Abstract: Access points which can be mounted in a variety of locations or orientations and can support multiple communications protocols are described. The access point includes a main housing, e.g., main body, and a front housing connected together by a hinge. A Wi-Fi antenna is included in the front housing in some embodiments. The access point can be used in an open or closed position. When mounted in a vertical position the front housing can be lowered into a horizontal position facilitating preferred antenna orientation. A first set of cooling fins serves to keep the internal components of the access point off a wall when the access point is wall mounted facilitating air flow. Additional fins act as a spacer between the main housing and the front housing when the access point is used in a closed position facilitating air flow around both sides of the main housing.

Abstract: A network device may receive an IPv6 packet that includes an IPv6 source address and an IPv6 destination address. The network device may determine, based on the IPv6 packet including an extension header that includes an address prefix option, whether to translate the IPv6 packet into an IPv4 packet. Additionally, based on a determination to translate the IPv6 packet into the IPv4 packet, the network device generates an IPv4 packet that includes an IPv4 source address and an IPv4 destination address. Because the PLAT unit may make the determination whether to translate the IPv6 packet into an IPv4 packet based on the IPv6 packet including the address prefix option instead of based on the IPv6 source address including a customer-translation (CLAT) source prefix, it may be unnecessary to distribute the CLAT source prefix to the network device.

Abstract: Techniques are disclosed for configuring multiple network devices implementing different protocols or techniques. For example, these techniques allow network devices configured with different protocols to co-exist within the same network, or for the network to seamlessly evolve from one protocol to the other. Techniques described herein provide for an SDN controller that may bridge a network system implementing different protocols, e.g., Open vSwitch Database (OVSDB) and Ethernet Virtual Private Network (EVPN), by translating high-level configuration data (e.g., desired state of the network at a high level of abstraction) that are protocol agnostic to low-level configuration data (e.g., desired state of the network at a low level of abstraction) that are protocol specific. That is, SDN controller may provide management, control, and analytics functions of a virtualized network configured to operate specifically within an OVSDB environment and/or an EVPN environment.

Abstract: Techniques are described to limit heat transfer from a first electronic component to a second electronic such as by having an aperture in a lid over the second electronic component to form a gap in the conductance of heat from the first electronic component to the second electronic component. A semiconductor electronic package includes a substrate, a first electronic component that is of a first type and that is mounted along a surface of the substrate, a second electronic component that is of a second type different than the first type and that is mounted along the surface of the substrate, and a metallic component that is positioned over the first electronic component and that has an aperture through which the second electronic component is exposed.

Abstract: According to various aspects of the present disclosure, an apparatus is provided. In an aspect, the apparatus includes an optical transceiver having a first port, a second port and an optical switch coupled to the first port and the second port. The optical switch is switchable between a unidirectional port operation mode and a bidirectional port operation mode. When the optical switch is in the unidirectional port operation mode, the first port is configured to send a first optical signal, and the second port configured to receive a second optical signal. When the optical switch is in the bidirectional port operation mode, the first port configured to send the first optical signal and receive the second optical signal, and the second port configured to receive a third optical signal and not send the first signal.

Abstract: This disclosure describes techniques for monitoring, scheduling, and performance management for virtualization infrastructures within networks. In one example, a computing system includes a plurality of different cloud-based compute clusters (e.g., different cloud projects), each comprising a set of compute nodes. Policy agents execute on the compute nodes to monitor performance and usage metrics relating to resources of the compute nodes. Policy controllers within each cluster deploy policies to the policy agents and evaluate performance and usage metrics from the policy agents by application of one or more rulesets for infrastructure elements of the compute cluster. Each of the policy controllers outputs data to a multi-cluster dashboard software system indicative of a current health status for the infrastructure elements based on the evaluation of the performance and usage metrics for the cluster.

Abstract: In one embodiment, an apparatus includes a network management module configured to execute at a network device operatively coupled to a switch fabric. The network management module is configured to receive a first set of configuration information associated with a subset of network resources from a set of network resources, the set of network resources being included in a virtual local area network from a plurality of virtual local area networks, the plurality of virtual local area networks being defined within the switch fabric. The first set of configuration information dynamically includes at least a second set of configuration information associated with the set of network resources.

Abstract: In some embodiments, a non-transitory processor-readable medium includes code to cause a processor to receive, at a management device, an instantiation request for a first virtual machine. The code includes code to cause the processor to identify a first compute device at a first time such that the first compute device is undersubscribed at the first time. The code includes code to cause the processor to send an instruction to instantiate the first virtual machine at the compute device, and receive a signal indicating that a boot process associated with the first virtual machine is complete and that the virtual machine is instantiated at the first compute device. The code includes code to cause the processor to send at a second time, a signal to migrate the first virtual machine from the first compute device to a second compute device in response to the boot process being complete.

