Abstract: Disclosed are embodiments for estimating risk associated with a user of a wireless device. In some embodiments, the risk relates to a risk of infection by a contagious disease. For example, in some embodiments, the contagious disease is Coronavirus 2019. In some embodiments, locations of multiple wireless devices are estimated based on signal strengths of signals associated with the devices. Neighboring devices are identified based on highest probability regions of the devices that are determined based on associated signals. A measure of proximity to other devices is then determined based on probabilities that each device is located in neighboring regions. The risk is then based on the measure of proximity. In some embodiments, a risk of a first user associated with a first wireless device is based, in part, on a risk of a second user within a proximity of the first user.

Abstract: A controller device manages a plurality of network devices. The controller device includes one or more processing units configured to receive an upgrade request; obtain a redundancy model indicating network device redundancies or service redundancies; determine, based on the upgrade request and the redundancy model, an update graph having nodes each representing one of the network devices or one of the services, the update graph also having at least one edge that connects two of the nodes and that indicates the network redundancy or the service redundancy; determine, based on the update graph including the at least one edge, an update schedule for performing an update of software for the network devices that ensures availability for the first network device or second network device or availability for the service; and update the software of each of the network devices according to the update schedule.

Abstract: A disclosed apparatus may include (1) a power enclosure electrically coupled to a power supply module of a computing device, (2) a power connector that (A) is electrically coupled to a power cable that facilitates carrying electric current to the power supply module via the power enclosure and (B) is dimensioned to mate with the power enclosure, and (3) at least one power switch that (A) is electrically coupled to the power enclosure, (B) is configured to be engaged by at least one feature of the power connector while the power connector is fully mated with the power enclosure, and when engaged by the feature of the power connector, (C) enables electric current to flow from the power connector to the power supply module via the power enclosure. Various other apparatuses, systems, and methods are also disclosed.

Abstract: A cloud-based network management system (NMS) stores path data from network devices operating as network gateways for an enterprise network, the path data collected by each network device of the plurality of network devices. The NMS determines, for a logical path within a specified time window, a wireless signal quality and a link quality based at least in part on the path data. The NMS, in response to determining that the logical path is of a poor link quality, determine a correlation between a poor wireless quality and the poor link quality. The NMS may output a notification that indicates the correlation between the poor wireless quality and the poor link quality of the logical path.

Abstract: In general, techniques are described for organizing execution of distributed operating systems for network devices. A device comprising hardware computing nodes may be configured to perform the techniques. The hardware computing nodes may execute a protocol by which to discover a topology of the plurality of hardware computing nodes, and determine, based on the topology, a subset of the plurality of hardware computing nodes to manage execution of a distributed operating system. The determined subset of the plurality of hardware computing nodes may execute a communication bus by which to synchronize operating system state information between the subset of the plurality of hardware computing nodes. The hardware computing nodes may further execute, based on the operating system state information, the distributed operating system to provide an execution environment in which one or more applications execute.

Abstract: This disclosure is related to devices, systems, and techniques for using an aggregation device to manage satellite devices that are coupled to host devices. For example, a system includes a set of satellite devices providing switching functionality and an aggregation device configured to communicate with an orchestrator of a wide area network (WAN), where the aggregation device serves as a master switch and is coupled to the set of satellite devices via a set of cascade ports. The aggregation device is configured to detect, using a port extension service virtual network function (VNF) executing on the aggregation device, each satellite device of the set of satellite devices coupled to the aggregation device and send, to the orchestrator, data indicating the satellite devices as respective sub-systems within a logical switch comprising the aggregation device and the set of satellite devices.

