Abstract: Techniques of peer-to-peer email synchronization are disclosed herein. In one embodiment, a technique includes transmitting, from a first client device to an email server, a synchronization request to synchronize an email between the email server and the first client device. In response, the first client device receives a reply containing data representing a replicate identification of email content of the email and identification of a second client device at which a copy of the email content is present. Upon receiving the reply, the first client device can establish a peer-to-peer communications channel with the second client device, download a copy of the email content of the email from the second client device instead of the email server, and surface the downloaded email content in an email client on the first client device to a user.

Abstract: A computer device and a method for reading or writing data by a computer device are provided. In the computer device, a central processing unit (CPU) is connected to a cloud controller using a double data rate (DDR) interface. Because the DDR interface has a high data transmission rate, interruption of CPU can be avoided. In addition, the CPU converts a read or write operation request into a control command and writes the control command into a transmission queue in the cloud controller. Because the cloud controller performs a read operation or a write operation on a network device according to operation information in the control command, after writing the control command into the transmission queue, the CPU does not need to wait for an operation performed by the cloud controller and can continue to perform other processes.

Abstract: Techniques are described for redundantly forwarding encapsulated multicast traffic of a multicast distribution tree, using reliable overlay connections established between adjacent nodes of the multicast distribution tree. An example router of this disclosure is configured to receive first multicast packets of a multicast flow via a multicast distribution tree, to receive second multicast packets of the multicast flow via a transmission control protocol (TCP) connection of a connection-oriented distribution tree implemented in parallel to the multicast distribution tree, and in response to determining that the LHR has received a multicast packet of the first multicast packets via the multicast distribution tree out of order to create a gap of one or more of the first multicast packets for the multicast flow, forward, to at least one interested receiver positioned downstream of the router, the second multicast packets.

Abstract: Network traffic in a cloud computing system is monitored in response to a request to capture network traffic of a tenant port of a first virtual machine (VM) executing in the cloud computing system, wherein the first VM is associated with a first tenant organization different from a second organization managing the cloud computing system. A decapsulating VM having a first network interface and a second network interface is instantiated, wherein the decapsulating VM is inaccessible to the first tenant organization. An encapsulated port mirroring session from the tenant port of the first VM to the first network interface of the decapsulating VM is then established. A plurality of packets comprising captured network traffic received via the encapsulated port mirroring session are decapsulated, and the captured network traffic is forwarded via the second network interface of the decapsulating VM to a sniffer VM.

Abstract: VTEP receives a packet, VXLAN-encapsulates and sends a mirror packet of the packet to a remote VTEP accessed by a monitoring server, or ends the mirror packet to a local monitoring server according to the execution action of a matching first forwarding entry if the packet is a user packet from a local monitored host; VXLAN-encapsulates and sends the mirror packet to a remote VTEP accessed by the monitoring server, or sends the mirror packet to the local monitoring server according to the execution action of a matching second forwarding entry if the packet is a user packet sent from a local host to the monitored host. If the packet is a VXLAN packet with the identifier of the monitoring server from the remote VTEP, the VXLAN packet is de-encapsulated to be sent to the local monitoring server according to the execution action of a matching third forwarding entry.

Abstract: Some embodiments provide a set of one or more network controllers that communicates with a wide range of devices, ranging from switches to appliances such as firewalls, load balancers, etc. The set of network controllers communicates with such devices to connect them to its managed virtual networks. The set of network controllers can define each virtual network through software switches and/or software appliances. To extend the control beyond software network elements, some embodiments implement a database server on each dedicated hardware. The set of network controllers accesses the database server to send management data. The hardware then translates the management data to connect to a managed virtual network.

