Abstract: A communication system includes multiple nodes connected with each other. Each of the multiple nodes generates a message authentication code using a count value of a counter. The multiple nodes include a transmission node and a reception node. The count value of the counter is includes a high-order count value and a low-order count value. In the transmission node, a normal message generation portion generates a normal message to include a transmission data, the low-order count value, and the message authentication code, and a synchronization message generation portion generates a synchronization message. In the reception node, a message verification portion verifies the received normal message, a resynchronization request portion transmits a resynchronization request of the counter to the transmission node, and a count value update portion updates the high-order count value stored in the reception count value storage portion when the synchronization message is received.

Abstract: A device may receive, from an ingress device, a packet for a protocol session associated with detecting faults in a path of a network that includes a link aggregation group (LAG). The packet may be encapsulated with a user datagram protocol (UDP) header that includes a dynamically assigned UDP source port identifier. The LAG may include a set of links. The device may select, using the dynamically assigned UDP source port identifier, a link in the LAG to use in the path. The device may provide, using the selected link, the packet to one or more downstream devices to permit a downstream device, of the one or more downstream devices, to determine whether packet timeout has occurred. The device may receive an instruction to maintain the protocol session or to close the protocol session and close the path. The device may provide the instruction to the ingress device.

Abstract: Various systems and methods for using strict path forwarding. For example, one method involves receiving an advertisement at a node. The advertisement includes a segment identifier (SID). In response to receiving the advertisement, the node determines whether the SID is a strict SID or not. If the SID is a strict SID, the node generates information, such as forwarding information that indicates how to forward packets along a strict shortest path corresponding to the strict SID.

Abstract: A border router includes at least one processor and at least one memory including computer program code. The at least one memory and the computer program code is configured to, with the at least one processor, cause the border router to: identify, in response to receiving a label mapping message from a network node, a backup border router as a hop in a backup path between a leaf node and a root node in a multicast network including an autonomous system, the label mapping message including a type-length-value; determine whether the backup border router is an originating border router having generated the label mapping message based on the type-length-value; and suppress mapping of the hop in the backup path in response to determining that the backup border router is the originating border router.

Abstract: The present technology provides a system, method, and computer-readable medium directed to dynamic implementation and management of multi-provider internet access featuring multiple access points across a multi-site overlay network fabric. An aspect of the technology is directed to the implementation of a common fabric-wide Virtual Network (VN) with a unique Internet Instance Identifier (Internet IID) that is dedicated to internet access traffic. Default access routes from multiple service providers (SP) are leaked into the VN with the Internet IID at exit points of the fabric using local Extranet policies. Internet-bound traffic generated from any point within the overlay fabric network is then redirected into the Internet IID, using remote Extranet policies. Internet-bound traffic, once in the Internet IID, follows the SP default access route(s) towards the exit points where SP specific access policies may be applied to the traffic which is then forwarded to the corresponding SP network.

Abstract: A content distribution network includes first and second controllers, and multicast enabled routers. The first controller is configured to select a multicast channel for distributing content, to determine that the content has a geographic restriction associated with a restricted area in the content distribution network, to link an exclusion policy for the content to the multicast channel while the multicast channel provides the content, and to deny a request for the content from a client system within the restricted area based on the exclusion policy. The second controller is configured to distribute the exclusion policy to the multicast enabled routers including a first router configured to store the exclusion policy, and to ignore a multicast join message from the client system within the restricted area based on the exclusion policy.

Abstract: A method for forming a dynamic bridge node of a wireless mesh network is provided. The method includes enabling a bridge mode of at least one of the mesh nodes in correspondence to a mutual coverage, when a signal corresponding to a connection source is received from the external network, transmitting, by the mesh node having the enabled bridge mode, rank information for connection to the external network with reference to a distance to the connection source and the mesh node's own traffic, comparing rank information received from a neighboring mesh node having an enabled bridge mode with the mesh node's own rank information, and generating an order of priority for connection to the external network. The mesh node with the highest order of priority operates as a bridge node for connection of the external network and the wireless mesh network.

