Abstract: In one embodiment, a method includes receiving a first identifier and a private key after a network device has been included in a data center switch fabric control plane, authenticating the network device based on the private key, sending a second identifier to the network device, and sending a control signal to the network device based on the second identifier. The first identifier is associated with the network device and unique within a segment of the data center switch fabric control plane. The second identifier is unique within the segment of the data center switch fabric control plane.

Abstract: A user device may communicate registration information to a paging service system and receive a page message from the paging service system via out-of-band signaling. The page message may include a request to establish a communication session with a device, and out-of-band signaling may include a communication channel not dedicated for call session transmissions. The user device may select an in-band channel based on the page message, where the in-band channel comprises a communication channel dedicated for call session transmissions, and establish a communication session with the device using the in-band channel.

Abstract: Techniques are described for maintaining a forwarding information base (FIB) within a packet-forwarding engine (PFE) of a router, and programming a packet-forwarding integrated circuit (IC) with a hardware version of the FIB. Entries of the hardware version identify primary forwarding next hops and backup forwarding next hops for the LSPs, wherein the packet-forwarding IC includes a control logic module and internal selector block configured to produce a value indicating a state of the first physical link. The selector block outputs one of the primary forwarding next hop and the backup forwarding next hop of the entries for forwarding the MPLS packets based on the value in response to the packet-processing engine addressing one of the entries of the FIB for the LSPs. Packets are forwarded with the PFE to the one of the primary forwarding next hop and the backup forwarding next hop output by the selector block.

Abstract: A system that processes single stream multicast data includes multiple queues, a dequeue engine, and/or a queue control engine. The queues temporarily store data. At least one of the queues stores single stream multicast data. A multicast count is associated with the single stream multicast data and corresponds to a number of destinations to which the single stream multicast data is to be sent. The dequeue engine dequeues data from the queues. If the data corresponds to the single stream multicast data, the dequeue engine examines the multicast count associated with the single stream multicast data and dequeues the single stream multicast data based on the multicast count. The queue control engine examines one of the queues to determine whether to drop data from the queue and marks the data based on a result of the determination.

Abstract: In some embodiments a method comprises receiving, via a mobile device, registration data for a wireless access point. The method also comprises collection of location information of the mobile device and defining the wireless access point location based on location information of the mobile device. The method further comprises sending an electronic message including the registration data and the wireless access point location information to a provision device such that the provision device provisions the wireless access point.

Abstract: This disclosure describes techniques for determining whether a network session originates from an automated software agent. In one example, a network device, such as a router, includes a network interface to receive packets of a network session, a bot detection module to calculate a plurality of scores for network session data based on a plurality of metrics, wherein each of the metrics corresponds to a characteristic of a network session originated by an automated software agent, to produce an aggregate score from an aggregate of the plurality of scores, and to determine that the network session is originated by an automated software agent when the aggregate score exceeds a threshold, and an attack detection module to perform a programmed response when the network session is determined to be originated by an automated software agent. Each score represents a likelihood that the network session is originated by an automated software agent.

Abstract: In one example, a network device includes a hardware-based processor, and a Resource Reservation Protocol with Traffic Engineering extensions (RSVP-TE) module executing on the hardware-based processor that establishes a plurality of label switched paths (LSPs) having the network device as a common transit network device. The network device presents a plurality of options for selection, which each specify a different algorithm for selecting LSPs to evict from the link. In response to detecting an over-subscription condition on a link along the plurality of LSPs, the RSVP-TE module selects a subset of the plurality of LSPs to evict from the link, and the RSVP-TE module outputs an error message to one or more ingress network devices associated with the selected subset of LSPs without outputting an error message to the ingress network devices associated with those LSPs not selected for eviction.

Abstract: In general, techniques are described for managing content request referrals by keying content requests to a composite key data structure that maps end-user address prefixes and content identifiers to content delivery network servers of downstream CDNs. In one example, a CDN exchange includes a communication module to receive first network prefixes and first content identifiers from a first secondary content delivery network and to receive second network prefixes and second content identifiers from a second secondary content delivery network. A request router of the CDN exchange redirects the content request to the first secondary content delivery network or to the second secondary content delivery network according to a network address of the end user device and a content identifier for the content request.

Abstract: In one embodiment, a method includes receiving a request to transmit data from a first queue to a second queue via a switch fabric. In response to the receiving, a wake-up signal configured to trigger a stage of a processing pipeline in communication with the second queue to change from a standby state to an active state is sent.

Abstract: In general, techniques are described in which packet replicators of a network device cooperate to generate a distributed hierarchical forwarding structure that the packet replicators then use to replicate and forward multicast packets to multiple output interfaces. For example, packet forwarding engines (PFEs) of a router each receive a new list of interfaces for a multicast packet stream. The PFEs individually construct a hierarchical forwarding structure based on the interface list. The hierarchical forwarding structure specifies interrelationships among the PFEs, which occupy nodes within the hierarchy. Each child PFE determines from the hierarchical forwarding structure the identity of a parent PFE and issues a token, constituting forwarding state for the distributed hierarchical forwarding structure, to the parent PFE.