Abstract: Described are systems and methods for implementing and operating a Device Abstraction Proxy (DAP). In one embodiment, the DAP includes a communications interface to connect the DAP to one or more access aggregation devices, each having a plurality of physical ports to provide Digital Subscriber Line (DSL) communication services to a plurality of remote DSL terminals via the plurality of physical ports. The DAP may further include a memory and processor to execute a virtual access aggregation device, in which a subset of the plurality of physical ports are allocated and linked to corresponding logical ports. The DAP may further include a global rule-set module to define operational constraints for the DSL communication services, and a management interface to allow at least one broadband access management system to manage the subset of physical ports allocated to the virtual access aggregation device subject to the operational constraints.

Abstract: A first map request message is sent from a source network device to a mapping network device to determine a destination network device associated with a destination endpoint device and a security association between the source network device and the destination network device. A first response message is received at the source network device that includes data indicating a mapping between the destination network device and the destination endpoint device and data indicating a security association between the source network device and the destination network device. The data is stored at the source network device. A second map request message is sent from the source network device to the mapping network device to update the data indicative of the mapping or the security association. A second response message is received at the source network device from the mapping network device.

Abstract: In one aspect, implementing enhanced QoS for multiple replication sessions in a replication setup includes, for each of a number of replication sessions simultaneously implemented via the storage system, determining an assigned priority level and calculating a corresponding resource profile. The resource profile specifies a minimum required amount of bandwidth and a minimum amount of input/output (IO) operations for the replication session. An aspect also includes determining available system resources for an aggregate of the replication sessions. The available system resources indicate a maximum available amount of bandwidth and a maximum available IO rate across the storage system. An aspect further includes apportioning resources among the replication sessions as a function of collective priority levels, resource profiles, and the available system resources.

Abstract: A computer-implemented topology-aware all-reduce method for an environment including a plurality of systems is provided. Each system of the systems includes a plurality of computing modules. The computer-implemented topology-aware all-reduce method according to aspects of the invention includes locally partitioning and scattering data slices among the computing modules of each system to produce local summation results. The local summation results are copied from the computing modules to corresponding host memories of the f systems. A cross system all-reduce operation is executed among the systems to cause an exchange of the local summation results across the host memories and a determination of final summation partitions from the local summation results. The final summation partitions are copied from the host memories to the corresponding computing modules of each system.

Abstract: Various techniques for partitioning a computer network is disclosed herein. In certain embodiments, control plane functions (e.g., computation of network routes) and/or forwarding plane functions (e.g., routing, forwarding, switching) may be partitioned and performed individually on per domain basis based on (1) a network configuration of a particular domain (e.g., end points and/or lower-level domains in the particular domain); and (2) one or more higher-level domains connected to the particular domain in the hierarchy. Thus, a particular domain can manage various network operations of the domain without concerns regarding end points or network nodes in other domains of the hierarchy. Thus, network configuration and operation may be partitioned to reduce hardware costs and operational complexity even as the size of the overall computer networks increases.

Abstract: Methods, computer program products, and systems are presented. The method computer program products, and systems can include, for instance: receiving, by a Network Virtualization Edge (NVE) of a first virtual network (VN), a multicast packet from a virtual machine (VM) of the first virtual network (VN); determining, by the NVE, whether the NVE currently supports forwarding the multicast packet to a second NVE of a second virtual network (VN), the second virtual network (VN) being logically separated from the first virtual network (VN); responsively to determining that the NVE currently supports forwarding the multicast packet to a second NVE of a second virtual network (VN) forwarding, by the NVE, the multicast packet to the second NVE.

Abstract: In one embodiment, a method comprises: storing, by a computing device in a non-deterministic data network, a plurality of data packets originated by a source device into a mass storage medium associated with the computing device; receiving, by the computing device, a data request originated by an access point device providing deterministic reachability to a deterministic device in a deterministic data network providing reachability to multiple deterministic devices, the request specifying one or more deterministic constraints associated with reaching the deterministic device; and supplying, by the computing device, a selected one of the data packets to the access point device for delivery of data stored therein to the deterministic device according to the one or more deterministic constraints.

