Abstract: The disclosed apparatus may include (1) a database that maintains a pruned multicast distribution tree and (2) a processing unit having access to the database, wherein the processing unit (A) receives at least one type 3 Ethernet Segment Identifier (ESI) message from at least one other bridge domain on at least one other computing device, (B) determines, based at least in part on the type 3 ESI message, whether the other bridge domain on the other computing device has a root access concentrator, and then (C) populates, in response to determining whether the other bridge domain has a root access concentrator, the pruned multicast distribution tree to account for the other bridge domain such that the bridge domain on the computing device is able to determine whether to send multicast traffic to the other bridge domain. Various other apparatuses, systems, and methods are also disclosed.

Abstract: The present invention relates to a method to detect online privacy violation. The method comprising steps of embedding a tracker into a web browser to open at least one data consumer website or at least one third party website wherein a user submits at least one data value into their corresponding data field in a data consumer website; generating one or more privacy profile using the tracker wherein the profile assists the user to select one or more data fields as per the user preferences; capturing the user selected one or more data fields and their corresponding plurality of browsing history using the tracker; storing the profile and the plurality of browsing history into at least one database; triggering of the tracker for detecting online privacy violation in a third party website and submitting at least one data field into at least one input field to detect online privacy violation for the submitted data field.

Abstract: Techniques are described to provide designated forwarder state propagation to customer edge network devices using connectivity fault management (CFM) so as to ensure that customer edge (CE) network devices are aware of a change in designated forwarder election in an Ethernet Virtual Private Network (EVPN). In one example, a method includes determining a change in designated forwarder election from a provider edge (PE) network device to another PE device; in response to the change in designated forwarder election, configuring a message including at least a client-facing interface status of the first PE device, wherein the client-facing interface status included in the message is configured as an indicator of a result of the change in designator forwarder election; and transmitting the message to the multi-homed CE device.

Abstract: In general, techniques are provided for described herein that extend existing Ethernet Virtual Private Network (EVPN) protocol signaling mechanisms so that local, multi-homing PEs couple to an Ethernet segment can definitively convey their primary/backup designated forwarder (DF) status to any remote PE of the EVPN. In one example, this is accomplished by utilizing a new extended community attribute to each Ethernet A-D per EVI route advertised by each of the multi-homing PEs to specifically carry the advertising PE's primary or backup status. As such, any receiving remote PE need not rely on the arrival of individual MAC routes from a new primary PE and withdrawal of MAC routes from a former primary PE to update its forwarding information.

Abstract: A network device is configured to provide, via an Ethernet segment with a customer network, active-active multi-homing L2 virtual bridge connectivity to the customer network using an EVPN instance (EVI) and L3 routing using an IRB interface that is a L3 routing interface assigned to the EVI; to receive, from a peer PE device of the EVPN instance, an EVPN route comprising an L2-L3 binding for a customer device of the customer network and associating the L2-L3 binding with the Ethernet segment, the L2-L3 binding comprising an L2 and an L3 address assigned to the customer device, wherein the peer PE device provides, with the network device and via the Ethernet segment, active-active multi-homing L2 virtual bridge connectivity to the customer network; and to forward, via the Ethernet segment and based at least on the L2-L3 binding received from the peer PE device, an L3 packet to the customer device.

Abstract: In general, techniques of this disclosure may enable a remote provider edge (PE) router to improve convergence time in response to a link failure in an Ethernet Virtual Private Network (EVPN) by establishing per-Ethernet Segment Identifier (ESI) Bidirectional Forwarding Detection (BFD) sessions with other PE routers that are coupled to the PE router in an EVPN. The remote PE may determine that at least two PE routers with the remote PE are locally connected to a multi-homed customer network by a particular Ethernet Segment. The remote PE may send, based on determining that the at least two PE routers are connected to the multi-homed customer network by the particular Ethernet Segment, an ESI Ping request packet through the intermediate network to one of the at least two PE routers, wherein the ESI Ping request packet includes at least a BFD discriminator and an ESI for the particular Ethernet Segment.

