Abstract: A network device connects between a client and a server. The network device is configured to store information regarding a capability of the server; receive a first message, from the client, intended for the server; obtain the stored information regarding the capability of the server; generate a second message that includes the information regarding the capability of the server; send the second message to the client; receive a third message from the client; and establish, based on the third message, a connection between the client and the server.

Abstract: Methods and systems consistent with the present invention provide a programmable table which allows software to define a plurality of branching functions, each of which maps a vector of condition codes to a branch offset. This technique allows for a flexible multi-way branching functionality, using a conditional branch outcome table that can be specified by a programmer. Any instruction can specify the evaluation of arbitrary conditional expressions to compute the values for the condition codes, and can choose a particular branching function. When the processor executes the instruction, the processor's arithmetic/logical functional units evaluate the conditional expressions and then the processor performs the branch operation, according to the specified branching function.

Abstract: A method performed by a first network device may include receiving a request for a resource from an end-point device and acknowledging the request for the resource to the end-point device. The method may also include receiving a resource coordination message from a second network device and transmitting a return resource coordination message to the second network device.

Abstract: A device comprises a programmable communication interface and a processor. The programmable communication interface communicates data via a set of signals. The processor configures the programmable communication interface to communicate the data in accordance with a programmed override state for at least one of the signals and actual states for the remaining signals. The programmable communication interface may be configured, for example, to programmably treat an overridden signal as asserted or de-asserted regardless of actual voltages present on one or more electrical connectors associated with the overridden signal. As a result, incorrectly wired electrical connectors of the programmable communication interface may be programmably overridden. Consequently, a technician need not manually rewire the programmable communication interface.

Abstract: The invention is directed toward techniques for Multi-Protocol Label Switching (MPLS) upstream label assignment for the Resource Reservation Protocol with Traffic Engineering (RSVP-TE). The techniques include extensions to the RSVP-TE that enable distribution of upstream assigned labels in Path messages from an upstream router to two or more downstream routers of tunnel established over a network. The tunnel may comprise a RSVP-TE P2MP Label Switched Path (LSP) or an Internet Protocol (IP) multicast tunnel. The techniques also include extensions to the RSVP-TE that enable a router to advertise upstream label assignment capability to neighboring routers in the network. The MPLS upstream label assignment using RSVP-TE described herein enables a branch router to avoid traffic replication on a Local Area Network (LAN) for RSVP-TE P2MP LSPs.

Abstract: In general, this disclosure describes techniques of storing data in and retrieving data from a cache of a computing device. More specifically, techniques are described for utilizing a “perfect hash” function to implement an associative cache within a computing device. That is, the associative cache implements a fully associative map between a predetermined set of addresses and data values, employing only a single tag fetch comparison.

Abstract: A network device for processing data packets includes input logic, a register, route lookup logic and output processing logic. The input logic receives a data packet having at least one multi-protocol label switching (MPLS) tag, stores the packet and forwards a portion of the packet including the MPLS tag. The route lookup logic receives the portion of the packet, generates next hop information based on the MPLS tag and determines whether at least one MPLS tag is to be removed from the packet before the packet is to be output by the network device. The route lookup logic also modifies a start offset value in the register for each MPLS tag that is to be removed and forwards the start offset. The output processing logic receives the start offset and begins processing the data packet for output at a location identified by the start offset.

Abstract: A method is provided for queuing packets. A packet may be received and its flow identified. It may then be determined whether a flow queue has been assigned to the identified flow. The identified flow may be dynamically assigning to an available flow queue when it is determined that a flow queue has not been assigned to the identified flow. The packet may be enqueued into the available flow queue.

Abstract: A method performed by a primary server includes receiving integrity criteria and sending a health check request to a secondary server based on the received integrity criteria. The method also includes receiving integrity information from the secondary server and checking the integrity information against the integrity criteria. The method further includes initiating a non-compliance action if the integrity information does not comply with the integrity criteria.

Abstract: A network router management interface offers two different presentation modes for viewing configuration and operational information encoded in extensible markup language output obtained from a network router. The network router management interface provides an application programming interface (API) that permits client applications to formulate configuration and operational requests according to an extensible markup language, such as XML. In response to the configuration and operational requests submitted by a client application, the router produces XML output. On a selective basis, the user may elect to view or archive the XML output in either a rendered or unrendered format. In this manner, clients such as network administrators, installation technicians and applications developers can view raw XML output on a selective basis for use in development and debugging.