Abstract: Systems, methods, and computer readable storage mediums are disclosed for scalable data collection and aggregation of statistics for logical objects of an application centric network. An analytics agent running on a logical object of an application centric network is elected as one of a Designated Stats device (DSD) or a Member Stats device (MSD). If the analytics agent is defined as a DSD, the analytics agent receives data reported from a downstream MSD communicated over the analytics plane and aggregates data from the MSD belonging to the same access control list rule. If the analytics agent is defined as an MSD, the analytics agent selects a DSD and reports the statistics to that DSD over the analytics plane.

Abstract: A method for performing data-accessing management in a storage server and associated apparatus such as a host device, a storage device, etc. are provided. The method includes: in response to a client request of writing a first set of data into the storage server, utilizing the host device within the storage server to trigger broadcasting an internal request corresponding to the client request toward each storage device of a plurality of storage devices within the storage server; and in response to the internal request corresponding to the client request, utilizing said each storage device of the plurality of storage devices to search for the first set of data in said each storage device to determine whether the first set of data has been stored in any storage device, for controlling the storage server completing the client request without duplication of the first set of data within the storage server.

Abstract: The disclosed computer-implemented method for improving network efficiency may include (i) receiving, from a client device, and at a publicly available on-demand cloud computing platform, a network packet that indicates an origination network address of an intermediary local network gateway that forwarded the network packet rather than an actual network address of the client device, and (ii) inserting, into the network packet, and at the publicly available on-demand cloud computing platform, network address translation information indicating a path to the actual network address of the client device to enable a virtual node within the publicly available on-demand cloud computing platform to identify the client device. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Methods, apparatuses, and systems are described that implement techniques and protocols to enable a station to receive a neighbor query request from a first associated access point that is associated with the station. The station may wirelessly communicate a neighbor report of a second access point to the first access point while the station is unassociated with the second access point.

Abstract: A link protection method in a software-defined networking (SDN), a corresponding switching device and network controller, where the method includes receiving, by a first switching device in the SDN, first information from a network controller in the SDN and link protection information, where the first information establishes a communication link between the first switching device and a destination device, and the link protection information instructs the first switching device to proactively perform primary-to-secondary link switching when a link is faulty, establishing, by the first switching device, the communication link with the destination device according to the first information, and determining, by the first switching device according to the link protection information, that the first switching device proactively performs the primary-to-secondary link switching.

Abstract: Service discovery is accomplished across a network with reduced traffic. Network devices often receive multicast discovery requests for various protocols and/or services, which increase network traffic and degrade network performance. Here, though, a server maintains a membership list for a particular protocol. The server populates the membership list with subnet devices that confirm the particular protocol. Whenever the server receives a discovery request associated with the protocol, the server need not clog its subnet with multicast requests. Instead, the server need only retrieve the membership list that is associated with the protocol. The membership list contains the subnet addresses assigned to the subnet devices that confirm the particular protocol.

Abstract: In a network virtualization system, metadata is passed in an encapsulation header from one network virtualization edge to another network virtualization edge or to a service connected to a network virtualization edge. The metadata may carry packet processing instructions, diagnostic information, hop-specific information, or a packet identifier. Using the metadata information in the packet header, the datacenter network may provide services such as remote segmentation offload, small packet coalescing, transparent packet compression, and end-to-end packet tracing.

Abstract: Technologies for providing I/O channel abstraction for accelerator device kernels include an accelerator device comprising circuitry to obtain availability data indicative of an availability of one or more accelerator device kernels in a system, including one or more physical communication paths to each accelerator device kernel. The circuitry is also configured to determine whether to establish a logical communication path between a kernel of the present accelerator device and another accelerator device kernel and establish, in response to a determination to establish the logical communication path as a function of the obtained availability data, the logical communication path between the kernel of the present accelerator device and the other accelerator device kernel.

