Abstract: One embodiment provides a forwarding device, comprising a plurality of components, including one or more line cards and a supervisor card. An ingress line card receives a content object with a name. In response to determining a distributed storage technique, a selected line card stores the content object in a location which is a cache of the selected line card. The selected line card creates a first entry in a table of the selected line card, wherein the first entry indicates the content object name and the location in which the content object is stored. The selected line card transmits a first notification message to other components, wherein the first notification message indicates the content object name and the location indicated in the first entry. A respective other component creates a second entry in a table for the respective other component, wherein the second entry matches the first entry.

Abstract: In one embodiment, a system includes: a download server instantiated on a computing device, and a multiplicity of wireless access points (APs), where the download server is operative to: receive a download request from a mobile device, determine a current location for the mobile device, predict a route for the mobile device based at least on the current location, allocate at least one target AP along the route from among the multiplicity of wireless APs, and in response to the download request, forward at least one download file to the at least one target AP, where the at least one target AP is operative to: receive the at least one download file, identify the mobile device, and download at least part of the download file to the mobile device in an mmWave transmission.

Abstract: In one embodiment, a device in a first network receives traffic flow information regarding a plurality of traffic flows in the first network. The device labels the traffic flow information by associating classifier labels to the traffic flow information. The device receives a generic traffic classifier that was trained using a training data set that comprises labeled traffic flow information for a plurality of other networks and excludes the traffic flow information regarding the plurality of traffic flows in the first network. The device acclimates the generic traffic classifier to the first network using the labeled traffic flow information regarding the plurality of traffic flows in the first network.

Abstract: In one embodiment, a network assurance service that monitors a network maps time series of values of key performance indicator (KPIs) measured from the network to lists of unique values from the time series. The service sets a target alarm rate for anomaly detection alarms raised by the network assurance service. The service uses an optimization function to identify a set of thresholds for the KPIs. The optimization function is based on: a comparison between the target alarm rate and a fraction of network issues flagged by the service as outliers, KPI thresholds selected based on the lists of unique values from the time series, and a number of thresholds that the KPIs must cross for the service to raise an alarm. The service raises an anomaly detection alarm for the monitored network based on the identified set of thresholds for the KPIs.

Abstract: Aspects of the embodiments are directed to forming a virtual machine management (VMM) domain in a heterogeneous datacenter. Aspects can include mapping an endpoint group to multiple VMM domains, each VMM domain associated with one or more virtual machine management systems of a single type that each share one or more management system characteristics; instantiating a virtual switch instance, the virtual switch instance associated with a the VMM domain; and instantiating the endpoint group mapped to the VMM domain as a network component associated with the virtual switch instance.

Abstract: In one embodiment, a wireless access point comprises a housing that defines a plurality of externally-facing apertures. The access point also comprises a radio module that is removably coupled to one of the externally-facing apertures of the housing and includes one or more antennas. The access point further comprises a motherboard module that is removably coupled to one of the externally-facing apertures of the housing and includes a motherboard that controls the one or more antennas of the radio module. The access point yet further comprises a power supply module that is removably coupled to one of the externally-facing apertures of the housing and supplies power to the motherboard and radio modules.

Abstract: Techniques are provided for determining end-to-end path delay measurements. In one embodiment, a method includes identifying equal-cost multi-path (ECMP) sections comprising at least two different ECMP paths in a network comprising a plurality of nodes. In response to receiving a request to determine a delay measurement for end-to-end paths from an ingress node to an egress node through the network, the method includes determining sets of ECMP sections that are between the ingress node and the egress node and determining a plurality of paths through each set of ECMP sections. The method includes measuring delay for each of the plurality of paths using probe packets and determining delay measurements for all end-to-end paths. The delay measurements for end-to-end paths include a first subset including measured delays from the probe packets and a second subset calculated using combinations of measured delays.

Abstract: An indication of a combination of a Shared Risk Link Group identifier and a node identifier for each of a plurality of links through at least one network and between a source network device and a destination network device is received at a network device. A primary path through the at least one network between the source network device and the destination network device is determined at the network device. The primary path comprises a first subset of the plurality of links through the at least one network. A back-up path through the at least one network between the source network device and the destination network device is determined at the network device. The back-up path comprises a second subset of the plurality of links through the at least one network.

Abstract: Techniques and mechanisms for a soft migration from an initial or source Spectrum Access System (SAS) of a source SAS provider to a destination SAS of a destination SAS provider for a base station operative to serve as a Citizens Broadband Radio Service Device (CBSD) in a Citizens Broadband Radio Service (CBRS) network are described. While the base station operates to facilitate communications for one or more user equipments (UEs) and is registered with the source SAS for spectrum access, the base station may communicate in one or more message exchanges for registering with the destination SAS and for receiving from the destination SAS a grant for spectrum access to spectrum according to a plurality of operating parameters. After communicating in a message exchange with the destination SAS in a heartbeat procedure for receiving an authorization to use the granted spectrum, the base station may deregister with the source SAS.

Abstract: In one embodiment, segment routing (SR) network processing of packets is performed on packets having a segment identifier structure providing processing and/or memory efficiencies. Responsive to an identified particular segment routing policy, the particular router retrieves from memory a dynamic segment routing identifier portion of the particular SR policy that includes a SR node value and a SR function value. The SR function value identifies segment routing processing to be performed by a router in the network identified based on the SR node value. A segment routing discriminator is independently identified, possibly being a fixed value for all segment identifiers in the network. Before sending into the network, a complete segment identifier is added to the particular packet by combining the segment routing discriminator with the dynamic segment routing identifier portion. The particular packet including the complete segment identifier is sent into the network.

