Abstract: A softAP bridge is created to support a mesh network that also works seamlessly with any home Wi-Fi AP routers by using Layer-3 techniques to simulate a Layer-2 bridge. With this softAP bridge, Wi-Fi chipsets with integrated special Wi-Fi MAC Layer-2 mesh network support (e.g., 802.11s), or external gateway hubs, are not required. To accomplish this solution, one of the wireless devices may be designated as a relay device for communicating IPv6 data packets between a home AP router and the remaining wireless devices designated as client devices.

Abstract: A distributed resource may be mapped into a virtual network, where the resource is distributed across a large number of nodes that are uniquely addressable within the distributed resource service's address space. The resource can be represented using a relatively small number of private VIP addresses within the virtual network, while still enabling access to all of the nodes that are uniquely addressable within the address space of the distributed resource service. A resource map may be created that relates the distributed resource service's address space to the virtual network's address space. The resource map may be used by a gateway that facilitates access to a distributed resource by clients. The resource map may also be used to translate packets that are sent from clients within a virtual network into the distributed resource service's address space.

Abstract: Embodiments of the present disclosure include a processing device that, responsive to detecting an unavailability of a first node device of a plurality of node devices of a network, activates a proxy device to correspond to the first node device, detects a consensus operation among the plurality of node devices, wherein the consensus operation comprises a plurality of vote transmissions within the network, and controls the proxy device to provide a proxy vote transmission as part of the consensus operation.

Abstract: A method for data transfer includes transmitting a sequence of data packets from a first computer over a network to a second computer in a single RDMA data transfer transaction. Upon receipt of a second packet in the sequence without previously having received the first packet, the second computer sends a NAK packet over the network to the first computer, indicating that the first packet was not received. A retransmission mode is selected responsively to the type of the transaction, such that when the transaction is of a first type, the first packet is retransmitted from the first computer to the second computer in response to the NAK packet without retransmitting the second packet, and when the transaction is of a second type, both the first and second packets are retransmitted from the first computer to the second computer in response to the NAK packet.

Abstract: A network infrastructure modernization service described herein may allow a customer to migrate the underlying network infrastructure topology and configurations of the on-premises environment onto the cloud environment. By collecting the network infrastructure configurations and/or runtime metrics, generating a network model based on the configurations and/or runtime metrics, and applying modernization rules to the network model to generate a network infrastructure template, the network infrastructure modernization service described in the present application enables the customers to be migrate their on-premises applications as well as the underlying network infrastructure onto the cloud environment.

Abstract: Systems and methods for phishing email training are disclosed. In one embodiment, in an information processing apparatus comprising at least one computer processor, a method for phishing email training may include: (1) receiving a target difficulty level, a target population, and a plurality of parameters for a test phishing email; (2) selecting a plurality of test email components from a library of test email components based on the parameters and the target difficulty level; (3) generating the test phishing using the selected test email components, wherein the test phishing email may include at least one of a hyperlink and an attachment; and (4) disseminating the test phishing email to the target population.

Abstract: In accordance with one aspect of the invention, an automation control device, such as a host or hub, is provided with functionality so that it becomes a multi-role automation control device. The multi-role automation control device is capable of controlling an expanded variety of “smart” or other devices. The multi-role automation control device may be implemented using a variety of underlying devices including a host, hub, soundbar, “smart” thermostat, “smart” amplifier, audio speaker, or other device.

Abstract: Systems and methods are provided for management of network segments that cross geographic regions and/or other types of network divisions in a cloud-based network environment. A cloud-based network provider's geographically-dispersed network infrastructure may serve as the core of a client's private wide area network, and the client may define isolated segments to which other networks (virtual private clouds, virtual private networks, etc.) may be attached. The various segments may remain logically isolated from each other even when implemented across some or all of the same regions—and using the same physical and/or virtual routing components—as other segments of the same client and/or other clients.

Abstract: Satellite virtual private clouds (VPCs) are described. A primary VPC is executed having one or more core services hosted therein that are required by one or more satellite VPCs. A satellite VPC is executed that is logically independent of the primary VPC networked environment. A peered connection between the primary VPC and the satellite VPC is established. The peered connection permits the satellite VPC networked environment to access the at least one core service hosted in the primary VPC. A customer account may be associated with a suitable permission to perform isolated development in the satellite VPC networked environment without impacting any service hosted by the primary VPC networked environment.

Abstract: The present invention relates a system and a method of recognizing and addressing network alarms in a computer network. A network adapter is configured to receive network alarms related to operating condition of network devices present in the computer network, wherein the network devices are managed by different vendors. Information present in the network alarms is analyzed to determine elements indicating the operating condition of the network devices. The elements may comprise at least one of keywords, object identifiers, and values of the object identifiers. A trained data model is finally used for mapping the network alarms with standard attributes. Based on such mappings, the network alarms are then addressed.