Abstract: In some examples, a provider edge device provides L2 virtual bridge connectivity for at least one customer network using an EVPN instance and L3 routing using an IRB interface that is a L3 routing interface assigned to the EVPN instance; the provider edge device obtains an indication of a new binding for an endpoint device of the at least one customer network, the new binding comprising a first L2 address and a L3 address that are assigned to the endpoint device; and the provider edge device outputs, in response to determining the provider edge device stores a prior binding for the endpoint device of a second L2 address and the L3 address that are assigned to the endpoint device, an EVPN route comprising an indication of the new binding and an indication the new binding is an updated binding of the prior binding for the endpoint device.

Abstract: A first device may receive network traffic including a first label. The first label may be an inclusive multicast label associated with a second device. The second device may be a designated forwarder for an Ethernet segment. The first device may determine a second label based on receiving the network traffic including the first label. The second label may be used to route the network traffic to a customer edge device, via a third device, rather than the second device. The third device may be a non-designated forwarder for the Ethernet segment. The first device may provide the network traffic, including the second label, to the third device to permit the third device to provide, via the Ethernet segment, the network traffic to the customer edge device based on the second label when a failure occurs in association with the second device.

Abstract: Techniques are described for providing fast convergence in the event of a link failure in an all-active multi-homed Ethernet virtual private network. A provide edge (PE) network device may pre-configure an interface next hop and secondary next hops. The secondary next hops may be logical links to other PE network devices in the same Ethernet segment. In the event of a link failure in the interface next hop between the PE network device and a customer edge (CE) network device, the PE network device may be configured to forward data traffic to the CE network device using the secondary next hops. In the event of a link failure between the PE network device and a core network, the PE network device may be configured to send an out-of-service message to the CE network device that instructs the CE network device to stop sending traffic to the PE network device.

Abstract: A device may receive, from a first device associated with a first LAN, network traffic destined for a second LAN. The device may provide the first LAN with access to a core network. The device may not provide the second LAN with access to the core network. The device may identify, based on the network traffic, a Layer 3 address associated with a second device. The second device may be associated with the second LAN. The device may determine that the first device is categorized as a leaf device within an Ethernet Tree provided by the device. The device may determine, based on the Layer 3 address, that the second device is categorized as a leaf device within the Ethernet Tree. The device may drop the network traffic based on determining that the first device and the second device are categorized as leaf devices within the Ethernet Tree.

Abstract: The disclosed apparatus may include (1) a database that maintains a pruned multicast distribution tree and (2) a processing unit having access to the database, wherein the processing unit (A) receives at least one type 3 Ethernet Segment Identifier (ESI) message from at least one other bridge domain on at least one other computing device, (B) determines, based at least in part on the type 3 ESI message, whether the other bridge domain on the other computing device has a root access concentrator, and then (C) populates, in response to determining whether the other bridge domain has a root access concentrator, the pruned multicast distribution tree to account for the other bridge domain such that the bridge domain on the computing device is able to determine whether to send multicast traffic to the other bridge domain. Various other apparatuses, systems, and methods are also disclosed.

Abstract: The present invention provides a method and system for verifying integrity of cloud data using unconnected trusted device. The method involves requesting encrypted data though a terminal from a metadata offsite location on a cloud storage then entering encrypted data into an unconnected trusted device thereafter obtaining sentinel data from one or more predefined sentinel locations in encrypted data then requesting original data from the cloud storage through the terminal from the unconnected trusted device thereafter comparing sentinel data and original data for integrity and finally displaying the results.

Abstract: In general, techniques of this disclosure may enable a remote PE router to improve convergence time in response to a link failure in an EVPN by establishing per-Ethernet Segment Identifier (ESI) Bidirectional Forwarding Detection (BFD) sessions with other PE routers that are coupled to the PE router in an EVPN. The remote PE may determine that at least two PE routers with the remote PE are locally connected to a multi-homed customer network by a particular Ethernet Segment. The remote PE may send, based on determining that the at least two PE routers are connected to the multi-homed customer network by the particular Ethernet Segment, an Ethernet Segment Identifier (ESI) Ping request packet through the intermediate network to one of the at least two PE routers, wherein the ESI Ping request packet includes at least a Bidirectional Forwarding Detection (BFD) discriminator and an ESI for the particular Ethernet Segment.

