Abstract: A method for remotely configuring a network device using a user device and a network management service is provided. The user device includes a first communication interface and a second communication interface, and the method includes: initiating, by the user device, a communication channel with the network device using the second communication interface; after the communication channel is established: obtaining, by the user device via the first communication interface, configuration information for the network device from the network management service; and sending, by the user device, the configuration information to the network device via the communication channel. The user device is in communication with the network management service via the first communication interface, and the user device is configured as a pass-through device that relays the configuration information from the network management service to the network device.

Abstract: A method and system for steering bidirectional network traffic to a same service device. Specifically, the disclosed method and system entail the maintaining and synchronization of link aggregation group (LAG) tables tied to a pair of LAG ports instantiated on a network element directly connected to a pair of peer linking service devices. Network traffic (i.e., MAC frames) arriving at the network element, from a first host and intended for a second host (e.g., indicative of a first direction of the network traffic), may be steered towards one of the pair of service devices based on hashing of information included in a received MAC frame in conjunction with the LAG table tied to the LAG port (of the pair of LAG ports) that which received the MAC frame.

Abstract: A method and system for inspecting unicast network traffic between end points residing within a same zone. Specifically, the method and system disclosed herein entail the provisioning of unique forward-service and reverse-service virtual network identifiers (VNIs), and corresponding virtual layer-2 (VL2) forward-service and reverse-service broadcast domains, respectively, to communications originating from and destined to intercept hosts.

Abstract: A method and system for inspecting cross-zone network traffic between end points residing within different zones. Specifically, the method and system disclosed herein entail the provisioning of unique forward-service and reverse-service virtual network identifiers (VNIs), and corresponding virtual layer-2 (VL2) forward-service and reverse-service broadcast domains, respectively, to communications originating from and destined to intercept hosts.

Abstract: A method and system for steering bidirectional network traffic to a same service device. Specifically, the disclosed method and system entail the maintaining and synchronization of link aggregation group (LAG) tables tied to a pair of LAG ports instantiated on a network element directly connected to a pair of peer linking service devices. Network traffic (i.e., MAC frames) arriving at the network element, from a first host and intended for a second host (e.g., indicative of a first direction of the network traffic), may be steered towards one of the pair of service devices based on hashing of information included in a received MAC frame in conjunction with the LAG table tied to the LAG port (of the pair of LAG ports) that which received the MAC frame.

Abstract: A method and system for inspecting broadcast network traffic between end points residing within a same zone. Specifically, the method and system disclosed herein entail the provisioning of unique forward-service and reverse-service virtual network identifiers (VNIs), and corresponding virtual layer-2 (VL2) forward-service and reverse-service broadcast domains, respectively, to communications originating from and destined to intercept hosts.

Abstract: A method and system for steering bidirectional network traffic to a same service device. Specifically, the disclosed method and system entail the maintaining and synchronization of link aggregation group (LAG) tables tied to a pair of LAG ports instantiated on a network element directly connected to a pair of peer linking service devices. Network traffic (i.e., MAC frames) arriving at the network element, from a first host and intended for a second host (e.g., indicative of a first direction of the network traffic), may be steered towards one of the pair of service devices based on hashing of information included in a received MAC frame in conjunction with the LAG table tied to the LAG port (of the pair of LAG ports) that which received the MAC frame.

Abstract: Methods, systems, and apparatus including computer programs encoded on a computer storage medium, for ranking image search results using machine learning models. In one aspect, a method includes receiving an image search query from a user device; obtaining a plurality of candidate image search results; for each of the candidate image search results: processing (i) features of the image search query and (ii) features of the respective image identified by the candidate image search result using an image search result ranking machine learning model to generate a relevance score that measures a relevance of the candidate image search result to the image search query; ranking the candidate image search results based on the relevance scores; generating an image search results presentation; and providing the image search results for presentation by a user device.

Abstract: A method and system for inspecting cross-zone network traffic between end points residing within different zones. Specifically, the method and system disclosed herein entail the provisioning of unique forward-service and reverse-service virtual network identifiers (VNIs), and corresponding virtual layer-2 (VL2) forward-service and reverse-service broadcast domains, respectively, to communications originating from and destined to intercept hosts.

Abstract: A method and system for inspecting unicast network traffic between end points residing within a same zone. Specifically, the method and system disclosed herein entail the provisioning of unique forward-service and reverse-service virtual network identifiers (VNIs), and corresponding virtual layer-2 (VL2) forward-service and reverse-service broadcast domains, respectively, to communications originating from and destined to intercept hosts.