Abstract: A device receives a packet, of multiple packets, relating to a file being delivered via multicast, and a file delivery table associated with the file. The file delivery table includes uniform resource identifiers corresponding to respective sources of the file. The device determines that one or more portions of the file, that are included in the packet, are in need of repair after receiving the packet. The device provides, to a respective source corresponding to a uniform resource identifier, a request for data relating to the one or more portions of the file based on determining that the one or more portions of the file are in need of repair, receives the data from the respective source based on the request, and processes the data to repair the one or more portions of the file while one or more other packets of the multiple packets are being received.

Abstract: An example device at a gateway node in a mesh network comprising: a processor to negotiate with other gateway node in the mesh network to obtain a common network identifier wherein the mesh network includes at least two gateway nodes uniquely identified by at least two node identifiers; report the common network identifier to a route generator for establishing a source routing tree for gateway nodes in the mesh network, wherein the source routing tree includes the gateway node as a root and a plurality of non-root nodes each comprising a non-gateway node including the device.

Abstract: A network switch device includes an L1 switch having a first set of external ports and a first set of internal ports. The network switch device further includes an L2+L3 switch having a second set of internal ports, the L2+L3 switch operatively coupled to the L1 switch via the first set of internal ports and the second set of internal ports.

Abstract: The present disclosure describes example service takeover methods, storage devices, and service takeover apparatuses. In one example, when a communication fault occurs between two storage devices in a storage system, the two storage devices respectively obtain running statuses of the two storage devices. A running status can reflect current usage of one or more system resources of a particular storage device. Then, a delay duration is determined according to the running statuses, where the delay duration is a duration for which the storage device waits before sending an arbitration request to a quorum server. The two storage devices respectively send, after the delay duration, arbitration requests to the quorum server to request to take over a service. The quorum server then can select a storage device in a relatively better running status to take over a host service.

Abstract: Disclosed are systems and methods for improving interactions with and between computers in content searching, generating, hosting and/or providing systems supported by or configured with personal computing devices, servers and/or platforms. The systems interact to identify and retrieve data within or across platforms, which can be used to improve the quality of data used in processing interactions between or among processors in such systems. The disclosed systems and methods provide a novel clustering framework applied on datasets of network interactions to automatically identify IP clusters carrying out a specific task(s) based on an IP blacklist. The disclosed systems and methods can analyze network activity of devices associated with the IP addresses, and/or the IP addresses themselves, and perform an automatic, on-the-spot analysis that results in a determination whether the activity is permitted on or over a network.

Abstract: In an example, a system is described which includes a centralized controller, a first agent controller, and a second agent controller. The centralized controller executes a routing application to control routing of network traffic across links of a wide area network. The first agent controller is deployed at a branch location of the wide area network to notify the routing application when a host at the branch location requests membership in a multicast group. The second agent controller is deployed at a headend of the wide area network to modify a forwarding rule in response to an instruction from the routing application. The forwarding rule controls an interaction between the headend location and an upstream router to redirect network traffic associated with the multicast group in a manner that joins the host to the multicast group.

Abstract: A network switch having hardware thereon for transmitting probes to neighbor devices for exercising forwarding states (e.g., layer 2 and layer 3) on the switch. A light-weight agent resides on one or both of neighbor network devices and can be used to control the testing. One or more probes originating from the source network device (device A) from a local CPU are routed on the same network device A in hardware and sent out on a link towards a peer device (device B). The probes purposefully include a time-to-live (TTL) parameter designed to expire when the probe reaches the peer. Peer device B captures the probe using layer 3 hardware because of the TTL parameter generates an error, which causes the probe to be transmitted to a CPU. The CPU transmits the probe back to network device A as a TTL expiration error.