Abstract: A device receives a software program with potential malware and a loop to conceal the potential malware, and processes the software program, with a loop identification technique, to identify the loop in the software program. The device modifies, with a loop exit technique and based on data from the loop identification technique, the software program to exit the loop, and processes the software program, with a malware detection technique and after modifying the software program to exit the loop, to determine whether the software program contains malware. The device causes one or more actions to be performed based on a result of processing the software program with the malware detection technique.

Abstract: A hypervisor of a device may receive information that identifies a virtual machine that is to use a universal asynchronous receiver/transmitter (UART) of the device. The hypervisor may map a set of first register addresses, associated with a physical UART port, and a set of variable addresses. The hypervisor may map a second set of register addresses, associated with a virtual UART port of the virtual machine, and the set of variable addresses. The hypervisor may permit the virtual machine to communicate, with a remote device, using the physical UART port based on mapping the set of second register addresses and the set of variable addresses.

Abstract: A network device is described that includes one or more processors configured to select a prioritized sub-set of a plurality of routing protocol sessions based on peer priority information. The one or more processors are configured to establish one or more routing protocol sessions of the prioritized sub-set. The one or more processors are configured to, in response to determining that a threshold for establishing the prioritized sub-set of the plurality of routing protocol sessions is satisfied, establish one or more routing protocol sessions of the plurality of routing protocol sessions that are not included in the prioritized sub-set. The one or more processors are configured to forward network traffic using the established one or more routing protocol sessions of the prioritized sub-set and the established one or more routing protocol sessions of the plurality of routing protocol sessions that are not included in the prioritized sub-set.

Abstract: Techniques are described for detecting failure of one or more virtual computing environments and causing a migration of workloads. In some examples, a computing system includes a storage medium and processing circuitry having access to the storage medium. The processing circuitry is configured to communicate with a plurality of virtual computing environments (VCEs), including a first VCE and a second VCE, wherein each of the plurality of VCEs is operated by a different public cloud provider. The processing circuitry is further configured to deploy a group of workloads to the first VCE, detect a failure of at least a portion of the first VCE, and output, to the first VCE and responsive to detecting the failure, an instruction to transfer a set of workloads of the group of workloads to the second VCE to thereby cause a migration of the set of workloads to the second VCE.

Abstract: Methods and apparatus for automatically obtaining status from an isolated AP that cannot connect to the cloud. The obtained status information is then used to automatically mitigate the issue and accelerate connecting the isolated AP back to the cloud. The methods are well suited for use in a system with a variety of access points, e.g., wireless and/or wired access points, which can be used to obtain access to the Internet or another network such as “the cloud”. Network management system has been configured to monitor the network and use preconfigured data to determine a remedial action to be automatically taken when an AP loses connectivity with the cloud.

Abstract: A first network device may generate a layer-3 virtual private network (L3VPN) route advertisement associated with the first network device. The L3VPN route advertisement may include a first portion, associated with a second network device included in an L3VPN with the first network device, for separate transport-layer tunnel and service-layer tunneling, and a second portion, associated with the second network device, for collapsed transport-layer and service-layer tunneling. The first network device may transmit the L3VPN route advertisement.

Abstract: Disclosed are methods and systems for improved wireless terminal roaming. In some embodiments, a management module determines access point density metrics for a plurality of centrally managed access points of a communications site. The density metric considers an average RSSI of access point signals received by other access points of the site, and each access point's contribution to the average. A determination of whether a particular wireless terminal roams is based on the density metrics of the source and target access point, as well as statistics relating to a current capacity of each of the access points. The disclosed embodiments may determine that a wireless terminal should transition/roam away from an access point even when that access point's RSSI value at the wireless terminal is above a threshold that would cause traditional methods to inhibit roaming.

Abstract: A network device may select a candidate entry to remove from a media access control (MAC) table maintained at the network device based on determining that the MAC table is exhausted. The candidate entry may include an identifier for a first virtual local area network (VLAN) associated with the candidate entry. The network device may receive a packet from a source node having a MAC address that does not appear in the MAC table, where the packet may include an identifier for a second VLAN in which the source node is a member. The network device may replace the candidate entry in the MAC table with a new entry corresponding to the source node based on determining that the second VLAN is associated with a greater number of ports than the first VLAN.