Abstract: In some embodiments, an apparatus includes an access point (AP) wirelessly coupled to a set of mobile communication devices. The AP is configured to determine a set of weights for a set of metrics based on a performance goal collectively associated with the AP and the set of mobile communication devices. The AP is configured to define, for each mobile communication device from the set of mobile communication devices, a maximum aggregation data unit size, a minimum aggregation data unit count, and a maximum aggregation data unit count based on the set of weights and a set of values for the set of metrics. The AP is configured to send, to each mobile communication device from the set of mobile communication devices, a signal based on the maximum aggregation data unit size, the minimum aggregation data unit count and the maximum aggregation data unit count.

Abstract: Techniques are described for verifying the connectivity status of multiple paths through a computer network. The techniques may be useful in testing the connectivity of label switched paths (LSPs), and particularly useful point-to-multipoint (P2MP) LSPs. In some embodiments, a P2MP label switched path (LSP) ping protocol may be used a first connectivity verification protocol for the P2MP LSP and a Multipoint Bidirectional Forwarding Detection (MP BFD) protocol may be used as a second connectivity verification protocol. In addition, use of the LSP ping protocol for connectivity testing of the P2MP LSP may be used to boot-strap session information for MP BFD sessions with egress devices of the P2MP LSP.

Abstract: A cache server receives wear usage information associated with a storage device, and receives an object to be cached in the storage device. The cache server also determines whether to store the object in the storage device based on the wear usage information. The cache server provides the object to the storage device for storage when it is determined that the object is to be stored in the storage device, and prevents the object from being stored in the storage device when it is determined that the object is not to be stored in the storage device.

Abstract: In some embodiments, a system includes a first network control entity, a second network control entity and a third network control entity. The first network control entity and the second network control entity are associated with a first network segment. The third network control entity is associated with a second network segment. The first network control entity is operable to send to the second network control entity an identifier of the first network segment and forwarding-state information associated with a data port at a first network element. The second network control entity is operable to receive the identifier of the first network segment and the forwarding-state information. The second network control entity is operable to send the forwarding-state information to a second network element. The first network control entity does not send the identifier of the first network segment and the forwarding-state information to the third network control entity.

Abstract: A multi-chassis router allows an administrator to install software from a single user interface. The multi-chassis router automatically forwards the software to each chassis within the multi-chassis router when given a single command to install the software from an administrator. The multi-chassis router also automatically validates the software on each chassis. After reporting the results of the validations, the multi-chassis router may wait for the administrator to issue a commit command before committing each chassis within the multi-chassis router to the software. Alternatively, in response to a failed validation or for other reason, an administrator can issue a single ROLLBACK command. This allows each chassis within the multi-chassis router to have the same software during all stages of a software installation and ensures software on each chassis is compatible with software on every other chassis.

Abstract: A method performed by a provider edge device includes generating pseudo-wire tables based on virtual private local area network service advertisements from other provider edge devices, where the provider edge device services customer edge devices, and establishing pseudo-wires with respect to the other provider edge devices, based on the pseudo-wire tables, where the pseudo-wires include an active pseudo-wire and at least one standby pseudo-wire with respect to each of the other provider edge devices. The method also includes generating and advertising VPLS advertisement to the other provider edge devices, detecting a communication link failure associated with one of the customer edge devices in which the provider edge device services, and determining whether the at least one standby pseudo-wire needs to be utilized because of the communication link failure.

Abstract: In some embodiments, an apparatus includes a core network node configured to be operatively coupled to a set of wired network nodes and a set of wireless network nodes. The core network node is configured to receive, at a first time, a first data packet to be sent to a wired device operatively coupled to a wired network node from the set of wired network nodes. The core network node is configured to also receive, at a second time, a second data packet to be sent to a wireless device operatively coupled to a wireless network node from the set of wireless network nodes. The core network node is configured to apply a common policy to the first data packet and the second data packet based on an identifier of a user associated with both the wireless device and the wired device.

Abstract: In one embodiment, an apparatus can include a switch fabric. The apparatus can also include a first edge device operatively coupled to an edge of the switch fabric and having a plurality of ports. The apparatus can also include a second edge device operatively coupled to the edge of the switch fabric and having a plurality of ports, the switch fabric defining a plurality of single-hop paths between the first edge device and the second edge device. The first edge device configured to send to a peripheral processing device operatively coupled to the first edge device a representation of a mapping of a portion of the plurality of ports of the first edge device and a portion of the plurality of ports of the second edge device to a plurality of ports included in a non-edge device represented within a virtual multi-hop network topology.

Abstract: In general, techniques are described for mapping WAN conditions to appropriate back-pressure mechanisms at the WAN edges to improve the performance of delay and/or loss-sensitive applications. In one example, a system includes a wide area network having a provider edge (PE) router to establish a Fiber Channel over Ethernet (FCoE) pseudowire over the wide area network. A Lossless Ethernet network attaches, by an attachment circuit, to the FCoE pseudowire at the PE router. A Fiber Channel Fabric connects to the Lossless Ethernet network and to a storage device that provides data for transmission over the wide area network by the FCoE pseudowire. The PE router detects a defect in the FCoE pseudowire and, in response to detecting the defect in FCoE pseudowire, injects an FCoE flow control extension into the Lossless Ethernet network by the attachment circuit.

Abstract: An apparatus includes a destination edge device configured to receive a first validation packet according to a switch fabric validation protocol. The destination edge device is configured to validate multiple data paths through a distributed switch fabric from a source edge device to the destination edge device based on the first validation packet. The destination edge device is configured to send, in response to receiving the first validation packet, a second validation packet to a peripheral processing device. The destination edge device is also configured to send the second validation packet according to a validation protocol different from the first validation protocol.