Abstract: Presented herein are techniques for detecting anomalies in micro-service communications that are indicative of security issues/problems for the application. More specifically, a computing device receives a plurality of micro-service communication records each associated with traffic sent between pairs of executables (nodes) that are related to a micro-services application. Each of the micro-service communication records includes a time series entry and an associated trace sequence identifier and each of the micro-service communication records are generated during a time period. The computing device analyzes the plurality of micro-service communications to detect possible anomalous communication patterns associated with the micro-services application during the time period.

Abstract: In one embodiment, a first device in a network maintains raw traffic flow information for the network. The first device provides a compressed summary of the raw traffic flow information to a second device in the network. The second device is configured to transform the compressed summary for presentation to a user interface. The first device detects an anomalous traffic flow based on an analysis of the raw traffic flow information using a machine learning-based anomaly detector. The first device provides at least a portion of the raw traffic flow information related to the anomalous traffic flow to the second device for presentation to the user interface.

Abstract: In one embodiment, a system, apparatus, and method are described for providing limited data connectivity for devices connected to a switch when the switch enters bootloader mode. The switch has a central processing unit (CPU), the CPU comprising a reload handler and an application-specific integrated circuit (ASIC), the ASIC comprising ASIC forwarding logic. The ASIC is instructed, by the reload handler, to store an ASIC database, the ASIC database for storing the ASIC forwarding logic. The reload handler maintains a physical layer (PHY) state of the switch. Use of spanning tree protocol (STP) and Transmission Control Protocol (TCP) keepalive is disabled in the switch. A state of stack hardware is retained in switch memory. New ports of the switch are prevented from becoming active, and the ASIC forwarding logic is, in response to receiving the instruction, stored in the ASIC database. Related systems, apparatuses, and methods are also described.

Abstract: An interface is provided for a user to create a custom dashboard for providing application performance data. The dashboard may be created from one or more widgets, such as graphs, charts, and other display components, and each widget may be individually configured with parameters. The dashboard may be configured to display data for one or more particular transactions, transaction types, or transactions that meet specified criteria. Once created, the dashboard may be shared through a website URL, e-mail, or other method.

Abstract: In one embodiment, a method includes identifying removal of a module from a network device comprising a plurality of fans during an online removal process while the network device is operational, reducing fan speed in the network device to allow a hinged door to move to a closed position covering an opening from which the module was removed, and increasing the fan speed to maintain cooling in the network device.

Abstract: Digital pre-distortion may be provided. First, a characterization for input matching circuitry may be determined. Next, a characterization for non-linearity of an amplifier connected to the input matching circuitry may be determined. Then, a distortion correcting signal may be generated from an input signal based on the determined characterization for the input matching circuitry and the determined characterization for the non-linearity of the amplifier. The generated distortion correcting signal may then be provided to the input matching circuitry.

Abstract: To reduce the rate at which a false alternating current (“AC”) loss alarming signal is generated, but at the same time detect an actual AC loss situation in a timely manner, the disclosed method describes an AC line power loss detection and active verification method. If the AC line input voltage dips momentarily lower than a standard sine wave amplitude, the AC line may not be considered lost as long as it still has energy to drive a load. The method inserts a momentary load across the AC line and compares the AC line voltage before and after the extra load is applied. If the AC power is present, this extra loading will increase the AC loading current momentarily, but will not affect the AC line voltage. However, if the AC power is lost, such loading will lower the AC line voltage, indicating a loss of power.

Abstract: Presented herein are techniques for automatically creating communities of network-connected devices, i.e., Internet of Thing (IoT) devices. One or more of a plurality of network-connected devices are identified based on one or more policies that define one or more communities of network-connected devices. A community of network-connected devices includes network-connected devices that share common functional, physical or relational attributes. Information is stored that indicates the one or more communities of which each of the one or more of the plurality of network-connected devices is a member based on the policies that define the one or more communities and functional, physical or relational attributes of the one or more of the plurality of network-connected devices.

Abstract: A controller of a collaboration endpoint generates a primary audio signal for an ultrasonic source audio signal produced by a source audio speaker, a reference audio signal for the ultrasonic source audio signal, and, based on the reference audio signal, a predicted signal that is predictive of the primary audio signal. The controller produces a prediction error of the predicted signal by comparing the primary audio signal with the predicted signal and determines whether the prediction error is indicative of a motion of one or more persons near the collaboration endpoint.

Abstract: A network device may receive a flow having source information corresponding to a first client device and destination information corresponding to a second client device. A tag may then be created by the network device for the flow based upon the source information and the destination information. Next, the network device may encapsulate a packet corresponding to the flow. The packet may be encapsulated with encapsulation information including the created tag. The encapsulated packet may then be routed through a plurality of intermediate network devices in the network. The created tag encapsulated with the packet may identify the packet as being a part of the flow as the packet is routed through the plurality of intermediate network devices.