Abstract: In an example, systems and methods enable automatic implementation of intent-based security policies in a network system, such as a software-defined wide area network system, in which network segment prefixes for network segments at one or more sites are dynamically learned. A service orchestrator controller translates an intent-based security policy input by a user to a security policy for a first site. The security policy for the first site specifies a segment-specific queryable resource associated with a second site. To implement the security policy, a device associated with the first site queries the segment-specific queryable resource associated with the second site, and updates one or more forwarding tables of the device with the network segment prefixes associated with one or more network segments at the second site received in response to the query. The first site forwards network traffic to the second site based on the updated forwarding tables.

Abstract: Techniques are described for determining one or more outlier logical paths in a computer network. A cloud-based network management system stores path data received from a plurality of network devices operating as network gateways for an enterprise network, the path data collected by each network device of the plurality of network devices for one or more logical paths of a physical interface from the network device over a wide area network (WAN). The network management system compares the path data for the plurality of logical paths to determine one or more outlier logical paths out of the plurality of logical paths. The network management system, in response to determining the one or more outlier logical paths, output a notification indicative of the one or more outlier path data out of the plurality of logical paths.

Abstract: A computing device may determine an occurrence of a network event associated with a pair of network devices of a plurality of network devices included in a network. The computing device may, in response to determining the occurrence of the network event, determine a plurality of network parameters associated with the network. The computing device may determine, using a plurality of decision trees and based on the plurality of network parameters, a number of overlay tunnels to add between the pair of network devices. The computing device may create the number of overlay tunnels over an underlay topology of the network between the pair of network devices.

Abstract: Disclosed are embodiments of a device that includes an orientation sensor. Based on the device's orientation, a transmit power of the device is limited to ensure that transmission of the device do not exceed regulatory requirements. The transmit power limit is based, in some embodiments, on a manufacturer or model of the device, which indicates a position of one or more antennas relative to the device, and allows for a determination of an amount of power transmitted above the horizon in a given orientation.

Abstract: A non-transitory processor-readable medium storing code representing instructions to be executed by a processor can cause the processor to receive an indication to load balance a group of sessions associated with a network node and a switch across a group of links between a gateway device and the switch at a first time. The code causes the processor to calculate at a second time, a load based on the group of sessions and associated with a first set of links in an active configuration before the first time. The code causes the processor to send a signal to cause a set of sessions from the group of sessions to re-establish themselves at a third time based on a threshold value calculated based on the load such that the set of sessions are load balanced across a second set of links in the active configuration at the third time.

Abstract: Embodiments of the invention describe apparatuses, optical systems, and methods for utilizing a dynamically reconfigurable optical transmitter. A laser array outputs a plurality of laser signals (which may further be modulated based on electrical signals), each of the plurality of laser signals having a wavelength, wherein the wavelength of each of the plurality of laser signals is tunable based on other electrical signals. An optical router receives the plurality of (modulated) laser signals at input ports and outputs the plurality of received (modulated) laser signals to one or more output ports based on the tuned wavelength of each of the plurality of received laser signals. This reconfigurable transmitter enables dynamic bandwidth allocation for multiple destinations via the tuning of the laser wavelengths.

Abstract: A network device may receive an internet protocol (IP) packet that includes an IP packet header. The IP packet may include at least one extension header, which includes at least one of: a hop-by-hop options header, a first destination options header that precedes a routing header, or a second destination options header that precedes an upper-layer header. The network device may determine that: the hop-by-hop options header includes an Operations and Management capabilities (OAM) option, the first destination options header includes the OAM option and an IP address of the network device matches a destination IP address or a routing IP address identified in the routing header, or the second destination options header includes the OAM option and the IP address of the network device matches the destination IP address. The network device may perform one or more actions indicated by the OAM option.

Abstract: A network device may receive policy data identifying a first segment routing (SR) policy and a second SR policy. The first SR policy may be associated with a first path through a network and a first next hop, and the second SR policy may be associated with a second path through the network and a second next hop. The network device may advertise, to another device, reachability associated with the first next hop and the second next hop, and may receive, from the other device, a packet with a header. The network device may determine, from the header, data identifying the first next hop or the second next hop, without performing a lookup, and may cause the packet to be routed to a destination address, via the first path or the second path, based on the policy data associated with the first next hop or the second next hop.

