Abstract: Implementations of the present disclosure relate to selecting a transmitting virtual access point (VAP) for a MBSSID set. A method comprises selecting a VAP from a set of VAPs as a transmitting VAP based on context information about the set of VAPs, at least one of the set of VAPs other than the transmitting VAP being determined as at least one non-transmitting VAP The method also comprises generating a beacon frame for the set of VAPs by including an identifier of the transmitting VAP in a header part of the beacon frame and including at least one identifier of the at least one non-transmitting VAP in a payload part of the beacon frame. A generated beacon frame is broadcasted. In this way, a transmitting VAP of a set of VAPs is no longer determined by default, but can be selected for different cases.

Abstract: A technique for managing undervoltage in a compute system is disclosed. The technique includes a method that further includes: detecting an AC undervoltage condition in the compute system; and upon detecting the AC undervoltage condition: dynamically determining a holdup time as a function of the present load; determining a monitoring period as a function of the dynamically determined holdup time; waiting for the determined monitoring period to expire; and upon expiration of the determined monitoring period, perform a shutdown process if the AC undervoltage condition persists.

Abstract: Example implementations relate to managing a resource of a network device. A resource of a network device may be assigned from a first tenant to a second tenant of the network device. Resources of the network device may include an assignment right, an access right, and a configuration right, By assigning the resource to the second tenant, the second tenant may be granted an access right to the assigned resource. Responsive to the assignment of the resource, an access right to the assigned resource may be removed from the first tenant such that the first tenant is isolated from the resource.

Abstract: One aspect of the present technology can provide a system for facilitating in-service software upgrade (ISSU) for a switch in a virtual switching stack. During operation, the system can initiate ISSU that facilitate uninterrupted traffic flow. The system can upgrade a first set of daemons of the switch that manage operations of the switch. The system can also upgrade a database stored on the switch. The database can store operational information of the switch. The system can further upgrade a second set of daemons of the switch that configure forwarding information on the forwarding hardware of the switch and facilitate data-plane operations for the switch. The forwarding information configured on the forwarding hardware can remain unchanged during the upgrade. The system can configure the upgraded second set of daemons to obtain control-plane information from a standby switch of a conductor switch of the virtual switching stack.

Abstract: Systems and methods are provided for automatic notifications of expired subscriptions. In various embodiments, a network function can request a subscription from a Unified Data Repository (UDR). The request for the subscription can include a request for a notification when the subscription expires or at a time prior to the expiration of the subscription. When the subscription expires or at the time prior to the expiration of the subscription, the UDR can provide a notification that the subscription has expired or is about to expire. Based on the notification, the network function can request to re-subscribe or request a new subscription from the UDR.

Abstract: Systems are methods are described which allow for “zero-touch” provisioning (ZTP) to be used to seamlessly bring up devices such as Gateways/Access Points/Switches or any other networking devices connected over different uplink types such as aggregated links (Static LAG, LACP), trunk ports, and the like. Provisioning is adapted specifically for trunk and/or LACP ports in order to maintain the automation and optimization benefits typically provided by ZTP. A method can include transmitting a discover message, and receiving a response message based on the discover message. Then, determining whether a pre-defined extension is included in the response message that indicates a port type and a virtual local area network (VLAN) configuration. Automatic configuration of one or more ports and a VLAN can be performed as indicated by the pre-defined extension. Thus, ZTP can be restarted in accordance with the configuration of the network device.

Abstract: Examples of the presently disclosed technology provide new circuits for detecting errors in aCAMs with improved efficiency. Specifically designed around the structure and operation of aCAM arrays, these circuits include counter sub-circuits electrically connected to match lines of aCAM rows such that the counter sub-circuits receive match-related signals output from aCAM rows. The value stored by a counter sub-circuit may change in response to receiving a match signal, and may remain the same in response to receiving a mismatch signal. As will be described in greater detail below, the stored value of the counter sub-circuit may be used to detect/identify an error in its associated aCAM row after a set of (specially-computed) error-detection input vectors are sequentially applied to the circuit.

Abstract: A circuit board cooling apparatus is disclosed having a heat spreader device to be thermally coupled with a surface of the circuit board to be cooled. Also, a conforming heat transfer device is disclosed that is thermally and physically coupled with the heat spreader device to conform to a surface contour of the heat spreader device on a first side of the heat transfer device. The cooling apparatus also includes a heat transport device physically attached and thermally coupled with a second side of the heat transfer device.

Abstract: Examples of performing an out-of-band firmware update of a server computing device are described. In an example, a first disk image is mounted onto a server computing device. The first disk image comprises a bootable firmware and is mounted in response to a mount command received through an out-of-band communication service. In another example, a second disk image is also mounted onto the server computing device. The second disk image is also mounted in response to another mount command received through the out-of-band communication service and is to provide a read-writable container, when mounted. Thereafter, a booting process of the server computing device may be initiated based on mounted first image to update the firmware of the server computing device. Information related to the update of the firmware is store in the read-writable container.

Abstract: Systems and methods described herein allow a configurable policy for managing Power over Ethernet (PoE) to be implemented by Power Sourcing Equipments (PSEs) across a network. The policy specifies a set of rules for prioritizing power distribution over Ethernet for the computer network. When Powered Devices (PDs) are connected via Ethernet cables to the PSEs, the PDs send identification information about themselves (e.g., device type and location) to the PSEs. The PSEs assign priority levels to the PDs by electronically comparing the identification information to the set of rules. When a present level of available power is insufficient to power all the PDs via PoE, the PSEs use the priority levels to determine which PDs to power down.

