Abstract: The problem of excessive BGP updates to update the AIGP cost is systems with excessively changing IGP metrics is solved by (1) monitoring AIGP value changes over a given time period, (2) determining whether or not the AIGP value changes over the given period of time are excessive (e.g., are greater than a predetermined threshold), (3) responsive to a determination that the AIGP changes over the given period of time are not excessive, use the actual AIGP value in the AIGP protocol, but otherwise, responsive to a determination that the AIGP changes over the given period of time are excessive, (i) setting (e.g., locking) the AIGP value to a predetermined or derived value (and using the set or locked AIGP value in advertisements) for a second period of time (regardless of whether or not the actual AIGP value changes during the second period of time), and (ii) using the set (e.g., locked) AIGP value in the AIGP protocol.

Abstract: The disclosed apparatus may include (1) a first heatsink that is coupled to a first component of a multichip module, (2) a second heatsink that is (A) coupled to a second component of the multichip module and (B) physically separated from the first heatsink by at least a certain amount of clearance, and (3) a coil spring that (A) encompasses the second heatsink, (B) resides within the certain amount of clearance that separates the first and second heatsinks from one another, and (C) prevents at least some electromagnetic radiation from leaking via the certain amount of clearance that separates the first and second heatsinks from one another. Various other apparatuses, systems, and methods are also disclosed.

Abstract: The disclosed method may include (1) receiving, at a route server that serves an Internet exchange, a request from an autonomous system to join the Internet exchange, (2) obtaining, from the autonomous system, a policy that defines which routes pertaining to the autonomous system are to be shared with additional autonomous systems that have joined the Internet exchange, (3) obtaining, from the autonomous system, a plurality of routes pertaining to the autonomous system, (4) storing, at the route server, the plurality of routes pertaining to the autonomous system, and then (5) advertising at least a portion of the plurality of routes to at least one of the additional autonomous systems in accordance with the policy obtained from the autonomous system. Various other apparatuses, systems, and methods are also disclosed.

Abstract: The disclosed apparatus may include a processing unit may manage memory in connection with a computing device by (1) searching a root index of a root node for a bit indicating that a specific lookup index within the root node corresponds to a leaf node that references an unallocated memory location, (2) identifying, within the specific lookup index, a bit indicating that a specific leaf node references the unallocated memory location, (3) searching a leaf index of the specific leaf node for a bit indicating that a specific object within the leaf node corresponds to the unallocated memory location, (4) identifying, within the specific object, a bit that corresponds to a specific memory location and indicates that the specific memory location is currently unallocated, and then (5) allocating the specific memory location for use by the computing device. Various other apparatuses, systems, and methods are also disclosed.

Abstract: Techniques are disclosed for implementing scalable policies across a plurality of categories that support application workloads. In one example, a policy controller assigns to the plurality of categories tags specifying one or more of a plurality of dimensions. The policy controller distributes a plurality of policies to policy agents for the plurality of categories. Each policy includes one or more policy rules, and each policy rule includes one or more tags specifying one or more of the plurality of dimensions. For each policy rule, the policy agents allow or deny a traffic flow between objects that belong to categories of the plurality of categories described by the one or more dimensions of a respective tag of the policy rule.

Abstract: A device may receive a trained data model that has been trained using historical link quality information associated with a set of links. The device may determine, after receiving the trained data model, link quality information associated with a link that is actively supporting traffic. The device may classify the link by using the link quality information as input for the data model. The data model may classify the link into a class of a set of classes associated with measuring link quality. The device may determine an actual quality level of the link. The device may selectively update the class of the link after determining the actual link quality of the link. The device may perform one or more actions associated with improving link quality based on classifying the link and/or selectively updating the class of the link.

