Abstract: A controller, e.g., a software-defined network (SDN) controller, stores data representing a topology of a network that includes a plurality of network elements. A move is detected of a host between network elements in the network and a destination network element to which the host has moved is determined. The destination network element is designated as a root of a tree in the network. A topology for the tree is generated using the destination network element as the root of the tree. Following the topology of the tree, starting with the root, parent network elements in the tree are updated for a traffic flow for the host before child network elements are updated.

Abstract: One embodiment includes a firewall, intrusion prevention, or other device that automatically and dynamically adjusts packets subjected to certain rate limiting based on the reputation level associated with these packets (e.g., based on the reputation score of the source of a packet). In response to measured traffic, one embodiment automatically adjusts the range of reputation scores determining which packets are subjected to this rate limiting (e.g., which packets are possibly dropped), such as, but not limited to increase or decrease the measured traffic. For example, packet traffic with a worse reputation can be singled out for this rate limiting during a period of increased traffic, and then when the measured traffic subsides, the range of reputation scores can be correspondingly changed to allow more measured traffic.

Abstract: Techniques are presented herein to facilitate higher bandwidth communications in a data center using existing multi-mode fibers and full-duplex optical communication techniques. A first device transmits to a second device a first optical signal at a first wavelength on a first optical fiber. The first optical signal carries a first portion of Ethernet traffic. The first device receives a second optical signal transmitted at a second wavelength on the first optical fiber from the second device. The second optical signal carries a first portion of Ethernet traffic. On a second optical fiber, the first device transmits to the second device a third optical signal at a third wavelength. The third optical signal carries a second portion of Ethernet traffic. The first device receives a fourth optical signal at a fourth wavelength on the second optical fiber, the fourth optical signal carrying a second portion of Ethernet.

Abstract: A method is provided to lower the overall power consumption of small form-factor pluggable (SFP) transceivers. The method includes receiving an indication to operate the SFP transceiver in a low power mode, and setting the SFP transceiver to a low power mode in response to the indication by at least switching off a thermal electric cooler (TEC) that controls a temperature of a laser diode of the SFP transceiver. The proposed method may be implemented whenever a reach is not more than a predetermined distance, for example, 65 kilometers. At such reduced distances, the TEC of the SFP transceiver can be switched off while still guaranteeing link functionality. The instant low power mode has the benefit of reducing the power consumption of the SFP transceiver so that, for example, host platforms with lower power delivery budgets can support the SFP transceiver for at least some applications.

Abstract: In an embodiment, a method is provided for regulating network traffic and virtual private networks. In this method, network traffic transmitted along multiple communication paths is received, and these communication paths are associated with forwarding identifiers. A portion of the forwarding identifiers is identified to match a particular forwarding identifier associated with a particular virtual private network. At the same time, the policy associated with the particular virtual private network is identified. A portion of the network traffic that is associated with the portion of the identified forwarding identifiers can then be regulated based on the policy.

Abstract: In one embodiment, during network operation, it is dynamically determined whether to change from passive probing of communication path metrics to active probing of communication path metrics.

Abstract: In one embodiment, a list of border node next hop options is maintained in a memory. The list of border node next hop options includes one or more of border nodes that may be utilized to reach one or more prefixes. An index value is associated with each border node of the list of border node next hop options. A list of labels is also maintained in the memory. The index value of each border node is associated with a corresponding label for a path to reach that border node. When a change to the one or more border nodes is detected, the list of border node next hop options is updated to remove a border node. However, a label for the path to reach the border node is maintained in the list of labels for at least a period of time.

Abstract: A latching apparatus includes a catch and a pin to maintain a chassis in a closed configuration. The catch is coupled to a first chassis panel and movable relative to the pin that is coupled to a second chassis panel. In response to relative movement between the catch and the pin along a first axis, a first portion of the pin is positioned within an opening of the catch to maintain the chassis closed. In response to relative movement between the catch and the pin, the catch opening is positioned around a second portion of the pin to define an unlatched position. Whereas the closed configuration inhibits relative movement between the first and second chassis portions, the unlatched position permits relative movement therebetween for separation between the first chassis panel and the second chassis panel.

Abstract: Techniques are provided to redistribute and rebalance power to a plurality of blade servers with a chassis unit. At a chassis management controller device in a chassis unit comprising a plurality of blade server devices, policy information is stored for the chassis unit. The policy information comprises power limit information that indicates a power budget for the chassis unit and blade server priority information that indicates priority for access to power for each of the plurality of blade servers in the chassis unit. Power is distributed to the plurality of blade servers based on the blade server priority information for each of the plurality of blade servers and the power limit information for the chassis unit. The actual power consumption of each of the plurality of blade servers is determined and power is redistributed to the plurality of blade servers based on the actual power consumption and the policy information.

Abstract: In one embodiment, a method includes displaying a plurality of tiles on a user's computer screen, each of the tiles comprising shared data, and receiving new shared data and processing the new shared data to update the shared data displayed on the user's computer screen. The shared data is collected at a centralized device and distributed by the centralized device to the user, the centralized device operable to organize and transmit the shared data contained in one or more of the tiles to a plurality of users. An apparatus and logic are also disclosed herein.

