Abstract: A transport LAN segment service is provided over a transport network. Responsibilities for configuring, provisioning and forwarding over a transport LAN segment are divided between layer 2 and 3 service provider edge devices, where the layer 3 edge device handles discovery and tunneling responsibilities, the layer 2 edge device handles learning and flooding responsibilities, and information can be exchanged between the layer 2 and 3 edge devices. Configuration is simplified by advertising TLS-label information, layer 2 address learning, and flooding when the needed configuration information has not yet been learned or discovered.

Abstract: In some embodiments, a non-transitory processor-readable medium stores code representing instructions configured to cause a processor to receive, from an access switch, a first signal including forwarding state information associated with a first peripheral processing device from a set of peripheral processing devices. The code can further represent instructions configured to cause the processor to receive, from the first peripheral processing device, a second signal including a data packet. The code can further represent instructions configured to cause the processor to send, to a replication engine associated with the set of peripheral processing devices, a third signal such that the replication engine (1) defines a copy of the data packet, which is included within the third signal, and (2) sends, to a second peripheral processing device from the set of peripheral processing devices, a fourth signal including the copy of the data packet.

Abstract: An apparatus includes a memory and a processor operatively coupled to the memory. The processor is configured to partition a set of ports of an optical multiplexer into a set of port groups including a first port group having a first set of ports and a second port group having a second set of ports mutually exclusive from the first set of ports. The processor is configured to associate the first port group with a first router and associate the second port group with a second router. When the optical multiplexer is operatively coupled to the first router and the second router, the first router is operatively coupled to the optical multiplexer via the first set of ports and not the second set of ports, and the second router is operatively coupled to the optical multiplexer via the second set of ports and not the first set of ports.

Abstract: In one example, a plurality of network devices forming an Internet protocol (IP) fabric includes first, second, third, and fourth network devices. The first network device includes a plurality of network interfaces communicatively coupled to at least the third and fourth network devices of the plurality of network devices, which are between the first network device and the second network device. The first network device also includes one or more hardware-based processors configured to determine available bandwidths for the third network device and the fourth network device toward the second network device, determine a ratio between the available bandwidths for the third and fourth network devices, and forward data (e.g., packets or bytes) toward the second network device such that a ratio between amounts of the data forwarded to the third and fourth network devices corresponds to the ratio between the available bandwidths.

Abstract: Techniques may include mapping, by a service node, a first virtual address for a particular service to private addresses that identify servers, wherein each server provides the particular service, and wherein a URL for the service resolves to the first virtual address. The techniques may include configuring a service load balancer of the service node to load balance network traffic for the first virtual address across the servers and forwarding network traffic for the first virtual address between the servers and subscriber devices. The techniques may include, associating a second virtual address with a subset of the private addresses that excludes the private address for the at least one server, and causing the URL to resolve to the second virtual address. The techniques may include forwarding network traffic for the first virtual address between the servers and the subset of the subscriber devices.

Abstract: A system and method for selecting packets to be forwarded from redundant multicast streams. A primary multicast stream and a secondary multicast stream are received, wherein the primary multicast stream and the secondary multicast stream are redundant multicast streams received over disjoint multicast forwarding paths. A hardware-based analyzer in a forwarding plane of the network device is applied to detect when a quality of one of the primary multicast stream or the secondary multicast stream has fallen below a threshold. In response to detecting that a quality of one of the primary multicast stream or the secondary multicast stream has fallen below a threshold, selecting, via a thread executing in a forwarding component of the network device, a different one of the primary multicast stream or the secondary multicast stream having a quality that meets the threshold, wherein selecting includes dynamically rewriting next hop operations associated with the selected stream.

Abstract: In some embodiments, an apparatus includes an optical transmitter module that can be electrically coupled to an electrical serializer/deserializer and a controller. The optical transmitter module can include an electrical detector that can receive an in-band signal. The electrical detector can send to the controller a first power error signal and a second power error signal based on the in-band signal. The controller can send a correction control signal to the electrical serializer/deserializer based on the first power error signal and the second power error signal such that the electrical serializer/deserializer sends a pre-emphasized signal to the optical transmitter module based on the correction control signal. In such embodiments, the first power error signal, the second power signal and the correction control signal are out-of-band signals.

Abstract: In some embodiments, an apparatus comprises a core network node and a control module within an enterprise network architecture. The core network node is configured to be operatively coupled to a set of wired network nodes and a set of wireless network nodes. The core network node is configured to receive a first tunneled packet associated with a first session from a wired network node from the set of wired network nodes. The core network node is configured to also receive a second tunneled packet associated with a second session from a wireless network node from the set of wireless network nodes through intervening wired network nodes from the set of wired network nodes. The control module is operatively coupled to the core network node. The control module is configured to manage the first session and the second session.

Abstract: Techniques are described for providing node protection in a Source Packet Routing in Networking (SPRING) network. In some examples, a first network device, responsive to detecting a configuration request to provide node protection to a second network device that is adjacent to the first network device: generate at least one context table; configure at least one forwarding entry that indicates: a primary path between the first network device and a third network device, and a backup path, based at least in part on the at least one context table, between the first network device and the third network device that bypasses the second network device; while the second network device has not failed, forward network packets to the third network device using the primary path; and responsive to determining that the second network device has failed, forward network packets to the third network device using the backup path.

