation (WINS NG) nodes provide distributed network and Internet access to sensors, controls, and processors that are deeply embedded in equipment, facilities, and the environment. The WINS NG network is a new monitoring and control capability for applications in transportation, manufacturing, health care, environmental monitoring, and safety and security. The WINS NG nodes combine microsensor technology, low power distributed signal processing, low power computation, and low power, low cost wireless and/or wired networking capability in a compact system. The WINS NG networks provide sensing, local control, remote reconfigurability, and embedded intelligent systems in structures, materials, and environments.

Apparatus for internetworked wireless integrated network sensors (wins)

A storage controller has at least one physical data port for a data network including host processors. The storage controller is programmed to provide a plurality of virtual ports for access to storage, and a virtual switch for routing storage access requests from the physical port to the virtual ports. The virtual ports and the virtual switch are defined by software. The virtual ports appear to the hosts as physical ports in the data network. For example, in a Fiber-Channel network, the virtual ports have World Wide Names (WWNs) and are assigned temporary addresses (S_Ds), and the virtual switch provides a name server identifying the WWNs and S_IDs of the virtual ports. For convenient partitioning of storage among host processors, one or more virtual ports are assigned to each host, and a set of storage volumes are made accessible from each virtual port. A host can access storage at a virtual port only if the virtual port has been assigned to the host. Preferably, storage can be accessed through each virtual port by no more than one assigned host, although a shared volume may be accessible from more than one virtual port. The storage controller may provide a service for reporting to a host the virtual ports through which the host can access storage, and the storage volumes that are accessible to the host through each of the virtual ports.

Virtual ports for data transferring of a data storage system

A virtual LAN system forms a virtual group which is based on elements having physical attribute or logical attribute and constituting a virtual LAN, sets a client address and priority of the virtual group in a virtual group registration table, and allocates unicast and broadcast traffic bands in group units.

Virtual LAN system

A port aggregation protocol (PAGP) dynamically aggregates redundant links between two neighboring devices in a computer network through the exchange of aggregation protocol data unit (AGPDU) frames between the two devices. Each AGPDU frame contains a unique identifier corresponding to the device sourcing the frame and a port number corresponding to the port through which the frame is forwarded. The exchange of AGPDU frames and the information contained therein allows the neighboring devices to identify those ports corresponding to the redundant links. Each device then dynamically aggregates its ports corresponding to the redundant links into a logical aggregation port (agport) which appears as a single, high-bandwidth port or interface to other processes executing on the device.

Port aggregation protocol

A method for establishing and maintaining virtual network domains in a segmented computer network having a first domain and a second domain. A first table entry for a first endstation in a first forwarding table of a first switching fabric circuit is created. The first table entry includes domain information specifying that the first endstation is in the first domain and port information specifying that the first endstation is coupled to a first port. A packet having the first endstation as a source is received by the first port of the first switching fabric circuit, and a destination for the packet is determined. If the packet specifies a second endstation of the first domain as the destination, the packet is forwarded to the second endstation. If the destination for the packet specifies more than one endstation, the domain of the source of the packet is determined, and the packet is forwarded to the specified endstations of the first domain. For a second embodiment, source and destination information are compared to determine forwarding information for a packet, and the packet is forwarded as specified by the forwarding information. For a third embodiment, intelligent selection between multiple paths to the same endstation is provided by the comparison of source and destination forwarding information.

Extended domain computer network using standard links

A switching fabric circuit that provides on-the-fly switching of packets, an expandable number of ports, and the interconnection of heterogeneous LAN segments. The switching fabric circuit includes a switching link that comprises a switching bus and a plurality of packet processors, wherein each packet processor is coupled between the switching bus and a LAN segment. The switching bus is a time division multiple access (TDMA) bus, and arbitration for switching bus access is distinct from arbitration for access to the ports of the switching fabric circuit. Switching bus arbitration is done according to one of two priority levels, wherein high priority requests are guaranteed access to the switching bus during a synchronization period in which the high priority requests are made. This provides for guaranteed throughput and on-the-fly switching of packets. Port arbitration may be either uniport port arbitration or multiport port arbitration. Port arbitration is characterized by the transmission of a POE mask by a source port to a destination port and by the subsequent transmission of a DPA signal by the destination port to the source port.

Computer network switching system with expandable number of ports

An arrangement facilitates rendering of a forwarding decision for a packet transferred between high-speed switches of a network using a path identifier (PTID) encapsulated within the packet. The PTID is a tag associated with a destination address of the packet and comprises a value that uniquely identifies a corresponding entry of a forwarding table of the switch. Rather than requiring a full compare of the destination address with the contents of the forwarding table, the PTID is used as a direct index address into the table that identifies the corresponding entry in a fast and efficient manner.

Arrangement for rendering forwarding decisions for packets transferred among network switches

The present invention provides a protection protocol for fault recovery, such as a ring wrap, for a network, such as a two line bi-directional ring network. An embodiment of the present invention works in conjunction with a ring topology network in which a node in the network can identify a problem with a connection between the node and a first neighbor. The present invention provides a protection protocol which simplifies the coordination required by the nodes in a ring network. The nodes do not need to maintain a topology map of the ring, identifying and locating each node on the ring, for effective protection. Additionally, independently operating ring networks can be merged and the protection protocol will appropriately remove a protection, such as a ring wrap, to allow the formation of a single ring. It also provides for multiple levels of protection priority so that protection for a high priority failure, such as a physical break in a connection, would remove protection for a low priority failure, such as a signal degrade, on another link.

Hon Wah Chin

Papers

Port aggregation protocol

Extended domain computer network using standard links

Computer network switching system with expandable number of ports

Arrangement for rendering forwarding decisions for packets transferred among network switches

System and method for fault recovery for a two line bi-directional ring network