Abstract: In general, techniques are described for generating reversible mappings for management systems. The management system may include an interface and a processor. The interface may communicatively couple the management system to network devices. The processor may generate a data structure that represents each expression of a forward mapping as a separate node of the data structure. The processor may also translate one or more of the expressions represented as the separate nodes in the data structure to corresponding one or more negated expressions so as to form a reverse mapping. Further, the processor may apply the reverse mapping to the low-level configuration of the first network device to obtain the high-level configuration.

Abstract: A high-performance, scalable and drop-free data center switch fabric and infrastructure is described. The data center switch fabric may leverage low cost, off-the-shelf packet-based switching components (e.g., IP over Ethernet (IPoE)) and overlay forwarding technologies rather than proprietary switch fabric. In one example, host network accelerators (HNAs) are positioned between servers (e.g., virtual machines or dedicated servers) of the data center and an IPoE core network that provides point-to-point connectivity between the servers. The HNAs are hardware devices that embed virtual routers on one or more integrated circuits, where the virtual router are configured to extend the one or more virtual networks to the virtual machines and to seamlessly transport packets over the switch fabric using an overlay network. In other words, the HNAs provide hardware-based, seamless access interfaces to overlay technologies used for communicating packet flows through the core switching network of the data center.

Abstract: A provider edge device may receive a first MAC/IP route advertisement that identifies a MAC route, or a MAC and IP route, relating to an endpoint device. The provider edge device may generate and provide a MAC/IP route proxy advertisement based on the MAC route or the MAC and IP route, detect a potential decrease in reliability of the MAC route or the MAC and IP route, broadcast a request to verify the reliability of the MAC and IP route, determine whether the reliability of the MAC route, or the MAC and IP route, has decreased, and perform an action to cause withdrawal of the MAC/IP route proxy advertisement, or to cause a second MAC/IP route advertisement that identifies the MAC route, or the MAC and IP route, to be provided, based on determining whether the reliability of the MAC route, or the MAC and IP route, has decreased.

Abstract: A device determines a first current, of a first input phase of a power system, and a second current, of a second input phase of the power system. The device determines whether the first input phase and the second input phase are balanced based on the first current and the second current. When the first input phase and the second input phase are not balanced, the device selects the first input phase and an output phase of the power system. The device balances the first input phase and the second input phase by using the first input phase and the output phase.

Abstract: A device may receive a file to be analyzed in a sandbox environment, and may determine configuration information for configuring the sandbox environment. The configuration information may be determined based on at least one of: file information associated with the file to be analyzed, or client device information associated with a client device for which the file is intended. The device may configure the sandbox environment using the configuration information. The configuration information may identify a system configuration for the sandbox environment. The device may analyze the file in the sandbox environment based on configuring the sandbox environment using the configuration information.

Abstract: In some examples, a switching system includes a plurality of fabric endpoints and a multi-stage switching fabric having a plurality of fabric planes each having a plurality of stages to switch data units between any of the plurality of fabric endpoints. A fabric endpoint of the fabric endpoints is configured to send, to a switch of a first one of the stages and within a first fabric plane of the plurality of fabric planes, a self-ping message destined for the fabric endpoint. The fabric endpoint is configured to send, in response to determining the fabric endpoint has not received the self-ping message after a predetermined time, an indication of a connectivity fault for the first fabric plane.

Abstract: The techniques may provide a hierarchical scheduler for dynamically computing rate credits when a plurality of queues share an intermediate node. For example, the hierarchical scheduler may group respective sets of queues with respective virtual subscribers to be associated with a shared intermediate node. The weight used by the shared intermediate node may be computed as a function of the number of virtual subscriber child members of the shared intermediate node and their respective weights to correctly proportion the services to the queues. The techniques may also provide a hierarchical scheduler for dynamically computing rate credits allocated to queues associated with a shared intermediate node. For example, the number of rate credits allocated to a queue for a virtual subscriber is based on the product of the virtual subscriber weight and a queue weighted fraction of the queues for the virtual subscriber.

Abstract: A device may include one or more processors to receive a file that may be analyzed for malware; open the received file in a secure environment; determine that a secondary file in the secure environment may have been accessed based on the received file being opened; analyze the secondary file in the secure environment to identify malware; and/or perform an action associated with the received file based on the secondary file being analyzed.

Abstract: An apparatus includes a finite impulse response (FIR) filter to receive a digital signal and a transmitter, operatively coupled to the FIR filter, to transmit an analog signal, converted from the digital signal, to a communication channel. The FIR filer is configured to change at least one operating parameter based on a bandwidth of the analog signal after transmission in the communication channel. The bandwidth of the analog signal is estimated, using an estimator, based at least in part on raw sampling data generated by an analog-to-digital converter (ADC) operatively coupled to the transmitter.

Abstract: A network device may detect a reduced switching fabric bandwidth due to switching fabric degradation of a switching fabric. The network device may allocate the reduced switching fabric bandwidth to one or more interfaces of a packet processor. The network device may determine a first maximum reservable bandwidth for an interface of the one or more interfaces. The network device may identify a reserved bandwidth for the interface. The network device may determine an unreserved bandwidth for the interface based on the first maximum reservable bandwidth and the reserved bandwidth. The network device may advertise the unreserved bandwidth, for the interface, to a neighbor network device that communicates with the network device via the interface. The network device may provide an instruction, to the neighbor network device, for the neighbor network device to update a second maximum reservable bandwidth associated with the neighbor network device.

