Abstract: Allowing a network function (such as a router, firewall or SD-WAN endpoint) or service chain of network functions to transparently access a network uplink, while also allowing a set of management entities to access the same link without interference or configuration. To the extent that a conflict arises between ports allocated to the management functions and to the network functions, the relevant port is automatically removed from use by management functions and allocated to network functions to end the conflict.

Abstract: In various example embodiments, a system and method are provided for a service data platform. The service data platform includes an application management API configured to receive software uploaded by a third party using a management application API. The service data platform also includes a plurality of graph servers configured to identify a group of lighting nodes to distribute the uploaded software and determine the uploaded software is safe for deployment to the identified group of lighting nodes. The service data platform further includes a device manager configured to distribute, using an administrative API, the uploaded software to the identified group of lighting nodes.

Abstract: Obtaining location metadata for network devices using augmented reality (AR) is disclosed herein. In one embodiment, an AR computing device receives first user inputs indicating boundary points of a device region, and determines first spatial coordinates for each boundary point. The AR computing device next receives a second user input that indicates a network device within the device region, and determines second spatial coordinates for the network device. The AR computing device may also correlate the network device with a known connected network device. The AR computing device then transmits, to a server computing device, first metadata that includes the first spatial coordinates and an identifier of the device region, and second metadata that includes the second spatial coordinates and an identifier of the indicated network device. In some embodiments, the metadata may be employed, e.g., to generate a floorplan visualization and/or a signal strength map of the device region.

Abstract: Some embodiments of the invention provide novel methods for facilitating a distributed SNAT (dSNAT) middlebox service operation for a first network at a host computer in the first network on which the dSNAT middlebox service operation is performed and a gateway device between the first network and a second network. The novel methods enable dSNAT that provides stateful SNAT at multiple host computers, thus avoiding the bottleneck problem associated with providing stateful SNAT at gateways and also significantly reduces the need to redirect packets received at the wrong host by using a capacity of off-the-shelf gateway devices to perform IPv6 encapsulation for IPv4 packets and assigning locally unique IPv6 addresses to each host executing a dSNAT middlebox service instance that are used by the gateway device.

Abstract: Embodiments relate to an intelligent computer platform to use ground truth data to rate source reliability, and application of the source reliability. A computer system, computer program product, and computer implemented method apply the ground truth data to evaluate a source, assess source reliability, and dynamically apply the assessed reliability. The assessed reliability is dynamically applied to response data, with the application yielding selective presentation of the response data based on the applied reliability assessment.

Abstract: Methods and systems for managing security in a cloud computing environment are provided. Exemplary methods include: gathering data about workloads and applications in the cloud computing environment; updating a graph database using the data, the graph database representing the workloads of the cloud computing environment as nodes and relationships between the workloads as edges; receiving a security template, the security template logically describing targets in the cloud computing environment to be protected and how to protect the targets; creating a security policy using the security template and information in the graph database; and deploying the security policy in the cloud computing environment.

Abstract: Systems and methods are provided for generating content. The systems and methods include operations for: identifying a content item generation template that is associated with instructions for generating a content item; displaying, by a messaging application, an identifier of the content item generation template; receiving, by the messaging application, input that selects the identifier of the content item generation template; retrieving, by the messaging application, a plurality of content items associated with the content item generation template, each of the plurality of content items having been previously generated by a respective user of a plurality of users of the messaging application in accordance with the instructions associated with the content item generation template; and displaying, by the messaging application, the retrieved plurality of content items associated with the content item generation template.

Abstract: A computer-implemented method of data transmission comprises: closing a displayed message on a display; displaying an inbox; displaying a reply window in the inbox; receiving reply input in the reply window; and transmitting the reply input to a sender of the closed message.

Abstract: Differentiated sidecars in a service mesh may be provided. A first routing rule includes a first plurality of weights to be associated with a first plurality of data paths of a first microservice instance may be received. Next, first mapping between a first set of features associated with the first microservice instance and the first plurality of weights may be determined. Then a second microservice instance may be detected and a second set of features associated with the second microservice instance may be detected. A second routing rule comprising a second plurality of weights to be associated with a second plurality of data paths of the second microservice instance may be determined. The second plurality of weights may be determined such that a second mapping between the second set of features and the second plurality of weights imitates the first mapping.

Abstract: A network communication device includes a plurality of ports, a memory, and a processor. The plurality of ports is configured to receive a packet. A memory is configured to store a first lookup table and a second lookup table. An entry of the first lookup table includes a flag field. An entry of the second lookup table includes an entry address of the first lookup table. The processor is coupled to the memory and the plurality of ports. The network communication device is configured to: analyze the packet by a software or hardware to obtain a source Media Access Control (MAC) address; obtain, according to the source MAC address of the packet, the entry of the first lookup table; read the flag field of the entry; and determine, according to the flag field, whether the entry is referred by the second lookup table.

