Abstract: In one embodiment, a recommendation service of a device provides a recommended action to a client of an online application predicted to improve a quality of experience metric for the online application. The device receives feedback from the client indicative of the recommended action not being implemented by a user of the client. The device determines, based on the feedback, a reason for the recommended action not being implemented. The device updates the recommendation service based on the reason for the recommended action not being implemented.

Abstract: A multi-column graphite-over-foam (GOF) assembly includes a plurality of foam columns wherein each foam column of the plurality of foam columns are individually wrapped in a graphite sheet. A graphite layer surrounds the plurality of foam columns and an electrically conductive outer layer surrounding the graphite layer. The graphite layer is configured to thermally couple the electrically conductive outer layer to the plurality of foam columns, and the electrically conductive outer layer is configured to absorb electromagnetic interference (EMI).

Abstract: An apparatus includes a first printed circuit board (PCB), the first PCB including a first interface, and a corrosion sensor assembly. The corrosion sensor assembly including a second interface arranged to be coupled to the first interface. The corrosion sensor assembly further including a signal trace field and a plurality of components, where the signal trace field and the plurality of components are arranged to provide an indication of whether the apparatus is in an environment that is corrosive.

Abstract: In one embodiment, an illustrative method herein may comprise: initiating, by a device, a transaction trace that passes through a plurality of downstream tracers configured to collect a temporarily cached span of telemetry information regarding the transaction trace; receiving, by the device, an indication of a trigger event at a given span along the transaction trace from a particular one of the plurality of downstream tracers; deciding, by the device and based on the trigger event, whether to trigger a sharing of the temporarily cached span of telemetry information regarding the transaction trace from each of the plurality of downstream tracers; and sending, by the device in response to deciding to trigger the sharing, a signal to the plurality of downstream tracers to cause the plurality of downstream tracers to share their temporarily cached span of telemetry information regarding the transaction trace with a telemetry collector.

Abstract: Techniques for creating consent contracts for devices that indicate whether the devices consent to receiving network-based communications from other devices. Further, the techniques include enforcing the consent contracts such that network-based communications are either allowed or disallowed in the network-communications layer prior to the network communications reaching the devices. Rather than simply allowing a device to communicate with any other device over a network, the techniques described herein include building in consent for network-based communications where the consent is consulted at one or more points in a communication process to make informed decisions about network-based traffic.

Abstract: Embodiments presented in this disclosure generally relate to a ground device. More specifically, embodiments disclosed herein are directed to a grounding device for indicating whether there is proper grounding for electrical equipment. One embodiment presented in this disclosure provides an apparatus. The apparatus generally includes a lug configured to be coupled to a physical ground node, the lug having one or more bolts for coupling the lug to a surface of a plate such that the physical ground node is electrically coupled to an electrical ground node. The apparatus also includes a sensing circuit configured to detect whether the physical ground node is electrically coupled to the electrical ground node, and provide an indication of whether the physical ground node is electrically coupled to the electrical ground node based on the detection.

Abstract: According to one or more embodiments of this disclosure, a network controller in a data center network establishes a translation table for in-band traffic in a data center network, the translation table resolves ambiguous network addresses based on one or more of a virtual network identifier (VNID), a routable tenant address, or a unique loopback address. The network controller device receives packets originating from applications and/or an endpoints operating in a network segment associated with a VNID. The network controller device translates, using the translation table, unique loopback addresses and/or routable tenant addresses associated with the packets into routable tenant addresses and/or unique loopback addresses, respectively.

Abstract: An apparatus comprising a printed circuit board with at least one heat source, an enclosure around the printed circuit board, wherein the enclosure includes a first surface and a second surface opposite the first surface, and a heatsink comprising a body portion and a plurality of fins extending from the body portion, wherein the heatsink is attached to the first surface, and wherein the at least one heat source conducts heat to the heatsink, wherein a plurality of channels are provided between the first surface and the second surface, each of the plurality of channel passing through the enclosure, the heatsink, and the printed circuit board.

Abstract: Described herein are devices and methods for calculating a network sustainability index (NSI) and providing specific remediation/action plans to achieve better sustainability in network infrastructures. The NSI is calculated based on one or more of three main parameters: a reporting parameter, an optimization parameter, and/or a device energy efficiency rating. The reporting parameter may evaluate the capability of each device to report its power consumption, considering factors such as granularity, component-level reporting, and reporting frequency. The optimization parameter may assess whether a device participates in network energy optimization. The device energy efficiency rating may evaluate the energy efficiency of each device. A recommendation portal offers actionable insights and remediation plans based on the calculated NSI.

Abstract: Techniques for using more-specific routing to perform scalable Layer-2 (L2) stretching of subnets across hybrid-cloud environments. Routing tables in a public cloud may allow for routes that are more specific than the default local route, and the more-specific routes may be used to send all traffic to a dedicated, cloud router. The more-specific routes are set up for a VPC where a subnet resides such that the more specific-routes cover at least a portion of subnet range. The next hop for the more-specific routes point to the cloud router which is capable of doing host routing and segmentation extension. Thus, traffic originating from endpoints in a VPC is routed to the cloud router, and the cloud router determines whether the traffic is to be re-routed back to a destination endpoint in the VPC (or another cloud location), or sent to a destination endpoint residing in the on-premises site.

