Abstract: Disclosed are embodiments for determining a location of a device based on phase differences of a signal received from the device. In some embodiments, expected phase differences for signals transmitted from a plurality of regions are determined. The expected phase differences are those differences of the signal when received at each of a plurality of receive elements of a receiving device. By comparing phase differences of a signal received from the device to the expected phase differences, a location of the device is determined.

Abstract: Techniques are described for dynamically computing a segment routing policy for a segment routing for traffic engineering (SR-TE) path. For example, in a discontinuous SR network in which SR islands (e.g., groups of neighboring routers that are enabled for segment routing) are separated by one or more routers not enabled for segment routing, instead of returning a failure because one or more routers along a path are not enabled for SR, an ingress router may generate an SR-TE operations, administrations, and management (OAM) Multi-Protocol Label Switching (MPLS) traceroute packet send the packet to a first border router of the RSVP-enabled devices along a computed path to trigger the creation of a resource reservation Label Switched Path (LSP) through the RSVP-enabled devices. In this way, segment routed LSP may be established to tunnel through the resource reservation LSP for a SR-TE path used in an SR-TE policy.

Abstract: An example network device includes a memory; and processing circuitry configured to: determine a primary path between the network device and a second network device; determine candidate backup paths between the network device and the second network device; in response to a determination that a first candidate backup path of the candidate backup paths satisfies a first priority criteria, select the first candidate backup path as a backup path; in response to a determination that a second candidate backup path of the candidate backup paths satisfies a second priority criteria, select the second candidate backup path as the backup path; and program a packet processor of the network device with the primary path and the backup path. The first priority criteria and the second priority criteria can be based on a risk of simultaneous failure of the primary path and a candidate backup path of the plurality of backup path.

Abstract: Techniques are disclosed for service-based tunnel selection for forwarding network traffic. In one example, a network device obtains, based on service parameters associated with a network service, a service-specific tunnel selection scheme. The tunnel selection scheme identifies a primary mapping mode for mapping the network service to a primary transport tunnel and fallback mapping modes for mapping the network service to fallback transport tunnels. The primary mapping mode is categorized according to a first type comprising tunnel colorization, while the fallback mapping modes are categorized according to types other than tunnel colorization. In response to determining that the network service cannot be mapped to the primary transport tunnel according to the primary mapping mode, the network device, maps, based on the fallback mapping modes, the network service to the fallback transport tunnels.

Abstract: In general, the disclosure describes techniques for configuring a forwarding path of a network device. For example, a network device system includes a compiler. The compiler is configured to receive text comprising syntax elements in an arrangement that indicates a topology for a plurality of nodes. Additionally, the compiler is configured to generate, based on the text, code for instantiating the plurality of and compile the code to generate a software image. The network device system includes a network device comprising a forwarding manager configured to execute the software image to configure a forwarding path to include the corresponding forwarding path elements for each of the plurality of nodes. Additionally, the network device system includes at least one packet processor operably coupled to a memory, wherein the at least one packet processor is configured to process packets received by the forwarding unit by executing the forwarding path elements.

Abstract: Techniques are disclosed for implementing scalable port range policies across a plurality of categories that support application workloads. In one example, a policy agent receives, from a centralized controller for a computer network, a plurality of policies. Each policy of the plurality of policies includes one or more policy rules, and each of the one or more policy rules specifies one or more tags specifying one or more dimensions for application workloads executed by the one or more computing devices and a corresponding port range. The policy agent assigns, based on a policy rule, a port range specified by the policy rule to objects of the one or more computing devices that belong to categories described by the one or more dimensions of the one or more tags of the policy rule. The categories support the application workloads and are assigned to the tags by a centralized controller.

Abstract: In an example, a method comprises, by a computing device, in response to receiving an indication of a modified network topology for a segment routing (SR)-enabled network comprising one or more network nodes: determining whether an existing, first multipath in the modified network topology for the network satisfies a path computation deviation for a SR policy, wherein the path computation deviation is a deviation from an initial path computation constraint for the SR policy; when the first multipath in the modified network topology satisfies the path computation deviation for the SR policy, performing a recomputation policy action that is associated with the path computation deviation; and when the first multipath in the modified network topology does not satisfy the path computation deviation for the SR policy, computing a second multipath in the modified network topology for the network to satisfy the initial path computation constraint for the SR policy.

Abstract: An example method includes receiving a resource management request associated with resources provided by at least one data center, creating, based on the resource management request, task data elements including at least first and second task data elements, adding the task data elements to a task data structure accessible at least by a first and second worker processes, removing, by the first worker process, a first task data element from the task data structure and initiate execution of a first task, removing, by the second worker process, a second task data element from the task data structure and initiate execution of a second task, wherein the second worker process executes at least a portion of the second task while the first worker process executes at least a portion of the first task in parallel, and sending, to the client computing device, a response to the resource management request.

Abstract: An apparatus includes a reconfigurable optical add/drop multiplexer (ROADM) having an input port to receive a first optical signal from a second device. The ROADM also includes a first wavelength selective switch (WSS), in optical communication with the input port, to convert the first optical signal into a second optical signal, a loopback, in optical communication with the first WSS, to transmit the second optical signal, and a second WSS, in optical communication with the loopback, to convert the second optical signal to a third optical signal and direct the third optical signal back to the second device via the input port.

Abstract: A network device may receive network traffic associated with a session, wherein the session is associated with a network. The network device may determine, from the network traffic, an application path that is associated with the session and may determine an application path identifier associated with the application path. The network device may determine, based on policy information that is associated with the application path identifier, whether the network traffic associated with the session is permitted to be communicated via the network and may perform, based on whether the network traffic is determined to be permitted, an action associated with communication of the network traffic.

