Abstract: A device may include a maintenance association endpoint configured to select a maintenance association endpoint identifier, transmit the maintenance association endpoint identifier to one or more other maintenance association endpoints, and automatically assign the maintenance association endpoint identifier to the maintenance association endpoint if it is determined that the maintenance association endpoint identifier is available based on a conflict message received from one of the one more other maintenance association endpoints.

Abstract: A network device may operate to increase application performance over a wide area network. In one particular implementation, the network device may monitor accesses to a disk drive from entities and determine whether an entity is accessing the disk drive in a manner that causes a disproportionate amount of performance degradation. If so, the network device may throttle access to the disk drive for the entity.

Abstract: Techniques are described for managing failover in redundant network devices. In particular, each device in a set of redundant network devices includes redundant processing modules. Each module provides a separate operating environment for a set of network services. Each network device includes a control unit that receives configuration information that specifies individual weight values for each of the modules and a threshold value for the network device. The control unit detects failures of the modules and transfers primary responsibility for performing the network service to a second network device when the threshold value is exceeded by a weighted sum of the weight values for the failed modules.

Abstract: A server device is configured to receive a request to identify a manner in which changed code propagates within an application; generate a group of blocks that correspond to code associated with a parent function corresponding to the application and which includes the changed code; perform an intra-procedural analysis on the group of blocks to identify a block that is affected by the changed code included within an epicenter block; perform an inter-procedural analysis on functions associated with the block, where, when performing the inter-procedural analysis, the server device is to generate another group of blocks associated with the functions, and identify another block that is affected by the changed code included within the epicenter block; and present, for display, information associated with the block or the other block that enables the application to be tested based on the block or the other block.

Abstract: A method performed by a network device may include establishing performance-based Bidirectional Forwarding Detection (BFD) sessions for each link of a primary traffic engineering Label Switched Path (TE-LSP) and establishing performance-based BFD sessions for each link of a secondary TE-LSP. The method may also include, monitoring performance of the primary TE-LSP based on the performance-based BFD sessions for each link of the primary TE-LSP and monitoring performance of the secondary TE-LSP based on the performance-based BFD sessions for each link of the secondary TE-LSP. The method may further include determining that the performance of the primary TE-LSP is degraded based on the monitoring of the performance of the primary TE-LSP and automatically switching a flow of data unit traffic from the primary TE-LSP to the secondary TE-LSP when the performance of the primary TE-LSP is degraded.

Abstract: A virtual device includes multiple devices connected to operate as a single device. A first one of the devices is configured to determine that the first device connects to a second one of the devices via a first link; identify a second link; determine that the second link connects the first device to the second device; and automatically aggregate the first link and the second link to form a link aggregation with the second device based on determining that the first device connects to the second device via both the first and second links. The first device is further configured to transmit packets to the second device via the first and second links of the link aggregation.

Abstract: A method may include generating a request that includes a host domain associated with a multiple-domain-to-one domain mapping, capturing the request before transmission of the request, rewriting the host domain, and transmitting the request.

Abstract: A network device includes a control unit configured to execute an extended layer three (L3) routing protocol within a control plane of the network device. The extended L3 routing protocol is extended to process a routing protocol control message having a set of layer two (L2) identifiers of customer devices attached to an autonomous system (AS) and an indicator that specifies a Route Target associated with a Virtual Private Local Area Network Service (VPLS) domain within the AS. The routing protocol control message conforms to a message type of the L3 routing protocol to initiate a flush of the set of L2 identifiers.

Abstract: Methods and apparatus for allowing routers in an autonomous system to implement LDP and RSVP at the same time. RSVP can be used in the network core with LDP being used in network regions surrounding the core. LDP LSPs are tunneled through the RSVP network core using RSVP LSPs and label stacking techniques. During route selection LDP LSPs which use an RSVP LSP tunnel are preferred over alternative LDP LSPs having an equal cost associated with them to create a preference for traffic engineered routes.

Abstract: A network acceleration device includes a persistent, in-memory cache of network content. For example, the cache may store content in a manner that allows a software process to map virtual memory to specific, known regions of an underlying physical memory. Upon detecting a failure of a process executing within the network device, the network acceleration device may restart the software process and remap data structures of the cache to the known regions of the physical memory without necessarily requiring that the cache content be reloaded from a non-volatile memory, such as a hard drive. In this manner, the network acceleration device may accelerate download speeds by avoiding timely cache content restoration in the event of a software process failure.