Abstract: According to an embodiment, a node comprises one or more processors operable to execute instructions to cause the node to perform operations that comprise receiving a packet from a first node associated with an SD-WAN domain. The packet comprises a header indicating a TLOC associated with a second node to send the packet, the second node associated with an SR domain. The operations comprise determining that the TLOC corresponds to a virtual TLOC used in the SD-WAN domain to identify the second node that is in the SR domain and, in response, determining a second node identifier used in the SR domain to identify the second node. The operations further comprise preparing the packet to be communicated via the SR domain. Preparing the packet comprises including the second node identifier in the packet. The operations further comprise sending the packet comprising the second node identifier to the second node.

Abstract: A network function virtualization (NFV) compute element installs an image supporting a virtualized network function (VNF) on the element. The image includes instructions/data to initiate a TCP connection between the element and a Software Defined Network (SDN) controller upon reboot of the element. Upon rebooting, the element establishes, as client in accordance with the instructions/data, a TCP connection with the controller. The element then accepts, as a cryptographic network protocol server, a connection via the TCP connection from the controller as a client in accordance with the instructions. Next, the element accepts, as a network management protocol server, a connection via the cryptographic network protocol connection from the controller as network management protocol client.

Abstract: A system performs a method including: generating a posture of a first microservice in a microservice based network environment; implementing the posture of the first microservice at a sidecar of the first microservice; distributing the posture of the first microservice to a sidecar of a second microservice in the microservice based network environment; implementing the posture of the first microservice at the sidecar of the second microservice; and controlling communication of personally identifiable information between the first microservice and the second microservice based on the posture of the first microservice through either or both the sidecar of the first microservice and the sidecar of the second microservice. The posture of the first microservice includes an identification of one or more types of personally identifiable information that the first microservice is authorized to distribute and one or more types of personally identifiable information that the first microservice is authorized to receive.

Abstract: Techniques are described herein for retrieving application status data from a service provider and making a path selection based on that application status data. In some embodiments, the techniques may comprise receiving a request to access an application hosted by a service provider, generating a first data that includes an application programming interface (API) call to the application that includes at least an identifier for a tenant, determining a set of potential paths between the edge device and the application hosted by the service provider, providing the first data to the application endpoint via at least one path of the set of potential paths, receiving second data including an application status generated from metrics obtained in relation to the tenant, and selecting, based on the second data, a path of the set of potential paths to be used by the tenant to access the application.

Abstract: Systems and methods are provided for providing differential treatment to user traffic involving optimized reporting of start and stop traffic. The systems and method can include detecting, at a user plane function, an initiation of a type of traffic being performed at the user plane function, providing, by the user plane function, a start event trigger of the type of traffic detected by the user plane function to a session management function, and receiving, at the user plane function, a policy associated with the type of traffic from the session management function, the policy including instructions preventing submissions of subsequent event triggers to the session management function until an end of the type of traffic, the subsequent event triggers being associated with the type of traffic detected by the user plane function.

Abstract: Systems, methods, and computer-readable media are provided for performing secure frame encryption as a service. For instance, a network edge device can determine at least a first path and a second path for routing a data packet. The network edge device can obtain a first plurality of values for at least one network metric, wherein the first plurality of values corresponds to the first path and at least a first backup path associated with the first path. The network edge device can obtain a second plurality of values for the at least one network metric, wherein the second plurality of values corresponds to the second path and at least a second backup path associated with the second path. The network edge device can select one of the first path or the second path for routing the data packet based on a comparison of the first plurality of values and the second plurality of values.

Abstract: A method for calibrating a magnetometer of a device is provided. The method includes collecting, with a portable calibration device having a magnetometer, magnetic field measurements in a spatial region about a mounting location where the device is to be installed for operation, estimating magnetometer compensation parameters to correct for magnetic field distortion at the mounting location based on the magnetic field measurements collected by the portable calibration device, and configuring the device installed at the mounting location based on the magnetometer compensation parameters.

Abstract: Techniques are described herein for implementing and using a network topology display system configured to display and support interaction with complex and/or multi-site datacenters. The topology display system may provide an interactive user interface, allowing users to navigate to different regions of the network node topology representing the datacenter, and displaying views representing the various sites, levels, and objects of the datacenter. While navigating the topology, a user may select a particular node in the network topology to be pinned, causing the user interface to display data representing the datacenter object corresponding to the selected node. As the user navigates the network topology, additional nodes may be selected to provide additional object data, which may be updated dynamically for a set of pinned nodes configured in different sites or regions of the topology.

Abstract: Systems, methods, and computer-readable storage media are provided for provisioning a common subnet across a number of subscribers and their respective virtual networks using dynamically generated network policies that provide isolation between the subscribers. The dynamic generation of the network policies is performed when a host (e.g. client) is detected (via a switch) as the host joins the computing network via virtual networks. This ability to configure a common subnet for all the subscriber virtual networks allows these subscribers to more easily access external shared services coming from a headquarter site while keeping the separation and segmentation of multiple subscriber virtual networks within a single subnet. This allows the Enterprise fabric to be more simple and convenient to deploy without making security compromises.

Abstract: Techniques are described for extending a cellular quality of service bearer through an enterprise fabric network. In one example, a method obtaining, by a first switch of a network, a packet to be delivered to a client connected to the network via a cellular access point; identifying quality of service (QoS) bearer information associated with the packet, wherein the QoS bearer information is associated with a radio access bearer for the client and the QoS bearer information comprises a bearer indicator and a QoS class identifier; providing a fabric tunnel encapsulation for the packet, wherein the bearer indicator and the QoS class identifier are included within the fabric tunnel encapsulation of the packet; and forwarding the packet within the fabric tunnel encapsulation toward a second switch of the network via a fabric tunnel, wherein the cellular access point is connected to the network via the second switch.