Abstract: A network device may receive packets, wherein the network device includes a first routing component, a second routing component, a first forwarding component, a second forwarding component, and a physical interface card concentrator with multiple physical interface cards. The first routing component may provide, to the physical interface card concentrator, a signal indicating that the second forwarding component is to be an active forwarding component. The physical interface card concentrator may cause, based on the signal, a data path for the multiple physical interface cards to be switched from the first forwarding component to the second forwarding component. The first routing component may provide the packets to the second forwarding component. The second forwarding component may provide the packets to the multiple physical interface cards via the data path. The multiple physical interface cards may forward the packets toward destinations associated with the packets.

Abstract: A ring node N belonging to a resilient MPLS ring (RMR) provisions and/or configures clockwise (CW) and anti-clockwise (AC) paths on the RMR by: (a) configuring two ring node segment identifiers (Ring-SIDs) on the ring node, wherein a first of the two Ring-SIDs (CW-Ring-SID) is to reach N in a clockwise direction on the ring and a second of the two Ring-SIDs (AC-Ring-SID) is to reach N in an anti-clockwise direction on the ring, and wherein the CW-Ring-SID and AC-Ring-SID are unique within a source packet routing in networking (SPRING) domain including the ring; (b) generating a message including the ring node's CW-Ring-SID and AC-Ring-SID; and (c) advertising the message, via an interior gateway protocol, for receipt by other ring nodes belonging to the ring such that (1) a clockwise multipoint-to-point path (CWP) is defined such that every other one of the ring nodes belonging to the ring can be an ingress for the CWP and such that only the node is an egress for the CWP, and (2) an anti-clockwise multipoint-

Abstract: An example network device determines to assign a number of global Internet protocol (IP) addresses to respective network interfaces, determines a subnetwork for the network interfaces, determines a prefix corresponding to the subnetwork, determines a first global IP address having the prefix, determines a range value that is equal to or greater than the number of global IP addresses, generates a message according to Duplicate Address Detection Protocol (DAD) including data indicating that the message includes a range of addresses, the data further indicating the first global IP address and the range value, and sends the message according to DAD to one or more host network devices to determine whether any global IP address in a range starting with the first global IP address and through the range value is in use by the one or more host network devices.

Abstract: In general, various aspects of the techniques are described in this disclosure for distributed label assignment for labeled routes. In one example, a method includes obtaining, by a first thread of a plurality of execution threads for at least one routing protocol process executing on processing circuitry of a network device, an allocation of first labels drawn from a label space for a network service; adding, by the first thread, the first labels to a first local label pool for the first thread; generating, by the first thread, after obtaining the allocation of the first labels, a labeled route comprising a route for the network service and a label assigned by the first thread from the first local label pool; and outputting, by the network device, the labeled route.

Abstract: A first device may provide, periodically throughout a test session and to neighboring devices that are in a network with the first device, a message request for measuring network performance. The neighboring devices, upon receiving the request message, are to use a relay mechanism to determine network performance indicator (NPI) values. The first device may receive, from the neighboring devices and periodically throughout the test session, a response message that includes the NPI values. The first device may determine additional NPI values that measure the network performance between the first device and the neighboring devices. The first device may determine overall NPI values based on the NPI values and the additional NPI values. The first device may identify a preferred next-hop to one of the neighboring devices based on the overall NPI values, where the preferred next-hop is part of a preferred path through the network.

Abstract: An example method includes receiving, by an SD-WAN system, WAN link characterization data for a plurality of WAN links of the SD-WAN system over a time period; and for each site of a plurality of sites of the SD-WAN system, generating, by the SD-WAN system, a local policy for the site, wherein generating the local policy is based on a machine learning model trained with the WAN link characterization data for the plurality of WAN links, and providing the local policy to an SD-WAN edge device of the site.