Abstract: In some embodiments, an apparatus comprises of a first Control And Provisioning of Wireless Access Points (CAPWAP) module implemented in at least one of a memory or a processing device that is configured to be designated as a backup control module for a wireless access point during a first time period. The first CAPWAP control module is configured to receive state information associated with the wireless access point during the first time period from a second CAPWAP control module. The second CAPWAP control module is designated as a primary control module for the wireless access point during the first time period. The first CAPWAP control module is configured to be automatically designated as the primary control module during a second time period after the first time period and in response to the second CAPWAP control module not operating according to at least one predefined criterion.

Abstract: This disclosure describes the Fast Chromatic Dispersion Estimation (FCDE) techniques which corrects for chromatic dispersion in high data rate optical communications systems such as some coherent optical communications systems. FCDE may utilize transform such as fast-Fourier transforms to estimate the chromatic dispersion. From an estimate of the chromatic dispersion, the techniques may determine filter tap coefficients for compensating the chromatic dispersion.

Abstract: A security device may receive a request from a client device and intended for a server device. The security device may identify the request as being associated with a malicious activity. The malicious activity may include one or more undesirable tasks directed to the server device. The security device may generate a challenge-response test based on identifying the request as being associated with the malicious activity. The challenge-response test may be generated using one or more construction techniques. The security device may provide the challenge-response test to the client device. The security device may receive, from the client device, a proposed solution to the challenge-response test. The security device may identify the proposed solution as being generated using an optical character recognition (OCR) program. The security device may protect the server device from the client device based on identifying the solution as being generated using an OCR program.

Abstract: A system includes a first switch fabric portion and a second switch fabric portion. The first switch fabric portion is disposed within a first chassis and has a module associated with a first stage of a switch fabric and a module associated with a second stage of the switch fabric. The module of the first switch fabric portion associated with the first stage of the switch fabric is configured to send data to the module of the first switch fabric portion associated with the second stage of the switch fabric. The second switch fabric portion is disposed within a second chassis and has a module associated with the second stage of the switch fabric. The module of the first switch fabric portion associated with the first stage of the switch fabric is configured to send data to the module of the second switch fabric portion associated with the second stage of the switch fabric.

Abstract: In some embodiments, a method includes calculating, at a wireless access point (WAP) from a set of WAPs within a network, an interference value for each channel from a set of channels of the WAP. The method includes calculating, based on the interference value for each channel, a total move weight of the WAP. The method includes receiving, at the WAP, a total move weight from each remaining WAP. The method includes selecting one WAP from the set of WAPs based on a random number, the total move weight of the WAP, the total move weights from the remaining WAPs, and a rank of the WAPs. The method further includes changing, if the WAP is selected, a designated channel of the WAP to one of the remaining channels; and sending a signal to modify an active channel of the WAP to correspond with the designated channel.

Abstract: A printed circuit board (PCB) may include antipads, used to provide clearance for backdrilling, which may be sized to allow backdrilling in a way that minimizes the presence of stubs. The PCB may include pads to connect a component to the PCB and vertically disposed vias connected to at least some of the pads. The PCB may further include horizontally disposed signal layers, electrically connected by the vias, to route signals from the component, received from the vias, to an edge of the component, in which signals associated with the component closer to an inner portion of the component are routed to the edge of the component on higher ones of the signal layers than signals associated with the component further from the inner portion of the component.

Abstract: A method may include receiving, in a first server from a second server, a request for a service of a network by a device; sending, from the first server to the second server, a response to the request for the service to permit access to the service; and sending state information about the response to a third server for storage in a database.

Abstract: An apparatus includes a processor disposed within an enclosure and configured to communicate with multiple wireless devices. A first and a second antenna are disposed within the enclosure. The first antenna is configured to operate within a first band, and the second antenna is configured to operate within a second band. The second band has a center frequency less than a center frequency of the first band. The first antenna is configured to send a signal having a signal strength at a wireless device and associated with the first band, and the second antenna is configured to send a signal having a signal strength at the wireless device and associated with the second band. The signal strength for the signal associated with the first band is greater than the signal strength associated with the second band such that the wireless device selects the first band to communicate with the processor.

Abstract: A technique for facilitating the management of a wireless database related to station records and radio-frequency (RF) information by reducing unnecessary sharing of the data among wireless switches, thus enhancing efficiency in a wireless network. A system constructed according to the technique includes a collection of wireless switches with each switch having associated access points (AP), an AP database distributed throughout the collection of wireless switches, and at least one station radio frequency (RF) database. The AP database includes data associated with ownership of the AP's by the switches, and the station RF database includes wireless station information and RF information. AP radio adjacency is determined by whether an AP owned by a specific switch can detect the other AP owned by another switch. The station and RF information database is shared only within the subset of switches that have AP radio adjacency.

Abstract: A multicast-capable firewall allows firewall security policies to be applied to multicast traffic. The multicast-capable firewall may be integrated within a routing device, thus allowing a single device to provide both routing functionality, including multicast support, as well as firewall services. The routing device provides a user interface by which a user specifies one or more zones to be recognized by the integrated firewall when applying stateful firewall services to multicast packets. The user interface supports a syntax that allows the user to define subsets of the plurality of interfaces associated with the zones, and define a single multicast policy to be applied to multicast sessions associated with a multicast group. The multicast policy identifies common services to be applied pre-replication, and exceptions specifying additional services to be applied post-replication to copies of the multicast packets for the one or more zones.

