Abstract: Techniques are disclosed describing an In-Service Software Upgrade for a Software Defined Networking (SDN) controller of a cloud data center. A cloud data center includes a first SDN controller configured to perform session management of a plurality of session instances, an orchestration engine communicatively coupled to the first SDN controller via a northbound application program interface (API); and a plurality of compute nodes configured to perform compute functions for the plurality of session instances. In response to receiving a request to perform an in-service software upgrade (ISSU) of the first SDN controller, the orchestration engine spawns a second, upgraded SDN controller on the cloud data center. An ISSU process initializes the second SDN controller and transfers session management for the plurality of session instances from the first SDN controller to the second SDN controller. Finally, the ISSU process removes the first SDN controller from the cloud data center.

Abstract: A network node may include one or more processors. The one or more processors may receive a message that is associated with one or more signatures and one or more second signatures. The one or more signatures may have been validated by a particular node. The one or more processors may determine that the particular node is a trusted node. The network node may be configured not to validate signatures that have been validated by a trusted node. The one or more processors may determine that the one or more signatures have been validated by the particular node. The one or more processors may sign or provide the message, without validating the one or more signatures, based on determining that the one or more signatures have been validated by the particular node.

Abstract: A device may store, in a data structure, a set of link identifiers, that identifies a set of member links included in a link aggregation group, in association with a set of packet parameters. The device may receive a network packet. The device may determine a particular packet parameter, of the set of packet parameters, associated with the network packet. The device may route the network packet via a particular member link, of the set of member links, identified by the particular link identifier.

Abstract: Using the ALTO Service, networking applications can request through the ALTO protocol information about the underlying network topology from the ISP or Content Provider. The ALTO Service provides information such as preferences of network resources with the goal of modifying network resource consumption patterns while maintaining or improving application performance. This document describes, in one example, an ALTO server that intersects network and cost maps for a first network with network and cost maps for a second network to generate a master cost map that includes one or more master cost entries that each represent a cost to traverse a network from an endpoint in the first network to an endpoint in the second network. Using the master cost map, a redirector may select a preferred node in the first network with which to service a content request received from a host in the second network.

Abstract: In some embodiments, an apparatus includes a processor configured to receive a set of digital samples associated with a set of optical signals received at a coherent optical receiver. The set of digital samples is associated with a set of optical channels. Each optical channel from the set of optical channels is spaced from at least one adjacent optical channel from the plurality of optical channels. The processor is configured to calculate, for each optical channel from the set of optical channels, a spacing between that optical channel and at least one adjacent optical channel from the set of optical channels based on digital signal processing of the set of digital samples. The processor is configured to send a signal indicating, for each optical channel from the set of optical channels, the spacing between that optical channel and the at least one adjacent optical channel.

Abstract: Techniques are disclosed for intercepting, by a customer-premises equipment (CPE), a request for a content file. The request may originate from a computing device in a local area network for the CPE and may be destined for a destination device external to the local area network for the CPE. In response to determining that an encrypted content file for the content file is stored by a storage device for the CPE, the CPE may decrypt, using at least one cryptographic key obtained from a Trusted Platform Module (TPM) for the CPE, the encrypted content file to obtain the content file. The CPE may send the content file to the computing device.

Abstract: A device may be configured to store virtual identifier information indicating virtual identifiers associated with servers. The virtual identifier information may associate a quantity of virtual identifiers with each respective server of the servers based on a weight associated with the respective server. The device may receive an object identifier identifying an object to be processed by at least one of the servers. The device may calculate hash values for the virtual identifiers based on the object identifier. The device may determine a virtual identifier associated with a hash value that satisfies a particular condition. The device may select a server associated with the virtual identifier. The device may send an instruction to the server to process the object.

Abstract: In some embodiments, an apparatus includes a rate module implemented in at least one of a memory or a processing device that can be operatively coupled to a set of rate counters. Each rate counter is associated with a different network device associated with a level within the hierarchy of a network. The rate module can receive from a schedule module a signal to begin execution of a first page of a first rate program and can send during a first time period transmission credits to a first subset of rate counters. The rate module can send during a second time period transmission credits to a second subset of rate counters based on the execution of a page of a second rate program where the priority of the second rate program is no lower than a priority of the first rate program.

Abstract: A provider edge device, capable of accessing a first type of memory and a second type of memory, may determine a network address associated with a customer edge device. The provider edge device may determine whether the customer edge device is categorized as a leaf device in an Ethernet Tree service provided by the provider edge device. The provider edge device may selectively store the network address in the first type of memory or the second type of memory based on determining whether the customer edge device is categorized as a leaf device in the Ethernet Tree service.

Abstract: A security device may receive, from a client device, a request associated with a server device. The security device may determine a communication channel and contact information for validating the request. The security device may provide validation information via the communication channel using the contact information. The security device may receive a validation response from the client device, and may determine whether the validation response is valid. The security device may selectively perform a first action or a second action based on determining whether the validation response is valid. The first action may be performed based on determining that the validation response is valid, and may include providing a validation indicator, with the request, to the server device. The second action may be performed based on determining that the validation response is not valid, and may include providing an invalidation indicator, with the request, to the server device.

