Abstract: A tunnel endpoint of a virtual network monitors the flows between the tunnel endpoint and at least one other tunnel endpoint. The virtual network spans a physical network. A flow identifier for each flow is determined based on packet headers of packets in each respective flow. A path identifier for each flow is also determined based on the packet headers of the packets in each respective flow. Each path identifier indicates a route that the respective flow takes in the physical network to reach the respective destination tunnel endpoint. The path identifier and the flow identifier of the respective flows are then transmitted to a controller of the virtual network.

Abstract: Embodiments provide techniques for optimizing ABR profiles for broadcast channels at a network gateway device. Embodiments include monitoring, at a network gateway device for a network, a plurality of client devices within the network to determine adaptive bitrate (ABR) streaming information for a first broadcast channel of a plurality of broadcast channels. One or more performance attributes of the network are determined. Embodiments include selecting one or more ABR profiles, of a plurality of ABR profiles for the first broadcast channel, based on the ABR streaming information and the one or more performance attributes of the network. An updated manifest file specifying the selected one or more ABR profiles for the first broadcast channel is generated, and the updated manifest file is transmitted to the plurality of client devices.

Abstract: Various implementations disclosed herein enable writing a number of copies of object data or parity data associated with a data segment to a storage system. For example, in various implementations, a method of writing a number of copies of object data or parity data associated with a data segment is performed by a first storage entity of the storage system. In various implementations, the first storage entity includes a non-transitory computer readable storage medium and one or more processors. In various implementations, the method includes obtaining a data segment from an ingest entity in response to a request to write a number of copies of object data or parity data, determining whether the request is to write object data or parity data, and in response to determining that the request is to write object data, writing the number of copies of object data according to a shared resource utilization threshold.

Abstract: In one embodiment, an ingress network virtualization edge (NVE) in a computer network generates an echo packet, and sets an indication in the echo packet that the echo packet is for overlay path validation. In addition, the ingress NVE sets a message type of the echo packet to a generic echo request, and includes virtualization network (VN) context information within the echo packet. Once setting a destination address of the echo packet as an egress NVE address and including an indication to the egress NVE that the echo packet is an operations, administration, and management (OAM) message, the ingress NVE may then send the echo packet toward the egress NVE (e.g., to validate the VN context information and/or to reveal multipath traces).

Abstract: In one embodiment, a network device receives metrics regarding a path in the network. A predictive model is generated using the received metrics and is operable to predict available bandwidth along the path for a particular type of traffic. A determination is made as to whether a confidence score for the predictive model is below a confidence threshold associated with the particular type of traffic. The device obtains additional data regarding the path based on a determination that the confidence score is below the confidence threshold. The predictive model is updated using the additional data regarding the path.

Abstract: A method is provided and may include receiving a request for a network content delivery service from an access device; directing the access device to a network service provider for authentication for the network content delivery service; receiving a network authorization token from the access device, where the network authorization token is associated with the access device; obtaining a network access token from the network service provider; and binding the network access token to a content access token.

Abstract: One embodiment provides a transport stack updating system that facilitates updating a component of a transport stack of a computer system. During operation, the system sets, by a component of the transport stack, a state of the component as quiesced in response to receiving a pause message. A component in the quiesced state is precluded from processing an interest or a content object. The system determines whether the pause message triggers a rejection passes an acknowledgment message of the pause message up the transport stack. The acknowledgment message indicates that the pause message has been successfully processed by a respective component of the transport stack.

Abstract: Particular embodiments described herein provide for a communication system that can be configured for receiving, at a network element, a flow offload decision for a first service node. The flow offload decision can include a portion of a service chain for processing a flow and updating next hop flow based routing information for the flow. A next hop in the flow can insert flow specific route information in its routing tables to bypass a packet forwarder serving the service that offloaded the flow in the reverse direction.

Abstract: In one embodiment, a device in a segment routed network identifies an adjacency segment between the device and another device in the network. The device also identifies a merge point in the network. A first network path extends between the device and the merge point via the adjacency segment. A bypass network path that does not include the adjacency segment also extends between the device and the merge point. The device generates an interior gateway protocol (IGP) message that identifies the adjacency segment and the merge point. The device provides the IGP message to one or more other devices in the network.

Abstract: In one embodiment, a device in a network analyzes local network data regarding a portion of the network that is local to the device using a first anomaly detection model. The device analyzes the local network data using a second anomaly detection model that was trained in part using remote network data regarding a portion of the network that is remote to the device. The device compares outputs of the first and second anomaly detection models. The device identifies the local network data as peculiar, in response to the first anomaly detection model determining the local network data to be normal and the second anomaly detection model determining the local network data to be anomalous.

Abstract: A network device that performs information centric networking (ICN) in an ICN network receives an Interest from a consumer as the Interest traverses an Interest path to a data responder. The Interest requests data by name and indicates an accumulated Interest queuing delay experienced by the Interest on the Interest path. The network device enqueues the Interest to an Interest queue and dequeues the Interest from the Interest queue, and determines a local Interest queuing delay between the enqueing and dequeuing. The network device increases the indicated accumulated Interest queuing delay by the local Interest queueing delay, and forwards the Interest along the Interest path. The network device receives a Data packet satisfying the Interest as the Data packet traverses the Interest path in reverse. The network device increases an accumulated Data queueing delay indicated in the Data packet, and then forwards the Data packet to the consumer.

