Abstract: Techniques are described for creating a network-link between a first virtual network in a first cloud environment and a second virtual network in a second cloud environment. The first virtual network in the first cloud environment is created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment. The network-link is created based on one or more link-enabling virtual networks being deployed in the first cloud environment and the second cloud environment.

Abstract: A method is executed by a network device for implementing conversation-sensitive collection for frames received on a port of a link of a link aggregation group. The network device executes an aggregator to collect the frames for aggregator clients, where each frame is associated with a service identifier and a conversation identifier. The service identifier identifies a data flow at a link level for a service. The conversation identifier identifies the data flow at a link aggregation group level, where each conversation data flow consists of an ordered sequence of frames, and where the conversation-sensitive collection maintains the ordered sequence by discarding frames of conversations not allocated to the port.

Abstract: A method for network resiliency testing comprising: executing a resiliency testbed application at a plurality of virtual machines; accessing, by the plurality of virtual machines, network configuration data stored in a configuration database, the configuration data corresponding to a topology of a network to be emulated; configuring at least a portion of the virtual machines, according to the network configuration data, to emulate a plurality of nodes of the network to be emulated; automatically determining least cost paths between the plurality of nodes; simulating communications between the plurality of nodes based on the determined least cost paths; and determining one or more metrics of the network to be emulated based on the simulation.

Abstract: Protocol-Independent Multicast (PIM) uses PIM hello messages to maintain neighborship information. PIM may be implemented in an Ethernet VPN (EVPN) providing Optimized Inter-Subnet Multicast (OISM). Techniques are disclosed for improving PIM neighborship efficiency and speed in an EVPN. An Inclusive Multicast Ethernet Tag (IMET) may be used to set PIM neighborship instead of using PIM hello messages and TCP may be used to determine if the neighbor is disconnected instead of tracking PIM timers.

Abstract: Systems and methods include receiving network communication information about hosts in a network and applications executed on the hosts; automatically generating one or more microsegments in the network based on analysis of the obtained network communication information, wherein each microsegment of the one or more microsegments is a grouping of resources including the hosts and the applications executed on the hosts that have rules for network communication; and providing the one or more microsegments to one or more hosts of the hosts, for use by the one or more hosts to allow or block communications locally based on the one or more microsegments. Each of the one or more microsegments can be a grouping of workloads inside a data center.

Abstract: Embodiments of the disclosure provide a method, device and computer readable medium for protecting MAC addresses. According to embodiments of the present disclosure, the terminal device may obtain a set of virtual MAC addressed from a network device and may connect with a further network device (for example, Wi-Fi AP or Bluetooth devices) using the virtual MAC addresses. In this way, tracking the terminal device with MAC address is prevented so that user privacy protection could be enhanced.

Abstract: A connectivity detection session creation method, a network device, and a system, to create a connectivity detection session in an EVPN. The method includes: receiving, by the first network device, a creation message of a connectivity detection session from the second network device, where the creation message of the connectivity detection session carries an inclusive multicast route of the second network device and session information of the second network device; determining, by the first network device, that a local inclusive multicast routing table includes the inclusive multicast route of the second network device; and creating, by the first network device, the connectivity detection session with the second network device based on the session information of the second network device.

Abstract: The present disclosure is directed towards systems and methods for transmitting data packets to a software container executing on a host computing device. A network service can be enabled within a software container established on the host computing device. A data packet of a request formatted according to the network service can be received via a first port of a first subnetwork assigned to the host computing device. The data packet can be forwarded to a second port assigned to the software container, responsive to a network address translation rule associating the second port assigned to the software container with the first port of the host computing device. The second port can be a port of a second subnetwork assigned to the software container. The data packet can be processed according to the network service within the software container.

Abstract: There is provided a neural network information receiving method and system, and a sending method and system. The receiving method comprises: acquiring a reception initiation time for neuron information (S100); receiving rostral neuron information output by rostral neurons (S200); acquiring delay information of the rostral neuron information according to the reception initiation time, the rostral neuron information and a delay algorithm (S300); and determining composite information output by the rostral neurons according to the rostral neuron information and the delay information (S400). The receiving method and system and sending method and system take the delay information into consideration in the output information of neurons, such that the neuron information is able to carry more detailed time-domain information, thus augmenting operation modes of the neurons and enhancing the generalization ability of the whole network.