Abstract: A device may identify a plurality of first values associated with network traffic of a label-switched path of a plurality of label-switched paths. The device may determine an adjustment policy based on the plurality of first values. The adjustment policy may include one or more factors associated with a plurality of second values. The plurality of second values may be determined based on the plurality of first values. The device may implement the adjustment policy in association with the label-switched path. A bandwidth reservation of the label-switched path may be adjusted based on the adjustment policy. The adjustment policy may be implemented for fewer than all of the plurality of label-switched paths.

Abstract: A disclosed apparatus may include (1) an integrated circuit electrically coupled to a substrate, (2) a plurality of electrical contacts that are disposed on the substrate and are electrically coupled to the integrated circuit via the substrate, (3) at least one cable assembly electrically coupled to the plurality of electrical contacts, and (4) a package stiffener physically coupled to the substrate around the integrated circuit such that the at least one cable assembly is accessible to at least one electrical cable. Various other apparatuses, systems, and methods are also disclosed.

Abstract: A device receives network data associated with a network that includes network devices interconnected by links, wherein the network devices utilize segment routing. The device receives segment routing data associated with the network, wherein the segment routing data at least includes a list of segments associated with paths provided through the network by two or more of the network devices and corresponding links. The device merges the network data and the segment routing data to generate merged data, and processes the merged data, with an optimization model, to determine potential network plans within a particular time period. The device identifies a potential network plan, of the potential network plans, that maximizes throughput associated with operating the network, and performs one or more actions based on the potential network plan.

Abstract: An example control plane that is executed on one or more processors in a distributed computing system is configured to receive an indication of a node to be onboarded into the distributed computing system, wherein the node comprises one of a compute node or a network device node, to discover one or more compute resources or network device resources that are associated with the node, and to assign, based on the discovery, the node to a collector that is executed in the distributed computing system, wherein the collector is configured to collect real-time telemetry data for the node during operation of the node. The control plane is further configured to receive, from the collector, the real-time telemetry data for the node that is collected by the collector, and to output, for display, a visual representation of the real-time telemetry data for the node.

Abstract: A network device ensures availability of content destination devices, and may receive a request to install a filter, and the request may include information identifying a set of content destination devices capable of receiving packets that match the filter, and priority values indicating priorities by which the set of content destination devices are to receive the packets. The network device may receive status indications indicating availabilities associated with the set of content destination devices, and may receive a packet destined for an endpoint device. The network device may generate a copy of the packet, and may determine that a packet feature matches the filter. The network device may select a particular content destination device, from the set of content destination devices, based on the priority values and the status indications, and may cause the copy of the packet to be forwarded to the particular content destination device.

Abstract: A first packet forwarding plane (PFE) of a network device may receive a packet and may perform a first lookup for the packet. The first PFE may provide the packet to a service plane based on the first lookup. The service plane may apply a service to the packet and may provide the packet to the first PFE. The first PFE may perform a second lookup. The first PFE may provide the packet to a second PFE of the network device based on the second lookup and may store flow information associated with the packet and second PFE information in a table. The network device may provide the flow information and the second PFE information from the table to the service plane to cause the service plane to send subsequent packets directly to the second PFE thereby saving fabric, memory, and processing bandwidth and improving overall network performance.

Abstract: A device may select a first pseudorandom integer within a range of integers. The device may generate a first candidate prime, based on the first pseudorandom integer, for primality testing. Based on determining that the first candidate prime fails a primality test, the device may select a second pseudorandom integer within the range of integers. The device may generate a second candidate prime, based on the second pseudorandom integer, for primality testing. The device may determine whether the second candidate prime satisfies the primality test. The device may selectively: re-perform, based on the second candidate prime failing the primality test, the selecting the second pseudorandom integer, the generating the second candidate prime, and the determining whether the second candidate prime satisfies the primality test, or using, based on the second candidate prime satisfying the primality test, the second candidate prime as a prime integer in a cryptographic protocol.

Abstract: A script analysis platform may obtain a script associated with content wherein the script includes one or more functions that include one or more expressions. The script analysis platform may parse the script to generate a data structure and may traverse the data structure to determine the one or more functions and to determine properties of the one or more expressions, wherein traversing the data structure includes evaluating one or more constant sub-expressions of the one or more expressions. The script analysis platform may analyze the properties of the one or more expressions to determine whether the script exhibits malicious behavior. The script analysis platform may cause an action to be performed concerning the script or the content based on determining whether the script exhibits malicious behavior.

Abstract: A disclosed apparatus may be a circuit board that includes (1) a first unique sublaminate that includes a plurality of ground layers and a plurality of signal layers, (2) a second unique sublaminate that includes a plurality of power layers and another plurality of signal layers, and (3) a symmetry axis that bisects the circuit board between the first unique sublaminate and the second unique sublaminate, wherein the first unique sublaminate and the second unique sublaminate are distinct from one another. Various other apparatuses, systems, and methods are also disclosed.

Abstract: A first network device may receive, from a second network device, a clock quality indication that is associated with a clock of the second network device, wherein the clock of the second network device is a reference clock for a network that includes the first network device and the second network device. The first network device may determine, based on a clock signal of the second network device, that a quality metric of the clock does not satisfy a threshold. The first network device may provide, to the second network device, a clock fault notification to cause the second network device to downgrade the clock quality indication transmitted by the second network device. The first network device may select a new reference clock for the first network device based on receiving the downgraded clock quality indication from the second network device.