Abstract: A device may receive a data unit at a line interface of a network device, convey the data unit to a first component in the line interface, update a flow table in the first component based on the data unit, send a message to a second component in the network device, the message describing the update to the flow table, and forward the data unit from the first component to another line interface in the network device.

Abstract: A network device includes an input interface, at least one processing path and an output interface. The input interface receives data units on a plurality of streams and assigns a first sequence number to each of the received data units. The at least one processing path performs a route look-up for each of the data units, where the route look-up determines a routing destination for a respective data unit. The output interface assigns a second sequence number to each of the processed data units based on a number of memory references associated with the route look-up for each of the data units and re-orders the processed data units based on the second sequence number assigned to each of the processed data units.

Abstract: A system may include a switchover element configurable to source or sink power from or to an electronic device electrically coupled to the switchover element and a controller in communication with the switchover element. The controller may be configured to determine if the electronic device is healthy. When the electronic device is healthy, the controller may configure the switchover element to deliver power from the electronic device to the system and configure the switchover element to provide the power to any unhealthy electronic device electrically coupled to the system.

Abstract: A retention-extraction device is provided for a removable card in a chassis. The device includes an actuation rod having a cam slot, the actuation rod configured to provide linear movement along the length of the actuation rod, and an extraction lever operatively connected to a proximal end of the actuation rod and pivotally secured to the chassis. The device also includes a bell crank with a cam follower that is configured to ride in the cam slot and a latch hook that pivots between an open and closed position based on the motion of the bell crank. The linear movement of the actuation rod causes the extraction lever to apply a force to a portion of the card and causes the latch hook to pivot to an open position to allow removal of the card.

Abstract: A network device includes a route selection module configured to select an alternate next hop to use in forwarding network traffic to a destination in the event a primary next hop becomes unavailable, wherein a path to the destination device associated with the alternate next hop does not send packets through the network device. The route selection module computes optimal distances from neighboring devices to the network device, wherein a number of Shortest Path First (SPF) computations required for computing the optimal distances is independent of the number of neighboring devices in the network, identifies as candidate alternate next hops those neighboring devices having distances to the destination that are less than the sum of the optimal distance from the neighboring device to the network device and the optimal distance from the network device to the destination, and selects the alternate next hop from among the stored candidates.

Abstract: An isolation switch is used to isolate the output of an oscillator, during startup of the oscillator, from the circuitry that uses the periodic signal generated by the oscillator. In one implementation, a device may include an oscillator to generate a periodic signal and a switch connected to receive an output of the oscillator. The switch may include a control input that controls whether the switch is in an open or closed state. Switch control circuit may control the switch so that the switch is in an open state during startup of the oscillator and the switch is in a closed state thereafter.

Abstract: A switching device in a network system for transferring data includes one or more source line cards, one or more destination line cards and a switching fabric coupled to the source line cards and the destination line cards to enable data communication between any source line card and destination line card. Each source line card includes a request generator to generate a request signal to be transmitted in order to obtain an authorization to transmit data. Each destination line card includes a grant generator to generate and send back a grant signal to the source line card in response to the request signal received at the destination line card to authorize the source line card to transmit a data cell to the destination line card.

Abstract: Techniques are described for application of implementation-specific configuration policies within a network device. For example, a device, such as a router, may comprise memory to store operational configuration data and candidate configuration data. The device further includes a control unit to apply changes to the candidate configuration data based on input from a client, and apply an implementation-specific configuration policy to a copy of the changed candidate configuration data. Based on a result of applying the implementation-specific configuration policy, the device selectively commits the changes made to the candidate configuration to the operational configuration. In the event an error occurs while applying the implementation-specific configuration policy, the device does not commit the changes to the operational configuration.

Abstract: A network device, such as a firewall, may be configured to filter network traffic. The filter may include regular expressions that are converted by the firewall into a format that can be stored in a ternary content addressable memory. In one exemplary implementation, the filter definition may include one or more input regular expressions that include variables that are compared to a result based on an equality/inequality relationship, where multiple variables are combined using logical operations selected from a set of logical operations including (but not limited to) logical AND and logical OR operations. The firewall may convert the input regular expressions into a format in which the equality/inequality relationships are converted to a pure equality relationship and the multiple variables are combined using only logical OR operations. The firewall may program the ternary content-addressable memory to implement the filter based on the converted one or more input regular expressions.

Abstract: A wireless intrusion prevention system and method to prevent, detect, and stop malware attacks is presented. The wireless intrusion prevention system monitors network communications for events characteristic of a malware attack, correlates a plurality of events to detect a malware attack, and performs mitigating actions to stop the malware attack.