Abstract: A first Bit Index Explicit Replication Traffic Engineering (BIER-TE) node of a network includes a first interface to a second BIER-TE node in the network. The first node includes a configuration topology and an operational topology. The configuration topology represents the configuration of the network and the operational topology represents usable and consistent links in the network topology. The first node receives first network topology information and updates the configuration topology with the first network topology information. The first node also verifies the first network topology information and updates the operational topology with the first network topology information responsive to the verification. The first node receives a packet including a routing bitstring having a set bit at a first bit index corresponding to the first interface and routes the packet to the second node responsive to the routing bitstring and the operational topology.

Abstract: A multicast data transmission method includes: determining, by a first BFIR in a first BIER domain, a BIFT-id and a bitstring that correspond to multicast data in a second BIER domain, where the BIFT-id is determined based on at least an SI to which a BFR-id of a first BFER belongs and a BSL supported by the first BFER, and the first BFER is a BFER in the second BFER domain that is used to receive the multicast data; encapsulating the multicast data into a BIER data packet, where a BIER header of the BIER data packet includes the BIFT-id and the bitstring that correspond to the multicast data in the second BIER domain; and finally sending the labeled BIER data packet to a second BFIR, where the label is a label corresponding to a prefix of the second BFIR.

Abstract: Some embodiments provide a method for maintaining a virtual network that spans at least one cloud datacenter separate from multi-machine edge nodes of an entity. This method configures a gateway in the cloud datacenter to establish secure connections with several edge devices at several multi-machine edge nodes (e.g., branch offices, datacenters, etc.) in order to establish the virtual network. The method configures the gateway to assess quality of connection links with different edge devices, and to terminate a secure connection with a particular edge device for a duration of time after the assessed quality of the connection link to the particular edge device is worse than a threshold value. In some embodiments, the gateway is configured to distribute routes to edge devices at the edge nodes, and to forgo distributing any route to the particular edge device along the connection link for the duration of time when the assessed quality of the connection link is worse than (e.g., less than) a threshold value.

Abstract: A method and system for transferring data is disclosed. The method comprises initiating a handshake between an electronics unit onboard a vehicle and an application via a first communication protocol through an onboard gateway; transferring a data file to the gateway from the application via a second communication protocol; storing the data file in the gateway at a storage location; sending a message from the application to the electronics unit, via the first communication protocol, to inform the electronics unit that the data file is available and the storage location of the data file; and pulling the data file from the storage location, via the second communication protocol, to the electronics unit.

Abstract: A system for distributed device management includes a group of devices. Each device in the group of devices communicate with one or more other devices in the group of devices over one or more network channels, and each device in the group of devices includes a processing circuit. The processing circuit of each device in the group of devices manages one or more devices in the group of devices, authorizes a new device to join the group of devices, and synchronizes data with the new device and with one or more devices in the group of devices over the one or more network channels.

Abstract: Systems and techniques for defining and operating management services within a “domain” portion of an Internet of Things (IoT) network are disclosed herein. An example technique for implementing management functions of a device in a domain of the IoT network, for a device that is a defined within a hierarchy managed in the domain, may include: defining a resource structure in a secure virtual resource of the device, for a resource structure that identifies and defines at least one management service of the device; establishing properties of the at least one management service resource on the device within a resource structure, with the use of properties that are associated with a management function to be performed in the domain; and operating the device in the domain according to the management function. Further integration and use of management services and other management functions are also disclosed.

Abstract: A network system that uses a cluster of edge nodes to send and receive multicast traffic is provided. The network system is a network virtualization environment that includes one or more distributed routers, each distributed router implemented by virtualization software running on one or more host machines. The network system also includes a cluster of edge nodes for sending data from the one or more distributed routers to one or more uplink/upstream physical routers outside of a datacenter and for receiving data from the physical routers to the distributed routers. One of the edge nodes is a designated edge node that queries for membership information for one or more multicast groups to be received by at least two edge nodes of the cluster of edge nodes. The cluster of edge nodes forwards multicast traffic to and from the distributed routers according to the received membership information.

