Abstract: Techniques for using computer networking protocol extensions to route control-plane traffic and data-plane traffic associated with a common application are described herein. For instance, a traffic flow associated with an application may be established such that control-plane traffic is sent to a control-plane node associated with the application and data-plane traffic is sent to a data-plane node associated with the application. When a client device sends an authentication request to connect to the application, the control-plane node may send an indication of a hostname to be used by the client device to send data-plane traffic to the data-node. As such, when a packet including the hostname corresponding with the data-plane node is received, the packet may be forwarded to the data-plane node.

Abstract: Embodiments herein describe techniques for prioritizing applications based on application usage data. The space in the TCAM in many network devices is limited. That is, there may be more applications (and corresponding QoS settings) than there is space in the TCAM. In the embodiments herein, a netflow collector monitors the traffic flows in the network devices. A application usage tracker can identify which applications generate traffic in which network devices. That is, the application usage tracker can identify, based on the information provided by the netflow collector, the application usage of each network device. The central management tool can prune the applications that are not used by the network device and generate QoS settings only for applications that are used by the network device.

Abstract: Techniques for multi-tenant overlays with per-tenant distributed routing are described herein. The techniques may include provisioning an overlay network such that tenants hosted by a forwarding plane of the overlay network are each configured to forward routing protocol packets to a routing control plane of the overlay network and the routing control plane of the overlay network is configured to determine routing paths between each tenant and respective destinations. A routing protocol packet may be sent to the routing control plane by a first tenant. The routing protocol packet may include an indication of a destination that is served by the first tenant. Based on receiving the routing protocol packet, the routing control plane may determine one or more routing paths between the tenants and the destination. Additionally, an indication of the routing path may be sent to the tenants.

Abstract: In one embodiment, a device obtains audio data from one or more past conferences. A prediction model that predicts when participants of a conference will speak is generated based on the audio data from the one or more past conferences. The device uses the prediction model to predict a speech distribution for participants of a particular conference. Then, the device proactively optimizes audio parameters of the particular conference based on its predicted speech distribution.

Abstract: Electrical test of optical components via metal-insulator-semiconductor capacitor structures is provided via a plurality of optical devices including a first material embedded in a second material, wherein each optical device is associated with a different thickness range of a plurality of thickness ranges for the first material; a first capacitance measurement point including the first material embedded in the second material; and a second capacitance measurement point including a region from which the first material has been replaced with the second material.

Abstract: Techniques for virtual private network (VPN) services over optical networks. Client data is received from a source device connected to a first node in an optical communication network. The client data is for transmission over the optical communication network to a destination device connected to a second node in the optical communication network. The client data is transmitted from the source device to the destination device using a layer 2 (L2) virtual network connection between the source device and the destination device. This includes transmitting the client data from the first node to the second node over an optical transport network (OTN) path through the optical communication network using a frame. The second node is configured to receive the frame and transmit the client data to the destination device based on an identifier in the frame.

Abstract: A method includes receiving, at an access node, a connection request from a device and in response to the connection request, establishing a connection with an identity provider. The device, the access node, the local network, and the identity provider are members of an identity federation. The method also includes, after the device is authenticated with the identity provider, sending or receiving, to or from the identity provider and by the access node, data linking the device to an item and an owner of the device.

Abstract: Load balancing for saturated wireless may be provided. A computing device may determine that an Access Point (AP) has reached a saturation point. A first Service Device (SD) having a first SD coverage area that overlaps an AP coverage area associated with the AP may be identified. Then a license to operate within a frequency spectrum segment for the first SD coverage area may be obtained. A plurality of user devices may be moved from the AP to the first SD. The first SD may then service the plurality of user devices using at least a portion of the frequency spectrum segment.

Abstract: Channel predictive behavior and fault analysis may be provided. A forward time value may be determined comprising a time a forward signal takes to travel from a transmitter over a channel to the receiver. Next, a reflected time value may be determined comprising a time a reflected signal takes to travel to the receiver. The reflected signal may be associated with the forward signal. A discontinuity may then be determined to exist on the channel based on the forward time value and the reflected time value. The reflected signal may be caused by the discontinuity and a high impedance or low impedance at the transmitter present after the forward signal is sent.

Abstract: Adaptive guard interval calibration may be provided. A computing device may receive a first plurality of delay spread values. Each of the first plurality of delay spread values may respectively comprise an amount of time between when each of a respective first plurality Access Points (APs) receives a first tuning symbol from a first calibrating AP and when each of the respective first plurality APs receives a final multipath reflection of the first tuning symbol. Next, a first Guard Interval (GI) may be determined based on the first plurality of delay spread values. The first calibrating AP may then be provisioned with the first GI.

