Abstract: A device may receive a network address associated with a destination device. The network address may identify the destination device based on layer 3 of the Open Systems Interconnection model. The device may store next-hop information identifying a next hop associated with the destination device based on the network address. The device may generate an auto-discovery route including a layer 3 label. The layer 3 label may permit network traffic to be routed to the destination device based on multiprotocol label switching (MPLS), and may identify a lookup table based on which to obtain the next-hop information. The device may provide the auto-discovery route including the layer 3 label.

Abstract: Techniques are disclosed for handling withdrawals of Border Gateway Protocol (BGP) join synch routes used to synchronize multicast group join requests. In one example, a first provider edge (PE) router of a plurality of PE routers on an Ethernet segment of an Ethernet Virtual Private Network (EVPN) receives, from a second PE router, a withdrawal of a BGP join synch route. In response, the first PE router determines whether a disruption event or a multicast state timeout event at the second PE router caused the withdrawal. If the disruption event caused the withdrawal, the first PE router retains a multicast state for the multicast group and forwards multicast traffic for the multicast group to a customer edge (CE) router multi-homed to the plurality of the PE routers. If the multicast state timeout event caused the withdrawal, the first PE router deletes the multicast state and stops forwarding the multicast traffic.

Abstract: A device determines a first voltage measurement of an output of a first brick. The device further determines a second voltage measurement associated with a second brick. The first brick is larger in size than the second brick. The device ramps up an output voltage of the second brick when the second voltage measurement is less than the first voltage measurement.

Abstract: In one example, a method includes performing L2 learning of a C-MAC address included in a first L2 data message by a first provider edge (PE) router included in an Ethernet Segment of a Provider-Backbone Bridging Ethernet Virtual Private Network (PBB-EVPN); sending to a second PE router within the Ethernet Segment an L2 control message comprising the C-MAC address and a B-MAC address corresponding to the Ethernet Segment of the PBB-EVPN, wherein the L2 control message informs the second PE router of the reachability of the C-MAC address through the first PE router; receiving, by the first PE router and from the second PE router, a second L2 data message as unicast traffic destined for the C-MAC address; and forwarding the second L2 data message to the first CE router.

Abstract: A network device may receive an instruction to update a data structure implemented by the network device and update the data structure based on receiving the instruction. The data structure may include a routing instruction to direct the network device to provide a data flow to a server device for processing. The network device may receive the data flow destined for a destination device; determine the routing instruction based on at least a portion of an internet protocol (IP) address associated with the data flow and based on the data structure; execute the routing instruction to provide the data flow to the server device and to cause the data flow to be processed by the server device to form a processed data flow; and receive the processed data flow and provide the processed data flow towards the destination device.

Abstract: A line card of a set of line cards is configured to be coupled to a set of switch-fabric cards to collectively define at least a portion of an orthogonal cross fabric without a midplane board. The line card has an edge portion, a first side and a second side, opposite the first side. The line card includes a set of first set of connectors and a second set of connectors. The first set of connectors is disposed along the edge portion on the first side of the line card and the second set of connectors is disposed along the edge portion on the second side of the line card.

Abstract: In general, techniques are described for dynamically generating attributes from routing topology information and assigning dynamically generated attributes to network map entries to further characterize PIDs described therein. For example, a provider or other entity assigns, within a network device, endpoint types to one or more address prefixes for which the network device originates or forwards route advertisements. For each typed prefix, the network device adds an endpoint type identifier for the assigned endpoint type to route advertisements that traverse or originate with the network device and specify the prefix. An ALTO server peers with router advertisers to receive route advertisements. When the ALTO server receives a route advertisement that includes an endpoint type identifier, the ALTO server maps the endpoint type identifier to a PID attribute and assigns the PID attribute to a PID that includes a prefix identified in the route advertisement.

Abstract: Techniques are described for taking direct actions, such as selectively blocking or allowing traffic and applications, while monitoring events from a graphical representation of threats. As such, the administrator in an enterprise interacts with the graphical representation of threats rendered by the security management system to automatically invoke a policy/rule module of the security management system to configure and update security policies for the security devices deployed throughout the computer networks of the enterprise.

Abstract: A device may include multiple power supplies that are cooled by a system fan. The power supplies may be cross-connected to supply power to one another and the device may monitor temperatures of the power supplies. Based on the temperatures of the power supplies, the device may determine whether any of the power supplies are likely to be on fire. The device may shut off the fan when a power supply is determined to be likely to be on fire.

Abstract: In some embodiments, an apparatus includes a first optical transceiver. The first optical transceiver includes a set of optical transmitters, an optical multiplexer operatively coupled to the set of optical transmitters, and a variable optical attenuator operatively coupled to the optical multiplexer. The variable optical attenuator is configured to receive a control signal from a controller of the first optical transceiver and modulate a signal representing control information with an output from the optical multiplexer. The control information is associated with the control signal and for a second optical transceiver operatively coupled to the first optical transceiver.

Abstract: In some embodiments, a non-transitory processor-readable medium stores code representing instructions to be executed by a processor. The code causes the processor to receive, at an edge device, a first data unit having a characteristic. The code causes the processor to identify, at a first time, an identifier of a service module associated with the characteristic in response to each entry from a set of entries within a flow table not being associated with the characteristic. The code causes the processor to define an entry in the flow table associated with the characteristic and the identifier of the service module. The code causes the processor to send the first data unit to the service module. The code causes the processor to receive, at the edge device, a second data unit having the characteristic, and send the second data unit to the service module based on the entry.