Abstract: A method includes a first provider edge (PE) device sending, to a second PE device, a media access control (MAC) route learned from a customer edge (CE) device and a virtual local area network (VLAN) identifier, wherein the second PE device generates a MAC forwarding entry based on the MAC route and the VLAN identifier, where the MAC forwarding entry is used to directly forward, using the CE device, a packet whose destination MAC address is the CE device or a MAC address of a terminal device accessing the CE device. An outbound interface identifier included in the MAC forwarding entry is an identifier of an interface connected to the CE device.

Abstract: A runtime state of a virtual port associated with a virtual machine (“VM”) is persisted as the VM is migrated from a source host to a destination host. In certain embodiments, a virtual switch forwards network frames between the VM and the physical network interface via the virtual port. During migration of the VM, the runtime state of the virtual port is transferred to the destination host and applied at the second host to a virtual port associated with a second virtual switch at the destination host. The runtime state of the virtual port at the source host is then cleared, and the second virtual switch at the destination host forwards network frames between the migrated VM and the physical network interface of the destination host using the virtual port at the second host.

Abstract: The present invention relates generally to the field of virtual private networks. More specifically, the present invention relates to a broadcast system for a virtual private network that broadcasts via a mesh network. Further, the system makes use of a broadcast source server which allocates data from data packets to specific nodes within a location-based regiment database. The database then uses an AI optimization system which further minimizes latency versus standard IP UDP broadcast systems.

Abstract: Systems and methods are provided for supporting scalable multi-homed routing for virtual switch based host channel adapter (HCA) virtualization in a subnet. An exemplary method can provide one or more switches, a plurality of host channel adapters, a plurality of hypervisors, and a plurality of virtual machines. The method can arrange the plurality of host channel adapters with one or more of a virtual switch with prepopulated local identifiers (LIDs) architecture or a virtual switch with dynamic LID assignment architecture. The method can further perform a multi-homed routing for the subnet, wherein at least one of the plurality of host channel adapters comprises two virtual switches, wherein the two virtual switches are treated as endpoints of the subnet, and wherein the multi-homed routing for the subnet ensures that each the two virtual switches are routed through independent paths.

Abstract: A system and methods comprise a touchscreen at a premises. The touchscreen includes a processor coupled to a security system at the premises. User interfaces are presented via the touchscreen. The user interfaces include a security interface that provides control of functions of the security system and access to data collected by the security system, and a network interface that provides access to network devices. A camera at the premises is coupled to the touchscreen via a plurality of interfaces. A security server at a remote location is coupled to the touchscreen via a plurality of channels and a plurality of protocols. The security server comprises a client interface through which remote client devices exchange data with the touchscreen and the security system.

Abstract: Methods, systems, and computer readable media described herein can be operable to facilitate an IGMP fastleave using a listener reference count. A gateway proxy saves each listener for every specific multicast group, thus the gateway knows if a listener is the last one in the group when it receives a leave report from a listener. The gateway leaves the group immediately without sending specific query if the leave report comes from the last listener of the current group, thereby significantly reducing the leave latency. Otherwise, the standard procedure wins, and the gateway sends out a specific query when the leave report is not from the last listener.

Abstract: A method for updating a domestic appliance includes determining a configuration of the domestic appliance, wherein the configuration relates to a state of at least one component of the domestic appliance. A restriction assigned to predefined update information is determined for domestic appliances, including the domestic appliance. The control information of at least one component of the domestic appliance is updated on a basis of update information if the configuration of the domestic appliance meets the restriction. The configuration includes an attribute of a component of the domestic appliance, and the attribute is determined on the basis of an identification of the domestic appliance and an assignment of the identification to the attribute.

