Abstract: An apparatus includes a first input port, a first switch, and a second switch. The first switch and the second input port are in optical communication with the first input port. The apparatus also includes a second input port, a third switch, and a fourth switch. The third switch and the fourth switch are in optical communication with the second input port. Each switch is switchable between a first state to pass optical signals and a second state to block optical signals. The apparatus also includes a first combiner in optical communication with the first input port via the first switch and the second input port via the third switch. The apparatus also includes a second combiner in optical communication with the first input port via the second switch and the second input port via the fourth switch.

Abstract: A first network device may activate the first network device as being associated with a Virtual Router Redundancy Protocol (VRRP) group. The first network device may receive, from a second network device, a duplicate address detection message. The first network device may compare a data link layer address associated with the duplicate address detection message and a Virtual Media Access Control (VMAC) address of the VRRP group. The first network device may disregard the duplicate address detection message after comparing the data link layer address and the VMAC address of the VRRP group.

Abstract: A device may include one or more processors. The one or more processors may identify a set of network tunnels or network sessions for which a teardown is to be performed. The set of network tunnels or network sessions may be associated with a set of identifiers. The one or more processors may generate a signaling message associated with causing the teardown to be performed on the set of network tunnels or network sessions. The signaling message may include two or more identifiers of the set of identifiers. The one or more processors may transmit the signaling message to cause the teardown to be performed on two or more network tunnels or network sessions, of the set of network tunnels or network sessions, corresponding to the two or more identifiers.

Abstract: A first device may receive first route information, from a second device, identifying a first route to the second device for a packet to be provided toward a destination via the second device. The first device may generate second route information identifying a second route to the first device for the packet. The first device may provide the second route information to a third device. The packet is to be received by the first device. The first device may receive the packet from the third device via the second route after providing the second route information to the third device. The packet is to be provided to the second device by the first device. The first device may perform a service on the packet based on being identified by the second route information as a next hop for the packet and prior to providing the packet to the second device.

Abstract: In some examples, a device includes at least two integrated circuits (ICs) and a first multi-chip module (MCM) substrate coupled to the at least two ICs, the first MCM substrate comprising a first ball grid array (BGA), wherein the first BGA comprises a first pitch indicative of a distance between balls of the first BGA. The device further includes a second MCM substrate coupled to the first MCM substrate with the first BGA, the second MCM substrate comprising a second BGA, wherein the second BGA comprises a second pitch indicative of a distance between balls of the second BGA, and wherein the second pitch is greater than the first pitch. The device further includes a printed circuit board (PCB) coupled to the second MCM substrate with the second BGA, wherein the first MCM substrate and the second MCM substrate comprise organic, non-silicon insulating material.

Abstract: A device may configure a dynamic set of bypass label-switched paths (LSPs), to protect one or more protected LSPs, based on configuration information. The dynamic set of bypass LSPs may be initially configured to include zero or more bypass LSPs. The configuration information may indicate a first condition for adding a bypass LSP to the dynamic set of bypass LSPs, and a second condition for removing a bypass LSP from the dynamic set of bypass LSPs. The device may determine that a network traffic condition, associated with the dynamic set of bypass LSPs, is satisfied. The device may modify the dynamic set of bypass LSPs to add, remove, or reconfigure one or more bypass LSPs based on determining that the network traffic condition is satisfied.

Abstract: A network device may receive network traffic for an application. The network device may identify an application layer protocol being used for the network traffic. The network device may obtain contextual information, from the network traffic, to obtain an item of contextual information, and the item of contextual information may be selected based on the application layer protocol. The network device may determine that the item of contextual information matches a stored item of contextual information. The network device may determine that a threshold has been met with regard to the stored item of contextual information. The network device may generate an application signature for the application based on the item of contextual information. The network device may send the application signature to another device to permit the other device to identify the application based on the application signature.

Abstract: A system and method for handling critical events in service gateways. Configuration information is received in a service gateway, the configuration information defining a redundancy set having a master redundancy state and a standby redundancy state, the configuration information including one or more redundancy policies associated with the redundancy set, a service redundancy policy defining changes to be made in a service when a transition occurs in the state of the redundancy set. The service gateway receives further configuration information defining events that cause a transition between the master and standby redundancy states in the redundancy set. In response to detecting a redundancy event in the service gateway, the service gateway transitions the redundancy set, within the service gateway, from the master redundancy state to the standby redundancy state, modifies a first signal-route state associated with the redundancy set and modifies the service based on the service redundancy policy.

Abstract: The disclosed apparatus may include (1) a storage device that stores a set of cookies that facilitate authenticating packets received from a node within a network and (2) a processing unit communicatively coupled to the storage device, wherein the processing unit (A) receives at least one packet from the node, (B) identifies a cookie included in the packet received from the node, (C) searches the set of cookies stored in the storage device for the cookie included in the packet received from the node, (D) identifies, during the search of the set of cookies, the cookie included in the packet and (E) protects against a DoS attack by authenticating the legitimacy of the packet based at least in part on the cookie included in the packet being identified in the set of cookies stored in the storage device. Various other apparatuses, systems, and methods are also disclosed.

Abstract: A method and network device to execute an Ethernet Virtual Private Network (EVPN) protocol to configure the network device to participate as one of a plurality of customer edge (CE) routers that provide an active-active configuration for an Ethernet segment coupling the CE routers to a plurality of provider edge (PE) routers, wherein the processor is configured to determine whether a packet that is to be forwarded is an operations, administration, and management (OAM) packet; in response to determining that the packet comprises an OAM packet, replicate the OAM packet for one or more interface links of an Ethernet segment associated with the CE router; configure forwarding instructions to the one or more interface links of the Ethernet segment associated with the CE router; and forward the OAM packet and the replicated OAM packets to the PE routers.

