Abstract: A network device decrypts a record, received from a client device, that is associated with an encrypted session between the client device and an application platform. The network device incorporates decrypted record data, from the decrypted record, into a payload field of a transmission control protocol (TCP) packet to be transmitted to another device, identifies a record header in the record, and determines, based on the record header, a record type associated with the decrypted record. Based on the record type, the network device marks the one or more TCP packets as including urgent data by setting a TCP urgent control bit in a header of the one or more TCP packets, and sets a second field, in the header of the TCP packet, to a second value that identifies an end of the urgent data, which corresponds to an end of the decrypted record data in the payload field.

Abstract: A device may receive a packet associated with a flow and may identify a capacity indicator associated with a flow table. The capacity indicator may indicate an available storage capacity associated with the flow table. The flow table may be stored by another device and may include entries for one or more flows and one or more corresponding actions to be taken in association with the one or more flows. The device may determine a service indicator that indicates a priority associated with the flow and may compare the capacity indicator and the service indicator. The device may selectively provide a message to the other device based on comparing the capacity indicator and the service indicator. The message may include an instruction for the other device to store an entry, associated with the flow, in the flow table.

Abstract: A network device may receive network traffic, originating from an input component, via a first set of input ports of a first switching element. The first switching element may be included in a stage of a multi-stage switching fabric. The first set of input ports may be associated with the input component. The network device may determine, based on the input component, a first set of output ports of the first switching element that are reserved for the input component. The network device may route the network traffic, via the first set of output ports, to second switching elements included in another stage of the multi-stage switching fabric. The second switching elements may receive the network traffic via a second set of input ports of the second switching elements.

Abstract: In one example, a network device comprising a first chassis of a multi-chassis link aggregation group (MC-LAG) having three or more chassis, comprises one or more network interfaces configured to receive a packet to be forwarded using the MC-LAG, and a control unit configured to determine whether the packet was received from a device outside of the MC-LAG, when the packet was received from the device outside of the MC-LAG, add data to the packet that identifies the first chassis as a source of the packet for the MC-LAG, and forward the packet via at least one of the network interfaces. In this manner, chassis of the MC-LAG can prevent forwarding of the packet to the source of the packet for the MC-LAG, based on the data that identifies a source of the packet for the MC-LAG.

Abstract: A device may receive a message associated with initiating a secure socket layer session or a transport layer security session (SSL/TLS session). The device may identify a decryption profile associated with managing encrypted traffic associated with the SSL/TLS session. The device may determine a server indicator included in the message. The device may determine whether the decryption profile includes information associated with the server indicator. The device may selectively manage the encrypted traffic associated with the SSL/TLS session using a first decryption technique or a second decryption technique based on determining whether the decryption profile includes information associated with the server indicator, where the first decryption technique may be different from the second decryption technique.

Abstract: An apparatus includes a memory and a processor operatively coupled to the memory. The processor is configured to partition a set of ports of an optical multiplexer into a set of port groups including a first port group having a first set of ports and a second port group having a second set of ports mutually exclusive from the first set of ports. The processor is configured to associate the first port group with a first router and associate the second port group with a second router. When the optical multiplexer is operatively coupled to the first router and the second router, the first router is operatively coupled to the optical multiplexer via the first set of ports and not the second set of ports, and the second router is operatively coupled to the optical multiplexer via the second set of ports and not the first set of ports.

Abstract: In some embodiments, a non-transitory processor-readable medium includes code to cause a processor to receive at a tunnel server, a data unit addressed to a communication device, and define, a first instance of the data unit and a second instance of the data unit. The first instance of the data unit is sent to the communication device via a first tunnel defined between at least the tunnel server and a first base station associated with a first network. The second instance of the data unit is sent to the communication device via a second tunnel defined between at least the tunnel server and a second base station associated with a second network. The second instance of the data unit is dropped by the communication device when the first instance of the data unit is received before the second instance of the data unit.

Abstract: An example photonic integrated circuit includes a transmitter circuit with a optical communication path to an optical coupler configured to couple with an optical fiber. The optical communication path has a propagation direction away from the transmitter circuit and towards the optical coupler. A counter-propagating tap diverts light sent by a light source backward against the propagation direction of the optical communication path. A photodiode receives the diverted light and measures its power level. The photodiode generates a feedback signal for the optical coupler and provides the feedback signal to the optical coupler. The optical coupler receives the feedback signal and adjusts a coupling alignment of the optical communication path to the optical fiber based on the feedback signal, which indicates the measured power level of the diverted counter-propagating light.

Abstract: A wavelength division multiplexing (WDM) transceiver module comprising an optical port and an optical modulator is disclosed herein. The optical port includes a data transmit and receive optical fiber connector and a laser source-in optical fiber connector. The laser source-in optical fiber connector is configured to couple to a laser source external to the WDM transceiver module, and provide polarization alignment for a polarization-maintaining fiber. The optical modulator is configured to receive a laser output from the external laser source via the polarization-maintaining fiber and modulate the laser output based on analog electrical signals generated by a digital signal processor. The WDM transceiver module may not including an onboard laser source.

Abstract: In some examples, a network device comprises one or more processors operably coupled to a memory, and a routing unit configured for execution by the one or more processors to route data traffic on a layer 3 network overlaying an optical transport system; receive optical supervisory channel data for an optical supervisory channel of the optical transport system; determine the optical supervisory channel data indicates an event affecting transmission or detection of a signal transported by a wavelength, the wavelength traversing an optical fiber of the optical transport system and underlying a link of the layer 3 network; and reconfigure, in response to determining the optical supervisory channel data indicates the event, a configuration of the network device to modify routing operations of the network device with respect to the data traffic on the layer 3 network.

