Abstract: One aspect described in this application provides a unified policy broker. During operation, the system receives configuration information from the set of network devices. At least two network devices in the network can be equipped with a first and a second policy enforcement engine, respectively, for enforcing one or more given policy rules. The system can determine, based on the configuration information, a first and a second representation of the similar policy function corresponding to the first and the second policy enforcement engine, respectively. The system can apply a unified policy model to perform a first mapping from a unified representation of the similar policy function to the first and the second representation. The system can create a unified API based on the unified representation. The system applies, via a user interface, the unified API to configure the similar policy function across the first and the second policy enforcement engines.

Abstract: Examples described herein relate to an optical device with an integrated light-emitting structure to generate light and a waveguide integrated capacitor to monitor light. The light-emitting structure may emit light upon the application of electricity to the optical device. The waveguide integrated capacitor may be formed under the light-emitting structure to monitor the light emitted by the light-emitting structure. The waveguide integrated capacitor includes a waveguide region carrying at least a portion of the light. The waveguide region includes one or more photon absorption sites causing the generation of free charge carriers relative to an intensity of the light confined in the waveguide region resulting in a change in the conductance of the waveguide region.

Abstract: Systems and methods are provided for dynamic virtual private network concentrators (VPNC) gateway selection and on-demand VRF-ID configuration. A dynamic VPNC gateway selection component can dynamically route to a particular VPNC gateway based on multiple user-specific factors, including: a) behavior of users on the network; and b) performance of a destination service/device. A dynamic VPNC gateway selection component can rank a user based on one or more factors relating to the behavior of the user. Also, the dynamic VPNC gateway selection component can determine whether a VPNC gateway at a data center is healthy, and whether a destination service at the data center is healthy. The dynamic VPNC gateway selection component can dynamically select a VPNC gateway from a plurality of VPNC gateways at the data center for communicating forwarded traffic from the user based on the user's ranking if either the VPNC gateway or the service are unhealthy.

Abstract: Example implementations relate to an inspection method for training a measurement machine to accurately measure side joint lengths and detecting a defect among a plurality of solder joints. The method includes receiving a first data representing the side joint lengths of the plurality of solder joints measured by a first measurement machine and a second data representing the side joint lengths measured by a second measurement machine. Further, the method includes determining a correlation value based on a statistical analysis of a relationship between the first data and the second data. The method further includes updating an algorithm used by the first measurement machine to measure the side joint lengths, based on the correlation value to reduce deviation between the first data and the second data. Later, the updated algorithm is used as a dimensional metrology in the first measurement machine for detecting the defect in the solder joints.

Abstract: Systems and methods related to a VPN controller are provided. In some embodiments, a first VPN controller is configured to establish a VPN tunnel with a client endpoint, wherein the VPN tunnel is established using an authentication process of the client endpoint, route a L2 request to a second VPN controller via an established communication tunnel between the first VPN controller and the second VPN controller by identifying a Generic Routing Encapsulation (GRE) header of the L2 request and based on the GRE header of the L2 request, directing the L2 request to a responsive L2 device accessible by the second VPN controller, receive an encapsulated L2 response from the second VPN controller identifying acceptance of the L2 request, and enable an electronic communication between the client endpoint and the responsive L2 device at least via the VPN tunnel between the client endpoint and the first VPN controller.

Abstract: A system for facilitating sender-side granular congestion control is provided. During operation, the first and second processes of an application can run on sender and receiver nodes, respectively. A first buffer on the sender node can be allocated to the first process. For the first process, the system can then identify a second buffer at a last-hop switch of the receiver node. The system can determine, based on in-flight packets, the utilization of the second buffer. The system can also determine a fraction of available space in the second buffer for packets from the first buffer based on the utilization. Subsequently, the system can determine whether the fraction of the available space can accommodate the next packet from the first buffer. If the fraction of the available space can accommodate the next packet, the system can allow the first process to send the next packet to the second process.

Abstract: Example method includes: establishing a secure tunnel with an unauthenticated client device associated with a user of a restricted network; receiving user credentials associated with the user and transmitted from the unauthenticated client device within the secure tunnel; validating the received user credentials; and transmitting at least a client certificate and device configuration information to the unauthenticated client device within the secure tunnel such that the unauthenticated client device is able to access the restricted network after installing the client certificate and applying the device configurations based on the received device configuration information.

Abstract: A system for securely and reliably transferring startup script files over a network may include a unified extensible firmware interface (UEFI) network stack on a client server wherein the client server requests startup script over the network upon startup of the client server using a secure transfer network protocol and receives over the network the startup script. A computing device may comprise a unified extensible firmware interface (UEFI) shell to request a download of startup script, over a network, upon startup of the client server wherein the startup script is staged in a provisioned storage device within the client server to be mounted as local file systems in the client server. The UEFI shell.

Abstract: Approaches for managing applications in a cluster are described. In an example, a first agent may be executing on a first programmable network adapter card installed within a first computing node within a cluster. The first agent may isolate an application executing on the first computing node. Thereafter, the application may be managed by the second computing node.

