Abstract: In one embodiment, a device identifies one or more telemetry data variables for use to predict failure of a tunnel in a software-defined wide area network (SD-WAN). The device sends a Bidirectional Forwarding Detection (BFD)-based telemetry request towards a tail-end router of the tunnel that requests the one or more telemetry data variables. The device receives the requested one or more telemetry data variables. The device uses the received one or more telemetry data variables as input to a machine learning-based model, to predict a failure of the tunnel.

Abstract: In one embodiment, a device in a network obtains data indicative of a device classification rule, a device type label associated with the rule, and a set of positive and negative feature vectors used to create the rule. The device replaces similar feature vectors in the set of positive and negative feature vectors with a single feature vector, to form a reduced set of feature vectors. The device applies differential privacy to the reduced set of feature vectors. The device sends a digest to a cloud service. The digest comprises the device classification rule, the device type label, and the reduced set of feature vectors to which differential privacy was applied. The service uses the digest to train a machine learning-based device classifier.

Abstract: A VM receives a first ARP request from a first instance of a virtualized network function (VNF) associated with a first MAC address. The VM may determine the first MAC address and, based at least in part on the first MAC address, may a second MAC address with which to respond to the first ARP request. The VM may then send, to the first instance of the VNF, a response to the first ARP request specifying the second MAC address. The VM may also receive a second ARP request from a second instance of the VNF associated with a third MAC address. The VM may determine a fourth MAC address with which to respond to the second ARP request, and may thereafter send a response to the second ARP request to the second instance of the VNF, with the response specifying the fourth MAC address.

Abstract: The present disclosure is directed to systems and methods for transport resource allocation using a centralized control policy, the methods including the steps of receiving node characteristics associated with a plurality of nodes; receiving a centralized policy configuration associated with at least one control policy to be applied based on a set of match conditions; identifying a one or more nodes from the plurality of nodes that satisfy, or that are associated with one or more tunnels that satisfy, the set of match conditions; and applying the at least one control policy to the one or more nodes that satisfy, or to the one or more tunnels that satisfy, the set of match conditions, wherein the at least one control policy is configured to override at least one locally-configured bidirectional forwarding detection (BFD) timer; and/or set a maximum number of tunnels for provisioning at the identified one or more nodes.

Abstract: This disclosure describes techniques for a network interface controller (NIC) to communicate over a network according to a specified transmission communication protocol. The NIC receives, from a host processor, an indication of a data unit and an indication of a header template. The NIC generates, independent of the specified transmission communication protocol, metadata for transmitting a segment of the data unit over a network. The NIC generates, at last partly using the metadata, header fields that comply with the specified transmission communication protocol. The NIC processes the header template and the header fields to generate a packet header, and the NIC transmits, over the network, a packet including the packet header and the segment of the data unit.

Abstract: In one embodiment, a device constructs a set of controlled what-if input parameters for evaluating a what-if scenario in a network. The device uses the set of controlled what-if input parameters and state data indicative of a current state of the network as input to a network state model. The network state model predicts values for the state data conditioned on the what-if input parameters. The device predicts a key performance indicator (KPI) in the network by using the predicted values for the state data from the network state model as input to a machine learning-based KPI prediction model. The device initiates a routing change in the network based in part on the predicted KPI.

Abstract: In an embodiment, a computer-implemented method comprises receiving logical model input that specifies a logical topology model of networking elements and/or computing elements for deployment at least partially in a private cloud computing infrastructure and at least partially in a public cloud computing infrastructure; receiving resource input specifying an inventory of computing elements that are available at least partially in the private cloud computing infrastructure and at least partially in the public cloud computing infrastructure; automatically generating an intermediate topology comprising a set of deployment instructions that are capable of execution at least partially in the private cloud computing infrastructure and at least partially in the public cloud computing infrastructure to cause physical realization of a network deployment corresponding to the logical topology model; determining whether the intermediate topology is functionally equivalent to the logical topology model; in response to det

Abstract: Instead of processing a query as-is, the query is chunked or broken down into a sequence of smaller chunked queries and the chunked results of those smaller queries are streamed back to the requester. Chunking the query and streaming the chunked results can substantially decrease the user's time to value when running a query by returning some immediate results for display which are refined and eventually converge on the full results as each chunked query runs.

Abstract: In one embodiment, a device in a network receives domain name system (DNS) information for a domain. The DNS information includes one or more service tags indicative of one or more services offered by the domain. The device detects an encrypted traffic flow associated with the domain. The device identifies a service associated with the encrypted traffic flow based on the one or more service tags. The device prioritizes the encrypted traffic flow based on the identified service associated with the encrypted traffic flow.

Abstract: In one embodiment, a device in a network receives traffic records indicative of network traffic between different sets of host address pairs. The device identifies one or more address grouping constraints for the sets of host address pairs. The device determines address groups for the host addresses in the sets of host address pairs based on the one or more address grouping constraints. The device provides an indication of the address groups to an anomaly detector.

