Abstract: In an example implementation consistent with the features disclosed herein, network devices of a physical network are bucketized for automatic configuration based on statistical analysis of the quantity of network links for the network devices. The quantity of network links for each of the network devices is identified. A bucketing factor for the network devices is computed. The bucketing factor equals a sum of a mean and a confidence interval value for the quantity of network links for the network devices. A persona for a provisioned network device is recommend based on the bucketing factor. The persona is assigned to the provisioned network device. A network device configuration is applied to the provisioned network device based on the persona assigned to the provisioned network device. A virtual network may be created on the physical network.

Abstract: A circuit board cooling apparatus is disclosed having a heat spreader device to be thermally coupled with a surface of the circuit board to be cooled. Also, a conforming heat transfer device is disclosed that is thermally and physically coupled with the heat spreader device to conform to a surface contour of the heat spreader device on a first side of the heat transfer device. The cooling apparatus also includes a heat transport device physically attached and thermally coupled with a second side of the heat transfer device.

Abstract: In some examples, an electronic device includes a component comprising information, a secure storage, and a controller to generate a digital signature based on the information of the component, and detect a modification of the component based on the digital signature. The controller can also detect a receipt of an invalid credential, and log, to the secure storage, an indication of the modification of the component and an indication of the receipt of the invalid credential.

Abstract: Examples of performing an out-of-band firmware update of a server computing device are described. In an example, a first disk image is mounted onto a server computing device. The first disk image comprises a bootable firmware and is mounted in response to a mount command received through an out-of-band communication service. In another example, a second disk image is also mounted onto the server computing device. The second disk image is also mounted in response to another mount command received through the out-of-band communication service and is to provide a read-writable container, when mounted. Thereafter, a booting process of the server computing device may be initiated based on mounted first image to update the firmware of the server computing device. Information related to the update of the firmware is store in the read-writable container.

Abstract: Systems and methods are provided for efficiently routing data through a network having a plurality of switches configured in a fat-tree topology, including: receiving a data transmission comprising a plurality of packets at an edge port of the network, and routing the data transmission through the network with routing decisions based upon a routing table, wherein the routing table includes entries to effect routing decisions based upon a destination based hash function.

Abstract: Systems and methods described herein allow a configurable policy for managing Power over Ethernet (PoE) to be implemented by Power Sourcing Equipments (PSEs) across a network. The policy specifies a set of rules for prioritizing power distribution over Ethernet for the computer network. When Powered Devices (PDs) are connected via Ethernet cables to the PSEs, the PDs send identification information about themselves (e.g., device type and location) to the PSEs. The PSEs assign priority levels to the PDs by electronically comparing the identification information to the set of rules. When a present level of available power is insufficient to power all the PDs via PoE, the PSEs use the priority levels to determine which PDs to power down.

Abstract: A method of selectively connecting mobile devices to 4G and/or 5G networks includes preparing a plurality of isolated 4G and/or 5G networks configured to define a network federation and each having a Radio Access Network (RAN), a PDN Gateway node or a User Plane Function (UPF), and an application server; preparing a plurality of mobile devices; connecting the mobile devices to the networks to exchange data traffic with the application server via, at least, the RAN and the PDN Gateway or UPF node; preparing a connectivity network configured to selectively connect the networks to each other; selecting one reference PDN Gateway or UPF node associated with a network of the federation; and migrating the data traffic associated with all the mobile devices connected to the networks other than the reference network to the application server associated with the reference network that includes the previously selected PDN Gateway or UPF node.

Abstract: In some examples, a distributed computer system includes a plurality of computer nodes, where the plurality of computer nodes include respective programs to cooperate to perform a workload. A first computer node includes a communication proxy between the program of the first computer node and a communication library that supports communications between the program of the first computer node and the programs of other computer nodes of the plurality of computer nodes, and a fault management service to monitor a health of the other computer nodes, and in response to a detection of a fault of a second computer node of the plurality of computer nodes, relaunch the communication proxy. The relaunched communication proxy selects, from a plurality of states, a common state to which the programs are to roll back.

Abstract: A distributed policy management (PM) system (e.g., system for authentication, authorization, and accounting (AAA) activities on a network) is provided. Nodes of the PM system may share information of the PM system using a distributed data store (e.g., a multi-master cache). Each node of the distributed PM system may further share information from the distributed data store with other nodes of a corporate infrastructure network by augmenting information in a remote authentication dial-in user service (RADIUS) protocol message. Nodes that are involved in policy management (e.g., network authentication server (NAS) or firewall) without access to the distributed data store may receive information via augmented RADIUS messages. In this manner, devices may be interfaced to the distributed PM system without having access to the distributed data store. High availability and load balancing implementations may be provided by leveraging the distributed data store across nodes of the PM system.

Abstract: Methods and systems are provided for performing lossy dropping and ECN marking in a flow-based network. The system can maintain state information of individual packet flows, which can be set up or released dynamically based on injected data. Each flow can be provided with a flow-specific input queue upon arriving at a switch. Packets of a respective flow are acknowledged after reaching the egress point of the network, and the acknowledgement packets are sent back to the ingress point of the flow along the same data path. As a result, each switch can obtain state information of each flow and perform per-flow packet dropping and ECN marking.