Abstract: Systems, apparatuses, methods, and computer program products are disclosed for quantum random number generation (QRNG). An example method includes generating, by encoding circuitry of a QRNG chip, a series of photons and transmitting the series of photons over an optical line. The example method further includes determining, by decoding circuitry of the QRNG chip, a set of quantum bases to use for measurement. The example method further includes receiving, by the decoding circuitry of the QRNG chip, the series of photons over the optical line and decoding the series of photons based on the determined set of quantum bases to generate a decoded set of bits. In some embodiments, the example method further includes generating, by session authentication circuitry, a session key based on the decoded set of bits.

Abstract: An information transmission method and device, comprising: when being connected to a virtual network, a network edge node encapsulates the virtual network identifier of the connected virtual network in a multicast protocol packet; the network edge node sends the multicast protocol packet to network edge nodes other than itself. The information transmission method can implement delivery of a virtual network identifier, thereby implementing highly efficient transmission of virtual network data.

Abstract: This disclosure provides systems and methods for processing packets. A system can include first computing device, a second computing device, and a first packet forwarding device. Each of the first computing device and the second computing device can be communicatively coupled to a respective port of the first packet forwarding device. Each port of the first packet forwarding device can be assigned a unique MAC address. For a first packet received from the first computing device, the first packet forwarding device can be configured to determine that a destination MAC address of the first packet matches the MAC address assigned to the port on which the first packet was received, and to forward the first packet to the second computing device, responsive to the determination. For a second packet received from the second computing device, the first packet forwarding device can be configured to forward the second packet via the port whose MAC address matches a source MAC address of the second packet.

Abstract: A method, node and identifier authorizing entity for generating a unique identifier at a node in a hierarchal tree having a plurality of nodes, the hierarchical tree arranged in a plurality of levels. The method includes obtaining a first limit condition from a higher level node of the plurality of nodes in the hierarchal tree, generating the identifier, applying a function to the generated identifier, verifying that an output of the function satisfies the limit condition, determining a second limit condition for at least one lower level node of the plurality of nodes in the hierarchal tree, and sending the second limit condition to the at least one lower level node of the plurality of nodes in the hierarchal tree.

Abstract: A system for managing communication ports in a Kafka cluster is disclosed. The disclosed system receives a maintenance signal to shut down the Kafka cluster for maintenance. The Kafka cluster comprises a plurality of Kafka servers communicating with each other via a plurality of internal communication ports. In response to receiving the maintenance signal, the system shuts off a plurality of external communication ports arranged between the Kafka cluster and a plurality of external servers. Then, the system synchronizes the Kafka servers by replicating data among the Kafka servers. After determining that the Kafka servers are synchronized, the system shuts down the Kafka servers for maintenance. The internal communication ports are retained open when the system shuts down the external communication ports and during the maintenance.

Abstract: Methods and systems are provided for latency-oriented router. An incoming packet is received on a first interface. The type of the incoming packet is determined. Upon the detection that the incoming packet belongs to latency-critical traffic, the incoming packet is duplicated into one or more copies. Subsequently, the duplicated copies are sent to a second interface in a delayed fashion where the duplicated copies are spread over a time period. The duplicated copies are received and processed at the second interface.

Abstract: Methods and apparatuses for enabling sub-seconds link failure detection in a multi-chassis link aggregation group (MC-LAG) system are described. A first network device of a packet network transmits an IP packet over a first link that is part of the MC-LAG, where the MC-LAG couples the first network device with a second network device and a third network device and the second and third network devices are part of an Inter-Chassis Redundancy (ICR) system. The IP packet includes a payload including a Bidirectional Forwarding Detection (BFD) control packet, where the destination address of the IP packet is one of a multicast IP address and a broadcast IP address.

Abstract: Routing packets through a virtual network (VN) in support of service-based traffic forwarding is provided. Data packets are routed using a virtual router (v-router) toward a destination end point over a pre-configured VN. The v-router is associated with a VN node, which is associated with a physical network node (NN). A data packet associated with the VN is received and a name identifier of the destination end point is specified. A location corresponding to the name identifier is obtained. An indication of a destination VN node corresponding to the location is obtained. An indication of a next VN node on a path between the virtual router and the destination VN node is obtained. The indication of the next VN node is inserted into the packet to produce a routed packet. The routed packet is submitted to the associated NN for transmission toward the next node.

