Abstract: A network node may receive a packet having an inner internet protocol (IP) header and an outer IP header. The inner IP header may be encrypted. A loose source routing (LSR) field of the outer IP header may identify a recipient address. The network node may determine, based on the recipient address identified in the LSR field, a tunnel endpoint associated with a receiving network node. The network node may update the outer IP header of the packet to obtain an updated packet with an updated outer IP header. A source address of the updated outer IP header may be updated to a tunnel endpoint associated with the network node, and the destination address of the updated outer IP header may be updated to a tunnel endpoint associated with the receiving network node. The network node may route the updated packet according to the updated outer IP header.

Abstract: A disclosed apparatus may include (1) a circuit board and (2) a set of conductive contacts incorporated into the circuit board wherein the conductive contacts (A) include a first positive/negative contact pair that is laid out in a first direction along the circuit board, (B) include a second positive/negative contact pair that is laid out in a second direction that is perpendicular to the first direction along the circuit board, and (C) facilitate electrically coupling, to the circuit board, at least one communication device that implements a differential signaling scheme. Various other apparatuses, systems, and methods are also disclosed.

Abstract: Described are various configurations of optical structures having asymmetric-width waveguides. A photodetector can include parallel waveguides that have different widths, which can be connected via passive waveguide. One or more light absorbing regions can be proximate to the waveguides to absorb light propagating through one or more of the parallel waveguides. Multiple photodetectors having asymmetric width waveguides can operate to transduce light in different modes in a polarization diversity optical receiver.

Abstract: In general, techniques are described for provided result reporting via authentication, authorization and accounting (AAA) protocols. An authorization server comprising a control unit may be configured to perform the techniques. The control unit may authorize a network access server to allow an endpoint device to access one or more services in accordance with a network access protocol. The control unit may also request, in accordance with the network access protocol, a result from the network access server as to whether the one or more authorized services are presently provided for use by the endpoint device.

Abstract: For use in a system including a first data forwarding device, a second data forwarding device, a third data forwarding device, a first communications link between the first data forwarding device and the second data forwarding device, and a second communications link between the first data forwarding device and the third data forwarding device, the first and second communications links belonging to a link aggregation group (LAG), a method includes (1) generating a message (i) for testing a first path between the first data forwarding device and the second data forwarding device, and a second path between the first data forwarding device and the third data forwarding device, and (ii) including an Internet protocol (IP) datagram including a multicast IP destination address and a payload containing path testing information; and (2) sending, over the LAG, the message from the first data forwarding device to both the second data forwarding device and the third data forwarding device.

Abstract: A device may receive a trained data model that has been trained using historical link quality information associated with a set of links. The device may determine, after receiving the trained data model, link quality information associated with a link that is actively supporting traffic. The device may classify the link by using the link quality information as input for the data model. The data model may classify the link into a class of a set of classes associated with measuring link quality. The device may determine an actual quality level of the link. The device may selectively update the class of the link after determining the actual link quality of the link. The device may perform one or more actions associated with improving link quality based on classifying the link and/or selectively updating the class of the link.

Abstract: A method includes receiving, by processing circuitry of a first network device, an indication of a logical address associated with an interface to a second network device and adding, by the processing circuitry, an entry to a forwarding table of the first network device, the entry in the forwarding table specifying the logical address. The method further includes adding, by the processing circuitry, an entry to a resolver database of the first network device to which the entry in the forwarding table specifying the logical address points and resolving, by the processing circuitry, the logical address to a hardware address of the second network device.

Abstract: A disclosed method may include (1) receiving a packet at a tunnel driver in kernel space on a routing engine of a network device, (2) identifying, at the tunnel driver, metadata of the packet that indicates whether at least one firewall filter had already been correctly applied to the packet before the packet arrived at the tunnel driver, (3) determining, based at least in part on the metadata of the packet, that the firewall filter had not been correctly applied to the packet before the packet arrived at the tunnel driver, and then in response to determining that the firewall filter had not been correctly applied to the packet, (4) invoking at least one firewall filter hook that applies at least one firewall rule on the packet before the packet is allowed to exit kernel space on the routing engine. Various other apparatuses systems, and methods are also disclosed.

Abstract: A network device includes one or more processors configured to process, a request, from a subscriber device, via a wireless connection device, for network parameters for accessing one or more services provided by a service provider network, the request for network parameters comprising identifying data associated with a subscriber of the service provider network and output, to a service server, an authentication request for the subscriber device, the authentication request indicating the identifying data. In response to receiving an authentication reply indicating the authentication request for the subscriber device has been approved and a service profile for the subscriber, the one or more processors are configured to output, to the wireless connection device, configuration information corresponding to the service profile for the subscriber and output, to the subscriber device, network parameters for accessing the one or more services provided by the service provider network.

Abstract: A device may load a process under test into virtual memory associated with the device. The virtual memory may include a plurality of memory pages. The device may insert a malware inspection element and a memory tracking element into the process under test and may provide a notification of an event associated with the process under test to a memory tracking element. The device may identify, using the memory tracking element, one or more memory pages of the plurality of memory pages. The one or more memory pages may be assigned to, and used by, the process under test. The device may generate, based on identifying the one or more memory pages, a memory map, associated with the process under test, that may include information identifying the one or more memory pages as being assigned to, and used by, the process under test.

