Abstract: In one example, a network management system (NMS) and method models services in a network. The NMS identifies externally mapped attributes in a vendor neutral yang model of a network service, assigns an attribute type to one or more of the externally mapped attributes, wherein assigning includes determining, by a learning system, the attribute type of one or more of the externally mapped attributes based on an analysis of attribute types assigned to the externally mapped attributes of other network services, constructs a separate dependency graph for each of the externally mapped attributes and builds a separate hidden service model for each of the externally mapped attributes, wherein the externally mapped attribute for each hidden service model is a merge attribute for that hidden service model.

Abstract: A first network device may establish connectivity with a second network device. The first network device may determine information that identifies a cluster identifier based on establishing connectivity with the second network device. The first network device may compare a first software version of the first network device and a second software version of the second network device. The first network device may selectively obtain and install a system image of the second network device based on comparing the first software version and the second software version. The first network device may receive, from the second network device, configuration information and user session information based on selectively obtaining the system image. The first network device and the second network device may form a high-availability cluster.

Abstract: A broadband network gateway (BNG) controller is described that includes a network subscriber database (NSDB) and one or more core applications. The NSDB is configured to store vBNG instance information for one or more subscriber devices. The vBNG instance information specifies vBNG instances operable by one or more edge routers. The vBNG instances are configured to receive requests to access service provider services from the one or more subscriber devices and to selectively authenticate the one or more subscriber devices for network services based on authentication information included in the requests to access services provider services. The one or more core applications include a network instance and configuration manager (NICM). The NICM is configured to modify the vBNG instance information at the NSDB to include an additional vBNG instance and to output, to an edge router, an instruction to generate the additional vBNG instance at the edge router.

Abstract: A first device may include one or more processors. The first device may receive a network address request to obtain a network address that is associated with an application. The network address request may include application information that identifies the application. The first device may determine that the application is associated with a rule. The first device may store the application information and information identifying the network address request. The first device may obtain the network address based on the network address request. The first device may determine that the network address is associated with the rule. The first device may provide the network address, the rule, and/or the application information to a second device, to permit the second device to enforce the rule, based on determining that the application is associated with the rule and determining that the network address is associated with the rule.

Abstract: A system and method for responding to exceptions in network services. A network management system (NMS) configures a first network service having an endpoint and a plurality of externally mapped attributes, the externally mapped attributes including one or more service level attributes and an endpoint attribute associated with the endpoint. The NMS detects an exception in the first network service, modifies the first network service in response to the exception, wherein modifying the first network service includes assigning the current value of the endpoint attribute of the first network service to the endpoint attribute of a second network service and validates the externally mapped attributes of the second network service.

Abstract: Techniques are described for performing subscriber aware two-way active measurement protocol (TWAMP) data session provisioning between two endpoints in a computer network. For example, the disclosed techniques include extending TWAMP control messaging to include a communication mode for negotiating subscriber-aware TWAMP data monitoring. If the communication mode is supported by both endpoints, a subscriber identifier is specified when a TWAMP data session is provisioned (negotiated) over the control session. The disclosed techniques further include extending TWAMP data messaging to include the subscriber identifier in each test packet for the data session. In this way, each of the endpoints may identify a subscriber corresponding to one or more received TWAMP test packets based on the subscriber identifier included in the received TWAMP test packets.

Abstract: Techniques are described for migrating data traffic, based on a new protocol priority value, from one Label Switched Path (LSP) assigned a higher initial protocol priority value to another LSP assigned a lower initial protocol priority value. For example, a network may initially establish a resource reservation LSP associated with a resource reservation protocol assigned a higher initial protocol priority value than a segment routing protocol used to establish a segment routed LSP. Rather than being unable to send data traffic on an established segment routed LSP because the segment routing protocol has a lower initial protocol priority than the resource reservation protocol, an ingress router may receive from a centralized controller a message specifying a new protocol priority value assigned to the segment routed LSP in response to which the ingress router may create or update its initial protocol priorities, and forward data traffic along the segment routed LSP.

Abstract: Techniques are described for automatic provisioning of inter-control center communications protocol (ICCP) and automatic provisioning of virtual local area networks (VLANs) on an inter-chassis link (ICL) between multi-chassis link aggregation group (MC-LAG) peer devices. The MC-LAG peer devices may comprise two network devices included in an MC-LAG that is multi-homed to each of a plurality of MC-LAG client devices. In one example, the disclosed techniques enable detection of one or more VLANs configured on a multi-homed interface of the MC-LAG, and automatic provisioning of the detected VLANs on the ICL within the MC-LAG. In another example, the disclosed techniques enable determination of one or more ICCP parameters from MC-LAG configuration information, and automatic provisioning of ICCP over the ICL according to the determined ICCP parameters. The MC-LAG may be included within an enterprise switch of an enterprise network or within a data center switch of a data center network.

Abstract: An optical coupling device can couple incident light from a fiber into waveguides, but can reduce the coupling of return light from the waveguides into the fiber. A Faraday rotator layer can rotate by forty-five degrees, with a first handedness, respective planes of polarization of incident beams, and can rotate by forty-five degrees, with a second handedness opposite the first handedness, respective planes of polarization of return beams. A redirection layer can include at least one grating coupler that can redirect an incident beam of one polarization so that the redirected path extends within the redirection layer toward a first waveguide, and can redirect an incident beam of an opposite polarization so that the redirected path extends within the redirection layer toward a second waveguide. An optional birefringent layer can spatially separate incident beam having different polarizations, so that two single-polarization grating couplers can be used.

