Abstract: Techniques are described for reporting, by non-ingress routers for traffic engineering label switched paths (TE LSPs) and to a path computation element, actual paths taken by the TE LSPs through the network. A first network device: receives, from a second network device, an LSP path signaling message that includes a route object having a first indication of at least a sub-path of a path for TE LSP through a network, wherein the first network device is not an ingress label edge router for the TE LSP; generates, in response to the LSP path signaling message and based at least in part on the route object, an LSP path report message that includes a second indication of the at least the sub-path of the path for the TE LSP; and sends, to a path computation element, the LSP path report message to notify the PCE.

Abstract: A device may receive a password-protected file to be accessed for analysis. The device may identify a contextual term, associated with the password-protected file, to be used as a password to attempt to access the password-protected file. The contextual term may be identified based on at least one of: metadata associated with the password-protected file, metadata associated with a source from which the password-protected file is received, or text associated with the source from which the password-protected file is received. The device may apply the contextual term as the password to attempt to access the password-protected file.

Abstract: A first server may receive, from a client device, an indication of a request for a content file via a network address; identify that the network address is a dynamic network address; establish a communication session with a second; receive a portion of the content file from the second server; determine an index parameter based on receiving the portion of the content file; determine whether the content file is being stored by the first server based on a cache index and based on the index parameter or based on information associated with the request for the content file; receive a remaining portion of the content file based on determining that the content file is not being stored by the first server; and provide the content file to the client device.

Abstract: A switching device in a network system for transferring data includes one or more source line cards, one or more destination line cards and a switching fabric coupled to the source line cards and the destination line cards to enable data communication between any source line card and destination line card. Each source line card includes a request generator to generate a request signal to be transmitted in order to obtain an authorization to transmit data. Each destination line card includes a grant generator to generate and send back a grant signal to the source line card in response to the request signal received at the destination line card to authorize the source line card to transmit a data cell to the destination line card.

Abstract: The disclosed apparatus may include (1) a database that maintains a pruned multicast distribution tree and (2) a processing unit having access to the database, wherein the processing unit (A) receives at least one type 3 Ethernet Segment Identifier (ESI) message from at least one other bridge domain on at least one other computing device, (B) determines, based at least in part on the type 3 ESI message, whether the other bridge domain on the other computing device has a root access concentrator, and then (C) populates, in response to determining whether the other bridge domain has a root access concentrator, the pruned multicast distribution tree to account for the other bridge domain such that the bridge domain on the computing device is able to determine whether to send multicast traffic to the other bridge domain. Various other apparatuses, systems, and methods are also disclosed.

Abstract: A system may include a power source selector device connected to a plurality of power sources. The system may also include multiple power supply modules (PSMs). A first PSM, of the multiple PSMs, may be connected to a first output of the power source selector device. A second PSM, of the multiple PSMs, may be connected to a second output of the power source selector device. The first output of the power source selector device may be different from the second output of the power source selector device. The system may also include a controller device connected to the power source selector device and each of the multiple PSMs.

Abstract: A device may analyze a first file for malware. The device may determine that the first file causes a second file to be downloaded. The device may store linkage information that identifies a relationship between the first file and the second file based on determining that the first file causes the second file to be downloaded. The device may analyze the second file for malware. The device may determine a first malware score for the first file based on analyzing the second file for malware and based on the linkage information. The device may determine a second malware score for the second file based on analyzing the first file for malware and based on the linkage information.

Abstract: A system and method for handling critical events in service delivery gateways. Events are defined that cause a transition from a master redundancy state to a standby redundancy state in service delivery gateways and a plurality of signal-routes are stored. Each signal-route is associated with one or more of the defined events. A first defined event is detected in the first service delivery gateway and causes a transition from the first master redundancy state to the first standby redundancy state in the first service delivery gateway and a change in a first signal-route from the plurality of signal-routes in the first service delivery gateway. The change in the first signal-route is advertised and a second service delivery gateway transitions from the first standby redundancy state to the first master redundancy state.

Abstract: A system and method of transferring cells through a switch fabric having a shared memory crossbar switch, a plurality of cell receive blocks and a plurality of cell transmit blocks. The system determines, based on a number of cells queued up in respective output buffers in the cell transmit blocks, output buffers in the cell transmit blocks that can receive cells on a low latency path. The cells transferred include first cells that can be transferred on the low latency path and second cells that cannot be transferred via the low latency path. The first cells are transferred via a bypass mechanism in shared memory to the output buffers. The second cells are transferred by writing the second cells to shared memory, reading the second cells from shared memory and transferring the second cells read from shared memory to the output buffers in the cell transmit blocks.

Abstract: In one embodiment, edge devices can be configured to be coupled to a multi-stage switch fabric and peripheral processing devices. The edge devices and the multi-stage switch fabric can collectively define a single logical entity. A first edge device from the edge devices can be configured to be coupled to a first peripheral processing device from the peripheral processing devices. The second edge device from the edge devices can be configured to be coupled to a second peripheral processing device from the peripheral processing devices. The first edge device can be configured such that virtual resources including a first virtual resource can be defined at the first peripheral processing device. A network management module coupled to the edge devices and configured to provision the virtual resources such that the first virtual resource can be migrated from the first peripheral processing device to the second peripheral processing device.

Abstract: The techniques described are directed to providing mass withdrawal of media access control (MAC) routes for network devices in an Ethernet virtual private network data center interconnect (EVPN DCI). MAC routes to reach the learned MAC addresses are stored in routing tables with corresponding top-of-rack Ethernet segment identifier (TOR-ESI) values that represent the Ethernet segments from where the MAC addresses were learned. A provider edge (PE) network device may configure and advertise a virtual Ethernet segment identifier (vESI) that includes a plurality of TOR-ESI values. As Ethernet segments of the data center become unavailable, the corresponding TOR-ESI values may be withdrawn from the vESI to form an updated vESI. In this way, MAC routes having a TOR-ESI value that was withdrawn from the vESI may be removed from the routing tables in each of the network devices.

