Abstract: Systems, methods, and computer-readable storage media are provided for managing connected data transfer sessions in a computing network. A controller included in the computing network can monitor connected data transfer sessions to determine whether a predetermined threshold has been met or exceeded and, if so, terminate at least one connected data transfer session in the computing network. The threshold can include a threshold number of connected data communication sessions and/or a threshold amount of resources utilized by the connected data communication sessions. The controller can terminate connected data transfer sessions until the total number of connected data communication sessions and/or threshold amount of resources falls below the threshold.

Abstract: Systems, methods, and computer-readable storage media are provided for managing status of state machines in a computing network. Various embodiments of the present technology can be used to track and maintain an active log associated with each state machine in a computing network. The active log of a state machine can be periodically analyzed at a predetermined time interval to determine an anticipated state of the state machine and a current state of the state machine. In response to determining that the state machine is in an inconsistent state (i.e., the anticipated state does not match the current state of the state machine), a suitable action can be taken to switch the current state of the state machine from the inconsistent state to a suitable new state.

Abstract: Systems, methods, and computer-readable storage media are provided for managing connected data transfer sessions in a computing network. A controller included in the computing network can monitor connected data transfer sessions to determine whether a predetermined threshold has been met or exceeded and, if so, terminate at least one connected data transfer session in the computing network. The threshold can include a threshold number of connected data communication sessions and/or a threshold amount of resources utilized by the connected data communication sessions. The controller can terminate connected data transfer sessions until the total number of connected data communication sessions and/or threshold amount of resources falls below the threshold.

Abstract: Systems, methods, and computer-readable storage media are provided for managing connected data transfer sessions in a computing network. A controller included in the computing network can monitor connected data transfer sessions to determine whether a predetermined threshold has been met or exceeded and, if so, terminate at least one connected data transfer session in the computing network. The threshold can include a threshold number of connected data communication sessions and/or a threshold amount of resources utilized by the connected data communication sessions. The controller can terminate connected data transfer sessions until the total number of connected data communication sessions and/or threshold amount of resources falls below the threshold.

Abstract: Systems, methods, and computer-readable storage media are provided for managing status of state machines in a computing network. Various embodiments of the present technology can be used to track and maintain an active log associated with each state machine in a computing network. The active log of a state machine can be periodically analyzed at a predetermined time interval to determine an anticipated state of the state machine and a current state of the state machine. In response to determining that the state machine is in an inconsistent state (i.e., the anticipated state does not match the current state of the state machine), a suitable action can be taken to switch the current state of the state machine from the inconsistent state to a suitable new state.

Abstract: Systems, methods, and computer-readable storage media are provided for managing status of state machines in a computing network. Various embodiments of the present technology can be used to track and maintain an active log associated with each state machine in a computing network. The active log of a state machine can be periodically analyzed at a predetermined time interval to determine an anticipated state of the state machine and a current state of the state machine. In response to determining that the state machine is in an inconsistent state (i.e., the anticipated state does not match the current state of the state machine), a suitable action can be taken to switch the current state of the state machine from the inconsistent state to a suitable new state.

Abstract: Systems, methods, and computer-readable media are provided for enforcing policy for upstream (e.g., traffic from an endpoint to the physical network layer or hardware fabric of a data center) flood traffic (e.g., broadcast, unknown unicast, or multicast traffic) originating from a virtual endpoint via a network fabric. In one embodiment, upstream flood traffic can be transmitted using a special multicast group to which only elements of the data center fabric (e.g., physical switches, routers) are subscribed. That is, upstream flood traffic is assigned to the special multicast group, resulting in unintended endpoints not receiving the flood traffic. However, the hardware fabric receives the flood traffic and will then enforce applicable policies to route the packets to intended endpoints.

Abstract: Systems, methods, and computer-readable media are provided for enforcing policy for upstream (e.g., traffic from an endpoint to the physical network layer or hardware fabric of a data center) flood traffic (e.g., broadcast, unknown unicast, or multicast traffic) originating from a virtual endpoint via a network fabric. In one embodiment, upstream flood traffic can be transmitted using a special multicast group to which only elements of the data center fabric (e.g., physical switches, routers) are subscribed. That is, upstream flood traffic is assigned to the special multicast group, resulting in unintended endpoints not receiving the flood traffic. However, the hardware fabric receives the flood traffic and will then enforce applicable policies to route the packets to intended endpoints.

Abstract: Systems, methods, and computer-readable storage media are provided for dynamically setting an end point group for an end point. An endpoint can be assigned a default end point group when added to a network. For example, the default end point group can be a baseline port/security group which is considered an untrusted group. The end point can then be dynamically assigned an end point group based on a set of group selection rules. For example, the group selection rules can identify an end point group based on the MAC address or other attributes. When the end point is added to the network, the MAC address and/or other attributes of the end point can be determined and used to assign an end point group. As another example, an end point group can be assigned based on the amount of traffic or guest operation system.

Abstract: Systems, methods, and computer-readable media are provided for enforcing policy for upstream (e.g., traffic from an endpoint to the physical network layer or hardware fabric of a data center) flood traffic (e.g., broadcast, unknown unicast, or multicast traffic) originating from a virtual endpoint via a network fabric. In one embodiment, upstream flood traffic can be transmitted using a special multicast group to which only elements of the data center fabric (e.g., physical switches, routers) are subscribed. That is, upstream flood traffic is assigned to the special multicast group, resulting in unintended endpoints not receiving the flood traffic. However, the hardware fabric receives the flood traffic and will then enforce applicable policies to route the packets to intended endpoints.