Abstract: Techniques are described for providing a distributed application load-balancing architecture that supports multipath transport protocol for client devices connecting to an application service. Rather than having client devices generate new network five-tuples for new subflows to the application servers, the techniques described herein include shifting the burden to the application servers to ensure that the new network five-tuples land in the same bucket in the consistent hashing table. The application servers may receive a hashing function utilized by the load balancers to generate the hash of the network five-tuple. By having the application servers generate the hashes, the load balancers are able to continue stateless, low-level processing of the packets to route them to the correct application servers. In this way, additional subflows can be opened for client devices according to a multipath transport protocol while ensuring that the subflows are routed to the correct application server.

Abstract: A method for data communication and computation over a network whereby nodes of the network are capable of evaluating functions in the local environment of the node, and where the addresses of newly created or of newly connected network nodes are assigned at random, near uniqueness of node addresses being accomplished by using a random or pseudo-random method of choosing one address from a sufficiently large pool of network addresses.

Abstract: Systems and methods are provided herein for allocating the same ESI label on multihomed peers for a given ES. In some embodiments, each network device that provides multihoming to a host using an ES, advertises EVPN AD per ES routes to each other, wherein the EVPN AD per ES routes comprise an ESI label associated with the ES. Because the network devices advertise the same ESI label for the ES, a first network device generates a bitmap. The first network device uses the bitmap to include the advertised ESI label in replicated packets that the first network device forwards to the other network devices that provide multihoming to the host via the ES. The network devices that consider themselves non-DF devices will drop the packet. The network devices that consider themselves the DF device will not forward the packet to the host via the ES because of the ESI label.

Abstract: In general, this disclosure describes techniques for using virtual domains. In one example, a method comprises receiving, by a computing device, configuration data defining: an external virtual domain for a network function, the external virtual domain connected to a public network and managed by a provider for the computing device; a virtual domain for the network function, the virtual domain separate from the external virtual domain, configured with a secure tunnel interface, connected to a customer network, and managed by a customer of the provider for the computing device; forwarding, by the external virtual domain implementing a route-based virtual private network, encrypted network traffic, received from the public network via a secure tunnel, to the secure tunnel interface configured in the virtual domain; decrypting, by the virtual domain, the encrypted network traffic to generate network traffic; and forwarding, by the virtual domain, the network traffic to the customer network.

Abstract: A device may transmit a packet for communicating via a tunnel. The packet may be associated with a protocol. The device may determine that the packet has been dropped by a security device. The device may selectively encrypt, after determining that the packet has been dropped, the packet using a null encryption for transport layer security (TLS) or a combination of encryption associated with the protocol and TLS encryption to generate an encrypted packet. The device may transmit the encrypted packet for communicating via the tunnel.

Abstract: A route processing method is implemented by a first PE device and includes receiving a VPN route that includes a second SRv6 VPN SID and a third SRv6 VPN SID from a second PE device; determining that the second SRv6 VPN SID is the same as a first SRv6 VPN SID; and establishing a second path based on the third SRv6 VPN SID, where when a first path directly connected to the first PE device and the second CE device is faulty, the second path is used by the first PE device to forward a packet to the second CE device.

Abstract: Data traffic comprising data packets communicated between a memory sub-system and a host system is monitored by a processing device at the memory sub-system. Data packets are classified according to packet type. Log data comprising a frequency and latency information associated with each packet type is generated. The log data is stored in a memory component of the memory sub-system.

Abstract: Techniques for configuring a logical network switch in label-switched networks are provided. In some embodiments, a first network device in a label-switched network is configured with a network address. A second network device in the label-switched network is configured with the same network address. The first network device is configured to use a set of labels for a set of virtual local area networks (VLANs). The second network device is configured to use the same set of labels for the same set of VLANs. The configured first and second network devices appear as a logical network device from the perspective of other network devices in the label-switched network.

Abstract: Techniques are disclosed for providing high performant packets processing capabilities in a virtualized cloud environment that enhance the scalability and high availability of the packets processing infrastructure. In certain embodiments disclosed herein, the VNICs functionality performed by network virtualization devices (NVDs) is offloaded from the NVDs to a fleet of computers, referred to as VNIC-as-a-Service System (or VNICaaS system). VNICaaS system is configured to provide Virtual Network Interface Cards (VNICs)-related functionality or service for multiple compute instances belonging to multiple tenants or customers of the CSPI. The VNICaaS system is capable of hosting multiple VNICs to process and transmit traffic in a distributed virtualized cloud networks environment. A single VNIC executed by the VNICaaS system can be used to process packets received from multiple compute instances.

