Abstract: A power tool for obtaining a channel equalization and improving the signal to noise ratio in an amplified optical link. A controller obtains a plurality of optical channel power values for a plurality of channels used for transmitting optical signals on an optical link by a plurality of optical transmitters. The optical channel power values are obtained by monitoring power at an input or an output of an amplifier on the optical link. The controller then determines a power distribution among the plurality of channels based on a maximum optical power and a minimum optical power from the plurality of optical channel power values and generates a plurality of adjusted channel power values by equalizing and scaling the plurality of optical channel power values. The controller configures the plurality of optical transmitters for transmitting the optical signals on the optical link based on the plurality of adjusted channel power values.

Abstract: The disclosed technology relates to a process of dynamically assigning operational parameters for access points within a CBRS (Citizen Broadband Radio Service) network. In particular, the disclosed technology monitors for and detects interference between nearby access points and user equipment devices that may belong to the same enterprise or to different enterprises. Machine learning processes are used to revise the operational parameters that were initially assigned by the Spectrum Access System (SAS). These processes are also used to suggest an updated set of operational parameters to the SAS for the access points. The dynamic assignment reduces interference experienced by the access point with respect to nearby other access points and/or nearby other user equipment. The dynamic assignment aims to improve a quality of communication between the access point and its associated user equipment.

Abstract: This disclosure describes techniques for authenticating a user. For instance, a system may initially generate and then store authentication data for later authenticating the user. The authentication data may include biometrics data (e.g., facial recognition data), credentials data (e.g., a username, password, etc.), and/or environmental data (e.g., object(s) located within an environment). Later, the system may receive image data generated by a user device of the user. In some examples, the system may then analyze the image data using one or more facial recognition techniques in order to identify the user. The system may then use the authentication data, such as the environmental data, to determine that the image data further represents the object(s). Based on determining that the image data further represents the object(s), the system may then verify the user for access to a resource.

Abstract: The present disclosure describes a system and method for deconflicting locally administered medium access control addresses (LAMAs). An apparatus includes a memory and a processor communicatively coupled to the memory. The processor receives a request for a client device to use a LAMA and determines that the LAMA is reserved for future use by a first access point. The processor also transmits to the client device a message denying connectivity to the client device using the LAMA.

Abstract: In one embodiment, a computer networking device calculates a first hash value for an identifier of a group of computing devices, as well as a second hash value for the identifier of the group of computing devices, with each hash value being at least in part on the identifier of the group of computing devices and an identifier of the respective interface. The computer networking device may also analyze the first hash value with respect to the second hash value and select the first interface for association with the identifier of the group of computing devices based at in part on the analyzing. The computer networking device may further store an indication that the identifier of the group of computing devices is associated with the first interface.

Abstract: Techniques are described for an adaptive CoPP that can adapt and change based on actual network control traffic rather than static CoPP rates. An aggressive CoPP can protect the CPU (route processor) of a network device, e.g., routers and switches, but may also penalize convergence and performance. An adaptive CoPP may protect CPU as well as boost convergence and performance parameters. In particular, traffic between two sites may be managed by proactively changing the thresholds of lower CoS traffic based on the CoPP utilization of various protocol/BPDU class traffic, thereby improving data plane convergence and application performance in scaled environments.

Abstract: Aspects described herein include a method of automated grouping of client devices for a user-defined network (UDN). The method includes receiving, from a client device an authentication request to join an access provider network. The authentication request includes a unique identifier of the client device for a federation-based network. The method further includes transmitting the unique identifier to a UDN cloud, transmitting the authentication request to an identity provider, and receiving, responsive to the identity provider authenticating the authentication request, a list of one or more UDNs from the UDN cloud that are associated with the unique identifier. The method further includes joining the client device with one or more other client devices present on the access provider network listing a same UDN.

Abstract: To improve adaptation of network infrastructure to address rotations performed by wireless client device, embodiments provide for an exchange of a stable machine identifier (SMI) between a network access device and an authentication service. Some embodiments define a new SMI attribute that is included in a authentication service access-request and/or access-accept message. When a network access device obtains an SMI for a particular wireless client device, the network access device passes the SMI to the authentication service. Similarly, if an authentication service obtains a SMI value for a wireless client device, this information is provided to a network access device.

Abstract: In one embodiment, an agent executed by a device receives a profile for an application executed by the endpoint device that specifies one or more flow treatment policies for the application. The agent obtains performance metrics regarding a plurality of network interfaces of the endpoint device. The agent selects a particular network interface of the plurality of network interfaces by comparing the profile for the application to the performance metrics. The agent sends a packet for an application flow of the application over the particular network interface.

Abstract: A system and method for adaptive encryption for SD-WAN includes identifying an encrypted conversational flow and determining whether a duration of the encrypted conversational flow exceeds a threshold. The method also includes selecting a header-less tunnel for the encrypted conversational flow when the duration is more than the threshold. The method further includes transmitting the encrypted conversational flow to an egress router over the selected header-less tunnel.

