Abstract: Presented herein are techniques to receive configuration instructions for elements of a network topology to be simulated and tested. In response to receiving and in accordance with the configuration instructions, a plurality of software images (for a plurality of virtual network elements of the network topology) are configured via an Application Programming Interface (API). The plurality of software images run in a cloud host. In response to receiving and in accordance with the configuration instructions, data is configured via the API, which represents one or more connections between the virtual network elements. A plurality of software images for the plurality of virtual network elements is then executed in accordance with the data representing the connections, for development and testing of the network topology.

Abstract: Information describing a rule to be applied to a traffic stream is received at an edge network device. The traffic stream is received at the edge network device. A schema is applied to the traffic stream at the edge network device. It is determined that a rule triggering condition has been met. The rule is applied to the traffic stream, at the edge network device, in response to the rule triggering condition having been met. At least one of determining that the rule triggering event has taken place or applying the rule is performed based on the applied schema.

Abstract: In one implementation, an apparatus includes a camera, a loudspeaker, a plurality of microphones, and a controller. The apparatus may be a computer, a mobile device such as a smart phone, or a dedicated videoconference device. The plurality of microphones are configured to produce sound data. A first number of the plurality of microphones are arranged on a first side of the loudspeaker, and a second number of the plurality of microphones are arranged on a second side of the loudspeaker. Different quantities of the microphones may be included on each side of the loudspeaker. The controller is configured to calculate a cross-correlation of the plurality of microphones based on the sound data and attenuate the cross-correlation based on a time-delay window and an attenuation factor. A participant location is determined based on the attenuated cross correlation functions.

Abstract: Embodiments herein include an optical system, an optical component, and an associated method of passive alignment in which complementary magnetic patterns are used to provide passive alignment between optical elements. The magnetic coupling between the magnetic patterns operates to align optical elements in at least two dimensions. The magnetic coupling provides a temporary holding force on the optical elements until the optical elements are secured using epoxy or other adhesive.

Abstract: Dynamic frequency selection (DFS) is often a requirement for a wireless local area network (WLAN) apparatus to prevent the apparatus from interfering with other systems that have a priority to a radio frequency (RF) channel. When DFS is executed, the WLAN apparatus ceases WLAN operations on the channel and searches for an open channel to resume WLAN operations. Often a WLAN apparatus misinterprets signals from another system as operating on the channel when actually the received signals are signals leaked into the channel from a system transmitting on a different channel. Presented herein are methods and apparatuses for preventing unnecessary DFS operations resulting from misinterpreted signals through the use of a signal to noise ratio determined from a pulse spectral density of the received signal.

Abstract: One embodiment of the present invention provides a system for caching content data to a storage device attached to a node in a content-centric network (CCN). During operation, the system receives a content packet; forwards the content packet to an incoming port of an interest in the content packet; caches a copy of the content packet in the attached storage device, assembles a query; which includes at least a network header and an address associated with storage blocks at which the cached copy of the content packet is located, corresponding to the content packet; and stores the query in a cache table, thereby facilitating a subsequent direct access to the storage blocks using the assembled query to retrieve the copy of the content packet.

Abstract: A first network device may operate as a base station in a wireless wide area network (WWAN) and may establish a WWAN connection with a user device. A media access control (MAC) address of the user device may be obtained and sent to a second network device which operates an access point for a wireless local area network (WLAN). An acknowledgement containing a first service set identifier of the WLAN may be received from the second network device and sent to the user device to set up a secondary connection. An identifier for ordered data communication may used to enable in order communication through both the first and the second network devices. Data to be transmitted to the user device may be split into a first portion and a second portion, and transmitted through the WWAN connection and to the second network device for transmission to the user device via the WLAN respectively.

Abstract: One embodiment provides a system that facilitates efficient and secure transportation of content. An intermediate node receives a packet that corresponds to a fragment of a content object message that is fragmented into a plurality of fragments. One or more fragments of the plurality of fragments indicate a unique name that is a hierarchically structured variable-length identifier that comprises contiguous name components ordered from a most general level to a most specific level. The received fragment indicates an intermediate state which is based on a hash function performed on an intermediate state from a previous fragment and data included in the received fragment. In response to determining that the received fragment is a first fragment, the system identifies a first entry in a pending interest table for an interest with a name that is based on a hash of a content object and that corresponds to the first fragment.

Abstract: A method, apparatus, and computer-readable storage medium are disclosed for processing shared risk group (SRG) information in communications networks. The method includes processing, at a first network layer, first network information comprising a plurality of SRG identifiers. The processing includes producing second network information comprising a smaller number of SRG identifiers than that of the plurality of SRG identifiers. The method further includes sending at least a portion of the second network information to the second network layer. The apparatus includes a network interface adapted to send network information comprising SRG information, a processor coupled to the network interface, and a memory coupled to the processor and adapted to store program instructions operable when executed to carry out steps of the method. The storage medium is configured to store program instructions that when executed are configured to cause a processor to carry out steps of the method.

Abstract: In an embodiment, a data processing method comprises receiving a first instance of computer program data at a security unit having one or more processors; executing the first instance of the computer program data in a monitored environment; observing and recording identification information for each of a plurality of functions called by the first instance of the computer program data; sending the identification information to one or more security enforcement endpoints over a computer network; and generating one or more instructions describing security protections to implement for function calls not included in the identification information in a second instance of the computer program data, and sending the instructions to one or more security enforcement endpoints over a computer network.