Abstract: A bit indexed explicit replication (BIER) network device may receive information indicating that a BIER proxy device is a BIER proxy for a first network device, and may transmit, to the BIER proxy device and based on receiving the information, a BIER-encapsulated multicast packet via a first tunnel between the BIER network device and the BIER proxy device. The BIER proxy device may be to transmit, via a second tunnel through the first network device, a first copy of the BIER-encapsulated multicast packet to a second network device.

Abstract: Embodiments of the present disclosure disclose a method for defending against a User Datagram Protocol (UDP) attack and a defense device. The method is implemented by a defense device, the defense device comprising a memory, a processor, and a bus system. The method comprising: detecting, by the defense device, whether a target host is attacked by a UDP attack from an attack device; obtaining, by the defense device, an Internet Control Message Protocol (ICMP) data packet sent back by the target host to the attack device, in response to the target host being attacked by the attack device; extracting, by the defense device, information about target ports in the ICMP data packet; and performing, by the defense device according to the information about the target ports, interception processing on UDP data packets sent by the attack device to the target ports.

Abstract: A method, system and computer program product are disclosed for creating a dynamic heterogeneous IoT network from existing IoT network devices to identify and implement a dynamic response to an event. In an embodiment, the method comprises identifying an occurrence of a specified event; and creating a heterogeneous IoT network to respond to the event, including selecting a master IoT device and identifying one or more participatory IoT devices for the created network from multiple IoT devices from one or more existing IoT networks. The master IoT device is in bidirectional communications with the participatory IoT devices. The master device identifies a response to the specified event, translates the response into commands, and sends the commands to the participatory IoT devices to implement the response. The master IoT device may pass control to another master device in another heterogeneous IoT network if the response is not accomplished.

Abstract: A method, electronic device, and non-transitory computer readable medium for controlling Wi-Fi channels. The method comprises, in response to identifying an application to be executed, identifying, by the electronic device, available Wi-Fi channels to use for sending and receiving data for the application. The method also includes identifying, by the electronic device, which one of the available Wi-Fi channels to use for sending and receiving the data for the application based on preset mappings between applications and the available Wi-Fi channels.

Abstract: Disclosed is a mechanism that provides the extensions of PCEP message and the objects to support PCECC with P2MP capability in downloading the labels for branch node of P2MP TE LSPs. In one implementation, the present invention provides an apparatus, a system, a node and a method that receives a PCLabelUpd message with all the extensions and the objects to support PCECC with P2MP capability, detects the object and identifies that the label download is for P2MP TE LSP and for this LSP, the apparatus/the system/the node acts as a branch node, and thereby the apparatus/the system/the node downloads all the labels specified in the object to data plane with respect to any existing branch node download mechanism for a P2MP TE LSP.

Abstract: Providing network device selection for broadcast content is disclosed. Changes to a LTE or LTE-B network can be propagated in real-time, or near-real-time, to a mapping profile representative of the LTE or LTE-B network. This mapping profile can be employed in updating the LTE or LTE-B network. Further, the mapping profile can be employed in establishing a new LTE-B session, adapting an existing LTE-B session, maintaining an existing LTE-B session, etc. Access to a selection rule can enable the LTE or LTE-B network to rank a determined bearer path of the LTE or LTE-B network. LTE-B network and service management can be performed by the LTE-B network or components thereof, such as, at a BMSC component. Moreover, network device selection for broadcast content can be virtualized.