Abstract: A client and content provider are connected by a plurality of simultaneous transport connections. The number of the transport connections that are used to transfer data is selected based on the size of the data to be transferred and may change after transfer of data has commenced based on the amount of data left and the attributes of the transport connections. In another aspect, data to be transmitted over the transport connections is organized into frames such that each frame includes data from only one data stream. The frames are sized to be less than or equal to a control window of the transport connection over which they are transmitted. Each frame may be assigned to a transport connection in a round robin fashion or based on the size of the frame and the sizes of the control windows of the transport connections.

Abstract: A coordination point includes a persistent storage and a processor. The persistent storage stores a distributed system map. The processor obtains role information associated with computing devices from validators without interacting with user resources of the computing devices; updates the distributed system map using the obtained role information; identifies a portion of the computing devices as members of a functionality group using the updated distributed system map; and enforces a configuration, associated with the functionality group, on the user resources of each computing device of the portion of the computing devices.

Abstract: A method for a hypervisor supported by a source host to implement a port mirroring session in a virtualized computing environment includes receiving a packet passing through a first virtual port supported by the source host, wherein the packet is destined for a destination virtual machine on a destination host. The method also includes based on a first media access control (MAC) address of a first virtual network interface controller (VNIC) associated with a first monitoring virtual machine (VM), obtaining a first IP address associated with a first host that supports the first VNIC and the first monitoring VM, generating a port mirroring packet with the first IP address and a mirrored copy of the packet, wherein the port mirroring packet comprises a first Generic Network Virtualization Encapsulation (Geneve) base header, which includes the first MAC address, and transmitting the port mirroring packet to the first host.

Abstract: A method of supporting group communication over LTE MBMS is provided. A UE first establishes a unicast bearer in a network for group communication. The UE belongs to a communication group having a communication group ID. The UE receives access information from the network for monitoring downlink (DL) multicast traffic of the DL group communication based on a multicast decision. The UE is then ready for monitoring a multicast Multimedia Broadcast Multicast Service (MBMS) bearer for receiving the DL multicast traffic. In one embodiment, The UE requests to switch the DL multicast traffic from the multicast MBMS bearer to the unicast bearer upon detecting that the UE is approaching an MBMS coverage boundary. In another embodiment, the UE transmits an indication of preferred target cells to the network before performing a handover and thereby maintaining multicast service continuity of the group communication.

Abstract: The techniques describe packet reordering for packets flowing on a new path in response to a change in internal forwarding paths in a network device. For example, a network device may dynamically change the selection of an internal forwarding path to achieve fabric path optimization (“OFP”) or to ensure optimized load balancing. Packets forwarded on the new path are buffered such that the transmission of packets forwarded on the new path are delayed for a buffering time period of at least the time in which a packet is being sent from the source packet processor to the initial destination packet processor.

Abstract: Methods, systems, apparatus, including computer programs encoded on computer storage media, for generating and routing modified multimedia data frames. In one aspect, the method includes maintaining, by a first network node, channel membership data that includes data indicating, for each channel of a plurality of channels, leaf node membership for a plurality of channels, and for each channel of the plurality of channels: determining, based on the channel membership data, the leaf nodes that are subscribed to access the channel, generating, based on the leaf nodes that are subscribed to access the channel, a modified multimedia data frame for the channel that includes (i) a hub node identifier, (ii) data that describes a destination address of each leaf node that is subscribed to access the channel and (iii) a payload, and transmitting, by the first network node, the generated modified multimedia data frame to a second network node.

Abstract: A method for a parallel execution of services of a serial service chain on packets using multicast-based service insertion is disclosed. In an embodiment, the method comprises identifying a plurality of services to be applied to packets of a data flow and determining a plurality of service machines that are configured to provide the plurality of services for the data flow. The plurality of service machines is grouped to a plurality of multicast groups; wherein multicast groups in the plurality of multicast groups are sequentially ordered from a first multicast group that includes a largest count of service machines to a last multicast group that includes a smallest count of service machines. Upon detecting a packet of the data flow, the is stored in memory, and multicast to the first multicast group of the plurality of multicast groups to cause applying, in parallel, services of service machines included in the first multicast group to the packet.