Abstract: Systems and methods include, subsequent to performing auto segmentation on a network that includes a set of policies of allowable and block communications, observing communication between a plurality of hosts on the network; determining unassigned communication paths based on the observing that are either blocked because of a lack of a policy of the set of policies or because there is no policy of the set of policies for coverage thereof; and assigning the unassigned communication paths to corresponding policies of the set of policies. The assigning can be based on heuristics. The assigning can be performed without reperforming auto segmentation.

Abstract: This application discloses a path processing method, an apparatus, and a related computer-readable storage medium. In the method, whether there is an existing communication connection for a service flow is determined, and a service feature indicator corresponding to the existing communication connection satisfies a service feature condition required by the service flow. In a case of determining that there is the existing communication connection, a service packet is sent in the existing communication connection. In a case of determining that there is no existing communication connection, a new communication connection is established for the service flow, and a service packet is sent in the new communication connection, and a service feature indicator corresponding to the new communication connection satisfies the service feature condition required by the service flow.

Abstract: Various example embodiments for supporting link-state flooding for a routing protocol based on use of a transport layer protocol are presented. Various example embodiments for supporting link-state flooding for a routing protocol based on use of a transport layer protocol may be configured to support use of routing protocol messages of the routing protocol to support establishment of transport layer connections of a transport layer protocol (e.g., use of adjacency messages of the routing protocol for identifying routers configured to support use of transport layer connections for supporting link-state flooding). Various example embodiments for supporting link-state flooding for a routing protocol based on use of a transport layer protocol may be configured to support use of transport layer connections to support communication of routing protocol messages of the routing protocol (e.g.

Abstract: Example methods for a network device to perform address resolution handling. The method may comprise: in response to a first distributed router (DR) port of a first DR instance detecting an address resolution request from a second DR port of a second DR instance, generating a modified address resolution request that is addressed from a first address associated with the first DR port instead of a second address associated with the second DR port. The modified address resolution request may be broadcasted within a logical network that is connected to the first DR instance through network extension. The method may also comprise: in response to detecting an address resolution response that includes protocol-to-hardware address mapping information associated with an endpoint located on the logical network, generating and sending a modified address resolution response towards the second DR port of the second DR instance.

Abstract: The present disclosure relates generally to electronic interconnects including one or more switches and, more particularly, to delay bound determination for electronic interconnects.

Abstract: A circuit with a first buffer, a second buffer, a third buffer, a fourth buffer, a first data input for first data, a second data input for second data, a data output, and control logic is disclosed. The control logic connects the first data input to one of the buffers, connects the second data input to one of the buffers, and connects the data output to one of the buffers, swap the buffer currently connected to the first data input for a non-connected buffer when first data have been validly written through the first data input into the buffer currently connected to the first data input, swap the buffer currently connected to the second data input for the non-connected buffer when second data have been validly written through the second data input into the buffer currently connected to the second data input.

Abstract: A method for performing virtual private cloud (VPC) routing across multiple public cloud environments. In an embodiment, the method creates a first virtual routing agent (VRA) for a first VPC of a first public cloud. The method sends a registration request to a VRA controller, wherein the registration request comprises a data structure that includes communication parameters of the first VRA. The method receives the communication parameters of other VRAs for other VPCs located in other public cloud environments from the VRA controller. The method uses the communication parameters of the other VRAs for overlay routing of data packets from the first VPC of the first public cloud to other VPCs of other public clouds via the other VRAs of the other VPCs.

Abstract: A controller manager, a controller agent and methods therein, for enabling a connection between a switch of a communication network and a switch controller that performs logic switch operations. The controller manager obtains from the controller agent, measurements related to connectivity to a set of switch controllers. The controller manager then selects at least one switch controller in the set of switch controllers based on the obtained measurements, to control said switch, and instructs the controller agent to set up or route a connection between the switch and the selected at least one switch controller.

