Abstract: In one embodiment, a method includes acquiring an Internet Protocol version 6 (IPv6) address for a physical interface of a first network element. The method also includes configuring an Internet Protocol version 4 (IPv4) over IPv6 tunnel between the first network element and a second network element using the physical interface of the first network element. The method also includes acquiring an updated IPv6 address for the physical interface of the first network element and using an IPv6 Service Level Agreement (SLA) Hypertext Transfer Protocol (HTTP) operation to notify the second network element of the updated IPv6 address to establish a bidirectional IPv4 over IPv6 tunnel. The method further includes establishing a control connection with an IPv4 SD-WAN controller and automatically building an SD-WAN overlay tunnel with the bidirectional IPv4 over IPv6 tunnel as a transport.

Abstract: A differential transimpedance amplifier (DTIA) includes a first input, a second input, a first output, and a second output. The DTIA also includes a first inverter and a second inverter connected in series to the first input. The DTIA further includes a third inverter and a fourth inverter connected in series to the second input. The first inverter and the fourth inverter receive a first supply voltage from a first voltage regulator. The second inverter and the third inverter receive a second supply voltage from a second voltage regulator. The first supply voltage changes (i) based on a difference between voltages on the first output and the second output and (ii) while the second supply voltage remains fixed.

Abstract: Various systems and methods for performing bit indexed explicit replication (BIER) using multiprotocol label switching (MPLS). For example, one method involves receiving a packet that includes a MPLS label. The packet also includes a multicast forwarding entry. The method also involves determining, based on the value of the MPLS label, whether to use the multicast forwarding entry to forward the packet. The method further includes forwarding the packet.

Abstract: Techniques for automatically providing per tenant weighted DCMP over shared transport interfaces and automated flow has load balancing are described. The techniques may include onboarding the tenant to the local multi-tenant edge device associated with a tenant, where the resource profile defines a traffic allowance per transport interface for the tenant. Local weight per transport interface is applied. Information including local weight per transport interface is transmitted to a remote device via an SD-WAN controller. Information including a remote weight per transport interface of the remote device is received via the SD-WAN controller. Traffic is routed from the tenant based on local weight per transport interface of the local device and remote weight per transport interface of the remote device.

Abstract: Disclosed are embodiments that leverage a central control plane of a managed 5G network service architecture across multiple serviced tenants by deploying tenant specific user plane function (UPF) and gNB components within tenant managed compute infrastructure. To enable this architecture, the disclosed embodiments assign gNBs and UPF instances to specific tenants and communicate those assignments to core components. Policies can be defined and applied to specific tenants from the central control plane. Inbound data routing to a specific tenant is accomplished by referencing a data store in the control plane that identifies which gNBs are assigned to a tenant associated with the incoming data. Those gNBs are then paged to service the incoming data.

Abstract: Presented herein are techniques for cropping video streams to create an optimized layout in which participants of a meeting are a similar size. A user device receives a plurality of video streams, each video stream including at least one face of a participant participating in a video communication session. Faces in one or more of the plurality of video streams are cropped so that faces in the plurality of video streams are approximately equal in size, to produce a plurality of processed video streams. The plurality of processed video streams are sorted according to video stream widths to produce sorted video streams and the plurality of sorted video streams are distributed for display across a smallest number of rows possible on a display of the user device.

Abstract: A packet capture operation is configured via a first computing device. The packet capture operation is configured to capture packets provided by a second computing device. The first computing device obtains an indication that a user is within a predetermined location proximity to the second computing device. The packet capture operation is initiated in response to obtaining the indication at the first computing device.

Abstract: Disclosed are systems, computer-readable media and methods for monitoring performance data across microservices. One example method includes establishing a service policy configured on a centralized switch controller, applying the service profile to a virtual interface associated with a microservice, mapping a microservice name for the microservice to an IP address and a port number, tracking a protocol flow for the microservice, wherein the protocol flow is associated with a virtual switch, to yield data, aggregating the data to yield aggregated data and presenting the aggregated data on a user interface.

Abstract: In one embodiment, a method includes connecting, via a first interface of a controller card, a multiplexer of the controller card to a central processing unit (CPU) of the controller card. The method also includes connecting, via an interface of a first remote card, the multiplexer of the controller card to the first remote card. The method further includes interconnecting, by the multiplexer, the first interface of the controller card to the interface of the first remote card.

Abstract: A method for securing communications for a given network is provided. The method comprises by at least one node(i) of the network configured to utilize pairwise keys: generating a set of encryption keys; and transmitting the set of encryption keys to a controller for the network; by the controller, executing a key selection process wherein for each node(j) in the network an encryption key J is selected from the set of encryption keys; assigning the encryption key J to the node(j); and transmitting the selected encryption key J to the node(j); by each node(j), generating an encryption key I to the node(i); and sending the encryption key I to the node(i) via the controller.

Abstract: Presented herein are embodiments for quickly identifying and recommending key performance indicators (KPIs) for network devices based on the type of network device and/or role of the device. The type or configuration of the network device may be obtained and compared to the capabilities of the network device. Operational or performance information of the network device, represented by strings, may be obtained based on the configuration information. Operational information that is not relevant to the configuration of the network device may be filtered out. The remaining operational information may be ranked as KPIs based on a relevance of the operational information with respect to the configuration information.