Abstract: A system and method are disclosed for using segment routing (SR) in native IP networks. The method involves receiving a packet. The packet is an IP packet and includes an IP header. The method also involves updating the packet. Updating the packet involves writing information, including a segment routing segment identifier, to the destination address of the packet.

Abstract: An embodiment includes receiving at a network node associated with a mobile core network an authorization request from a network device, wherein the authorization request is received via an untrusted network; subsequent to the receiving, performing at the network node authorization of the network device; subsequent to the receiving, determining a preferred network access node for the network device, wherein the determining comprises accessing a node selection information repository containing static and dynamic information related to network access nodes and network access node groupings and wherein the static and dynamic information comprises at least one of resource usage, location, availability of mobility anchors, proximity of mobility anchors, handover opportunities, resiliency class, and time of day; and providing to the network device an initial authorization response comprising a response to the received authorization request, wherein the initial authorization response identifies the determined prefer

Abstract: In one embodiment, a packet switching device determines that a packet matches one of a plurality of predetermined patterns, however, this matching may produce a false-positive match of one of the underlying rules corresponding to the plurality of predetermined patterns. In one embodiment, determining the packet matches one of the plurality of predetermined patterns includes determining a first pattern match of a packet when each particular portion of a plurality of different portions of the packet is found to be matching a corresponding particular pattern portion by performing a table lookup operation based on the particular portion as an address in a corresponding different current portion-iteration table to retrieve a corresponding partial result. In one embodiment, the first pattern match is filtered using a second validation technique for removing false-positive first pattern matches. In one embodiment, the second validation technique includes using hashing.

Abstract: According to one example embodiment, a modem or other network device include an energy module configured to enter a low-power, low-bandwidth state when not in active use by a user. The low-power state may be maintained under certain conditions where network activity is not present, and or when only non-bandwidth-critical traffic is present. The network device may include a user interface for configuring firewall rules, and the user may be able to concurrently designate particular types of traffic as important or unimportant. The energy module may also be integrated with a firewall, and power saving rules may be inferred from firewall rules.

Abstract: One embodiment includes multiple distribution nodes sending packets of different ordered sets of packets among multiple packet switching devices arranged in a single stage topology to reach a reordering node. The reordering node receives these packets sent over the different paths and stores them in reordering storage, such as, but not limited to, in queues for each distribution node and packet switching device combination. The reordering node sends packets stored in the reordering storage from the reordering node in original orderings. In response to determining that an aggregation quantum of packets received from the multiple distribution nodes via a particular packet switching device and stored in the reordering storage is outside a range or value, packets being communicated via the particular packet switching device to the reordering node are rate limited.

Abstract: Message summarization and flood suppression may be provided. A proxy (e.g., an IGMP Proxy) process may be used to reduce the flooding of messages (e.g., IGMP messages) over a network (e.g., an EVPN network). A triggering process may also be provided for provider edge (PE) devices to setup their underlay multicast tunnels. The proxy may comprise two components: i) a proxy for reports (e.g., IGMP reports); and ii) a proxy for queries (e.g., IGMP Queries).

Abstract: According to one aspect, an apparatus includes a substrate, a conductor, and a contact pad. The substrate has a first edge, and the conductor is formed on the substrate. The contact pad has a first end and a second end, and is formed on the substrate and connected to the conductor at the first end. The contact pad has a non-uniform configuration, the non-uniform configuration including a first width and a second width, the first width and the second width being measured with respect to a common axis, the first width being wider than a second width, the second width being a width of the contact pad at the second end, the second end being coincident with the first edge.

Abstract: One example method is provided for dynamic allocation of air interface resources in a cellular network comprising at least three wireless cells located within a geographical proximity of each other, the method comprising determining, by a central managing entity, one or more classification rules for classifying each of said plurality of mobile devices according to the one or more classification rules; providing, by the central management entity, to a group of base stations associated with the at least three cells, information that comprises: information that relates to the determined one or more classification rules; information that relates to semi-static allocation of blocks of air interface resources adapted for use by one or more specific members of the group of base stations.

Abstract: A Hypervisor hosted on a computer device includes a Fiber Channel (FC) port to communicate with an FC switch in an FC switched fabric. The FC port has a port identifier assigned by the switch device. The Hypervisor solicits from the switch FC priority values available to be allocated as respective local identifiers of virtual machines (VMs). The Hypervisor instantiates a VM with a global VM identifier, and allocates one of the solicited priority values to the instantiated VM such that the allocated priority value and the port identifier together represent a fabric VM identifier. After the allocating, the Hypervisor sends to the FC switch an update frame to indicate the instantiated VM, the global VM identifier, and the fabric VM identifier. During an FC session, the Hypervisor exchanges FC frames with an FC destination port connected to the switched fabric. Each session frame indicates the fabric VM identifier.