Abstract: The disclosure generally provides for a method of solving a K-SAT problem. The method comprises programming one or more clauses of a Boolean expression for a K-SAT problem written in negated disjunctive normal form (DNF) to a ternary-CAM (TCAM) array comprising columns and rows of TCAM cells, applying an interpretation comprising one or more binary variables expected to solve the Boolean expression as an input along the columns to the TCAM array, returning a binary value for each clause and updating one or more variables within the interpretation if at least one clause is violated.

Abstract: Disclosed is a system and method for the monitoring and authorization of an optimization device in a network. In exemplary embodiments, an optimization device transmits an authorization request message to a portal to receive authorization to operate. The portal transmits an authorization response message to the optimization device with capability parameters for operation of the device, including at least one expiration parameter for the authorization. The optimization device sends updated authorization request messages to the portal with its device usage information, such that the portal can dynamically monitor the optimization device and continue to authorize its operation.

Abstract: Examples of an apparatus and method for provisioning a service are described. Descriptors are described that represent the service. These are accessed and used to determine a reference required to implement the service. The reference indicates a type of entity and an entity to be passed to a function. The descriptor for the service is instantiated to obtain an instance of the service. This includes obtaining an instance of the type of entity indicated by the reference.

Abstract: Examples described herein relate to a method for synchronizing a wavelength of light in an optical device. In some examples, a heater voltage may be predicted for a heater disposed adjacent to the optical device in a photonic chip. The predicted heater voltage may be applied to the heater to cause a change in the wavelength of the light inside the optical device. In response to applying the heater voltage, an optical power inside the optical device may be measured. Further, a check may be performed to determine whether the measured optical power is a peak optical power. If it is determined that measured optical power is the peak optical power, the application of the predicted heater voltage to the heater may be continued.

Abstract: An example system includes a transceiver. The transceiver communicates multicast frames to a plurality of client devices in a multicast group. The system further includes a controller. The controller determines that a predetermined time has passed since the transceiver most recently sent a unicast transmission to one of the plurality of client devices. The controller instructs the transceiver to transmit a unicast frame to the one of the plurality of client devices. The controller computes a data rate for the one of the plurality of client devices based on the transmission of the unicast frame to the one of the plurality of client devices.

Abstract: An electromagnetic interference (EMI) shield may include a frame configured to be coupled to a printed circuit board (PCB). The frame may include a horizontal body and a plurality of vertical walls extending perpendicularly from the horizontal body. The plurality of vertical walls defines a portion of a perimeter of the EMI shield, the perimeter including a concave corner defined virtually by a first and second vertical wall of the plurality of vertical walls. The first vertical wall does not extend all the way to the second wall and an opening if formed between. The first vertical wall includes an attached portion connected to the horizontal frame and an extension portion connected to the attached portion by way of a first fold. The extension portion at least partially overlays, abuts, and extends beyond the attached portion toward the second wall thereby at least partially covering the opening.

Abstract: A data-driven intelligent networking system that can facilitate global fairness is provided. The system can maintain state information of individual packet flows, which can be set up or released dynamically based on injected data. Each flow can be provided with a flow-specific input queue upon arriving at a switch. Packets of a respective flow are acknowledged after reaching the egress point of the network, and the acknowledgement packets are sent back to the ingress point of the flow along the same data path. As a result, each switch can obtain state information of each flow and enforce global fairness on a per-flow basis.

Abstract: Embodiments are directed to automatic location of access points in a network. An embodiment of one or more non-transitory computer-readable storage mediums includes instructions for transmitting a request from a computing device to multiple access points in a network to determine a distance between each pair of access points of the multiple access points; receiving at the computing device the determined distances between each pair of access points; generating a proximity matrix containing the determined distances between each pair of access points; solving the proximity matrix to automatically generate a set of locations for the multiple access points; and orienting the generated set of locations for the multiple access points based on known locations of one or more anchor points in a subset of the access points.

Abstract: Examples of a retaining module for a signal transmission cable are described. In an example, the retaining module comprises a passive physical port. The passive physical port is to receive a connector terminal attached to an end of the signal transmission cable. The passive physical port has a first shape which corresponds to a shape of the active physical port, and is arranged in a first layout on the housing corresponding to a layout of the active physical port on the electronic device.

Abstract: A network interface controller (NIC) capable of efficiently utilizing an output buffer is provided. The NIC can be equipped with an output buffer, a host interface, an injector logic block, and an allocation logic block. The output buffer can include a plurality of cells, each of which can be a unit of storage in the output buffer. If the host interface receives a command from a host device, the injector logic block can generate a packet based on the command. The allocation logic block can then determine whether the packet is a multi-cell packet. If the packet is a multi-cell packet, the allocation logic block can determine a virtual index for the packet. The allocation logic block can then store, in an entry in a data structure, the virtual index, and a set of physical indices of cells storing the packet.

Abstract: Examples for analyzing the usage of virtualized network instances within a communication network, are described. In an example, a usage monitoring service may receive a data change notification from a unified data repository. The data change notification is generated by the unified data repository in response to a data modification in subscriber data of a virtualized network instance. In an example, the data modification retrieved from the generated data change notification is utilized to obtain usage indication information for the virtualized network instance.