Abstract: Techniques are described herein for network slice support of respective transport protocols. In one example, a session management function obtains, from a user equipment, a request for a network slice identifier in a network that includes a plurality of network slices each configured to support a respective transport protocol. In response to the request, the session management function identifies a first transport protocol of the respective transport protocols by which the user equipment is to communicate. Based on the first transport protocol, the session management function identifies a first network slice of the plurality of network slices by which the user equipment is to communicate. The first network slice is configured to support the first transport protocol. The session management function provides the network slice identifier to the user equipment. The network slice identifier corresponds to the first network slice.

Abstract: Wireless dynamic file exchange is provided by, in response to a triggering network condition occurring, initiating an exchange of a parameter file including non-layer two content via a 802.11 message, such as a Generic Advertisement Service (GAS) message between an access point (AP) and a station (STA) connected to the AP; and in response to determining that the exchange was unsuccessful, terminating a connection between the AP and the STA. The parameter file may be sent over several messages and update the parameters for a new session or an existing session. Devices that do not conform to the updated parameters may be disassociated from the AP and re-connect to receive and implement the updated parameters.

Abstract: In one embodiment, methods for monitoring devices within a network by a controller are described. The method may include receiving a first request from a first device to authenticate a role of the first device as a grandmaster in a precision time protocol (PTP). Additionally, the method may include granting the first request designating the role of the first device as the grandmaster. The method may further include receiving a second request from a second device to authenticate that a clock announce message is from an authorized grandmaster. Additionally, the method may include determining whether the first device is authorized to send the clock announce message to the second device and, based on the determining, sending a message granting or denying permission for the first device to sync with the second device.

Abstract: Techniques are described herein for pairing disaggregated network elements. In one example, a pairing manager obtains an indication to prioritize high availability when pairing disaggregated network elements. The disaggregated network elements include first disaggregated network elements and second disaggregated network elements. The pairing manager obtains, from one or more of the disaggregated network elements, topology information of the disaggregated network elements. Based on the topology information and the indication to prioritize high availability, the pairing manager pairs topologically-adjacent ones of the first disaggregated network elements with different ones of the second disaggregated network elements.

Abstract: This disclosure describes techniques for implementing centralized path computation for routing in hybrid information-centric networking protocols implemented as a virtual network overlay. A method includes receiving an interest packet header from a forwarding router node of a network overlay. The method further includes determining an interest path of the interest packet and one or more destination router nodes of the network overlay. The method further includes computing one or more paths over the network overlay. The method further includes determining an addressing method for the one or more computed paths over the network overlay. The method further includes performing at least one of encoding each computed path in a data packet header, and encoding each computed path as state entries of each router node of the network overlay on each respective path. The method further includes returning the computed path information to the forwarding router node.

Abstract: Techniques for identifying network congestion and adapting network performance to relieve the network congestion are described. As described, a network element such as a switch reports network congestion indicators such as link level control frames to a network controller. The network controller uses the network congestion indicators reported from the network elements to identify congestion points, data traffic, and data flows experiencing congestion at a network level. The network controller then determines optimized control parameters for the network in order to reduce or alleviate the congestion at the congestion points.

Abstract: In one embodiment, a device performs a detection stage of an automated instrumentation pipeline during which the device detects an application server type by examining a command line of a process of an application. The device performs, based on the application server type, an extraction stage of the automated instrumentation pipeline during which the device extracts application server attributes. The device performs, based on the application server attributes, a naming stage of the automated instrumentation pipeline during which the device forms a naming hierarchy for processes of the application. The detection stage, the extraction stage, and the naming stage of the automated instrumentation pipeline do not have access to a controlled space of the application. The device inserts, based in part on the naming hierarchy, arguments into command lines of processes of the application that cause the processes of the application to be instrumented at runtime.

Abstract: A network storage volume stores a first entry in a first-mode storage bucket and a second entry in a second-mode storage bucket, the first-mode storage bucket having first bucket metadata, and the second-mode storage bucket having second bucket metadata. At least one bucket to be purged from the buckets of the network storage volume are selected based at least in part on bucket metadata of the plurality of buckets, where the buckets include the first-mode storage bucket and the second-mode storage bucket. The selected bucket is caused to be purged from the network storage volume.

Abstract: According to one or more embodiments of the disclosure, a device in a network identifies a packet sent via the network towards an endpoint as being a control packet for the endpoint. The device extracts one or more control parameter values from the control packet. The device compares the one or more control parameter values to a policy associated with the endpoint. The device initiates a corrective measure, based on a determination that the one or more control parameter values violate the policy associated with the endpoint.

Abstract: A Radio Access Network (RAN) element provides an internet indication to a User Equipment (UE) to enable the UE to quickly obtain internet access. The RAN element determines that the RAN element is connected to at least one gateway that provides public internet access, and broadcasts an internet indication. The RAN element determines that the UE has requested public internet access via the RAN element and provides the UE with public internet access.