Abstract: A data multicast implementation method, apparatus, and system are provided. In some embodiments, a transmission device receives a standby forwarding path establishment request, where the standby forwarding path establishment request includes a device identifier, has a destination address being an address of a multicast source device, and is used to request to establish a standby forwarding path between a multicast destination device identified by the device identifier and the multicast source device. In those embodiments, when determining, based on the device identifier in the standby forwarding path establishment request, that the transmission device is located on an active forwarding path between the multicast destination device and the multicast source device, the transmission device skips using the transmission device as a device on the standby forwarding path between the multicast destination device and the multicast source device, and skips forwarding the standby forwarding path establishment request.

Abstract: A system and method uses one or more repurposed data fields in a payment transaction message to pass the merchant consumable data from a mobile device to the merchant system using an existing channel. The merchant consumable data relate to loyalty or rewards.

Abstract: Disclosed are various embodiments for distributed network address allocation management. In one embodiment, a first instance of a plurality of instances of an allocation management service assigns a first portion of a network address space to the first instance and a second portion of the network address space to a second instance of the plurality of instances. The second instance receives a request to allocate a particular network address block. The second instance allocates the particular network address block from the second portion of the network address space by updating an allocation data structure. An allocation of the particular network address block is returned in response to the request. A copy of the allocation data structure maintained by the first instance is updated asynchronously based at least in part on the allocation of the particular network address block.

Abstract: A data transmission method, a node, and a system, the method including receiving, by a forwarding node, a data packet, where a label stack of the data packet comprises a path identifier (path-ID), where the path-ID is an identifier of a constrained path, and where the constrained path is a path that consists of at least two nodes arranged in a specific order, determining, by the forwarding node, that the forwarding node is a node on the constrained path, selecting, by the forwarding node, a target label/target address from a local available label block/address block according to the path-ID and according to a preset rule, where the label block/address block comprises at least one label/address, searching for, by the forwarding node, a corresponding target interface according to the target label/target address, and forwarding, by the forwarding node, the data packet through the target interface.

Abstract: A method for wireless communication includes transmitting, by a User Equipment (UE) in a Radio Resource Control (RRC) Inactive (RRC_Inactive) state, at least one packet to a base station, and receiving, by the UE in the RRC_Inactive state, an acknowledgement or non-acknowledgement (ACK/NACK) message from the base station in response to the at least one packet transmitted by the UE.

Abstract: Systems and methods for generating a data aggregator interactive graphical user interface. An interactive graphical user interface (GUI) includes a selectable symbol region, a query region and a data results region. The selectable symbol region displays predefined symbols. The query region displays user input fields for generating queries. The system receives user input associated with the user input fields of the query region to form a filter set. The data results region is automatically updated responsive to the user input, to display one or more data values from among one or more databases associated with the filter set. The system receives a subscription request to save the filter set as a user-customized query. A custom symbol is created responsive to the subscription request that is associated with the filter set. The the selectable symbol region is updated to display the custom symbol together with the predefined symbols.

Abstract: A distributed policy proxy system offloads network policy processing from an overloaded network element to policy proxy network elements. A network controller detects that policy resources are overloaded at a network element, and assigns a range of endpoints to each policy proxy network element. Each policy proxy network element is assigned to handle policy processing for traffic belonging to a corresponding assigned range of endpoints. The network controller provides instructions to the policy proxy network elements to enable each policy proxy network element to apply the network policy for its assigned range of endpoints. The network controller also provides instructions to the overloaded network element to redirect a packet from the first endpoint to a first policy proxy network element based on a destination of the packet.

