Abstract: Disclosed is a method for continuous in-line monitoring of data-centric traffic to guarantee application performance. The method includes, in each switch of a plurality of switches in a network fabric, grouping all packets entering each respective switch of the plurality of switches based on either 5-tuple applications or EPG based applications, collecting performance statistics at every hop in the network fabric across all flows in-line in a flow table maintained in each respective switch and periodically exporting the performance statistics to analysis module.

Abstract: According to one or more embodiments of the disclosure, a networking device receives a policy for an endpoint in a network. The policy specifies one or more component tags and one or more activity tags that were assigned to the endpoint based on deep packet inspection of traffic associated with the endpoint. The networking device identifies a set of tags for a particular traffic flow in the network associated with the endpoint. The set of tags comprises one or more component tags or activity tags associated with the particular traffic flow. The networking device makes a determination that the particular traffic flow violates the policy based on the set of tags comprising a tag that is not in the policy. The networking device initiates, based on the determination that the particular traffic flow violates the policy, a corrective measure with respect to the particular traffic flow.

Abstract: Techniques for using an end-to-end policy controller to utilize an inventory of enforcement points to generate a chain of enforcement points having capabilities to enforcement individual operations of an intent-based security policy associated with an entity accessing a resource. A network controller may intelligently split an intent-based security policy and send portions thereof to enforcement points along a path configured for an entity to access a resource. For example, a portion of a security policy corresponding to an operation may be mapped to and implemented by an enforcement point having a capability to perform the operation. Once each operation of a security policy has been mapped to an enforcement point, a chain of enforcement points may be generated.

Abstract: The present disclosure is directed to a comprehensive Route Selection Policy (URSP) based on Wi-Fi multi-link operation. In one aspect, a method includes identifying a user device connected to an enterprise network that provides network connectivity to user devices over multiple radio access technologies; receiving network capability information indicating that the user device is capable of a multi-link operation over a Wi-Fi network, the Wi-Fi network being one of the multiple radio access technologies; determining a URSP for the user device, wherein the URSP is a singular route selection policy for the user device to send and receive data over the multiple radio access technologies and defines, in part, a per-application traffic routing rule for routing a portion of traffic for an application used on the user device, over one of multiple links available on the Wi-Fi network; and transmitting the URSP to the user device.

Abstract: The present technology pertains to receiving a tag associating at least one routing domain in an on-premises site with at least one virtual network in a cloud environment associated with a cloud service provider. The present technology also pertains to the automation of populating route and propagation tables with the cloud service provider.

Abstract: A system and a method to delegate out-of-band (OOB) management of a shared ultra-wideband (UWB) clock. The system may comprise a tagged device with a UWB tag and multiple anchors. The tagged device may be configured to establish at least one OOB communication link with at least one anchor, transmit UWB compatibility information to multiple anchors, establish a UWB communication links with the anchors, and exchange OOB synchronization parameters and UWB synchronization parameters with the anchors. Further, the tagged device may be configured to define new instructions for ranging round operations based at least in part upon the OOB synchronization parameters and the UWB synchronization parameters, update existing instructions with the new instructions in the ranging round operations, and perform the ranging round in accordance with the updated instructions.

Abstract: This disclosure describes techniques for adaptive disaster recovery of applications running on network devices. The techniques include generating an application template and an application template clone that include application attributes usable to deploy an application stack at an application site. The techniques also include sending the application template clone to a disaster recovery site group to await deployment instructions. In some examples, an observer may determine that a health metric of the application site indicates that a disaster recovery process be triggered. A disaster recovery site of the disaster recovery site group may be selected based at least in part on a performance metric. The application stack may be deployed at the disaster recovery site utilizing the application template clone.

Abstract: Disclosed herein are systems, methods, and computer-readable media for reporting QoE of a UE, as measured and determined from the perspective of the UE to one or more core components of the cellular network to which the UE is attached. The QoE may then be used by the one or more core components for managing and adjusting, if necessary, the cellular services provided to the UE. In one aspect, a method includes determining, at a user device, a quality of experience (QoE) of user device connected to a cellular network and transmitting, via a non-access stratum (NAS) signaling, a value of the QoE from the user device to a core network element of the cellular network, wherein the core network element utilizes the QoE value to manage network access and a quality of service (QoS) of the user device.

Abstract: Techniques are described to enable selective content sharing in a video conference. In one example, a conferencing system obtains first display content from a first endpoint device in a video conference session. The conferencing system streams the first display content to a second endpoint device in the video conference session and obtains second display content from the second endpoint device. While streaming the first display content to the second endpoint device, the conferencing system streams the second display content to a third endpoint device in the video conference session and prevents streaming of the second display content to the first endpoint device.

Abstract: In one embodiment, an apparatus comprises a transmitter for communicating with a client, a receiver, and a controller coupled with the transmitter and receiver, wherein the controller is operable to receive a proxy from the client for traffic from a source and transmit a join to the source on behalf of the client.

