Abstract: In one embodiment, a device identifies a new traffic flow in a network. The device determines a service level agreement (SLA) associated with the new traffic flow. The device uses a machine learning model to predict whether a particular tunnel in the network can satisfy the determined SLA of the traffic were the traffic flow routed onto the tunnel. The device performs call admission control to route the new traffic flow onto the particular tunnel, based on a prediction that the tunnel can satisfy the determined SLA of the traffic.

Abstract: In one embodiment, a system, apparatus and method is described, the system including a local controller by executed by a processor of an Internet of Things (IoT) device, the local controller being operative to perform, at least one of a push or a pull operation with at least one other IoT device, to request extended control functionality from a central controller, to receive extended control functionality from the central controller, to exercise said extended control functionality over the least one other IoT device, to receive an instruction from the central controller retracting control functionality and, in response to receiving said instruction, to retract said control functionality, and to receive a command to delete itself from the IoT device. Related systems, apparatus, and hardware are also described.

Abstract: Various systems and methods for performing fast fail-over. One method involves electing a first node as a designated forwarder node and electing a second node as a backup designated forwarder node. Prior to detecting a loss of connectivity between the designated forwarder node and the local network, the method elects both the designated forwarder node and the backup designated forwarder node, and the designated forwarder node forwards to a core network at least a first packet received from a local network. Subsequent to detecting a loss of connectivity, using the backup designated forwarder node to forward an instance of a second packet to the core network. In one embodiment, the backup designated forwarder node forwards an instance of the second packet, via a tunnel, to the designated forwarder node, which then forwards the instance of the second packet to the core network following the loss of connectivity.

Abstract: Techniques for in-situ passive performance measurement are described. In one embodiment, a method includes receiving a data packet at a first network element, determining whether measurement information is to be collected for the data packet, providing one or more measurement fields for the data packet based on a determination that measurement information is to be collected for the data packet in which at least one measurement field identifies a measurement type, and forwarding the data packet to a second network element. The method further includes determining, by the second network element, the measurement type for the data packet, and performing one or more actions based on the measurement type.

Abstract: In one embodiment, a device in a network determines that a plurality of packets should be aggregated, each of the plurality of packets comprising a payload. The device generates, for each of the payloads, a sub-media access control (sub-MAC) header that comprises a sequence number and a frame check sequence (FCS). The device forms an aggregated packet that comprises a physical layer (PHY) header, a MAC header, the payloads, and the generated sub-MAC headers for the payloads. The device sends the aggregated packet to another device in the network.

Abstract: A first map request message is sent from a source network device to a mapping network device to determine a destination network device associated with a destination endpoint device and a security association between the source network device and the destination network device. A first response message is received at the source network device that includes data indicating a mapping between the destination network device and the destination endpoint device and data indicating a security association between the source network device and the destination network device. The data is stored at the source network device. A second map request message is sent from the source network device to the mapping network device to update the data indicative of the mapping or the security association. A second response message is received at the source network device from the mapping network device.

Abstract: A photonic device can include an optical detector (e.g., a photodetector) coupled to silicon waveguides. Unlike silicon, germanium is an efficient detector at the wavelength of optical signals typically used for data communication. Instead of directly coupling the waveguide to the germanium, in one embodiment, the waveguide extends below the germanium but is spaced sufficiently away from the germanium so that the optical signal is not transferred. Instead, an optical transfer structure (e.g., a tapered waveguide or an optical grating) is disposed between the germanium and the waveguide. The waveguide first transfers the optical signal into the optical transfer structure which then transfers the optical signal into the germanium.

Abstract: In one embodiment, a security device in a computer network determines a plurality of values for a plurality of features from samples of known malware, and computes one or more significant values out of the plurality of values, where each of the one or more significant values occurs across greater than a significance threshold of the samples. The security device may then determine feature values for samples of unlabeled traffic, and declares one or more particular samples of unlabeled traffic as synthetic malicious flow samples in response to all feature values for each synthetic malicious flow sample matching a respective one of the significant values for each corresponding respective feature. The security device may then use the samples of known malware and the synthetic malicious flow samples for model-based malware detection.

Abstract: Systems, methods, and computer program products relating to resilient transmission of a media stream over a communication network. A plurality of data packets are received over a communications network. The plurality of data packets relate to a first source video portion transformed using a geometric transform. The geometric transform is configured to modify a location of pixels in the first source video portion such that a plurality of adjacent pixels in the first source video portion are not adjacent after transformation. A received video portion is assembled based on the plurality of data packets. The received video portion is transformed, using an inverse of the geometric transform, to generate a second source video portion. The second source video portion and the first source video portion include a plurality of matching pixels.

Abstract: The present disclosure is directed to a multi-level resource reservation system that obviates one or more of the problems due to limitations and disadvantages of the related art. The multi-level resource reservation system creates, or modifies existing, peer-to-peer protocol(s) to complete a continuous chain of configured ports to support QoS feature(s), e.g., bound latency and guaranteed jitter, for a data flow that traverses an arbitrary sequence of bridges, routers, and virtual links.