Abstract: The present disclosure relates to resource reservation methods. One example method includes receiving, by a controller, a resource reservation request that is of a communication session and that is sent by a sending device, where the resource reservation request carries resource requirement information, obtaining, by the controller based on the resource reservation request, identification information of a network device through which data transmission of the communication session to be performed between the sending device and a receiving device passes, and a resource index of the network device, sending, by the controller, the resource requirement information and the resource index to the network device based on the identification information, where the resource requirement information and the resource index are used to instruct the network device to configure a resource for the communication session, and sending, by the controller, the identification information and the resource index to the sending device.

Abstract: Using an authentication server to program network elements, such as a network node, in accordance with software-defined networking techniques in order to establish a traffic flow rule for a communication device or user of the communication device. After successfully authenticating a communication device or user, the authentication server and/or network node may use an identifier received at the authentication server in connection with the authentication procedure in order to obtain a traffic flow rule for the communication device. The traffic flow rule may be established at the network node or forwarded to a second network node configured to receive network packets from the communication device. The first identifier may be any one of a user identifier identifying a user, an application identifier identifying an application, and a device identifier unique to the communication device.

Abstract: A lighting network control server and method for translating non-light related data packets into a protocol that is compatible with a third party automation server are disclosed. For example, the lighting network control server includes a communication interface to receive data packets from a lighting network and to communicate with a third party automation server, a non-transitory computer readable medium to store sub-routines and instructions to execute a protocol adapter, and a processor communicatively coupled to the communication interface and the non-transitory computer readable medium to execute the protocol adapter to translate the data packets into a protocol that is compatible with the third party automation server and transmit the data packets that are translated to the third party automation server via the communication interface.

Abstract: The invention concerns a method for routing a packet in a packet switching network in disconnected routing mode, implemented by a router, comprising the following steps: —receiving (E1) the packet; —reading (E2) a field, called the longevity field of the packet, intended to be decremented when traversing a router; —decrementing (E5) the value of the longevity field using a step of a predefined value, called the decrementation step; —deciding (E6) on the routing of the packet on the basis of the value of the decremented longevity field, the packet being destroyed (E7) when said value is less than or equal to zero; the method further comprising, prior to the step of decrementing, the following steps: —obtaining (E3) at least one item of information from a group of items of information comprising an item of information relative to routing conditions of the packet and an item of information relative to parameters of the packet; —determining (E4) the value of the decrementation step on the basis of at least the ob

Abstract: A wireless User Equipment (UE) associates video session capabilities with relay identifiers. The UE wirelessly establishes a video session using a network address. The UE receives a handover command and wirelessly attaches to a wireless relay. The UE receives a new network address and a relay identifier that identifies the wireless relay from the wireless relay. The UE determines if the wireless relay supports the video session mobility based on the received relay identifier and the association of the video session capabilities with the relay identifiers. The UE continues the video session using the initial network address when the wireless relay supports the video session mobility. The UE re-establishes the video session using the new network address when the wireless relay does not support the video session mobility.

Abstract: A method of determining an optimal route for communication between nodes in a communications network. The method comprises assigning a plurality of link potential values (Pab) to a respective plurality of direct links (lab) between respective first and second nodes a and b in the network, wherein a link potential value (Pab) represents a likelihood that the corresponding direct link will be used for future communication requests. The method comprises determining an optimal route between nodes based on the plurality of link potential values (Pab).

Abstract: A method of communicating data traffic including data packets through a virtual switch on a host device is provided. The data traffic flowing through the virtual switch is monitored. The data traffic includes at least virtual machine data traffic flowing to and from virtual machine processes on the host device and host data traffic flowing to and from host operating system processes on the host device. Each of the data packets are designated as virtual machine data traffic or host data traffic based on an evaluation of the Media Access Controller (MAC) address of each of the one or more data packets of the monitored data traffic. Virtual machine data traffic is directed through a packet processor as the virtual machine data traffic traverses the virtual switch. Host data traffic is directed to bypass the packet processor as the host data traffic traverses the virtual switch.

