Abstract: Techniques are described for establishing lower priority LSPs on paths determined to be less likely to include bandwidth constrained links. In one example, a router includes a plurality of physical interfaces each having at least one link interconnecting the router as one of a plurality of routers in a network and a processor. The processor is configured to determine whether a link of one of the plurality of physical interfaces is congested based at least in part on an amount of available bandwidth on the link, and, responsive to determining that the link is congested, set a bandwidth subscription for the link, wherein the bandwidth subscription specifies that the amount of available bandwidth on the link for label switched paths having a lower priority is less than the amount of available bandwidth on the link for label switched paths having a higher priority.

Abstract: The techniques described herein may reduce global repairs in Multiprotocol Label Switching (MPLS) Label-Switched Paths (LSPs) by using an aggregated link bundle as a primary path when multiple paths are available. As an example, a router may determine a respective interface type for each path of a plurality of paths; determine, based on the respective interface types, whether one or more paths from the plurality of paths satisfies a set of constraints that are configured such that an aggregated link bundle interface type is preferred over a single link interface type; determine a preferred path based on whether the set of constraints were satisfied; configure a routing table of the router with the preferred path as a LSP to the destination; and send, based on the routing table, one or more packets using an interface of the router associated with the LSP.

Abstract: A device may receive information associated with a software program executing on a device, and may generate event records based on the information associated with the software program. The device may identify pattern information associated with the event records, and may perform data analytics on the event records and the pattern information to identify one or more defects associated with the software program and to determine an expected behavior of the software program. The device may generate one or more reports based on the one or more defects associated with the software program and the expected behavior of the software program, and may provide the one or more reports.

Abstract: In some examples, a method includes receiving, by a first ingress network device of a network, a source tree join route message from an egress network device of the network, the source tree join route message specifying a multicast source and a multicast group, and in response to receiving, by the first ingress network device, a source active auto-discovery route message from a second ingress network device of the network indicating that the second ingress network device has switched from using a shared multicast tree to using a shortest path tree to deliver multicast traffic from the multicast source, electing one of the first ingress network device or the second ingress network device as a single active forwarder for forwarding the multicast traffic received from the multicast source for the multicast group.

Abstract: Techniques are described for forwarding traffic within an Ethernet Virtual Private Network (EVPN) fabric of port-extenders by modeling a port-extender as a port-extender Ethernet segment. For example, a method includes receiving, by a provider edge (PE) device of a plurality of PE devices configured with an EVPN instance reachable by a port-extender Ethernet segment connecting the plurality of PE devices to a port-extender device, an EVPN route including information identifying an extended-port of the port-extender device associated with the port-extender Ethernet segment; storing, by the PE device, the information identifying the extended-port of the port-extender device associated with the port-extender Ethernet segment; and generating, by the PE device, a packet header of a data packet to be forwarded toward the extended-port of the port-extender device, the packet header including the information identifying the extended-port of the port-extender device.

Abstract: In general, techniques provide a mapping of host devices to different virtual router identifiers used to identify the source MAC address used for forwarding packets to the participating host devices. For example, a method may include receiving an Address Resolution Protocol (ARP) request for a first Internet protocol (IP) address from a host device, the first IP address comprising a virtual IP address of the virtual router. The method may also include determining a virtual router redundancy protocol (VRRP) virtual router identifier (VRID) associated with the first IP address. The method may further include generating a mapping between the host device and the determined VRID. The method may also include determining a virtual source MAC address of the virtual router based on the mapping and forwarding a second packet to the host device that specifies a virtual source MAC address for the second packet.

Abstract: In one example, a server executes a virtual router configured to receive an inner packet output by a virtual machine associated with a virtual network. The virtual router is further configured to offload, to a physical network interface card of the server that executes the virtual router, segmentation of the inner packet into a plurality of outbound tunnel packets each having a tunnel header for output by the physical network interface card to a physical network underlying the virtual network.

Abstract: In some examples, an electronic device includes a printed circuit board (PCB) device that includes a first trace electrically connected to a first pad of a first trace via on a first layer and a second trace electrically connected to a second pad of a second trace via on a second layer. In some examples, the PCB device also includes four ground pads on the first layer and an antipad surrounding the two trace vias, where a first ground pad is positioned between the first trace and the second trace, where the first ground pad and the second ground pad are approximately symmetrically positioned about a perpendicular bisector of a line from the first pad to the second pad, and wherein the third ground pad and the fourth ground pad are approximately symmetrically positioned about the perpendicular bisector of the line from the first pad to the second pad.

Abstract: A system may determine to perform an internal and an external malware detection operation to detect a malware infection associated with a client device. The system may perform the internal operation by modifying an environment, executing on a particular device, to form a modified environment. The system may perform the external operation by performing a communication from the particular device. The system may monitor the modified environment for a first behavior indicative of the malware infection, and may monitor a result of performing the communication for a second behavior indicative of the malware infection. The system may detect that the first or second behavior has occurred. The system may provide a notification that the client device is infected with malware based on detecting that the first or second behavior has occurred. The notification may cause one or more network devices to block network traffic to or from the client device.

Abstract: A device may determine that a route is inactive. Information identifying the route may be stored in a forwarding plane portion of a forwarding table and a control plane portion of the forwarding table. The route may be associated with directing network traffic toward an endpoint network device. The device may remove the information identifying the route from the forwarding plane portion of the forwarding table without removing the information identifying the route from the control plane portion of the forwarding table based on determining that the route is inactive. The device may route network traffic based on the forwarding table after removing the information identifying the route from the forwarding plane portion of the forwarding table without removing the information identifying the route from the control plane portion of the forwarding table.

