Abstract: A distributed policy management (PM) system (e.g., system for authentication, authorization, and accounting (AAA) activities on a network) is provided. Nodes of the PM system may share information of the PM system using a distributed data store (e.g., a multi-master cache). Each node of the distributed PM system may further share information from the distributed data store with other nodes of a corporate infrastructure network by augmenting information in a remote authentication dial-in user service (RADIUS) protocol message. Nodes that are involved in policy management (e.g., network authentication server (NAS) or firewall) without access to the distributed data store may receive information via augmented RADIUS messages. In this manner, devices may be interfaced to the distributed PM system without having access to the distributed data store. High availability and load balancing implementations may be provided by leveraging the distributed data store across nodes of the PM system.

Abstract: Methods and systems are provided for performing lossy dropping and ECN marking in a flow-based network. The system can maintain state information of individual packet flows, which can be set up or released dynamically based on injected data. Each flow can be provided with a flow-specific input queue upon arriving at a switch. Packets of a respective flow are acknowledged after reaching the egress point of the network, and the acknowledgement packets are sent back to the ingress point of the flow along the same data path. As a result, each switch can obtain state information of each flow and perform per-flow packet dropping and ECN marking.

Abstract: Systems and methods are provided for receiving a set of feature vectors. Each feature vector in the set may comprise feature values for a plurality of features associated with network communications. A first score for a first subset of the feature vectors that have at least one common feature value for a first feature of the plurality of features may be determined. A second score for a second subset of the feature vectors may be determined. The second subset may comprise the first subset and other feature vectors that have a different feature value for the first feature. Based on a change between the first score and the second score, whether to group the common feature value and the different feature value together may be determined.

Abstract: Examples described herein relate to configuration of access points including Internet-of-Things (IoT) radio. An access point identifier list is received from a network administration node in a network. Each access point identifier in the access point identifier list is uniquely associated with an access point, which includes an IoT radio. A first rules list is received from the network administration node. Each rule in the first rules list indicates a constraint and access point configuration values. An objective function is used to identify access point identifiers satisfying one or more of the constraints in the rules. The access points associated with the identified access point identifiers are configured with the access point configuration values as indicated in the rules.

Abstract: Decentralized machine learning to build models is performed at nodes where local training datasets are generated. A blockchain platform may be used to coordinate decentralized machine learning (ML) over a series of iterations. For each iteration, a distributed ledger may be used to coordinate the nodes communicating via a blockchain network. A node can include self-healing features to recover from a fault condition within the blockchain network in manner that does not negatively impact the overall learning ability of the decentralized ML system. During self-healing, the node can determine that a local ML state is not consistent with the global ML state and trigger a corrective action to recover the local ML state. Thereafter, the node can generate a blockchain transaction indicating that it is in-sync with the most recent iteration of training, and informing other nodes to reintegrate the node into ML.

Abstract: In some examples, a distributed computer system includes a plurality of computer nodes, where the plurality of computer nodes include respective programs to cooperate to perform a workload. A first computer node includes a communication proxy between the program of the first computer node and a communication library that supports communications between the program of the first computer node and the programs of other computer nodes of the plurality of computer nodes, and a fault management service to monitor a health of the other computer nodes, and in response to a detection of a fault of a second computer node of the plurality of computer nodes, relaunch the communication proxy. The relaunched communication proxy selects, from a plurality of states, a common state to which the programs are to roll back.

Abstract: One aspect provides a method and system for saturation of multiple I/O slots by multiple testing ports and verification of link health in between. During operation, the system detects a testing card with a plurality of test ports which are coupled to a plurality of input/output (I/O) slots of a computing device. The system communicates with the plurality of test ports via the plurality of I/O slots. The system generates, by the computing device, a script for each test port, wherein the script comprises a series of read and write operations to be executed by the testing card on a memory device associated with the computing device. The system allows the plurality of test ports to execute the script and perform the corresponding read operations and write operations, thereby facilitating testing of the I/O slots of the computing device in parallel by the test ports of the single testing card.

Abstract: A method includes accessing an input representing a software component list for a software product. The software component list contains information for a given software component. The method includes accessing a knowledge base to determine security level parameters and trust parameters for the given software component based on the information. A security level of the given software component is determined based on an evaluation of the security level parameters. A trust of a source of the given software component is determined based on an evaluation of the trust parameters. The method includes determining a security context of the software product. Based on the security level, the trust and the security context, the method includes providing a recommendation for the given software component.

Abstract: Systems and methods are provided for adaptively enabling and disabling spatial reuse and adapting BSS color assignments based on various factors associated with a wireless network. A first AP in a wireless network can identify a second AP in a wireless network. The first AP and the second AP may be using the same wireless channel in the wireless network. The first AP can determine a signal strength, such as a received signal strength indicator (RSSI), associated with the second AP. The first AP can adapt its spatial reuse and BSS color assignment according to the signal strength and a signal strength threshold. By adaptively enabling and disabling spatial reuse and adapting BSS color assignments, the disclosed systems and methods provide for improved reuse of wireless mediums while avoiding collisions.