Abstract: The liveness of routing protocols can be determined using a mechanism to aggregate liveness information for the protocols. The ability of an interface to send and receive packets and the forwarding capability of an interface can also be determined using this mechanism. Since liveness information for multiple protocols, the liveness of interfaces, the forwarding capability of interfaces, or both, may be aggregated in a message, the message can be sent more often than could individual messages for each of the multiple protocols. This allows fast detection of failures, and sending connectivity messages for the individual protocols, such as neighbor “hellos,” to be sent less often.

Abstract: In one example, a network controller manages a network having many network devices. Network devices can receive the timing flow port role assignments from the network controller based on the controller's global view of the network topology. The controller can also calculate timing offsets to be applied to the network devices, based on timestamp information obtained by the network devices via exchanging time synchronization protocol messages, and the controller can update time clocks on all of the network devices within a single window of time, based on a timing offsets calculated in single iteration of calculations.

Abstract: A device may receive network traffic for transmission in a campus network. The campus network may include a set of aggregation devices and a set of satellite devices. The set of satellite devices may be grouped into a set of satellite clusters of the campus network. The device may generate a packet header for the network traffic. The packet header may include an E-channel identifier (ECID) with a quantity of N bits (N>10) reserved to address a packet to a particular satellite device of the set of satellite devices and to a particular port of a set of ports of the particular satellite device. The device may transmit the network traffic using the packet header based on generating the packet header.

Abstract: A network device is configured to receive information regarding a group of content streams and determine a buffer size for each of the content streams. The network device is further configured to receive the content streams from one or more encoding devices. The network device is further configured to buffer an amount of each of the content streams based on the respective buffer size. The network device is further configured to send a first content stream to a user device. The network device is further configured to determine that the first content stream has a quality of experience issue and send the second content stream to the user device.

Abstract: A system may receive network device configuration information associated with a network service. The system may determine multiple settings associated with the network service based on receiving the network device configuration information. The multiple settings may include a common setting and a device-specific setting. The system may generate a first network service model of the network service based on the multiple settings. The first network service model may include multiple nodes corresponding to the multiple settings. The system may re-configure one or more nodes associated with the first network service model, and may generate a second network service model of the network service. The system may generate a user interface template based on the second network service model and may provide the user interface template to a client device for display. The client device may allow a configuration of the multiple settings based on the user interface template.

Abstract: The disclosed apparatus may include (1) a storage device that stores a port list definition as a bitmap that identifies port numbers of network socket ports and (2) a physical processor that (A) formats the port list definition such that the bitmap includes (I) a first set of indices that each represent an offset of one or more network socket ports and (II) a second set of indices that are each paired to an index within the first set of indices and each correspond to port numbers of the network socket ports and whose values are calculated based on the offset of the paired index and (B) forwards at least one packet from the network device to a remote device using at least one of the network socket ports whose port numbers are identified in the bitmap. Various other apparatuses, systems, and methods are also disclosed.

Abstract: Techniques are described for routing inter-AS LSPs with a centralized controller taking inter-AS TE metric values for inter-AS links into account. The inter-AS TE metric values, e.g., local preference values, MED values, or EROS, indicate route preferences for routes between ASes. The disclosed techniques enable network devices within either or both of a first AS and a second AS to store inter-AS TE metric values for inter-AS links in TEDs of the network devices. The network devices then send the contents of their TEDs, including the inter-AS TE metric values, to a centralized controller of the first AS and the second AS. The centralized controller computes an inter-AS LSP across the first AS and the second AS based at least in part on the inter-AS TE metric values such that the inter-AS LSP includes a preferred one of the inter-AS links as indicated by the inter-AS TE metric values.

Abstract: A system includes a first communication device and a second communication device in communication with the first communication device via an Ethernet connection. The first communication device is configured to transmit, via the Ethernet connection toward the second communication device, an Ethernet signal including information of a designated wavelength from a dense wavelength division multiplexing (DWDM) scheme to be used by the second communication device. The second communication device is configured to transmit an optical signal at the designated wavelength to the first communication device in response to receiving the Ethernet signal.

Abstract: In one example, a network management system (NMS) device manages a plurality of network devices. The NMS device includes one or more interfaces to communicatively couple the NMS device to the plurality of network devices, and a processor, implemented using circuitry, configured to determine that a low-level configuration of a first network device of the plurality of network devices has been changed by an out-of-band (OOB) change, translate the OOB change to a high-level configuration change, determine whether to apply the high-level configuration change to the plurality of network devices, and in response to determining to apply the high-level configuration change to the plurality of network devices, apply, via the one or more interfaces, the OOB change to low-level configurations of the plurality of network devices.

Abstract: A system may receive, by a switching component of the system, network traffic to be provided to an I/O component of the network device. The system may route, by the switching component, the network traffic to the I/O component based on whether the I/O component is connected to the switching component via the first connections and/or via second connections. The first connections may be connections via a chassis of the system. The second connections may be connections via a connector component that is removable from the switching component. The network traffic may be routed via the first connections and the second connections when the I/O component is connected via the first connections and the second connections. The network traffic may be routed via the first connections and not via the second connections when the I/O component is connected via the first connections and not via the second connections.