Abstract: This disclosure describes systems, methods, and apparatus for network slicing with programmable data-plane pipelines, comprising creating slice contexts, mapping resources of network switch hardware to the slice contexts to create a resource mapping, instantiating the plurality of network slices on the network switch hardware using the resource mapping, receiving frames from one or more external sources, identifying a network slice corresponding to each frame, and enriching a header of each of the frames, based upon the identification of the network slice for each frame, to direct each frame to a data-plane pipeline.

Abstract: In some examples, a method includes obtaining, by a computing device operated by a data center provider for a data center, from a first customer of the data center provider, order information comprising a set of parameters defining an interconnection within the data center between a first customer network of the first customer and a second customer network of a second customer of the data center provider, wherein the first customer network and the second customer network are co-located in the data center; sending, by the computing device to the second customer, a communication comprising a unique identifier that maps to the set of parameters; and outputting, by the computing device, an indication of authorization for the interconnection based upon an authorization directive from the second customer, the authorization directive comprising the unique identifier.

Abstract: In one example, a cloud-based services exchange comprises a plurality of interconnection assets configured to connect a customer of the cloud-based services exchange to one or more cloud service providers, the plurality of interconnection assets including a virtual circuit by which the customer accesses a cloud service from the one or more cloud service providers; and an orchestration engine configured to modify the plurality of interconnection assets.

Abstract: This disclosure describes systems, methods, and apparatus for network slicing with programmable data-plane pipelines, comprising creating slice contexts, where creating the slice contexts comprises creating control-plane and data-plane data for each of a plurality of network slices, and storing the control-plane and the data-plane data to produce slice contexts, mapping resources of network switch hardware to the slice contexts to create a resource mapping, instantiating the plurality of network slices on the network switch hardware using the resource mapping, receiving frames from one or more external sources, identifying a network slice corresponding to each frame, and enriching a header of each of the frames, based upon the identification of the network slice for each frame, to direct each frame to a data-plane pipeline.

Abstract: In some examples, an electrical power system includes a power source and a load modulator configured to receive power from the power source and to deliver power to a load zone. The electrical power system also includes a controller configured to determine a software-controlled power flow limit for the load zone. The controller is further configured to receive information indicating the power delivered to the load zone and to cause the power delivered to the load zone to remain below the software-controlled power flow limit.

Abstract: An example optical switch includes a plurality of input ports and a plurality of output ports, a cross-connect fabric having one or more inputs, one or more outputs, and a device to selectively cross-connect the inputs with the outputs. The optical switch includes an integrated fast optical switch comprising a first input, a first output, and a second output, wherein the first input is connected to a first one of the outputs of the cross-connect fabric, and wherein the integrated fast optical switch has a switching time that is less than a switching time of the cross-connect fabric to switch the first input between the first output on a path to a first output port of the plurality of output ports and the second output on a path to a second output port of the plurality of output ports.

Abstract: In general, techniques are described for distributed route and packet flow evaluation within a cloud exchange fabric. In some examples, a routing engine is operative to: establish sessions between a first network and a second network to exchange message data identifying destinations in the second network; and verify routing information comprising routes from endpoints in the first network to the destinations based upon the message data, including, for each route of the routes: evaluating a source or a destination for indicia of illegitimate origination, and in response to detecting an illegitimate endpoint at the at least one of a source or a destination based upon identifying one or more of the indicia of illegitimate origination, dropping a corresponding route from the routing information.

Abstract: In general, this disclosure describes a multi-zone secure AI exchange. The multi-zone secure AI exchange may be implemented in a multi-cloud, multi-data center environment, where each zone may be in a different cloud or data center. The multi-zone secure AI exchange may include a data repository, a data exchange, and shared services. The data repository may be configured to store algorithms and datasets, each having a respective owning user. The data exchange may receive datasets and algorithms from the data repository, and may perform the algorithms to produce output data. Each of the data repository, data exchange, and shared services may have a different level of security. The data repository may implement the highest level of security, allowing the owner user, and only the owning user, to control how their data and algorithms move in and out of the data repository, or are changed while in the data repository.

Abstract: In an example of the disclosed techniques, a method comprising computing, by a computing system, a distribution of symbol errors in a forward error correction (FEC) frame transmitted in an optical signal. The method further includes, in response to determining that the distribution of symbol errors indicates a burst error that satisfies a threshold, adjusting, in an optical transceiver module, one or more of a pre-cursor setting, a post-cursor setting, or a signal amplitude for the optical signal.

Abstract: In one example, a method comprises receiving, by a computing device, configuration data defining: an external virtual domain for a network function, the external virtual domain connected to a public network and managed by a provider for the computing device; a virtual domain for the network function, the virtual domain separate from the external virtual domain, configured with a secure tunnel interface, connected to a customer network, and managed by a customer of the provider for the computing device; forwarding, by the external virtual domain implementing a route-based virtual private network, encrypted network traffic, received from the public network via a secure tunnel, to the secure tunnel interface configured in the virtual domain; decrypting, by the virtual domain, the encrypted network traffic to generate network traffic; and forwarding, by the virtual domain, the network traffic to the customer network.