Abstract: In various embodiments, a device classification service obtains traffic telemetry data for a plurality of devices in a network. The service applies clustering to the traffic telemetry data, to form device clusters. The service generates a device classification rule based on a particular one of the device clusters. The service receives feedback from a user interface regarding the device classification rule. The service adjusts the device classification rule based on the received feedback.

Abstract: In one embodiment, a video conference endpoint may detect a one or more participants within a field of view of a camera of the video conference endpoint. The video conference endpoint may determine one or more alternative framings of an output of the camera of the video conference endpoint based on the detected one or more participants. The video conference endpoint may send the output of the camera of the video conference endpoint to one or more far-end video conference endpoints participating in a video conference with the video conference endpoint. The video conference endpoint may send data descriptive of the one or more alternative framings of the output of the camera to the far-end video conference endpoints. The far-end video conference endpoints may utilize the data to display one of the one or more alternative framings.

Abstract: In one embodiment, a server generates expected levels of capability associated with possible combinations of settings for first and second adjustable parameters for an aspect of a software image feature. The server receives an indication of a desired level of capability for the aspect of the software image feature and, based on the indication, identifies a particular expected level of capability associated with a particular possible combination of the settings for the first and second adjustable parameters. The particular expected level of capability is closer to a desired level of capability for an aspect of a software image feature than the other expected levels of capability associated with the possible combinations of the settings for the first and second adjustable parameters. The server produces a software image that includes the particular possible combination of the settings for the first and second adjustable parameters.

Abstract: Techniques for filesystem durable write operations to cloud object storage are described. In one embodiment, a method includes receiving at least one of a read operation or a write operation from a filesystem layer. The read operation identifies content stored in a distributed content object storage layer that is to be retrieved and the write operation identifies content that is to be stored to the distributed content object storage layer. The method includes converting the read operation into a get operation or the write operation into a put operation. The method further includes storing an index that maps the read or write operation to the get or put operation and includes an association between the content identified by the filesystem layer to objects in the distributed content object storage layer. The method includes sending the get or put operation to the distributed content object storage layer for the identified content.

Abstract: A method for providing services by a pair of servers to clients through one or more relay agents. The pair includes a second server configured to respond to discovery messages, and a first server configured to be unresponsive to the discovery messages. The method includes: at the first server, receiving a first discovery message from a first relay agent at a first time; and configuring the first server to become responsive to the first discovery message when a number of discovery messages from the first relay agent is equal to or greater than a predetermined number threshold and when a time lapse between the first time and a second time is equal to or greater than a predetermined time threshold. The count and time period are reset if the second server is determined to be responsive to discovery messages by monitoring the client request messages.

Abstract: In one embodiment, a device receives observed access point (AP) features of one or more APs in a monitored network. The device clusters the observed AP features within a latent space to form AP feature clusters. The device applies labels to the AP feature clusters within the latent space. The device uses the applied labels to the AP feature clusters to describe future behaviors of the one or more APs in the monitored network.

Abstract: Techniques that provide enterprise slice management are described herein. In one embodiment, a method includes providing an enterprise service template to an enterprise, the enterprise service template comprising parameter input fields for indicating enterprise devices associated with the enterprise, services to be provided to the enterprise devices using a mobile network, and service options associated with the services; determining one or more mobile network services to be provided to a plurality of enterprise devices and one or more service options associated with the one or more mobile network services; identifying, based on the one or more mobile network services, an enterprise slice to provide the one or more mobile network services; and provisioning the enterprise slice based on the one or more mobile network services, the plurality of enterprise devices, and the one or more service options associated with the one or more mobile network services.

Abstract: Dynamic roaming partner prioritization based on service quality feedback may be provided. First, a server associated with an enterprise may receive performance data and location data for each of a plurality of service provider networks from a plurality of end use devices associated with the enterprise. Next, the server may assign a ranking to a plurality of service providers by location based upon information. The information may comprise the received performance data and the location data corresponding to each of the plurality of service provider networks. The server may then push the ranking to a first end use device.

Abstract: Presented herein are techniques for updating detailed maps used to navigate an autonomous vehicle. The techniques include determining that a vehicle has come within a predetermined range of a road side unit, establishing a communication link with the vehicle, receiving, from the vehicle, data sufficient to identify a vehicle type of the vehicle, based on the vehicle type, selecting a map, stored by the road side unit, for the vehicle, sending a query to a neighbor road side unit seeking data to augment the map, in response to the query, receiving the data to augment the map from the neighbor road side unit, updating the map based on the data to augment the map to obtain an updated map, and sending at least a aspects of the updated map to the vehicle.

Abstract: Various implementations disclosed herein enable identifying anomalies in a network. For example, in various implementations, a method of identifying anomalies in a network is performed by a network node. In various implementations, the network node includes one or more processors, and a non-transitory memory. In various implementations, the method includes generating a characteristic indicator that characterizes a device type based on communications associated with a first device of the device type. In various implementations, the method includes determining, based on communications associated with the first device, a performance indicator that indicates a performance of the first device. In various implementations, the method includes synthesizing an anomaly indicator as a function of the performance indicator in relation to the characteristic indicator.