Abstract: A system includes a test controller configured for testing a device under test (DUT). Testing the DUT includes creating a link aggregation group (LAG) with the DUT, and the LAG includes a first link and a second link. The system includes a first traffic generator circuit including a first physical network port and a first port processor configured to transmit a first stream of test packets over the first link of the LAG. The system includes a second traffic generator circuit including a second physical network port and a second port processor configured to transmit a second stream of test packets over the second link of the LAG. The system is configured for instructing the first port processor to transmit both the first stream of test packets and the second stream of test packets on the first physical network port in response to detecting an anomaly on the second link.

Abstract: A method for managing communication in a wireless mesh network comprising a plurality of wireless nodes and a wireless node for use in such network are described, wherein said method may comprise: providing a time slot schedule (frame), preferably a TDMA time slot schedule (frame), comprising one or more time slots, including a transmission time slot enabling a node to transmit a broadcast message, a reception time slot enabling a node to receive a broadcast message from one or more other nodes; and/or a sleep time slot for configuring said node in an idle state; and, assigning said time slots to nodes in said network on the basis of the position of said nodes in said network.

Abstract: An information transmission method, comprising: a control platform generating forwarding information of a bit indexed explicit replication (BIER) network; and the control platform sending, according to the forwarding information of the BIER network, a BIER flow table to a forwarding device through an OpenFlow protocol. The solution solves the problems that, in a forwarding mode for a multicast message in the relevant OpenFlow technology, a space occupied by an entry is larger and the forwarding efficiency is lower because it is necessary to establish a corresponding flow table and group table on each forwarding device for each flow.

Abstract: In one embodiment, a multicast listener device floods a path lookup request to search for a multicast tree, and may then receive path lookup responses from candidate nodes on the multicast tree, where each of the path lookup responses indicates a unicast routing cost from a respective candidate node to the multicast listener device, and where each of the candidate nodes is configured to suppress a path lookup response if a total path latency from a source of the multicast tree to the multicast listener device via that respective candidate node is greater than a maximum allowable path latency. The multicast listener device may then select a particular candidate node as a join point for the multicast tree based on the particular node having a lowest associated unicast routing cost to the multicast listener device from among the candidate nodes, and joins the multicast tree at the selected join point.

Abstract: In embodiments, Internet of Things (IoT) devices may be organized according to an IoT device hierarchy, which may include parent and/or child associations between resources associated with IoT devices and/or with groupings of IoT devices. IoT devices wishing to support an IoT device hierarchy may utilize an extended IoT device resource model which provides for IoT device hierarchy information and interfaces to be provided by supporting IoT devices. A supporting resource may have one or more parent properties and/or child properties which may identify, respectively, parent or child resources which are associated with the resource. In various embodiments, these parent properties and/or child properties may include uniform resource identifiers (URI). A supporting resource may also identify an interface type for a hierarchical access interface, through which one or more descendant resources may be accessed through a single command. Other embodiments may be descried and/or claimed.

Abstract: A system includes a first communication device and a second communication device in communication with the first communication device via an Ethernet connection. The first communication device is configured to transmit, via the Ethernet connection toward the second communication device, an Ethernet signal including information of a designated wavelength from a dense wavelength division multiplexing (DWDM) scheme to be used by the second communication device. The second communication device is configured to transmit an optical signal at the designated wavelength to the first communication device in response to receiving the Ethernet signal.

Abstract: A network device may transmit, to a first neighbor network device, information indicating that the network device supports bit indexed explicit replication (BIER), where the network device does not support BIER. The network device may receive, from the first neighbor network device, a multicast packet that includes a first BIER label associated with the network device. The network device may replace the first BIER label with a second BIER label associated with a second neighbor network device, and may transmit the multicast packet to the second neighbor network device. The second neighbor network device may be to tunnel the multicast packet to a third neighbor network device that supports BIER.