Abstract: In some examples, a method includes generating, by an interconnection platform for an exchange, an interconnection token representing authorization for an interconnection to or from a resource of the exchange, wherein the interconnection token comprises a unique identifier and token data for requesting and provisioning an interconnection using the resource. The method also includes outputting a first indication of the unique identifier of the interconnection token. The method also includes provisioning, by the interconnection platform, in response to receiving, from a customer of an exchange provider of the exchange, a second indication of the unique identifier of the interconnection token and based on the authorization, an interconnection in a network device of the exchange, the interconnection including, or connecting to or from, the resource.

Abstract: This disclosure describes a cloud exchange that offers dynamic network connectivity and performance-based recommendation services for application workloads.

Abstract: This disclosure describes techniques that include managing flows of energy within a system that includes a data center and using at least some of the energy flows to provide power to the data center. In some examples, this disclosure describes a system comprising a power generation system, a battery storage system having a state of charge attribute, and processing circuitry having access to an electrical power grid, the power generation system, and the battery storage system. In one example, the processing circuitry is configured to: determine an energy utilization forecast for a data center; monitor energy availability factors; and determine, based on the energy utilization forecast and the monitored energy availability factors, an energy flow configuration defining energy flows involving with the electrical power grid, the power generation system, the battery storage system, and the data center.

Abstract: An example cascaded optical switch includes: a fast optical switch and a slow optical switch both having input ports and output ports. A switching time of the slow switch is longer than a switching time of the fast optical switch. The cascaded optical switch includes a first pre-cabled optical fiber connecting an output port of the slow optical switch to an input ports of the fast optical switch, and a second pre-cabled optical fiber connecting an output ports of the fast optical switch to an input ports of the slow optical switch. The fast optical switch or the slow optical switch is configured to receive configuration data to modify a switching configuration to configure a fiber cross-connect in the optical switch fabric that includes at least one of the first pre-cabled optical fiber or the second pre-cabled optical fiber.

Abstract: A method includes obtaining, by a remote video platform, location data for an extended reality privacy control for visually segmenting an environment within a remote asset facility into a customer space comprising customer assets for a customer and a non-customer space, receiving, by the remote video platform, first video data representing the environment within the remote asset facility, augmenting, by the remote video platform based on the location data for the extended reality privacy control, the first video data with the extended reality privacy control to generate second video data having at least a portion of the non-customer space occluded with the extended reality privacy control, and outputting, by the remote video platform, the second video data for display at a display device.

Abstract: An apparatus includes a driver and both a pump and a compressor mechanically coupled to the driver. The driver includes a first driver chamber and a second driver chamber separated by a moveable driver barrier coupled to a mechanical link. The driver is configured to alternately expand and contract the first and second driver chambers in response to an alternating pressure differential of a gaseous first coolant between a first pressure and a second pressure of the first and second driver chambers and produce a mechanical force from the alternating pressure differential. The pump is configured to pump a liquid first coolant in response to the mechanical force from the driver. The compressor is configured to compress a second coolant in response to the mechanical force from the driver.

Abstract: This disclosure describes techniques that include filtering or gating access to a network based on attributes or an evaluation of the network destination. In one example, this disclosure describes a method that includes receiving, by a computing system and from a client device, a request for information about a network destination; identifying, by the computing system and based on the request, an address associated with the network destination; evaluating, by the computing system, the address to determine whether the address passes a plurality of tests; responsive to determining that the address passes the plurality of tests, storing the address, by the computing system, as one of a plurality of scrutinized addresses; outputting, by the computing system and to the client device, the address.

Abstract: Techniques are described for a network providing application workload routing and application workload interworking. For example, a controller may move or replicate an application workload hosted on an original edge compute to a different edge compute in a different edge data center that is locally accessible by the device and route the network traffic to the new edge compute using paths mapped to respective traffic classes.

Abstract: In general, this disclosure describes a virtual router configured to enable multi-cloud service provider connectivity. The multi-cloud service provider connectivity may enable network function virtualization (NFV) services to be applied to network traffic such as enterprise traffic. The NFV services may be offsite, cloud-based NFV services or data center provider-hosted NFV services, for example. In one example, a system comprises at least one computing device deployed to a data center by a data center provider and configured by the data center provider to execute a virtual router, wherein the virtual router is configurable by a customer to route packet flows to one or more servers that host network function virtualization services for application of the network function virtualization services to the packet flows.

Abstract: In one example, a cloud-based services exchange comprises a plurality of interconnection assets configured to connect a customer of the cloud-based services exchange to one or more cloud service providers, the plurality of interconnection assets including a virtual circuit by which the customer accesses a cloud service from the one or more cloud service providers; and an orchestration engine configured to modify the plurality of interconnection assets.