Abstract: Methods and systems for Internet Protocol (IP) address allocation optimization. A method includes a data collector collecting IP address information from sources of IP address inventory and an optimization controller generating a data set from the collected IP address information, minimizing IP address allocations for network components in a network using IP address allocation and IP address utilization for a network component from the data set, minimizing IP address inventory costs using IP address inventory and IP address utilization from the data set and IP address transactional costs, tracking the IP address inventory, sending configuration information to network component(s) to change respective IP address allocations based on minimized IP address allocation, sending transaction information to IP address provider(s) to change the IP address inventory based on minimized IP address inventory costs, and performing the above on a defined interval.

Abstract: A system for preventing unauthorized replay of a software container is disclosed. The system comprises a container manager configured to receive a software container from a customer and send a software container validation request comprising a software container identity in response. The software container enables delivery of a network slice and comprises a plurality of elements. The system also comprises an anti-rollback platform that is configured to receive the validation request from the container manager, search a data store for the software container identity, compare the elements of the software container to corresponding elements stored in the data store as associated with the software container identity in response to locating the software container identity in the data store, and validate the software container based on the comparison. The container manager provides the network slice to the customer in response to the validation.

Abstract: A method for communicating between a first network and a second network is described. The method includes receiving, by a network device via a persistent control channel established between the network device and a server device connected to a first network, a first message that includes: (1) information indicating a tunneling protocol, and (2) information associated with a first tunneling payload. The persistent control channel is for communicating: (1) messages including control information, and (2) messages including tunneling payloads. The method also includes transmitting, by the network device to an endpoint device connected to a second network, a second message including the information associated with the first tunneling payload.

Abstract: This disclosure describes techniques for providing a distributed scalable architecture for Network Address Translation (NAT) systems with high availability and mitigations for flow breakage during failover events. The NAT servers may include functionality to serve as fast-path servers and/or slow-path servers. A fast-path server may include a NAT worker that includes a cache of NAT mappings to perform stateful network address translation and to forward packets with minimal latency. A slow-path server may include a mapping server that creates new NAT mappings, depreciates old ones, and answers NAT worker state requests. The NAT system may use virtual mapping servers (VMSs) running on primary physical servers with state duplicated VMSs on different physical failover servers.

Abstract: One or a plurality of embodiments of the present application provide a system applicable for trip invitation, the system comprising: a server side, comprising a computer-readable storage medium having executable instructions, and a processor communicating with the computer-readable storage medium, wherein the executable instructions are configured to, when executed, cause the processor to: acquire a trip invitation of a first client directed to a second client, wherein the trip invitation comprises identification information of the first client and a location sharing request; and send the trip invitation to the second client.

Abstract: A computer-implemented method includes: extracting, by one or more processors, media data from an information technology ticket; extracting, by one or more processors, a plurality of data elements from the media data; and generating, by one or more processors, a ticket knowledge graph based on the plurality of data elements, wherein a node of the ticket knowledge graph represents a data element, and an edge between a first node and a second node in the ticket knowledge graph represents a correlation between a first data element represented by the first node and a second data element represented by the second node.

Abstract: Methods and devices provide fault injection testing techniques in a production network environment without risking service outages for hosted computing services, by providing examples of a remote network controller configured to communicate with network devices of a network; a remote fault injection communication protocol configuring a remote network controller in communication with a network device to signal a failure injection; and a failure injection module configuring a network device to configure a network device processor to implement a failure injection signaled according to the remote failure injection communication protocol. The method includes a network controller transmitting a failure injection signal in a control plane packet over a network connection to a network device, and the network device creating a child process by executing, in a dedicated runtime environment, a copy of one or more processes impacted by a parsed failure type.

Abstract: Certain aspects of the disclosure are directed to context aggregation in a data communications network. According to a specific example, process user-data communications between a client station and another station participating in data communications via the data communications services can be processed, where the client station is associated with one of a plurality of client entities configured and arranged to interface with a data communications server providing data communications services. Context information can be aggregated for each respective user-data communication between the client station and the participating station, where the context information corresponds to at least one communications-specific characteristic associated with the user-data communications.

Abstract: A method and system for determining and resolving network issues impacting application performance in multi-domain networks is disclosed. The method includes obtaining at least one of health and performance data associated with an application and one or more alerts related to fault and/or performance issues associated with the application. The method further includes determining at least one of network faults and performance issues that influence at least one of fault and/or performance issues associated with the application. The method further includes determining one or more underlying network problems that impact performance of the application. The method further includes determining at least one appropriate resolution action to address the one or more underlying network problems, implementing the at least one appropriate resolution action; monitoring an effectiveness of the implementation of the at least one appropriate resolution action; and adapting at least one of rules, parameters, and thresholds.

Abstract: A method for managing a network device that includes a network operating system (NOS) and a third-party network operating system (3PNOS) includes detecting a 3PNOS state change in a 3PNOS database managed by the 3PNOS, translating the 3PNOS state change into a network device state change, storing the network device state change in a state database managed by the NOS, in response to the storing: detecting a change in the state database by a NOS agent executing in the NOS, initiating, in response to detecting the change in the state database, an update to hardware on the network device by the NOS, wherein the 3PNOS does not directly manage the hardware.