Abstract: An enhanced, flooding-based routing protocol is described that provides label switched path session information. In one example, a transit router is intermediately positioned between at least two label edge routers. The transit router is configured to determine a maximum number of LSPs concurrently supported by the transit router and determine a number of LSPs concurrently established by the transit router and for which the transit router is responsible for switching packets to one or more of the two label edge routers. The transit router generates, in accordance with a link state routing protocol, a link state routing protocol message that specifies the LSP session information as the maximum number of LSP and the number of LSPs concurrently established. The transit router further transmits, to the label edge routers, the link state routing protocol message.

Abstract: A power sourcing equipment may provide fault detection, fault recovery, and redundancy in a Power over Ethernet system. The power sourcing equipment may apply voltage to an data port to transmit at least an amount of power requested by a powered device to the powered device over each of a plurality of pairs of wires of an data cable operably coupled to the data port. The power sourcing equipment may identify an occurrence of a fault in one or more pairs of wires out of the plurality of pairs of wires making up the data cable. The power sourcing equipment may, in response to identifying the occurrence of the fault, perform power recovery to supply the amount of power requested by the powered device to the powered device over a remaining one or more pairs of wires.

Abstract: A high-performance, scalable and drop-free data center switch fabric and infrastructure is described. The data center switch fabric may leverage low cost, off-the-shelf packet-based switching components (e.g., IP over Ethernet (IPoE)) and overlay forwarding technologies rather than proprietary switch fabric. In one example, host network accelerators (HNAs) are positioned between servers (e.g., virtual machines or dedicated servers) of the data center and an IPoE core network that provides point-to-point connectivity between the servers. The HNAs are hardware devices that embed virtual routers on one or more integrated circuits, where the virtual router are configured to extend the one or more virtual networks to the virtual machines and to seamlessly transport packets over the switch fabric using an overlay network. In other words, the HNAs provide hardware-based, seamless access interfaces to overlay technologies used for communicating packet flows through the core switching network of the data center.

Abstract: In some embodiments, an apparatus includes an optical transmitter module that can be electrically coupled to an electrical serializer/deserializer and a controller. The optical transmitter module can include an electrical detector that can receive an in-band signal. The electrical detector can send to the controller a first power error signal and a second power error signal based on the in-band signal. The controller can send a correction control signal to the electrical serializer/deserializer based on the first power error signal and the second power error signal such that the electrical serializer/deserializer sends a pre-emphasized signal to the optical transmitter module based on the correction control signal. In such embodiments, the first power error signal, the second power signal and the correction control signal are out-of-band signals.

Abstract: A controller coordinates execution of a set of related processes executed by respective devices in the virtual network, wherein coordinating comprises causing the respective devices to execute the set of related processes; receiving a data set for the set of related processes from the respective devices, comprising receiving operational states of the related processes from the respective devices; reading a previous data set comprising previous operational states of the related processes from the respective devices; processing an update to the previous operational states from the received operational states of the received data set; and aggregating the received operational states of the data set with the previous operational states of the related processes to form aggregated data of updated operational states.

Abstract: Techniques are described for detecting egress network devices of a point-to-multipoint (P2MP) label switched path (LSP). For example, a network device may include one or more processors configured to identify a P2MP LSP for receiving multicast traffic from a multicast source for a specific multicast group for which the network device has an interested receiver, wherein the network device is to be an egress network device of the P2MP LSP; and send, to an ingress network device of the P2MP LSP, a P2MP egress identification message to add the network device as an egress network device of the P2MP LSP, wherein the one or more processors are further configured to output the P2MP egress identification message into a multipoint-to-point (MP2P) ring LSP for which the ingress network device of the P2MP LSP is a sole egress network device of the MP2P ring LSP.

Abstract: In some examples, a method includes selecting, by a first virtual routing node of a single-chassis network device having a plurality of forwarding components and a plurality of fabric links coupling respective pairs of the plurality of forwarding components at respective fabric interfaces of the plurality of forwarding components, a fabric interface of a forwarding component of the plurality of forwarding components that has an egress interface toward a network destination and that is associated with the first virtual routing node; in response to receiving a message specifying the fabric interface, storing, by the second virtual routing node to a context forwarding table of the second virtual node, the fabric interface as a next hop for the network destination; selecting, by the second virtual routing node and based on the context forwarding table and a context next hop in a first forwarding table pointing to the context forwarding table, the fabric interface for forwarding network packets destined for the ne

Abstract: Techniques are described for optimizing the placement of automatically generated rules within security policies. An administrator may, for example, interact with the graphical representation of rules rendered by the threat control module and, responsive to the interaction, the system may determine an optimal placement for the created rule in the list of rules for the identified security device based on either the existence of anomalies or threat IP data and/or advanced security parameters. In this way, the system allows administrators to configure rules with the most optimal sequence to detect threats.

Abstract: Techniques are described for establishing a segment routed label switched path (LSP) regardless of whether a router along the shortest path is not enabled for segment routing. For example, a resource reservation LSP (e.g., a resource reservation protocol (RSVP) LSP) is established across the router that is not enabled for segment routing, such that the segment routed LSP may be established to tunnel through the resource reservation LSP. For example, when a centralized controller receives a request to establish a path using segment routing, one or more routers along the shortest path may not be enabled for segment routing. Instead of rejecting the request to establish the segment routed LSP in response to determining that one or more routers in a selected path are not enabled for segment routing, the controller may establish a resource reservation LSP to tunnel around the router that is not enabled for segment routing.