Abstract: Examples described herein relate to a system including a BC network associated with a plurality of entities in a defined geographic scope. A first entity of the plurality of entities includes a connected vehicle that generates vehicular data. The BC network is governed by a smart contract. The smart contract includes a data sharing policy defined by a user of the connected vehicle, wherein the data sharing policy allows the user of the connected vehicle to selectively share the vehicular data with one or more other entities of the plurality of entities.

Abstract: Examples discussed herein relate to managing power allocation for devices, such as network devices, with processing chip. In some examples, based on determining that a first temperature measurement of the processing chip does not satisfy an operating temperature threshold, the network device allocates power from a power source to a first heating element of the network device to heat the processing chip & allocates power from the power source to a second heating element of the network device to heat the processing chip. Based on determining that a second temperature measurement satisfies the operating temperature threshold, the network device allocates power from the power source to a set of power over ethernet ports of the network device & the first amount of power from the power source selectively to the first heating element to heat the processing chip.

Abstract: Implementations of the present disclosure relate to resource unit (RU) assignment to combat frequency selective fading. A method comprises determining, at an access point (AP), a plurality of channel qualities of a plurality of resource units (RUs) for a client. The plurality of RUs are configured to be available for communications with a plurality of clients comprising the client. The method further comprises determining, from the plurality of RUs, a target RU for the client based at least in part on the plurality of channel qualities. The target RU is to be used by the client for a following transmission with the AP. A target RU with good channel quality will be assigned to the client, thus the transmission and overall system performance will be enhanced.

Abstract: In some examples, a controller for a storage system separate from a host system checks whether a storage cartridge in a storage system is associated with an indication set, in an electronic memory, during a configuration operation in the storage system to indicate write protection is enabled for the storage cartridge. In response to determining that the storage cartridge is associated with the indication, the controller triggers the write protection for the storage cartridge to prevent writing of data to the storage cartridge if the storage cartridge already contains previously written data.

Abstract: Example implementations relate to virtual persistent volumes. In an example, a storage virtualization system receives performance metrics related to usage of a virtual persistent volume by a containerized application. The performance metrics are identified in an application data store profile, and the application data store profile is identified based on an application manifest of the containerized application. The virtual persistent volume is modified based on an analysis of the performance metrics.

Abstract: Systems and methods are provided for discoverability detection of network services. The present disclosure provides for a cloud-based network insight server that collects performance information of a network and a network agent, communicating with the cloud-based network insight server, that monitors discoverability of network services hosted by devices on the network. The network agent receives configuration information from the cloud-based network insight server and transmits discoverability states of the devices to the cloud-based network insight server based on executing a service discovery process through an access point on the network.

Abstract: Systems and methods are described for providing per traffic class routing of data within a network. A network switch has the capability to classify traffic data based on High Performance Computing (HPC) related characteristics. Traffic classes are defined based on aspects of HPC, such as routing, ordering, redirection, quiesce, HPC protocol configuration, and telemetry. A switch can receive packets at an ingress port of a switch fabric, and determine traffic classifications for the packets. The traffic classification is selected from a group of defined traffic classes. Then, the switch can generate a fabric specific flag for the at least one packet that indicates the determined traffic classification, where the fabric specific flag is used for routing packets based on their assigned traffic classification. Examples of traffic classes include: low latency class; dedicated access class; bulk data class; best efforts class; and scavenger class.

Abstract: A method for configuring a computer system memory, includes powering on the computer system; retrieving options for initializing the computer system; assigning to a first segment of the memory a first pre-defined setting; assigning to a second segment of the memory a second pre-defined setting; and booting the computer system.

Abstract: A process includes receiving data representing states of a plurality of nodes of a cluster. The process includes, based on the states, generating data to display, in a text mode on a display device, a plurality of text character status indicators. First text character status indicators are arranged in a first grid that correspond to a physical layout of first nodes in a first computer system rack, and each first text character status indicator represents a status of a corresponding first node.

Abstract: Implementations disclosed herein provide for devices and methods for obtaining parity time (PT) symmetric directional couplers through improved phase tuning, along with separate optical gain and optical loss tuning. The present disclosure integrates phase tuning and optical gain/loss tuning structures into waveguides of directional couplers disclosed herein. In some examples, directional couplers disclosed herein integrate one or more hybrid metal-oxide-semiconductor capacitors (MOSCAPs) formed by a dielectric layer between two semiconductor layers that provide for phase tuning via plasma dispersion and/or carrier accumulation depending on voltage bias polarity, and one or more optically active medium that provide for optical gain or loss tuning depending on voltage bias polarity.

Abstract: Examples described herein relate to techniques for authenticating a client device by obtaining device-type information during an initial phase of authentication process. According to some examples, identifying a client device intending to connect to a network and sending an identity-request thereto. Receiving an identity-response from the client device along with device-type information. Identifying a device category from a set of device categories corresponding to identified device-type information. Selecting a device policy applicable to the identified device-type information. Authenticating the client device to enable access to the network and applying the selected device policy to the client device.