Abstract: Techniques for enabling a network access provider to make automatic Software as a Service (SaaS) optimization decisions. Among other things, the techniques may include determining a SaaS application that is being accessed by client endpoints via flows through a network access provider. The techniques may also include determining, based at least in part on a policy associated with the network access provider, whether to enable network optimizations for traffic through the network access provider to the SaaS application. Based at least in part on a determination that the network optimizations are to be enabled for the traffic to the SaaS application, the techniques may include installing a service definition associated with the SaaS application in a service policy database of the network access provider.

Abstract: A system includes a first device and a second device. The first device generates a source optical signal using a first optical signal and a polarization splitter-rotator. The second device modulates the source optical signal from the first device using a first data signal to produce a first modulated optical signal. The first modulated optical signal has a polarization that is orthogonal to a polarization of the source optical signal. The first device recovers the first data signal from the first modulated optical signal using at least the polarization splitter-rotator.

Abstract: Techniques for managing migrations of QUIC connection session(s) across proxy nodes, data centers, and/or private application nodes are described herein. A global key-value datastore, accessible by proxy nodes and/or application nodes, may store mappings between a first QUIC connection, associated with a proxy node and a client device, on the frontend of the proxy node and a second QUIC connection, associated with the proxy node and an application node, on the backend of the proxy node. With the global key-value datastore being accessible by the proxy nodes, when a proxy node receives a QUIC packet on the front end or the back end, the proxy node may determine where to map this connection to on the opposite end. Additionally, with the global key-value datastore being accessible to the application nodes, when an application node receives a QUIC packet, the application node may determine the client device associated with the connection.

Abstract: Aspects of the disclosure include a method and associated network device. The method includes authenticating an identity of a user of a client device after the client device is associated with an access network provider. Authenticating the identity of the user comprises receiving, from an identity provider, a credential associated with the identity, and receiving, from the identity provider, information identifying a network-based service to be applied to network traffic with the client device. The method further includes establishing, using the credential and the received information, a secure connection between the access network provider and a service provider that is capable of providing the network-based service. The method further includes receiving network traffic from the service provider. Packets of the network traffic include an assurance value that enables the client device to determine that the network-based service is being provided by the service provider.

Abstract: An approach to automatically provision a data service name (APN or DNN) when an endpoint device connects to a mobile network is described. A methodology includes receiving from an endpoint device a first request to connect to a mobile network, the first request including an identifier of the endpoint device and a default data service name, responsive to detecting the default data service name, determining, from the identifier of the endpoint device, a group to which the endpoint device belongs along with a corresponding group identifier for the group, querying a repository with the group identifier, and receiving, in response, an assigned data service name that is associated with the group identifier, providing the assigned data service name to the endpoint device, and receiving from the endpoint device a second request to connect to the mobile network, the second request including the assigned data service name.

Abstract: Methods and apparatuses for prioritizing transactions are disclosed. An example method of an application performance monitor (APM) comprises intercepting a first packet being transmitted in a network that is monitored by the APM; determining that the first packet is associated with a transaction of the web application that is to be provided with an alternate level of service; modifying a field in the first packet to include metadata interpretable by at least one network device in the network to cause the at least one network device to provide the alternate level of service; and injecting the first packet into the network. The APM may cause network devices to prioritize a specific transaction of an application based on importance.

Abstract: A method provides for receiving network traffic from a host having a host IP address and operating in a data center, and analyzing a malware tracker for IP addresses of hosts having been infected by a malware to yield an analysis. When the analysis indicates that the host IP address has been used to communicate with an external host infected by the malware to yield an indication, the method includes assigning a reputation score, based on the indication, to the host. The method can further include applying a conditional policy associated with using the host based on the reputation score. The reputation score can include a reduced reputation score from a previous reputation score for the host.

Abstract: Improved Radio Frequency (RF) performance by optimizing temperature may be provided. A plurality of heatmaps may be created associating a plurality of component heat characteristics, of a plurality of components of a device, with a plurality of pre-defined performance trade-off states. Next, a shortest path through the plurality of pre-defined performance trade-off states may be determined. The device may then be placed in successive ones of the plurality of pre-defined performance trade-off states according to the determined shortest path until a Transmit (TX) performance target is met.

Abstract: Legacy preamble puncturing for fine timing and frequency offset estimation may be provided. Within a user information field of a trigger frame, a legacy preamble puncturing pattern may be allocated to each of a plurality of client devices wherein each of the plurality of client devices is allocated with at least one respective corresponding non-overlapping sub-channel. Next, from each of the plurality of client devices on their respective corresponding non-overlapping sub-channel, a respective corresponding preamble may be received. Time and frequency synchronization may then be performed for each of the plurality of client devices based on their respective corresponding preamble.

Abstract: Cluster formation for networks for Ultra-Wideband (UWB) Time-Difference-of-Arrival (TDoA) networks may be provided. A plurality of anchors may be set to a primary setting. Synchronization messages may then be broadcast by the plurality of anchors. Then the plurality of anchors may send responses to the synchronization messages. A room consensus may be performed to determine probabilities of obstacles between the plurality of anchors. The plurality of anchors may then send proposals of one or more clusters based on the room consensus. One or more clusters may be formed by the plurality of anchors based on the proposals.

