Abstract: A plurality of network nodes, under the control of a network controller, are configured to perform a method to direct packets in a packet flow from a source to a destination. In one embodiment, the network controller transmits an instruction to a first node in a network instructing the first node to transmit a first packet in the packet flow along a first route from the source to the destination, the first route having a first delay. The network controller also transmits an instruction to a node in the network to transmit a second packet in the packet flow along a second route different from the first route, the second route having a second delay, the second delay having a duration less than a duration of the first delay. The network controller further transmits an instruction to a node in the second route to delay the second packet in order to delay arrival of the second packet at the destination.

Abstract: A method for operating a source node includes receiving a data path validation request command requesting validation of a path associated with a traffic flow identified in the data path validation request command, and determining a first hop sequence in accordance with the path being validated, wherein the first hop sequence is identical to a second hop sequence associated with a non-validation request packet associated with the path being validated. The method also includes generating, by the source node, a validation request packet in accordance with the data path validation request command, the validation request packet comprises route information associated with the first hop sequence, an alert flag set to a specified value, and a path validation header specifying processing performed by nodes receiving the validation request packet, and transmitting, by the source node, the validation request packet in accordance with the route information.

Abstract: Efficient and scalable source routed forwarding can be achieved in multi-domain networks by substituting path identifiers for intra-domain hop lists in source route hop lists. The path identifiers are then replaced with the corresponding intra-domain hop lists at the ingress edge nodes of each corresponding domain. The path identifiers do not specify individual hops along an intra-domain path segment, and are therefore typically shorter than the intra-domain hop lists. To facilitate multi-domain source routed forwarding techniques, routing tables in edge nodes of the corresponding domains are updated to associate the path identifiers with the corresponding intra-domain hop lists during (or immediately following) inter-domain path computation.

Abstract: In one embodiment, method of photonic packet switching includes receiving, by a photonic switching fabric from a first top-of-rack (TOR) switch, a destination port request corresponding to a first photonic packet and a first period of time, where the destination port request includes a first output port and determining whether the first output port is available during the first period of time. The method also includes receiving, by the photonic switching fabric from the first TOR switch, the first photonic packet and routing the first photonic packet to the first output port when the first output port is available during the first period of time. Additionally, the method includes routing the first photonic packet to an alternative output port when the first output port is not available.

Abstract: A method for operating a source node includes receiving a data path validation request command requesting validation of a path associated with a traffic flow identified in the data path validation request command, and determining a first hop sequence in accordance with the path being validated, wherein the first hop sequence is identical to a second hop sequence associated with a non-validation request packet associated with the path being validated. The method also includes generating, by the source node, a validation request packet in accordance with the data path validation request command, the validation request packet comprises route information associated with the first hop sequence, an alert flag set to a specified value, and a path validation header specifying processing performed by nodes receiving the validation request packet, and transmitting, by the source node, the validation request packet in accordance with the route information.

Abstract: Embodiments are provided for path flow scheduling of multicast traffic through a network. The paths for traffic flow are determined to optimize link utilization in terms of bandwidth and link capacity, and limit link cost. In an embodiment, a method is implemented for network flow scheduling. The method includes establishing, by a controller of a network, a multicast tree which includes a plurality of links for sending multicast traffic from a source to multiple destinations. The tree is established based on minimizing a number of links in the multicast tree. The tree is then adjusted by replacing one or more of the plurality of links to reduce the link utilization. The tree adjustment is repeated by further replacing one or more links in the multicast tree to further reduce the link utilization.

Abstract: In one embodiment, a method for multi-wavelength encoding includes receiving an input optical packet stream having an address and data and encoding the address of the input optical packet stream producing an encoded address including a first group of symbols including a first selected symbol, where the first group of symbols has more than two symbols. The method also includes generating a first wavelength in accordance with the first selected symbol and generating an output optical packet stream having the data of the input optical packet and the first wavelength, where the first wavelength corresponds to the first selected symbol. Additionally, the method includes modulating the first wavelength with the input optical packet stream.

Abstract: In one embodiment, a method for multi-wavelength encoding includes receiving an input optical packet stream having an address and data and encoding the address of the input optical packet stream producing an encoded address including a first group of symbols including a first selected symbol, where the first group of symbols has more than two symbols. The method also includes generating a first wavelength in accordance with the first selected symbol and generating an output optical packet stream having the data of the input optical packet and the first wavelength, where the first wavelength corresponds to the first selected symbol. Additionally, the method includes modulating the first wavelength with the input optical packet stream.

Abstract: A method of managing risk in a network including computing a first path between a source and a destination within the network, computing a second path between the source and the destination within the network, comparing a first risk zone of a first network element in the first path to a second risk zone of a second network element in the second path, the first risk zone is based on a first location-based risk identifier assigned to the first network element prior to computation of the first path, the second risk zone is based on a second location-based risk identifier assigned to the second network element prior to computation of the second path, and an overlap of the first risk zone and the second risk zone indicates that the first network element and the second network element have a shared risk.

Abstract: Routers using virtual routing and forwarding nodes to implement a service fabric of service chains. The router may configure M+1 virtual routing and forwarding instances, M being an integer representing a number of a plurality of service appliances in a data center network. Each virtual routing and forwarding instance may be associated with a routing table of routing rules to define various service chain routing paths. The routing rules are based on destination addresses in data packets.

