Abstract: Presented herein are techniques to manage optical network infrastructure. A method includes inducing a predetermined vibration on a fiber optic cable, the predetermined vibration being sufficient to cause a change to at least one of a state of polarization and a phase of optical signals being carried by respective optical fibers in the fiber optic cable, detecting, at a first endpoint, using a first coherent optical receiver, and at a second endpoint, using a second coherent optical receiver, the change to the at least one of the state of polarization and the phase of the optical signals, and based on the detecting, determining that the first endpoint and the second endpoint are connected to, or in communication with, one another via at least one finer in the fiber optic cable.

Abstract: In one embodiment, a data sharing platform performs a series of data operations to provide different types of data via different sharing services of the data sharing platform that are derived from data shared by a particular data owner. The data sharing platform generates tag data associated with the particular data owner for one or more of the series of data operations. The data sharing platform determines, based on the tag data, an attribution chain that links the data shared by the particular data owner to the different types of data provided via the different sharing services. The data sharing platform sends an indication of the attribution chain for display.

Abstract: In one embodiment, a router includes one or more processors and one or more computer-readable non-transitory storage media coupled to the one or more processors. The one or more computer-readable non-transitory storage media include instructions that, when executed by the one or more processors, cause the router to perform operations including receiving software-defined networking in a wide area network (SD-WAN) policies from a component of an SD-WAN network. The operations also include establishing a session with a mobile device and receiving information associated with the mobile device in response to establishing the session with the mobile device. The operations further include filtering the SD-WAN policies based on the information associated with the mobile device to generate SD-WAN device-specific policies and communicating the SD-WAN device-specific policies to the mobile device.

Abstract: Techniques for using computer networking protocol extensions to route control-plane traffic and data-plane traffic associated with a common application are described herein. For instance, a traffic flow associated with an application may be established such that control-plane traffic is sent to a control-plane node associated with the application and data-plane traffic is sent to a data-plane node associated with the application. When a client device sends an authentication request to connect to the application, the control-plane node may send an indication of a hostname to be used by the client device to send data-plane traffic to the data-node. As such, when a packet including the hostname corresponding with the data-plane node is received, the packet may be forwarded to the data-plane node.

Abstract: Techniques for policy-based failure handling of data that is received for processing by failed edge services are described herein. The techniques may include receiving, at an edge node of a network, a data handling policy for a service hosted on the edge node. The service may be configured to process traffic on behalf of an application hosted by a cloud-based platform. In some examples, the data handling policy may be stored in a memory that is accessible to the edge node. The techniques may also include receiving traffic at the edge node that is to be processed at least partially by the service. At least partially responsive to detecting an error associated with the service, the edge node may cause the traffic to be handled according to the data handling policy while the service is experiencing the error.

Abstract: An enterprise controller of an enterprise network sends to a service gateway of a service provider network a request for network slice information about network slices provisioned on a data plane of the service provider network. Responsive to the sending, the enterprise controller receives from the service gateway the network slice information including identifiers of and properties associated with the network slices. Responsive to receiving a request for the network slice information from a network device at a border of a forwarding plane of the enterprise network, the enterprise controller sends the network slice information to the network device to cause the network device to perform configuring network traffic in the forwarding plane with identifiers of ones of the network slices that match the network traffic, and to perform forwarding the network traffic configured with the identifiers to the data plane of the service provider network.

Abstract: This disclosure describes techniques for enabling selective connections between user devices and trusted network devices. An example method includes receiving a beacon from a network device. The beacon includes a trust level of the network device. The method further includes determining that the trust level of the network device satisfies a predetermined trust criterion. Based on determining that the trust level of the network device satisfies the predetermined trust criterion, the method includes transmitting a connection request to the network device. Further, user data is received from the network device.

Abstract: A method of supporting a buffer status report (BSR) associated with a device-to-device (D2D) communication includes: establishing a radio resource control (RRC) connection with an evolved NodeB (eNB) and receiving configuration information associated with a D2D communication from the eNB, the configuration information including information of a resource allocation mode for a D2D data transmission and information of a timer associated with a BSR for a D2D data transmission; determining, by a user equipment (UE), a radio link failure (RLF), the RLF being associated with a connection problem of the RRC connection; initializing a re-establishment process for the RRC connection; canceling all BSRs for a D2D data transmission in response to the determined RLF, the canceled BSRs for a D2D data transmission being associated with a D2D data transmission scheduled by the eNB; and initializing the timer associated with a BSR for a D2D data transmission.

Abstract: Described herein are devices, systems, methods, and processes for managing power congestion in multi-path routing systems. Indications may be similar to the ECN, and may be used in network headers, including headers for IPv6, SRv6, NSH, or other tunneling protocols. The indications, namely EOPN, PTE, and ECMP-exclude, can provide a mechanism for managing network power consumption and controlling ECMP routing based on flow priority and characteristics. The power budget can be dynamically adjusted based on the current power source mix, which may help to achieve sustainability goals. Hashing optimizations and signaling can be utilized to manage network power congestion and bandwidth-normalized power efficiency availability. A process may be implemented to ensure there is sufficient capacity to serve the expected traffic for different next-hop paths.

