Abstract: Embodiments herein describe a fiber array unit (FAU) configured to couple a photonic chip with a plurality of optical fibers. Epoxy can be used to bond the FAU to the photonic chip. However, curing the epoxy between the FAU and the photonic chip is difficult. As such, the FAU can include one or more optical windows etched into a non-transparent layer that overlap with epoxy wells in the photonic chip. Moreover, the FAU may include a transparent substrate on which the non-transparent layer is disposed that permits UV light to pass therethrough. As such, during curing, UV light can be pass through the transparent substrate and through the optical windows in the non-transparent layer to cure the epoxy disposed between the FAU and the photonic chip.

Abstract: In one embodiment, possible voting nodes in a network are identified. The possible voting nodes each execute a classifier that is configured to select a label from among a plurality of labels based on a set of input features. A set of one or more eligible voting nodes is selected from among the possible voting nodes based on a network policy. Voting requests are then provided to the one or more eligible voting nodes that cause the one or more eligible voting nodes to select labels from among the plurality of labels. Votes are received from the eligible voting nodes that include the selected labels and are used to determine a voting result.

Abstract: Resource rationing for network slices in segment routing networks may be provided. A network slice may be created in a communication network. A portion of network resource may be dedicated to the network slice. The dedicated portion of network resource may be bound to the network slice using a segment identifier. The segment identifier may be advertised to the communication network. Data packets associated with the network slice may be routed using the dedicated portion of network resource.

Abstract: In some examples, an example method to measure quality of service (QoS) of a network tunnel may include configuring a network tunnel from a tunnel source endpoint to a tunnel destination endpoint, transmitting multiple status packets to the tunnel destination endpoint, receiving multiple forwarded status packets from the tunnel destination endpoint, determining a time of receipt of each of the forwarded status packets, and determining a QoS measure of the network tunnel based on a time of transmission of each of the multiple status packets and the time of receipt of each of the forwarded status packets.

Abstract: Systems described herein preemptively detect newly registered network domains that are likely to be malicious before network behavior of the domains is actually observed. A network security device (e.g., a router) receives domain registration data that associates network domains with keys and generating a graph representing the domain registration data. Each edge of the graph connects a vertex representing a domain and a vertex representing a registration attribute (e.g., a registrant email address). The network security device identifies a connected component of the graph that meets a graph robustness threshold. The network security device determines whether a domain of the connected component whose behavior has not yet been observed is malicious using a predictive model based on existing maliciousness labels for other domains of the connected component.

Abstract: In an example, there is disclosed a network apparatus, comprising: one or more logic elements, including at least one hardware logic element, to provide a network manager engine to: provide a switched fabric management function; communicatively couple to at least one network switch, the network switch configured to provide optional native hardware-based load balancing; monitor one or more load balancing factors; and at least partly responsive to the one or more load balancing factors, configure native hardware-based load balancing on the at least one network switch.

Abstract: An example method is provided in one example embodiment and may include maintaining a count of packets forwarded to a target evolved Node B (eNodeB) from a source eNodeB during a handover of a user equipment (UE) from the source eNodeB to the target eNodeB; and communicating an end marker indication message from the source eNodeB to the target eNodeB including the count of packets forwarded to the target eNodeB upon handover of the UE to the target eNodeB. A count of packets can be maintained for each bearer of the UE. A separate end marker indication message can be communicated to the target eNodeB for each bearer of the UE. The count of packets can be included in a Private Extension Information Element (IE) of the end marker indication message. In some embodiments, Radio Link Control (RLC) tuning parameters can be included in the Private Extension IE.

Abstract: In one embodiment, a supervisory device in a network classifies mobility and traffic characteristics of a first node in the network. The supervisory device identifies wireless channels supported by access points (APs) in the network. The supervisory device selects one of the wireless channels for use by the first node based on the classified mobility and traffic characteristics of the first node. The supervisory device forms a first virtual access point (VAP) for the first node on the selected wireless channel. A plurality of the access points (APs) in the network that support the selected channel are mapped to the first VAP as part of a VAP mapping. The first node treats the APs in the VAP mapping as a single AP for purposes of communicating with the network.

Abstract: One embodiment is a method including creating at an ingress node of a communications network a request message identifying a hashing parameter for a network application, and including range of values for the identified hashing parameter to enable load balancing for packets associated with the network application; forwarding the created request message to a node associated with a next hop along a first path through the network between the ingress node and an egress node; and receiving a response message from the node associated with the next hop, wherein the response message includes load balancing information for the node associated with the next hop corresponding to the range of values for the identified hashing parameter.

Abstract: In one embodiment, a first request may be received from a first endpoint to access a cloud-based conference platform. The first request can include a first access token. Based at least on the first request, a first certificate may be provided to the first endpoint, wherein the first certificate may not include an identity of the first endpoint. A second request may be received from a second endpoint to access the cloud-based conference platform. The second request can include a second access token. Based at least on the second request, a second certificate can be provided to the second endpoint, wherein the second certificate may not include an identity of the second endpoint. Data can be routed within the cloud-based conference platform between the first endpoint and second endpoint based at least upon the first certificate and the second certificate.

Abstract: In one embodiment, a control device associated with a wireless network of a given location determines a reference quality of location readings between access points and client devices based on using substantially all of an available wireless communication bandwidth. The control device may then determine channel state information (CSI) between the client devices and access points for each orthogonal frequency-division multiple access (OFDMA) resource unit (RU), and selects a subset of RUs for allocation to each respective client device, based on the subset of RUs allocated to each respective client device i) surpassing a determined threshold of certain parameters of the CSI, while also ii) providing a minimum quality of a location reading based on using only the subset of RUs as compared to the reference quality of location readings. The control device may then allocate the selected subset of RUs to each respective client device for location-preserving OFDMA-signaling-based communication.