Abstract: A split enclosure apparatus for fan-less cooling may be provided. The apparatus may comprise a device and a housing. The device may comprise a plurality of components. The housing may enclose the device and may comprise a first external surface, a second external surface, and a joint between the first external surface and the second external surface. The first external surface may be dedicated to cooling a first one of the plurality of components. The second external surface may be dedicated to cooling a second one of the plurality of components. The joint between the first external surface and the second external surface may be electrically conductive and thermally resistive.

Abstract: Group identity assignment and policy enforcement may be provided. A User Defined Network Identifier (UDN ID) defining a group of client devices may be received. Next, a client identifier (ID) associated with a source client device that is associated with the group of client devices may be received. The UDN ID and the client ID may be encoded in an Extended Local Identifier (ELI) Media Access Control (MAC) address associated with the source client device. A source MAC address of a packet received from the source client device may then be substituted with the ELI MAC address. Then the packet may be forwarded.

Abstract: One embodiment of the present invention sets forth a technique for processing recordings of events. The technique includes applying a machine learning model to a plurality of samples from one or more recordings of the events to generate a plurality of embeddings representing the plurality of samples. The technique also includes generating a plurality of labels that identify speakers associated with the plurality of samples based on metadata comprising timestamps of voice activity during the events and participants associated with the voice activity. The technique further includes storing mappings of the plurality of embeddings to the plurality of labels.

Abstract: Systems, methods, and computer-readable media for generating and presenting workflow graphs can include the following operations. A workflow graph including vertices is provided. An event is received to reorganize the vertices of the workflow graph. Each of the vertices is classified with a significance level, the significance level is based on at least one of a business rule and a vertex position of a vertex of the vertices. Vertices of the vertices having a low significance level are grouped together. The vertices in the group having the low significance level are combined into a new vertex, and the new vertex is expandable and collapsible to view the vertices in the group having the low significance level.

Abstract: The disclosed technology relates to a process for metered training of fog nodes within the fog layer. The metered training allows the fog nodes to be continually trained within the fog layer without the need for the cloud. Furthermore, the metered training allows the fog node to operate normally as the training is performed only when spare resources are available at the fog node. The disclosed technology also relates to a process of sharing better trained machine learning models of a fog node with other similar fog nodes thereby speeding up the training process for other fog nodes within the fog layer.

Abstract: Techniques for using Network Address Translation (NAT), Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS) to anonymize server-side addresses in data communications. Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a virtual IP (VIP) address that is mapped to the client device and the endpoint device. In this way, IP addresses of servers are obfuscated by a virtual network of VIP addresses. The client device may then communicate data packets to the server using the VIP address as the destination address, and a virtual network service that works in conjunction with DNS can convert the VIP address to the actual IP address of the server using NAT and forward the data packet onto the server.

Abstract: Embodiments include detection of physical events associated with a wireless network, where the detected physical events are associated with the measurable effects on radio signals between devices in the wireless network. The detected physical event and associated radio signal information is used to provide precise low cost time synchronization for a device in a network.

Abstract: Techniques and systems described herein relate to shared storage systems across network devices to use unused storage space and provide backup and additional storage for devices as needed. The techniques and systems include determining availability data describing available storage locations and amounts on network devices, compiling such data at a network controller, and communicating the availability data to the network devices. The network devices then directly communicate with each other to store data remotely as needed.

Abstract: In one embodiment, quasi-Output Queue behavior of a packet switching device is achieved using virtual output queue (VOQ) ordering independently determined for each particular output queue (OQ), including using maintained latency information of the VOQs of the particular OQ. In one embodiment, all packets from all VOQs with a same port-priority destination experience similar latency within specific time-window, which is similar to the packet service provided by an Output Queue switch architecture. In one embodiment, all input ports that send traffic to same output port-priority receive bandwidth which is proportional to their bandwidth demand divided by total bandwidth. Prior approaches that emulate the performance of an OQ switch architecture require complex and time-consuming scheduling determinations and do not scale. Independently determining the order for sending packets from the VOQs associated with each particular OQ provides a scalable and implementable system with quasi-Output Queue behavior.

Abstract: This disclosure describes techniques including, by a domain name service (DNS), receiving a name resolution request from a client computing device and, by the DNS, providing a nonce to the client computing device, wherein a service is configured to authorize a connection request from the client computing device based at least in part on processing the nonce. This disclosure further describes techniques include a method of validating a connection request from a client computing device, including receiving the connection request, the connection request including a nonce. The techniques further include determining that the nonce is a valid nonce. The techniques further include, based at least in part on determining that the nonce is a valid nonce, authorizing the connection request and disabling the nonce.