Abstract: Some embodiments provide a network forwarding element with a data-plane forwarding circuit that has a parameter collecting circuit to store and distribute parameter values computed by several machines in a network. In some embodiments, the machines perform distributed computing operations, and the parameter values that compute are parameter values associated with the distributed computing operations. The parameter collecting circuit of the data-plane forwarding circuit (data plane) in some embodiments (1) stores a set of parameter values computed and sent by a first set of machines, and (2) distributes the collected parameter values to a second set of machines once it has collected the set of parameter values from all the machines in the first set. The first and second sets of machines are the same set of machines in some embodiments, while they are different sets of machines (e.g., one set has at least one machine that is not in the other set) in other embodiments.

Abstract: A migration process for migration of a virtual machine from a source host to a destination host has initiated is determined. The source host and the destination host are part of a network. A multicast address that is mapped to a group comprising the source host and the destination host is obtained. Host in the network to begin encapsulating packets addressed to the virtual machine and send the encapsulated packets using the multicast address in a destination address field of the encapsulated packets is notified.

Abstract: Disclosed are various embodiments for automatic enrollment of Internet of Things (IoT) endpoints. An enrollment request is received from an internet of things (IoT) gateway, the enrollment request comprising an identifier for an IoT endpoint and at least one property of the IoT endpoint. In response to enrollment of the IoT endpoint, a campaign template is identified that matches the at least one property of the IoT endpoint. A campaign associated with the campaign template is then identified, the campaign comprising a collection of policies that are applicable to individual IoT endpoints assigned to the campaign. Subsequently, the IoT endpoint is assigned to the campaign.

Abstract: A network apparatus comprising a trunk end point associated with an Ethernet-tree (E-Tree) service in a network domain and configured to forward a frame that comprises a tag according to the tag in the frame, wherein the tag in the frame is a root tag that indicates a root source of the frame or a leaf tag that indicates a leaf source of the frame, and wherein the trunk end point is coupled to a second end point associated with the E-tree service outside the network domain.

Abstract: Some embodiments provide a method for implementing a logical network across multiple datacenters. The method receives a configuration for a logical router that handles data traffic between the logical network implemented in the plurality of datacenters and networks external to the logical network. The method, for each datacenter defines (i) an active centralized routing component of the logical router in the datacenter and (ii) a standby centralized routing component of the logical router in the datacenter. The centralized routing components for a particular datacenter handle the data traffic between the logical network in the particular datacenter and the external networks. The active and standby centralized routing components are each assigned to edge computing devices in the datacenter that implement the centralized routing components.

Abstract: Some embodiments of the invention provide a novel method of performing network slice-based operations on a data message at a hardware forwarding element (HFE) in a network. For a received data message flow, the method has the HFE identify a network slice associated with the received data message flow. This network slice in some embodiments is associated with a set of operations to be performed on the data message by several network elements, including one or more machines executing on one or more computers in the network. Once the network slice is identified, the method has the HFE process the data message flow based on a rule that applies to data messages associated with the identified slice.

Abstract: In one embodiment, a method is performed. A device may include an interface in communication with a network. The device may determine whether an all-active multi-homed ethernet segment (ES) associated with the interface is enabled. On a condition that an all-active multi-homed ES is enabled, the device may determine an ethernet virtual private network (EVPN) designated forwarder (DF) state of the all-active multi-homed ES. If the all-active multi-homed ES is enabled and has an ethernet virtual private network (EVPN) designated forwarder (DF) state, the device may enter a protocol independent multicast (PIM) designated router (DR) state. If an all-active multi-homed ES is enabled and does not have an EVPN DF state, the device may enter a PIM non-DR state.

Abstract: A system for aggregating spaced related systems includes accessing service provider information for multiple service providers to determine relevant services/systems available, automatically determining that no single service provider provides services sufficient to perform a particular space activity, automatically identifying multiple services from different service providers that in aggregate include performing the space activity, and automatically determining a parameter to configure space equipment to perform each of the multiple services from the different service providers in order to perform the space activity. In some embodiments, this system can be scaled across multiple regions (e.g., multiple planetary regions). For example, each region can have its own set of servers and ledgers that provide real-time services within the region and opportunistically synchronize between regions (e.g., when communication is available).