Abstract: A method and system for packet tracing is described. In one embodiment, a method includes selecting a packet for tracing through a cluster of a plurality of nodes. The method includes preparing the packet for tracing by generating a cluster-wide unique ID, associating the unique ID with the packet, generating a running counter, and associating the counter with the packet. The method includes generating a first record buffer on a first node of the plurality of nodes and recording the unique ID and an initial value of the counter. The method includes recording a description of an operation performed on the packet in the first record buffer along with a value of the counter. The method also includes transferring the packet to a second node, along with the unique ID, the value of the running counter, and an attribute that indicates that the packet is to be traced.

Abstract: Methods are provided which indicate availability of the same service on a different access network. In these methods, the network controller generates an identifier for each of one or more services provided by a wireless local access network (WLAN). The identifier is associated with a particular service which is also provided by a private radio network. The network controller provides to an access point the identifier to be broadcast to one or more user devices of the WLAN to connect to the particular service via the private radio network. A mobility management entity receives a request from a user device to connect to the private network, where the request includes an identifier associated with a particular service provided to the user device in the WLAN and based on the identifier, the mobility management entity enables the particular service to be provided to the user device via the private radio network.

Abstract: A policy server correlates information from several messages associated with a client device to implement an identity-based network access policy. A network element connected to the client device obtains an authentication message including a first network address from the client device. The network element provides the authentication device to an identity server via a Network Address Translation (NAT) device, which translates the first network address to a second network address. The network element also provides a first message including the first network address to the policy server to request an identity-based policy for network communications of the client device. The network element implements the identity-based policy authorized by the policy server.

Abstract: In one embodiment, a direct memory access (DMA) controller within a host device obtains a packet to be processed by the host device, where the host device comprises a host processor, a network interface controller (NIC), and a co-processor of the NIC, and where the co-processor is configured to perform one or more specific packet processing operations. The DMA controller may then detect a DMA descriptor of the packet, and can determine, according to the DMA descriptor, how the packet is to be moved for processing within the host device. As such, the DMA controller may then move the packet, based on the determining, to one of either a host main memory, a NIC memory, or a co-processor memory of the host device.

Abstract: This disclosure pertains to augmenting metadata of a packet destined for service function chaining with application identifier information. The application identifier information can be added to the metadata of a packet service header (or, more specifically, a network service header). The packet can be exported to a statistics collector that can correlate statistical information about the application with statistical information about service functions applied to the packet, as well as other statistical information.

Abstract: In one embodiment, a technique for dynamic transmission power in wireless mesh networks using supervised and semi-supervised learning is provided. A first device of a mesh communication network may receive a set of transmission power metrics indicative of network conditions between a second device of the mesh communication network and a plurality of child nodes associated with the second device. The first device may provide the set of transmission power metrics as input to a supervised machine learning process that probabilistically determines one or more minimum transmission power thresholds for nodes of the mesh communication network. The first device may obtain an output from the supervised machine learning process comprising an indication of a particular minimum transmission power threshold for the second device. The first device may control the second device to exchange packets with the plurality of child nodes using the particular minimum transmission power threshold.

Abstract: Techniques for assigning APs to wireless network controllers are described. One or more RF constellations for a plurality of APs in a wireless network are generated. The RF constellations are organized based on estimated RF distances among the plurality of APs. The plurality of APs are clustered into a plurality of groups of one or more APs, based on the RF constellations and the estimated RF distances. Each group, of the plurality of groups, is assigned to a wireless network controller.

Abstract: In one embodiment, a network assurance service that monitors a wireless network identifies a set of wireless network anomalies detected in the wireless network that are associated with a set of one or more network measurements. The network assurance service classifies the set of wireless anomalies as radio-related or backend-related. The network assurance service, when the set of wireless anomalies are classified as radio-related, determines that the wireless anomalies are recurring for a particular wireless access point in the network. The network assurance service initiates a change to the wireless network in part to move clients in the wireless network from the particular wireless access point to another wireless access point in the network.

Abstract: In one embodiment, a vehicle having a plurality of network interfaces communicates with a first communication network via a first one of the network interfaces. The vehicle receives performance data regarding the first communication network and one or more other communication network, wherein the received performance data is associated with a particular location. The vehicle determines in advance of arriving at the particular location that the vehicle should switch from communicating with the first communication network to communicating with a selected one of the one or more other communication network, based on the received performance data. At the particular location, the vehicle switches from communicating with the first communication network via the first network interface to communicating with the selected communication network via a second one of the plurality of network interfaces.

Abstract: In one embodiment, a device trains a machine learning-based malware classifier using a first randomly selected subset of samples from a training dataset. The classifier comprises a random decision forest. The device identifies, using at least a portion of the training dataset as input to the malware classifier, a set of misclassified samples from the training dataset that the malware classifier misclassifies. The device retrains the malware classifier using a second randomly selected subset of samples from the training dataset and the identified set of misclassified samples. The device adjusts prediction labels of individual leaves of the random decision forest of the retrained malware classifier based in part on decision changes in the forest that result from assessing the entire training dataset with the classifier. The device sends the malware classifier with the adjusted prediction labels for deployment into a network.