Abstract: In one embodiment, a code authentication service maintains a mapping of uniform resource locators and key information embedded into codes. The code authentication service receives, from a requesting device, a domain name system resolution request for a particular uniform resource locator. The code authentication service determines, based on the mapping, whether the domain name system resolution request is associated with valid key information for the particular uniform resource locator. The code authentication service provides, to the requesting device, a domain name system resolution response that indicates an address associated with the particular uniform resource locator, when the code authentication service determines that the domain name system resolution request includes valid key information for the particular uniform resource locator.

Abstract: Presented herein are techniques to facilitate infrastructure and policy orchestration in a shared workspace network environment. In one example, a method may include obtaining, by a service broker, a reservation request from a consumer network for a consumer, wherein the reservation request seeks a reservation to reserve, at least in part, at least one workspace device for the consumer for a workspace for a particular day and a particular time period; based on determining that the at least one workspace device is available, providing a response to the consumer network that includes a first indicator for identifying the reservation of the workspace and at least one second indicator identifying the at least one workspace device; and upon receiving a session request from the consumer network that includes the second indicator, establishing a management tunnel to interconnect the consumer network and the at least one workspace device via the service broker.

Abstract: Techniques for performing conditional or controlled noise removal from audio that may contain background noise. The techniques involve obtaining audio from an environment that may have one or more unwanted noise sources, and converting the audio to digital audio data. The digital audio data is analyzed to detect whether there is noise in the audio. When noise is detected in the audio, noise removal is performed on the digital audio data to remove the noise from the audio. When noise is not detected in the audio, the digital audio data is further processed without performing noise removal on the digital audio data.

Abstract: This disclosure describes methods to process timing information of flows in a network. One or more processors determine a latency associated with each of one or more packets of a flow passing through a device. The one or more processors determine that the latency is greater than a baseline latency, and the one or more processors provide a message indicating at least the flow and that the latency is greater than the baseline latency.

Abstract: A method is performed by a first provider edge (PE) of a redundancy group including provider edges configured with an Ethernet virtual private network (EVPN) segment identifier (EVI) and an Ethernet segment identifier (ESI) and that are multi-homed to a customer edge (CE). The method includes, upon receiving from the CE a join request including a group address for a multicast stream, electing a designated forwarder (DF) for the multicast stream. The electing includes: computing for each PE a respective affinity for the DF as a function of a respective address of the PE, the EVI, and the group address; and determining which PE has a largest affinity. The method further includes, if the first PE has the largest affinity or does not have the largest affinity, configuring the first PE as the designated forwarder or not configuring the first PE as the designated forwarder for the multicast stream, respectively.

Abstract: Preamble puncturing configuration information is encoded in a pad field, and alternatively or additionally, in a Service Field, depending on a transmission bandwidth of a Physical Layer Convergence Protocol (PLCP) Protocol Data Unit (PPDU). Some implementations also encode one or more parity bits in the pad field or Service field. The PPDU including the preamble puncturing configuration information encodes, in various embodiments, a request to send frame, a clear to send frame, a power save poll frame, or a contention free end frame.

Abstract: According to various embodiments, a networking device in a network receives traffic from the network. The networking device duplicates the traffic into a duplicate traffic copy. The networking device encapsulates the duplicate traffic copy into a multicast frame. The networking device sends, via a multicast address, the multicast frame to a network sensor in the network for analysis, wherein the multicast address is reserved in the network for traffic analysis.

Abstract: In one embodiment, a method includes identifying at a first powered device in communication with power sourcing equipment, a second powered device in communication with the first powered device, wherein the first powered device is receiving high voltage pulse power from the power sourcing equipment, notifying the power sourcing equipment of the second powered device at the first powered device, and performing a low voltage power initialization at the first powered device with the second powered device before passing the high voltage pulse power to the second powered device.

Abstract: Techniques for service level performance updates based on network level factors are described. by establishing a co-operative model between a network fabric and service proxies to enhance the service mesh failure management primitives as well as bring in network level intelligence in service (service instance) placement decisions in the fabric. A virtual network edge (VNE) instance interacts with the network fabric including the next level switches (such as a top of rack switch) and a network controller in order to determine a network level health-score and a modulated health-score for a service instance executing on the node. The modulated health score causes actions such as an influence on load balancing, request routing, rolling upgrades, canary deployments, change in the utilization of network resources, a downgrade of service, etc., based on the network level health-score.

Abstract: Techniques are provided herein for secure display device communications. In one example, a video communications device provides, to a display device over a first connection, communication information that enables the display device to contact a server over a second connection. The video communications device further provides, to the display device over the first connection, a command configured to initiate an interaction with the server. The server obtains, from the display device over the second connection, a message initiating the interaction in response to the command based on the communication information.