Abstract: A method and system for protecting against quick UDP Internet connection (QUIC) based denial-of-service (DDoS) attacks. The system comprises extracting traffic features from at least traffic directed to a protected entity, wherein the traffic features demonstrate behavior of QUIC user datagram protocol (UDP) traffic directed to the protected entity, wherein the extract traffic features include at least one rate-base feature and at least one rate-invariant feature, and wherein the at least traffic includes QUIC packets; computing at least one baseline for each of the at least one rate-base feature and the at least one rate-invariant feature; and analyzing real-time samples of traffic directed to the protected entity to detect a deviation from each of the at least one computed baseline, wherein the deviation is indicative of a detected QUIC DDoS attack; and causing execution of at least one mitigation action when an indication of the detected QUIC DDoS attack is determined.

Abstract: A novel machine learning-based network analytics, troubleshoot, and self-healing system identifies and locates sources of data network problems autonomously within an entire end-to-end network topology of a network operator, while not necessitating human diagnosis of the data network problems. This system uniquely embeds a smart universal telemetry (SUT) as a quality-of-experience (QoE) parameter collection agent in intermediary transport-level network equipment and each end-user modem, which in turn enables on-demand collection of robust diagnostic data from all end-user modems and intermediary transport level nodes in a data network.

Abstract: In a telecommunications network, a network node processes messages according to different sets of user-programmable message processing rules. The network node includes an input for receiving a series of input messages which are processed in a message manipulation function. Processed messages are also output from the network node according different communication protocols.

Abstract: A server computer can be quickly allocated to and made ready for use by users of a tenant by adding and starting, on that server computer, copies of a process implementing the tenant's virtual machine, based on a gold image virtual machine for that tenant. The gold image virtual machine also has an associated gold image virtual disk. The virtual machines on the server computer are associated with virtual disks that are linked clones based on the gold image virtual disk, such as linked clones of a replica of the gold image virtual disk. Each virtual machine for a tenant on the new server computer also is added to the tenant computer network. Server computers for multiple tenants can be grouped into a cluster, and can use anti-affinity rules to limit instantiation of virtual machines of each tenant only on server computers dedicated to the tenant.

Abstract: Embodiments of the present disclosure sets forth a computer-implemented method comprising obtaining sensor data associated with a driver of a vehicle, determining a state associated with the driver based on the sensor data, and transmitting the state associated with the driver to a teleconference session, wherein the driver is at least one of a participant or an invitee to the teleconference session.

Abstract: A method for establishing a stream in a Time-Sensitive Networking (TSN) network, wherein a request message is sent by a stream subscriber to a Domain Name System (DNS) server, upon which entries are stored that each comprise a stream identifier of a first type assigned to a stream, and a stream identifier of a second type that is different from the first type and is assigned to the respective stream, and the specification of a predefined type exclusively used for, or forms these types of entries, where the request message comprises a stream identifier of the first type and the predefined type known to the at least one stream subscriber, where the stream subscriber receives a response message from the DNS server, which contains a stream identifier of the second type belonging to the stream, and where the stream subscriber logs on to the stream using the stream identifier obtained.

Abstract: A capacity planning method for Always On Availability Group, AG, cluster renewal includes selecting a source AG cluster to be replaced with a target AG cluster, selecting at least one performance monitor and monitoring performance of instances and databases to obtain time series. Trends of the time series are defined and at least one benchmark value is obtained for source and target nodes and calculating at least one benchmark ratio. The time series are adjusted based on the defined trends and the at least one benchmark ratio. A logical grouping of instances and databases is constituted, and workloads of the logical groups are calculated for each node on basis of the adjusted time series. A required capacity of the target AG cluster nodes is predicted. Finally, the required capacity of the target AG cluster nodes is compared to verify, whether the target node has sufficient capacity.

Abstract: The present disclosure provides a method for responding to video call service and system, including: receiving a video call service request by the video call device; calling a video call connection process to establish a video call data transmission link with the call peer based on a communication address; locally acquiring a target file as indicated by the file transmission request, and determining a link number of the file transmission link for transmitting the target file according to the communication address and a file type of the target file, if a file transmission request sent by the call peer is received; uploading the target file to a file push server through a file uplink if the link number is not included in a local link list; and transmitting the target file to the call peer through the file transmission link corresponding to the link number.

Abstract: A method of network-based media processing (NBMP) can include receiving a function description of a media processing function from a function repository at a workflow manager in an NBMP system. The function description can include a configuration descriptor providing configuration information of parameters for the media processing function. The parameters can have logical relationships represented by a parameter representation graph constructed according to a set of rules. The media processing function can be instantiated as a media processing task that is part of a workflow. The media processing task can be configured based on the configuration information of the parameters in the configuration descriptor.

Abstract: A system is provided for a rendering stream distributor controller for use with a plurality of content sources, a HTML code repository, a plurality of video rendering engines and a distribution network. The rendering stream distributor controller includes an outbound IP address inventory system, a video rendering engine and network elements inventory system and a rendering stream controller. The rendering stream controller is able to provide a stream instruction, based on one of a plurality of outbound IP addresses, one of a plurality of HTML content identification data, and one of a plurality of sets of HTML code so as to instruct one of the plurality of video rendering engines to output an MPEG transport stream.