Abstract: In general, techniques enable an intermediate router to perform node protection for one or more other PE routers operably coupled to the intermediate router in active-active mode in an EVPN. The techniques may include configuring the intermediate router, which is positioned within an a service provider network between a remote provide edge router and at least two provider edge (PE) routers operating in active-active mode in an Ethernet Virtual Private Network (EVPN), to operate in a passive mode in which the intermediate router detects Ethernet Auto-Discovery (AD) routes without performing layer two (L2) address learning for the EVPN. The techniques may include installing a primary route to a protected router and a backup route from the intermediate router to a PE router other than the protected router, and in response to a link failure, forwarding network traffic using the backup route without requiring reprogramming the forwarding unit.

Abstract: In some examples, a method includes receiving, by a first provider edge (PE) network device, an egress protection label that is advertised by a second PE network device, wherein each of the first and second PE network devices are included in an Ethernet segment, wherein the first PE network device is a designated forwarder for BUM network packets in the Ethernet segment, and wherein a CE network device is multi-homed to the first and second PE network devices; in response to detecting a link failure, configuring forwarding information of the first PE network device to apply the egress protection label to the BUM network packets received by the first PE network device and forward the BUM network packets to the second PE network device; and in response to receiving the BUM network packets, forwarding the BUM network packets with the egress protection label to the second PE network device.

Abstract: The present invention describes a system, method and computer product program for computation of alarm time. The system includes an alarm device for generating an alarm. The system also includes an alarm application hosted on the alarm device for providing at least one user defined alarm condition. The system further includes an alarm engine for receiving the user defined alarm condition, initiating a probe to receive data from data sources, processing the received alarm conditions and the received data to compute the alarm time and next probe time repeating iteratively until the next probe time is greater than the computed alarm time. The system generates alarm at the computed alarm time when the next probe time becomes greater than the alarm time.

Abstract: Methods and systems are disclosed for asymmetric memory access to memory banks within integrated circuit (IC) systems. Disclosed embodiments include a memory and a memory controller within an integrated circuit. The memory includes a number of different memory banks, and the memory controller includes a number of different access ports coupled to the memory banks. The memory controller is also configured to provide asymmetric memory access for access requests to memory banks based upon access ports used for memory access requests. Additional disclosed embodiments further use asymmetric access times or asymmetric access bandwidths to provide this asymmetric access to memory banks within system memories for integrated circuit (IC) systems. By providing asymmetric access times or bandwidths for multiple access ports within a memory controller to multiple different memory banks within a system memory, overall access latency or system cost is reduced for the IC systems.

Abstract: In general, techniques are provided for described herein that extend existing Ethernet Virtual Private Network (EVPN) protocol signaling mechanisms so that local, multi-homing PEs couple to an Ethernet segment can definitively convey their primary/backup designated forwarder (DF) status to any remote PE of the EVPN. In one example, this is accomplished by utilizing a new extended community attribute to each Ethernet A-D per EVI route advertised by each of the multi-homing PEs to specifically carry the advertising PE's primary or backup status. As such, any receiving remote PE need not rely on the arrival of individual MAC routes from a new primary PE and withdrawal of MAC routes from a former primary PE to update its forwarding information.

Abstract: Techniques are described for providing fast convergence in the event of a link failure in an all-active multi-homed Ethernet virtual private network. A provide edge (PE) network device may pre-configure an interface next hop and secondary next hops. The secondary next hops may be logical links to other PE network devices in the same Ethernet segment. In the event of a link failure in the interface next hop between the PE network device and a customer edge (CE) network device, the PE network device may be configured to forward data traffic to the CE network device using the secondary next hops. In the event of a link failure between the PE network device and a core network, the PE network device may be configured to send an out-of-service message to the CE network device that instructs the CE network device to stop sending traffic to the PE network device.

Abstract: Hardware processors in an SOC integrated circuit logically swapping memories by remapping memory addresses, including tightly coupled and local memories, to enable a sequence of data-processing algorithms to execute more quickly by different hardware processors without having to copy the data between different memories using a relatively slow data crossbar switch. When a memory stores error-correction code (ECC) address information linking stored ECC data with stored user data, the hardware processor dynamically remaps the ECC address information, as needed.