Abstract: In some examples, a router comprising a control unit comprising a processor, the control unit configured to receive configuration data defining a measurement endpoint for measuring performance of a layer 3 (L3) service and associating the measurement endpoint with a remote measurement endpoint of a remote router. The control unit is further configured to encapsulate, to generate a flow measurement packet, a layer 2 (L2) measurement packet in a layer 4 (L4) header and an L3 header that identify a measurement flow. The control unit is further configured to output the flow measurement packet to the remote router.

Abstract: Techniques are described for providing an indication of an impending control plane disruption of a router using forwarding plane liveliness detection protocols. A forwarding plane of the router outputs liveliness detection messages that, when received by a peer router, provide an indication that the forwarding plane is operational and able to forward packets. When constructing the liveliness detection messages, the forwarding plane may embed additional information indicative of any impending disruption in the control plane of the network device. In this way, the forwarding plane of the transmitting router provides an indication to the peer router that, although currently operational, the control plane of the router may in the near term become non-operational. The peer router, in response to receiving an enhanced liveliness detection message indicating an impending control plane disruption, suppresses a recovery action otherwise triggered by a loss of communication with a control plane of the network device.

Abstract: In general, techniques are described by which a path through a network may be selected based on security information. For example, a network device may include one or more interfaces and a control unit. The interfaces may receive security information that describes a security service provided by a network security device. The network security device may couple to another network device. The control unit then determines, based on the security information, a path through the network that includes the other network device. The interfaces may forward at least a portion of the network traffic along the determined path to the other network device such that the network security device coupled to the other network device applies the security service to the portion of the network traffic forwarded via the path. As a result, the network device secures traffic by perform security path selection to forward traffic to network security devices.

Abstract: A computer-implemented method for improving clock synchronization between master and slave devices may include receiving at least one clock-synchronization packet transferred from a master device to a slave device via a network that supports an IP. The method may also include identifying at least one item of IP information added to the clock-synchronization packet during the transfer from the master device to the slave device. The method may further include determining that the clock-synchronization packet experienced a delay that exceeds a predetermined threshold during the transfer based at least in part on the item of IP information. Finally, the method may include discarding the clock-synchronization packet from a set of clock-synchronization packets capable of being used to synchronize the slave device with the master device in response to the determination. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A method includes a proxy device receiving from a source device a request to establish a flow to a destination device; generating, based on the request, a meta-packet that indicates that the flow to the destination device is to be proxied; determining whether a pre-established flow connecting the proxy device to another proxy device that leads toward the destination device exists; sending the meta-packet on the pre-established flow, when it is determined that the pre-established flow exists; receiving by the other proxy device, the meta-packet, and establishing the flow to the destination device based on the meta-packet, where the proxy devices assign one or more of a source address, a source port, a destination address, or a destination port, associated with the source device and the destination device, to the pre-established flow.

Abstract: Techniques are described for determining, with a first optical node, a correction factor indicative of an amount of optical power loss that a Raman amplifier in a second optical node causes in an optical signal having a first wavelength that is transmitted by the first optical node and received by the second optical node, transmitting, with the first optical node to the second optical node, information, based on the determined correction factor, that is to be used for determining a gain of the Raman amplifier, and transmitting, with the first optical node to the second optical node, an optical signal having a second wavelength that is to be amplified by the Raman amplifier.

Abstract: In some embodiments, an apparatus includes a flow control module configured to receive a first data packet from an output queue of a stage of a multi-stage switch at a first rate when an available capacity of the output queue crosses a first threshold. The flow control module is configured to receive a second data packet from the output queue of the stage of the multi-stage switch at a second rate when the available capacity of the output queue crosses a second threshold. The flow control module configured to send a flow control signal to an edge device of the multi-stage switch from which the first data packet or the second data packet entered the multi-stage switch.

Abstract: A dispatch module implemented in at least one of a memory or a processing device is operatively coupled to multiple processing modules, each having a first clock configuration and a second clock configuration. The dispatch module, at a first time, changes a first processing module included in the multiple processing modules from a first clock configuration to a second clock configuration. The dispatch module prohibits, at a second time within a predetermined time period and after the first time, a second processing module included in the multiple processing modules from changing from the first clock configuration to the second clock configuration if an indicator associated with a number of changes of the multiple processing modules between a first clock configuration and a second clock configuration within the predetermined time period and prior to the second time satisfies a criterion.

Abstract: A device may determine a link master/slave relationship for an Ethernet link associated with a connection between a component of the device and a component of another device. The device may determine that Synchronous Ethernet (SyncE) is to be enabled on the Ethernet link. The device may identify the component of the device as a SyncE slave or a SyncE master associated with enabling SyncE on the Ethernet link. The device may provide an indication that the component of the device has been identified as the SyncE slave or the SyncE master. The device may determine a SyncE master/slave relationship associated with enabling SyncE on the Ethernet link. The SyncE master/slave relationship may supersede the link master/slave relationship without altering the link master/slave relationship. The device may cause the component of the device to recover a clock based on the SyncE master/slave relationship rather than the link master/slave relationship.

