Abstract: In one example, a method may include obtaining, by a computing device, a high-level topology description for a virtual computing environment to be provisioned in a plurality of computing infrastructures. Each of the computing infrastructures may be implemented using a different computing architecture and deployed by a different provider. The example method may further include transforming, by a rules engine executing on the computing device, the high-level topology description to respective templates for the computing infrastructures that each describes a topology for a virtual computing environment in a format that conforms to a schema that can be processed by a corresponding one of the computing infrastructures to implement the virtual computing environment in the corresponding one of the computing infrastructures, and outputting the templates for configuring the computing infrastructures.

Abstract: This disclosure describes techniques for intelligently grouping, ungrouping, collapsing, and/or expanding columns of data for effective presentation on a display screen. In one example, a method includes accessing, by a computing device, data organized into a plurality of columns, each column having one or more data characteristics; determining, by the computing device and based on at least some of the data characteristics of the columns, one or more column groups, each column group including a subset of the plurality of columns; determining, by the computing device and based on attributes of a window for presentation of the data, whether the plurality of columns will fit within the window; and in response to determining that the plurality of columns will not fit within the window, outputting a user interface presenting a column group as a single column within the window so that the plurality of columns fits within the window.

Abstract: Techniques are disclosed for generating intent-based policies and applying the policies to traffic of a computer network. In one example, a policy controller for the computer network receives traffic statistics for traffic flows among a plurality of application workloads executed by a first set of computing devices. The policy controller correlates the traffic statistics into session records for the plurality of application workloads. The policy controller generates, based on the session records for the application workloads, application firewall policies for the application workloads. Each of the application firewall policies define whether traffic flows between application workloads are to be allowed or denied. The policy controller distributes the application firewall policies to a second set of one or more computing devices for application to traffic flows between instances of the application workloads.

Abstract: A system and method for communicating between applications using a routing process. A set of one or more signal-routes are defined on a network device, including a first signal-route. Each signal-route is associated with a state of an application to be executed on the network device, wherein the first signal-route is associated with a first application state of the application. The network device detects, within the application executing within an application layer of the network device, a change in the first application state and notifies other applications of the change in the first application state. Notifying includes modifying the first signal-route, wherein modifying includes adding the first signal-route to or removing the first signal-route from a Routing Information Base (RIB) and advertising the change in the RIB.

Abstract: A device may receive an instruction to automatically install a program using a click area prediction model. The click area prediction model may be associated with predicting a click area of a user interface that, when selected, causes a program installation procedure to proceed. The device may identify an installation user interface associated with installing the program. The device may determine a group of regions included in the installation user interface. The device may identify sets of features associated with the group of regions. The device may determine, based on the sets of features and the click area prediction model, a group of scores associated with the group of regions. The device may identify a particular region as a predicted click area based on the group of scores. The device may select the predicted click area to attempt to cause the program installation procedure to proceed.

Abstract: An optical modulator of an optical transceiver can be calibrated using intermediate frequency (IF) signals to generate accurate crossing point values (e.g., DC bias). A photodiode can measure output from the optical modulator at intermediate and high-speed frequencies to generate crossing point values that avoid crossing point errors. A target crossing point can be selected at any value (e.g., 40%, 50%) and bias values can be generated from IF signals and then stored in a lookup date for setting the modulator bias during operation.

Abstract: A first network device in a high-availability cluster may configure a first wireless channel for a wireless control link. The first network device may establish, using the first wireless channel, the wireless control link with a second network device in the high-availability cluster. The first network device may configure a second wireless channel for a wireless fabric link. The first network device may establish, using the second wireless channel, the wireless fabric link with the second network device.

Abstract: The thermal impedance of p-i-n diodes integrated on semiconductor-on-insulator substrates can be reduced with thermally conducting vias that shunt heat across thermal barriers such as, e.g., the thick top oxide cladding often encapsulating the p-i-n diode. In various embodiments, one or more thermally conducting vias extend from a top surface of the intrinsic diode layer to a metal structure connected to the doped top layer of the diode, and/or from that metal structure down to at least the semiconductor device layer of the substrate.

Abstract: Techniques are disclosed for seamless integration between a multicasting Virtual Private Network and an edge replicated multicast network. For example, a controller (e.g., software defined networking (SDN) controller) may facilitate the integration between a multicasting VPN network and an edge replicated multicast network through the selection of a multicast bridge node from virtual routers specified in the multicast replication tree, and sending information identifying the multicast bridge node to a provider edge (PE) device for the source VPN such that the PE device may use the information to steer multicast traffic from the source VPN site across the Layer 3 VPN network to the multicast bridge node of the receiver VPN site. When the multicast bridge node receives the multicast traffic, the multicast bridge node determines from the information that it is to receive the multicast traffic and to perform the edge replicated multicast using the edge replicated multicast tree.

Abstract: This disclosure describes techniques that include collecting flow data associated with communications between network devices, and determining, based on the flow data, one or more virtual networks over which the communications are taking place. In one example, this disclosure describes a system configured to perform operations comprising: storing virtual network configuration information associated with a first virtual network and a second virtual network established within a network; collecting underlay flow data associated with communications between a first server and a second server, wherein each of the first server and the second server are implemented as bare metal servers; determining, based on the underlay flow data and the stored virtual network configuration information, that the first server and the second server have communicated over the first virtual network; and generating a user interface.