Abstract: A disclosed method may include (1) determining that a packet traversing a network device has been selected for conditional tracing by (A) comparing a characteristic of the packet against a firewall rule that calls for all packets exhibiting the characteristic to be conditionally debugged while traversing the network device and (B) determining, based at least in part on the comparison, that the firewall rule applies to the packet due at least in part to the packet exhibiting the characteristic, (2) tracing a journey of the packet within the network device in response to the determination by collecting information about the packet's journey through a network stack of the network device, and then (3) performing at least one action on the network device based at least in part on the information collected about the packet's journey through the network stack. Various other systems, methods, and computer-readable media are also disclosed.

Abstract: A method may include causing a signal to be transmitted that includes a plurality of wavelengths. The signal may be transmitted via an optical fiber that is associated with a particular wavelength. The particular wavelength may be included in the plurality of wavelengths. The method may include filtering the signal, based on the particular wavelength, to generate a filtered signal. The filtered signal may include the particular wavelength. The method may include detecting the filtered signal in association with the optical fiber. The method may include determining the particular wavelength based on the filtered signal. The method may include storing or providing information identifying at least one of the particular wavelength, the optical fiber, or a transmitter that transmitted the signal.

Abstract: A device may receive information identifying a set of tasks to be executed by a microservices application that includes a plurality of microservices. The device may determine an execution time of the set of tasks based on a set of parameters and a model. The set of parameters may include a first parameter that identifies a first number of instances of a first microservice of the plurality of microservices, and a second parameter that identifies a second number of instances of a second microservice of the plurality of microservices. The device may compare the execution time and a threshold. The threshold may be associated with a service level agreement. The device may selectively adjust the first number of instances or the second number of instances based on comparing the execution time and the threshold.

Abstract: A disclosed method for applying firewall rules on packets in kernel space on network devices may include (1) intercepting, via a socket-intercept layer in kernel space on a routing engine of a network device, a packet that is destined for a remote device and then, in response to intercepting the packet in kernel space on the routing engine, (2) identifying an egress interface index that specifies an egress interface that (A) is external to kernel space and (B) is capable of forwarding the packet from the network device to the remote device, and (3) applying, on the packet in kernel space, at least one firewall rule based at least in part on the egress interface index before the packet egresses from the routing engine. Various other apparatuses, systems, and methods are also disclosed.

Abstract: The disclosed apparatus may include (1) a plurality of individual heatsink bases designed to interface with a plurality of removable communication modules installed on a telecommunications device, (2) a plurality of heat pipes that are thermally coupled to the individual heatsink bases, and (3) a ganged heat exchanger that is (A) mechanically coupled to the telecommunications device and (B) thermally coupled to the heat pipes. Various other apparatuses, systems, and methods are also disclosed.

Abstract: The techniques describe adaptive load-balancing based on traffic feedback from packet processors. In one example, a source virtual network node of the network device may determine whether a particular destination packet processor is or may become oversubscribed. For example, source packet processors of the source virtual network node may exchange feedback messages including traffic flow rate information. The source virtual network node may compute a total traffic flow rate and compare the total traffic flow rate with a bandwidth of the particular destination packet processor. In response to determining that the bandwidth of the destination packet processor is oversubscribed, the source virtual network node may update a forwarding plane data structure to reduce a likelihood of selecting the destination packet processor to which to forward packet flows.

Abstract: A device may receive a set of design parameters for a network service. The set of design parameters may include information that identifies one or more network functions associated with the network service. The device may determine attribute information associated with a plurality of virtual network functions (VNFs). A VNF, of the plurality of VNFs, may be configurable to perform at least one network function of the one or more network functions. The device may generate a network service design, associated with providing the network service, based on the set of design parameters and the attribute information. The network service design may include information identifying one or more VNFs, of the plurality of VNFs, that are capable of providing the network service in accordance with the set of design parameters. The device may provide information associated with the network service design.

Abstract: An example device includes one or more memories; and one or more processors, communicatively coupled to the one or more memories, to, during a loading process of a boot process of an operating system, identify a file to be loaded for the operating system, where the operating system is being loaded during the boot process; identify a manifest of the file; verify the manifest of the file based on a supplied signature of the manifest; identify a fingerprint, associated with the file, in a fingerprint library; calculate a hash of the file; compare the hash of the file and the fingerprint; and verify the file based on the hash of the file matching the fingerprint associated with the file.

Abstract: Techniques are disclosed for implementing scalable port range policies across a plurality of categories that support application workloads. In one example, a policy agent receives, from a centralized controller for a computer network, a plurality of policies. Each policy of the plurality of policies includes one or more policy rules, and each of the one or more policy rules specifies one or more tags specifying one or more dimensions for application workloads executed by the one or more computing devices and a corresponding port range. The policy agent assigns, based on a policy rule, a port range specified by the policy rule to objects of the one or more computing devices that belong to categories described by the one or more dimensions of the one or more tags of the policy rule. The categories support the application workloads and are assigned to the tags by a centralized controller.

Abstract: Optical alignment of an optical connector to input/output couplers of a photonic integrated circuit can be achieved by first actively aligning the optical connector successively to two loopback alignment features formed in the photonic chip of the PIC, optically unconnected to the PIC, and then moving the optical connector, based on precise knowledge of the positions of the loopback alignment features relative to the input/output couplers of the PIC, to a position aligned with the input/output couplers of the PIC and locking it in place.