Abstract: Network traffic interference detection and management may be provided. An infringement event by an infringing Access Point (AP) on a Restricted Target Wake Time (rTWT) transmission opportunity (TxOp) associated with a victim AP may be detected, and information associated with the infringement event may be added to an infringement list, wherein the information includes a MAC address associated with the infringing AP. A controller, may receive the infringement list and notify the infringement event to the infringing AP. The infringing AP may determine whether a transmission associated with the infringement event is low latency and high priority. When the transmission is not low latency and high priority the infringing AP may modify future transmissions based on the notification. When the transmission is low latency and high priority the infringing AP may notify the controller that the transmission is low latency and high priority.

Abstract: Per station multi-link time scheduling may be provided. An Access Point (AP) may receive a request from a Multi-Link Device (MLD) to send a plurality of data traffics in a network for a predetermined interval. A Quality of Service (QoS) requirement may be determined for each of the plurality of data traffics. A Traffic Identifier (TID)-to-link assignment may be determined for each of the plurality of data traffics. Determining the TID-to-link assignment may comprise determining a link state of each of a plurality of links envisioned for the MLD for the predetermined interval. Each of the plurality of data traffics may be assigned to one or more of the plurality of links based on the QoS requirement for each of the plurality of data traffics and the link state of each of the plurality of links envisioned for the MLD. The TID-to-link assignment may be sent to the MLD.

Abstract: A Fifth Generation (5G) and Wi-Fi Multi-Access Point Coordination (MAPc) function may be provided. A MAPc processor may determine a first traffic flow and a second traffic flow for a User Equipment (UE) and a property of the first traffic flow and of the second traffic flow. The MAPc processor may schedule restricted Target Wake Time (rTWT) service intervals on a Wi-Fi AP for the first traffic flow, and the MAPc processor may schedule rTWT service intervals on a 5G AP for the second traffic flow. The rTWT service intervals on the Wi-Fi AP may be at different times than the rTWT service intervals on the 5G AP.

Abstract: This disclosure describes various methods, systems, and devices related to identifying path changes of data flows in a network. An example method includes receiving, at a node, a packet including a first signature. The method further includes generating a second signature by inputting the first signature and one or more node details into a hash function. The method includes replacing the first signature with the second signature in the packet. The packet including the second value is forwarded by the node.

Abstract: In one embodiment, an apparatus includes a power adapter configured for direct connection to a Power Supply Unit (PSU) installed in a network device, the power adapter comprising a power input port for receiving power on an Ethernet cable, a power converter module for converting the power received at the power input port to a PSU input power, and a power output connector for connection with a PSU power input connector.

Abstract: Systems, methods, and computer-readable media for annotating process and user information for network flows. In some embodiments, a capturing agent, executing on a first device in a network, can monitor a network flow associated with the first device. The first device can be, for example, a virtual machine, a hypervisor, a server, or a network device. Next, the capturing agent can generate a control flow based on the network flow. The control flow may include metadata that describes the network flow. The capturing agent can then determine which process executing on the first device is associated with the network flow and label the control flow with this information. Finally, the capturing agent can transmit the labeled control flow to a second device, such as a collector, in the network.

Abstract: Embodiments for virtual reality (VR) and augmented reality (AR) scenes updates at VR/AR devices in a network are described. Network traffic for the scene updates is divided into traffic layers such as coarse grain (CG) layer traffic and a fine grain (FG) layer traffic for a give VR/AR scene update. The CG layer traffic is scheduled first in resource units (RUs) of a plurality a transmission opportunity (TXOP) for a VR device and FG layer traffic is scheduled in remaining RUs during the TXOP to provide synchronous viewing experiences to users of the VR/AR devices.

Abstract: A network node in an optical network dynamically generates a routing table based on attributes of the optical network. The network node obtains attributes characterizing the optical network, which includes multiple network nodes connected by optical links. The network node calculates cost values for sending data from the network node to one or more next hop nodes that are connected to the network node. Each particular cost value is associated with a probability of success of sending the data to a particular next hop node based on a particular permutation of the attributes characterizing the optical network. The network node generates a routing table correlating the permutations of the attributes with each next hop node based on the cost values.

Abstract: A Software-Defined Networking (SDN)-based “upstream” approach is a controller-based solution that provides secure key distribution and management for multi-site data centers. The approach uses an SDN Multi-Site Controller (MSC) that acts as an intermediary between SDN controllers at sites in a multi-site data center and manages the distribution of keys to sites. The approach is not dependent upon any particular routing protocol, such as the Border Gateway Protocol (BGP), and is well suited for multicast stream encryption by allowing the same key to be used for all replicated packets sent to downstream sites from an upstream source site. The approach distributes keys in a secure manner, ensures that data transferred between sites is done in a secure manner, and supports re-keying with error handling.