Abstract: Systems, methods, and computer-readable media for enforcing data sovereignty policies in a cloud environment are provided. An example method can include sending, by a cloud provider, to a government entity associated with a geographic area, a request for device certificates for nodes located within the geographic area; receiving device certificates for the nodes; creating a data sovereignty policy specifying that data associated with the government entity must be stored on nodes located within the geographic area; based on the device certificates, verifying those of the nodes that comply with the data sovereignty policy; and storing the data associated with the government entity on those of the nodes verified to comply with the data sovereignty policy.

Abstract: In part, the disclosure relates to opto-electrical system. The system may include a waveguide defining an optical input and an optical output; a thermo-optic phase shifter (TOPS) that includes a first electrical contact and a second electrical contact, and a resistive heater in electrical communication with the first electrical contact and the second electrical contact, the TOPS configured to change a first phase of light entering the optical input to a second phase for light exiting the optical output, the TOPS having a resistance RTOPS, the TOPS in thermal communication with the waveguide; a voltage source in electrical communication with the first electrical contact; and a resistor that includes a first end and a second end, the resistor having a resistance RS, wherein the first end is grounded, wherein the second end is in electrical communication with the second electrical contact.

Abstract: Disclosed is an opto-electronic module including a first substrate, a photonic integrated circuit (PIC) attached to the first substrate, a laser assembly attached to the first substrate, and a microelectromechanical systems (MEMS) micro-mirror device positioned between the laser and the waveguide. The PIC comprising a waveguide. The laser assembly is configured to generate a laser beam to optically couple to the waveguide. The laser assembly includes a thermal electric cooler (TEC) and a laser thermally coupled to the TEC. The MEMS micro-mirror device comprising an actuatable MEMS mirror and a fixed mirror.

Abstract: A bus bar subassembly adapted to connect a first circuit board and a second circuit board includes a first bus bar, a second bus bar and a first electrical connector. The first bus bar is electrically connected to the first circuit board. The second bus bar is electrically connected to the second circuit board. The first connector is electrically connected to the first bus bar and the second bus bar.

Abstract: According to certain embodiments, a method performed by a trust anchor comprises determining a random value (K), encrypting the random value (K) using a long-term key associated with a hardware component in order to yield an encrypted value, communicating the encrypted value to the hardware component, and receiving a response encrypted using the random value (K). The response is received from the hardware component. The method further comprise encrypting a schema using the random value (K) and sending the encrypted schema to the hardware component. The schema indicates functionality that the hardware component is authorized to enable.

Abstract: Techniques are provided for radiation-induced birefringence in a Polarization-Maintaining Fiber (PMF). In one example, a fiber is obtained. At least one local volume of the fiber is irradiated to induce an end-to-end birefringence in the fiber. Based on the end-to-end birefringence induced in the fiber, a PMF is produced.

Abstract: Techniques for connectivity issue remediation are provided. A first link trace message is transmitted from a source end point to a destination end point. A first topology graph for a network is generated based on the first link trace message, and a presence of a connectivity issue in the network is detected. A second link trace message is transmitted from the source end point to the destination end point. A second topology graph for the network is automatically generated based on second link trace message, and a component in the network that caused the connectivity issue is identified based on comparing the first and second topology graphs.

Abstract: Techniques for advertising device inspection capabilities to enhance network traffic inspections are described herein. The techniques may include determining, by a first inspection device of a network, that a second inspection device is disposed within the network. The first inspection device may also receive, from the second inspection device, an indication that the second inspection device is capable of performing a first type of inspection. The techniques may also include receiving, at the first inspection device, a packet that is to be sent through the network along a path that includes the second inspection device. Based at least in part on the path including the second inspection device, the first inspection device may refrain from performing the first type of inspection on the packet at the first inspection device such that the second inspection device can perform the first type of inspection on the packet.

Abstract: Systems and methods are disclosed for audio enhancement. For example, methods may include accessing audio data; determining a window of audio samples based on the audio data; inputting the window of audio samples to a classifier to obtain a classification, in which the classifier includes a neural network and the classification takes a value from a set of multiple classes of audio; selecting, based on the classification, an audio enhancement network from a set of multiple audio enhancement networks; applying the selected audio enhancement network to the window of audio samples to obtain an enhanced audio segment, in which the selected audio enhancement network includes a neural network that has been trained using audio signals of a type associated with the classification; and storing, playing, or transmitting an enhanced audio signal based on the enhanced audio segment.

Abstract: A method for creating a secure network is provided. The method comprises establishing an overlay domain to control routing between overlay edge routers based on an underlying transport network, wherein said establishing comprises running an overlay management protocol to exchange information within the overlay domain; in accordance with the overlay management protocol defining service routes that exist exclusively within the overlay domain wherein each overlay route includes information on at least service availability within the overlay domain; and selectively using the service routes to control routing between the overlay edge routers; wherein the said routing is through the underlying transport network in a manner in which said overlay routes is shared with the overlay edge routers but not with the underlying transport network via the overlay management protocol.