Abstract: The present disclosure is directed to systems and techniques for improved signaling of subscriber information and updates thereto for one or more location-based user plane services. In one examples, the systems and techniques can include determining the existence of a converged User Plane Function (UPF) comprising a Serving Gateway User Plane (SGW-U) session and a Packet Data Network (PDN) Gateway User Plane (PGW-U) session. In response to determining the existence of the converged UPF, User Equipment (UE) information can be transmitted from a Serving Gateway Control Plane (SGW-C) session to the SGW-U session of the converged UPF. The UE information received at the SGW-U session can be shared to the PGW-U session of the converged UPF, wherein the PGW-U session receives the UE information without communicating with a PDN Gateway Control Plane (PGW-C) session.

Abstract: In one embodiment, an example process herein may comprise: monitoring real-time user traffic activity; determining a set of one or more current servers corresponding to the real-time user traffic activity; associating the real-time user traffic activity to one or more user processes; mapping the one or more user processes to a particular application; and configuring one or more tests directed to the set of one or more current servers for the particular application.

Abstract: In accordance with one embodiment, a source leaf device receives a packet. The source leaf device identifies a flowlet associated with the packet and a destination leaf device to which the packet is to be transmitted. The source leaf device may determine whether the flowlet is a new flowlet. The source leaf device may select an uplink of the source leaf device via which to transmit the flowlet to the destination leaf device according to whether the flowlet is a new flowlet. The source leaf device may then transmit the packet to the destination leaf device via the uplink.

Abstract: Systems, methods, and computer-readable media are provided for securely advertising autoconfigured prefixes in a cloud environment. In some examples, a method can include, receiving, by a first router, an indication of an available network address prefix. In some aspects, the method can also include selecting, by the first router, a first network address prefix that is within the available network address prefix, wherein the first network address prefix provides at least one route to one or more network elements associated with the first router. In some cases, the method may further include sending, to a second router, a message including a stub registration option that indicates the first network address prefix.

Abstract: Techniques and architecture are described for initializing, reviewing/approving, and deploying changes within a network. Each change is associated with a particular change ticket. When a change needs to be rolled back, the original change ticket may be analyzed to determine what actions need to be performed to roll back the change. A plan of the needed actions may then be presented to a reviewer in a rollback ticket. The original change ticket may be cancelled and a new ticket, e.g., the rollback ticket, may be prepared that includes the plan for the rollback, e.g., the one or more actions needed to roll back the initial change. In configurations, a change ticket may include multiple changes and thus, for rollback, either all the changes associated with the change ticket may be rolled back or only the last change or action that was initially made may be rolled back.

Abstract: Disclosed are methods, systems, and non-transitory computer-readable media for utilizes a collaboration application to provide data beneficial to the authentication of the user. The present application discloses receiving at least one item of personal identifying information for a user from a primary multi-factor authentication device. The present application further discloses receiving at least one item of personal identifying information for a user from a conferencing service in which the user is engaged in a conference. The present application also discloses determining whether to authenticate the user based on the items of personal identifying information from the primary multi-factor authentication device and from the conferencing service.

Abstract: A network element receives a classical header for a quantum payload, and processes the classical header to determine a destination endpoint for the quantum payload. The network element generates a new classical header for the quantum payload based on the destination endpoint. The network element sends the new classical header to a next hop ahead of the quantum payload at a time based on a number of hops between the network element and the destination endpoint.

Abstract: A method of managing data streaming processes may include at a processing device, computing hypertext transmission protocol version 3 (HTTP/3) header of a first message received at a first network interface controller (NIC) into a first control message and a second control message, and transmitting the first control message to the first NIC associated with the processing device. The method may further include transmitting the second control message to a second NIC associated with the processing device, and with the first control message and the second control message, transmitting data directly between the first NIC and the second NIC.

Abstract: Systems and methods are provided for providing transference of a user equipment to a 5G network when a voice call is terminated. The systems and method can include receiving, at a mobility management entity, a voice call termination message from a serving gateway, determining, by the mobility management entity, whether the user equipment includes a 5G subscription and 5G capability based on the voice call termination message, and providing, by the mobility management entity, a handover message to the user equipment to initiate a handover to the 5G network based on the determining of whether the user equipment includes the 5G subscription and 5G capability.

Abstract: Systems, methods, and computer-readable media are provided for inter-network messaging among private and public 5G networks. For instance, a first server on a public 5G mobile network can receive a first message directed to a first wireless device associated with a first network identity. The first server can determine, based on the first network identity, that the first wireless device is associated with a second network identity, wherein the second network identity is used to identify the first wireless device on a private 5G mobile network. The first server can send a copy of the first message to a second server on the private 5G mobile network for transmission to the first wireless device through the private 5G mobile network based on the second network identity.