Abstract: Virtualization software that includes a VDRB (virtual distributed router/bridge) module for performing L3 routing and/or bridging operations is provided. At least some of the VDRBs are configured as VDBs (virtual distributed bridge) for performing bridging operations between different network segments in a distributed manner. The bridging tasks of a network are partitioned among several VDBs of the network based on MAC addresses. MAC addresses of VMs or other types of network nodes belonging to an overlay logical network are partitioned into several shards, each shard of MAC addresses assigned to a VDB in the network. Each VDB assigned a shard of MAC addresses performs bridging when it receives a packet bearing a MAC address belonging to its assigned shard. A VDB does not perform bridging on packets that do not have MAC address that falls within the VDB's shard of MAC addresses.

Abstract: A packet forwarding method and apparatus are provided, and pertain to the field of communications technologies. The method includes: determining, by a first node, information about a loop-free path from the first node to a second node, where the first node and the second node are a pair of nodes having an anycast route; and when the first node receives a packet to be sent to a third node, if a link from the first node to the third node is faulty, forwarding, by the first node, the packet to the second node based on the information about the loop-free path, so as to forward the packet to the third node through the second node. According to this application, a success rate of packet sending can be improved.

Abstract: Network controllers are described that enable creation of logical interconnects between logical routers of different, isolated virtual networks and for auto-generation and deployment of routing policies to control “leaking” of select routes amongst the different virtual networks. In one example, a network controller includes a memory and processing circuitry configured to identify a source logical router of a first virtual network and a destination logical router of a second virtual network implemented on one or more physical devices of a switch fabric, form a policy defining one or more rules for controlling leaking of one or more of the routes through a logical router interconnect from the source logical router to the destination logical router, and push the policy to the one or more physical devices of the switch fabric for application to communications through the logical router interconnect.

Abstract: Embodiments described herein relate to techniques for designated forwarder (DF) elections, which may include: obtaining DF candidates that are part of a supplementary broadcast domain (SBD), wherein the DF candidate is one of the plurality of DF candidates for the SBD; performing a SBD DF election process to determine an SBD DF winner from among the DF candidates; making a first determination that the DF candidate is not the SBD DF winner; making second determination that a first broadcast domain (BD) provisioned on the DF candidate is not provisioned on the SBD DF winner; excluding the first BD from a set of BDs that are also provisioned on the SBD DF winner; performing additional DF election processes for each BD of the set of BDs; and processing multicast traffic based at least in part on the SBD DF election process and the additional DF election processes.

Abstract: Techniques are disclosed for session-based routing of multipoint Open Systems Interconnection (OSI) Model Layer-2 (L2) frames of an L2 network extended over Layer-3 (L3) networks. In one example, L2 networks connect a source device to an ingress router and receiver devices to egress routers. An L3 network connects the ingress and egress routers. The ingress router receives, from the source device, a multipoint L2 frame destined for the receiver devices. The ingress router forms, for each egress router that is connected to at least one multipoint receiver device, a unicast L3 packet for the L2 frame and forwards the unicast L3 packet to the egress router. Each egress router generates, in response to receiving the unicast L3 packet, the multipoint L2 frame and forwards, to the receiver devices, the multipoint L2 frame.

Abstract: The present invention discloses a data forwarding unit based on a Handle identifier, comprising a dynamic configuration module, a Handle identifier data identification module and a matching-forwarding module. The system of the present invention is applied to network devices such as switches and routers, and supports dynamic configuration of data packet analysis, matching and forwarding rules through data interaction with network systems such as SDN managers, so that the network devices can identify data packets based on the Handle identifier and perform the specified operation on the designated data packets with the Handle identifier according to the rules of dynamic configuration.