Abstract: A method and apparatus of a network element that enables truncation of tap aggregation data via snoop actions. In one embodiment, a network element configured for tap aggregation includes a first tap port to couple with a tap switch, a set of tool ports to transmit network data received from the first tap port to a data analyzer, and data plane logic to manage a mapping between the first tap port and the set of tool ports. A first tool port in the set of tool ports is configured for egress truncation and the data plane logic performs a snoop action to truncate a first unit of network data to be forwarded to the first tool port and a forward action to forward a second unit of network data to a second tool port in the set of tool ports without truncation.

Abstract: The disclosed computer-implemented method may include (1) identifying a plurality of network paths within a network, (2) identifying a plurality of network services offered via the network, (3) creating a virtual path topology that represents a select grouping of the network paths that (A) originate from a single ingress node within the network and (B) lead to a plurality of egress nodes within the network, (4) mapping at least one of the network services to the virtual path topology, and (5) providing the at least one of the network services to at least one computing device via at least one of the network paths included in the select grouping represented by the virtual path topology. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A novel method of conducting multicast traffic in a network is provided. The network includes multiple endpoints that receive messages from the network and generate messages for the network. The endpoints are located in different segments of the network, each segment including one or more of the endpoints. For a source endpoint to replicate a particular message (e.g., a data packet) for all endpoints belonging to a particular replication group (i.e., multicast group) within the network, the source endpoint replicates the particular message to each endpoint within the source endpoint's own segment and to a proxy endpoint in each of the other segments. Each proxy endpoint in turn replicates the particular message to all endpoints belonging to the particular replication group within the proxy endpoint's own segment.

Abstract: In some examples, a switch includes a first communication interface to communicate with a first device, a second communication interface to communicate with a proxy device enabled to perform proxy address resolution, and a processor to receive a first data packet from the first device targeted to a first layer 3 network address, send, to the proxy device, an address resolution request to obtain a layer 2 network address corresponding to the first layer 3 network address, and responsive to receiving a response to the address resolution request, update a forwarding information structure to refer to a layer 3 network address of the proxy device, the forwarding information structure useable to forward a second data packet to the proxy device for transmission of the second data packet to a destination device.

Abstract: Various example embodiments for supporting stateless multicast in communication networks are presented. Various example embodiments for supporting stateless multicast in communication networks may be configured to support stateless multicast in Internet Protocol (IP) networks. Various example embodiments for supporting stateless multicast in IP networks may be configured to support stateless IP multicast based on encoding of indications of egress routers of the multicast group within the IP packet (e.g., an indication of a group of egress routers including a subset of the egress routers of the multicast group, where the indication of the group of egress routers may include respective IP addresses of the egress routers in the group of egress routers, an indication of a tree from a gateway router to the egress routers in the group of egress routers, or the like, as well as various combinations thereof).

Abstract: An optical network element for a hardware configured optical network includes a first optical port that receives an input optical signal comprising receive control information from the hardware configured optical network. A demodulator optically coupled to the first optical port decodes the receive control information for configuring the optical network element. A modulator having an electrical modulation input that receives transmit control information imparts a modulation onto an optical carrier thereby generating a transmit optical control signal representing the transmit control information. A second optical port transmits the transmit optical control signal representing the transmit control information to the hardware configured optical network.

Abstract: Embodiments are directed to monitoring network traffic over a network. A monitoring engine may monitor flows of network packets in the network. The monitoring engine may determine an observation port that provided the network packets. The monitoring engine may determine primary network packets provided by an authoritative observation port based on which observation port provided the network packets and provide them to an analysis engine. The monitoring engine may discard a remainder of the network packets that may be associated with non-authoritative observation ports. The analysis engine may analyze the one or more primary network packets.

Abstract: A coordination point includes a persistent storage and a processor. The persistent storage stores a distributed system map. The processor obtains role information associated with computing devices from validators without interacting with user resources of the computing devices; updates the distributed system map using the obtained role information; identifies a portion of the computing devices as members of a functionality group using the updated distributed system map; and enforces a configuration, associated with the functionality group, on the user resources of each computing device of the portion of the computing devices.

