Abstract: An example network device includes a memory storing a configuration database including current configuration data having a current revision value, and one or more processors implemented in digital logic circuitry and configured to receive configuration data for the network device, the configuration data including an expected current revision value, determine an actual current revision value of current configuration data for the network device, determine whether the expected current revision value is equal to the actual current revision value, and send an error message in response to determining that the expected current revision value is not equal to the actual current revision value.

Abstract: In general, techniques are disclosed for automatic discovery and load balancing of virtual service instances of a plurality of cloud data centers within a Software Defined Networking (SDN) or a Network Functions Virtualization (NFV) environment. In one example, a global load balancing device (GLB) of a first cloud data center receives, from an SDN controller, address information for a first set of virtual service instances provided by the first cloud data center and a hostname of a domain for which to perform load balancing across the plurality of cloud data centers. The GLB device requests, from a domain name server (DNS) for the domain, address information for other sets of virtual service instances provided by other cloud data centers. Further, the GLB device applies a load balancing algorithm to direct network traffic to one or more of the virtual service instances provided by the plurality of cloud data centers.

Abstract: A device may receive a set of border gateway protocol labels via a set of corresponding border gateway protocol messages. A border gateway protocol label, of the set of border gateway protocol labels, may be associated with a label descriptor attribute. The label descriptor attribute being associated with providing information regarding a forwarding semantic associated with the border gateway protocol label. The device may select the border gateway protocol label for routing network traffic toward a network device associated with the border gateway protocol label based on the label descriptor attribute. The device may route the network traffic toward the network device based on the border gateway protocol label and after selecting the border gateway protocol label.

Abstract: A broadband network gateway (BNG) controller is described that includes a network subscriber database (NSDB) and one or more core applications. The NSDB is configured to store vBNG instance information for one or more subscriber devices. The vBNG instance information specifies vBNG instances operable by one or more edge routers. The vBNG instances are configured to receive requests to access service provider services from the one or more subscriber devices and to selectively authenticate the one or more subscriber devices for network services based on authentication information included in the requests to access services provider services. The one or more core applications include a network instance and configuration manager (NICM). The NICM is configured to modify the vBNG instance information at the NSDB to include an additional vBNG instance and to output, to an edge router, an instruction to generate the additional vBNG instance at the edge router.

Abstract: This disclosure describes techniques for analyzing information generated as a result of monitoring resources within computing environments. In one example, this disclosure describes a method that includes observing a plurality of alerts generated in response to monitoring resources associated with a plurality of connected elements within a network; determining a plurality of occurrence counts; determining a plurality of concurrent occurrence counts, wherein each of the plurality of concurrent occurrence counts represents a count of concurrent occurrences of two or more of the alerts in the set of historical alerts; and identifying one or more root cause alerts, wherein the one or more root cause alerts are determined based on the plurality of occurrence counts and the plurality of the concurrent occurrence counts, and wherein the one or more root cause alerts are a subset of the plurality of alerts.

Abstract: A first network device may establish connectivity with a second network device. The first network device may determine information that identifies a cluster identifier based on establishing connectivity with the second network device. The first network device may compare a first software version of the first network device and a second software version of the second network device. The first network device may selectively obtain and install a system image of the second network device based on comparing the first software version and the second software version. The first network device may receive, from the second network device, configuration information and user session information based on selectively obtaining the system image. The first network device and the second network device may form a high-availability cluster.

Abstract: A network device may determine, based on at least one network egress characteristic associated with a network device, a measure of priority associated with a network address. The network device may provide the measure of priority to a plurality of other routers, determine that a particular network egress characteristic of the at least one network egress characteristic has changed, and update the measure of priority based on the particular network egress characteristic. Based on the updated measure of priority, the network device may perform an action.

Abstract: A system and method for responding to exceptions in network services. A network management system (NMS) configures a first network service having an endpoint and a plurality of externally mapped attributes, the externally mapped attributes including one or more service level attributes and an endpoint attribute associated with the endpoint. The NMS detects an exception in the first network service, modifies the first network service in response to the exception, wherein modifying the first network service includes assigning the current value of the endpoint attribute of the first network service to the endpoint attribute of a second network service and validates the externally mapped attributes of the second network service.

Abstract: A first device may include one or more processors. The first device may receive a network address request to obtain a network address that is associated with an application. The network address request may include application information that identifies the application. The first device may determine that the application is associated with a rule. The first device may store the application information and information identifying the network address request. The first device may obtain the network address based on the network address request. The first device may determine that the network address is associated with the rule. The first device may provide the network address, the rule, and/or the application information to a second device, to permit the second device to enforce the rule, based on determining that the application is associated with the rule and determining that the network address is associated with the rule.

Abstract: A network function virtualization (NFV) platform may include one or more processors to identify a condition associated with the NFV platform, where the condition may affect operation of at least one virtual network function (VNF) hosted by or associated with the NFV platform; determine, based on the condition, information that may be provided or an action that may be performed with regard to the at least one VNF; and/or generate or transmit a message identifying the information and/or that may cause the action to be performed with regard to the at least one VNF.