Abstract: Presented herein are systems and methods that allow for dynamic tracking of changes made by an interacting participant. The non-interacting participants follow the changes made by the interacting participant but maintain the ability to take control of their viewport. The systems and methods introduce the concept of an area of interest (AOI), which is a region of the canvas that contains changes or modifications. The AOI relies on a notion of an active user. An active user is a participant that performs an action on the whiteboard. In order for the other participants to view and be aware of changes made to the whiteboard by the active user, the viewport of each device is automatically mapped to contain the AOI.

Abstract: Techniques for managing access control policies are described herein. According to one embodiment, access control policies (ACPs) and access control rules (ACRs) are downloaded from a management server to a network access device (NAD) over the Internet, where the network access device is one of a plurality of network access devices managed by the management server over the Internet. In response to a request from a network client device for entering a network, a device type of the network client device is detected and an ACP identifier is determined based on the device type using the ACRs An ACP is selected from the ACPs based on the ACP identifier and enforced against the network client device. At least the selected ACP is reported to the management server to distribute the selected ACP to other network access devices.

Abstract: Presented herein are techniques to generate a stereo sound signal based on direction of arrival of sound signals. A method includes receiving sound signals at a microphone, outputting a mono sound signal from the microphone, determining a direction of arrival of the sound signals with respect to the microphone, generating, from the mono audio signal, a stereo sound signal having a first channel and a second channel, wherein an amplitude of the first channel and an amplitude of the second channel are weighted, respectively, based on the direction of arrival of the sound signals at the microphone.

Abstract: A system and method for providing end-to-end data flow analytics in a network flow that includes network appliances. Information regarding one or more network appliances is received by a flow collector and analyzed by an enrichment module. The network information regarding the one or more network appliances can be stored. Network flow data is received from various nodes within the network and stitched or aggregated in light of the enriched network appliance information to provide an end-to-end data flow that can be useful to understand one or more performance parameters of the unified network flow.

Abstract: In one embodiment, a method for user performance journey monitoring is disclosed. The method illustratively comprises receiving, by a process, user journey information associated with an application and a plurality of application end users, the user journey information indicative of navigation paths of the application end users among a plurality of nodes configured to perform at least a part of the application; receiving, by the process, performance metric information indicative of performance of the plurality of nodes configured to perform at least the part of the application; correlating, by the process, the user journey information with the performance metric information based on one or more query criteria; and storing, by the process, the correlated user journey information and performance metric information in an application end user journey database indexed by the one or more query criteria.

Abstract: Presented herein are techniques to facilitate fast roaming between a mobile network operator-public (MNO-public) wireless wide area (WWA) access network and an enterprise private WWA access network. In one example, a method is provided that may include generating, by an authentication node, authentication material for a user equipment (UE) based on the UE being connected to a public WWA access network, wherein the public WWA access network is associated with a mobile network operator, and the authentication node and the UE are associated with an enterprise entity; obtaining, by the authentication node, an indication that the UE is attempting to access a private WWA access network associated with the enterprise entity; and providing, by the authentication node, the authentication material for the UE, wherein the authentication material facilitates connection establishment between the UE and the private WWA access network.

Abstract: In one embodiment, a device makes a determination that user application experience is degraded for a client endpoint of an online application due to a current path in a network that conveys application traffic associated with the online application. A device identifies a bypass path in the network for the application traffic. The device provisions an optimization gateway along the bypass path to forward the application traffic from the client endpoint to the online application. The device causes an endpoint agent executed by the client endpoint to send the application traffic to the optimization gateway for forwarding to the online application via the bypass path.

Abstract: Solder reflow compatible connections between optical components are provided by use of reflow compatible epoxies to bond optical components and remain bonded between the optical components at temperatures of at least 260 degrees Celsius for at least five minutes. In some embodiments, the reflow compatible epoxy is index matched to the optical channels in the optical components and is disposed in the light path therebetween. In some embodiments, a light path is defined between the optical channels through at least a portion of an air gap between the optical components.

Abstract: Techniques and architecture are described for determining an identity of a client device and utilizing security policies associated with the client device provided by a device identity entity. For example, a tag associated with security policies is created for use in enforcing the security policies by a security policy enforcement entity associated with a cloud network. The techniques and architecture also allow for identification of a particular user on a client device that may be shared by multiple users based at least in part on the user accessing an application. Also, the techniques and architecture described herein provide a generic and agnostic approach to enforcing security policies for users and/or client devices.

Abstract: Presented herein is a system, device and method that involve creating a policy model and policy rule structure for a policy enforcement point to support policies adapt to rapid changing external conditions in addition to traditional policies that are static. The system facilitates the use of attributes that are either or both dynamically (at run-time) created and/or defined as ephemeral. A new policy attribute may be created dynamically (at run-time). The policy attribute may be mapped as being static or ephemeral. The methodology further involves facilitating evaluation of an attribute as an atomic or programmed set of functions.

Abstract: A method of implementing controller-based distributed remote access may include connecting a plurality of edge devices to a controller via a network. The plurality of edge devices may perform hole punching to traverse a network address translation (NAT) gateway to create a NAT hole. The method may also include connecting a client device to the controller. The client device may be directly connected to one of the plurality of edge devices via the NAT hole in the network. The method may further include directly connecting the client device to one of the plurality of edge devices by receiving a query from the client device and returning public IP/ports of a most relevant edge device to the client device, the most relevant edge device being based on attributes of the client device, attributes of the plurality of edge devices, or combinations thereof.