Abstract: A method and apparatus of a network element that converts an indication from a multicast routing protocol is described. In an exemplary embodiment, the network element receives a multicast routing protocol indication for a multicast group, wherein the multicast group is configured for a set of one or more sources. The network element additionally converts the indication to a set of one or more source specific routing protocol messages. Furthermore, the network element determines a set of one or more network elements for the set of one or more source specific routing protocol messages and sends the set of one or more source specific routing protocol messages to the set of one or more network elements.

Abstract: Methods, systems, and apparatus for provisioning a network device are disclosed. In one aspect, a message is received by a translation device from a controller. A determination is made, by the translation device, that the received message includes data that is destined for multiple different downstream network devices. A determination is made that a first downstream network device among the multiple different downstream network devices is incapable of being provisioned using a communications protocol of the received message. Data from the received message, that is destined for the first downstream network device, is translated, by the translation device, from the communications protocol of the received message to a translated message defined in a different protocol that is required to provision the first downstream network device. The translated message is transmitted, by the translation device, to the first downstream network device according to the different protocol.

Abstract: A conferencing computing device, including memory storing one or more dispatch data structures. The conferencing computing device may further include a processor configured to receive a plurality of input packets at a port from a plurality of sender computing devices. Based on input packet data and the one or more dispatch data structures, for each input packet, the processor may to add that input packet to a queue of a transport provider bound to the port. The processor may transmit the plurality of input packets to a plurality of application program instances and instantiate a respective plurality of concurrent multipoint conferencing sessions. The processor may transmit a plurality of output packets from the plurality of application program instances to a plurality of recipient computing devices. The plurality of output packets may be multiplexed through the port and each have a multiplexed local socket address of the port.

Abstract: A system that incorporates teachings of the present disclosure may include, for example, a set-top-box (STB) having a controller to join a multicast group having an associated multicast address, wherein the multicast address is associated with a first content type of a plurality of content types, access encoded content associated with the first content type from the multicast address, wherein the encoded content is transmitted by at least one source associated with the multicast group to the multicast address, decode the accessed encoded content, and display the decoded content on a channel mapped to the multicast address. Other embodiments are disclosed.

Abstract: Various aspects of the present disclosure generally relate to wireless communication. In some aspects, a base station (BS) may transmit and a user equipment (UE) may receive cloned bandwidth part configuration information. In some aspects, the UE may determine a linkage between a primary bandwidth part and the cloned bandwidth part. In some aspects, the BS may transmit and the UE may receive a downlink control information message identifying the primary bandwidth part to signal a bandwidth part switch for the primary bandwidth part and a first bandwidth part or identifying the cloned bandwidth part to signal the bandwidth part switch for the primary bandwidth part and a second bandwidth part. In some aspects, the UE may perform the bandwidth part switch based at least in part on the downlink control information message. Numerous other aspects are provided.

Abstract: Systems and methods are provided for intelligent road markers. An intelligent road marker comprises a transceiver; a hardware processor; and a non-transitory machine-readable storage medium encoded with instructions executable by the hardware processor to perform a method comprising: receiving a message via the transceiver, the message describing a condition related to a road where the intelligent road marker is deployed; determining a direction in which the message is to be propagated; selecting another one of a plurality of the intelligent road markers according to the determined direction, and a stored deployment pattern of the intelligent road markers; and causing the transceiver to transmit the message to the selected intelligent road marker.

Abstract: Systems, methods, and computer-readable storage media for wireless roaming are disclosed. An access point receives a communication request from a wireless device and determines a home broadcast domain associated with the wireless device. The access point determines that the home broadcast domain is different than the broadcast domain associated with the access point and proceeds to identify a second access point that is associated with the home broadcast domain of the wireless device. The access point establishes a tunnel between the access point and the second access point for routing traffic associated with the wireless device.

