Abstract: Apparatus and methods described herein relate to an apparatus including a set of ports and a processor operatively coupled to each port of the set of ports. A port from the set of ports can be associated with a port of a multi-chassis aggregate (MCAE) interface and a virtual local area network (VLAN). The processor can generate an untagged data unit and tagged data units. The processor can send the untagged data unit and the tagged data units via the port from the set of ports, and can receive a tagged data unit included in the tagged data units, and/or the untagged data unit. The processor can also forward the received data unit to a destination network peer when the received tagged data unit is associated with the VLAN, and can disable the port of the MCAE interface in response to the port from the set of ports receiving the data unit, when the received data unit is associated with the VLAN.

Abstract: A variety of different graphical user interfaces are generated that when displayed provide a visual and interactive representation of one or more performance metrics associated with the operation of a computer network. The graphical user interfaces may be used to monitor the underlay computer network for a virtualization infrastructure, as one example. Aspects include grouping the servers of a computer network into a plurality of aggregates, each aggregate comprising one or more servers. A set of probes are configured that are issued by an agent of a server in one aggregate and sent through the computer network to one or more agents in the server(s) of a different aggregate. Responses and other measurements taken based on the issuance of the probes is gathered and analyzed to generate metrics that are then used to generate, at least in part, the information provided in the graphical user interfaces.

Abstract: A control device may subscribe to receive data from a network device. The data may be associated with a plurality of packets that have been dropped by the network device and include a first descriptor based on a type of packet drop associated with a packet of the plurality of packets that have been dropped by the network device, and one or more second descriptors based on a packet flow associated with the plurality of packets that have been dropped by the network device. The control device may determine a dropped packet profile associated with the network device, based on the first descriptor and the one or more second descriptors. The control device may generate a first notification based on the dropped packet profile associated with the network device and transmit the first notification to cause an action to be performed based on the first notification.

Abstract: A device stores time series data, based on time stamps, in a compact prefix tree, and receives new time series data to be added to the compact prefix tree. The device determines whether the new time series data is different than previously stored time series data in the compact prefix tree. The device selectively stores the new time series data in the compact prefix tree by storing the new time series data in the compact prefix tree when the new time series data is different than the previously stored time series data in the compact prefix tree, and updates a last time stamp for one of the previously stored time series data, based on the new time series data, when the new time series data is not different than the one of the previously stored time series data.

Abstract: A first network device permits a bidirectional forwarding detection (BFD) session with a second network device. The first network device is a designated forwarder for a third network device, a first link is provided between the first network device and the third network device, the second network device is a backup designated forwarder for the third network device, a second link is provided between the second network device and the third network device. The first network device detects a link failure associated with the first link between the first network device and the third network device, and provides, via the BFD session, a BFD message to the second network device. The BFD message includes an indication of the link failure, and the BFD message is to cause the second network device to be a new designated forwarder for the third network device.

Abstract: A device may store first information regarding a first pseudowire connection with a first device, wherein the first pseudowire connection provides access to an Ethernet virtual private network (EVPN) to communicate with a host device. The device may store second information regarding a second pseudowire connection with a second device, wherein the second pseudowire connection provides access to the EVPN to communicate with the host device. The device may receive a message that includes a configuration identifier and identify the configuration identifier. The device may change a first characteristic of the first pseudowire connection based on the configuration identifier. The device may change a second characteristic of the second pseudowire connection based on the configuration identifier. The device may receive data from the host device based on changing the first characteristic of the first pseudowire connection and changing the second characteristic of the second pseudowire connection.

Abstract: Embodiments of the invention describe flexible (i.e., elastic) data center architectures capable of meeting exascale, while maintaining low latency and using reasonable sizes of electronic packet switches, through the use of optical circuit switches such as optical time, wavelength, waveband and space circuit switching technologies. This flexible architecture enables the reconfigurability of the interconnectivity of servers and storage devices within a data center to respond to the number, size, type and duration of the various applications being requested at any given point in time.

Abstract: A system and method for modifying services provided by one or more network devices. A processor of a first network device identifies defined events in each of a plurality of applications, including a first defined event associated with a first application. The processor assigns a signal-route to each defined event. The processor then executes the first application and, when the processor detects occurrence of the first defined event during execution of the first application, the processor modifies services provided by a second network device by adding the first signal-route to or removing the first signal-route from a routing information base (RIB) on the first network device and advertising, to the second network device, the change in the RIB.

Abstract: The disclosed computer-implemented method may include (1) receiving, at a source node, a request to discover a plurality of network paths that each lead from the source node to a destination node and (2) discovering the plurality of network paths by (A) identifying each next hop between the source node and the destination node, (B) sending, from the source node to each next hop, a path-request probe that prompts the next hop to (i) determine each next-closest hop and (ii) return, to the source node, a path-response probe that identifies the next-closest hops, (C) receiving the path-response probes from the next hops, (D) determining, at the source node based on the path-response probes, that one or more of the plurality of network paths include the next hops and the next-closest hops, and then (E) iteratively discovering any subsequent hops by sending a subsequent path-request probe to each next-closest hop.

Abstract: A device may include one or more processors to receive network topology information of a network and device capability information of devices in the network; detect a threat to the network; determine threat information associated with the threat; select a security policy and an enforcement device of the network to enforce the security policy based on the network topology information, the device capability information, and the threat information; and perform an action associated with the threat based on the security policy and the enforcement device.

