Abstract: An online network device monitoring and recovery system generates, based at least in part on a schema that describes entities included in a network device, a software entity profile of entity object instances that represent the entities included in the network device, the entities including both hardware components and interfaces between the hardware components. The system registers the software entity profile to one or more proxies implemented on the network device. The system receives diagnostic information corresponding to a respective entity from the plurality of entities represented in the software entity profile registered to the one or more proxies. The system communicates diagnostic information for the respective entity, and a respective connective path through the entities for the respective entity based at least in part on the software entity profile.

Abstract: A method may include detecting a presence of a first server device; communicating, with the first server device, to obtain information associated with the first server device; sending, to a second server device, a request for authentication services, where the request includes the information associated with the first server device; receiving, from the second server device, a notification that the first server device has been authenticated, where the notification includes a session threshold; and establishing, based on the notification, a session with the first server device by associating the first server device with a virtual local area network (VLAN), where the associating permits network traffic to be received from or sent to the first server device via the VLAN, and where the network node uses the session threshold received from the second server device, instead of a threshold associated with the VLAN, to determine a duration permitted for the session.

Abstract: The disclosed apparatus may include (1) an access surface that provides access to ports used to connect devices to a telecommunications network via the line card, (2) a back opposite the access surface, (3) a row of ports arranged along the access surface to house a set of transceivers, and (4) a recessed row of ports arranged along the access surface to house an additional set of transceivers, such that the recessed row of ports is recessed inward toward the back relative to the row of ports. Various other apparatuses, systems, and methods are also disclosed.

Abstract: Techniques are described for providing fast reroute inter-area node protection for label switched paths (LSPs) using label distribution protocol (LDP). In one example, a network device may be configured to determine that a protected node is an area border router, and use network topology information, obtained by an Interior Gateway Protocol (IGP) executing on the network device, to identify a second area border router in the same IGP area as the protected node, to which to automatically establish a bypass LSP and a targeted LDP session.

Abstract: Techniques are described for providing fast reroute intra-area node protection for label switched paths (LSPs) using label distribution protocol (LDP). In one example, a network device may be configured to use network topology information, obtained by an Interior Gateway Protocol (IGP) executing on the network device, to identify a next next hop merge point to which to automatically establish a bypass LSP, and to which to establish a targeted LDP session for obtaining a label advertised by the next next hop merge point.

Abstract: Techniques are described for signaling aliasing capability between routers in a multi-tenant data center that uses VPNs, such as Ethernet VPNs. In the multi-tenant data center, two or more PE routers may be connected to a CE router by a multi-homed L2 segment in an all-active mode. Aliasing refers to the ability of a PE router to signal that it can reach a given multi-homed L2 segment even when the PE router has learned no MAC addresses over that multi-homed L2 segment. The PE routers on the multi-homed L2 segment advertise aliasing capability using a route advertisement on a per-L2 segment basis. When the multi-tenant data center uses global VPN identifiers, no additional information is needed by a remote PE to build an ECMP next hop to the PE routers that support aliasing, and transmission of a route advertisement on a per-VPN basis may be suppressed.

Abstract: A method includes receiving a signal indicative of a value of a data point associated with a compute device at a first time. The value of the data point includes a data point category that is correlated with a fault category. The compute device is operatively coupled to a record module having a protected mode and an unprotected mode. A signal is received indicative of a value of the data point at a second time, after the first time. When a characteristic of a change in the value of the data point at the first time to value of the data point at the second time crosses a threshold in a first direction, a signal is sent to the record module indicative of an instruction to record data associated with the compute device in the protected mode to define a protected data set.

Abstract: A distributed computing system includes a primary device and one or more backend devices. The primary device provides a management interface for the distributed computing system. A plurality of applications may be installed on the backend devices for execution. The primary device generates registration data that associates the applications with management interface commands or configuration parameters in response to messages received from the applications. Subsequently, when the primary device receives a particular command at the management interface, the primary device identifies, based on the registration data, a particular application from among the plurality of applications. In response to identifying the application, the primary device may send to the application an outgoing message.

Abstract: An apparatus includes a virtual switch hosted at a first network device. The virtual switch is configured to receive a data packet from a first virtual resource hosted at the first network device to be sent to a second virtual resource hosted at a second network device. The virtual switch is configured to encapsulate the data packet to define an encapsulated data packet using a tunnel header, which has a first portion associated with the first and second network devices, and a second portion associated with a data flow between the first and second virtual resources when the data packet is sent from the first network device to the second network device. An Internet Protocol network can use the second portion of the tunnel header to load balance the data packet with respect to other data packets sent from the first network device to the second network device.

Abstract: In one example, techniques of this disclosure may enable a point of local repair (PLR) network device to signal availability of link protection or node protection to a merge point (MP) network device and enable a network device to actively determine whether or not it is a merge point router. Based on whether or not the network device determines it is a MP, the network device may selectively clean up LSP states when there is an upstream link or node failure. The RSVP-TE protocol may be extended to enable a network device to send a tear down message to a downstream router, which may enable the downstream router to conditionally delete locale LSP state information. In some instances, a PLR network device may directly send a tear down message to a MP network device even though the PLR network device may not have a working bypass LSP.