Abstract: Systems, methods, and computer-readable storage media are provided for managing connected data transfer sessions in a computing network. A controller included in the computing network can monitor connected data transfer sessions to determine whether a predetermined threshold has been met or exceeded and, if so, terminate at least one connected data transfer session in the computing network. The threshold can include a threshold number of connected data communication sessions and/or a threshold amount of resources utilized by the connected data communication sessions. The controller can terminate connected data transfer sessions until the total number of connected data communication sessions and/or threshold amount of resources falls below the threshold.

Abstract: Systems, methods, and computer-readable storage media are provided for dynamically setting an end point group for an end point. An endpoint can be assigned a default end point group when added to a network. For example, the default end point group can be a baseline port/security group which is considered an untrusted group. The end point can then be dynamically assigned an end point group based on a set of group selection rules. For example, the group selection rules can identify an end point group based on the MAC address or other attributes. When the end point is added to the network, the MAC address and/or other attributes of the end point can be determined and used to assign an end point group. As another example, an end point group can be assigned based on the amount of traffic or guest operation system.

Abstract: Systems, methods, and computer-readable storage media are provided for managing status of state machines in a computing network. Various embodiments of the present technology can be used to track and maintain an active log associated with each state machine in a computing network. The active log of a state machine can be periodically analyzed at a predetermined time interval to determine an anticipated state of the state machine and a current state of the state machine. In response to determining that the state machine is in an inconsistent state (i.e., the anticipated state does not match the current state of the state machine), a suitable action can be taken to switch the current state of the state machine from the inconsistent state to a suitable new state.

Abstract: Systems, methods, and computer-readable media are provided for enforcing policy for upstream (e.g., traffic from an endpoint to the physical network layer or hardware fabric of a data center) flood traffic (e.g., broadcast, unknown unicast, or multicast traffic) originating from a virtual endpoint via a network fabric. In one embodiment, upstream flood traffic can be transmitted using a special multicast group to which only elements of the data center fabric (e.g., physical switches, routers) are subscribed. That is, upstream flood traffic is assigned to the special multicast group, resulting in unintended endpoints not receiving the flood traffic. However, the hardware fabric receives the flood traffic and will then enforce applicable policies to route the packets to intended endpoints.

Abstract: Flows of packets are dynamically mapped to resource queues. Flows of packets are received at a network device to be routed from the network device in a network. Each flow comprises packets to be sent from a source to a connection. Data is stored for a queue allocation table that maintains a plurality of buckets to which received packets for a flow are assigned and indicating which of a plurality of resource queues are allocated for respective buckets. For each packet in a flow, a hash function is computed from values in a header of the packet and the packet is assigned to one of the plurality of buckets based on the computed hash function. One of a plurality of resource queues is allocated for each bucket to which packets are assigned based on the computed hash function.

Abstract: Flows of packets are dynamically mapped to resource queues. Flows of packets are received at a network device to be routed from the network device in a network. Each flow comprises packets to be sent from a source to a connection. Data is stored for a queue allocation table that maintains a plurality of buckets to which received packets for a flow are assigned and indicating which of a plurality of resource queues are allocated for respective buckets. For each packet in a flow, a hash function is computed from values in a header of the packet and the packet is assigned to one of the plurality of buckets based on the computed hash function. One of a plurality of resource queues is allocated for each bucket to which packets are assigned based on the computed hash function.

Abstract: Techniques are provided herein to add multicast media streams to teleconferencing sessions without the unwanted side effects that occur when a speaker's own media is echoed back to the speaker. Multicast and unicast media streams are generated by a network device, e.g., a conference bridge, and distributed to any number of endpoints, e.g., conference endpoints. A media selector is provided that selects the appropriate multicast or unicast media stream for forwarding to an associated network endpoint.

Abstract: Techniques are provided herein to add multicast media streams to teleconferencing sessions without the unwanted side effects that occur when a speaker's own media is echoed back to the speaker. Multicast and unicast media streams are generated by a network device, e.g., a conference bridge, and distributed to any number of endpoints, e.g., conference endpoints. A media selector is provided that selects the appropriate multicast or unicast media stream for forwarding to an associated network endpoint.

Abstract: In an example embodiment disclosed herein, Wide Area Network optimization modules coupled to peers are configured to maintain peer routing tables. The peer routing table (PRT) is used by the Wide Area Network optimization module to determine the peer for a given destination, such as an Internet Protocol “IP” destination. Each peer is responsible for advertising to other peers which networks the peer is able to reach. This information is advertised when a tunnel is first created and subsequently whenever necessary. Initially, a peer sends out a list of entries corresponding to its directly connected networks, with the exception of the network connected to the interface on which the peer is advertising (e.g. the network used for the tunnel). This enables other peers on the network to populate their PRT entries.

Abstract: Described herein is a flow control scheme suitably adaptable to Transmission Control Protocol (TCP) and Stream Control Transmission Protocol (SCTP). In an example embodiment, the guaranteed and maximum allowable bandwidths are employed to determine the size of the congestion window. For example, the flow congestion window size starts proportional to the guaranteed bandwidth and increases until reaching the maximum allowable bandwidth. In particular embodiments, a fixed value is used for determining how fast the congestion window increases. For example the congestion window may increase exponentially while the current size of the congestion window is at or below a fixed value, and increase linearly when the current size of the congestion window is above the fixed value. In an example embodiment, the fixed value does not change even if a collision is detected and the current amount of unacknowledged data allowed is reset to an initial value.