Abstract: A network device may receive, from a first neighbor network device, information indicating that the network device is to remove a bit indexed explicit replication (BIER) header from a multicast packet prior to transmitting the multicast packet to the first neighbor network device. The network device may receive the multicast packet from a second neighbor network device, where the multicast packet includes the BIER header and is to be transmitted to the first neighbor network device, and where the network device, the first neighbor network device, and the second neighbor network device are included in a same BIER domain. The network device may remove the BIER header from the multicast packet, and may transmit the multicast packet to the first neighbor network device after removing the BIER header from the multicast packet.

Abstract: In general, techniques are disclosed for automatic discovery and load balancing of virtual service instances of a plurality of cloud data centers within a Software Defined Networking (SDN) or a Network Functions Virtualization (NFV) environment. In one example, a global load balancing device (GLB) of a first cloud data center receives, from an SDN controller, address information for a first set of virtual service instances provided by the first cloud data center and a hostname of a domain for which to perform load balancing across the plurality of cloud data centers. The GLB device requests, from a domain name server (DNS) for the domain, address information for other sets of virtual service instances provided by other cloud data centers. Further, the GLB device applies a load balancing algorithm to direct network traffic to one or more of the virtual service instances provided by the plurality of cloud data centers.

Abstract: A first device may include one or more processors. The first device may receive a network address request to obtain a network address that is associated with an application. The network address request may include application information that identifies the application. The first device may determine that the application is associated with a rule. The first device may store the application information and information identifying the network address request. The first device may obtain the network address based on the network address request. The first device may determine that the network address is associated with the rule. The first device may provide the network address, the rule, and/or the application information to a second device, to permit the second device to enforce the rule, based on determining that the application is associated with the rule and determining that the network address is associated with the rule.

Abstract: This disclosure describes techniques for analyzing information generated as a result of monitoring resources within computing environments. In one example, this disclosure describes a method that includes observing a plurality of alerts generated in response to monitoring resources associated with a plurality of connected elements within a network; determining a plurality of occurrence counts; determining a plurality of concurrent occurrence counts, wherein each of the plurality of concurrent occurrence counts represents a count of concurrent occurrences of two or more of the alerts in the set of historical alerts; and identifying one or more root cause alerts, wherein the one or more root cause alerts are determined based on the plurality of occurrence counts and the plurality of the concurrent occurrence counts, and wherein the one or more root cause alerts are a subset of the plurality of alerts.

Abstract: A network device may determine, based on at least one network egress characteristic associated with a network device, a measure of priority associated with a network address. The network device may provide the measure of priority to a plurality of other routers, determine that a particular network egress characteristic of the at least one network egress characteristic has changed, and update the measure of priority based on the particular network egress characteristic. Based on the updated measure of priority, the network device may perform an action.

Abstract: A device may receive a set of border gateway protocol labels via a set of corresponding border gateway protocol messages. A border gateway protocol label, of the set of border gateway protocol labels, may be associated with a label descriptor attribute. The label descriptor attribute being associated with providing information regarding a forwarding semantic associated with the border gateway protocol label. The device may select the border gateway protocol label for routing network traffic toward a network device associated with the border gateway protocol label based on the label descriptor attribute. The device may route the network traffic toward the network device based on the border gateway protocol label and after selecting the border gateway protocol label.

Abstract: A broadband network gateway (BNG) controller is described that includes a network subscriber database (NSDB) and one or more core applications. The NSDB is configured to store vBNG instance information for one or more subscriber devices. The vBNG instance information specifies vBNG instances operable by one or more edge routers. The vBNG instances are configured to receive requests to access service provider services from the one or more subscriber devices and to selectively authenticate the one or more subscriber devices for network services based on authentication information included in the requests to access services provider services. The one or more core applications include a network instance and configuration manager (NICM). The NICM is configured to modify the vBNG instance information at the NSDB to include an additional vBNG instance and to output, to an edge router, an instruction to generate the additional vBNG instance at the edge router.

Abstract: A first network device may establish connectivity with a second network device. The first network device may determine information that identifies a cluster identifier based on establishing connectivity with the second network device. The first network device may compare a first software version of the first network device and a second software version of the second network device. The first network device may selectively obtain and install a system image of the second network device based on comparing the first software version and the second software version. The first network device may receive, from the second network device, configuration information and user session information based on selectively obtaining the system image. The first network device and the second network device may form a high-availability cluster.

Abstract: A system and method for responding to exceptions in network services. A network management system (NMS) configures a first network service having an endpoint and a plurality of externally mapped attributes, the externally mapped attributes including one or more service level attributes and an endpoint attribute associated with the endpoint. The NMS detects an exception in the first network service, modifies the first network service in response to the exception, wherein modifying the first network service includes assigning the current value of the endpoint attribute of the first network service to the endpoint attribute of a second network service and validates the externally mapped attributes of the second network service.

Abstract: A network function virtualization (NFV) platform may include one or more processors to identify a condition associated with the NFV platform, where the condition may affect operation of at least one virtual network function (VNF) hosted by or associated with the NFV platform; determine, based on the condition, information that may be provided or an action that may be performed with regard to the at least one VNF; and/or generate or transmit a message identifying the information and/or that may cause the action to be performed with regard to the at least one VNF.