Abstract: A device may receive, from an ingress device, a packet for a protocol session associated with detecting faults in a path of a network that includes a link aggregation group (LAG). The packet may be encapsulated with a user datagram protocol (UDP) header that includes a dynamically assigned UDP source port identifier. The LAG may include a set of links. The device may select, using the dynamically assigned UDP source port identifier, a link in the LAG to use in the path. The device may provide, using the selected link, the packet to one or more downstream devices to permit a downstream device, of the one or more downstream devices, to determine whether packet timeout has occurred. The device may receive an instruction to maintain the protocol session or to close the protocol session and close the path. The device may provide the instruction to the ingress device.

Abstract: A device may receive a packet associated with an application. The device may identify a filter associated with the application. The device may determine that information associated with the packet matches information associated with the filter. The device may compare a count, associated with the filter, and an expediting threshold associated with expediting processing of the packet based on determining that the information associated with the packet matches the information associated with the filter. The device may selectively expedite processing of the packet based on comparing the count and the expediting threshold.

Abstract: Described are various configurations of reduced crosstalk optical switches. Various embodiments can reduce or entirely eliminate crosstalk using a coupler that has a power-splitting ratio that compensates for amplitude imbalance caused by phase modulator attenuation. Some embodiments implement a plurality of phase modulators and couplers as part of a dilated switch network to increase overall bandwidth and further reduce potential for crosstalk.

Abstract: The disclosed apparatus may include (1) a stiffening brace that (A) is coupled to a top surface of a lidless integrated circuit and (B) includes at least one joint and (2) a removable lid that (A) interfaces with the stiffening brace at the joint, (B) temporarily sits atop the stiffening brace during a reflow process in which a bottom surface of the lidless integrated circuit is soldered to a circuit board, and (C) provides structural support to the lidless integrated circuit to impede the lidless integrated circuit from warping during the reflow process. Various other apparatuses, systems, and methods are also disclosed.

Abstract: In some examples, a computing device comprises a virtual network endpoint; a network interface card (NIC) comprising a first hardware component and a second hardware component, wherein the first hardware component and the second hardware component provide separate packet input/output access to a physical network interface of the NIC, wherein the NIC is configured to receive a packet inbound from the physical network interface; and a virtual router to receive the packet from the NIC and output, using the first hardware component, in response to determining a destination endpoint of the packet is the virtual network endpoint, the packet back to the NIC, wherein the NIC is further configured to switch, in response to receiving the packet from the virtual router, the packet to the virtual network endpoint and to output, using the second hardware component, the packet to the virtual network endpoint.

Abstract: Techniques are described for extending a two-way active measurement protocol (TWAMP) to enable measurement of service key performance indicators (KPIs) in a software defined network (SDN) and network function virtualization (NFV) architecture. The TWAMP extensions enable control messaging to be handled by a TWAMP control client executed on a centralized controller, and data messaging to be handled by a TWAMP session initiator executed on a separate network device. Techniques are also described for extending TWAMP to enable measurement of any of a plurality of service KPIs for a given service supported at a TWAMP server. The service KPIs may include one or more of keepalive measurements, round trip time measurements, path delay measurements, service latency measurements, or service load measurements. The TWAMP extensions for the service KPIs may be used in both conventional network architectures and in SDN and NFV architectures.

Abstract: A network device may receive information associated with a set of member links of the network device. The network device may determine a set of weight values, for the set of member links, based on the information associated with the set of member links. The network device may determine a set of multiplier values, for the set of member links, based on the set of weight values. The network device may generate a set of multiplier tables, for the set of member links, based on the set of multiplier values. The network device may generate an allocation table based on the set of multiplier tables. The network device may generate a resolution table based on the allocation table. The network device may provide, to another network device, network traffic via the set of member links based on the resolution table.

Abstract: In one example, a gateway device includes one or more processors configured to determine that a subscriber device has started a first application, determine that the subscriber device has ended a second application, and send a message, in accordance with Diameter protocol, to a policy server device indicating both that the subscriber device has started the first application and that the subscriber device has ended the second application. In another example, a gateway device includes one or more processors configured to send at most one message, in accordance with Diameter protocol, to a policy server device indicating that a subscriber device has started an application, and at most one message, in accordance with the Diameter protocol, indicating that the subscriber device has stopped the application.

Abstract: A first device may receive an indication that a time interval has elapsed. The time interval may indicate a time at which the first device is to provide a rate credit update to a second device. The first device may generate a request for a set of instructions. The first device may provide the request to a third device that may store the set of instructions. The first device may store information associated with the request, and a timestamp of the request, in a first data structure. The first device may receive, from the third device, the set of instructions. The first device may store the set of instructions and the timestamp in a second data structure. The first device may determine whether a threshold amount of time after the time indicated by the timestamp has elapsed. The first device may provide the rate credit update to the second device.

Abstract: A network device receives, from another network device associated with a first data center, a route update that includes a common virtual network identifier or a first virtual network identifier associated with the first data center. The network device translates the common virtual network identifier or the first virtual network identifier to a second virtual network identifier associated with a second data center, where the second data center is different than the first data center. The network device provides the route update, with the second virtual network identifier, to the second data center.