Abstract: Described herein are devices and techniques for distributing application data. A device can communicate with one or more hardware switches. The device can receive, from a software stack, a multicast message including a constraint that indicates how application data is to be distributed. The constraint including a listing of the set of nodes and a number of nodes to which the application data is to be distributed. The device may receive, from the software stack, the application data for distribution to a plurality of nodes. The plurality of nodes being a subset of the set of nodes equaling the number of nodes. The device may select the plurality of nodes from the set of nodes. The device also may distribute a copy of the application data to the plurality of nodes based on the constraint. Also described are other embodiments.

Abstract: In one illustrative example, an IP network media data router includes a spine and leaf switch architecture operative to provide IP multicast delivery of media data from source devices to receiver devices without the overhead communication with a controller. The architecture can include K spine switches, K sets of L leaf switches, M data links between each leaf switch, and a plurality of bidirectional data ports connected to each leaf switch for a guaranteed non-blocking IP multicast delivery of data. A deterministic hash function a used on both the first hop router and the last hop router to ensure the same spine node is selected for flow stitching. Accordingly, without the extra communication with a centralized controller, the right spine for establishing a multicast flow can be chosen using the deterministic hash function and the distributed resource information stored on each node.

Abstract: A system for executing database queries comprises a computer system including at least one computer processor and one network interface component. The computer processor is configured to determine that at least a portion of data requested by a query is remote data stored at a remote network source. The network interface component of the computing system retrieves the remote data from the remote network source. The retrieved remote data is pre-processed using application domain logic coresiding with the network interface component to generate a result set based on one or more parameters of the query and the query result is returned to the computer processor. The application domain logic may be implemented in a graphics processor unit (GPU), a field-programmable gate array (FPGA), or an application specific integrated circuit (ASIC).

Abstract: A first device may receive a traffic flow to be multicasted to at least two of a set of second devices. The first device may provide first messages to the set of second devices identifying the traffic flow. The first device may identify a set of interested second devices, of the set of second devices, based on respective second messages that are received from the set of interested second devices based on the first messages. The first device may determine whether a quantity of the set of interested second devices satisfies a threshold. The first device may selectively provide the traffic flow to the set of interested second devices, using a first type of multicast distribution tree or a second type of multicast distribution tree, based on whether the quantity satisfies the threshold.

Abstract: A system for managing communication ports in a Kafka cluster is disclosed. The disclosed system receives a maintenance signal to shut down the Kafka cluster for maintenance. The Kafka cluster comprises a plurality of Kafka servers communicating with each other via a plurality of internal communication ports. In response to receiving the maintenance signal, the system shuts off a plurality of external communication ports arranged between the Kafka cluster and a plurality of external servers. Then, the system synchronizes the Kafka servers by replicating data among the Kafka servers. After determining that the Kafka servers are synchronized, the system shuts down the Kafka servers for maintenance. The internal communication ports are retained open when the system shuts down the external communication ports and during the maintenance.

Abstract: A trusted execution environment on an enterprise-enabled computing device allows invocation of a suite of secure applications (apps) on a computing device in an enterprise without hindering external or non-enterprise apps from running on in the same memory space on the same enterprise computing device. An application wrapper provides an operation queue for storing application lifecycle operations while the trusted execution environment is enabled, and the environment is secured. The application defers lifecycle operation to ensure that all security measures are in place before it is allowed to execute. The operation queue receives entries corresponding to the application lifecycle events, and suspends process execution of the lifecycle operations until the secure environment is ready for the operation queued events to be executed.

Abstract: A machine has a processor and a memory connected to the processor. The memory stores instructions executed by the processor to receive data from a data source that continuously generates records, selectively identify conditions within the data that satisfy specified rules, and report the conditions prior to routing the data to a message system node forming a segment of a distributed transaction log with messages persisted in non-volatile memory and replicated within a cluster of nodes.