Abstract: In one embodiment, a method includes sending a first flow control signal to a first stage of transmit queues when a receive queue is in a congestion state. The method also includes sending a second flow control signal to a second stage of transmit queues different from the first stage of transmit queues when the receive queue is in the congestion state.

Abstract: A device may receive a packet with a destination address, and may input, to a probabilistic filter, prefixes associated with the destination address. A prefix may include one or more most significant bits of the destination address. The device may identify candidate prefixes associated with a response from the probabilistic filter. The device may identify a longest candidate prefix of the candidate prefixes, and may perform a lookup to determine that a memory component includes a parent prefix that matches the longest candidate prefix. The parent prefix may be associated with a child prefixes that include the parent prefix and one or more additional bits. The device may identify a longest matching prefix, of the parent prefix and the child prefixes, that matches one or more most significant bits of the destination address and that corresponds to an output component. The device may output the packet via the output component.

Abstract: In some embodiments, a non-transitory processor-readable medium storing code representing instructions to be executed by a processor comprises code to cause the processor to determine, during a calibration of a coherent optical transmitter, a set of parameters associated with each tributary channel by sending a first signal to a digital signal processor (DSP) to adjust a scale factor of that tributary channel. The scale factor is associated with a tap characteristic of a finite impulse response (FIR) filter of the DSP. The code further causes the processor to determine a power imbalance between two tributary channels based on the set of parameters associated with each tributary channel. The code further causes the processor to send a second signal to the coherent optical transmitter to adjust a set of operational settings of the coherent optical transmitter based on the power imbalance and the set of parameters associated with each tributary channel.

Abstract: Subscriber management and network service integration for an access network is described in which a centralized controller provides seamless end-to-end service from a network to access nodes. For example, a method includes dynamically establishing a control channel between the centralized controller and an access node, and establishing a transport label switched path (LSP) transport network packets between the access node and the network node. The access node sends, via the control channel, an endpoint indication message that indicates that an endpoint that has joined the network at the access node. The access node receives a pseudo wire request message via the control channel to install forwarding state for creating a pseudo wire for providing one or more network services to the endpoint. The access node receives a direct switch message via the control channel to configure the access node to map traffic received from the endpoint to the pseudo wire.

Abstract: Data traffic loss in a an Ethernet Ring that is multihomed, in an active-standby manner, to a VPLS transport network (such as a Border Gateway Protocol (BGP) multihomed Ethernet Ring, an MC-LAG multihomed Ethernet Ring, or some other type of active-standby multihomed Ethernet Ring, etc.) (ring) is avoided. The exemplary multihomed ring running Ethernet Ring Protection (ERP) protocol includes a Ring Protection Link (RPL), a first node and a second node linked with a designated border router and a standby border router of the network, respectively. The data traffic loss in the multihomed ring is avoided by (i) receiving an indication that the link between the first node and the designated border router has failed; and (ii) invoking, responsive to the received indication, an ERP Media Access Control (MAC)-flush in the ring, even in the absence of a failed link in the ring and without activating the specified RPL.

Abstract: In some embodiments, an apparatus includes a first network switch configured to be within a Fibre Channel over Ethernet (FCoE) network, which has a set of network switches including the first network switch. The first network switch is configured to receive, from a first network device, a login signal including a proposed logical identifier for the first network device. The first network switch is configured to send, in response to the login signal, a multicast signal including the proposed logical identifier to remaining network switches from the set of network switches. As a result, a second network switch from the set of network switches enforces a zone policy in response to receiving the multicast signal and prior to sending the proposed logical identifier to a second network device.

Abstract: In some embodiments, an apparatus includes an optical transceiver that includes a first set of electrical transmitters operatively coupled to a switch. Each electrical transmitter from the first set of electrical transmitters is configured to transmit an electrical signal from a set of electrical signals. In such embodiments, the switch is configured to switch an electrical signal from the set of electrical signals such that the set of electrical signals are transmitted via a second set of electrical transmitters. Each electrical transmitter from the second set of electrical transmitters is operatively coupled to an optical transmitter from a set of optical transmitters. The set of optical transmitters is operatively coupled to an optical multiplexer. In such embodiments, at least one electrical transmitter from the second set of electrical transmitters is associated with a failure within the optical transceiver.

Abstract: Techniques are described that enable MAC (L2) address authentication within an L2 switching network, such as a metro transport network. Moreover, when used in an EVPN, the techniques provide fine grain policy control over the L2 switching network so as to enable carrier networks to specify and control topologies for transporting packet-based communications. Access routers of the EVPN communicate with a L2 network address authentication device of the metro transport network and only advertise MAC addresses into the EVPN that have been validated. Moreover, the L2 network address authentication device may distribute MAC-level policies to control topologies and MAC learning within the EVPN and provide services such as per-MAC traffic quota limits.

Abstract: A device may provide information associated with initiating a segmented tunnel to be used to transfer multicast traffic via a network covering a plurality of areas. The device may receive acknowledgement information associated with the segmented tunnel. The acknowledgement information may include information that identifies a number of egress devices, associated with at least one area of the plurality of areas, that are to receive the multicast traffic. The device may determine, based on the acknowledgement information, a total number of egress devices that are to receive the multicast traffic. The device may selectively provide the multicast traffic via the segmented tunnel based on the total number of egress devices that are to receive the multicast traffic.