Abstract: In one embodiment, a cloud-based service instructs one or more networking devices in a local area network (LAN) to form a virtual network overlay in the LAN that redirects traffic associated with a particular node in the LAN to the service. The service receives multicast or broadcast traffic sent by the particular node in the LAN and redirected to the service via the virtual network overlay. The service identifies a group of nodes in the network that are to receive the traffic sent by the particular node, based in part by profiling the traffic associated with the particular node. The service sends the traffic sent by the particular node to at least one networking device in the LAN with an indication of the identified group of nodes in the network that are to receive the traffic sent by the particular node. The at least one networking device forwards the traffic sent by the particular node to the nodes in the identified group.

Abstract: In one embodiment, a gateway device receives, from a centralized broker device, a data-access policy for a given computer network, the data-access policy defining which of one or more accessing entities are granted access to specific elements of data within the given computer network. When the gateway device then receives, from a particular accessing entity, a request for one or more particular elements of data from within the given computer network, it may determine, based on the data-access policy, whether the particular accessing entity has been granted access to each of the one or more particular elements of data of the request. As such, the gateway device may prevent access for the particular accessing entity to any of the one or more particular elements of the data request to which the particular accessing entity has not been granted access.

Abstract: In one embodiment, a router receives a packet from a network device in a software defined architecture (SDA) network, and obtains iOAM data from an outer header of the packet, the iOAM data inserted into the outer header by one or more network devices that previously processed the packet. The router then copies the iOAM data into a locally pertinent header, and after determining local iOAM data of the router, appends the local iOAM data to the iOAM data copied into the locally pertinent header. The router may then process the packet accordingly. In another embodiment, an SDA router may insert an indication of one or more applied policies into an iOAM header of the packet, such that an edge router can determine any unapplied policies and subsequently apply them.

Abstract: In one embodiment, a device in a network receives certificate data for an encrypted traffic flow associated with a client node in the network. The device determines one or more data features from the certificate data. The device determines one or more flow characteristics of the encrypted traffic flow. The device performs a classification of an application executed by the client node and associated with the encrypted traffic flow by using a machine learning-based classifier to assess the one or more data features from the certificate data and the one or more flow characteristics of the traffic flow. The device causes performance of a network action based on a result of the classification of the application.

Abstract: In one embodiment, a device in a network receives sensor data from one or more nodes in the network. The device selects a processing mode from among a plurality of processing modes based on a plurality of attributes of the sensor data. The plurality of processing modes comprises a fast data path mode and a slow data path mode. The device encrypts the sensor data using a first encryption mechanism that controls access to the plurality of attributes of the sensor data. The device sends the encrypted sensor data to a cloud-based intermediary based on the selected processing mode for sharing with one or more other devices in one or more other networks.

Abstract: A microphone array includes one or more front-facing microphones disposed on a front surface of the collaboration endpoint and a plurality of secondary microphones disposed on a second surface of the collaboration endpoint. The sound signals received at each of the one or more front-facing microphones and the plurality of secondary microphones are converted into microphone signals. When the sound signals have a frequency below a threshold frequency, an output signal is generated from microphone signals generated by the one or more front-facing microphones and the plurality of secondary microphones. When the sound signals have a frequency at or above a threshold frequency, an output signal is generated from microphone signals generated by only the one or more front-facing microphones.

Abstract: Techniques to adaptively support/enable a wireless network feature for certain wireless client devices without hampering the performance or connectivity of wireless client devices which do not support that wireless network feature. An access point or wireless network controller adaptively enables a wireless network feature without advertising support for the wireless network feature in a wireless network-standard compliant manner to allow one or more wireless clients that support the wireless network feature to use the wireless network feature when associated to the access point while enabling association of one or more wireless clients that do not support the wireless network feature.

Abstract: A network controller controls optical nodes configured to communicate with each other at multiple line rates using different tuples of [bits/symbol, symbol rate] for each line rate. The network controller determines multiple paths between two optical nodes, selects a desired line rate at which to communicate between the two optical nodes, and accesses a path database that indicates an available optical bandwidth and an available optical signal-to-noise ratio (SNR) along each path. The network controller determines feasible paths among the paths. To do this, the network controller, for each path, searches the different tuples of the desired line rate for a tuple for which a desired optical bandwidth and a desired optical SNR are accommodated by the available optical bandwidth and the available optical SNR of the path, respectively. The network controller programs optical nodes of one of the feasible paths with a tuple found in the searching.

Abstract: Exemplified systems and methods facilitate multicasting latency shaping operations for router, switches, and other network devices, to control distribution latency and/or selective prioritized distribution of latency among multicast destinations using a tag that specifies a traversal sequence of a Multicast Expansion Table (MET). The exemplified systems and methods facilitates the management of traffic that is particularly beneficial in a data center.

Abstract: In one embodiment, asynchronous broadcast communication is performed based on time-based events in channel-hopping networks. The embodiments include determining a plurality of channels in a channel-hopping network, on which a plurality of nodes communicate, and identifying an asynchronous broadcast message to transmit from a particular node. A plurality of time-based events is determined, and in response to each time-based event, the asynchronous broadcast message is transmitted on a single selected channel of the plurality of channels per time-based event.