Abstract: A target sample x(i,j) of a two-dimensional array of reconstructed samples is filtered based on values of samples in a neighboring region of the target sample to produce a two-dimensional array of modified reconstructed samples, according to the equation: y(i,j)=round(x(i,j)+g(?m,n?Ra(m,n)ƒ(x(i,j)?b(m,n)x(m,n)))), where y(i,j) is a modified target sample value, R is the neighboring region of the target sample, a(m,n) and b(m,n) are real-valued coefficients, round(x) is a function that maps the value x to an integer value in the range [0,2B?1], B is the number of bits representing each sample of the two-dimensional array of modified reconstructed samples, ƒ(x) and g(x) are functions, wherein (a) ƒ(x) is a non-linear function, or (b) g(x) is a non-linear function and both a width and a height of R is more than one sample.

Abstract: Systems and methods for triggering service activation include starting a vCPE instance in response to a request for a service, instantiating a service container for the requested service and starting the service in the service container, installing a fast path entry for the service container in a local bridge table, detecting an idle timeout of the service and labeling the local bridge table entry for the corresponding service container as inactive, notifying a cloud services manager that the service container is inactive, and removing the service container.

Abstract: In one embodiment, a network device is provided that comprises a plurality of ports at which network packets are received at the network device and sent from the network device. At least hardware module includes one or more memories that store entries for one or more networking features to be performed to direct network packets with respect to the plurality of ports. A processor is coupled to the at least one hardware module and configured to communicate with the at least one hardware module to store in the one or more memories attributes for one or more access control lists and associated actions that cause network packets which are received that match the attributes for the one or more access control lists, to be directed in a service chain that includes one or more network processing appliances connected to one or more of the plurality of ports.

Abstract: Techniques for automatic bandwidth optimization of an optical communication channel in an optical network are provided. In one embodiment, a method of automatically optimizing bandwidth includes receiving, at a first optical network element, a first signal transmission transmitted according to a first set of transmission parameters over an optical communication channel established between the first optical network element and a second optical network element. The method includes determining a first quality of signal parameter associated with the first signal transmission and determining whether the first quality of signal parameter is worse than a predetermined quality of signal value. Upon determining that the first quality of signal parameter is not worse than the predetermined value, the method further includes transmitting a second set of transmission parameters to the second optical network element to further optimize the bandwidth of the optical communication channel.

Abstract: In one embodiment, a memory control process of a device receives a plurality of program/erase (P/E) requests for a flash memory of the device. The memory control process then stores data associated with the plurality of P/E requests in a random access memory (RAM) of the device, and aggregates the plurality of P/E requests into a single P/E operation. The memory control process may then send the single P/E operation to the flash memory at a given interval to update the flash memory with the data stored in the RAM.

Abstract: Utilizing several passes of a token among the operating system level virtualization applications (OSLVAs) running on each of an ordered list of nodes selectively upgrade user applications in specific containers after determining that each OSVLA hosting a container to be upgraded is live. A failed liveness check can cause a revision to the list of nodes. Post-upgrade health checks of each application, and a list-wide notification of a completed upgrade of the application instances, can follow a successful upgrade. A roll back of the upgrade across all nodes can follow an unsuccessful upgrade.

Abstract: Approaches are disclosed for distributing messages across multiple data centers where the data centers do not store messages using a same message queue protocol. In some embodiment, a network element translates messages from a message queue protocol (e.g., Kestrel, RABBITMQ, APACHE Kafka, and ACTIVEMQ) to an application layer messaging protocol (e.g., XMPP, MQTT, WebSocket protocol, or other application layer messaging protocols). In other embodiments, a network element translates messages from an application layer messaging protocol to a message queue protocol. Using the new approaches disclosed herein, data centers communicate using, at least in part, application layer messaging protocols to disconnect the message queue protocols used by the data centers and enable sharing messages between messages queues in the data centers.

Abstract: A method for routing is disclosed. The method comprises provisioning an endpoint in a network with a reactive path selection policy; monitoring, by the endpoint, current conditions relating to various paths available to said end point for the transmission of traffic; and selectively applying, by the endpoint, at least a portion of the reactive path selection policy based on the current conditions of the available paths.

Abstract: In one embodiment, a method includes obtaining a request to route traffic from a source to a destination in a network, where the request is associated with a setup bandwidth criterion. The method includes: identifying a plurality of candidate tunnel paths from the source to the destination; and, for each of the plurality of candidate tunnel paths, determining whether or not at least one of the candidate tunnel paths satisfies the setup bandwidth criterion. In response to determining that the plurality of candidate tunnel paths fail to satisfy the setup bandwidth criterion, the method includes: determining a congestion metric for each of a plurality of candidate tunnel paths from the source to the destination; and instantiating a tunnel from the source to the destination according to a candidate tunnel path with the lowest congestion metric.

Abstract: Systems and methods are disclosed for anticipating a video switch to accommodate a new speaker in a video conference comprising a real time video stream captured by a camera local to a first videoconference endpoint is analyzed according to at least one speaker anticipation model. The speaker anticipation model predicts that a new speaker is about to speak. Video of the anticipated new speaker is sent to the conferencing server in response to a request for the video on the anticipated new speaker from the conferencing server. Video of the anticipated new speaker is distributed to at least a second videoconference endpoint.