Abstract: Rather than there being a requirement that specific instructions be issued to cause a transport network tunnel to be configured, it is proposed herein to have a transport node autonomously determine that a transport network tunnel is to be configured and, responsively, cause the transport network tunnel to be configured. In general, a transport node (an L0/L1 device) adjacent to the packet device at the origin of LACP messages snoops on the LACP messages. The transport node may determine, based on the contents of a control LACP message, that a new packet network link is to be established between the origin packet device and a destination packet device. Responsive to the determining, the transport node adjacent to the origin packet device causes a transport network tunnel to be established between one of its ports and a port at a transport node adjacent the destination packet device.

Abstract: Methods and devices for reducing traffic over a wireless link through the compression or suppression of high layer packets carrying predictable background data prior to transportation over a wireless link. The methods include intercepting application layer protocol packets carrying the predictable background data. In embodiments where the background data is periodic in nature, the high layer packets may be compressed into low-layer signaling indicators for communication over a low-layer control channel (e.g., an on off keying (OOK) channel). Alternatively, the high layer packets may be suppressed entirely (not transported over the wireless link) when a receiver side daemon is configured to autonomously replicate the periodic background nature according to a projected interval. In other embodiments, compression techniques may be used to reduce overhead attributable to non-periodic background data that is predictable in context.

Abstract: The devices, systems, and methods test network connectivity, where the physical network is used to provide one or more service chains connecting service appliances, including firewalls, intrusion detection systems, load balancers, network address translators, web servers, and so on. A service chain may involve multiple routing paths. The devices, systems, and methods test network connectivity test network connectivity by injecting customized echo request packets on each routing path and collecting customized echo reply packets in response. The customized echo reply packets are processed and aggregated to isolate network connectivity problems.

Abstract: Methods and systems for managing traffic among a plurality of interconnected sites. The sites are interconnected via ring members and ring segments of a logical ring implemented by a network controller over a physical transport network. When it is determined there is a change in traffic that requires a change in ring topology, topology optimization is performed to accommodate the change in traffic. The topology optimization may include: dynamically increasing capacity of a ring segment, dynamically decreasing capacity of a ring segment, dynamically creating a traffic path, and/or dynamically removing a traffic path.

Abstract: An authorization method comprising receiving command signals from a plurality of controlling accounts, determining whether the number of received command signals meets a threshold, wherein the threshold is at least two, and executing a controlled function in response to the determination. An authorization method comprising accessing a control interface as a first controlling account for a controlled function, communicating command instructions for sending a command with a second controlling account for the controlled function, and sending the command in accordance with the command instructions, wherein sending the command satisfies an authorization condition for executing the controlled function.

Abstract: Disclosed herein is a transport software defined networking (SDN) controller, comprising a receiver configured to receive advertisement messages from physical layer NEs, each advertisement message indicating a mapping between a physical layer network elements (NE) port and an adjacent network layer NE, and a processor coupled to the receiver. The SDC controller is configured to determine a relationship between a logical topology and a physical topology, inspect a network layer link aggregation group (LAG) request, the request indicating a first network layer NE is requesting modification of a LAG with a second network layer NE, and modify a physical layer connection between a physical layer NE adjacent to the first network layer NE and a second physical layer NE adjacent to the second network layer NE to implement the LAG modification based on the relationship between the physical topology and the logical topology.

Abstract: A transport software defined networking (SDN) controller comprising a receiver and a processor coupled to the receiver. The processor is configured to cause the transport SDN controller to determine a physical topology based on physical layer adjacency discovery messages received from physical layer network elements (NEs), receive advertisement messages from the physical layer NEs, each advertisement message comprising a mapping between an adjacent network layer NE and a port of the associated physical layer NE, extract a network layer adjacency request from some of the advertisement messages indicating a first network layer NE is requesting a network layer connection with a second network layer NE, and setup a physical layer connection between the first network layer NE and the second network layer NE based on the network layer adjacency request, the advertisement messages, and the physical topology.

Abstract: A physical layer network element comprising one or more physical ports, a network packet interface, and a processor coupled to the network packet interface. The processor and the network packet interface may be configured to inspect adjacency discovery messages forwarded across the network packet interface between adjacent logical nodes operating at a network layer and map at least one of the physical ports to at least one of the adjacent logical nodes, wherein the network packet interface and the processor are not configured to modify header information contained in the adjacency discovery messages forwarded across the network packet interface.

Abstract: Methods and devices for reducing traffic over a wireless link through the compression or suppression of high layer packets carrying predictable background data prior to transportation over a wireless link. The methods include intercepting application layer protocol packets carrying the predictable background data. In embodiments where the background data is periodic in nature, the high layer packets may be compressed into low-layer signaling indicators for communication over a low-layer control channel (e.g., an on off keying (OOK) channel). Alternatively, the high layer packets may be suppressed entirely (not transported over the wireless link) when a receiver side daemon is configured to autonomously replicate the periodic background nature according to a projected interval. In other embodiments, compression techniques may be used to reduce overhead attributable to non-periodic background data that is predictable in context.

Abstract: A packet obfuscation method comprising receiving a data packet having a routing header portion and a payload portion, performing a first obfuscation on the routing header portion to generate an obfuscated routing header portion, performing a second obfuscation on at least the payload portion to generate an obfuscated payload portion, and combining the obfuscated routing header portion and the obfuscated payload portion to form an obfuscated packet. A packet forwarding method comprising obfuscating routing information using a packet obfuscation function, generating a plurality of forwarding rule entries in accordance with the obfuscated routing information, transmitting the plurality of forwarding rule entries to at least one network node in a network, transmitting the packet obfuscation function to at least one network node in the network, and transmitting a de-obfuscation function to at least one network node in the network.