Abstract: A method is provided that is performed in a wireless network to detect a rogue wireless device. The method comprises detecting a suspect wireless device in the wireless network based on messages transmitted by the suspect wireless device using a first Media Access Control (MAC) address that is also used by a valid wireless device in the wireless network. When a suspect wireless device is detected, the method next includes sending to the valid wireless device in the wireless network a request configured to cause the valid wireless device to change its MAC address. After the valid wireless device has changed its MAC address, the method involves observing messages transmitted by the suspect wireless device in the wireless network. The method then includes determining that the suspect wireless device is a rogue device when the suspect wireless device continues to transmit messages using the first MAC address.

Abstract: In one embodiment, a method herein comprises: receiving, at a device, a registration request from a telemetry exporter that transmits telemetry data; generating, by the device, a telemetry configuration file for the telemetry exporter, the telemetry configuration file defining a policy for transmission of telemetry data from the telemetry exporter and an authentication token for the telemetry exporter; sharing, by the device, the policy with a security enforcer; and sending, by the device, the telemetry configuration file to the telemetry exporter, wherein the telemetry exporter is caused to connect with the security enforcer using the authentication token, send the telemetry configuration file to the security enforcer, and transmit collected telemetry data to the security enforcer, and wherein the security enforcer is caused to create a dynamic publish-subscribe stream for publishing the collected telemetry data received from the telemetry exporter based on the telemetry configuration file and the policy.

Abstract: The disclosed technology relates to determining a period in which a non-urgent RRM update should be deferred. The method may comprise applying a first update to an existing configuration of the plurality of wireless access points in the network based on an analysis of telemetry received from the plurality of wireless access points received over a period spanning at least two busy periods. The method may further comprise applying a second update that modifies the first preferred network configuration based on an analysis of telemetry received during the first busy period. The method may further comprise applying a maintenance update to the tweaked network configuration based on telemetry received during the next busy period.

Abstract: Techniques are described for providing a proactive indication of a disruption of a network session. In one example, a network session is established between a first endpoint and a second endpoint based on a connection-oriented protocol. One or more network attributes associated with the network session are stored in a persistent storage. The one or more network attributes may be obtained from the persistent storage when the network session is disrupted. A proactive indication that the network session has been disrupted may be provided to the second endpoint based on the one or more network attributes.

Abstract: According to some embodiments, a method includes detecting a start of an OpenTelemetry span by an application and determining security information related to the start of the OpenTelemetry span. The method further includes monitoring the application for one or more application behaviors during execution of the OpenTelemetry span. The method further includes detecting an end of the OpenTelemetry span by the application, and in response, calculate a security score for the OpenTelemetry span using the security information related to the start of the OpenTelemetry span and the one or more application behaviors detected during execution of the OpenTelemetry span. The method further includes updating a status of the OpenTelemetry span to include the security score and a text string related to the calculation of the security score.

Abstract: An optical module includes an optical source, a first polarization splitter-rotator, a second polarization splitter-rotator, a first port, a second port, a third port, and a fourth port. The optical source produces an optical signal. The first polarization splitter-rotator generates a first source optical signal based at least in part on the optical signal. The second polarization splitter-rotator generates a second source optical signal based at least in part on the optical signal. The first port transmits, to a first device, the first source optical signal and receives, from the first device, a first modulated optical signal. The first polarization splitter-rotator produces a second modulated optical signal. The second port transmits, to a second device, the second source optical signal and receives, from the second device, a third modulated optical signal. The second polarization splitter-rotator produces a fourth modulated optical signal.

Abstract: In various embodiments, a natural language (NL) application enables users to more effectively access various data storage systems based on NL requests. The NL application includes functionality for selecting an optimal interpretation algorithm, generating a dashboard, and/or generating an alert based on an NL request. Advantageously, the operations performed by the NL application reduce the amount of time and user effort associated with accessing data storage systems and increase the likelihood of properly addressing NL requests.

Abstract: In one embodiment, a power control block includes a power input for receiving pulse power from a power source, a power output coupled to a transmission line connector, a pulse power module operable to receive the pulse power and transmit the pulse power to the power output, a Power over Ethernet (PoE) module operable to receive the pulse power and transmit PoE to the power output, and a power controller for selecting the pulse power module to deliver the pulse power to the power output or the PoE module to deliver the PoE to the power output.

Abstract: A method provides for receiving network traffic from a host having a host IP address and operating in a data center, and analyzing a malware tracker for IP addresses of hosts having been infected by a malware to yield an analysis. When the analysis indicates that the host IP address has been used to communicate with an external host infected by the malware to yield an indication, the method includes assigning a reputation score, based on the indication, to the host. The method can further include applying a conditional policy associated with using the host based on the reputation score. The reputation score can include a reduced reputation score from a previous reputation score for the host.

Abstract: Techniques for implementing a differential differencing TIA for coherent applications are disclosed.