Abstract: A network function selectively supports a mobile device with network settings appropriate for the device context of the mobile device. The network function obtains a device profile for the mobile device, which identifies multiple device groups, with each device group being associated with a corresponding set of network settings. The network function selects a device group among the device groups in the device profile based on a device context of the mobile device. Responsive to a notification of the mobile device in a different device context, the network function supports the mobile device with a different set of network settings that cause a Session Management Function (SMF) to reconfigure the user plane for the mobile device.

Abstract: According to certain embodiments, a message bus system comprises a first client and a second client. The first client is configured to publish messages associated with a message topic to a message bus, and the second client is configured to receive the messages associated with the message topic from the message bus. The message bus system is configured to unsubscribe the second client from the message topic based at least in part on determining that a demand of the second client for the messages associated with the message topic has fallen below a threshold.

Abstract: In one embodiment, an apparatus includes a module receivable in a modular electronic system, arms extending from a front panel of the module, and a cable support bracket connected to the arms. The cable support bracket is slidably connected to the arms to change a distance between the cable support bracket and the front panel of the module.

Abstract: In one embodiment, a device maintains a metamodel that describes a monitored system. The metamodel comprises a plurality of layers ranging from a sub-symbolic space to a symbolic space. The device tracks updates to the metamodel over time. The device updates the metamodel based in part on sub-symbolic time series data generated by the monitored system. The device receives, from a learning agent, a request for the updates to a particular layer of the metamodel associated with a specified time period. The device provides, to the learning agent, data indicative of one or more updates to the particular layer of the metamodel associated with the specified time period.

Abstract: Techniques for extending network elements to inspect, extract, and complement tracing information added to L7 flows by application distributed tracing systems. The techniques may include receiving a Layer-7 (L7) message of an L7 flow associated with a distributed application and determining that the L7 message includes tracing information. In some examples, the tracing information may be mapped to a marking that is to be included in a Layer 3 (L3) or Layer-4 (L4) packet carrying the L7 message, and the L3 or L4 packet including the marking may be sent to an L3 or L4 network element. In some examples, the L3 or L4 network element may be configured to utilize the marking to determine a network decision for the L3 or L4 packet.

Abstract: In one embodiment, a method includes receiving, by a mobile edge computing (MEC) controller and from an application analytic engine, a registration request for an application. The registration request includes a request for MEC key performance indicators (KPIs). The method also includes communicating, by the MEC controller, MEC data associated with a first MEC host and a second MEC host to the application analytic engine. The method further includes receiving, by the MEC controller, MEC policies from the application analytic engine, determining to host the application in the first MEC host based on the MEC policies, and communicating the MEC policies to the first MEC host.

Abstract: A system and method for authenticating a user via a single voice audio input is disclosed. The method includes obtaining voice audio from a user, converting the voice audio to text, comparing at least a portion of the text to a database, determining whether a user profile exists in the database based on the comparing, the user profile including a voiceprint, in response to determining that the user profile exists in the database, analyzing the voice audio against the voiceprint of the user profile; and authenticating the user based on the voice audio substantially matching the voiceprint of the user profile.

Abstract: Techniques for testing connectivity between a first integrated circuit (IC) and a second IC of an electronics package are described. An example technique involves controlling a switch(es) in the first IC to configure a bias direction of a photodiode of the second IC to forward biased. A connectivity test between the first and second ICs is performed, when the photodiode is forward biased. Another technique involves controlling a switch(es) in the first IC to configure a bias direction of a photodiode in the second IC to reverse biased. A first voltage is measured at an input of a transimpedance amplifier (TIA) in the first IC when the photodiode is reverse biased. The switch(es) are controlled to change the bias direction of the photodiode to forward biased. A second voltage is measured at the input of the TIA when the photodiode is forward biased.

Abstract: Embodiments herein describe mounting one or more lasers onto an AP to generate a laser pattern on a surface representing the coverage area of an antenna in the AP. In one embodiment, the antenna is a steerable antenna that can be electronically or mechanical steered to point to different directions (without moving the AP as a whole). The laser or lasers can be used to visualize the coverage area of the steerable antenna when pointing in different directions. Advantageously, a technician can use the laser or lasers to identify a location where, if steered, the antenna would provide the desired coverage area. The technician can then steer the antenna to point in that direction to provide the desired radio frequency (RF) coverage.

Abstract: According to one or more embodiments of the disclosure, an example method herein may comprise: managing a particular cell of a multi-celled architecture for an extensibility platform having one or more tenants served by datastores of the particular cell; connecting to a global cell manager for global cell management of all cells of the multi-celled architecture; identifying a consumption limit indicating a maximum amount of system resources that a particular tenant of the one or more tenants is allowed to consume of the particular cell; enforcing the consumption limit on the particular tenant; and ensuring that the particular tenant is provided system resources of the particular cell up to the consumption limit without limitation.