Abstract: The disclosed heatsink apparatus may include (i) a base that facilitates thermal transfer between a computing component and cooling airflow, (ii) a plurality of fins, extending from the base, that provide additional surface area to facilitate the thermal transfer between the computing component and the cooling airflow, (iii) at least one channel, defined within the plurality of fins, that facilitates a faster passage of a portion of the cooling airflow across the heatsink apparatus and (iv) at least one air dam that prevents the cooling airflow from escaping a designated path on a printed circuit board. Various other apparatuses, systems, and methods are also disclosed.

Abstract: A device may include a power supply module (PSM). The PSM may receive information regarding one or more programmable restrictions associated with a power supply. The PSM may receive a measurement of voltage associated with the power supply. The PSM may determine a current associated with the power supply based on the one or more programmable restrictions, the measurement of voltage, and a first amount of power associated with the power supply. The PSM may cause a load associated with the power supply to be adjusted based on determining the current without removing power for a connection between the power supply and a power source associated with the power supply. The PSM may cause the power supply to provide a second amount of power based on causing the load associated with the power supply to be adjusted.

Abstract: In some examples, a network device is configured to obtain a set of N paths between a pair of nodes of a network topology model for a network of routers interconnected by a plurality of links in a network topology, where N>2, and configured to, for each label switched path from a plurality of label switched paths to be routed to the network topology: in response to identifying, from the set of N paths, a path for the label switched path that has capacity for a required bandwidth of the label switched path, deduct the required bandwidth of the label switched path from one or more links of the path of the network topology model to modify the network topology model and output data to the network for programming the label switched path in the network on the path; and in response to failing to identify a path for the label switched path from the set of N paths, add the label switched path to a set of failed label switched paths.

Abstract: A system may obtain a current bit error count that identifies a quantity of bit errors in a bit stream during a time interval. The system may determine that the current bit error count identifies one or more bit errors. The system may determine whether an estimated bit error rate (BER) for the bit stream is likely to satisfy a threshold. The system may select an approach for determining the estimated BER for the bit stream. The estimated BER may be determined based on combining the current bit error count with a quantity of bits received in the time interval when the estimated BER is likely to exceed the threshold, and the estimated BER may be determined based on the current bit error count and one or more past bit error counts when the estimated BER is unlikely to exceed the threshold. The system may determine the estimated BER.

Abstract: One example method includes receiving, by a central analytics system, a query for traffic flow data associated with a geographically distributed network of network devices, outputting, by the central analytics system, the query to a plurality of analytics pods, wherein each of the plurality of analytics pods is coupled to a storage unit of a network device within the geographically distributed network, and, responsive to outputting the query, receiving, by the central analytics system and from the plurality of analytics pods, results of the query, wherein the results include at least the traffic flow data from the plurality of analytics pods based on the query.

Abstract: The disclosed apparatus may include a physical processing that (1) receives, at a network device, a packet that is destined for a computing device within a network, (2) performs pattern matching on the packet by (A) comparing at least a portion of the packet with a set of signatures that facilitate pattern matching in connection with network traffic and (B) determining, based at least in part on the comparison, that the portion of the packet matches at least one of the signatures, (3) parses, after performing the pattern matching, at least the portion of the packet to determine whether the packet is malicious based at least in part on the portion of the packet, and then (4) upon determining that the portion of the packet is malicious, performs at least one security action in connection with the packet. Various other apparatuses, systems, and methods are also disclosed.

Abstract: In general, techniques are described for performing flow timeout control within a network. A device comprising a processor may be configured to perform the techniques. The processor may be configured to, as one example, determine, from a first packet of a packet flow, a minimum timeout value for the packet flow indicative of a time duration during which a first computing device will not send a keep-alive message to prevent the packet flow from timing out. The processor may then determine an intermediate timeout value for the packet flow based on a comparison of the minimum timeout value to a maximum timeout value, and specify the intermediate timeout value in a second packet of the packet flow sent by the second network device to the first network device in response to the first packet.