Abstract: Techniques are described that allow fast path delivery of content from content data networks directly to metro transport networks so as to bypass Internet service provider (ISP) networks. The metro transport network is positioned between subscriber devices and an Internet service provider network that authenticates the subscriber devices and allocates respective layer three (L3) addresses from an Internet Protocol (IP) network address prefix assigned to the Internet service provider network. Routes within the metro transport network, including an access router, ISP-facing provider edge routers and one or more peering routers, establish an EVPN within the metro transport network. The access router outputs, within the EVPN and to the peering router, an EVPN route advertisement that advertises network address reachability information of the subscriber devices (e.g., the IP network address prefix or MAC/IP address of the subscriber devices) on behalf of the Internet service provider network.

Abstract: In some examples, a controller for a network includes a path computation module that determines, for a plurality of LSPs or other flows having a common source, shortest paths of the network from the common source to respective destinations of the plurality of LSPs based at least on a minimum bandwidth. The path computation module further determines, after determining the shortest paths, a shortest path for the LSP of the plurality of LSPs as the shortest path of the shortest paths of the network from the common source to a destination for the LSP. A path provisioning module of the controller, after the path computation module determines the shortest path for the LSP and in response to the path computation modules routing the LSP to the shortest path for the LSP on a network model of the network, installs the LSP to the network as routed to the shortest path.

Abstract: A line card includes a metal frame that includes a front section, and a bottom section connected to the front section via an angled section, where the angled section results in an opening between the line card and a second line card, when the line card is installed above the second line card in a rack, and where the opening allows directed air to enter the rack from a front direction; a printed circuit board attached to the metal frame; and a group of front panel connectors attached to the front section of the metal frame.

Abstract: In general, techniques are described for simplifying admission control signaling between subscriber devices, access nodes, and service edge routers to facilitate subscriber-specific admission control for multicast streams. In one example, a service edge router receives a service request and accesses a subscriber profile to determine whether the requesting subscriber is authorized to receive the service. Upon authorization, the service edge router returns the service request to the access node in a substantially similar form in which the service request was received. The access node receives the service request on a service edge router-facing interface, indicating the service edge router has granted authorization for the subscriber device to receive multicast traffic associated with the multicast group identified within the service request.

Abstract: A security device may receive information identifying a set of conditions for providing countermeasure code to a client device. The security device may receive information identifying an action to be performed when the countermeasure code is executed by the client device, and may determine the countermeasure code to be provided to the client device when the set of conditions is satisfied. The security device may receive a request from the client device, and may determine a response to the request. The response may include response code for serving content of a web page to the client device. The security device may determine that the set of conditions has been satisfied, and may insert the countermeasure code into the response code. The security device may provide the response code and the countermeasure code to the client device, and the countermeasure code may cause the client device to perform the action.

Abstract: The disclosed apparatus may include (1) a housing designed to house a field-replaceable unit within a telecommunication system, (2) a connector that is designed to electrically interface the field-replaceable unit with the telecommunication system in the housing, (3) a spring that is coupled to the housing, and (4) a movable injection cam that is coupled to the spring such that, when the field-replaceable unit is installed in the housing by way of an ejection lever that presses against the movable injection cam, the spring applies a force on the movable injection cam that causes the movable injection cam to push the field-replaceable unit toward the connector. Various other apparatuses, systems, and methods are also disclosed.

Abstract: In some embodiments, an apparatus includes a first edge device that is operatively coupled to a second edge device via a switch fabric. The first edge device and the second edge device collectively define an edge device network operating with a network-address-based protocol. The first edge device communicates with the second edge device via a multiprotocol label switching (MPLS) tunnel through the switch fabric. Furthermore, the first edge device is operatively coupled to the switch fabric such that a node of the switch fabric can be modified without coordination of the edge device network. Additionally, the first edge device is operatively coupled to the second edge device to define the edge device network such that an edge device of the edge device network can be modified without coordination of the switch fabric.

Abstract: Techniques are described for providing fast convergence in the event of a link failure in an all-active multi-homed Ethernet virtual private network. A provide edge (PE) network device may pre-configure an interface next hop and secondary next hops. The secondary next hops may be logical links to other PE network devices in the same Ethernet segment. In the event of a link failure in the interface next hop between the PE network device and a customer edge (CE) network device, the PE network device may be configured to forward data traffic to the CE network device using the secondary next hops. In the event of a link failure between the PE network device and a core network, the PE network device may be configured to send an out-of-service message to the CE network device that instructs the CE network device to stop sending traffic to the PE network device.

Abstract: The disclosed method for tunneling socket calls across operating systems may include (1) intercepting a socket call issued by an application running on a first operating system, (2) determining that the socket call is directed to a network interface that is (A) accessible to a second operating system installed on a virtual machine running on the first operating system and (B) inaccessible to the first operating system and then, in response to determining that the socket call is directed to the network interface, (3) tunneling the socket call to the second operating system installed on the virtual machine, and (4) executing the socket call within the second operating system to initiate at least one networking action with respect to the network interface on behalf of the application. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A device may receive, from a load balancing device, configuration information that identifies a set of nodes for which a status is to be determined. The device may generate a data structure. The data structure may store information that identifies a status of the set of nodes. The device may transmit a status request to one or more nodes. The device may determine the status of the one or more nodes based on transmitting the status request. The device may update the data structure based on determining a change in status of the one or more nodes. The device may provide, to the load balancing device, information that identifies the change in status of the one or more nodes based on updating the data structure.

Abstract: In one example, a network device external to a services complex injects a plurality of probe packets along service chains provided by the services complex, wherein each of the plurality of probe packets includes a first timestamp indicating a time at which the network device sent the respective probe packet. Each of a plurality of service nodes in the services complex modifies each of the plurality of probe packets by inserting a respective second timestamp indicating a respective time at which the respective service node processed the respective one of the plurality of probe packets. An analytics device aggregates probe report information received from each of the plurality of service nodes to determine one or more path monitoring metrics.