Abstract: In general, techniques are described for managing content request referrals by keying content requests to a composite key data structure that maps end-user address prefixes and content identifiers to content delivery network servers of downstream CDNs. In one example, a CDN exchange includes a communication module to receive first network prefixes and first content identifiers from a first secondary content delivery network and to receive second network prefixes and second content identifiers from a second secondary content delivery network. A request router of the CDN exchange redirects the content request to the first secondary content delivery network or to the second secondary content delivery network according to a network address of the end user device and a content identifier for the content request.

Abstract: A device may determine a link master/slave relationship for an Ethernet link associated with a connection between a component of the device and a component of another device. The device may determine that Synchronous Ethernet (SyncE) is to be enabled on the Ethernet link. The device may identify the component of the device as a SyncE slave or a SyncE master associated with enabling SyncE on the Ethernet link. The device may provide an indication that the component of the device has been identified as the SyncE slave or the SyncE master. The device may determine a SyncE master/slave relationship associated with enabling SyncE on the Ethernet link. The SyncE master/slave relationship may supersede the link master/slave relationship without altering the link master/slave relationship. The device may cause the component of the device to recover a clock based on the SyncE master/slave relationship rather than the link master/slave relationship.

Abstract: A dispatch module implemented in at least one of a memory or a processing device is operatively coupled to multiple processing modules, each having a first clock configuration and a second clock configuration. The dispatch module, at a first time, changes a first processing module included in the multiple processing modules from a first clock configuration to a second clock configuration. The dispatch module prohibits, at a second time within a predetermined time period and after the first time, a second processing module included in the multiple processing modules from changing from the first clock configuration to the second clock configuration if an indicator associated with a number of changes of the multiple processing modules between a first clock configuration and a second clock configuration within the predetermined time period and prior to the second time satisfies a criterion.

Abstract: In some embodiments, an apparatus includes a set of power supply units where each power supply units from the set of power supply unit is associated with a power zone from a set of power zones. The apparatus can also includes a redundant power supply unit and a set of electronic devices where each electronic device from the set of electronic devices is associated with a power zone from the set of power zones. Additionally, each electronic device from the set of electronic devices is operatively coupled to a power supply unit from the set of power supply units for that power zone and is also operatively coupled to the redundant power supply unit.

Abstract: A device may cause an optical signal to be transmitted via a network path. The device may receive, from a network device, a link layer discover protocol (LLDP) message. The LLDP message may include signal characteristic information regarding the optical signal. The device may adjust transmission of the optical signal based on receiving the LLDP message. The device may cause an adjusted optical signal to be transmitted via the network path based on adjusting transmission of the optical signal.

Abstract: Techniques are described for characterizing a receiver front end of a pluggable optical module. The pluggable optical module receives an optical signal that includes a first portion having a first polarization and a second portion having a second polarization. The first portion and second portion are not coherent with one another and the power of the first portion and second portion is equal.

Abstract: An optical device may include a modulator. The modulator may receive an optical signal. The modulator may modulate the optical signal to include a first channel and a second channel. The modulator may modulate the optical signal based on a training pattern associated with detecting a skew. The modulator may cause the first channel to interfere with the second channel. The modulator may perform a power measurement on the first channel and the second channel. The modulator may determine the skew based on the power measurement and the training pattern. The modulator may time delay the first channel or the second channel to align the skew based on the skew.

Abstract: In one example, an edge routing device of a service provider network includes one or more network interfaces configured to send and receive packets and a processing unit configured to retrieve, from a packet received via the one or more network interfaces, priority data from an Internet protocol (IP) header of the packet, form a first tag including a first set of data in a first priority field of the first tag, wherein the first set of data represents a first portion of the priority data, form a second tag including a second set of data in a second priority field of the second tag, wherein the second set of data represents a second portion of the priority data, encapsulate the packet with the first tag and the second tag, and forward, via the one or more network interfaces, the encapsulated packet.

Abstract: In general, this disclosure describes a high-level forwarding path description language (FPDL) for describing internal forwarding paths within a network device. The FPDL enables developers to create a template that describes a section of an internal forwarding path within the forwarding plane of a network device. The FPDL provides syntactical elements for specifying the allocation of forwarding path structures as well as enabling the run-time construction of internal forwarding paths to interconnect the forwarding path structures in a manner specific to packet, packet flow, and/or interface properties, for example. In conjunction with late binding techniques, whereby the control plane of the network device provides arguments to template parameters that drive allocation by the packet forwarding engines of forwarding path structures specified by the FPDL, the techniques provide control plane processes a unified interface with which to manage the operation of the packet forwarding engines.

Abstract: A device may analyze a first file for malware. The device may determine that the first file causes a second file to be downloaded. The device may store linkage information that identifies a relationship between the first file and the second file based on determining that the first file causes the second file to be downloaded. The device may analyze the second file for malware. The device may determine a first malware score for the first file based on analyzing the second file for malware and based on the linkage information. The device may determine a second malware score for the second file based on analyzing the first file for malware and based on the linkage information.

Abstract: A device may receive a file to be analyzed in a sandbox environment, and may determine configuration information for configuring the sandbox environment. The configuration information may be determined based on at least one of: file information associated with the file to be analyzed, or client device information associated with a client device for which the file is intended. The device may configure the sandbox environment using the configuration information. The configuration information may identify a system configuration for the sandbox environment. The device may analyze the file in the sandbox environment based on configuring the sandbox environment using the configuration information.