Abstract: Techniques are described for performing subscriber aware two-way active measurement protocol (TWAMP) data session provisioning between two endpoints in a computer network. For example, the disclosed techniques include extending TWAMP control messaging to include a communication mode for negotiating subscriber-aware TWAMP data monitoring. If the communication mode is supported by both endpoints, a subscriber identifier is specified when a TWAMP data session is provisioned (negotiated) over the control session. The disclosed techniques further include extending TWAMP data messaging to include the subscriber identifier in each test packet for the data session. In this way, each of the endpoints may identify a subscriber corresponding to one or more received TWAMP test packets based on the subscriber identifier included in the received TWAMP test packets.

Abstract: In one example, a network management system (NMS) and method models services in a network. The NMS identifies externally mapped attributes in a vendor neutral yang model of a network service, assigns an attribute type to one or more of the externally mapped attributes, wherein assigning includes determining, by a learning system, the attribute type of one or more of the externally mapped attributes based on an analysis of attribute types assigned to the externally mapped attributes of other network services, constructs a separate dependency graph for each of the externally mapped attributes and builds a separate hidden service model for each of the externally mapped attributes, wherein the externally mapped attribute for each hidden service model is a merge attribute for that hidden service model.

Abstract: In some embodiments, an apparatus includes a switch fabric having at least a first switch stage and a second switch stage, an edge device operatively coupled to the switch fabric and a management module. The edge device is configured to send a first portion of a data stream to the switch fabric such that the first portion of the data stream is received at a queue of the second switch stage of the switch fabric via the first switch stage of the switch fabric. The management module is configured to send a flow control signal configured to trigger the edge device to suspend transmission of a second portion of the data stream when a congestion level of the queue of the second switch stage of the switch fabric satisfies a condition in response to the first portion of the data stream being received at the queue.

Abstract: A system is configured to determine a first power level of a first signal output from a first modulator, and determine a second power level of a second signal output from a second modulator. The first signal may include a first optical signal associated with a particular polarization orientation, and the second signal may include a second optical signal associated with the particular polarization orientation. The system is configured to determine a relationship between the first power level and the second power level, and to set, based on the relationship between the first power level and the second power level, a reverse bias voltage associated with the first modulator, where the reverse bias voltage may be used to control the first power level of the first signal.

Abstract: A device may receive a digital voucher, a customer certificate, and configuration information for automatically configuring the device. The digital voucher may include a first customer identifier that identifies a customer associated with the device and a device identifier that identifies the device. The customer certificate may include a second customer identifier that identifies the customer and a customer public key associated with the customer. The configuration information may include information that identifies a configuration for automatically configuring the device. The device may validate at least one of the digital voucher, the customer certificate, or the configuration information. The device may configure the device, using the configuration, based on validating at least one of the digital voucher, the customer certificate, or the configuration information.

Abstract: A device receives policy information associated with configuring a network, and receives network information associated with the network. The device determines, based on the network information, that the policy information is associated with implementation of egress peer engineering techniques for the network, and identifies, based on the network information, a first set of destinations of the network that satisfies a particular threshold bandwidth. The device assigns costs and bandwidths to the first set of destinations based on the policy information, and monitors bandwidth utilization by the first set of destinations. The device processes information associated with the first set of destinations, with a model, based on the bandwidth utilization and based on the egress peer engineering techniques, to generate a first set of ranked destinations, and causes traffic in the network to be managed based on the first set of ranked destinations and the policy information.

Abstract: Techniques are described for migrating data traffic, based on a new protocol priority value, from one Label Switched Path (LSP) assigned a higher initial protocol priority value to another LSP assigned a lower initial protocol priority value. For example, a network may initially establish a resource reservation LSP associated with a resource reservation protocol assigned a higher initial protocol priority value than a segment routing protocol used to establish a segment routed LSP. Rather than being unable to send data traffic on an established segment routed LSP because the segment routing protocol has a lower initial protocol priority than the resource reservation protocol, an ingress router may receive from a centralized controller a message specifying a new protocol priority value assigned to the segment routed LSP in response to which the ingress router may create or update its initial protocol priorities, and forward data traffic along the segment routed LSP.

Abstract: In one embodiment, a processor-readable medium storing code representing instructions that when executed by a processor cause the processor to update, at a memory location, a first flow state value associated with a data flow to a second flow state value when at least one of a packet from the data flow is received or the memory location is selected after a time period has expired. At least a portion of the packet is analyzed when the second flow state value represents a flow rate of a network data flow anomaly.

Abstract: A first device may receive content from a second device based on a request for the content. The first device may be located between the second device and a third device. The first device may determine a value for a portion of the content using a function, where the value is to be used to analyze the content. The value may uniquely identify the portion of the content. The first device may determine whether a classification of the content can be determined. The first device may selectively determine the classification of the content by providing the value or the portion of the content corresponding to the value, to a fourth device when the classification cannot be determined, or determine the classification of the content using a data store when the classification can be determined. The first device may perform an action with respect to the content.