Abstract: Techniques are described for detecting failure of one or more virtual computing environments and causing a migration of workloads. In some examples, a computing system includes a storage medium and processing circuitry having access to the storage medium. The processing circuitry is configured to communicate with a plurality of virtual computing environments (VCEs), including a first VCE and a second VCE, wherein each of the plurality of VCEs is operated by a different public cloud provider. The processing circuitry is further configured to deploy a group of workloads to the first VCE, detect a failure of at least a portion of the first VCE, and output, to the first VCE and responsive to detecting the failure, an instruction to transfer a set of workloads of the group of workloads to the second VCE to thereby cause a migration of the set of workloads to the second VCE.

Abstract: Methods and apparatus for automatically identifying and correcting faults relating to poor communications service in a wireless system, e.g., in real time, are described. The methods are well suited for use in a system with a variety of access points, e.g., wireless and/or wired access points, which can be used to obtain access to the Internet or another network. Access points (APs), which have been configured to monitor in accordance with received monitoring configuration information, e.g. on a per access point interface basis, captures messages, store captured messages, and in collaboration with network monitoring apparatus which can be in an AP or external thereto, use message sequences to determine a remedial action to be automatically taken when poor service is likely as may be predicted based on the detected message sequence between a UE and one or more APs.

Abstract: The disclosed apparatus may include (1) flagging, at a packet filter within a network device, a packet to be discarded instead of passed to a processing unit within the network device, (2) determining that the packet is part of a set of related packets that includes at least one additional packet destined at least intermediately for the network device, (3) identifying, by monitoring incoming packets received at the packet filter, the additional packet within the set of related packets, and then (4) discarding, due to the additional packet being included within the set of related packets, the additional packet instead of passing the additional packet to the processing unit. Various other apparatuses, systems, and methods are also disclosed.

Abstract: An intercept library of a network device may detect a socket system call from an application associated with a user space of the network device. The intercept library may be associated with the user space, and the socket system call may be addressed to a kernel associated with the network device. The intercept library may generate an intercept socket based on the socket system call, and may detect a subscription for asynchronous network state information, wherein the subscription may be generated by the application. The intercept library may provide the subscription to a service daemon via the intercept socket.

Abstract: A device may store first information regarding a first pseudowire connection with a first device, wherein the first pseudowire connection provides access to an Ethernet virtual private network (EVPN) to communicate with a host device. The device may store second information regarding a second pseudowire connection with a second device, wherein the second pseudowire connection provides access to the EVPN to communicate with the host device. The device may receive a message that includes a configuration identifier and identify the configuration identifier. The device may change a first characteristic of the first pseudowire connection based on the configuration identifier. The device may change a second characteristic of the second pseudowire connection based on the configuration identifier. The device may receive data from the host device based on changing the first characteristic of the first pseudowire connection and changing the second characteristic of the second pseudowire connection.

Abstract: An example network device includes a plurality of network ports that each facilitate one or more network links between the network device and one or more remote devices, a plurality of indicators each configured to represent a status of a respective one of the plurality of network ports on the network device, and processing circuitry configured to reconfigure at least one of the plurality of indicators to represent a link-status of the one or more network links of at least one network port of the network device in response to a command.

Abstract: In an example, a method includes obtaining, for a software-defined wide area network (SD-WAN) system having a plurality of a wide area network (WAN) links for an SD-WAN service, a first service level agreement (SLA) rule that matches a first application, the first SLA rule having a first priority that indicates a priority of the first application; obtaining, for the SD-WAN system, a second SLA rule that matches a second application, the second SLA rule having a second priority that indicates a priority of the second application; assigning, for the SD-WAN system, the first application and the second application to a first WAN link of the plurality of WAN links; and in response to determining that the first WAN link has violated the first SLA rule that matches the first application, assigning, by the SD-WAN system, the second application to a second WAN link of the plurality of WAN links.

Abstract: A device receives topology data and path data associated with a network that includes network devices. The device determines planned bandwidths for new paths through the network based on the topology data and the path data, and ranks the new paths, based on the planned bandwidths, to generate a ranked list. The device selects information identifying a first new path from the ranked list, wherein the first new path includes a first planned bandwidth. The device determines whether the first new path can be provided via a single route through the network based on the first planned bandwidth, and identifies two or more routes through the network for the first new path when the first new path cannot be provided via the single route. The device causes the first planned bandwidth to be reserved by two or more of the network devices for the two or more routes.

Abstract: A disclosed method may include (1) determining that a packet traversing a network device has been selected for conditional tracing by (A) comparing a characteristic of the packet against a firewall rule that calls for all packets exhibiting the characteristic to be conditionally debugged while traversing the network device and (B) determining, based at least in part on the comparison, that the firewall rule applies to the packet due at least in part to the packet exhibiting the characteristic, (2) tracing a journey of the packet within the network device in response to the determination by collecting information about the packet's journey through a network stack of the network device, and then (3) performing at least one action on the network device based at least in part on the information collected about the packet's journey through the network stack. Various other systems, methods, and computer-readable media are also disclosed.

Abstract: A disclosed method may include (1) identifying a packet that enters a start point of an encapsulation tunnel that spans at least a portion of a network, (2) discovering a maximum transmission unit of the encapsulation tunnel, (3) determining whether a size of the packet satisfies a size threshold that is based at least in part on the maximum transmission unit of the encapsulation tunnel, (4) detecting an encapsulation-triggering event in connection with the packet, and then in response to detecting the encapsulation-triggering event, (5) forwarding the packet via the start point of the encapsulation tunnel toward an end point of the encapsulation tunnel. Various other systems, methods, and computer-readable media are also disclosed.