Abstract: An example management device includes memory to store a current set of values and a candidate set of values representing a final state of the current set of values after one or more operations on the current set of values have been performed on the current set of values. The management device also includes a processor to generate operations to be executed by a network device to transform the current set of values into the candidate set of values. The elements may represent collections of objects for which order matters, such as ordering of policies to be enforced by a firewall. The management device generates the operations in an efficient manner, e.g., to reduce the number of steps required to generate the operations, and to reduce the number of operations generated.

Abstract: A device may include one or more memories, and one or more processors to receive a plurality of packets over a network. Packets, of the plurality of packets, may relate to a subscriber. The subscriber may be a source subscriber from which the packets are initiated or a destination subscriber to which the packets are destined. The device may determine whether a rate of receipt of the packets satisfies a first threshold, detect whether a level of processor usage satisfies a second threshold, and perform one or more actions to cause filtering of additional packets relating to the subscriber based on whether the rate of receipt of the packets satisfies the first threshold and based on whether the level of processor usage satisfies the second threshold. The device may monitor filtering of the additional packets to determine whether to filter further packets relating to the subscriber.

Abstract: An example device includes an interface to receive, from a device management system, a request message that conforms to a network management protocol, a control unit that provides an execution environment for a management agent, and a data repository. The request message includes a set of managed object identifiers and a set of filter operator object identifiers. The management agent is operable to generate at least one filter criterion based on the managed object identifiers and the filter operator object identifiers, to retrieve managed object values stored in the data repository based on the managed object identifiers, each corresponding to a respective managed object identifier specified in the request message, to generate and output to the device management system a response based on the managed object identifiers of the request message and the retrieved managed object values that satisfy one or more of the at least one filter criterion.

Abstract: An example network device includes a memory configured to store existing configuration information formatted according to a high level structured input format for the network device, and a processor comprising digital logic circuitry and configured to receive data defining new configuration information formatted according to the high level structured input format, determine one or more differences between the new configuration information and the existing configuration information, translate the one or more differences into one or more sets of data defining device level configuration changes for the network device without translating the entire new configuration information, and configure the network device to update existing device level configuration for the network device according to the sets of data defining the device level configuration changes.

Abstract: Embodiments of the invention describe flexible (i.e., elastic) data center architectures capable of meeting exascale, while maintaining low latency and using reasonable sizes of electronic packet switches, through the use of optical circuit switches such as optical time, wavelength, waveband and space circuit switching technologies. This flexible architecture enables the reconfigurability of the interconnectivity of servers and storage devices within a data center to respond to the number, size, type and duration of the various applications being requested at any given point in time.

Abstract: In some examples, a controller for a network includes a path computation module configured for execution by one or more processors to obtain configuration information for at least one point-to-multipoint label switched path (P2MP LSP); obtain, from the network via at least one protocol, network topology information defining a network topology for the network; determine, based on the network topology, a first solution comprising first respective paths through the network for the at least one P2MP LSP; determine, after generating a modified network topology based on the network topology, a second solution comprising second respective paths through the network for the at least one P2MP LSP. The controller also includes a path provisioning module configured for execution by the one or more processors to configure the network with the solution of the first solution and the second solution having the lowest total cost.

Abstract: In some embodiments, an apparatus includes an optical transceiver having a photo diode and a processor configured to be operatively coupled to the photo diode. The photo diode is configured to measure a set of receiver optical power (ROP) values at a set of baud rate values. The processor is configured to measure a set of bit error rate (BER) values of a digital modulated signal at the set of baud rate values. The processor is configured to determine an estimated optical signal noise ratio (OSNR) value at a baud rate value from the set of baud rate values based on the set of ROP values and the set of BER values. The processor is configured to send a signal indicating the estimated OSNR value at the baud rate value such that a planned route is selected to send data signals based on the estimated OSNR value.

Abstract: The disclosed apparatus may include a processing unit that (1) identifies an initial forwarding key that corresponds to a forwarding feature of a network device, (2) identifies an initial hash value that represents the initial forwarding key and is derived from the initial forwarding key, (3) identifies an additional forwarding key that corresponds to the forwarding feature of the network device, (4) determines that the initial forwarding key and the additional forwarding key exceed a threshold level of similarity relative to one another, (5) derives an additional hash value that represents the additional forwarding key by applying the initial forwarding key and the initial hash value as inputs to a hash function, and then (6) implements the additional hash value in connection with the forwarding feature of the network device and the forwarding information stored in the storage device. Various other apparatuses, systems, and methods are also disclosed.

Abstract: In one example, a network management system (NMS) device manages a plurality of network devices. The NMS device includes a processor configured to determine a first set of differences between an existing high-level configuration for the plurality of network devices and a first received high-level configuration for the plurality of network devices, determine a second set of differences between the existing high-level configuration and a second received high-level configuration, wherein the second received high-level configuration is received separately from the first received high-level configuration, translate the first set of differences to a first low-level configuration modification, translate the second set of differences to a second low-level configuration modification, merge the first low-level configuration modification and the second low-level configuration modification, and apply the merged low-level configuration modification to low-level configuration of the plurality of network devices.

Abstract: Techniques are described to reduce false alarms in network devices utilizing keepalive messaging schemes. In order to potentially avoid false alarms, a transmitting network device adjusts quality of service QOS/TOS settings in keep-alive probe packets that are sent later in a current detection interval such that the keep-alive probe packets have escalating priorities. In addition, for keep-alive probe packets that are sent later in the current detection interval, the network device may also insert host-level preferential indicator within each of the packets to request preferential treatment at both itself and the peer network device.