Abstract: A device may include one or more memories, and one or more processors to receive a plurality of packets over a network. Packets, of the plurality of packets, may relate to a subscriber. The subscriber may be a source subscriber from which the packets are initiated or a destination subscriber to which the packets are destined. The device may determine whether a rate of receipt of the packets satisfies a first threshold, detect whether a level of processor usage satisfies a second threshold, and perform one or more actions to cause filtering of additional packets relating to the subscriber based on whether the rate of receipt of the packets satisfies the first threshold and based on whether the level of processor usage satisfies the second threshold. The device may monitor filtering of the additional packets to determine whether to filter further packets relating to the subscriber.

Abstract: Techniques are described for establishing a segment routed label switched path (LSP) regardless of whether a router along the shortest path is not enabled for segment routing. For example, a resource reservation LSP (e.g., a resource reservation protocol (RSVP) LSP) is established across the router that is not enabled for segment routing, such that the segment routed LSP may be established to tunnel through the resource reservation LSP. For example, when a centralized controller receives a request to establish a path using segment routing, one or more routers along the shortest path may not be enabled for segment routing. Instead of rejecting the request to establish the segment routed LSP in response to determining that one or more routers in a selected path are not enabled for segment routing, the controller may establish a resource reservation LSP to tunnel around the router that is not enabled for segment routing.

Abstract: In some examples, a method includes receiving, by a first ingress network device of a network, a source tree join route message from an egress network device of the network, the source tree join route message specifying a multicast source and a multicast group, and in response to receiving, by the first ingress network device, a source active auto-discovery route message from a second ingress network device of the network indicating that the second ingress network device has switched from using a shared multicast tree to using a shortest path tree to deliver multicast traffic from the multicast source, electing one of the first ingress network device or the second ingress network device as a single active forwarder for forwarding the multicast traffic received from the multicast source for the multicast group.

Abstract: In general, techniques are described for generating reversible mappings for management systems. The management system may include an interface and a processor. The interface may communicatively couple the management system to network devices. The processor may generate a data structure that represents each expression of a forward mapping as a separate node of the data structure. The processor may also translate one or more of the expressions represented as the separate nodes in the data structure to corresponding one or more negated expressions so as to form a reverse mapping. Further, the processor may apply the reverse mapping to the low-level configuration of the first network device to obtain the high-level configuration.

Abstract: In some embodiments, an apparatus includes an optical transmitter module that can be electrically coupled to an electrical serializer/deserializer and a controller. The optical transmitter module can include an electrical detector that can receive an in-band signal. The electrical detector can send to the controller a first power error signal and a second power error signal based on the in-band signal. The controller can send a correction control signal to the electrical serializer/deserializer based on the first power error signal and the second power error signal such that the electrical serializer/deserializer sends a pre-emphasized signal to the optical transmitter module based on the correction control signal. In such embodiments, the first power error signal, the second power signal and the correction control signal are out-of-band signals.

Abstract: A device may receive a file to be analyzed in a sandbox environment, and may determine configuration information for configuring the sandbox environment. The configuration information may be determined based on at least one of: file information associated with the file to be analyzed, or client device information associated with a client device for which the file is intended. The device may configure the sandbox environment using the configuration information. The configuration information may identify a system configuration for the sandbox environment. The device may analyze the file in the sandbox environment based on configuring the sandbox environment using the configuration information.

Abstract: A provider edge device may receive a first MAC/IP route advertisement that identifies a MAC route, or a MAC and IP route, relating to an endpoint device. The provider edge device may generate and provide a MAC/IP route proxy advertisement based on the MAC route or the MAC and IP route, detect a potential decrease in reliability of the MAC route or the MAC and IP route, broadcast a request to verify the reliability of the MAC and IP route, determine whether the reliability of the MAC route, or the MAC and IP route, has decreased, and perform an action to cause withdrawal of the MAC/IP route proxy advertisement, or to cause a second MAC/IP route advertisement that identifies the MAC route, or the MAC and IP route, to be provided, based on determining whether the reliability of the MAC route, or the MAC and IP route, has decreased.

Abstract: An enhanced, flooding-based routing protocol is described that provides label switched path session information. In one example, a transit router is intermediately positioned between at least two label edge routers. The transit router is configured to determine a maximum number of LSPs concurrently supported by the transit router and determine a number of LSPs concurrently established by the transit router and for which the transit router is responsible for switching packets to one or more of the two label edge routers. The transit router generates, in accordance with a link state routing protocol, a link state routing protocol message that specifies the LSP session information as the maximum number of LSP and the number of LSPs concurrently established. The transit router further transmits, to the label edge routers, the link state routing protocol message.

Abstract: An example network device includes a memory configured to store existing configuration information formatted according to a high level structured input format for the network device, and a processor comprising digital logic circuitry and configured to receive data defining new configuration information formatted according to the high level structured input format, determine one or more differences between the new configuration information and the existing configuration information, translate the one or more differences into one or more sets of data defining device level configuration changes for the network device without translating the entire new configuration information, and configure the network device to update existing device level configuration for the network device according to the sets of data defining the device level configuration changes.