Abstract: One embodiment provides a system that facilitates dynamic adjustment of forwarding information in a CCN. During operation, the system receives, by forwarding circuitry, an interest with a name that is a hierarchically structured variable length identifier which comprises contiguous name components ordered from a most general level to a most specific level. The system identifies in a first data structure an entry for one or more name components of the name, wherein the entry includes a list of outgoing interfaces associated with the one or more name components. The system determines network properties in response to forwarding the interest to a first interface of the list. The system reorders the list in order of priority based on the network properties, thereby facilitating the forwarding circuitry to dynamically adjust a likelihood of using a respective interface for forwarding interests associated with the one or more name components.

Abstract: A transport-framework system facilitates instantiating a custom transport stack. During operation, the system can obtain a stack requirement for a custom stack. The stack requirement can specify component attributes and a policy for one or more components to instantiate in the custom stack. The system can select a stack component that satisfies the stack requirement for the custom stack, and can instantiate the stack component in the custom stack. For example, the system can select a stack component by analyzing the stack requirement to determine a component requirement for a component that needs to be instantiated in the custom stack. The system determines, from a component repository, a set of matching components that satisfies the component requirement. If multiple matching components exist, the system selects a matching component which is most compatible with other components in the custom stack.

Abstract: A method is provided in one example embodiment and includes evaluating by a first network node a current level of congestion experienced by a session in a communications network; predicting a level of congestion that will be experienced by the session beginning at a next time boundary; sending a request message to a second network node, the request message comprising at least one rule corresponding to the current level of congestion and the predicted level of congestion, in which the rule has associated therewith an activation time and a deactivation time; and refraining from sending an additional request message to the second network node at the next time boundary.

Abstract: Techniques are presented herein for distributing address information of host devices in a network. At a first router device, a packet is received from a first host device that is destined for a second host device. The first host device is dually-connected to the first router and a second router device. The second router device is part of a virtual port channel pair with the first router device. A message is sent to the second router device, the message indicating that the first host device is connected to the second router device. The packet is encapsulated with an overlay header and is sent to a third router device that is connected to the second host device. The encapsulated packet contains a Layer 2 address associated with the first host device and a Layer 3 address associated with the first host device.

Abstract: Techniques for identifying media network flows that use dynamic codec identifications are described. In an embodiment, network flow information for a network flow between a first endpoint and a second endpoint is received from a network device interposed between the first endpoint and the second endpoint, wherein the network flow information includes at least an address for the first endpoint and a particular payload identification number. A request is sent to the first endpoint for one or more characteristics belonging to the first endpoint. In response to receiving the one or more characteristics, a profile database is searched for an entry that maps the one or more characteristics to a profile, wherein the profile maps one or more payload identification numbers to one or more encoding types. An encoding type for content transferred over the network flow is determined based on the profile and the particular payload identification number.

Abstract: One embodiment includes a firewall, intrusion prevention, or other device that automatically and dynamically adjusts packets subjected to certain rate limiting based on the reputation level associated with these packets (e.g., based on the reputation score of the source of a packet). In response to measured traffic, one embodiment automatically adjusts the range of reputation scores determining which packets are subjected to this rate limiting (e.g., which packets are possibly dropped), such as, but not limited to increase or decrease the measured traffic. For example, packet traffic with a worse reputation can be singled out for this rate limiting during a period of increased traffic, and then when the measured traffic subsides, the range of reputation scores can be correspondingly changed to allow more measured traffic.

Abstract: In one embodiment, a multicast communication is received at a particular node of a plurality of nodes receiving the multicast communication in a network. The particular node selects a subset of subcarriers using a probabilistic data structure, such that each of the plurality of nodes selects a respective subset of subcarriers using the probabilistic data structure. The particular node transmits an acknowledgement of receipt of the multicast communication on the subset of subcarriers selected by the particular node. The transmission occurs simultaneously with transmissions of acknowledgements from the other of the plurality of nodes.

Abstract: Techniques are described herein for facilitating a connection between a cloud networking platform and a unified communication system, where the cloud networking platform hosts communication services including real-time communications for client devices, and the unified communication system hosts communication services including real-time communications for on-prem devices that are associated with the unified communication system. Events associated with the cloud networking platform are monitored at the unified communication system, via a cloud connector device of the unified communication system, where events are associated with users who are registered with client devices and on-prem devices, and the events include real-time communications. A notification is provided to one or more client devices registered to a first user in response to an on-prem device also registered to the first user receiving a real-time communication request from a device of another user.

Abstract: The present disclosure provides for carrying downstream mapping information in an echo request message and/or echo reply message, which can describe both IP (Internet Protocol) multipath information and label multipath information. A transit node (e.g., an LSR element) that receives an echo request message from an initiator node determines downstream mapping information, which is returned to the initiator node. Transit node determines whether a newly defined type of multipath information (type 10) should be generated to return the downstream mapping information, based on whether transit node performs load balancing based on labels or IP header information, and whether transit node imposes entropy labels. A multipath information type 10 element includes either IP multipath information or label multipath information, as well as associated label multipath information that includes one or more entropy labels that map to the IP or label multipath information being returned.

Abstract: There are instances of a content item having synchronization information, one being an instance of a reference content item, another being a candidate content item. A synchronizing processor determines a synchronization point between the reference content item and the candidate content item, on the basis of matching the synchronization information of the reference content item and the candidate content item. A timeline metadata transmitter transmits stored timeline metadata to a device on which the reference content item is playing, the transmission of the stored timeline metadata beginning from the synchronization point. The stored timeline metadata includes timeline metadata that has been previously aggregated from earlier broadcasts of instances of the reference content item. Related systems, apparatus, and methods are also described.