Abstract: In some embodiments, a system includes a set of servers, a set of switches within a switch fabric, and an optical device. The optical device is operatively coupled to the set of servers via a first set of optical fibers. Each server from the set of servers is associated with at least one wavelength from a set of wavelengths upon connection to the optical device. The optical device is operatively coupled to each switch from a set of switches via an optical fiber from a second set of optical fibers. The optical device, when operative, wavelength demultiplexes optical signals received from each switch from the set of switches, and sends, for each wavelength from the set of wavelengths, optical signals for that wavelength to the server from the set of servers.

Abstract: An optical device may include a transmitter to provide an optical signal via a set of channels and a modulator. The optical device may include two or more tributary modulators to modulate the set of channels with a training pattern. The optical device may include a set of optics to alter a first channel relative to a second channel of the set of channels. The optical device may include a detector to determine an optical power measurement of the optical signal after the first channel is altered relative to the second channel. The optical device may include a controller to generate a control signal to adjust a power balance associated with the optical signal based on the optical power measurement. The optical device may include a controller to provide the control signal to a tributary modulator to alter a modulation of the optical signal.

Abstract: In one example, a network controller manages a network having many network devices. Network devices can receive the timing flow port role assignments from the network controller based on the controller's global view of the network topology. The controller can also calculate timing offsets to be applied to the network devices, based on timestamp information obtained by the network devices via exchanging time synchronization protocol messages, and the controller can update time clocks on all of the network devices within a single window of time, based on a timing offsets calculated in single iteration of calculations.

Abstract: Techniques are described for extending a two-way active measurement protocol (TWAMP) to enable measurement of service key performance indicators (KPIs) in a software defined network (SDN) and network function virtualization (NFV) architecture. The TWAMP extensions enable control messaging to be handled by a TWAMP control client executed on a centralized controller, and data messaging to be handled by a TWAMP session initiator executed on a separate network device. Techniques are also described for extending TWAMP to enable measurement of any of a plurality of service KPIs for a given service supported at a TWAMP server. The service KPIs may include one or more of keepalive measurements, round trip time measurements, path delay measurements, service latency measurements, or service load measurements. The TWAMP extensions for the service KPIs may be used in both conventional network architectures and in SDN and NFV architectures.

Abstract: Techniques are described for enhancements to Protocol Independent Multicast (PIM) to enable a last hop router (LHR) to perform source discovery and directly build or join a source tree. According to the techniques of this disclosure, an LHR may be configured to receive a request to obtain multicast traffic corresponding to one or more multicast groups. The LHR may be configured to generate a source discovery join message including a request to join one or more multicast groups identified in the source discovery message and one or more source discovery flags. At least one of the one or more source discovery flags may indicate that the last hop router is interested in obtaining source information relating to at least one of the one or more multicast groups. The LHR may be configured to send, to a rendezvous point (RP) router in the network, the source discovery join message.

Abstract: A system may include one or more devices to receive a flow record. The one or more devices may identify a type of the flow record. The one or more devices may parse the flow record for a template identifier (ID) if the type of the flow record is a data record. The one or more devices may further compare the template ID from the data record to a predetermined template ID identifying a data record of template IDs. The one or more devices may identify the data record as a data record of template IDs if the template ID matches the predetermined template ID. The one or more devices may further generate a map associating template IDs, from the data record of template IDs, to template information for decoding and/or interpreting data records. The one or more devices may store the map.

Abstract: Techniques are described for enhancements to multicast Label Distribution Protocol (mLDP) to support multicast only fast re-route (MoFRR) over a remote loop free alternate (RLFA) backup path. An egress router is configured to generate a modified mLDP control message to signal the RLFA backup path in which an address of a RLFA node is included in an LSPRoot field and an address of an ingress router is included in an opaque data field. In addition, the RLFA node of the RLFA backup path is configured to recognize that it is identified in the LSPRoot field of the modified mLDP control message, and, in response, look up the ingress router identified in the opaque data field of the modified mLDP control message. The RLFA node is further configured to send an mLDP control message that includes the address of the ingress router in the LSPRoot field towards the ingress router.

Abstract: A switching device in a network system for transferring data includes one or more source line cards, one or more destination line cards and a switching fabric coupled to the source line cards and the destination line cards to enable data communication between any source line card and destination line card. Each source line card includes a request generator to generate a request signal to be transmitted in order to obtain an authorization to transmit data. Each destination line card includes a grant generator to generate and send back a grant signal to the source line card in response to the request signal received at the destination line card to authorize the source line card to transmit a data cell to the destination line card.

Abstract: A first server may receive, from a client device, an indication of a request for a content file via a network address; identify that the network address is a dynamic network address; establish a communication session with a second; receive a portion of the content file from the second server; determine an index parameter based on receiving the portion of the content file; determine whether the content file is being stored by the first server based on a cache index and based on the index parameter or based on information associated with the request for the content file; receive a remaining portion of the content file based on determining that the content file is not being stored by the first server; and provide the content file to the client device.

Abstract: In some embodiments, an apparatus includes a management module configured to assign a unique set of identifiers to each network control entity from a set of network control entities. As a result, a network control entity from the set of network control entities can assign an identifier from its unique set of identifiers to a port in response to that network control entity receiving a login request from the port. The set of network control entities is associated with a distributed multi-stage switch. The management module is also configured to store a zone set database associated with the distributed multi-stage switch. The management module is configured to send an instance of an active zone set stored within the zone set database to each network control entity from the set of network control entities such that each network control entity can enforce the active zone set.