Abstract: Techniques for informing a network of an application's service-level agreement (SLA) objective(s) so the network can ensure the SLA is met end-to-end, thereby allowing core network support of deterministic SLA and application-based routing without using network-based application recognition (NBAR) and/or compromising user privacy. The techniques may include receiving a first connection request to establish a network-domain connection between different network domains that meets or exceeds a service level objective. Based on the first connection request, the network-domain connection may be established between the different network domains to meet or exceed the service-level objective. In some examples, a second connection request may be received to establish a tunnel between a source application and a destination application, which are disposed in the different network domains.

Abstract: In one embodiment, a device identifies a plurality of paths between a pair of network addresses, wherein one of the pair of network addresses is associated with an online application. The device obtains telemetry data from the plurality of paths for the online application. The device computes, based on the telemetry data, fate sharing metrics for the plurality of paths. The device controls routing of application traffic between the pair of network addresses, based on the fate sharing metrics for the plurality of paths.

Abstract: Improved granularity of Coordination Groups (CGs) using sectorization may be provided. A plurality of sectors around a plurality of Access Points (APs) may be determined. Then, for each of the plurality of APs, it may be determined which sector client devices associated with each of the plurality of APs are in. Next, each of the plurality of APs may be caused to transmit to client devices in a first one of the plurality of sectors.

Abstract: Techniques for load balancing communication sessions in a networked computing environment are described herein. The techniques may include establishing a first communication session between a client device and a first computing resource of a networked computing environment. Additionally, the techniques may include storing, in a data store, data indicating that the first communication session is associated with the first computing resource. The techniques may further include receiving, at a second computing resource of the networked computing environment, traffic associated with a second communication session that was sent by the client device, and based at least in part on accessing the data stored in the data store, establishing a traffic redirect such that the traffic and additional traffic associated with the second communication session is sent from the second computing resource to the first computing resource.

Abstract: Techniques for dynamic routing based on application load are described herein. The techniques may include receiving load information associated with resources of an application orchestration system that are allocated to host an application, the resources associated with different geographical regions. Based at least in part on the load information, a network controller may determine that first resources of the application orchestration system are less constrained than second resources of the application orchestration system, the first resources associated with a first geographical region and the second resources associated with a second geographical region. Based at least in part on the first resources being less constrained than the second resources, application traffic may be routed through the network to the application hosted by the first resources in the first geographical region.

Abstract: According to an embodiment, a system comprises one or more processors and one or more computer-readable non-transitory storage media comprising instructions that, when executed by the one or more processors, cause one or more components of the system to perform operations. The operations comprise determining that an endpoint device has requested to discover a location of a protected resource that is protected by a gateway, determining whether the endpoint device has provided a token that is valid, and permitting the endpoint device to discover the location of the protected resource based on determining that the endpoint device has provided the token that is valid. The token indicates that the endpoint device successfully completed a first multi-factor authentication procedure in connection with accessing an authentication enforcement resource.

Abstract: Embodiments described herein improve availability of a power plane in a network device by using a PoE manager that is separate from an operating system in the network device. For example, when the operating system (or a PoE application executing in the operating system) becomes unavailable, either because of failure or system upgrade, the PoE manager continues managing a power plane in the network device such that connected PDs continue to receive DC power. Stated differently, by using a PoE manager that is separate from the operating system, there is no fate sharing between the PoE manager and the operating system. If the operating system is unavailable, the PoE manager continues to provide the same power allotment to the PDs. As such, updates and failures which previously made the power plane unavailable no longer affect the power supplied to the PDs.

Abstract: Techniques and mechanisms for a control plane approach for dense topologies that focusses on discovering shared ECMP groups in the control plane independent of per-prefix learning and then learning prefixes via these shared ECMP groups instead of learning prefixes via one next-hop at a time. In dense topologies, this approach helps minimize BGP path scale, corresponding signaling and enables control plane scaling that is an order of magnitude higher than a traditional eBGP control plane. During link and node topology changes, the described control plane approach enables control plane signaling that is prefix independent and an order of magnitude lower. A control plane approach to path-list sharing and prefix independent signaling on link and node topology changes enables prefix independent convergence (PIC) in scenarios that would not be possible otherwise with traditional FIB driven path-list sharing and PIC.

Abstract: Secure network segmentation using logical subnet segments is described. A single network segment or subnet provided by a third party is mapped into multiple layer-3 virtual or logical segments without requiring separate subnets. This mapping is accomplished by using virtual routing functions (VRFs) per logical subnet segment while retaining a single subnet across the segments. The logical subnet segments interact with the single network segment provided by the third party (ISP). The layer-3 VRF instances are created without the need for separate IP subnet pools per layer-3 segment. Each VRF instance for the various logical subnet segments is mapped to an identifier and tag.

Abstract: This disclosure describes techniques for policy validation techniques relating to data traffic routing among network devices. The techniques may include processing a validation request from a controller. A validation request may include information related to a computed path for routing data traffic in a computing network. The processing may include sending one or more path requests to one or more redundant controllers, and comparing computed paths from the redundant controller(s) to the originally computed path. The techniques may include generating a validation response based on comparing the computed paths. In some examples, the techniques may further include determining a health score for the controller. Policy validation techniques may improve data traffic routing among network devices by helping to ensure valid policies are produced.