Abstract: A network device may receive a border gateway protocol (BGP) flow specification route associated with creation of an overlay network slice in a network, and may create a new routing instance based on the BGP flow specification route. The network device may associate interfaces defined by the BGP flow specification route with virtual private network (VPN) members, and may determine VPN parameters based on the BGP flow specification route. The network device may advertise the VPN parameters within the network to cause the network to generate the overlay network slice.

Abstract: In an example, a method includes obtaining, for a software-defined wide area network (SD-WAN) system having a plurality of a wide area network (WAN) links for an SD-WAN service, a first service level agreement (SLA) rule that matches a first application, the first SLA rule having a first priority that indicates a priority of the first application; obtaining, for the SD-WAN system, a second SLA rule that matches a second application, the second SLA rule having a second priority that indicates a priority of the second application; assigning, for the SD-WAN system, the first application and the second application to a first WAN link of the plurality of WAN links; and in response to determining that the first WAN link has violated the first SLA rule that matches the first application, assigning, by the SD-WAN system, the second application to a second WAN link of the plurality of WAN links.

Abstract: Techniques are disclosed for maintaining processing unit core affinity for fragmented packets. In one example, a service physical interface card (PIC) implementing a service plane of a network device receives fragmented and/or non-fragmented packet data for a traffic flow. The service PIC comprises at least one processing unit comprising multiple cores. A routing engine operating in a control plane of the network device defines one or more core groups comprising a subset of the cores. The routing engine assigns the traffic flow to a core group and a forwarding engine operating in a forwarding plane of the network device forwards the packet data for the traffic flow to the assigned core group. A core of the assigned core group applies a network service to the fragmented and/or non-fragmented packet data for the traffic flow, and the forwarding engine forwards the packet data for the traffic flow toward a destination.

Abstract: A variety of different graphical user interfaces are generated that when displayed provide a visual and interactive representation of one or more performance metrics associated with the operation of a computer network. The graphical user interfaces may be used to monitor the underlay computer network for a virtualization infrastructure, as one example. Aspects include grouping the servers of a computer network into a plurality of aggregates, each aggregate comprising one or more servers. A set of probes are configured that are issued by an agent of a server in one aggregate and sent through the computer network to one or more agents in the server(s) of a different aggregate. Responses and other measurements taken based on the issuance of the probes is gathered and analyzed to generate metrics that are then used to generate, at least in part, the information provided in the graphical user interfaces.

Abstract: A method includes receiving a plurality of configurations comprising a first configuration for provisioning a first set of network services at a first resource of an edge device and a second configuration for provisioning a second set of network services at the first resource, a first configuration group identifier identifying a configuration group for the first configuration, and a first network performance parameter for the configuration group. The method further includes determining a performance factor for the first resource providing the first set of network services to one or more client devices. The method further includes, in response to determining that the performance factor does not satisfy the first network performance parameter for the configuration group and that the first configuration group identifier identifies the configuration group for the first configuration, moving the first configuration from the first resource to a second resource of the edge device.

Abstract: An example method includes receiving, by a computing system, a declarative testing descriptor for active testing of a virtualized service; obtaining, from an orchestration layer, metadata associated with the virtualized service, wherein the metadata specifies a unique name for a virtualized service within the namespace of a cluster managed by the orchestration layer; determining, by the computing system using the declarative testing descriptor and the metadata, an active testing configuration for an instance of the virtualized service; and starting an active test according to the active testing configuration and determining service level violations for the instance of the virtualized service based on a result of the active test.

Abstract: A disclosed apparatus may include (1) a retractable guide rail movably coupled to a chassis, wherein the retractable guide rail is configured to support a field-replaceable unit when the field-replaceable unit is installed in the chassis, (2) a support bracket coupled to the chassis and aligned with the retractable guide rail within the chassis and (3) a locking bracket movably coupled to the support bracket, wherein the locking bracket is configured to (A) engage the retractable guide rail in an expanded position within the chassis when the field-replaceable unit is not installed in the chassis and (B) disengage the retractable guide rail such that the retractable guide rail moves to a retracted position when the field-replaceable unit is installed in the chassis. Various other apparatuses, systems, and methods are also disclosed.

Abstract: An optical transmitter can generate probabilistically shaped quadrature amplitude modulation (PS-QAM) signaling for transmission over a fiber to a destination without optical amplification. The single fiber can transmit the PS-QAM signaling using dense wavelength division multiplexing having a relatively large number of channels that are closely spaced. A coherent receiver can receive the PS-QAM signaling for decoding without implementing chromatic dispersion compensation.

Abstract: A system comprises an edge services controller configured to: compute, based on a physical topology of physical links that connect a plurality of network interface cards (NICs) that comprise embedded switches and processing units coupled to the embedded switches, a virtual topology comprising a strict subset of the physical links; and program the virtual topology into the respective processing units of the NICs to cause the processing units of the NICs to send data packets via physical links in the strict subset of the physical links.

Abstract: Disclosed are embodiments for estimating risk associated with a user of a wireless device. In some embodiments, the risk relates to a risk of infection by a contagious disease. For example, in some embodiments, the contagious disease is Coronavirus 2019. In some embodiments, locations of multiple wireless devices are estimated based on signal strengths of signals associated with the devices. Neighboring devices are identified based on highest probability regions of the devices that are determined based on associated signals. A measure of proximity to other devices is then determined based on probabilities that each device is located in neighboring regions. The risk is then based on the measure of proximity. In some embodiments, a risk of a first user associated with a first wireless device is based, in part, on a risk of a second user within a proximity of the first user.

