Abstract: In one embodiment, an apparatus includes a chassis base, a printed circuit board mounted on the chassis base, a heatsink positioned over the printed circuit board to prevent corrosion of components on the printed circuit board, wherein the heatsink comprises a plurality of upward extending fins and a plurality of downward extending walls, a seal interposed between an edge of the downward extending walls and the chassis base, and a cover extending over the heatsink.

Abstract: In one embodiment, a telemetry exporter in a network establishes a tunnel between the telemetry exporter and a traffic analysis service. The telemetry exporter obtains packet copies of a plurality of packets sent between devices via the network. The telemetry exporter forms a set of traffic telemetry data by discarding at least a portion of one or more of the packet copies, based on a filter policy. The telemetry exporter applies compression to the formed set of traffic telemetry data. The telemetry exporter sends, via the tunnel, the compressed set of traffic telemetry data to the traffic analysis service for analysis.

Abstract: Providing for time sensitive networking (TSN) traffic in high density deployments is described. An access point (AP) is a high density deployment receives a message identifying another AP as a TSN neighbor and also detects a TSN device within an area covered by the APs. This arrangement may cause traffic interruptions for the TSN traffic between the TSN device and the APs. In order to prevent disruption in TSN traffic, a TSN time slot and a resource unit (RU) is determined for each of the APs, and the TSN traffic is communicated between the various devices in network according to the determined TSN time slot and RU.

Abstract: Techniques for identifying one or more wireless access points (APs), from among a plurality of APs including 6 GHz radios, as candidates to operate in standard power indoor (SPI) mode. Identification is based on at least one of: determining that network switches associated with the wireless APs meet a threshold requirement relating to power over ethernet (PoE) for operating in SPI mode, determining, based on at least one of radio frequency (RF) density and channel quality relating to the plurality of APs, that the one or more APs should operate in SPI mode as opposed to lower power indoor (LPI) mode, and determining that operating the one or more APs in SPI mode improves quality of service (QoS) metrics for the plurality of APs as opposed to operating the one or more APs in LPI mode. The one or more wireless APs are configured to operate in SPI mode.

Abstract: In one embodiment, a device trains, using feedback from a reference cohort of users of an online application, a prediction model to predict a quality of experience metric for the online application based on network telemetry. The device uses the prediction model to predict quality of experience metrics for different cohorts of users of the online application. The device makes one or more comparisons between performance metrics for the prediction model for the different cohorts of users, based on the quality of experience metrics predicted for the different cohorts of users. The device retrains, based on the one or more comparisons, the prediction model using feedback from the reference cohort and a particular cohort from among the different cohorts of users.

Abstract: Stateless network address privacy may be provided. A data packing may be received with an obfuscated destination address and an un-obfuscated source address. An un-obfuscated destination address may be determined based on the obfuscated destination address. An obfuscated source address may be determined based on the un-obfuscated source address. The obfuscated destination address may be replaced with the un-obfuscated destination address and the un-obfuscated source address may be replaced with the obfuscated source address. The packet may be forwarded.

Abstract: A method of creating a root-of-trust (RoT) within a network fabric may include powering on a network interface card (NIC) baseboard management controller (BMC) (NIC BMC), booting up a NIC via the NIC BMC, obtaining an address for the NIC, verifying an identity of the NIC at a fabric trust identity server using a key obtained from a secure vault communicatively coupled to the NIC BMC, verifying with the fabric trust identity server a number of images of a host device residing in the NIC based at least in part on the identity of the NIC being verified, and instructing a platform BMC to boot up the host device based at least in part on the number of images of the host device being verified.

Abstract: Techniques for maintaining geographic-based data privacy rules in networked environments. An example method includes receiving a request from a user device; generating, based on the request, a query for data associated with fulfilling the request; transmitting, to a data controller, the query; transmitting, to the data controller, an indication of a geographic region in which at least one device implementing the entity is located; and receiving, from the data controller, a portion of the data associated with fulfilling the request.

Abstract: Techniques are provided for an “on demand” or event-triggered end user monitoring/remote user monitoring (EUM/RUM) solution that is activated when the user has requested it, or an event (conditions of which are set by a user) occurs that triggers activation of the EUM/RUM solution. This EUM/RUM may be completely integrated into an enterprise IT Help Desk system, whereby support “tickets” are automatically generated when the monitoring solution is instantiated.

Abstract: The present disclosure provides for process and temperature compensation in a transimpedance amplifier (TIA) using a dual replica via monitoring an output of a first TIA (transimpedance amplifier) and a second TIA; configuring a first gain level of the first TIA based on a feedback resistance and a reference current applied at an input to the first TIA; configuring a second gain level of the second TIA and a third TIA based on a control voltage; and amplifying a received electrical current to generate an output voltage using the third TIA according to the second gain level. In some embodiments, one or both of the second TIA and the third TIA include a configurable feedback impedance used in compensating for changes in the second gain level due to a temperature of the respective second or third TIA via the configurable feedback impedance of the respective second or third TIA.

Abstract: A method includes configuring serving cells for UE, the serving cells including at least six serving cells configurable for the UE; receiving PUCCH format configuration information for transmitting uplink control information associated with the configured serving cells, the PUCCH format configuration information including configuration information of PUCCH format 4; determining a total number of HARQ-ACK bits, SR bits, and periodic CSI bits to be transmitted in a subframe; selecting, at least based on the determined total number, a PUCCH format to transmit at least one of HARQ-ACK, SR, and periodic CSI, the selected PUCCH format being one of PUCCH formats including the PUCCH format 4 and PUCCH format 3; and transmitting the uplink control information associated with the configured serving cells in the subframe using the selected PUCCH format, the uplink control information associated with the configured serving cells including the at least one of HARQ-ACK, SR, and periodic CSI.

