Abstract: Techniques for service level performance updates based on network level factors are described. by establishing a co-operative model between a network fabric and service proxies to enhance the service mesh failure management primitives as well as bring in network level intelligence in service (service instance) placement decisions in the fabric. A virtual network edge (VNE) instance interacts with the network fabric including the next level switches (such as a top of rack switch) and a network controller in order to determine a network level health-score and a modulated health-score for a service instance executing on the node. The modulated health score causes actions such as an influence on load balancing, request routing, rolling upgrades, canary deployments, change in the utilization of network resources, a downgrade of service, etc., based on the network level health-score.

Abstract: According to an embodiment, a method receives one or more messages associated with connecting a client and a first host. At least one of the messages comprises an encrypted portion indicating the first host and at least one of the messages comprises a cleartext portion indicating a second host. The method determines first and second sets of links associated with the first and second host, respectively. The first set is determined based on monitoring a result of connecting the client and the first host. The second set is determined based on observing behavior associated with connecting to the second host. The method detects domain fronting in response to determining, based on comparing the first set of links and the second set of links, that the first host differs from the second host.

Abstract: In one embodiment, a device obtains a first set of measurements of a path metric for a path in a network that are measured using periodic probing of the path. The device obtains a second set of measurements of the path metric for the path that are measured using fine-grained probing of the path at a higher frequency than that of the periodic probing. The device generates a predictive model that predicts values of the path metric, based on the first set of measurements and on the second set of measurements. The device causes, based on a value of the path metric predicted by the predictive model, traffic to be rerouted from the path to another path in the network.

Abstract: In one embodiment, a traffic inspection service executed by an intermediary device obtains, from a monitoring agent executed by an endpoint device, keying information for an encrypted traffic session between the endpoint device and a remote entity. The traffic inspection service provides a notification to the monitoring agent that acknowledges receipt of the keying information. The traffic inspection service uses the keying information to decrypt encrypted traffic from the encrypted traffic session. The traffic inspection service applies a policy to the encrypted traffic session between the endpoint device and the remote entity, based on the decrypted traffic from the session.

Abstract: Systems, methods, and computer-readable media for requesting a cellular IP address by initiating a call with a modem, establishing data packet network connectivity with the cellular IP address, assigning the cellular IP address to a virtual L2-bridge interface, wherein the virtual L2-bridge interface includes a MAC address, mapping a MAC address of a virtual machine with the MAC address of the virtual L2-bridge interface, detecting a change in the cellular IP address, and updating the virtual L2-bridge interface with a different cellular IP address while maintaining the data packet network connectivity.

Abstract: Methods are provided in which a recording service obtains a multimedia stream along with metadata of an established collaboration session in which at least two participants collaborate via respective user devices. The recording service identifies each of the at least two participants of the established collaboration session based on the metadata and obtains an individual recording privacy control associated with each of the at least two participants based on identifying. The recording service further generates a recording of the established collaboration session restricted by the individual recording privacy control for each of the at least two participants.

Abstract: Methods are provided in which a computing device obtains telemetry data associated with a network technology used in an enterprise network and an enterprise network profile that includes information about the complexity of the enterprise network. The network technology is deployed at one or more devices of the enterprise network. The methods further include the computing device determining, based on the telemetry data, for each deployment of the network technology, a current stage from a plurality of stages of an adoption lifecycle to which the network technology progressed, determining a time estimate for completing the current stage of the adoption lifecycle, based on the enterprise network profile and an adoption benchmark generated from a plurality of activities performed for progressing along the adoption lifecycle, and evaluating an adoption of the network technology, using the time estimate, to progress the network technology along the lifecycle.

Abstract: Systems and methods are disclosed for audio group identification for conferencing. For example, methods may include joining a conference call using a network interface; accessing an audio signal that has been captured using a microphone; detecting a control signal in the audio signal; and, responsive to detection of the control signal, invoking modification of an audio path of the conference call.

Abstract: In one embodiment, a service receives a device registration request sent by an endpoint device, wherein the endpoint device executes an onboarding agent that causes the endpoint device to send the device registration request via a cellular connection to a private access point name (APN) associated with the service. The service verifies that a network address of the endpoint device from which the device registration request was sent is associated with an integrated circuit card identifier (ICCID) or international mobile equipment identity (IMEI) indicated by the device registration request. The service identifies a tenant identifier associated with the ICCID or IMEI. The service sends, based on the tenant identifier, a device registration response to the endpoint device via the private APN.