Abstract: In one example, techniques of this disclosure may enable a point of local repair (PLR) network device to signal availability of link protection or node protection to a merge point (MP) network device and enable a network device to actively determine whether or not it is a merge point router. Based on whether or not the network device determines it is a MP, the network device may selectively clean up LSP states when there is an upstream link or node failure. The RSVP-TE protocol may be extended to enable a network device to send a tear down message to a downstream router, which may enable the downstream router to conditionally delete locale LSP state information. In some instances, a PLR network device may directly send a tear down message to a MP network device even though the PLR network device may not have a working bypass LSP.

Abstract: In some embodiments, a system includes a set of network control entities associated with a distributed multi-stage switch. Each network control entity from the set of network control entities is configured to manage at least one edge device having a set of ports and coupled to the distributed multi-stage switch. Each network control entity from the set of network control entities is associated with a unique set of identifiers. A network control entity from the set of network control entities is configured to assign a unique identifier from its unique set of identifiers to a port from the set of ports of the at least one edge device in response to the network control entity receiving a login request associated with the port.

Abstract: An apparatus for increasing scheduling efficiency in network devices may include (1) at least one memory device that stores at least one data chunk included in a packet, (2) a scheduler device that (a) schedules transmission of the packet that includes the data chunk and (b) issues a request to transmit the packet based at least in part on the scheduled transmission, and (3) a packet-delivery device that (a) receives the request to transmit the packet from the scheduler device, (b) prepares the packet for transmission at a faster rate than the scheduler device schedules the transmission of the packet, and then (c) facilitates transmitting the data chunk included in the packet to a computing device. Various other apparatuses, systems, and methods are also disclosed.

Abstract: A printed circuit board (PCB) defines a first outer surface and a second outer surface that is opposite the first outer surface. The first outer surface of the PCB defines a recess. The PCB includes a signal layer between the first outer surface and the second surface with a first portion exposed within the recess and a second portion exposed within the recess. A component is disposed within the recess and connected to the first portion and the second portion of the signal layer such that an entirety of the component is within the recess and below the first surface.

Abstract: In some embodiments, an apparatus includes an automatic integrated circuit (IC) handler having a change kit. The change kit has a plunger moveably disposable onto an automatic test equipment (ATE). In such embodiments, the ATE is configured to receive an integrated circuit having an optical interface. The plunger has a first position and a second position. In such embodiments, the plunger is out of contact with the integrated circuit when the plunger is in the first position. The plunger includes an optical connector operatively coupled to the optical interface of the integrated circuit when the plunger is in the second position.

Abstract: A controller provides authentication, authorization, and accounting (AAA) services for a network, the controller comprising a control unit having one or more processors and a Representational State Transfer (REST) interface executed by the control unit to receive application data that specifies an interface method and a resource identifier for a resource, the resource identifier conforming to a subscriber management resource model. The REST interface determines, based on the resource identifier, a record for a subscriber management construct corresponding to the resource. The REST interface applies, to the record, an action corresponding to the interface method to modify access to the network by a subscriber.

Abstract: In general, techniques are described for providing current bandwidth usage information for one or more label switched paths (LSPs) to a path computation element (PCE) to trigger the PCE to dynamically modify a path computation domain of the PCE to manage network traffic within the domain. In some examples, a network router signals an LSP in a packet-switched network according to an allocated bandwidth for the LSP. The network router receives and maps the network packets to the LSP for transport along the LSP in accordance with forwarding information. The network router determines bandwidth usage information for the LSP that indicates a volume of the network packets mapped to the LSP and sends, in a notification message, the bandwidth usage information for the LSP to a path computation element that computes label switched paths for a path computation domain to trigger reoptimization of the path computation domain.

Abstract: A device may receive information, via one or more border gateway protocol messages, identifying a first network traffic service and a second network traffic service. The device may map the information identifying the first network traffic service and the second network traffic service to information identifying a first tier of service for the first network traffic service and a second tier of service for the second network traffic service. The device may perform a first action and a second action, respectively associated with the first network traffic service and the second network traffic service, on the incoming network traffic, based on an order of the first tier of service, for the first network traffic service, and the second tier of service, for the second network traffic service, in a priority ordering of the set of network traffic services.

Abstract: In one example, a management server is configured to provide malware protection for one or more client mobile platforms in communication with the management server via a mobile network. In the example, the management server includes a processor configured to detect malware in the mobile network, select a client mobile platform having a malware scanning agent, and, manage the malware scanning agent of the client mobile platform using a device independent secure management protocol based at least in part on the malware detected in the mobile network.

Abstract: In one embodiment, a method includes receiving a first identifier and a private key after a network device has been included in a data center switch fabric control plane, authenticating the network device based on the private key, sending a second identifier to the network device, and sending a control signal to the network device based on the second identifier. The first identifier is associated with the network device and unique within a segment of the data center switch fabric control plane. The second identifier is unique within the segment of the data center switch fabric control plane.