Abstract: In general, techniques are described for providing a continuous feedback system that dynamically updates data collection criteria and subscriber policies based on aggregated subscriber-specific and network usage data. For example, a method includes applying one or more subscriber specific policy and charging control (PCC) rules to network traffic to collect network traffic data for a plurality of subscribers, aggregating the network traffic data, and determining, based on the aggregated traffic data, whether subscriber independent data collection criteria need to be updated.

Abstract: A device is configured to receive, from a network device, a first message associated with a network management activity performed by using an application of the network device. The device is further configured to determine whether the first message satisfies a criterion, and to classify the first message based on a type of the application when the first message satisfies the criterion. The device is also configured to receive, from the network device, a second message associated with the network management activity; to correlate the second message with the first message after classifying the first message; and to create a record for the network management activity based on the first message and the second message by using rules associated with the type of the application.

Abstract: A system may include a power module that includes a group of power supplies, particular ones of the group of power supplies being operable at a group of voltages ranging from a first voltage to a second voltage. The system may further include a controller coupled to the particular ones of the group of power supplies, the controller being to ramp up an output voltage, associated with the group of power supplies, from the first voltage to the second voltage in a group of discrete steps; where ramping up the output voltage by a particular one of the group of discrete steps is performed while a load is receiving power from the group of power supplies; and where ramping up the output voltage by a particular one of the group of discrete steps prevents over-current protection on the group of power supplies from being activated.

Abstract: A provider edge (PE) device may receive an indication to perform a designated forwarder (DF) election associated with a network segment that includes the PE device, one or more other PE devices, and a client edge (CE) device. The PE device, the one or more other PE devices, and the CE device may be associated with an Ethernet virtual private network (EVPN) that includes a group of EVPN instances (EVIs). The PE device may perform the DF election in order to determine election information associated with the PE device. The election information may include information associated with a particular EVI, of the group of EVIs, for which the PE device is to act as a DF. The PE device may provide the election information to the CE device to cause the CE device to provide traffic, associated with a particular VLAN included in the particular EVI, to the PE device.

Abstract: In general, this disclosure describes techniques for applying, with a network device, subscriber-specific packet processing using an internal processing path that includes service objects that are commonly applied to multiple packet flows associated with multiple subscribers. In one example, a network device control plane creates subscriber records that include, for respective subscribers, one or more variable values that specify service objects as well as an identifier for a packet processing template. A forwarding plane of the network device receives and maps subscriber packets to an associated subscriber record and then processes the packet by executing the packet processing template specified by the subscriber record. When the forwarding plane reaches a variable while executing the specified packet processing template, the forwarding plane reads the associated variable value from the subscriber record to identify and then apply the subscriber-specific service object specified by the variable.

Abstract: A device may determine that a file of a client device is a malicious file. The device may obtain remote access to the client device using a connection tool. The connection tool may provide access and control of the client device. The remote access may include access to a file location of the malicious file. The device may determine file information associated with the malicious file using the remote access to the client device. The device may select one or more remediation actions based on the file information. The device may cause the one or more remediation actions to be executed using the remote access to the client device.

Abstract: In general, techniques are described for managing routing information in a hub-and-spoke network in a manner that reduces flooding of link information. A hub router of the hub-and-spoke network including a memory and a processor may perform the techniques. The memory may be configured to store a representation of a topology of the hub-and-spoke network. The processor may be configured to utilize a separate instance of a multi-instance version of a link state protocol to communicate with each of a plurality of spoke routers of the hub-and-spoke network. Each separate instance of the multi-instance version of the link state protocol may include the hub router and a different one of the plurality of spoke routers. The processor may process link state advertisements from the separate instances of the multi-instance version of the link state protocol to maintain the representation of the topology of the hub-and-spoke network.

Abstract: Techniques are described for specifying and constructing multi-protocol label switching (MPLS) rings. Routers may signal membership within MPLS rings and automatically establish ring-based label switch paths (LSPs) as components of the MPLS rings for packet transport within ring networks. In one example, a router includes a processor configured to establish an MPLS ring having a plurality of ring LSPs. Each of the ring LSPs is configured to transport MPLS packets around the ring network to a different one of the routers operating as an egress router for the respective ring LSP. Moreover, each of the ring LSPs comprises a bidirectional, multipoint-to-point (MP2P) LSP for which any of the routers can operate as an ingress to source packet traffic into the ring LSP for transport to the respective egress router for the ring LSP. Separate protection paths, bypass LSPs, detours or loop-free alternatives need not be signaled.

Abstract: A device may identify a set of features associated with the unknown object. The device may determine, based on inputting the set of features into a threat prediction model associated with a set of security functions, a set of predicted threat scores. The device may determine, based on the set of predicted threat scores, a set of predicted utility values. The device may determine a set of costs corresponding to the set of security functions. The device may determine a set of predicted efficiencies, associated with the set of security functions, based on the set of predicted utility values and the set of costs. The device may identify, based on the set of predicted efficiencies, a particular security function, and may cause the particular security function to be executed on the unknown object. The device may determine whether another security function is to be executed on the unknown object.