Abstract: In one embodiment, an apparatus is configured for insertion into a network device and includes a printed circuit board, at least one electronic component mounted on the printed circuit board and configured for direct air-cooling, and an enclosure comprising a plurality of electronic components, an electrical connector, a fluid inlet connector, and a fluid outlet connector. A dielectric liquid is disposed within the enclosure for immersion cooling of said plurality of electronic components during operation of the network device.

Abstract: A system includes a millimeter (MM) wave radar detector, where the MM wave radar detector generates signal data associated with a person of interest (POI) within a field of view of the MM wave radar detector. The system further includes an Access Point (AP) coupled with the MM wave radar detector. The AP includes a computing device to receive and analyze the signal data provided by the MM wave radar detector to determine a movement or action of the POI within the field of view, and facilitate generation of a feedback response in response to the determined movement or action of the POI.

Abstract: Techniques for extended network configuration conversion and reconfiguration are described. A network controller proceeds through a set of extended network nodes in an extended network and reconfigures ports in at the various nodes from a first configuration to a second configuration while preventing network traffic looping and maintaining data and management traffic connection to the nodes during the reconfiguration.

Abstract: Techniques are presented herein for provisioning network devices based on device type. In one example, a packet core gateway of a cellular core network identifies a device type of a network device and obtains an indication to provision the network device. In response to obtaining the indication to provision the network device, the packet core gateway provisions the network device with one or more network resources based on the device type of the network device.

Abstract: A system is provided that includes a power transmitter configured to provide power to a current loop, a power receiver configured to receive the power from the current loop. The power receiver is configured to, on a periodic basis, disconnect from the current loop to stop pulling power from the current loop for a period of time to enable a safety check to be performed by the power transmitter. The power transmitter is configured to: monitor current on the current loop; determine whether a current level on the current loop passes the safety check within a predetermined time interval since a determination that the current level was not within a safe range; and control connectivity of the power to the current loop depending on whether the safety check has or has not passed within the predetermined time interval.

Abstract: An electrical connector for connecting to an array of surface contacts includes a connector body and a plurality of cable terminators. The connector body defines an interior volume and includes an external surface defining a plurality of cable openings each configured to receive a respective multi-conductor cable therethrough and a plurality of passageways. The plurality of cable terminators are each configured to couple with a respective multi-conductor cable exiting the second section of a respective passageway. Each cable terminator includes a plurality of pins each configured to couple with a respective conductor of the multi-conductor cable and to extend to a respective contact surface. The contact surfaces of the plurality of cable terminators extend to a second plane. The first plane and the second plane are coplanar when the array is in the connection position.

Abstract: In one embodiment, a method herein comprises: establishing, by a process, a virtual private network connection (VPN connection) with a particular VPN gateway; requesting, by the process, observability monitoring through the particular VPN gateway, wherein requesting results in a controller being informed about the particular VPN gateway and a domain of the particular VPN gateway; receiving, by the process, test specifics from the controller based on the particular VPN gateway and the domain of the particular VPN gateway; and executing, by the process, one or more tests to the particular VPN gateway based on the test specifics.

Abstract: According to some embodiments, a software defined wide area network (SD-WAN) includes a first region and a second region. The first region includes multiple first routing controllers and multiple first SD-WAN edge routers. The second region includes multiple second routing controllers and multiple second SD-WAN edge routers. Each first SD-WAN edge router of the first region is configured to establish Overlay Management Protocol (OMP) peering connections with the plurality of first routing controllers of the first region but to avoid establishing OMP peering connections with the plurality of second routing controllers of the second region. Each second SD-WAN edge router of the second region is configured to establish OMP peering connections with the plurality of second routing controllers of the second region but to avoid establishing OMP peering connections with the plurality of first routing controllers of the first region.

Abstract: Adapting transmission schedules in a Radio Frequency (RF) environment may be provided. A Central Network Controller (CNC) of a Time Sensitive Network (TSN) may determine that a data path to a client device comprises a wireless link. The CNC of the TSN may generate a proposed transmission schedule for the time sensitive traffic to the client device through the wireless link in response to determining that the data path to the client device comprises the wireless link. The CNC may provide the proposed transmission schedule to a Wireless Network Controller (WLC) of the wireless link. The CNC may receive a confirmation from the WLC that the proposed transmission schedule can be met. The proposed transmission schedule may be configured in response to receiving the confirmation.

Abstract: A device for a virtual phone in a virtual network may be provided. A data packet may be received by the device, the device being in a personal-area-network (PAN) with a peer, the data packet containing information defining a characteristic of a software application. The data packet may be profiled, the data packet comprising information about the software application. An SLA table stored on the device may be seeded with the information in the data packet. A routing table may be populated with an address for forwarding the information to the peer.