Abstract: In one embodiment, a device in a network maintains a plurality of anomaly detection models for different sets of aggregated traffic data regarding traffic in the network. The device determines a measure of confidence in a particular one of the anomaly detection models that evaluates a particular set of aggregated traffic data. The device dynamically replaces the particular anomaly detection model with a second anomaly detection model configured to evaluate the particular set of aggregated traffic data and has a different model capacity than that of the particular anomaly detection model. The device provides an anomaly event notification to a supervisory controller based on a combined output of the second anomaly detection model and of one or more of the anomaly detection models in the plurality of anomaly detection models.

Abstract: Utilizing the systems disclosed herein, a network element (in a network) controls, within another network, the constraints of a service, timing of the creation of the service, and selection a service on which a packet is transmitted. For example, a first network element (located in a first network) receives a request associated with initiating a service. The request is received from a second network element located in a second network and includes at least one path constraint. The first network element controls creation of the service in the first network on behalf of the second network element located in the second network by, e.g., identifying a path based, at least in part, on the at least one path constraint; and binding an identifier and an interface to the path, wherein the interface is associated with one or more operation to perform on any traffic that is labeled with the identifier.

Abstract: An example method is provided in one example embodiment and includes receiving performance metric information from a plurality of small cell radios, wherein the performance metric information includes, at least in part, a number of user equipment that are to be scheduled on a first type and a second type of subframes for each small cell radio; determining resource allocation parameters for the plurality of small cell radios; exchanging interference information between two or more small cell radios of the plurality of small cell radios that includes an indication of whether a particular small cell radio is interfering with or is interfered by another small cell radio of the two or more small cell radios; and scheduling downlink resource transmissions on the first type and the second type of subframes for user equipment served by the two or more small cell radios.

Abstract: In one embodiment, a method for selecting a software interface based on operator policy comprises receiving from a mobile device a message requesting that a packet data session be allocated, wherein the message includes a requested quality of service profile for the packet data session, selecting a software interface, from among a plurality of software interfaces, for communication with a packet node based on the contents of the message, for the packet node to provide the mobile device with access to a packet data network, and allocating the packet data session in communication with the packet node, wherein the requested quality of service profile is conveyed to the packet node using the selected software interface.

Abstract: A method, network device, and computer readable medium are disclosed. In one embodiment of the method, a data packet is received at a node within a first segment routing enabled access network. The first access network is connected, via a first area edge node, to a first area of a subdivided segment routing enabled network, and a specified destination for the data packet is reachable via a second segment routing enabled access network connected to the subdivided network. The method embodiment further includes receiving from a centralized controller a remote segment identifier stack, where the remote segment identifier stack encodes a path extending from the first area edge node to the second access network. The embodiment of the method continues with encapsulating the data packet with a full segment identifier stack comprising the remote segment identifier stack, and forwarding the encapsulated data packet toward the first area edge node.

Abstract: In one embodiment, a device in a network receives a packet that includes one or more forwarding labels and a service function chaining (SFC) header. The device removes the one or more forwarding labels from the packet. The device inserts an indication of the one or more forwarding labels into metadata of the SFC header. The device forwards the packet with the inserted indication of the one or more forwarding labels to a service function.

Abstract: Embodiments of the present disclosure relate to assisting forwarding of multicast traffic over Ethernet Virtual Private Network (EVPN) from a multicast source to a host multi-homed to multiple provider edge (PE) devices. Embodiments are based on the inclusion of an Ethernet Segment Identification (ESI) to EVPN type-6 routes advertised by PE devices which received a multicast Join message. Other PE devices receiving such routes are able to determine whether they belong to the ES identified by the ESI and to determine whether they are designated forwarders (DFs) for the host. Furthermore, PE devices which are the DFs are configured to re-originate the EVPN type-6 routes, i.e. re-send the advertisements, indicating themselves as DFs. This ensures that a remote PE device associated with the multicast source will also send multicast traffic to such DF PE devices, which, in turn, would allow the multicast traffic to successfully reach the host.

Abstract: Methods, apparatuses and systems directed to a distributed bootstrapping mechanism for peer-to-peer networks. In particular implementations, the de-centralized bootstrapping mechanism utilizes an allocated set of anycast addresses from the public IP space. Routing nodes or peer nodes corresponding to respective autonomous systems select an anycast address by computing a hash of an Autonomous System (AS) number (or other string) and mapping the hash value, or a portion of the hash value, to one of the anycast addresses in the allocated set. Other mechanisms for selecting anycast addresses (such as random selection) can be used. One or more of the routing nodes of the autonomous system may advertise a host route identifying the selected anycast address. When a new peer node is added to the P2P network, it may, upon initialization, transmit discovery messages using the anycast addresses from the allocated set, which may be ultimately routed to one of the peers in the P2P network.