Abstract: Techniques are described for characterizing a receiver front end of a pluggable optical module. The pluggable optical module receives an optical signal that includes a first portion having a first polarization and a second portion having a second polarization. The first portion and second portion are not coherent with one another and the power of the first portion and second portion is equal.

Abstract: A network device is configured to provide, via an Ethernet segment with a customer network, active-active multi-homing L2 virtual bridge connectivity to the customer network using an EVPN instance (EVI) and L3 routing using an IRB interface that is a L3 routing interface assigned to the EVI; to receive, from a peer PE device of the EVPN instance, an EVPN route comprising an L2-L3 binding for a customer device of the customer network and associating the L2-L3 binding with the Ethernet segment, the L2-L3 binding comprising an L2 and an L3 address assigned to the customer device, wherein the peer PE device provides, with the network device and via the Ethernet segment, active-active multi-homing L2 virtual bridge connectivity to the customer network; and to forward, via the Ethernet segment and based at least on the L2-L3 binding received from the peer PE device, an L3 packet to the customer device.

Abstract: Techniques are described for reporting, by non-ingress routers for traffic engineering label switched paths (TE LSPs) and to a path computation element, actual paths taken by the TE LSPs through the network. A first network device: receives, from a second network device, an LSP path signaling message that includes a route object having a first indication of at least a sub-path of a path for TE LSP through a network, wherein the first network device is not an ingress label edge router for the TE LSP; generates, in response to the LSP path signaling message and based at least in part on the route object, an LSP path report message that includes a second indication of the at least the sub-path of the path for the TE LSP; and sends, to a path computation element, the LSP path report message to notify the PCE.

Abstract: A device may receive a password-protected file to be accessed for analysis. The device may identify a contextual term, associated with the password-protected file, to be used as a password to attempt to access the password-protected file. The contextual term may be identified based on at least one of: metadata associated with the password-protected file, metadata associated with a source from which the password-protected file is received, or text associated with the source from which the password-protected file is received. The device may apply the contextual term as the password to attempt to access the password-protected file.

Abstract: The techniques described are directed to providing mass withdrawal of media access control (MAC) routes for network devices in an Ethernet virtual private network data center interconnect (EVPN DCI). MAC routes to reach the learned MAC addresses are stored in routing tables with corresponding top-of-rack Ethernet segment identifier (TOR-ESI) values that represent the Ethernet segments from where the MAC addresses were learned. A provider edge (PE) network device may configure and advertise a virtual Ethernet segment identifier (vESI) that includes a plurality of TOR-ESI values. As Ethernet segments of the data center become unavailable, the corresponding TOR-ESI values may be withdrawn from the vESI to form an updated vESI. In this way, MAC routes having a TOR-ESI value that was withdrawn from the vESI may be removed from the routing tables in each of the network devices.

Abstract: A system and method for handling critical events in service delivery gateways. Events are defined that cause a transition from a master redundancy state to a standby redundancy state in service delivery gateways and a plurality of signal-routes are stored. Each signal-route is associated with one or more of the defined events. A first defined event is detected in the first service delivery gateway and causes a transition from the first master redundancy state to the first standby redundancy state in the first service delivery gateway and a change in a first signal-route from the plurality of signal-routes in the first service delivery gateway. The change in the first signal-route is advertised and a second service delivery gateway transitions from the first standby redundancy state to the first master redundancy state.

Abstract: In one embodiment, edge devices can be configured to be coupled to a multi-stage switch fabric and peripheral processing devices. The edge devices and the multi-stage switch fabric can collectively define a single logical entity. A first edge device from the edge devices can be configured to be coupled to a first peripheral processing device from the peripheral processing devices. The second edge device from the edge devices can be configured to be coupled to a second peripheral processing device from the peripheral processing devices. The first edge device can be configured such that virtual resources including a first virtual resource can be defined at the first peripheral processing device. A network management module coupled to the edge devices and configured to provision the virtual resources such that the first virtual resource can be migrated from the first peripheral processing device to the second peripheral processing device.

Abstract: A device may analyze a first file for malware. The device may determine that the first file causes a second file to be downloaded. The device may store linkage information that identifies a relationship between the first file and the second file based on determining that the first file causes the second file to be downloaded. The device may analyze the second file for malware. The device may determine a first malware score for the first file based on analyzing the second file for malware and based on the linkage information. The device may determine a second malware score for the second file based on analyzing the first file for malware and based on the linkage information.

Abstract: A system may include a power source selector device connected to a plurality of power sources. The system may also include multiple power supply modules (PSMs). A first PSM, of the multiple PSMs, may be connected to a first output of the power source selector device. A second PSM, of the multiple PSMs, may be connected to a second output of the power source selector device. The first output of the power source selector device may be different from the second output of the power source selector device. The system may also include a controller device connected to the power source selector device and each of the multiple PSMs.

Abstract: The disclosed apparatus may include (1) a database that maintains a pruned multicast distribution tree and (2) a processing unit having access to the database, wherein the processing unit (A) receives at least one type 3 Ethernet Segment Identifier (ESI) message from at least one other bridge domain on at least one other computing device, (B) determines, based at least in part on the type 3 ESI message, whether the other bridge domain on the other computing device has a root access concentrator, and then (C) populates, in response to determining whether the other bridge domain has a root access concentrator, the pruned multicast distribution tree to account for the other bridge domain such that the bridge domain on the computing device is able to determine whether to send multicast traffic to the other bridge domain. Various other apparatuses, systems, and methods are also disclosed.