Abstract: A system includes one or more memories and processing circuitry coupled to the one or more memories, wherein the processing circuitry is configured to: execute operating system (OS) software configured to control operation of a plurality of hardware optical modules of a network element, and execute a first containerized driver software for a first set of one or more hardware optical modules of the plurality of hardware optical modules to enable the OS software and the first set of one or more hardware optical modules to communicate with each other, the first containerized driver software being packaged and deployed separately from the OS software.

Abstract: A component controlling network access between a client and a server using application software versions to determine a risk level of the client. The component uses a first set of programs for negotiation with the client if the risk level is high, wherein the first set of programs includes programs with high security level, and it uses a second set of programs for negotiation with the client if the risk level is not high, wherein the second set of programs includes programs with high security level and programs with low security level. The component may utilize secure network protocols for communication between the client and server, and may be included as a gateway in a zero trust network access (ZTNA) system.

Abstract: A component controlling network access between a client and a server. The component determines, based on a first negotiation proposal from the client, a set of programs compatible with the client and determines, based on the set of programs and resources required by each program of the set of programs, a second negotiation proposal. The component sends the second negotiation proposal to the client. In this way, the component determines its negotiation proposal with a consideration of resource requirement of each program in order to avoid resource overload for the component.

Abstract: Access point network equipment has communication ports that allow communications with other network components. Communications cables coupled to ports can be easily removed and replaced with unauthorized devices that have access to the network creating a security breach. Covers placed over the authorized cable connectors can create a physical barrier preventing unauthorized connections to the access point network equipment. When an authorized cable is removed from a port, a link down event can be detected by tamper detection by tamper detection software running on the access point network equipment. When a link down events is detected the tamper detection software can perform various possible security actions to protect the network.

Abstract: An access point for interference detection includes memory configured to store information identifying one or more non-associated client devices that are not configured to communicate with the access point, and one or more processors, implemented in circuitry, coupled to the memory and configured to: determine that communication signals outputted from a non-associated client device to another access point or from the other access point to the non-associated client device are being received by the access point based on the stored information, determine an amount of in-network interference being generated by the communication signals based at least in part on the determination that the communication signals from the non-associated client device or from the other access point are being received by the access point, and output interference information based on the determined amount of in-network interference.

Abstract: Facilitating removal of lapsed profiles for a client attempting to access a Wi-Fi network by repeatedly sending requests to a server, the request includes a network address and profile of the client. For a lapsed profile, the server sends a message to a user regarding the lapse, where the message includes a list of all network addresses for client devices used to download the lapsed profile, and blacklists all clients used to download the lapsed profile after a rejected access request to prevent other access point from receiving spurious requests from the blacklisted clients. The Wi-Fi network may include numerous access points managed by a community Wi-Fi service provider and include a roaming access service provider allowing mobile client devices to subsequently access the AP devices automatically after a first successful access.

Abstract: Access point network equipment has communication ports that allow communications with other network components. Communications cables coupled to ports can be easily removed and replaced with unauthorized devices that have access to the network creating a security breach. When an authorized cable or plug is removed from a port, a link down event can be detected by tamper detection by tamper detection software running on the access point network equipment. When a link down events is detected the tamper detection software can perform various possible security actions to protect the network.

Abstract: A wireless system includes memory configured to store information of physical layer rates associated with power levels between a client device and respective access points. The power levels comprise information of amounts of power in signals received by the client device from the respective access points. The system includes one or more processors configured to: during a communication session between the client device and a first access point, determine a current power level between the client device and a second access point, access the information based on the current power level to determine an expected physical layer rate between the client device and the second access point, determine a current physical layer rate between the client device and the first access point, and determine whether to switch the communication session to the second access point based on the expected physical layer rate and the current physical layer rate.

Abstract: A central management component deployed in a cluster of broadband network gateways (BNGs) balances load among subscribers through the cluster by monitoring subscriber states comprising usage of the BNGs based on load parameters to detect an overload condition on any BNG. In the event of an overload condition, the component performs a horizontal sharding operation to move at least some access load from the overloaded BNG to an underutilized BNG. Sharding separates a large group of BNGs into smaller and more numerous BNGs by reassigns one or more subscribers among the gateways. A load balancer applies rules to re-direct traffic based on a defined load balancing rule using one of: preference, present load, proximity, and operating characteristic.

Abstract: A system for interference detection includes one or more processors are configured to receive from one or more access points within a wireless network information indicative of airtime usage of one or more client devices associated with the one or more access points, determine an amount of total interference for at least one of the access points on a first channel, the total interference including foreign interference and in-network interference, determine a correlation between the total interference and the airtime usage of the one or more client devices, determine an amount of the foreign interference or an amount of the in-network interference based on the correlation, and selectively switch the at least one of the access points from communicating on the first channel to communicating on a second channel based on the determined amount of the foreign interference or the determined amount of the in-network interference.

Abstract: Systems and techniques for forward error correction decode processing power reduction are described herein. A capacity of a network slice is determined for a user network interface (UNI) based on a subset of forward error correction (FEC) codewords to be decoded by the media access control processor. A number of decoder cores is calculated to decode the capacity of the network slice. A utilization value is determined for a decoder core. A decoder utilization value is calculated for the decoder cores using the utilization value a number of decoding iterations. A non-decoding media access control processor utilization value is obtained for the network slice. A geometry is calculated for the media access control processor using the number of decoder cores, the decoder utilization value, and the non-decoding media access control processor utilization value. A media access control processor manufacturing specification data is generated based on the calculated geometry.