Abstract: Full Duplex (FDX) enhanced node deployment may be provided. First, a first device level may be provided comprising a first plurality of FDX enhanced nodes. The first plurality of FDX enhanced nodes may comprise a first FDX enhanced node and a second FDX enhanced node. The first plurality of FDX enhanced nodes may be operated in a first mode. Next, a second device level may be provided comprising a third FDX enhanced node. The second device level may be upstream from the first device level. The third FDX enhanced node may be operated in a second mode. Then an input port of the first FDX enhanced node and an input port of the second FDX enhanced node may be provided with a same type of input that is being provided to an input port of the third FDX enhanced node. The first plurality of FDX enhanced nodes may then be switched from being operated in the first mode to being operated in the second mode.

Abstract: In one embodiment, a method generally includes a first edge (E) node in a network receiving an encapsulated data packet, wherein the encapsulated data packet comprises an outer header and a data packet, wherein the outer header comprises a first router locator (RLOC) corresponding to the first E node, wherein the data packet comprises an internet protocol (IP) header, and wherein the IP header comprises a destination endpoint identification (EID) corresponding to a host H. The first E node determines whether the host H is attached to the first E node. And in response to the first E node determining the host is attached to the first E node, the first E node forwards the data packet to the host H. The first E node receives a message from another node after the host H detaches from the first E node and reattaches to another E node, wherein the message comprises the destination EID.

Abstract: In one embodiment, a Segment Routing network node provides processing and network efficiencies in protecting Internet Protocol version 6 (IPv6) Segment Routing (SRv6) packets and functions using Security Segment Identifiers, which are included in Segment Lists of a Segment Routing Header of a SRv6 packet. The Security Segment Identifier provides, inter alia, origin authentication, integrity of information in one or more headers of the packet, and/or anti-replay protection. In one embodiment, a Security Segment Identifier includes a value determined based on a secured portion of the packet. A typically secured portion includes the Source and Destination Addresses, one or more Segment Identifiers in a Segment List and the Segments Left value. In one embodiment, the Destination Address and/or a Segment Identifier in the Segment List includes and an anti-replay value (e.g., sequence number or portion thereof) which is also in the secured portion of the packet.

Abstract: Reconciling Adaptive Bitrate (ABR) segments across redundant sites may be provided. First, a working manifest may be set to match a primary downstream manifest and the working manifest may be updated using an auxiliary downstream manifest. Next, first segments missing from the working manifest as identified during updating the working manifest using the auxiliary downstream manifest may be copied from the auxiliary downstream manifest to the primary downstream manifest. The working manifest may then be updated using a primary upstream manifest. And then second segments missing from the working manifest as identified during updating the working manifest using the primary upstream manifest may be copied from the primary upstream manifest to the primary downstream manifest.

Abstract: Stateless and reliable load balancing using segment routing and an available side-channel may be provided. First, a non-SYN packet associated with a connection may be received. The non-SYN packet may have first data contained in an available side-channel. Next an associated bucket may be retrieved based on a hash of second data in the non-SYN packet. The associated bucket may identify a plurality of servers. Then a one of the plurality of servers may be selected based on the first data contained in the available side-channel.

Abstract: Aspects of the embodiments are directed to systems, methods, and network elements executing instructions stored thereon. Aspects are directed to, for each spine node connected to a leaf node network element, identifying a spine router identifier, identifying a multicast group address, computing a plurality of hash values based on a hash function using the spine router identifier and the multicast group address, identifying a root spine node based on a highest hash value from the plurality of hash values; and transmitting an IS-IS message to root spine node indicating election of spine node as the root spine node.

Abstract: In one embodiment, a video conference endpoint may detect a one or more participants within a field of view of a camera of the video conference endpoint. The video conference endpoint may determine one or more alternative framings of an output of the camera of the video conference endpoint based on the detected one or more participants. The video conference endpoint may send the output of the camera of the video conference endpoint to one or more far-end video conference endpoints participating in a video conference with the video conference endpoint. The video conference endpoint may send data descriptive of the one or more alternative framings of the output of the camera to the far-end video conference endpoints. The far-end video conference endpoints may utilize the data to display one of the one or more alternative framings.

Abstract: A Location/Identifier Separation Protocol (LISP) mapping server, including: a network interface for communicating with a LISP-enabled network; a mapping database; an extranet policy table; and a shared subnetwork mapping engine (SSME), including at least a hardware platform, configured to: receive a map request from a first endpoint serviced by a first xTR, the first endpoint on a first subnetwork, the map request for a second endpoint; determine that the second endpoint is not a member of the first subnetwork; query the extranet policy table to identify a second subnetwork that the first subnetwork subscribes to, and to determine that the second endpoint is a member of the second subnetwork; and provide to the first subnetwork a routing locator (RLOC) of an xTR servicing the second endpoint.

Abstract: A control plane (CP) entity is to adaptively reroute user plane traffic of a mobile node (MN) with use of a segment routing (SR) for IPv6. A message indicating an attachment of the MN to the mobile network is received selecting a first user plane (UP) anchor node. A first set of home network prefixes (HNPs) are allocated to the MN. An IP traffic flow using a first HNP prefix is established between the MN and a correspondent node (CN) along a first network path—defined at least in part by the first UP anchor node and an anchor node of the CN. In response to a handover of the MN, a message indicating a subsequent attachment of the MN is received selecting a second UP anchor node. The second UP anchor node is instructed to host the first HNP prefix previously allocated by the first UP anchor node.