Abstract: The disclosed apparatus may include (1) a plurality of fluid-cooled plates that thermally couple to a plurality of electronic components included on a multi-chip module, (2) at least one source conduit that (A) is operatively coupled to at least one fluid-cooled plate within the plurality of fluid-cooled plates and (B) feeds cooling fluid from a condenser to the fluid-cooled plate, (3) at least one return conduit that (A) is operatively coupled to at least one additional fluid-cooled plate within the plurality of fluid-cooled plates and (B) returns the cooling fluid from the additional fluid-cooled plate toward the condenser, and (4) an assembly that (A) is mechanically coupled to the fluid-cooled plates and (B) reinforces the thermal couplings between the fluid-cooled plates and the electronic components included on the multi-chip module. Various other apparatuses, systems, and methods are also disclosed.

Abstract: In general, techniques are described for providing a hierarchical naming scheme used to propagate state information within network devices. A network device comprising a topic database and a processor may be configured to perform the techniques. The topic database may be configured to store a hierarchical naming scheme that associates objects representative of the state information to hierarchically arranged topics. The processor may be configured to associate consuming components within the network device to the hierarchically arranged topics, and operate as a producer component to publish an object to one of the hierarchically arranged topics. The processor may also be configured to propagate the published object to one of the consumer components associated with the one of the hierarchically arranged topics.

Abstract: Scalable, robust cloud-based network management systems (NMSs) are described. In one, an NMS includes a set of NMS applications, a pool of device communication managers (DCMs), and a pool of device operations managers (DOMs). Each of the DCMs and DOMs executed by the processors as software containers. The NMS includes an API gateway configured to route remote procedure calls (RPCs) from the DCMs to the DOMs via the APIs exposed by the DOMs and according to device identifiers of the managed elements. The DOMs are configured to establish a set of persistent application-layer communication sessions from the DOMs to the DCMs and to direct communications from the NMS applications to the DCMs over the persistent application-layer communication sessions according to a mapping between device identifiers associated with the managed elements and network addresses associated with the DCMs.

Abstract: Methods and apparatus relating to use of actual and/or virtual beacons are described. Virtual beacons are virtual in that an actual beacon need not be transmitted but a rather a virtual beacon transmitter at a desired location maybe considered to transmit virtual beacons. In some embodiments a set of beacon transmitter information for one or more beacons is supplied to devices in a communications system. The beacon transmitter information indicates transmission power and location of actual and virtual beacon transmitters as well as information to be communicated by virtual beacons. Devices with access to beacon information can determine based on the location of a wireless terminal whether the wireless terminal is within coverage area of a virtual beacon and report reception of the virtual beacon to the wireless terminal or a component of the wireless terminal which acts upon receiving an indication of beacon reception.

Abstract: In general, the techniques are described for locally and adaptively managing license token requests for a licensed capacity feature without an explicit grant of license tokens from a centralized license server. For example, a network device for a licensed customer may locally manage a license token request for a capacity feature operating in network license mode and thus shared/contended for among multicast network devices associated with the customer. The network device may locally determine a number of locally-available tokens for the licensed capacity feature, based at least in some examples, on a number of available network-wide tokens as indicated by the license server, the number of network devices contending for the tokens, and a number of tokens already requested by the network device.

Abstract: A distributed network controller that is configured in a containerized architecture is described. The network controller includes a plurality of microservices packaged and deployed using respective containers for the microservices, according to a plurality of charts, each chart comprising one or more templates that define a manner in which the microservices, for performing respective operations of the network controller, are deployed on a plurality of servers within the data center. Execution of the microservices of the distributed network controller establishes a virtual network for packetized communications among virtual execution elements executing on the plurality of servers in the data center. Each container that includes one of the plurality of microservices is executed by a server of the plurality of servers as an isolated user-space instance on the server.