Abstract: Techniques for authenticating and enforcing differentiated policies for a virtual machine (VM) executing in bridge mode on a wireless host device in a media access control (MAC)-based authentication network are described. In an example method a wireless host device is authorized to join a fabric enabled wireless network. A VM executes in bridge mode on the wireless host device. At the fabric edge, a source MAC address of the VM is determined. A session is created between the VM and an authentication server. The VM is authenticated. A policy for the VM is determined. A source internet protocol (IP) address is assigned to the VM to create a MAC-IP binding. A data-plane device in the fabric enabled wireless network is programmed to apply the policy to traffic communicated with the VM. Finally, the data-plane device applies the policy for the VM based at least in part on the MAC-IP binding.

Abstract: In one embodiment, a first networking device in a network coordinates, with a second networking device in the network, capture of packet maps for a traffic flow in the network associated with a particular application. The packet maps comprise multi-dimensional histograms indexed by identified properties of packets of the traffic flow and time. The first networking device inspects packets of the traffic flow, to identify properties of packets of the traffic flow. The first networking device generates a first packet map for the traffic flow based on the properties of the packets of the traffic flow identified by the first networking device. The first networking device causes a comparison between the first packet map and a second packet map generated by the second networking device to be used as a measure of application experience for the particular application.

Abstract: A method is provided for avoiding context transfers by a first Access and Mobility Management Function (AMF) connected to a first gNB to a second AMF when a user equipment (UE) in idle mode moves from the first gNB to a second gNB. The method may include provisioning the first AMF and the second AMF with the same tracking area identity (TAI), the first AMF and the second AMF s being connected to a respective enterprise gNB. The method may also include configuring the 5G packet core network comprising a session management function (SMF) in communications with the first AMF and the second AMF, to avoid transferring a UE context from the first AMF to the second AMF when the user equipment (UE) in the idle mode moves from a first AMF to the second AMF. The UE context remains with the first AMF.

Abstract: A backscatter communication device assistant may be provided. A computing device may designate a client device as a backscatter communication device assistant. Next, a report indicating a location of a backscatter communication device may be received from the backscatter communication device assistant. Then the backscatter communication device may be caused to receive energy. Data originating from the backscatter communication device may then be received.

Abstract: Signal to Interference and Noise Ratio (SINR) estimation, and more specifically providing SINR estimation during Legacy Long Training Field (LLTF) accounting for Inter Symbol Interference (ISI) may be provided. SINR estimation may include receiving a Physical Layer Protocol Data Unit (PPDU) including a LLTF and extracting groups of transmission symbols from the LLTF. Next, groups of fragmented symbols may the groups of transmission symbols. One or more Sum of the Squared Magnitudes (SSM) may be determined, such as an SSM of the total signal, an SSM of the signal without ISI and/or noise, an SSM of ISI, an SSM of noise. Finally, SINR may be estimated using one or more SSMs (e.g., the SSM of noise, the SSM of signal, and the SSM of ISI).

Abstract: The automatic determination of components for Time Sensitive Networking (TSN), and more specifically the automatic determination of the Gate Duration (GD) and Guard Band (GB) for TSN may be provided. To determine the GB and/or GD for a TSN gate, a Time Error (TE) may be determined, and TSN components may be received. An Access Category (AC) and a per-AC Enhanced Distributed Channel Access (EDCA) state may be determined using the TID, wherein the per-AC EDCA includes a Contention Window (CW) minimum. Next, an Arbitration Interframe Space Number (AIFSN) of an upcoming data unit is determined using the using the AC and per-AC EDCA. The GB may be determined based on the AIFSN, the CW minimum, and the TE. The Gate Duration (GD) may be determined based on the TE and calculating a number of symbols in a MAC Protocol Data Unit (MPDU) and the upcoming data unit.

Abstract: In one embodiment, a device obtains application data captured by an intermediate node in a network by inserting monitoring code into traffic associated with one or more online applications accessible via the network. The device identifies, based on the application data, a workflow of actions performed by a user of the one or more online applications. The device determines that a particular stage of the workflow is associated with a quality of experience metric for the one or more online applications being degraded. The device provides a recommended change in the network for presentation by a user interface that is expected to optimize the quality of experience metric for the one or more online applications.

Abstract: In one embodiment, a method comprises: receiving, by a process, an executed function flow of a daisy chained serverless function-as-a-service (FaaS) function, the executed function flow having been injected with a particular trace identifier in response to an initial event trigger and span identifiers having been injected by each service that was executed; generating, by the process, a serverless flow graph associated with the particular trace identifier based on linking a path of serverless functions according to correlation of the span identifiers between the serverless functions; performing, by the process, a trace-based analysis of the serverless flow graph through comparison to a baseline of expectation; detecting, by the process, one or more anomalies in the serverless flow graph according to the trace-based analysis; and mitigating, by the process, the one or more anomalies in the serverless flow graph.

Abstract: In one embodiment, a method includes applying Forward Error Correction (FEC) to data at power sourcing equipment, transmitting the data and pulse power over a wire pair to a powered device, identifying data transmitted during power transitions between a pulse power on time and a pulse power off time in the pulse power at the powered device, and applying FEC decoding to at least a portion of the data based on said identified power transitions.