Abstract: A toolbar that is provided or inserted in a markup language document so as to facilitate features or functionality provided by a server is disclosed. The toolbar is able to determine whether the toolbar should be displayed as part of the markup language page being displayed. In one embodiment the server is an intermediary server.

Abstract: A printed circuit board (PCB) defines a first outer surface and a second outer surface that is opposite the first outer surface. The first outer surface of the PCB defines a recess. The PCB includes a signal layer between the first outer surface and the second surface with a first portion exposed within the recess and a second portion exposed within the recess. A component is disposed within the recess and connected to the first portion and the second portion of the signal layer such that an entirety of the component is within the recess and below the first surface.

Abstract: In general, techniques are described for delegating responsibility for performing a connectivity protocol from one or more endpoint devices to network infrastructure situated along a network forwarding path connecting the endpoint devices. In some examples, an intermediate network device includes a connectivity protocol module of control unit that operates a connectivity protocol session on behalf of a server, wherein the server exchanges application data with the client using an application-layer communication session with the client. The connectivity protocol module monitors connectivity for the application-layer communication session with the connectivity protocol session by exchanging connectivity protocol messages for the connectivity protocol session with the client to determine a connectivity status for the communication session.

Abstract: An example network system includes a layer two (L2) device and a layer three (L3) device. The L2 device includes a control unit is configured to determine a preferred network path from a first L2 network in which the L2 device resides to an intermediate L3 network in which the L3 device resides that couples the first L2 network to a second L2 network having a second L2 device. The control unit includes a management endpoint (MEP) module. The MEP module executes an operations, administration, and management (OAM) protocol to monitor the first L2 network and output an L2 frame in accordance with the OAM protocol to the L3 device to notify the L3 device that it is within the preferred network path. A MEP module of the L3 device executes an OAM protocol that outputs L2 frames to the L2 device indicating the status of the L3 network.

Abstract: A network device includes multiple packet processing engines implemented in parallel with one another. A spraying component distributes incoming packets to the packet processing engines using a spraying technique that load balances the packet processing engines. In particular, the spraying component distributes the incoming packets based on queue lengths associated with the packet processing engines and based on a random component. In one implementation, the random component is a random selection from all the candidate processing engines. In another implementation, the random component is a weighted random selection in which the weights are inversely proportional to the queue lengths.

Abstract: Methods and apparatus, including computer program products, implementing and using techniques for processing a data packet in a packet forwarding device. A data packet is received. A virtual local area network destination is determined for the received data packet, and a set of rules associated with the virtual local area network destination is identified. The rules are applied to the data packet. If a virtual local area network destination has been determined for the received data packet, the data packet is output to the destination, using the result from the application of the rules. If no destination has been determined, the data packet is dropped. A security system for partitioning security system resources into a plurality of separate security domains that are configurable to enforce one or more policies and to allocate security system resources to the one or more security domains, is also described.

Abstract: In some embodiments, an apparatus includes an optical transmitter system that defines an interferometric structure and has an in-phase portion and a quadrature portion. The optical transmitter system has a transmission configuration and a calibration configuration. The interferometric structure can produce an output associated with a skew between the in-phase portion and the quadrature portion of the optical transmitter system when in the calibration configuration. The skew is associated with a digital domain, an analog domain and an optical domain of the optical transmitter system.

Abstract: In general, techniques are described for facilitating usage monitoring control in mobile networks. A mobile gateway comprising one or more processors and a memory may be configured to perform the techniques. The one or more processors may be configured to transmit a usage monitoring report indicative of usage of a service provided via a session for which usage monitoring was previously activated. The memory may be configured to store a monitoring key that was configured as a result of activating the usage monitoring for the service. The one or more processors may also be configured to, in response to the indication to deactivate the usage monitoring, remove the monitoring key that was configured as a part of activating the usage monitoring for the session.

Abstract: A first network client requests initiation of a data transfer with a second network client. An admission control facility (ACF) responds to the initiation request by performing admission analysis to determine whether to initiate the data transfer. The ACF sends one or more packets to the second network client. In response, the second network client sends acknowledgment packets back to the ACF. The ACF performs admission analysis based on the packets sent and the acknowledgment packets, and determines whether the data transfer should be initiated based on the analysis. The admission analysis may be based on a variety of factors, such as the average time to receive an acknowledgment for each packet, the variance of the time to receive an acknowledgment for each packet, a combination of these factors, or a combination of these and other factors.

Abstract: A controller device is connected to a group of virtual machines and one or more network devices in a network. The controller device is configured to store policies relating to when to start up and when to shut down the virtual machines based on users logging into the network, users logging out of the network, users attempting to access the plurality of virtual machines, and/or particular types of traffic in the network; receive network activity data from a network device of the one or more network devices in the network; identify, based on the network activity data and the policies, a virtual machine, of the group of virtual machines, to start up or shut down; and cause the virtual machine to start up or shut down.