Abstract: A device may cause an optical signal to be transmitted via a network path. The device may receive, from a network device, a link layer discover protocol (LLDP) message. The LLDP message may include signal characteristic information regarding the optical signal. The device may adjust transmission of the optical signal based on receiving the LLDP message. The device may cause an adjusted optical signal to be transmitted via the network path based on adjusting transmission of the optical signal.

Abstract: In general, techniques are described for managing content request referrals by keying content requests to a composite key data structure that maps end-user address prefixes and content identifiers to content delivery network servers of downstream CDNs. In one example, a CDN exchange includes a communication module to receive first network prefixes and first content identifiers from a first secondary content delivery network and to receive second network prefixes and second content identifiers from a second secondary content delivery network. A request router of the CDN exchange redirects the content request to the first secondary content delivery network or to the second secondary content delivery network according to a network address of the end user device and a content identifier for the content request.

Abstract: Techniques are described for providing session-aware, stateful network services to subscriber packet flows. Devices within a service provider network direct subscriber packets along service chains. Each tunnel is established to direct traffic according a particular ordered set of network services for the corresponding service chain. An ingress device for the tunnels encapsulate the subscriber packets and embed opaque session cookies that each uniquely identifies a collection of packet flows of a subscriber session amongst other packet flows transported by a given service tunnel. Each service node need only identify the tunnel on which a tunnel packet was received and the session cookie embedded within the tunnel packet to uniquely associate the encapsulated subscriber packet with a subscriber session, without needing to further inspect the encapsulated subscriber packet, and to index or otherwise retrieve state and statistics required to enforce the network service the service nod is programmed to deliver.

Abstract: A routing device coupled to a remote routing device via a link on which a flood reduction technique is used, such as a demand circuit, is configured to store an indication of a link state of the remote routing device and a first sequence number associated with the link state, receive an indication that the remote routing device is performing a graceful restart, and then receive data indicative of a new link state of the remote routing device and a second sequence number. The routing device determines whether the new link state is different than the stored indication of the link state, and if not, avoids requesting the current link state from the remote routing device. In this manner, the routing device may reduce link-state protocol traffic within an autonomous system including the routing device and the remote routing device.

Abstract: An output circuit, included in a device, may determine counter information associated with a packet provided via an output queue managed by the output circuit. The output circuit may determine that a latency event, associated with the output queue, has occurred. The output circuit may provide the counter information and time of day information associated with the counter information. The output circuit may provide a latency event notification associated with the output queue. An input circuit, included in the device, may receive the latency event notification associated with the output queue. The input circuit may determine performance information associated with an input queue. The input queue may correspond to the output queue and may be managed by the input circuit. The input circuit may provide the performance information associated with the input queue and time of day information associated with the performance information.

Abstract: In some embodiments, an apparatus includes a set of power supply units where each power supply units from the set of power supply unit is associated with a power zone from a set of power zones. The apparatus can also includes a redundant power supply unit and a set of electronic devices where each electronic device from the set of electronic devices is associated with a power zone from the set of power zones. Additionally, each electronic device from the set of electronic devices is operatively coupled to a power supply unit from the set of power supply units for that power zone and is also operatively coupled to the redundant power supply unit.

Abstract: Techniques are described for characterizing a receiver front end of a pluggable optical module. The pluggable optical module receives an optical signal that includes a first portion having a first polarization and a second portion having a second polarization. The first portion and second portion are not coherent with one another and the power of the first portion and second portion is equal.

Abstract: An optical device may include a modulator. The modulator may receive an optical signal. The modulator may modulate the optical signal to include a first channel and a second channel. The modulator may modulate the optical signal based on a training pattern associated with detecting a skew. The modulator may cause the first channel to interfere with the second channel. The modulator may perform a power measurement on the first channel and the second channel. The modulator may determine the skew based on the power measurement and the training pattern. The modulator may time delay the first channel or the second channel to align the skew based on the skew.

Abstract: In general, techniques are described for providing a continuous feedback system that dynamically updates data collection criteria and subscriber policies based on aggregated subscriber-specific and network usage data. For example, a method includes applying one or more subscriber specific policy and charging control (PCC) rules to network traffic to collect network traffic data for a plurality of subscribers, aggregating the network traffic data, and determining, based on the aggregated traffic data, whether subscriber independent data collection criteria need to be updated.

Abstract: In one example, an edge routing device of a service provider network includes one or more network interfaces configured to send and receive packets and a processing unit configured to retrieve, from a packet received via the one or more network interfaces, priority data from an Internet protocol (IP) header of the packet, form a first tag including a first set of data in a first priority field of the first tag, wherein the first set of data represents a first portion of the priority data, form a second tag including a second set of data in a second priority field of the second tag, wherein the second set of data represents a second portion of the priority data, encapsulate the packet with the first tag and the second tag, and forward, via the one or more network interfaces, the encapsulated packet.

Abstract: A device may receive a file to be analyzed in a sandbox environment, and may determine configuration information for configuring the sandbox environment. The configuration information may be determined based on at least one of: file information associated with the file to be analyzed, or client device information associated with a client device for which the file is intended. The device may configure the sandbox environment using the configuration information. The configuration information may identify a system configuration for the sandbox environment. The device may analyze the file in the sandbox environment based on configuring the sandbox environment using the configuration information.