Abstract: A method and system for inspecting broadcast network traffic between end points residing within a same zone. Specifically, the method and system disclosed herein entail the provisioning of unique forward-service and reverse-service virtual network identifiers (VNIs), and corresponding virtual layer-2 (VL2) forward-service and reverse-service broadcast domains, respectively, to communications originating from and destined to intercept hosts.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for performing image search. In one aspect, a system receives a request for images responsive to a provided search query including one or more search terms. The system obtains content labels for the provided search query which represent entities depicted in images identified by search results previously generated by a search system by processing search queries comprising search terms included in the provided search query. The system uses the content labels for the provided search query to determine a relevance score for each of multiple candidate images. The system determines a ranking of the candidate images based in part on the relevance scores for the candidate images.

Abstract: A method and apparatus to bring up a network controller in a network of multiple network elements is described. In an exemplary embodiment, the network controller receives an indication that the network controller is booting up. The network controller is coupled to a plurality of network elements in a network, where the network controller maintains a controller database that supports a network-wide service used by the plurality of network elements. The network controller further receives state information from the plurality of network elements. In addition, the network controller builds the controller database from the state information. Furthermore, the network controller sends updates from the controller database to each of the plurality of network elements, where each of the plurality of network elements incorporates these updates into a respective network element database and the network element database is used to perform the network-wide service.

Abstract: A method and system for steering bidirectional network traffic to a same service device. Specifically, the disclosed method and system entail the maintaining and synchronization of link aggregation group (LAG) tables tied to a pair of LAG ports instantiated on a network element directly connected to a pair of peer linking service devices. Network traffic (i.e., MAC frames) arriving at the network element, from a first host and intended for a second host (e.g., indicative of a first direction of the network traffic), may be steered towards one of the pair of service devices based on hashing of information included in a received MAC frame in conjunction with the LAG table tied to the LAG port (of the pair of LAG ports) that which received the MAC frame.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for determining a measure of quality for a resource. In one aspect, a method includes determining a seed score for each seed resource in a set. The seed score for a seed resource can be based on a number of resources that include a link to the seed resource and a number of selections of the links A set of source resources is identified. A source score is determined for each source resource. The source score for a source resource is based on the seed score for each seed resource linked to by the source resource. Source-referenced resources are identified. A resource score is determined for each source-referenced resource. The resource score for a source-referenced resource can be based on the source score for each source resource that includes a link to the source-referenced resource.

Abstract: A method and apparatus to bring up a network controller in a network of multiple network elements is described. In an exemplary embodiment, the network controller receives an indication that the network controller is booting up. The network controller is coupled to a plurality of network elements in a network, where the network controller maintains a controller database that supports a network-wide service used by the plurality of network elements. The network controller further receives state information from the plurality of network elements. In addition, the network controller builds the controller database from the state information. Furthermore, the network controller sends updates from the controller database to each of the plurality of network elements, where each of the plurality of network elements incorporates these updates into a respective network element database and the network element database is used to perform the network-wide service.

Abstract: A method and apparatus of a device that monitors a link for a slow link flap event is described. In an exemplary embodiment, a device detects a link flap in a current time interval of a link that couples a pair of devices. In addition, the current time interval is one of a plurality of time intervals that are used to monitor the link for a slow link flap. Furthermore, a slow link flap event results from detecting a maximum number of link flap violations over the plurality of time intervals. The device additionally increments a number of detected link flaps for the current time interval. If the number of detected link flaps for the current time interval is greater than a maximum number of slow link flap violations, the device marks the current time interval as a possible slow link flap interval.

Abstract: A system is provided that determines the likelihood of an account is being used by a computer program to automatically generate and send information to other accounts. In one aspect, the system calculates the likelihood for one account based on the amount of the account's social interaction with other accounts and the likelihood that such other accounts and are being used by a computer program to automatically generate and send information to other accounts.

Abstract: A method and apparatus of a device that monitors a link for a slow link flap event is described. In an exemplary embodiment, a device detects a link flap in a current time interval of a link that couples a pair of devices. In addition, the current time interval is one of a plurality of time intervals that are used to monitor the link for a slow link flap. Furthermore, a slow link flap event results from detecting a maximum number of link flap violations over the plurality of time intervals. The device additionally increments a number of detected link flaps for the current time interval. If the number of detected link flaps for the current time interval is greater than a maximum number of slow link flap violations, the device marks the current time interval as a possible slow link flap interval.

Abstract: This specification describes technologies relating to providing search results. One aspect of the subject matter described in this specification can be embodied in methods that include the actions of receiving a network resource, the network resource including text content; generating a language model score for the resource including applying a language model to the text content of the resource; generating a query stuffing score for the reference, the query stuffing score being a function of term frequency in the resource content and a query index; calculating a gibberish score for the resource using the language model score and the query stuffing score; and using the calculated gibberish score to determine whether to modify a ranking score of the resource.