Abstract: In one example embodiment, an apparatus may include a first virtual machine provided on a first local device of a plurality of local devices, wherein a portion of resources of the first local device are allocated to the first virtual machine. A virtualization software switch may be provided on the first local device, configured to forward or redirect at least some traffic from the first local device to a WAN (Wide Area Network) optimization virtual appliance, the WAN optimization virtual appliance including at least the first virtual machine, a second virtual machine on a second local device of the plurality of local devices, and a distributed WAN optimization application running at least on the first and second virtual machines.

Abstract: A search system generates an ordered list of destination targets including identified individuals and data objects, based on applying a user context to an information context and to a connection context. The user context identifies a search context (i.e., the information the user is seeking) relative to an identity of the user, and the information context identifies destinations accessible by the user, including data objects and communications-based actions (e.g., voice over IP telephony calls, instant messaging session transcripts, etc.). The connection context identifies relationships between chosen destinations throughout the system, and the strength of those relationships determined from artifacts of the chosen destinations: the connection context is updated based on artifact detection. The portion of the connection context that is relevant to the user context is used to order the portion of the information context that is relevant to the user context, resulting in the ordered list of destination targets.

Abstract: A smart network may include a smart network host device as well as a smart network connector device, a smart network extender device and one or more client devices configured to connect to the smart network. An installation module is configured to connect to the smart network host device to determine whether a user is attempting to setup multiple network devices substantially simultaneously. The installation module then configures the multiple network devices based on the other network devices connected to the smart network host device. The installation module simplifies setup of the smart network by combining the configuration of multiple network devices into a single setup flow.

Abstract: In one implementation, voice service discovery may include a voice service discovery protocol (VSDP) and a VSDP device, which receives voice virtual local area network data and generates a packet including root voice service configuration data. The VSDP device may be in an enabled state, a listening state, or a disabled state. Receiving voice service configuration data may initiate the enabled state in the VSDP device, and the packet may be transmitted to a remote device. Voice service discovery may include advertising a voice service to a plurality of voice over internet protocol endpoints according to the root voice service configuration data.

Abstract: A method and apparatus for self-monitoring to identify an occurrence of a threshold and rebooting in response to the occurrence of the threshold is provided. In an embodiment, a data processing apparatus comprises one or more processors; logic coupled to the one or more processors and comprising one or more stored sequences of instructions which, when executed by one or more processors, cause the one or more processors to obtain a threshold associated with the apparatus; self-monitor the apparatus to identify an occurrence of the threshold; and self-reboot the apparatus responsive to the occurrence of the threshold.

Abstract: In one embodiment, a method to display a visual representation of subblock utilization in an address block is provided. A plurality of subblock sizes in the address block are determined. A subblock may be referred to as a subnet or subblock but is a portion of the addresses in the address block. The size for the subblocks is determined for each of the subblocks based on which address spaces have been assigned to each of the subblocks. Also, a positioning within the address block is determined based on which address space has been assigned to each of the subblocks. A utilization for the plurality of subblocks is then determined. The utilization may be a determination based on how many addresses have been leased in the subblock. A visual representation is then generated that shows the size of the subblocks relative to each other and also showing a utilization measurement for the subblocks.

Abstract: Techniques are provided for providing power onto multiple power distribution paths. Power controller devices receive power from a power source device and are coupled to first and second multiplexer units. The multiplexer units receive power from the power source devices via the power controller devices for first and second power distribution paths. A multiplexer control unit controls the multiplexer units to output power from the first power distribution path, the second power distribution path or both of the paths. Power subsystems are provided comprising first and second power transistor units. The first transistor unit receives power from the first multiplexer unit over the first path and the second transistor unit receives power from the second multiplexer unit over the second path. Ports are provided and are coupled to a powered device. The multiplexer control unit controls the multiplexer units to supply power to the respective ports according to the type of powered device detected at a port.

Abstract: Disclosed are, inter alia, methods, apparatus, computer-readable media, mechanisms, and means for load balancing manipulation of packet flows within a transport conduit (e.g., a tunnel, pseudo wire, etc.), typically using a load balancing value which is independent of standard routing-based parameters (e.g., source address, destination address, source port, destination port, protocol type, etc.). A load balancing value is included in encapsulated packets transported across a network using a transport conduit. This load balancing value can be used to load balance the individual flows/microflows within the transport conduit.

Abstract: Systems, methods, and other embodiments associated with key generation for networks are described. One example method includes configuring a key server with a pseudo-random function (PRF). The key server may provide keying material to gateways. The method may also include controlling the key server to generate a cryptography data structure (e.g., D-matrix) based, at least in part, on the PRF and a seed value. The method may also include controlling the key server to selectively distribute a portion of the cryptography data structure and/or data derived from the cryptography data structure to a gateway. The gateway may then encrypt communications based, at least in part, on the portion of the cryptography data structure. The method may also include selectively distributing an epoch value to members of the set of gateways that may then decrypt an encrypted communication based, at least in part, on the epoch value.