Abstract: In some embodiments, a non-transitory processor-readable medium storing code representing instructions to be executed by a processor comprises code to cause the processor to determine, during a calibration of a coherent optical transmitter, a set of parameters associated with each tributary channel by sending a first signal to a digital signal processor (DSP) to adjust a scale factor of that tributary channel. The scale factor is associated with a tap characteristic of a finite impulse response (FIR) filter of the DSP. The code further causes the processor to determine a power imbalance between two tributary channels based on the set of parameters associated with each tributary channel. The code further causes the processor to send a second signal to the coherent optical transmitter to adjust a set of operational settings of the coherent optical transmitter based on the power imbalance and the set of parameters associated with each tributary channel.

Abstract: A network device may receive network traffic, originating from an input component, via a first set of input ports of a first switching element. The first switching element may be included in a stage of a multi-stage switching fabric. The first set of input ports may be associated with the input component. The network device may determine, based on the input component, a first set of output ports of the first switching element that are reserved for the input component. The network device may route the network traffic, via the first set of output ports, to second switching elements included in another stage of the multi-stage switching fabric. The second switching elements may receive the network traffic via a second set of input ports of the second switching elements.

Abstract: A network device may receive first route information from an Ethernet virtual private network (EVPN) device and/or a provider backbone bridging EVPN (PBB-EVPN) device. The network device may generate second route information based on the first route information. The network device may provide the second route information to permit network traffic to be transferred between the EVPN device and the PBB-EVPN device. The network device may receive the network traffic to be transferred between the EVPN device and the PBB-EVPN device after providing the second route information. The network device may modify the network traffic to be compatible with the EVPN device or the PBB-EVPN device after receiving the network traffic. The network device may provide the network traffic between the EVPN device and the PBB-EVPN device after modifying the network traffic.

Abstract: A network device decrypts a record, received from a client device, that is associated with an encrypted session between the client device and an application platform. The network device incorporates decrypted record data, from the decrypted record, into a payload field of a transmission control protocol (TCP) packet to be transmitted to another device, identifies a record header in the record, and determines, based on the record header, a record type associated with the decrypted record. Based on the record type, the network device marks the one or more TCP packets as including urgent data by setting a TCP urgent control bit in a header of the one or more TCP packets, and sets a second field, in the header of the TCP packet, to a second value that identifies an end of the urgent data, which corresponds to an end of the decrypted record data in the payload field.

Abstract: Techniques are described for extending a two-way active measurement protocol (TWAMP) to enable measurement of service key performance indicators (KPIs) in a software defined network (SDN) and network function virtualization (NFV) architecture. The TWAMP extensions enable control messaging to be handled by a TWAMP control client executed on a centralized controller, and data messaging to be handled by a TWAMP session initiator executed on a separate network device. Techniques are also described for extending TWAMP to enable measurement of any of a plurality of service KPIs for a given service supported at a TWAMP server. The service KPIs may include one or more of keepalive measurements, round trip time measurements, path delay measurements, service latency measurements, or service load measurements. The TWAMP extensions for the service KPIs may be used in both conventional network architectures and in SDN and NFV architectures.

Abstract: A system may comprise a first switch connected to an output of a first power source, a second switch connected to an output of a second power source, a first sensor connected to an output of the first switch, a second sensor connected to an output of the second switch, a third switch connected to the first sensor and the second sensor and connected to a load, and a control device connected to the first switch, the second switch, the first sensor, the second sensor, and the third switch.

Abstract: A network device may determine a plurality of reputation indicators that indicate a measure of reputation associated with the flow. A first reputation indicator, of the plurality of reputation indicators, may be determined based on applying a first reputation analysis technique in association with the flow. A second reputation indicator, of the plurality of reputation indicators, may be determined based on applying a second reputation analysis technique in association with the flow. The second reputation analysis technique may be different from the first reputation analysis technique. The network device may determine a reputation score for the flow based on the plurality of reputation indicators. The network device may prioritize the flow based on the reputation score.