Abstract: Systems and methods are provided for dynamic virtual private network concentrators (VPNC) gateway selection and on-demand VRF-ID configuration. A dynamic VPNC gateway selection component can dynamically route to a particular VPNC gateway based on multiple user-specific factors, including: a) behavior of users on the network; and b) performance of a destination service/device. A dynamic VPNC gateway selection component can rank a user based on one or more factors relating to the behavior of the user. Also, the dynamic VPNC gateway selection component can determine whether a VPNC gateway at a data center is healthy, and whether a destination service at the data center is healthy. The dynamic VPNC gateway selection component can dynamically select a VPNC gateway from a plurality of VPNC gateways at the data center for communicating forwarded traffic from the user based on the user's ranking if either the VPNC gateway or the service are unhealthy.

Abstract: A method is provided that includes receiving, at a first access point in a local area network, a request from a client device to access a wireless local area network. The method also includes creating authentication credentials for the client device based on an identification of the client device, and transmitting the authentication credentials for the client device to a second access point, wherein the first access point and the second access point share a secure block chain application. The method also includes allowing the client device to roam from the first access point to the second access point without requesting new authentication credentials. A system and a non-transitory, computer-readable medium storing instructions to perform the above method are also provided.

Abstract: In some examples, a system monitors a network that includes a collection of interconnected virtual network functions (VNFs), the monitoring comprising receiving control information from a VNF of the VNFs, the control information specifying an action to take to address an issue detected by the VNF. Responsive to the monitoring, the system modifies an allocation of resources to the VNF.

Abstract: In some examples, a first virtual network function (VNF) that is part of a collection of interconnected VNFs detects a service interruption in a network that includes the collection interconnected VNFs. In response to detecting the service interruption, the first VNF sends control information to a target entity, the control information specifying an action to take to change a communication flow through the collection of interconnected VNFs.

Abstract: An interface module in a user space intercepts a call from a first virtual process, the call to cause communication of data from the first virtual process to a second virtual process. The interface module accesses mapping information to redirect the communication of data to the second virtual process without passing through the protocol stack of a kernel, the mapping information comprising entries each including network addresses used in identifying a respective connection between corresponding virtual processes.

Abstract: Example implementations relate to a data processing method for monitoring at least one performance metric associated with a characteristic of a virtual network function; the method comprising instantiating the virtual network function, monitoring said at least one performance metric associated with the characteristic of the virtual network function; and adapting allocated resources supporting the virtual network function according to said monitoring.

Abstract: Systems and methods are provided for dynamic virtual private network concentrators (VPNC) gateway selection and on-demand VRF-ID configuration. A dynamic VPNC gateway selection component can dynamically route to a particular VPNC gateway based on multiple user-specific factors, including: a) behavior of users on the network; and b) performance of a destination service/device. A dynamic VPNC gateway selection component can rank a user based on one or more factors relating to the behavior of the user. Also, the dynamic VPNC gateway selection component can determine whether a VPNC gateway at a data center is healthy, and whether a destination service at the data center is healthy. The dynamic VPNC gateway selection component can dynamically select a VPNC gateway from a plurality of VPNC gateways at the data center for communicating forwarded traffic from the user based on the user's ranking if either the VPNC gateway or the service are unhealthy.

Abstract: An example system comprising a management server to execute a directory service for internet-of-things (IoT) devices deployed on the management server, the management server to receive a subscription message including a topic about the IoT devices from a client device, store an address of the client device and the corresponding topic subscribed by the client device in the directory service for the IoT devices, extract device information from a sensor, wherein the device information includes the topic about the IoT devices, and transmit a configuration packet to the sensor in response to an identification of the topic from the device information, wherein the configuration packet includes the address of the client device.

Abstract: In some examples, a system monitors a network that includes a collection of interconnected virtual network functions (VNFs), the monitoring comprising receiving control information from a VNF of the VNFs, the control information specifying an action to take to address an issue detected by the VNF. Responsive to the monitoring, the system modifies an allocation of resources to the VNF.

Abstract: In some examples, a first virtual network function (VNF) that is part of a collection of interconnected VNFs detects a service interruption in a network that includes the collection interconnected VNFs. In response to detecting the service interruption, the first VNF sends control information to a target entity, the control information specifying an action to take to change a communication flow through the collection of interconnected VNFs.

Abstract: An example network orchestrator includes processing circuitry and memory. Instructions of the memory, when executed by the processing circuitry, cause the network orchestrator to receive an indication that a branch gateway has joined a SD-WAN. The instructions further cause the network orchestrator to determine, based on parameters of the branch gateway, a geographic location of the branch gateway. The instructions further cause the network orchestrator to select a set of headend gateways located in a region including the geographic location of the branch gateway. The instructions further cause the network orchestrator to calculate a suitability score for each headend gateway based on the geographic location of the branch gateway in comparison to a geographic location of the each headend gateway. The instructions further cause the network orchestrator to assign the branch gateway to a headend gateway of the set of headend gateways with an optimal suitability score.