Abstract: Access points can be mounted in a variety of locations or orientations and can support multiple communications protocols. In some embodiments, an access point includes a main housing and a front housing. The main and front housing are connected by a hinge. A Wi-Fi antenna is included in the front housing in some embodiments. The access point is configured for use in either an open or closed position. When mounted in a vertical position, the front housing can be lowered into a horizontal position, which facilitates a preferred orientation of an antenna with respect to the ground. A first set of cooling fins serves to maintain components of the access point offset from a wall to which the access point is mounted. This facilitates airflow. Additional fins act as a spacer between the main housing and the front housing when the access point is used in a closed position. This facilitates air flow around both sides of the main housing.

Abstract: Techniques are disclosed for a network device to preserve packet flow information across bump-in-the-wire (BITW) firewalls. For example, a method comprises receiving, by a network device, a packet. The method also comprises determining, by the network device, that the packet matches a packet flow that is associated with an action to redirect the packet to a firewall configured as a bump-in-the-wire. The method further comprises, in response to the determination: modifying, by the network device, a Media Access Control (MAC) address field of a layer 2 (L2) packet header with a flow identifier of the packet flow; sending, by the network device, the packet to the firewall; receiving, by the network device, the packet from the firewall; and recovering, by the network device, the packet flow by modifying the packet according to the flow identifier in the packet to restore the L2 packet header of the packet.

Abstract: A method includes maintaining, by a controller device that manages a plurality of network devices, a data structure and receiving, by the controller device, an indication of a stateful intent. The method further includes generating, by the controller device, a logical packet based on the stateful intent and determining, by the controller device, a dependent intent of the data structure based on the logical packet. The method further includes determining that the dependent intent conflicts with the stateful intent. The method further includes, in response to determining that the dependent intent conflicts with the stateful intent, determining, by the controller device, a resolution that resolves the conflict between the dependent intent and the stateful intent based on the dependent intent and the stateful intent and outputting, by the controller device, an indication of the resolution.

Abstract: According to various aspects of the present disclosure, an apparatus is provided. In an aspect, the apparatus includes an optical transceiver having a first port, a second port and an optical switch coupled to the first port and the second port. The optical switch is switchable between a unidirectional port operation mode and a bidirectional port operation mode. When the optical switch is in the unidirectional port operation mode, the first port is configured to send a first optical signal, and the second port configured to receive a second optical signal. When the optical switch is in the bidirectional port operation mode, the first port configured to send the first optical signal and receive the second optical signal, and the second port configured to receive a third optical signal and not send the first signal.

Abstract: A controller device manages a plurality of network devices. The controller device includes one or more processing units configured to receive an upgrade request; obtain a redundancy model indicating network device redundancies or service redundancies; determine, based on the upgrade request and the redundancy model, an update graph having nodes each representing one of the network devices or one of the services, the update graph also having at least one edge that connects two of the nodes and that indicates the network redundancy or the service redundancy; determine, based on the update graph including the at least one edge, an update schedule for performing an update of software for the network devices that ensures availability for the first network device or second network device or availability for the service; and update the software of each of the network devices according to the update schedule.

Abstract: A cloud-based network management system (NMS) stores path data from network devices operating as network gateways for an enterprise network, the path data collected by each network device of the plurality of network devices. The NMS determines, for a logical path within a specified time window, a wireless signal quality and a link quality based at least in part on the path data. The NMS, in response to determining that the logical path is of a poor link quality, determine a correlation between a poor wireless quality and the poor link quality. The NMS may output a notification that indicates the correlation between the poor wireless quality and the poor link quality of the logical path.

Abstract: A disclosed apparatus may include (1) a power enclosure electrically coupled to a power supply module of a computing device, (2) a power connector that (A) is electrically coupled to a power cable that facilitates carrying electric current to the power supply module via the power enclosure and (B) is dimensioned to mate with the power enclosure, and (3) at least one power switch that (A) is electrically coupled to the power enclosure, (B) is configured to be engaged by at least one feature of the power connector while the power connector is fully mated with the power enclosure, and when engaged by the feature of the power connector, (C) enables electric current to flow from the power connector to the power supply module via the power enclosure. Various other apparatuses, systems, and methods are also disclosed.

Abstract: This disclosure is related to devices, systems, and techniques for using an aggregation device to manage satellite devices that are coupled to host devices. For example, a system includes a set of satellite devices providing switching functionality and an aggregation device configured to communicate with an orchestrator of a wide area network (WAN), where the aggregation device serves as a master switch and is coupled to the set of satellite devices via a set of cascade ports. The aggregation device is configured to detect, using a port extension service virtual network function (VNF) executing on the aggregation device, each satellite device of the set of satellite devices coupled to the aggregation device and send, to the orchestrator, data indicating the satellite devices as respective sub-systems within a logical switch comprising the aggregation device and the set of satellite devices.

Abstract: In general, techniques are described for organizing execution of distributed operating systems for network devices. A device comprising hardware computing nodes may be configured to perform the techniques. The hardware computing nodes may execute a protocol by which to discover a topology of the plurality of hardware computing nodes, and determine, based on the topology, a subset of the plurality of hardware computing nodes to manage execution of a distributed operating system. The determined subset of the plurality of hardware computing nodes may execute a communication bus by which to synchronize operating system state information between the subset of the plurality of hardware computing nodes. The hardware computing nodes may further execute, based on the operating system state information, the distributed operating system to provide an execution environment in which one or more applications execute.