Abstract: A controller device manages a plurality of network devices. The controller device includes one or more processing units configured to receive an indication of a stateful intent, the data structure including a plurality of nodes and a plurality of edges, each node of the plurality of nodes being representative of a respective network device of the plurality of network devices. The one or more processing units are configured to determine, using an abstract function configured at a node of the plurality of nodes, a stateless intent for implementing the stateful intent and generate low level configuration data for the plurality of network devices based on the stateless intent. The one or more processing units are configured to interface with one or more of the plurality of network devices to configure the one or more of the plurality of network devices with the low level configuration data.

Abstract: A disclosed method may include (1) receiving, via a physical interface of a network device, a hello packet that includes information specific to a fault-detection session established between the physical interface and an additional physical interface of a remote device via a link, (2) identifying, within the information, a plurality of statuses that correspond to a plurality of virtual interfaces partitioned on the additional physical interface of the remote device, (3) determining, based at least in part on the statuses of the virtual interfaces, that the link supporting the fault-detection session established between the physical interface and the additional physical interface has experienced at least a partial failure, and then in response to determining that the link has experienced the at least partial failure, (4) performing a remedial action to address the at least partial failure of the link. Various other apparatuses, systems, and methods are also disclosed.

Abstract: An optical receiver can implement a transimpedance amplifier (TIA) to process received light using a closed loop optical pre-amplification. The optical receiver can use an average input value of the TIA to control an semiconductor optical amplifier (SOA) or pre-amplification as received average signal varies. The optical receiver can include a gain controller for the TIA that can measure the TIA swing to adjust the gain of the SOA to pre-amplify received light in a closed loop control configuration.

Abstract: The techniques describe forwarding multicast traffic using a multi-level cache in a network device forwarding plane for determining a set of outgoing interfaces of the network device on which to forward the multicast traffic. For example, a multi-level cache is configured to store a multicast identifier of a multicast packet and multicast forwarding information associated with the multicast identifier, such as identification of one or more egress packet processors of the network device to which the multicast packet is to be sent for forwarding to the set of one or more egress network devices, and/or outgoing interfaces of the network device toward each egress network device of the set of one or more egress network devices. The multi-level cache is also configured to store respective multicast identifiers that are to be encapsulated with outgoing multicast packets that are forwarded to the set of one or more egress network devices.

Abstract: Apparatus and methods described herein relate to an apparatus including a memory and a processor operatively coupled to the memory. The processor can receive a set of network management device packages associated with a set of network management devices. The processor can merge a set of management device schema commands from the set of network management device packages with a unified schema to produce unified schema information. The processor can receive a unified schema command signal based on the unified schema information, and can convert the unified schema command signal into a set of management device schema command signals using the unified schema. The processor can also send each management device schema command signal from the set of management device schema commands, to network management devices.

Abstract: Techniques for presenting information about a network, virtualization infrastructure, cluster, or other computing environment, which may involve presentation of user interfaces that may enable nuanced, unique, and/or comprehensive insights into how infrastructure elements, instances, and/or computing resources are being used and information about patterns of usage and/or utilization. Techniques for communicating, within a computing system, information used to create, update, and/or modify the user interfaces that present information about a network, virtualization infrastructure, cluster, or other computing environment. Techniques in accordance with one or more aspects of the present disclosure may involve use of separate interfaces for collecting or accessing data used to draw a user interface that presents information about a network, and for collecting or receiving data used to update the user interface as changes occur to the utilization of infrastructure elements represented within the user interface.

Abstract: The techniques described herein may optimize a set of ordered rules of a security device through the removal of one or more anomalies. For example, a security management system or other configuration management system or component may detect and remove one or more anomalies from a set (e.g., list) of one or more ordered rules to be enforced by the network security device, such as shadowing anomalies, redundancy anomalies, and/or correlation anomalies, among others, as described herein. Security management system may transform the set of ordered rules to replace at least a subset of the rules within one or more mutually exclusive rules. In some instances, the security management system may optimize the transformed rule set, for example, by using redundancy removal and/or join/merge policies.