Abstract: Techniques are disclosed for a link state routing protocol adjacency state machine. The adjacency state machine ensures that first and second logical links using different networking protocols are established on a single physical link between two network devices prior to indicating adjacency between the network devices. In some examples, the adjacency state machine determines that both the first and second links are active in response to determining that hello messages are generated by both network devices for both links. In some examples, the adjacency state machine determines that both the first and second logical links are active upon expiration of a predetermined time corresponding to a time required for a duplicate address detection (DAD) operation to complete. In some examples, the first and second logical links use Internet Protocol version 4 (IPv4) and Internet Protocol version 6 (IPv6), respectively.

Abstract: A disclosed method may include (1) receiving, at a local gateway device included in a network, a query message that initiates a topology discovery process from a remote gateway device included in the network, (2) identifying, within the query message, at least one characteristic of a first interface included on the remote gateway device, (3) selecting, for the first interface, a second interface included on the local gateway device based at least in part on the characteristic of the first interface identified within the query message, and then (4) sending, to the remote gateway device, a response message that (A) includes at least one characteristic of the second interface included on the local gateway device and (B) enables the remote gateway device to map the first interface to the second interface in connection with the topology discovery process. Various other apparatuses, systems, and methods are also disclosed.

Abstract: In general, techniques are described for supporting bulk delivery of change of authorization data in authentication, authorization, and accounting (AAA) protocols, where delivery is performed as a change of authorization after a subscriber has successfully authenticated and initially authorized. In one example, the techniques are directed to a method including determining, by a RADIUS server for a service provider network, change of authorization data for services to which the subscriber of the service provider network has subscribed. The method further includes generating, by the RADIUS server, RADIUS messages that form a transaction between the RADIUS server and a network access server acting as a RADIUS client. The RADIUS messages provide all of the change of authorization data to the network access server prior to the network access server provisioning the services. The method further includes outputting, by the RADIUS server, the RADIUS messages to the network access server.

Abstract: A device may include a power supply module (PSM). The PSM may receive information regarding one or more programmable restrictions associated with a power supply. The PSM may receive a measurement of voltage associated with the power supply. The PSM may determine a current associated with the power supply based on the one or more programmable restrictions, the measurement of voltage, and a first amount of power associated with the power supply. The PSM may cause a load associated with the power supply to be adjusted based on determining the current without removing power for a connection between the power supply and a power source associated with the power supply. The PSM may cause the power supply to provide a second amount of power based on causing the load associated with the power supply to be adjusted.

Abstract: Techniques are described for avoiding traffic black-holing in a multi-homed Ethernet virtual private networks (EVPNs) in which a customer device (CE) is multi-homed to a plurality of multi-homing provider edge devices (PEs) via respective links of an Ethernet segment. An overlay network is created over the Ethernet segment, and the multi-homing PEs of the EVPN are configured with a common anycast IP address for respective virtual network interfaces. Upon election as active designated forwarder (DF) for the EVPN, the DF PE of the multi-homing PEs advertises toward the customer network an IGP metric for the anycast IP address that is lower than the IGP metric(s) advertised by any of the non-DF standby PE routers segment to direct the CE to forward network packets from the customer network to the DF PE over the respective link of the Ethernet segment.

Abstract: A network device identifies an Internet Protocol Security (IPsec) tunnel that connects the network device to a remote device and determines that dead peer detection (DPD) is enabled at the network device. The network device receives a first DPD request message from the remote device via the IPsec tunnel, and sends a first DPD response message to the remote device via the IPsec tunnel. The network device determines that a workload of the network device satisfies a threshold amount, and sends one or more encapsulating security payload (ESP) packets that include traffic flow confidentiality (TFC) payload data to the remote device via the IPsec tunnel. The network device determines that the workload of the network device does not satisfy the threshold amount. The network device receives a second DPD request message from the remote device and sends a second DPD response message to the remote device via the IPsec tunnel.

Abstract: This disclosure describes techniques that enable a service provider to synchronize public-private Internet protocol (IP) pairs between a central logging entity (CLE) server that attributes network traffic and network address translation NAT device that logs network traffic. The CLE server includes a communication protocol client communicatively coupled to a communication protocol host. The CLE server, in response to receiving a deregistration message from a registration protocol server, sends a clear request message comprising a private address via the communication protocol client. The deregistration message includes the private address. The NAT device includes the communication protocol host. The NAT device, in response to receiving the clear request message comprising the private address via the communication protocol host, clears a binding that maps the private address to a public address to prevent network address translation between the private address and the public address.

Abstract: A disclosed apparatus may include (1) a circuit board and (2) a set of conductive contacts incorporated into the circuit board, wherein the conductive contacts (A) include a first positive/negative contact pair that is laid out in a first direction along the circuit board, (B) include a second positive/negative contact pair that is laid out in a second direction that is perpendicular to the first direction along the circuit board, and (C) facilitate electrically coupling, to the circuit board, at least one communication device that implements a differential signaling scheme. Various other apparatuses, systems, and methods are also disclosed.

Abstract: A device receives a software program, performs a dynamic malware analysis of the software program to generate dynamic malware analysis results, and generates a call graph based on the dynamic malware analysis of the software program. The device utilizes, during the dynamic malware analysis of the software program, the call graph to identify an exit of the software program and/or a forced kill of the software program, and performs a static malware analysis of the software program based on identifying the exit of the software program and/or the forced kill of the software program. The device generates static malware analysis results based on performing the static malware analysis of the software program, and combines the dynamic malware analysis results and the static malware analysis results to generate combined malware analysis results. The device performs one or more actions based on the combined malware analysis results.