Abstract: Apparatus and methods described herein relate to an apparatus including a set of ports and a processor operatively coupled to each port of the set of ports. A port from the set of ports can be associated with a port of a multi-chassis aggregate (MCAE) interface and a virtual local area network (VLAN). The processor can generate an untagged data unit and tagged data units. The processor can send the untagged data unit and the tagged data units via the port from the set of ports, and can receive a tagged data unit included in the tagged data units, and/or the untagged data unit. The processor can also forward the received data unit to a destination network peer when the received tagged data unit is associated with the VLAN, and can disable the port of the MCAE interface in response to the port from the set of ports receiving the data unit, when the received data unit is associated with the VLAN.

Abstract: Aspects of the subject disclosure may include, for example, identifying a packet data protocol session that supports a first data exchange between a mobile application of a first mobile device and a first recipient device, wherein the first exchange of data comprises a directing of the first exchange of data through a network device. A second recipient device is determined, and a second data exchange is facilitated between the mobile application and the second recipient device by way of the packet data protocol session, wherein the second exchange of data also comprises a directing of the second exchange of data through the network device without modifying the first data exchange. Other embodiments are disclosed.

Abstract: Various example embodiments relate generally to supporting Multiprotocol Label Switching (MPLS)-based multicast over a Bit Index Explicit Replication (BIER) domain. Various example embodiments for supporting MPLS-based multicast over a BIER domain may be configured to support MPLS point-to-multipoint (P2MP) label switched paths (LSPs) over a BIER domain. Various example embodiments for supporting MPLS-based multicast over a BIER domain may be configured to support establishment and transport of P2MP LSPs over a BIER domain (e.g., signaling MPLS via the BIER domain, stitching the MPLS datapath to the BIER domain based on identification of P2MP LSPs within the BIER domain, and so forth).

Abstract: Aspects of the disclosure provide a system and method used for receiving Address Resolution Protocol (ARP) requests from access nodes and returning a designated address to satisfy a service provider' policies. This can include receiving a request from an access node at a provider edge node, and returning a designated Media Access Control (MAC) address in response to a request for a MAC address for a specified destination IP address, the designated MAC address being a MAC address for a node other than the provider edge node. This can effectively route requests to a Policy Enforcement point (PEP), which can be, for example a Broadband Services Router (BSR). A network controller can update ARP tables in the provider edge node to ensure that traffic which require policy enforcement can be routed to the PEP, whereas traffic which does not require policy enforcement can be normally routed towards the traffic's destination.

Abstract: An Active Cyber Defense method and system is provided for detecting and stopping malicious cyber activity including for example Drive-By Exploits, Malicious Binaries, Data Exfiltration, Social Engineering and Credential Stealing Attacks. The system disclosed herein can be configured to detect and block multi protocol network-based cyber attacks targeting different platforms or operating systems. The system can also be configured to be scalable. The system as disclosed herein can conduct real time inspection of network traffic and can self-learn and adapt as needed to a changing cyber threat landscape.

Abstract: A method and apparatus for delivering requested content over a network is described. The method includes receiving, by a first network node, a request from a second network node for the requested content, the request comprising an IPv6 address associated with the requested content. A longest prefix match is then performed between the IPv6 address associated with the requested content and IPv6 addresses associated with content available at the first network node. In the event that the longest prefix match does not result in an exact match between the IPv6 address associated with the requested content and any of the IPv6 addresses associated with content available at the first network node, the request is routed towards a content variant suitable for transcoding to the requested content, the content variant being stored at the first network node.

Abstract: A communication device updating system includes a network switch, a plurality of first devices, and a second device. Each of the plurality of first devices is communicatively coupled to the network switch. The second device is communicatively coupled to the network switch, and is configured to store a communication device firmware file, wherein the second device multicasts the communication device firmware file to each of the plurality of first devices through the network switch, and each of the plurality of first devices is updated according to the received communication device firmware file.

Abstract: In some examples, an access point determines, based on at least one criterion that includes a non-time based criterion, whether to activate group-addressed transmission of information relating to an access network. In response to determining, based on the at least one criterion, to activate group-addressed transmission of information relating to the access network, the access point transmits information relating to the access network in a message targeted to a group address.