Abstract: In some embodiments, an apparatus includes a switch fabric having at least a first switch stage and a second switch stage, an edge device operatively coupled to the switch fabric and a management module. The edge device is configured to send a first portion of a data stream to the switch fabric such that the first portion of the data stream is received at a queue of the second switch stage of the switch fabric via the first switch stage of the switch fabric. The management module is configured to send a flow control signal configured to trigger the edge device to suspend transmission of a second portion of the data stream when a congestion level of the queue of the second switch stage of the switch fabric satisfies a condition in response to the first portion of the data stream being received at the queue.

Abstract: Techniques are described for performing subscriber aware two-way active measurement protocol (TWAMP) data session provisioning between two endpoints in a computer network. For example, the disclosed techniques include extending TWAMP control messaging to include a communication mode for negotiating subscriber-aware TWAMP data monitoring. If the communication mode is supported by both endpoints, a subscriber identifier is specified when a TWAMP data session is provisioned (negotiated) over the control session. The disclosed techniques further include extending TWAMP data messaging to include the subscriber identifier in each test packet for the data session. In this way, each of the endpoints may identify a subscriber corresponding to one or more received TWAMP test packets based on the subscriber identifier included in the received TWAMP test packets.

Abstract: A system is configured to determine a first power level of a first signal output from a first modulator, and determine a second power level of a second signal output from a second modulator. The first signal may include a first optical signal associated with a particular polarization orientation, and the second signal may include a second optical signal associated with the particular polarization orientation. The system is configured to determine a relationship between the first power level and the second power level, and to set, based on the relationship between the first power level and the second power level, a reverse bias voltage associated with the first modulator, where the reverse bias voltage may be used to control the first power level of the first signal.

Abstract: A device may receive a digital voucher, a customer certificate, and configuration information for automatically configuring the device. The digital voucher may include a first customer identifier that identifies a customer associated with the device and a device identifier that identifies the device. The customer certificate may include a second customer identifier that identifies the customer and a customer public key associated with the customer. The configuration information may include information that identifies a configuration for automatically configuring the device. The device may validate at least one of the digital voucher, the customer certificate, or the configuration information. The device may configure the device, using the configuration, based on validating at least one of the digital voucher, the customer certificate, or the configuration information.

Abstract: A device receives policy information associated with configuring a network, and receives network information associated with the network. The device determines, based on the network information, that the policy information is associated with implementation of egress peer engineering techniques for the network, and identifies, based on the network information, a first set of destinations of the network that satisfies a particular threshold bandwidth. The device assigns costs and bandwidths to the first set of destinations based on the policy information, and monitors bandwidth utilization by the first set of destinations. The device processes information associated with the first set of destinations, with a model, based on the bandwidth utilization and based on the egress peer engineering techniques, to generate a first set of ranked destinations, and causes traffic in the network to be managed based on the first set of ranked destinations and the policy information.

Abstract: In one example, a network management system (NMS) and method models services in a network. The NMS identifies externally mapped attributes in a vendor neutral yang model of a network service, assigns an attribute type to one or more of the externally mapped attributes, wherein assigning includes determining, by a learning system, the attribute type of one or more of the externally mapped attributes based on an analysis of attribute types assigned to the externally mapped attributes of other network services, constructs a separate dependency graph for each of the externally mapped attributes and builds a separate hidden service model for each of the externally mapped attributes, wherein the externally mapped attribute for each hidden service model is a merge attribute for that hidden service model.

Abstract: In some embodiments, an apparatus includes a quadrature amplitude modulation (QAM) optical modulator which includes a first phase modulator (PM), a second PM, a tunable optical coupler (TOC), and an optical combiner (OC). The TOC is configured to split a light wave at an adjustable power splitting ratio to produce a first split light wave and a second split light wave. The first PM is configured to modulate the first split light wave in response to a first multi-level electrical signal to produce a first modulated light wave. The second PM is configured to modulate the second split light wave in response to a second multi-level electrical signal to produce a second modulated light wave. The OC is then configured to combine the first modulated light wave and the second modulated light wave to generate a QAM optical signal.

Abstract: A first device may receive content from a second device based on a request for the content. The first device may be located between the second device and a third device. The first device may determine a value for a portion of the content using a function, where the value is to be used to analyze the content. The value may uniquely identify the portion of the content. The first device may determine whether a classification of the content can be determined. The first device may selectively determine the classification of the content by providing the value or the portion of the content corresponding to the value, to a fourth device when the classification cannot be determined, or determine the classification of the content using a data store when the classification can be determined. The first device may perform an action with respect to the content.

Abstract: An optical coupling device can couple incident light from a fiber into waveguides, but can reduce the coupling of return light from the waveguides into the fiber. A Faraday rotator layer can rotate by forty-five degrees, with a first handedness, respective planes of polarization of incident beams, and can rotate by forty-five degrees, with a second handedness opposite the first handedness, respective planes of polarization of return beams. A redirection layer can include at least one grating coupler that can redirect an incident beam of one polarization so that the redirected path extends within the redirection layer toward a first waveguide, and can redirect an incident beam of an opposite polarization so that the redirected path extends within the redirection layer toward a second waveguide. An optional birefringent layer can spatially separate incident beam having different polarizations, so that two single-polarization grating couplers can be used.