Abstract: Systems and methods are provided for efficiently routing data through a network having a plurality of switches configured in a fat-tree topology, including: receiving a data transmission comprising a plurality of packets at an edge port of the network, and routing the data transmission through the network with routing decisions based upon a routing table, wherein the routing table includes entries to effect routing decisions based upon a destination based hash function.

Abstract: In an example implementation consistent with the features disclosed herein, network devices of a physical network are bucketized for automatic configuration based on statistical analysis of the quantity of network links for the network devices. The quantity of network links for each of the network devices is identified. A bucketing factor for the network devices is computed. The bucketing factor equals a sum of a mean and a confidence interval value for the quantity of network links for the network devices. A persona for a provisioned network device is recommend based on the bucketing factor. The persona is assigned to the provisioned network device. A network device configuration is applied to the provisioned network device based on the persona assigned to the provisioned network device. A virtual network may be created on the physical network.

Abstract: In some examples, an electronic device includes a component comprising information, a secure storage, and a controller to generate a digital signature based on the information of the component, and detect a modification of the component based on the digital signature. The controller can also detect a receipt of an invalid credential, and log, to the secure storage, an indication of the modification of the component and an indication of the receipt of the invalid credential.

Abstract: A method of selectively connecting mobile devices to 4G and/or 5G networks includes preparing a plurality of isolated 4G and/or 5G networks configured to define a network federation and each having a Radio Access Network (RAN), a PDN Gateway node or a User Plane Function (UPF), and an application server; preparing a plurality of mobile devices; connecting the mobile devices to the networks to exchange data traffic with the application server via, at least, the RAN and the PDN Gateway or UPF node; preparing a connectivity network configured to selectively connect the networks to each other; selecting one reference PDN Gateway or UPF node associated with a network of the federation; and migrating the data traffic associated with all the mobile devices connected to the networks other than the reference network to the application server associated with the reference network that includes the previously selected PDN Gateway or UPF node.

Abstract: In some examples, a distributed computer system includes a plurality of computer nodes, where the plurality of computer nodes include respective programs to cooperate to perform a workload. A first computer node includes a communication proxy between the program of the first computer node and a communication library that supports communications between the program of the first computer node and the programs of other computer nodes of the plurality of computer nodes, and a fault management service to monitor a health of the other computer nodes, and in response to a detection of a fault of a second computer node of the plurality of computer nodes, relaunch the communication proxy. The relaunched communication proxy selects, from a plurality of states, a common state to which the programs are to roll back.

Abstract: Examples described herein relate to configuration of access points including Internet-of-Things (IoT) radio. An access point identifier list is received from a network administration node in a network. Each access point identifier in the access point identifier list is uniquely associated with an access point, which includes an IoT radio. A first rules list is received from the network administration node. Each rule in the first rules list indicates a constraint and access point configuration values. An objective function is used to identify access point identifiers satisfying one or more of the constraints in the rules. The access points associated with the identified access point identifiers are configured with the access point configuration values as indicated in the rules.

Abstract: Methods and systems are provided for performing lossy dropping and ECN marking in a flow-based network. The system can maintain state information of individual packet flows, which can be set up or released dynamically based on injected data. Each flow can be provided with a flow-specific input queue upon arriving at a switch. Packets of a respective flow are acknowledged after reaching the egress point of the network, and the acknowledgement packets are sent back to the ingress point of the flow along the same data path. As a result, each switch can obtain state information of each flow and perform per-flow packet dropping and ECN marking.

Abstract: Systems and methods are provided for receiving a set of feature vectors. Each feature vector in the set may comprise feature values for a plurality of features associated with network communications. A first score for a first subset of the feature vectors that have at least one common feature value for a first feature of the plurality of features may be determined. A second score for a second subset of the feature vectors may be determined. The second subset may comprise the first subset and other feature vectors that have a different feature value for the first feature. Based on a change between the first score and the second score, whether to group the common feature value and the different feature value together may be determined.

Abstract: Decentralized machine learning to build models is performed at nodes where local training datasets are generated. A blockchain platform may be used to coordinate decentralized machine learning (ML) over a series of iterations. For each iteration, a distributed ledger may be used to coordinate the nodes communicating via a blockchain network. A node can include self-healing features to recover from a fault condition within the blockchain network in manner that does not negatively impact the overall learning ability of the decentralized ML system. During self-healing, the node can determine that a local ML state is not consistent with the global ML state and trigger a corrective action to recover the local ML state. Thereafter, the node can generate a blockchain transaction indicating that it is in-sync with the most recent iteration of training, and informing other nodes to reintegrate the node into ML.

Abstract: A distributed policy management (PM) system (e.g., system for authentication, authorization, and accounting (AAA) activities on a network) is provided. Nodes of the PM system may share information of the PM system using a distributed data store (e.g., a multi-master cache). Each node of the distributed PM system may further share information from the distributed data store with other nodes of a corporate infrastructure network by augmenting information in a remote authentication dial-in user service (RADIUS) protocol message. Nodes that are involved in policy management (e.g., network authentication server (NAS) or firewall) without access to the distributed data store may receive information via augmented RADIUS messages. In this manner, devices may be interfaced to the distributed PM system without having access to the distributed data store. High availability and load balancing implementations may be provided by leveraging the distributed data store across nodes of the PM system.