Abstract: This disclosure describes techniques for scaling resources that handle, participate, and/or control routing protocol sessions. In one example, this disclosure describes a method that includes instantiating a plurality of containerized routing protocol modules, each capable of storing routing information about a network having a plurality of routers; performing network address translation to enable each of the containerized routing protocol modules to communicate with each of the plurality of routers using a public address associated with the computing system; configuring each of the containerized routing protocol modules to peer with a different subset of the plurality of routers so that each of the containerized routing protocol modules share routing information with a respective different subset of the plurality of routers; and configuring each of the containerized routing protocol modules to peer with each other to share routing information received from the different subsets of the plurality of routers.

Abstract: A network device includes a memory, a plurality of packet processors, a switch fabric coupling the plurality of processors, and processing circuitry. The processing circuitry is configured to receive a data stream to be transmitted on a switch fabric and determine a plurality of credit counts, each credit count being assigned to a respective subchannel of a plurality of subchannels. The packet processor is further configured to determine per-subchannel occupancy of the memory for the plurality of subchannels, select, based on the plurality of credit counts and the per-subchannel occupancy of the memory, a subchannel of the plurality of subchannels for transmitting a cell of a plurality of cells for the data stream, and output data for the cell to the memory for output by the selected subchannel.

Abstract: An optical transceiver can be calibrated using an internal receiver side eye scan generator, and calibration values (e.g., modulator values) can be stored in memory for recalibration of the optical transceiver. The eye scan generator can receive data from the transmitter portion via an integrated and reconfigurable loopback path. At a later time, different calibration values can be accessed in memory and used to recalibrate the optical transceiver or update the calibrated values using the receive-side eye scan generator operating in loopback mode.

Abstract: Aspects of this disclosure relate to monitoring use of shared resources to identify processes using such shared resources in a manner that may be affecting the performance of other processes. In one example, a method comprises: monitoring, by a computing device, usage metrics for a shared cache that is shared by one or more processors of the computing device; mapping the usage metrics to each of a plurality of virtual computing environments executing on the one or more processors, wherein the plurality of virtual computing environments includes a first virtual computing environment and a second virtual computing environment; determining, based on the mapped usage metrics, that the first virtual computing environment is using the shared cache in a manner that adversely affects the performance of the second virtual computing environment; and restricting, by the computing device, access to the shared cache by the first virtual computing environment.

Abstract: The disclosed method may include (1) deploying, within a network device, at least one sensor designed to collect network statistics information about a plurality of logical network interfaces of the network device, (2) receiving, at the network device, one or more requests to obtain network statistics information about at least one logical network interface of the network device, (3) determining a range of network addresses that includes a network address of each logical network interface within the one or more requests, and then (4) providing, to the sensor, an instruction that prompts the sensor to (A) simultaneously collect network statistics information about each logical network interface whose network address is within the range of network addresses and (B) utilize the collected network statistics information to enable the network device to handle network traffic. Various other apparatuses, systems, and methods are also disclosed.

Abstract: A controller may be used to create and process an assertion, in some cases, to implement single-sign on (SSO) in a computer network. In some examples, the controller includes processing circuitry coupled to a storage device. The processing circuitry is configured to create the assertion, where the assertion includes information indicative of a set of attributes and parse the assertion to determine the set of attributes. Additionally, the processing circuitry is configured to determine if each attribute of the set of attributes maps to a plurality of primary user groups stored in the storage device. Based on determining that an attribute of the set of attributes does not map to at least one primary user group of the plurality of primary user groups, the processing circuitry is configured to create a set of secondary user groups and a set of secondary user group names corresponding to the attribute.

Abstract: At least one bandwidth-guaranteed segment routing (SR) path through a network is determined by: (a) receiving, as input, a bandwidth demand value; (b) obtaining network information; (c) determining a constrained shortest multipath (CSGi); (d) determining a set of SR segment-list(s) (Si=[sl1i, sl2i . . . slni]) a that are needed to steer traffic over CSGi; and (e) tuning the loadshares in Li, using Si and the per segment-list loadshare (Li=[l1i, l2i . . . lni]), the per segment equal cost multipath (“ECMP”), and the per link residual capacity, such that the bandwidth capacity that can be carried over CSGi is maximized.