Abstract: Some embodiments provide a method of replicating messages for a logical network. At a particular tunnel endpoint in a particular datacenter, the method receives a message to be replicated to members of a replication group. The method replicates the message to a set of tunnel endpoints of the replication group located in a same segment of the particular datacenter as the particular tunnel endpoint. The method replicates the message to a first set of proxy endpoints of the replication group, each of which is located in a different segment of the particular datacenter and for replicating the message to tunnel endpoints located in its respective segment of the particular datacenter. The method replicates the message to a second set of proxy endpoints of the replication group, each of which is located in a different datacenter and for replicating the message to tunnel endpoints located in its respective datacenter.

Abstract: A Mapping of Address and Port using Translation (MAP-T) border relay controller for managing and controlling a MAP-T network. Configuration and performance data are collected, by a border relay configuration collector, from one or more MAP-T border relay nodes of a MAP-T network. Internet Protocol (IP) flow data are collected, by an IP flow data collector, across one or more Internet peering routers coupled to the MAP-T network. A network anomaly that impairs performance of the MAP-T network is analyzed, by a logic algorithm module, using the configuration and performance data collected by the border relay configuration collector and the IP flow data collector. A network translation capability of the MAP-T network is reconfigured based on the analysis of the network anomaly and/or availability of network resources.

Abstract: A method is performed at a router configured to perform Bit Index Explicit Replication (BIER) for forwarding of multicast packets in a network. The method includes, upon receiving a multicast packet of a multicast flow, accessing flow mappings in which multicast flows are mapped to fixed accounting values corresponding to the multicast flows. The method further comprises generating a BIER header for the multicast packet by encoding a multi-segment entropy field of the BIER header with (i) a variable entropy value for equal-cost multi-path (ECMP) load balancing, and (ii) a fixed accounting value among the fixed accounting values that is mapped to the multicast flow in the flow mappings. The method also includes encapsulating the multicast packet with the BIER header to produce an encapsulated multicast packet, and forwarding the encapsulated multicast packet.

Abstract: This application discloses a method for implementing a software-defined network (SDN), including: receiving, by an SDN controller, virtual network information sent by a cloud computing platform, where the virtual network information includes a correspondence between information about a virtual machine (VM) and information about a server running the VM. The method also includes acquiring, by the SDN controller, physical network information, where the physical network information includes a correspondence between information about a top-of-rack (TOR) switch and the information about the server. Additionally, the method includes acquiring, by the SDN controller, a correspondence between the information about the VM and the information about the TOR switch according to the virtual network information and the physical network information.

Abstract: A quantum computing-threat-resistant system for cryptography key exchange comprises a linear-space computing module, a manifold computing module, and a Banach-space computing module. The system implements the technologies of homotopy morphing and key cloaking for facilitating the key-exchanging processes to perform quantum computing-threat-resistant operations in a mathematics space which is different from the spaces that generic quantum attacks work on, and then retrieve the original key in a Hilbert space after the processes of key exchange. The system not only avoids quantum attacks on key-exchanging processes, but also avoids the defects of current PQC solutions, the vulnerability of the main streamed symmetric & asymmetric encryption systems, and the limitation of quantum key operation in a Hilbert space. Both legacy key solution and quantum key solution are provided and implemented without requiring expensive devices.

Abstract: The embodiments provide for a method of expanding a clustered service. The method includes inserting a network layer, comprising multiple switch devices, between switch devices of a network and switch devices of a clustered service, rearranging connections of the switch devices of the network and the switch devices of the clustered service to form a multi-chassis link aggregation group (MC-LAG), and maintaining data traffic during the rearranging the connections.

Abstract: Methods, network devices and computer readable media are disclosed relating to a communication network. In one embodiment, a method includes receiving a message comprising a message bit array. The message bit array identifies egress nodes for the message within a bit indexed explicit replication (BIER) domain of a communications network. A first bit position in the message bit array represents a first one or more of the egress nodes, and a bit value at the first bit position indicates that the message is to be forwarded to one of the first one or more of the egress nodes. The method further includes accessing a first forwarding table entry corresponding to the first bit position, determining whether the first bit position is an anycast bit position having multiple corresponding forwarding table entries, and forwarding the message to one of the first one or more of the egress nodes.