Abstract: Systems and techniques for increasing wireless network performance using contextual fingerprinting are described herein. Performance metrics may be obtained for a client device-access radio pair that includes a wireless network interface of a client device and an access radio of a wireless network associated with the client device. A fingerprint may be generated for the client device-access radio pair. The fingerprint may be stored in a fingerprint store for the wireless network.

Abstract: A system for interference detection includes one or more processors are configured to receive from one or more access points within a wireless network information indicative of airtime usage of one or more client devices associated with the one or more access points, determine an amount of total interference for at least one of the access points on a first channel, the total interference including foreign interference and in-network interference, determine a correlation between the total interference and the airtime usage of the one or more client devices, determine an amount of the foreign interference or an amount of the in-network interference based on the correlation, and selectively switch the at least one of the access points from communicating on the first channel to communicating on a second channel based on the determined amount of the foreign interference or the determined amount of the in-network interference.

Abstract: Embodiments include an automatic set top box placement (STB) process and system that balances video playback needs against the performance characteristics of individual devices and the communications system. For video playback, this involves maintaining required sustained data rates needed to support video of various levels of quality and resolution and matching these against the capacity of the Wi-Fi system in terms of channel capacity and gateway/Access Point to STB connection quality. An intelligent network controller calculates the STB total airtime. Each STB is associated with a Service Set Identifier (SSID) that the controller uses to identify the STB clients. The controller calculates the End-to-End PHY rates for each client. The total STB airtime can then be calculated and compared to the default allocation for the STBs. Recommendations regarding moving STBs, gateways, and or satellite/booster devices can then be provided to the user.

Abstract: Systems and techniques for location independent website filtering using bifurcated domain name system are described herein. A domain name system (DNS) request may be received. A unique device identifier may be received for the requesting device. The ISP may provide external network services to the services gateway. The DNS service provider may maintain a website filtering policy. The DNS request may be forwarded to the DNS service of the ISP. The DNS service of the ISP may respond with a DNS resolution. An access control request may be forwarded to the DNS service provider external to the ISP. A website filtering policy associated with the device identifier may be used to determine website access. The DNS service provider external to the ISP may respond with a grant/block status. Based on the returned grant/block status, the services gateway may respond to the requesting device with the DNS resolution or access denial.

Abstract: Techniques are described for configuring an optical network unit (ONU) in a pre-burst state prior to transitioning the ONU to a burst-on state. During the pre-burst state, a laser emitter of the ONU stabilizes to its wavelength, thereby reducing the impact of wavelength drift when the ONU transitions to the burst-on state.

Abstract: An optical device having a self-repair component capable of curing a defective component(s) is disclosed. To improve reliability as well as manufacturing yield, a photonic integrated circuit (“PIC”) for as a multi-channel optical line terminal (“OLT”) contains spare lasers or standby lasers configured to replace a failed laser(s). In one aspect, PIC includes a set of fixed-wavelength lasers (“FWLs”), a tunable-wavelength auxiliary laser (“TWAL”), a photonic detector, and a tuner. FWLs, for example, generate optical wavelengths representing optical signals. TWAL generates an optical signal with a spectrum of wavelengths based on a setting generated by the tuner. The photonic detector detects a defective wavelength. The tuner adjusts output wavelength of TWAL in response to the defective wavelength. Alternatively, PIC includes a working laser array, standby laser array, and spare laser array capable of providing two-layer laser defective protections.

Abstract: Techniques are described for configuring an optical network unit (ONU) in a pre-burst state prior to transitioning the ONU to a burst-on state. During the pre-burst state, a laser emitter of the ONU stabilizes to its wavelength, thereby reducing the impact of wavelength drift when the ONU transitions to the burst-on state.

Abstract: An optical device having a self-repair component capable of curing a defective component(s) is disclosed. To improve reliability as well as manufacturing yield, a photonic integrated circuit (“PIC”) for as a multi-channel optical line terminal (“OLT”) contains spare lasers or standby lasers configured to replace a failed laser(s). In one aspect, PIC includes a set of fixed-wavelength lasers (“FWLs”), a tunable-wavelength auxiliary laser (“TWAL”), a photonic detector, and a tuner. FWLs, for example, generate optical wavelengths representing optical signals. TWAL generates an optical signal with a spectrum of wavelengths based on a setting generated by the tuner. The photonic detector detects a defective wavelength. The tuner adjusts output wavelength of TWAL in response to the defective wavelength. Alternatively, PIC includes a working laser array, standby laser array, and spare laser array capable of providing two-layer laser defective protections.

Abstract: Systems and techniques for location independent website filtering using bifurcated domain name system are described herein. A domain name system (DNS) request may be received. A unique device identifier may be received for the requesting device. The ISP may provide external network services to the services gateway. The DNS service provider may maintain a website filtering policy. The DNS request may be forwarded to the DNS service of the ISP. The DNS service of the ISP may respond with a DNS resolution. An access control request may be forwarded to the DNS service provider external to the ISP. A website filtering policy associated with the device identifier may be used to determine website access. The DNS service provider external to the ISP may respond with a grant/block status. Based on the returned grant/block status, the services gateway may respond to the requesting device with the DNS resolution or access denial.