Abstract: A system for executing database queries comprises a computer system including at least one computer processor and one network interface component. The computer processor is configured to determine that at least a portion of data requested by a query is remote data stored at a remote network source. The network interface component of the computing system retrieves the remote data from the remote network source. The retrieved remote data is pre-processed using application domain logic coresiding with the network interface component to generate a result set based on one or more parameters of the query and the query result is returned to the computer processor. The application domain logic may be implemented in a graphics processor unit (GPU), a field-programmable gate array (FPGA), or an application specific integrated circuit (ASIC).

Abstract: The invention relates to managing requests for subscription to multicast transmissions in a communication network, at least two branches thereof being interconnected by an interconnection device comprising a module consuming such subscription requests preventing the propagation of said requests from one branch to another. At least one of said branches comprising at least one bridge device, the interconnection device comprising a subscription announcement module, said subscription announcement module performs the following step: upon reception (404; 412) via a branch of a first request for subscription to a multicast transmission, transmitting (407; 415) a second request for subscription to said multicast transmission at least via the branch via which said first subscription request was received.

Abstract: In a memory controller, command, address and data are allocated to transmit the command, the address and the data to each of the plurality of memory devices through the same bus signal line and an identification signal to identify the command, the address and the data on the bus signal line is allocated to a memory common signal line in common among the plurality of memory devices to transmit the identification signal. When the memory controller indicates the data through the identification signal so as to make a first memory device transfer the data through the bus signal line, the memory controller makes the data transfer by the first memory device suspended, indicates the command through the identification signal so as to issue the command to a second memory device, and indicates the address through the identification signal so as to issue the address to the second memory device.

Abstract: A method, system, and computer program product for enabling communication between different overlay solutions. The method includes one or more processor obtaining an address resolution request from a first resource in a first domain for a second resource in a second domain. Both domains are in a shared computing environment and the second domain includes a control plane engine. The one or more processor obtains source information from the request, registers the information to the engine, and utilizes the request to query the engine to locate the second resource in the domain. The second resource matches the request. The processor receives a response from the engine identifying a first host and the first host is in the second domain and is the host of the second resource. The processor sends a notification request to the first host requesting that the first host reply to the request.

Abstract: Some embodiments of the invention provide a novel architecture for capturing contextual attributes on host computers that execute one or more machines and for consuming the captured contextual attributes to perform services on the host computers. The machines are virtual machines (VMs) in some embodiments, containers in other embodiments, or a mix of both VMs and containers in still other embodiments. Some embodiments execute a guest-introspection (GI) agent on each machine from which contextual attributes need to be captured. In addition to executing one or more machines on each host computer, these embodiments also execute a context engine and one or more attribute-based service engines on each host computer. One of these service engines is a load balancer. Through the GI agents of the machines on a host, the context engine of that host in some embodiments collects contextual attributes associated with network events and/or process events on the machines.

Abstract: A method for connecting a connected device to a secure network of interconnected computers, the method comprising: sending, by a processing unit of the connected device, to a cloud switch server, an activation request comprising first identification information enabling identification of the connected device; receiving, by the processing unit, from the cloud switch server, connection information enabling connecting the connected device to the secure network of interconnected computers; and establishing, by the processing unit, a connection between the connected device and the secure network of interconnected computers, utilizing the connection information.

Abstract: Some embodiments include systems, methods, and devices for enabling communication between at least two internet protocol (IP)-only wireless transmit/receive units (WTRUs), at least one of which is connected to an information centric network (ICN). The WTRU may send a generic attribute registration multicast registration protocol (GMRP) request on a local IP link to an information centric network (ICN) network attachment point (NAP). The NAP may receive and register the GMRP request with an internal database (DB) along with an IP multicast address entry matching the GMRP request. The WTRU may then send an IP multicast packet to the NAP for dissemination to an IP multicast group over an ICN by encapsulating the IP multicast packet in an ICN packet.