Abstract: Apparatus and methods described herein relate to an apparatus including a memory and a processor operatively coupled to the memory. The processor can receive a package associated with a network management device and management input. The processor can generate at least one management device schema based on the package, and can modify a controller schema based on the management input and the at least one management device schema. The processor can receive a configuration input signal that includes instructions to configure the network management device. The processor can determine a management device schema associated with the network management device based on the controller schema, and can convert the configuration input signal into a configuration signal based on the management device schema. The processor can also send the configuration signal to cause a modification to a configuration of the network management device based on the configuration signal.

Abstract: A network device is configured to receive an inbound packet from a first server device via a network tunnel, the first inbound packet including an outer header, a virtual private network (VPN) label, an inner header, and a data payload, the inner header including an inner source IP address of a source virtual machine. The processors are also configured to determine a first tunnel identifier, determine, based on the inner source IP address, a second tunnel identifier associated with a second server device hosting the source virtual machine, compare the second tunnel identifier with the first tunnel identifier to determine whether the tunnel on which the first inbound packet was received is the same as a tunnel used for forwarding traffic to the source virtual machine, and drop the inbound packet when the second tunnel identifier does not match the first tunnel identifier.

Abstract: In one example, a method includes by a Software Defined Networking (SDN) controller, receiving one or more virtual routes to virtual interfaces from a first virtual router agent managed by the SDN controller, the one or more virtual routes received via a messaging protocol session between the SDN controller and the first virtual router agent; storing, by the SDN controller, the one or more virtual routes to a data structure; in response to determining the messaging protocol session has closed, marking, by the SDN controller, the one or more virtual routes in the data structure as stale without deleting the one or more virtual routes from the data structure and without withdrawing the virtual routes from routing protocol peers of the SDN controller; and subsequent to marking the one or more virtual routes as stale, sending, by the SDN controller, the one or more virtual routes to a second virtual router agent.

Abstract: A device may receive information that identifies a set of tasks to be executed and precedence constraints associated with the set of tasks. The device may store the set of tasks in a data structure including a directed acyclic graph, and may determine a set of paths based on the information that identifies the set of tasks and the precedence constraints associated with the set of tasks. Each path, of the set of paths, may include particular tasks of the set of tasks. The device may determine a set of path execution times, for the set of paths, based on an artificial intelligence technique. The device may determine a critical path, of the set of paths, based on the set of path execution times. The device may determine an execution priority of the set of tasks based on the critical path. The device may provide the set of tasks for execution based on the execution priority.

Abstract: Techniques are described for an enhanced two-way active measurement protocol (TWAMP) to measure network performance of links and/or network paths in a fully converged Software Defined Wide Area Network (SD-WAN), using a single TWAMP instance. In one example, a first network device executing a TWAMP session-sender may send a test packet embedded with one or more metrics to the TWAMP session-reflector executed by another network device, which reflects the test packet embedded with one or more metrics back to the TWAMP session-sender. The TWAMP session-sender may further reflect a test packet embedded with one or more additional metrics back to a TWAMP session-reflector to enable the network devices to independently perform network performance calculations using the metrics embedded within the test packets exchanged in a single TWAMP instance.

Abstract: An example user device may include a terrestrial mobile network radio; a satellite network radio; and one or more processors to establish, via the terrestrial mobile network radio, a first communication link with a terrestrial mobile network, establish, via the satellite network radio, a second communication link with a satellite network, monitor a characteristic of the first communication link and a characteristic of the second communication link, select the terrestrial mobile network or the satellite network for traffic communication based on the characteristic of the first communication link and the characteristic of the second communication link, and/or perform an action associated with the traffic communication based on selecting the terrestrial mobile network or the satellite network for traffic communication.

Abstract: A device may determine a link aggregation group (LAG) that aggregates links that includes a first group of links that connects the device to a first provider edge (PE) device and a second group of links that connects the device to the second PE device, where the first PE device and the second PE device are on an Ethernet virtual private network (EVPN) and are multi-homed PE devices for the device, and where the first PE device provides a local connection to a customer edge (CE) device for the device. The device may receive a message from the first PE device indicating that the first PE device lacks a connection with the EVPN, and may send, based on the message, traffic intended for the CE device via the first PE device and traffic intended for the EVPN via the second PE device and not the first PE device.

Abstract: A device may receive, from an ingress device, a packet for a protocol session associated with detecting faults in a path of a network that includes a link aggregation group (LAG). The packet may be encapsulated with a user datagram protocol (UDP) header that includes a dynamically assigned UDP source port identifier. The LAG may include a set of links. The device may select, using the dynamically assigned UDP source port identifier, a link in the LAG to use in the path. The device may provide, using the selected link, the packet to one or more downstream devices to permit a downstream device, of the one or more downstream devices, to determine whether packet timeout has occurred. The device may receive an instruction to maintain the protocol session or to close the protocol session and close the path. The device may provide the instruction to the ingress device.

Abstract: Disclosed are structures as well as methods of manufacture and operation of integrated optoelectronic devices that facilitate directly heating the diode or waveguide structures to regulate a temperature of the device while allowing electrical contacts to be placed close to the device to reduce the electrical resistance. Embodiments include, in particular, heterogeneous electro-absorption modulators that include a compound-semiconductor diode structure placed above a waveguide formed in the device layer of an SOI substrate.

Abstract: Techniques are disclosed for extending scalable policy management to supporting network devices. A network device comprising a memory and a processor may perform various aspects of the techniques. The memory may be configured to store a policy. The processor may be configured to obtain the policy to be enforced by a supporting network device coupled to a server, and identify a port of the supporting network device to which the server is coupled via the switch fabric. The policy controller may also identify a workload executed by the server to which the policy is associated, and convert the policy into configuration data supported by the network device. The policy controller may further configure, based on the configuration data, the network device to enforce the policy with respect to network traffic received via the identified port.