Abstract: Decentralized machine learning to build models is performed at nodes where local training datasets are generated. A blockchain platform may be used to coordinate decentralized machine learning (ML) over a series of iterations. For each iteration, a distributed ledger may be used to coordinate the nodes communicating via a blockchain network. A node can include self-healing features to recover from a fault condition within the blockchain network in manner that does not negatively impact the overall learning ability of the decentralized ML system. During self-healing, the node can determine that a local ML state is not consistent with the global ML state and trigger a corrective action to recover the local ML state. Thereafter, the node can generate a blockchain transaction indicating that it is in-sync with the most recent iteration of training, and informing other nodes to reintegrate the node into ML.

Abstract: Examples described herein relate to configuration of access points including Internet-of-Things (IoT) radio. An access point identifier list is received from a network administration node in a network. Each access point identifier in the access point identifier list is uniquely associated with an access point, which includes an IoT radio. A first rules list is received from the network administration node. Each rule in the first rules list indicates a constraint and access point configuration values. An objective function is used to identify access point identifiers satisfying one or more of the constraints in the rules. The access points associated with the identified access point identifiers are configured with the access point configuration values as indicated in the rules.

Abstract: One aspect provides a method and system for saturation of multiple I/O slots by multiple testing ports and verification of link health in between. During operation, the system detects a testing card with a plurality of test ports which are coupled to a plurality of input/output (I/O) slots of a computing device. The system communicates with the plurality of test ports via the plurality of I/O slots. The system generates, by the computing device, a script for each test port, wherein the script comprises a series of read and write operations to be executed by the testing card on a memory device associated with the computing device. The system allows the plurality of test ports to execute the script and perform the corresponding read operations and write operations, thereby facilitating testing of the I/O slots of the computing device in parallel by the test ports of the single testing card.

Abstract: Systems and methods are provided for receiving a set of feature vectors. Each feature vector in the set may comprise feature values for a plurality of features associated with network communications. A first score for a first subset of the feature vectors that have at least one common feature value for a first feature of the plurality of features may be determined. A second score for a second subset of the feature vectors may be determined. The second subset may comprise the first subset and other feature vectors that have a different feature value for the first feature. Based on a change between the first score and the second score, whether to group the common feature value and the different feature value together may be determined.

Abstract: A method includes accessing an input representing a software component list for a software product. The software component list contains information for a given software component. The method includes accessing a knowledge base to determine security level parameters and trust parameters for the given software component based on the information. A security level of the given software component is determined based on an evaluation of the security level parameters. A trust of a source of the given software component is determined based on an evaluation of the trust parameters. The method includes determining a security context of the software product. Based on the security level, the trust and the security context, the method includes providing a recommendation for the given software component.

Abstract: Systems and methods are provided for adaptively enabling and disabling spatial reuse and adapting BSS color assignments based on various factors associated with a wireless network. A first AP in a wireless network can identify a second AP in a wireless network. The first AP and the second AP may be using the same wireless channel in the wireless network. The first AP can determine a signal strength, such as a received signal strength indicator (RSSI), associated with the second AP. The first AP can adapt its spatial reuse and BSS color assignment according to the signal strength and a signal strength threshold. By adaptively enabling and disabling spatial reuse and adapting BSS color assignments, the disclosed systems and methods provide for improved reuse of wireless mediums while avoiding collisions.

Abstract: Examples described herein relate to a system including a BC network associated with a plurality of entities in a defined geographic scope. A first entity of the plurality of entities includes a connected vehicle that generates vehicular data. The BC network is governed by a smart contract. The smart contract includes a data sharing policy defined by a user of the connected vehicle, wherein the data sharing policy allows the user of the connected vehicle to selectively share the vehicular data with one or more other entities of the plurality of entities.

Abstract: Implementations of the present disclosure relate to resource unit (RU) assignment to combat frequency selective fading. A method comprises determining, at an access point (AP), a plurality of channel qualities of a plurality of resource units (RUs) for a client. The plurality of RUs are configured to be available for communications with a plurality of clients comprising the client. The method further comprises determining, from the plurality of RUs, a target RU for the client based at least in part on the plurality of channel qualities. The target RU is to be used by the client for a following transmission with the AP. A target RU with good channel quality will be assigned to the client, thus the transmission and overall system performance will be enhanced.

Abstract: Example implementations relate to virtual persistent volumes. In an example, a storage virtualization system receives performance metrics related to usage of a virtual persistent volume by a containerized application. The performance metrics are identified in an application data store profile, and the application data store profile is identified based on an application manifest of the containerized application. The virtual persistent volume is modified based on an analysis of the performance metrics.

Abstract: Systems and methods are described for providing per traffic class routing of data within a network. A network switch has the capability to classify traffic data based on High Performance Computing (HPC) related characteristics. Traffic classes are defined based on aspects of HPC, such as routing, ordering, redirection, quiesce, HPC protocol configuration, and telemetry. A switch can receive packets at an ingress port of a switch fabric, and determine traffic classifications for the packets. The traffic classification is selected from a group of defined traffic classes. Then, the switch can generate a fabric specific flag for the at least one packet that indicates the determined traffic classification, where the fabric specific flag is used for routing packets based on their assigned traffic classification. Examples of traffic classes include: low latency class; dedicated access class; bulk data class; best efforts class; and scavenger class.