Abstract: A first network device may install a receiving key for decrypting traffic on protocol hardware associated with a data plane of the first network device. The first network device may receive, from the data plane, a first notification indicating that the receiving key is installed on the protocol hardware and may provide, to a second network device, a first message identifying the receiving key. The first network device may receive, from the second network device, an acknowledgment message indicating that the receiving key is installed on the second network device and may install a transmission key for encrypting traffic on the protocol hardware. The first network device may receive, from the data plane, a second notification indicating that the transmission key is installed on the protocol hardware and may provide, to the second network device, a second message identifying the transmission key.

Abstract: Methods and apparatus for using beacon signals are described. One or more sectorized base stations are used in some embodiments to transmit beacon signals into zones, e.g., each zone being at least partially covered by one or more beacon signals. Use of sectorized base stations allows a single base station, e.g., a Bluetooth or other base station capable of transmitting beacon signals, to cover a number of different zones avoiding the need for multiple different beacon transmitters at different locations to establish different beacon coverage areas. Sectorization of a Bluetooth base station and the ability to remotely or locally configure the base station allows for great flexibility to use beacon signals in stores or other locations without the need for numerous individual battery powered beacon transmitters at floor or display level.

Abstract: A ternary phase shift keying transmitter and receiver can efficiently communicate using ternary encoded data that avoids indistinguishable transition curves for each of the three modulated states in the ternary encoded data. The transmitter is interoperable and can function with different types of receivers including direct detection-based receivers and coherent detection-based receivers.

Abstract: In some cases, once Fast Reroute (FRR) has taken place (e.g., for MPLS protection), a further FRR is undesirable, and even detrimental. A mechanism to prevent a further FRR, once such a further FRR is determined to be potentially harmful, is described.

Abstract: Embodiments of the invention describe apparatuses, optical systems, and methods for utilizing a dynamically reconfigurable optical transmitter. A laser array outputs a plurality of laser signals (which may further be modulated based on electrical signals), each of the plurality of laser signals having a wavelength, wherein the wavelength of each of the plurality of laser signals is tunable based on other electrical signals. An optical router receives the plurality of (modulated) laser signals at input ports and outputs the plurality of received (modulated) laser signals to one or more output ports based on the tuned wavelength of each of the plurality of received laser signals. This reconfigurable transmitter enables dynamic bandwidth allocation for multiple destinations via the tuning of the laser wavelengths.

Abstract: In general, the disclosure describes techniques for distributing processing of routes among multiple execution threads of a network device. In some examples, a method includes partitioning a routing information base (RIB) into a plurality of RIB partitions, assigning a route processing thread to each RIB partition, processing BGP routing protocol messages at each of the route processing threads, and receiving, at a BGP update thread serving a BGP peer group, from two or more of the route processing threads, route update information for routes to be advertised. The route update information includes a BGP route tuple having a network prefix value and a pointer to an outgoing attribute. The method further includes collecting, based on the BGP route tuples, route update information for routes having the same outgoing attribute and constructing a BGP update message from the collected route update information.

Abstract: An apparatus includes a reconfigurable optical add/drop multiplexer (ROADM) having an input port to receive a first optical signal from a second device. The ROADM also includes a first wavelength selective switch (WSS), in optical communication with the input port, to convert the first optical signal into a second optical signal, a loopback, in optical communication with the first WSS, to transmit the second optical signal, and a second WSS, in optical communication with the loopback, to convert the second optical signal to a third optical signal and direct the third optical signal back to the second device via the input port.

Abstract: For use in a system including a first data forwarding device, a second data forwarding device, a third data forwarding device, a first communications link between the first data forwarding device and the second data forwarding device, and a second communications link between the first data forwarding device and the third data forwarding device, the first and second communications links belonging to a link aggregation group (LAG), a method includes (1) generating a message (i) for testing a first path between the first data forwarding device and the second data forwarding device, and a second path between the first data forwarding device and the third data forwarding device, and (ii) including an Internet protocol (IP) datagram including a multicast IP destination address and a payload containing path testing information; and (2) sending, over the LAG, the message from the first data forwarding device to both the second data forwarding device and the third data forwarding device.

Abstract: Techniques are described for facilitating node protection for Broadcast, unknown Unicast, and Multicast (BUM) traffic for a multi-homed node failure. For example, each VTEP (e.g., PE device) may advertise a protected VTEP address that indicates an IP address of a remote PE device that is to be protected in the event of a node failure. In the event a multi-homed PE device fails, the ingress PE device sends a BUM packet including the protected VTEP address for the failed node. When an egress PE device receives the BUM packet, the egress PE device determines whether the BUM packet includes the protected VTEP address and whether the egress PE device is operating as a backup designated forwarder (DF). If the BUM packet includes the protected VTEP address and the egress PE device is a backup DF, the egress PE device forwards the BUM traffic to the ESI.

Abstract: Integrated circuits are described that utilize internal state machine-driven logic elements (e.g., flops) within input and/or output wrapper chains that are used to test internal core logic of the integrate circuit. One or more individual logic elements of the wrapper chains within the integrated circuit is implemented as a multi-flop state machine rather than a single digital flip-flop. As multi-flop state machines, each enhanced logic element of a wrapper chain is individually configurable to output pre-selected values so as to disassociate the state machine-driven flops from signal transmission delays that may occur in the input or output wrapper chains of the integrated circuit.