Abstract: Techniques are provided that validate a participant in a video conference. As a video conferencing system is remote from a video conference participant, and user devices are not trusted, traditional methods such as client side facial recognition are ineffective at validating a participant from a video conferencing system. Thus, the embodiments encode modulated data for projection onto a face of the participant. A video of the participant is then captured. The conferencing system then confirms that the modulated data is present in the captured video.

Abstract: A network management center includes a Dynamic Host Configuration Protocol (DHCP) server. The network management center obtains from an identity server, client information indicating authentication of a client device in a wireless network that is connected to a network fabric. The network management center obtains from an edge node in the network fabric an Internet Protocol (IP) address request for the client device. The IP address request including a fabric domain identifier associated with the edge node. The network management center allocates an IP address for the client device based on the client information obtained from the identity server and the fabric domain identifier contained in the IP address request obtained from the edge node. The network management center provides to the edge node an Identifier Locator Addressing (ILA) address based on the IP address.

Abstract: In one embodiment, a device generates a plurality of smoothed timeseries by applying smoothing envelopes of different durations to a timeseries of a path metric for a path in a network that is used to convey traffic of an online application. The device uses the plurality of smoothed timeseries and the timeseries of the path metric to make predictions as to whether the path will provide an unacceptable user experience in the online application. The device selects a smoothing envelope of a particular duration, by comparing performance metrics for the predictions. The device uses a timeseries of the path metric smoothed using the smoothing envelope of the particular duration to make predictive routing decisions in the network for the traffic of the online application.

Abstract: Federated multi-access edge computing availability notifications may be provided by: transmitting, from a User Equipment (UE) to an Access Point (AP) of a wireless network, an attach request for the wireless network that includes authentication credentials for an identity provider independent from the wireless network to authenticate the UE to the wireless network; receiving, at the UE via the AP, an authentication success message for the wireless network from the independent identity provider; transmitting, from the UE to the AP, a Multi-access Edge Computing (MEC) query; and receiving, at the UE from the AP, a MEC response that identifies MEC resources that are available to the UE based on an identity for the UE confirmed by the identity provider to the wireless network.

Abstract: This disclosure describes techniques for implementing network address translation as a distributed service over the nodes of a logical network fabric, such as a software-defined network fabric. A method includes registering, by an edge node of a network, an IP address of a client device. The method further includes forwarding, by the edge node, the registered IP address to a control plane of the network. The method further includes checking, by the control plane, a network address translation policy. The method further includes recording, by the control plane, translations between the registered IP address and an allocated IP address in a translation table, each of the translations being related to the edge node. The method further includes returning, by the control plane, the translations between the registered IP address and the allocated IP address to the edge node.

Abstract: This disclosure describes techniques for selectively providing access to a physical space. An example method includes identifying a location of a device associated with an authorized user based on an electromagnetic signal received by at least one sensor from the device. The electromagnetic signal has a frequency that is greater than or equal to 24 gigahertz (GHz). The example method further includes determining that the location of the device is within a threshold distance of a location of a threshold to a secured space and determining that an authentication score indicating that an individual carrying the device is the authorized user is greater than a threshold score. The authentication score is associated with multiple authentication factors identified by the device. Based on determining that the authentication score is greater than the threshold score, the threshold is unlocked and/or opened.

Abstract: The present disclosure relates to securing workloads of a network by identifying compromised elements in communication with the network and preventing their access to network resources. In one aspect, a method includes monitoring network traffic at network elements of a network; detecting a compromised element in communication with one or more of the network elements, the compromised element being associated with at least one network threat; and based on a defined network policy, applying one of a number of different access prevention schemes to the compromised element to prevent access to the network by the compromised element.

Abstract: In one embodiment, a device classification service receives telemetry data indicative of behavioral characteristics of a plurality of devices in a network. The service obtains side information for the telemetry data. The service applies metric learning to the telemetry data and side information, to construct a distance function. The service uses the distance function to cluster the telemetry data into device clusters. The service associates a device type label with a particular device cluster.

Abstract: Resource provider specifications, characterizing computing resources of computing resource providers, are received. The reachability of each IP address included in the received specification is determined. An agent is deployed that is operable to determine the value of each of a set of metrics in the environment of the host at which the agent is deployed. The agent determines the value of each metric of the set of metrics in the environment of the relevant host, and communicates the determined values to one or more computing devices that validate whether the resources characterized by the communicated values are sufficient to provide the performance characterized by the received specification and that each ISP router complies with a predetermined policy. For each computing resource provider validated and determined to comprise an ISP router compliant with policy, the specified computing resources are added to a pool of resources for cloud computing.

Abstract: Embodiments for handling multidestination traffic in a network are described. The multidestination traffic includes packets that are in transit to a multihomed destination in the network. Upon determining the destination is multihomed, a network switch determines a hash value from a selection of header values in the network traffic and uses the hash value to determine if the network switch is a designated forwarder for the multihomed destination. The network switch handles the network traffic according to a designated forwarder status.