Abstract: In one embodiment, an addressing agent determines a logical static IP addressing scheme for a computer network, the addressing scheme shared with an application server and defining a static mapping of IP addresses to particular types of application-based devices that are managed by the application server in particular physical locations within the computer network. The addressing agent determines a topology of the computer network indicative of application-based devices, their type, and their physical location. The addressing agent calculates a dynamic IP address for the devices based on their type and physical location as defined by the addressing scheme, and collaboratively assigns their corresponding calculated dynamic IP address.

Abstract: This disclosure relates to a system and method for offloading selected data to an alternate communication network. The offloading provides another route for selected packet traffic that can relieve the burden on a mobile operator's network, such as the backhaul and core networks. As the proliferation of data rich content and increasingly more capable mobile devices has continued, the amount of data communicated over mobile operator's networks has exponentially increased. Upgrading the existing network that was designed for voice calls is not desirable or practical for many mobile operators. This disclosure provides systems and methods for offloading data to the Internet or another IP network to relieve congestion on the mobile operator's network.

Abstract: An example method is provided in one example embodiment and may include subscribing to a key distribution service by a plurality of Wi-Fi access points belonging to a same mobility domain; receiving a request from a user equipment to connect to a first Wi-Fi access point of the plurality of Wi-Fi access points belonging to the same mobility domain; determining one or more second Wi-Fi access points of the plurality of Wi-Fi access points belonging to the same mobility domain that neighbor the first Wi-Fi access points; and distributing keying parameters to each of the one or more second Wi-Fi access points. The keying parameters can be associated with 802.11r pairwise master key (PMK) keying parameters.

Abstract: An emulator module integrated with a hypervisor executes on a host computer having a physical network interface card (pNIC). The hypervisor hosts a virtual machine having a virtual NIC (vNIC). The pNIC has pNIC receive pointers to point to receive packets loaded into a receive buffer by the pNIC. The vNIC has vNIC receive pointers for retrieval of the receive packets from the receive buffer. The emulator module accesses a pNIC receive pointer in the pNIC that points to the receive packet loaded into the receive buffer by the pNIC, and maps a vNIC receive pointer to the pNIC receive pointer accessed by the emulator module, to enable the vNIC to retrieve the receive packet from the receive buffer using the vNIC receive pointer. The emulator module notifies the vNIC to retrieve the receive packet from the receive buffer.

Abstract: Aspects of the embodiments are directed to augmenting a control packet with an interface identifier, the interface identifier identifying an interface at a physical network forwarding element; and transmitting the control packet with the interface identifier to the physical network forwarding element. The interface identifier can be included in metadata of a network service header (NSH). The NSH is encapsulated with the control packet, which is transmitted with the control packet. The NSH can be extracted and the interface identifier used to identify a user interface (or a presenting interface) based on a metadata lookup.

Abstract: The present technology may monitor an asynchronous transaction based on a custom exit point. Once an asynchronous method to be monitored has been identified, the transition framework may be tracked while executing the asynchronous method call. Within a .NET framework, monitoring may include tracking a task object, continuation method calls at the completion of a method, and tracking the continuation method as it executes other code. The asynchronous method may then be correlated within a business transaction using the returned task object data.

Abstract: An optics module sends, to a host module, a pin signal indicating that an optics module is plugged into the host module, wherein the optics module is configured to operate at at least a first data rate and a second data rate. The optics module receives, from the host module, an indication of a host data rate. The optics module determines whether there is clock and data recovery loss of lock between the first data rate and a host data rate. If it is determined that there is clock and data recovery loss of lock between the first data rate and the host data rate, the optics module initializes at the second data rate if the second data rate matches the host data rate.

Abstract: Methods and network devices are disclosed for traversal, within a network configured for bit indexed forwarding, of a subnetwork having nodes not configured for bit indexed forwarding. In one embodiment, a method includes receiving, from a first network node not configured for bit indexed forwarding, a data message comprising a local label and a message bit array. Bit values in the message bit array identify intended destination nodes for the message. The embodiment further includes modifying the message bit array to exclude as intended destination nodes for the message any nodes not represented by one or more relative bit positions associated with the local label and stored in an ingress filter data structure. In addition, the embodiment includes forwarding a copy of the data message to a second network node, which is configured for bit indexed forwarding, identified in an accessed entry of a bit indexed forwarding table.

Abstract: A wireless access point that serves one or more wireless client devices in a wireless network determines that at least one particular client device that is associated to the wireless access point should not be associated to the wireless access point. The wireless access point transmits frames so that they are received at the particular client device with reduced strength so as to provoke the particular client device to transition from the wireless access point.

Abstract: A method and system for synchronizing policy in a control plane are provided. The method includes associating, by a network management system (NMS), a first identifier (ID) with a first policy of a network, wherein the first ID uniquely identifies the first policy. The method also includes pushing, by the NMS, the first policy to the control plane including a plurality of controllers. Further, the method includes exchanging, by the NMS, the first ID with the plurality of controllers. Moreover, the method includes determining, by the NMS, at least one controller from which confirmation of the first ID is not received as a stale controller.