Abstract: Described in an example embodiment is an end-to-end admission control system that allows any rich media application to secure admission control in an environment where there are mixed wireless and wired segments in the network. In particular embodiments, the system includes the integration of Add Traffic Stream (ADDTS) and Resource Reservation Protocol (RSVP) admission control mechanisms, the mapping of parameters between these two mechanisms, the admission control policies, and failure handling for the end-to-end resource control.

Abstract: In one embodiment, a server creates a reproduction environment of a particular condition of a particular device, the reproduction environment having a device under test (DUT) representative of the particular device, and also being seeded with features regarding the particular condition. The server generates a plurality of models for reaching a target state of the particular condition, each of the plurality of models having differing actions. According to the techniques herein, the server then iteratively refines a minimal model based on the actions of the plurality of models and whether those actions during testing of the DUT get closer to or further from the target state. In response to determining that the minimal model can no longer be further refined during the iterative refining, the server then stores the minimal model as a solution model indicating a given minimal set and order of actions required to reach the target state.

Abstract: A handshake procedure to establish a first connection between a client and a server is monitored at an intermediate network device. A request message sent to the server from the client is received at the intermediate network device. The request message includes parameters defining a manner of receiving information from the server. The parameters defining the manner of receiving information from the server are modified to produce modified parameters. A redirect message is sent from the intermediate network device to the client to induce or cause the client to establish a second connection with the server based upon the modified parameters, wherein the redirect message contains the modified parameters.

Abstract: Improvements in extinguishing optical signals in silicon photonics may be achieved by supplying a test signal of a known characteristics to a Photonic Element (PE) to extinguish the test signal via a first phase shifter and intensity modulator on a first arm of the PE and a second phase shifter and intensity modulator on a second arm of the PE; sweeping through a plurality of voltages at the first intensity modulator to identify a first voltage that is associated with an extinction ratio at an output of the PE that satisfies an induced loss threshold and a second voltage that is associated with an induced loss in the test signal at the output of the PE that satisfies an extinction ratio threshold; and setting the PE to provide an operational voltage to the first intensity modulator based on the first voltage and the second voltage.

Abstract: Echo cancellation to alleviate timing varying channels may be provided. First, a feedback signal corresponding to one of a plurality of downstream paths and a combination upstream signal comprising a combination of upstream signals from a plurality of upstream paths may be received. Next, a plurality of echo corrected signals may be created using the feedback signal, the combination upstream signal, and a plurality of echo cancelation coefficients that each respectively correspond to each one of the plurality of echo corrected signals and that are different from each other. Then a one of the plurality of echo cancelation coefficients that corresponds to a one of the plurality of echo corrected signals that provides a best echo cancelation performance as compared to other ones of the plurality of echo corrected signals may be selected to use.

Abstract: Embodiments of apparatus, systems and methods facilitate the adaptive deployment of a distributed computing application on at least one selected cloud configuration from a plurality of cloud configurations based on dynamically obtained and/or compiled metrics pertaining to the cloud configurations and to the distributed computing application and/or user specified criteria pertaining to the metrics. In some embodiments, an infrastructure independent representation of the distributed computing application is adapted to the selected cloud configuration and run on the selected cloud configuration by utilizing a cloud-specific implementation of the infrastructure independent representation of the distributed computing application. The cloud-specific implementation of the infrastructure independent representation corresponds to the cloud infrastructure on which the distributed application is run.

Abstract: Server-side trick mode restrictions in a stream may be provided. The stream may comprise, for example, a Video on Demand (VOD) Adaptive Bitrate (ABR) stream. First, a playlist request corresponding to a stream may be received from a user device. Next, a current stream position in the stream may be determined. In response to receiving the playlist request and when the current stream position corresponds to a non-skip segment, a playlist may be created having a last chunk comprising a next chunk of the stream from the current stream position. The playlist may then be provided to the user device.

Abstract: Adaptive power control may be provided. First, a network configuration change event may be detected by a computing device disposed in a node. Next, the computing device may determine, in response to detecting the network configuration change event, a bias current value for a forward launch amplifier disposed in the node based on the network configuration change event. The computing device may then cause, in response to determining the bias current value, the forward launch amplifier to be driven with the bias current value.

Abstract: In one embodiment, a device in a network identifies a node in the network that is not synchronized to a network time synchronization mechanism. The device determines a scheduled reception time for a particular deterministic traffic flow at which the device is to receive the traffic flow from the node. The device sends, prior to the scheduled reception time, a request to the node for the particular deterministic traffic flow. The request identifies the particular deterministic traffic flow and causes the node to send the traffic flow to the device. The device receives the particular deterministic traffic flow from the node at the scheduled reception time.

Abstract: In one embodiment, a network assurance service that monitors a network detects anomalies in the network by applying one or more machine learning models to telemetry data from the network. The network assurance service ranks feedback from a plurality of anomaly rankers regarding relevancy or criticality of the detected anomalies. The network assurance service clusters the plurality of anomaly rankers into clusters of similar rankers, based on the received ranking feedback. The network assurance service uses the clusters of similar rankers to assign reliability scores to each of the anomaly rankers. The network assurance service selects, based on the reliability scores, a subset of the plurality of anomaly rankers to receive an anomaly detection alert regarding a particular detected anomaly to be ranked. The network assurance service provides the anomaly detection alert to the selected subset of the plurality of anomaly rankers for ranking.