Abstract: In one embodiment, a processor-readable medium storing code representing instructions that when executed by a processor cause the processor to update, at a memory location, a first flow state value associated with a data flow to a second flow state value when at least one of a packet from the data flow is received or the memory location is selected after a time period has expired. At least a portion of the packet is analyzed when the second flow state value represents a flow rate of a network data flow anomaly.

Abstract: In some embodiments, an apparatus includes a quadrature amplitude modulation (QAM) optical modulator which includes a first phase modulator (PM), a second PM, a tunable optical coupler (TOC), and an optical combiner (OC). The TOC is configured to split a light wave at an adjustable power splitting ratio to produce a first split light wave and a second split light wave. The first PM is configured to modulate the first split light wave in response to a first multi-level electrical signal to produce a first modulated light wave. The second PM is configured to modulate the second split light wave in response to a second multi-level electrical signal to produce a second modulated light wave. The OC is then configured to combine the first modulated light wave and the second modulated light wave to generate a QAM optical signal.

Abstract: In general, techniques are described for enabling a network of network devices (or “nodes”) to provide redundant multicast streams from redundant multicast sources to an egress network node. In some examples, the egress network node (or a controller for the network) computes maximally redundant trees (MRTs) from the egress network node to a virtual proxy node virtually added to the network topology by the egress network node for redundant multicast sources of redundant multicast streams.

Abstract: A first device may receive content from a second device based on a request for the content. The first device may be located between the second device and a third device. The first device may determine a value for a portion of the content using a function, where the value is to be used to analyze the content. The value may uniquely identify the portion of the content. The first device may determine whether a classification of the content can be determined. The first device may selectively determine the classification of the content by providing the value or the portion of the content corresponding to the value, to a fourth device when the classification cannot be determined, or determine the classification of the content using a data store when the classification can be determined. The first device may perform an action with respect to the content.

Abstract: A first component of a network device may provide an offload request to a second component of the network device to offload a data flow from the first component. The offload request may direct the second component to provide the data flow towards a destination device and bypass the first component. The first component may receive a beacon from the second component. The beacon may identify information regarding one or more data flows offloaded from the first component. The first component may process the one or more data flows based on the information regarding the one or more data flows included in the beacon and without receiving the one or more data flows.

Abstract: In some examples, a controller for a network includes a path computation module that determines, for a plurality of LSPs or other flows having a common source, shortest paths of the network from the common source to respective destinations of the plurality of LSPs based at least on a minimum bandwidth. The path computation module further determines, after determining the shortest paths, a shortest path for the LSP of the plurality of LSPs as the shortest path of the shortest paths of the network from the common source to a destination for the LSP. A path provisioning module of the controller, after the path computation module determines the shortest path for the LSP and in response to the path computation modules routing the LSP to the shortest path for the LSP on a network model of the network, installs the LSP to the network as routed to the shortest path.

Abstract: Techniques are disclosed for a queuing system for network devices. In one example, a network device determines a transmit rate of packets from the queue. In one example the network device determines the transmit rate by determining a number of tokens used over a unit of time by a token bucket shaper for the queue to dequeue the packets from the queue, wherein each of the tokens represents a given number of bytes to be dequeued from the queue. The network device determines a temporal queue length of the queue based on a target queue latency and the determined transmit rate. Further, the network device adjusts at least one parameter of the queue based on the determined temporal queue length such that an actual queue latency of the queue at the determined transmit rate is equal to the target queue latency.

Abstract: In general, techniques are described for providing software redundancy for Virtual Network Functions (VNF). In one example, a method includes, by a host process executed by an insertable service card of a network device, pinning, to a plurality of hardware-based processors, active threads of an active network function. The host process pins, to a single hardware-based processor, backup threads of a backup network function for the active network function, wherein the plurality of hardware-based processors does not include the single hardware-based processor. The host process pins, to the single hardware-based processor, management threads of the active and backup network functions. The single hardware-based processor executes the management threads of the active and backup network functions to cause the management thread of the backup network function to receive, from the management thread of the active network function, state data generated by the active threads.

Abstract: In some embodiments, an apparatus includes a memory and a processor operatively coupled to the memory. The processor is configured to be operatively coupled to a first optical transponder and a second optical transponder. The processor is configured to receive, from the second optical transponder, a signal representing a skew value of an optical signal and a signal representing a bit-error-rate (BER) value of the optical signal. The skew value is associated with a skew between an in-phase component of the optical signal and a quadrature component of the optical signal. The processor is configured to determine, based on at least one of the skew value or the BER value, if a performance degradation of the first optical transponder satisfies a threshold. The processor is configured to send a control signal to the first optical transponder to adjust a pulse shaping or a data baud rate of the first optical transponder.

Abstract: A method may include causing a signal to be transmitted that includes a plurality of wavelengths. The signal may be transmitted via an optical fiber that is associated with a particular wavelength. The particular wavelength may be included in the plurality of wavelengths. The method may include filtering the signal, based on the particular wavelength, to generate a filtered signal. The filtered signal may include the particular wavelength. The method may include detecting the filtered signal in association with the optical fiber. The method may include determining the particular wavelength based on the filtered signal. The method may include storing or providing information identifying at least one of the particular wavelength, the optical fiber, or a transmitter that transmitted the signal.