Abstract: The present disclosure generally discloses a multicast capability configured to support multicast that is based on use of Bit Indexed Explicit Replication (BIER). The multicast capability may be configured to support deployment of BIER into a network in a manner that continues to support use of Protocol Independent Multicast (PIM) for multicast control within the network. The multicast capability may be configured to support deployment of BIER, into a network including an Interior Gateway Protocol (IGP) area, using a BIER domain that is commensurate with the IGP area or that is only a portion of the IGP area. The multicast capability may be configured to support deployment of BIER into a network in a manner supporting stitching of traditional PIM access networks via a BIER core network.

Abstract: The present invention relates to the technical field of computer networking, in particular to an ID/location hybrid forwarding method based on source routing, including a message format based on an extension header of a MobilityFirst protocol, a source routing forwarding mechanism based on ID identifiers and a source routing forwarding mechanism based on location identifiers.

Abstract: The present invention relates to the technical field of internet of things transmission. Disclosed is an internet of things information system. The internet of things information system of the present invention comprises an object platform, a sensing network platform, and an operator management platform; the object platform establishes a communication protocol with the operator management platform through the sensing network platform; the object platform comprises a perception information system and a control information system; the perception information system acquires perception information of the object platform; the control information system controls objects by control information; the sensing network platform comprises a perception information communication system and a control information communication system; and the operator management platform comprises a perception information management system and a control information management system.

Abstract: The present application discloses a method, an apparatus, and equipment for exposing edge network capability, and a storage medium. The method includes: receiving a network capability service request sent by a mobile edge computing platform; determining a provider of the network capability service requested by the mobile edge computing platform according to the network capability service request; and, if it is determined that the provider of the network capability service is a core network, providing the network capability service of the core network for the mobile edge computing platform.

Abstract: Disclosed herein are systems and methods for scalable and secure transmission of multicast data over a public communication network. In exemplary embodiments of the present disclosure, a virtual overlay network can be presented as a single virtual interface to a computing device, for the receipt and transfer of multicast data in a secure and scalable manner across a public insecure communication network.

Abstract: Disclosed herein are systems and methods for dynamically selecting network paths for data transmission in a virtual overlay network created and maintained across multiple communication networks managed by service providers. The simple creation and management of network overlays is accomplished via a network orchestrator manager, allowing for automation of configuration of connected network devices throughout an entire organization's network, regardless of the physical location of each device. Further, error correcting information can be transferred across a different network path than a plurality of data packets, in accordance with a designated bonding policy.

Abstract: The present technology pertains to a group-based network policy using Segment Routing over an IPv6 dataplane (SRv6). After a source application sends a packet, an ingress node can receive the packet, and if the source node is capable, it can identify an application policy and apply it. The ingress node indicates that the policy has been applied by including policy bits in the packet encapsulation. When the packet is received by the egress node, it can determine whether the policy was already applied, and if so, the packet is forward to the destination application. If the egress node determines that the policy has not be applied the destination application can apply the policy. Both the ingress node and egress nodes can learn of source application groups, destination application groups, and applicable policies through communication with aspects of the segment routing fabric.

Abstract: A computer-implemented method for protecting a user data repository (UDR) from over-accumulation of subscription requests in a subscriber profile of a subscriber of a 5G network may include receiving, from a network node on the 5G network, a new subscription request requesting a notification of status changes associated with the subscriber profile, retrieving the subscription profile from the UDR, and determining a number of preexisting subscription requests associated with a network function (NF) instance identification (ID) of the network node in the subscriber profile. If the number of preexisting subscription requests in the subscriber profile is equal to or greater than a predetermined value (X), the computer-implemented method may further include deleting at least one of the preexisting subscription requests from the subscriber profile and writing the new subscription request to the subscriber profile at the UDR.