Abstract: A device may receive, by a kernel of the device and from a loadable kernel module of the device, information that instructs the kernel to invoke a callback function associated with the loadable kernel module based on an execution of a hook of the kernel. The device may receive, by the kernel of the device and from an application of the device, a socket application programming interface (API) call. The socket API call may include control information. The device may execute, by the kernel of the device, the hook based on receiving the socket API call. The device may invoke, by the kernel of the device, the callback function associated with the loadable kernel module based on executing the hook to permit a functionality associated with the callback function to be provided. The kernel may provide the control information, associated with the socket API call, to the callback function as an argument.

Abstract: Described are various configurations of integrated wavelength lockers including asymmetric Mach-Zehnder interferometers (AMZIs) and associated detectors. Various embodiments provide improved wavelength-locking accuracy by using an active tuning element in the AMZI to achieve an operational position with high locking sensitivity, a coherent receiver to reduce the frequency-dependence of the locking sensitivity, and/or a temperature sensor and/or strain gauge to computationally correct for the effect of temperature or strain changes.

Abstract: The disclosed apparatus may include (1) a first transistor whose (A) first terminal is electrically coupled to an enable node, (B) second terminal is electrically coupled to a feedback node, and (C) third terminal is electrically coupled to a ground node, (2) a second transistor whose (A) first terminal is electrically coupled to the feedback node, (B) second terminal is electrically coupled to the enable node, and (C) third terminal is electrically coupled to the ground node, (3) a resistor that is electrically coupled between the feedback node and the ground node, and (4) a diode that is electrically coupled between the feedback node and another resistor, wherein the other resistor is electrically coupled between the diode and an output-voltage node that provides electrical power to a computing device. Various other apparatuses, systems, and methods are also disclosed.

Abstract: A network device having multiple service units receives an outbound packet of a communication session, where the service units can perform network address translation (NAT) on the outbound packet. The outbound packet includes a private source network address and source port. The network device applies a service unit selection function to a header of the outbound packet to produce a first result, and selects, based on the first result, a service unit to perform NAT for packets of the communication session. The network device determines a port for network address translation that produces a second result equal to the first result when the service unit selection function is applied to the portion of the header when the portion includes a selected public network address and determined port. The service unit can thereby perform session-aware services on packets of the communication session without redirecting the packets between the service units.

Abstract: Techniques are described for enhancements to Protocol Independent Multicast (PIM) to support multicast only fast re-route (MoFRR) over a remote loop free alternate (RLFA) backup path in a network. This disclosure describes a modified PIM control message having a new PIM message type and an additional field to indicate an address of a RLFA network device in the RLFA backup path. According to techniques of this disclosure, network devices along the RLFA backup path are configured to forward the modified PIM control message toward the RLFA network device instead of toward a source of a requested multicast group. When the RLFA network device receives the modified PIM control message, the RLFA network device is configured to forward a conventional PIM control message towards the source of the requested multicast group. In this way, PIM can be used to provide MoFRR over a RLFA backup path.

Abstract: In some embodiments, an apparatus comprises of a control module implemented in at least one of a memory or a processing device that is configured to receive, via a network and from a wireless access point or an access network node, a control packet defined based on a control protocol. The control packet is associated with at least one control function of the wireless access point or access network node. The control module is configured to determine a status of an access network node based on the control packet from the access network node. The control module is configured to send via the network, a response to the access network node based on the status of the access network node.

Abstract: In general, this disclosure describes usage monitoring techniques. In one example, a method comprises storing, by a monitoring device that performs usage monitoring for at least one packet flow that traverses an access network by which subscriber devices access a packet data network, data indicating an amount of unused granted service units for the at least one packet flow that is unused as of a policy rule deactivation time for one or more policy rules matched by the at least one packet flow. The monitoring device further reactivates the usage monitoring for the at least one packet flow at a policy rule reactivation time for the one or more policy rules matched by the at least one packet flow based on an updated amount of granted service units, wherein the updated amount of granted service units are based on the data indicating the amount of unused granted service units.

Abstract: The disclosed apparatus includes (1) a right-angle power plug that (A) plugs into a computing device and (B) facilitates feeding electrical power to the computing device when plugged into the computing device and (2) at least one power cable that is electrically coupled to the right-angle power plug at a right angle such that the power cable runs perpendicular to the right-angle power plug. Various other apparatuses, systems, and methods are also disclosed.

Abstract: The disclosed apparatus may include (1) a cage designed to hold an optical module, (2) a ramp that is secured to the cage and supports a heat sink such that the heat sink is capable of moving along the ramp, and (3) at least one spring having one end coupled to the ramp and another end coupled to the heat sink, wherein (A) prior to insertion of the optical module into the cage, the spring exerts a force at least partially directed along an axis of insertion of the optical module and (B) insertion of the optical module into the cage moves the heat sink along the ramp such that the force exerted by the spring (I) rotates away from the axis of insertion and (II) presses the heat sink against a surface of the optical module. Various other apparatuses, systems, and methods are disclosed.