Abstract: A high-performance, scalable and drop-free data center switch fabric and infrastructure is described. The data center switch fabric may leverage low cost, off-the-shelf packet-based switching components (e.g., IP over Ethernet (IPoE)) and overlay forwarding technologies rather than proprietary switch fabric. In one example, host network accelerators (HNAs) are positioned between servers (e.g., virtual machines or dedicated servers) of the data center and an IPoE core network that provides point-to-point connectivity between the servers. The HNAs are hardware devices that embed virtual routers on one or more integrated circuits, where the virtual router are configured to extend the one or more virtual networks to the virtual machines and to seamlessly transport packets over the switch fabric using an overlay network. In other words, the HNAs provide hardware-based, seamless access interfaces to overlay technologies used for communicating packet flows through the core switching network of the data center.

Abstract: In one example, a server executes a virtual router configured to receive an inner packet output by a virtual machine associated with a virtual network. The virtual router is further configured to offload, to a physical network interface card of the server that executes the virtual router, segmentation of the inner packet into a plurality of outbound tunnel packets each having a tunnel header for output by the physical network interface card to a physical network underlying the virtual network.

Abstract: A device may determine that a route is inactive. Information identifying the route may be stored in a forwarding plane portion of a forwarding table and a control plane portion of the forwarding table. The route may be associated with directing network traffic toward an endpoint network device. The device may remove the information identifying the route from the forwarding plane portion of the forwarding table without removing the information identifying the route from the control plane portion of the forwarding table based on determining that the route is inactive. The device may route network traffic based on the forwarding table after removing the information identifying the route from the forwarding plane portion of the forwarding table without removing the information identifying the route from the control plane portion of the forwarding table.

Abstract: Embodiments of the invention describe flexible (i.e., elastic) data center architectures capable of meeting exascale, while maintaining low latency and using reasonable sizes of electronic packet switches, through the use of optical circuit switches such as optical time, wavelength, waveband and space circuit switching technologies. This flexible architecture enables the reconfigurability of the interconnectivity of servers and storage devices within a data center to respond to the number, size, type and duration of the various applications being requested at any given point in time.

Abstract: An example management device includes memory to store a current set of values and a candidate set of values representing a final state of the current set of values after one or more operations on the current set of values have been performed on the current set of values. The management device also includes a processor to generate operations to be executed by a network device to transform the current set of values into the candidate set of values. The elements may represent collections of objects for which order matters, such as ordering of policies to be enforced by a firewall. The management device generates the operations in an efficient manner, e.g., to reduce the number of steps required to generate the operations, and to reduce the number of operations generated.

Abstract: A network device may detect a reduced switching fabric bandwidth due to switching fabric degradation of a switching fabric. The network device may allocate the reduced switching fabric bandwidth to one or more interfaces of a packet processor. The network device may determine a first maximum reservable bandwidth for an interface of the one or more interfaces. The network device may identify a reserved bandwidth for the interface. The network device may determine an unreserved bandwidth for the interface based on the first maximum reservable bandwidth and the reserved bandwidth. The network device may advertise the unreserved bandwidth, for the interface, to a neighbor network device that communicates with the network device via the interface. The network device may provide an instruction, to the neighbor network device, for the neighbor network device to update a second maximum reservable bandwidth associated with the neighbor network device.

Abstract: A device may receive information associated with a software program executing on a device, and may generate event records based on the information associated with the software program. The device may identify pattern information associated with the event records, and may perform data analytics on the event records and the pattern information to identify one or more defects associated with the software program and to determine an expected behavior of the software program. The device may generate one or more reports based on the one or more defects associated with the software program and the expected behavior of the software program, and may provide the one or more reports.

Abstract: A first device may provide, to a second device, a first message that includes a first request for a first type of precision time protocol (PTP) message and a second request for a second type of PTP message. The first device may receive, from the second device, a second message based on the first message. The second message may identify whether the first request and the second request are granted. The first device may provide, to the second device, a third message that instructs the second device to provide a first set of messages, associated with the first type of PTP message, and a second set of messages associated with the second type of PTP message. The first device may synchronize a first clock of the first device with a second clock of the second device based on the first set of messages and the second set of messages.

Abstract: The techniques described herein may reduce global repairs in Multiprotocol Label Switching (MPLS) Label-Switched Paths (LSPs) by using an aggregated link bundle as a primary path when multiple paths are available. As an example, a router may determine a respective interface type for each path of a plurality of paths; determine, based on the respective interface types, whether one or more paths from the plurality of paths satisfies a set of constraints that are configured such that an aggregated link bundle interface type is preferred over a single link interface type; determine a preferred path based on whether the set of constraints were satisfied; configure a routing table of the router with the preferred path as a LSP to the destination; and send, based on the routing table, one or more packets using an interface of the router associated with the LSP.

Abstract: A device may include one or more processors to receive a file that may be analyzed for malware; open the received file in a secure environment; determine that a secondary file in the secure environment may have been accessed based on the received file being opened; analyze the secondary file in the secure environment to identify malware; and/or perform an action associated with the received file based on the secondary file being analyzed.

Abstract: A device determines a first current, of a first input phase of a power system, and a second current, of a second input phase of the power system. The device determines whether the first input phase and the second input phase are balanced based on the first current and the second current. When the first input phase and the second input phase are not balanced, the device selects the first input phase and an output phase of the power system. The device balances the first input phase and the second input phase by using the first input phase and the output phase.