Abstract: A network device (PE), a network control method and program which can reduce a BUM traffic packet loss even when a time is taken for route recalculation according to a routing protocol due to a malfunction in a network infrastructure are provided. A network device according to the present invention requests each PE connected to the same ES as that of the network device to perform DF reelection on the basis of a redundant PE list from which the network device has been deleted when cease of a BGP session is detected. In addition, the PE requested to perform the DF reelection executes the DF reelection based on the redundant PE list from which the aforementioned PE has been deleted. In the present invention, BUM traffic can be immediately forwarded from a PE that has become a new DF even when a time is taken for route recalculation according to the routing protocol because another PE connected to the same ES is caused to serve as a DF when the BGP session is ceased.

Abstract: A network device ensures availability of content destination devices, and may receive a request to install a filter, and the request may include information identifying a set of content destination devices capable of receiving packets that match the filter, and priority values indicating priorities by which the set of content destination devices are to receive the packets. The network device may receive status indications indicating availabilities associated with the set of content destination devices, and may receive a packet destined for an endpoint device. The network device may generate a copy of the packet, and may determine that a packet feature matches the filter. The network device may select a particular content destination device, from the set of content destination devices, based on the priority values and the status indications, and may cause the copy of the packet to be forwarded to the particular content destination device.

Abstract: Network access node virtual fabrics configured dynamically over an underlay network are described. A centralized controller, such as a software-defined networking (SDN) controller, of a packet switched network is configured to establish one or more virtual fabrics as overlay networks on top of the physical underlay network of the packet switched network. For example, the SDN controller may define multiple sets of two of more access nodes connected to the packet switched network, and the access nodes of a given one of the sets may use a new data transmission protocol, referred to generally herein as a fabric control protocol (FCP), to dynamically setup tunnels as a virtual fabric over the packet switched network. The FCP tunnels may include all or a subset of the parallel data paths through the packet switched network between the access nodes for a given virtual fabric.

Abstract: Disclosed are various embodiments for the automatic generation of configurations for Internet of Things (IoT) endpoints. At least one metric is collected for an Internet of Things (IoT) endpoint. Then, a function that generates configuration data for the IoT endpoint is invoked. In some instances, the at least one metric is supplied as an argument for the IoT endpoint. The configuration data is received as a result of the function. A device campaign is then created to apply the configuration data to the IoT endpoint. The IoT endpoint can then be assigned to the device campaign.

Abstract: A method implemented by a controller in a software defined network (SDN), the method comprising sending, to an overlay edge node, a query message comprising a client specific multicast address, receiving, from the overlay edge node, one or more report messages corresponding to the query message, wherein each of the one or more report messages comprises an address of each of one or more virtual machines (VMs) coupled to the overlay edge node, and updating membership of a multicast group, which is identified by the client specific multicast address, such that the one or more VMs are members in the updated membership of the multicast group.

Abstract: Aspects herein generally relate to a system and/or a method for enforcing synchronization of WiFi users interacting with a common hierarchical multi-element VR/AR scene. The aspects can use Orthogonal Frequency Division Multiple Access (OFDMA) and trigger frames to synchronize parallel updates to different scene elements. Deep Packet Inspection (DPI) can be used to analyze standard VR/AR streaming formats to identify those VR scene elements that are to be synchronized. The result is a more immersive AR/VR experience for the users, who receive the same scene elements at the same time.

Abstract: A method for creating a secure network is provided. The method comprises establishing an overlay domain to control routing between overlay edge routers based on an underlying transport network, wherein said establishing comprises running an overlay management protocol to exchange information within the overlay domain; in accordance with the overlay management protocol defining service routes that exist exclusively within the overlay domain wherein each overlay route includes information on at least service availability within the overlay domain; and selectively using the service routes to control routing between the overlay edge routers; wherein the said routing is through the underlying transport network in a manner in which said overlay routes is shared with the overlay edge routers but not with the underlying transport network via the overlay management protocol.