Abstract: In various embodiments, a device obtains a set of device classification rules. Each device classification rule specifies one or more attributes from a set of attributes and being configured to assign a device type to an endpoint in a network when the endpoint exhibits the one or more attributes specified by that rule. The device forms a graphical representation of the set of attributes. The device performs an analysis of the graphical representation of the set of attributes. The device provides a result of the analysis to a user interface.

Abstract: Presented herein are techniques for a non-intruding auto quoting feature on-the-fly for chat applications based on previous conversations and effectively forking/quoting such conversations to ease the burden of the user going through all the chat history. The techniques may involve monitoring an ongoing first text communication session between a first user and at least one second user; detecting one or more salient words or phrases in the first text communication session based on the monitoring; based on the one or more salient words or phrases, identifying a second text communication session that is topically related to the first text communication session; and displaying in a user interface presented to the first user a prompt to quote relevant content from the second text communication session into the first text communication session or to fork the first user to be a participant in the second text communication session.

Abstract: This disclosure describes techniques for controlling group access to a collaboration technology. The techniques include generating a shared encryption key among authorized producers of content associated with a collaboration technology. The techniques include receiving, by the authorized producers and from authenticated consumers, requests to access the content. The requests may be received in a partitioned manner, such that individual producers are serving a particular subset of the authenticated consumers. In response to receiving the requests, the techniques include sending the shared encryption key from the individual producers to the corresponding subset of authenticated consumers. The techniques include using the shared encryption key to encrypt content by the authorized producers, which may then be decrypted by the authenticated consumers using the shared encryption key, achieving end-to-end encryption of event content.

Abstract: Presented herein are methodologies in which packets or events are selected statistically to update a counter of a network device. The updated value that is stored in the counter also reflects a number of packets (or corresponding bytes) that were not selected to update the counter. The methodology includes receiving, at a network device, a first packet followed by a second packet, probabilistically selecting the second packet to update a value of a counter of the network device while probabilistically not selecting the first packet to update the value of the counter, and updating the value of the counter to account for both the first packet and the second packet.

Abstract: In one embodiment, an illustrative method herein may comprise: listening, by an agent process, to a discovery-based execution of an application; determining, by the agent process, a plurality of transition locations during the discovery-based execution of the application; recording, by the agent process, the plurality of transition locations into a recorded file; and providing, by the agent process, the recorded file to cause injection of instrumentation into the plurality of transition locations during runtime of the application based on the recorded file.

Abstract: Dynamic Open Radio Access Network Radio Unit (O-RU) sharing between multiple tenant Open RAN Distributed Units (O-DU) may be provided. A Near Real Time RAN Intelligent Controller (nRT-RIC) may receive tenant policies for a first tenant and a second tenant. The nRT-RIC may then determine initial sharing templates for the first tenant and the second tenant based on the tenant policies. The nRT-RIC may send the initial sharing templates to a first tenant Distributed Unit (DU) and a second tenant DU. The nRT-RIC may receive operating metrics from the first tenant DU and the second tenant DU. The nRT-RIC may then determine operational factors based on the operating metrics. The nRT-RIC may alter an allocation of resources between the first tenant and the second tenant based on the operational factors. Finally, the nRT-RIC may send the altered allocation of resources to the first tenant DU and the second tenant DU.

Abstract: In one embodiment, a first path computation element (PCE) receives a request from a gateway for service chain functions (SFs) to be applied to a traffic flow, wherein a first subset of the SFs is located in a first zone. The first PCE identifies a boundary node located at a border between the first zone and a second zone where a second subset of the SFs are located. The first PCE sends a response to the gateway indicating a path within the first zone between the gateway and the boundary node to apply the first subset of SFs to the flow. The first PCE provides information regarding the flow and the boundary node to a second PCE that uses the information to configure the boundary node to route the flow in the second zone to apply the second subset of SFs to the flow.

Abstract: In one embodiment, a first deep fusion reasoning engine (DFRE) agent in a network receives first sensor data from a first set of one or more sensors in the network. The first DFRE agent translates the first sensor data into symbolic data. The first DFRE agent applies, using a symbolic knowledge base maintained by the first DFRE agent, symbolic reasoning to the symbolic data to make an inference regarding the first sensor data. The first DFRE agent updates, based on the inference regarding the first sensor data, the knowledge base. The first DFRE agent propagates the inference to one or more other DFRE agents in the network.

Abstract: Techniques for tunneling Layer 2 ethernet frames over a connection tunnel using the MASQUE protocol are described herein. The MASQUE protocol may be extended to include a new entity, configured to proxy ethernet frames using a MASQUE proxy connection, and an associated CONNECT method, CONNECT-ETH. Using the extended MASQUE protocol, an Ethernet over MASQUE (EoMASQUE) tunnel may then be established between various networks that are remote from one another and connected to the internet. An EoMASQUE tunnel, established between separate remote client premises, and/or between a remote client premise and an enterprise premise, may tunnel ethernet packets between the endpoints. Additionally, a first EoMASQUE tunnel, established between a first client router provisioned in a first remote client premise and an EoMASQUE proxy node, and a second EoMASQUE tunnel, established between a second client premise and the EoMASQUE proxy node, may tunnel ethernet packets between the first and second client premise.