Abstract: A system and method for a self-adapting SDWAN to ensure compliance with client requirements. A SDWAN performance analyzer continuously monitors all of the nodes within an SDWAN, receiving a plurality of operational data regarding operational parameters of each node. Based on the operational data, a machine learning algorithm is applied to develop a tree-structure representative of a desired network configuration, based on the real-time state of the network, to ensure compliance with client requirements. The SDWAN performance analyzer can generate configuration commands to send to one or more of the nodes in the SDWAN to reconfigure the operational parameters of the nodes in line with the desired network configuration.

Abstract: Example implementations relate to a data processing method for monitoring at least one performance metric associated with a characteristic of a virtual network function; the method comprising instantiating the virtual network function, monitoring said at least one performance metric associated with the characteristic of the virtual network function; and adapting allocated resources supporting the virtual network function according to said monitoring.

Abstract: An example network orchestrator includes processing circuitry and memory. Instructions of the memory, when executed by the processing circuitry, cause the network orchestrator to receive an indication that a branch gateway has joined a SD-WAN. The instructions further cause the network orchestrator to determine, based on parameters of the branch gateway, a geographic location of the branch gateway. The instructions further cause the network orchestrator to select a set of headend gateways located in a region including the geographic location of the branch gateway. The instructions further cause the network orchestrator to calculate a suitability score for each headend gateway based on the geographic location of the branch gateway in comparison to a geographic location of the each headend gateway. The instructions further cause the network orchestrator to assign the branch gateway to a headend gateway of the set of headend gateways with an optimal suitability score.

Abstract: One or more nodes in a distributed trust-based network may receive an indication of one or more data transactions by an entity at a virtual network function service and a cryptocurrency transaction from the entity. A smart contract may record the cryptocurrency transaction in a distributed ledger in the distributed trust-based network. The smart contract may track usage of the virtual network function service by the entity by updating a transaction record associated with the entity in the smart contract to include an amount of data transacted by the virtual network function service for the one or more data transactions, where the transaction record is stored in the distributed ledger in the distributed trust-based network. The smart contract may generate billing information for the usage of the virtual network function service by the entity based at least in part on the transaction record associated with the entity.

Abstract: A method is provided that includes receiving, at a first access point in a local area network, a request from a client device to access a wireless local area network. The method also includes creating authentication credentials for the client device based on an identification of the client device, and transmitting the authentication credentials for the client device to a second access point, wherein the first access point and the second access point share a secure block chain application. The method also includes allowing the client device to roam from the first access point to the second access point without requesting new authentication credentials. A system and a non-transitory, computer-readable medium storing instructions to perform the above method are also provided.

Abstract: An interface module in a user space intercepts a call from a first virtual process, the call to cause communication of data from the first virtual process to a second virtual process. The interface module accesses mapping information to redirect the communication of data to the second virtual process without passing through the protocol stack of a kernel, the mapping information comprising entries each including network addresses used in identifying a respective connection between corresponding virtual processes.

Abstract: A system and method for a self-adapting SDWAN to ensure compliance with client requirements. A SDWAN performance analyzer continuously monitors all of the nodes within an SDWAN, receiving a plurality of operational data regarding operational parameters of each node. Based on the operational data, a machine learning algorithm is applied to develop a tree-structure representative of a desired network configuration, based on the real-time state of the network, to ensure compliance with client requirements. The SDWAN performance analyzer can generate configuration commands to send to one or more of the nodes in the SDWAN to reconfigure the operational parameters of the nodes in line with the desired network configuration.

Abstract: An example system comprising a management server to execute a directory service for internet-of-things (IoT) devices deployed on the management server, the management server to receive a subscription message including a topic about the IoT devices from a client device, store an address of the client device and the corresponding topic subscribed by the client device in the directory service for the IoT devices, extract device information from a sensor, wherein the device information includes the topic about the IoT devices, and transmit a configuration packet to the sensor in response to an identification of the topic from the device information, wherein the configuration packet includes the address of the client device.

Abstract: A network access server (NAS) determines the status of availability (e.g., how much more quota is unused) of an access resource, and sends a notification embedded in a point-to-point protocol (PPP) packet. The format of the packet is chosen such that definition/use of higher layers (e.g., HTTP) is not required to communicate the status to a client system. As a result, the user may be notified even if software such as web browser is not being executed on the client system.