Abstract: A method, non-transitory storage medium, and apparatus are presented for configuration management of a distributed virtual switch including components distributed on different entities in a computing system is provided. In an exemplary embodiment, a snapshot of a configuration of the distributed virtual switch is received from a management plane configured to manage the distributed virtual switch. The snapshot may include settings for the configuration at a time of taking the snapshot. A persistent storage location independent from the management plane is designated for storing the received snapshot of the configuration. After the snapshot is taken, the configuration may be retrieved from the persistent storage location and the settings of the configuration may be applied to the distributed virtual switch, a new distributed virtual switch, or an existing distributed virtual switch.

Abstract: Systems and methods herein log traffic to and from a device on a network. Logging can occur using a metering device, router, proxy, or other elements. For example, a metering device operatively coupled to a routing device can log the traffic directed to and originating from a user device. Logged traffic can be analyzed to identify users, devices, and/or sessions. For example, an identifier unique to the user device in the session, a device type of the user device, and a specific user of the device during the session can be identified.

Abstract: A multi-port status message maintains network connections between virtual ports of two network elements. The network elements negotiate the network connections between first virtual ports on a first network element and corresponding second virtual ports on a second network element. The second network element receives a single multi-port status message listing the first virtual ports that are actively connected to the corresponding second virtual ports. The second network element updates the status of the corresponding second virtual ports to maintain the network connections.

Abstract: Embodiments disclosed include a method and apparatus for global traffic control and optimization for software-defined networks. In an embodiment, data traffic is optimized by distributing predefined metrics (data traffic information) to all controllers in the network. The predefined metrics are specific to local network switches and controllers, but are distributed to all peers at configurable intervals. “Local” as used herein implies one POP and its associated switch and controller. The method of distribution of local POP metrics is strictly in band using a packet as defined by the protocol used by the data network.

Abstract: Particular embodiments described herein provide for a network element that can be configured to receive a link monitoring message, determine one or more resources associated with the link monitoring message, determine a status of each of the one or more resources, and send a response that provides an indication of the status of each of the one or more resources. In an example, the link monitoring is part of a bidirectional forwarding detection packet.

Abstract: Provided is a communication relay apparatus configured to relay communication between a plurality of segments of a network by a plurality of communication devices including an indoor unit and an outdoor unit connected to one another via the network, the communication relay apparatus including a relay setting unit configured to set a first mode value corresponding to processing of relaying all frames and a second mode value corresponding to processing of relaying a frame on the basis of a destination address of the frame, and a relay determination unit configured to perform processing of relaying the frame in an operation mode corresponding to a relay mode value set by the relay setting unit.

Abstract: Embodiments of the invention relate to virtual link aggregation. One embodiment includes forming one or more virtual links using physical links connecting a first networking element, a second networking element and a third networking element. A first trigger status indication is used for blocking network traffic for avoiding traffic loops occurring over the one or more virtual links.

Abstract: A technique includes receiving a packet at a network device, wherein the packet is to be routed in a network to a destination network device; determining a plurality of candidate routes for the packet to be routed to the destination network device; grouping the plurality of candidate routes into a first set of candidate routes and a second set of candidate routes based on hop counts associated with the plurality of candidate routes; selecting one of the first or second sets based on a congestion metric threshold; selecting a candidate route from the selected first or second set based on weight metric values associated with the candidate routes of the selected first or second set; and selecting an egress port associated with the selected candidate route.

Abstract: The present disclosure provides for managing a software function. The system determines that a service instance is to call the software function and, in response, initiates a call request for the software function to a management component The call request includes identification information and an operation parameter of the software function, with the software function shared by a service instance and at least one further service instance deployed and stored in a converged infrastructure architecture independently from the service instance and the at least one further service instance. The system receives a response to the call request from the management component, with the response including a result of execution of the software function based on the operation parameters. The system prevents the need to deploy copies of a common software function of service instances, conserving performance and storage space, and enabling more convenient maintenance, updates, and software function calls.

Abstract: In one embodiment, a method includes receiving data at a virtual switch located at a network device in a cloud network. The data is received from an external network and destined for one or more virtual machines located in the cloud network and associated with the external network. The method further includes transmitting the data from the virtual switch to the virtual machines. The virtual switch operates as an access layer switch for the external network and creates a virtual switching overlay for secure communication between the virtual machines and the external network. Logic and an apparatus are also disclosed.