Abstract: Techniques and mechanisms for compressing the size of SIDs to be smaller than a complete IPv6 address (or “micro SIDs”), and scaling micro SIDs across a multi-domain environment using micro SID-domain-blocks. Segment routing over IPv6 (SRv6) uses 128-bit IPv6 addresses as SIDs for segment routing. According to this disclosure, multiple SRv6 SIDs may be expressed in a compact format such that a 128-bit IPv6 address, such as the destination address field of the IPv6 header, may store multiple micro SIDs. Further, SID-domain-blocks may be assigned to each domain in a multi-domain network such that micro SIDs may be expressed in the context of a given domain, rather than being shared in the global multi-domain network. In this way, lists of domain-specific SIDs may be fully expressed in the IPv6 destination address of the packet to scale micro SID into large, multi-domain networks.

Abstract: In one embodiment, a device of a tractor unit determines that the tractor unit is connected to a trailer via physical cabling. The device sends, via the physical cabling, a powerline communication (PLC) message to the trailer that includes a service set identifier (SSID) and password for a Wi-Fi transceiver of the tractor unit. The Wi-Fi transceiver of the tractor unit receives an association request sent wirelessly from a Wi-Fi transceiver of the trailer that is based on the sent SSID and password. The device establishes the Wi-Fi transceiver of trailer as a Wi-Fi client of the Wi-Fi transceiver of the tractor unit.

Abstract: Embodiments herein receive a request to reserve a fog computing resource for an end device, where the request includes a specified future time at which the fog computing resource will be used by the end device. It is determined that sufficient fog computing resources are available at the specified future time on a first fog node of a plurality of fog nodes. The fog computing resource of the first fog node is reserved for the specified future time, and an address corresponding to the first fog node is transmitted.

Abstract: In some embodiments, an electric vehicle sends a vehicle charging request to a supervisory service. The electric vehicle receives, from the supervisory service in response to the vehicle charging request, a location of a telecommunication node of a telecommunication network that is configured to provide charging to electric vehicles. The electric vehicle navigates to the received location of the telecommunication node. The vehicle initiates charging of the electric vehicle at the location of the telecommunication node.

Abstract: In one embodiment, a device in a network receives a query walker agent configured to query information from a distributed set of devices in the network based on a query. The device executes the query walker agent to identify the query. The device updates state information of the executing query walker agent using local information from the device and based on the query. The device unloads the executing query walker agent after updating the state information. The device propagates the query walker agent with the updated state information to one or more of the distributed set of devices in the network, when the updated state information does not fully answer the query.

Abstract: In one embodiment, a network comprises a first forwarding domain using a first data plane forwarding protocol and a second forwarding domain using a second data plane forwarding protocol different than the first data forwarding plane forwarding protocol. The first forwarding domain includes a first path node and a particular border node. The second forwarding domain includes a second path node and the particular border node. The particular border node performs Segment Routing or other protocol interworking between the different data plane forwarding domains, such as for transporting packets through a different forwarding domain or translating a packet to use a different data forwarding protocol. These forwarding domains typically include Segment Routing (SR) and SR-Multiprotocol Label Switching (SR-MPLS). Paths through the network are determined by a Path Computation Engine and/or based on route advertisements such associated with Binding Segment Identifiers (BSIDs) (e.g.

Abstract: In one embodiment, a device obtains certificate information for a plurality of network addresses. The device constructs, based on the certificate information, a bipartite graph that maps nodes representing common names from the certificate information to nodes representing autonomous systems. The device determines edge counts from the bipartite graph for the nodes representing the autonomous systems. The device identifies, based on the edge counts, a particular one of the common names as botnet-related by comparing edge counts for the autonomous systems associated with that particular common name to edge counts for the autonomous systems associated with one or more of the other common names.

Abstract: The present disclosure provides for laser integration into photonic platforms in which a first wafer, including a first substrate and a first insulator that includes a first plurality of dies that each include a first set of optical waveguides, is bonded to a second wafer, including a second substrate and a second insulator that includes a second plurality of dies that each include a second set of optical waveguides. The bond between the two wafers defines a wafer bond interface joining the first insulator with the second insulator and vertically aligning the first plurality of dies with the second plurality of dies such that respective first sets of optical waveguides are optically coupled with respective second sets of optical waveguides.

Abstract: Power supply efficiency may be provided. First, a total power supply capacity may be determined comprising a sum of a plurality of supply capacities respectively corresponding to a plurality of power supplies serving a plurality of components. Next, a load value corresponding to the plurality of components may be determined. A number of the plurality of power supplies may then be powered down. The number of power supplies powered down may comprise a value that may cause a remaining number of the plurality of power supplies serving the plurality of components to operate within an efficiency range.

Abstract: One embodiment of the present invention sets forth a technique for organizing meeting content. The technique includes generating, from a set of available meetings, a thread comprising a collection of related meetings that share one or more attributes. The technique also includes aggregating data for the related meetings, where the data comprises metadata for the related meetings and terms included in recordings of the related meetings. The technique further includes outputting at least a portion of the aggregated data within a summary of the thread.