Abstract: In one embodiment, a method includes receiving a portion of a hash key vector. The hash key vector can be defined based on a range value and based on at least a portion of an address value from a data packet queued within a multi-stage switch. The method also includes defining, based on the hash key vector, a hash value associated with a location in a hash table when the portion of the hash key vector matches a bit vector stored in a tag table.

Abstract: Techniques are described for synchronizing state information between a plurality of control units. A router, for example, is described that includes a primary control unit and a standby control unit. The primary control unit maintains router resources to ensure operation of the router. To ensure operation, the primary control unit receives state information from the router resources and maintains the state information for consumers, i.e. router resources that require or “consume” state information. Prior to updating the consumers with the state information, the primary control unit synchronizes the state information with the standby control unit. In the event the primary control unit fails, the standby control unit assumes control of the router resources. Upon assuming control, the standby control unit resumes updating the consumers with state information without having to “relearn” state information, e.g., by way of power cycling the router resources to a known state.

Abstract: A method for sharing an aggregate bandwidth among a group of traffic classes may include allocating a portion of the aggregate bandwidth to one of the group of traffic classes having a first priority associated therewith, where the allocated portion is referred to as a first bandwidth. The method may include allocating an unused portion of the aggregate bandwidth to a second one of the group of traffic classes having a second priority associated therewith in conjunction with a parameter associated with a downstream device.

Abstract: Techniques are described for performing non-revertive failover with network devices. A network device including a control unit and interface cards receives routing information protocol (RIP) updates each having a metric value. The control unit signals bidirectional forwarding detection (BFD) sessions based on the metric values of each of the RIP updates with, for example, a media gateway. The control unit also selectively installs a RIP route based on the metric values. The media gateway monitors the BFD sessions, and upon failure of an active BFD session, indicates the network device to perform non-revertive failover by sending a revised plurality of RIP updates. The network device performs non-revertive failover according to the revised plurality of RIP updates. Because of the flexibility of BFD, the network device need not revert back to a previous RIP route, therefore curtailing excessive failover.

Abstract: A network device integrates accounting functionality for generation of flow statistics with packet intercept functionality to provide a comprehensive traffic analysis environment. The device comprises a set of network interface cards to receive packets from a network, and a set of accounting service cards to calculate flow statistics for the packets. The device further comprises a control unit to receive the network packets from the interface cards and distribute the packets to the set of accounting service cards. The accounting service card comprises an interface for insertion within a slot of a network device. Accounting service cards may be added to easily scale the network device to support higher bandwidth communication links, such as OC-3, OC-12, OC048 and higher rate links. Additional accounting service cards may be used for purposes of redundancy to support continuous, uninterrupted packet processing and accounting in the event of a card failure.

Abstract: A communication connection merge method and a node to be employed in the same can merge parameter of LSP, such as request bandwidth or the like, upon performing merging. The communication connection merge method performs merge process for consolidating a plurality of communication connection of a connection-oriented network at a node on the way of transfer route into a common communication connection by making judgment of possibility to have a common transfer route from a node to merge to an egress node upon merging new communication connection on setting for existing communication connection, modifying collateral parameter of the existing communication connection which is judged to merge the new communication connection for enabling accommodation of the new communication connection in the existing communication connection, and performing merge after modification of parameter of the existing communication connection.

Abstract: A method may include receiving a data unit and identifying a state of a memory storing data units. The method may include selecting a threshold value having a first threshold unit or a second threshold unit based on the state of the memory. The method may include comparing the threshold value to a queue state using the first threshold unit if the memory is in a first state. The method may include comparing the threshold value to the queue state using the second threshold unit if the memory is in a second state.

Abstract: A system and method for intrusion detection and prevention processing are described. Spin state information associated with a signature may be prefetched by a network device having one or more buffers. The spin state information may be stored by the buffer. Context data may be searched using the spin state information stored by the buffer.

Abstract: A service provider system connects to systems associated with a group of business-partners. Each of the business-partners sells services, of an extensible set of services provided by the service provider system, to its customers. The service provider system provides a common interface via which the business-partner systems can request one or more services from the extensible set of services. The service provider system exposes subsets of the common interface to each of the business-partner systems by controlling access to the extensible set of services by the business-partner systems.

Abstract: A device may include a service activation engine (SAE) including: a policy information base (PIB) file that defines a plurality of attachments that correspond to a plurality of network policies; and a server. The server may receive a request, using common open policy service for policy provisioning (COPS-PR), for a network service related to an interface handle associated with a subscriber device; determine which ones of the network policies correspond to the network service; and send, using COPS-PR, a provisioning instance (PRI) including a first of the attachments to implement the ones of the network policies to the interface handle based on the attachments.