Abstract: An apparatus may include a printed circuit board, an integrated circuit mounted on a first surface of the printed circuit board, and one or more vias that extend through the printed circuit board from the first surface to a second surface of the printed circuit board to provide electrical connectivity for the integrated circuit. The second surface of the printed circuit board may be opposite the first surface of the printed circuit board. The apparatus may include a pin header that mechanically supports one or more pins that provide electrical connectivity for the integrated circuit. The pin header may be mounted to the second surface of the printed circuit board to mate the one or more pins with the one or more vias to provide electrical connectivity for the integrated circuit.

Abstract: A device may determine a first set of hash values corresponding to a first set of files stored by a plurality of client devices. The device may analyze information associated with the first set of hash values to determine a second set of hash values corresponding to a second set of files to be analyzed. The second set of hash values may be different from the first set of hash values. The device may prioritize the second set of hash values to form a prioritized set of hash values corresponding to a prioritized set of files, of the second set of files, to be analyzed. The device may request the prioritized set of files from one or more client devices of the plurality of client devices. The device may receive the prioritized set of files, and may cause the prioritized set of files to be analyzed.

Abstract: In general, techniques for sharing of network session data are described. The techniques may enable security devices to leverage application classification information in a federated manner. An example security device includes a memory and one or more processors. The processor(s) are configured to receive data representative of an application classification for a first packet flow from a second security device, to receive data of a second packet flow, and, when the second packet flow corresponds to the first packet flow, to monitor the data of the second packet flow based on the application classification for the first packet flow without determining an application classification for the second packet flow.

Abstract: The disclosed apparatus may include a memory device that stores firmware intended for a plurality of adaptive equalizer devices that equalize communication signals received via a plurality of communication channels. The disclosed apparatus may also include a controller circuit communicatively coupled to the memory device. The controller circuit may detect a power-on event during which the plurality of adaptive equalizer devices begin to receive electrical power. In response to detecting the power-on event, the controller circuit may initialize the plurality of adaptive equalizer devices by writing at least a portion of the firmware stored in the memory device to each of the plurality of adaptive equalizer devices. Various other apparatuses, systems, and methods are also disclosed.

Abstract: The disclosed method may include (1) receiving, at a network node within a network, a keepalive message of a routing protocol from a neighbor of the network node, (2) determining that the keepalive message of the routing protocol serves as evidence that the neighbor of the network node is currently reachable via a link within the network, (3) identifying a neighbor cache that includes entries for neighbors of the network node within the network, and then (4) refreshing an entry for the neighbor within the neighbor cache to avoid initiation of a reachability confirmation process directed to the neighbor due at least in part to the keepalive message of the routing protocol serving as evidence that the neighbor of the network node is currently reachable via the link. Various other methods, systems, and apparatuses are also disclosed.

Abstract: In an example of this disclosure, a method may include receiving, by a bit error location analyzer, a split information signal at a second data rate derived from an information signal at a first data rate. In this example, the second data rate is less than the first data rate, and the bit error location analyzer may be incapable of performing error analysis at the first data rate The method may include performing error analysis, by the bit error location analyzer, on information represented by the split information signal. In some examples, performing error analysis may include comparing the information represented by the split information signal to an information seed to determine a plurality of bit error locations in the information represented by the split information signal relative to the information seed.

Abstract: The disclosed computer-implemented method for verifying the functionality of network paths may include (1) constructing, at a source node within a network, a test packet that uniquely identifies a network path whose functionality is unverified, (2) sending the test packet to a target node within the network via the network path in an attempt to verify the functionality of the network path, (3) receiving, back from the target node, the test packet sent to the target node via the network path, and then (4) verifying, at the source node, the functionality of the network path based at least in part on the test packet received back from the target node. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: An apparatus includes a finite impulse response (FIR) filter to receive a digital signal and a transmitter, operatively coupled to the FIR filter, to transmit an analog signal, converted from the digital signal, to a communication channel. The FIR filer is configured to change at least one operating parameter based on a bandwidth of the analog signal after transmission in the communication channel. The bandwidth of the analog signal is estimated, using an estimator, based at least in part on raw sampling data generated by an analog-to-digital converter (ADC) operatively coupled to the transmitter.

Abstract: In some embodiments, a non-transitory processor-readable medium storing code representing instructions to be executed by a processor comprises code to cause the processor to determine, during a calibration of a coherent optical transmitter, a set of parameters associated with each tributary channel by sending a first signal to a digital signal processor (DSP) to adjust a scale factor of that tributary channel. The scale factor is associated with a tap characteristic of a finite impulse response (FIR) filter of the DSP. The code further causes the processor to determine a power imbalance between two tributary channels based on the set of parameters associated with each tributary channel. The code further causes the processor to send a second signal to the coherent optical transmitter to adjust a set of operational settings of the coherent optical transmitter based on the power imbalance and the set of parameters associated with each tributary channel.

Abstract: Techniques are disclosed for reducing the time required to instantiate network services in a service provider network to service requests by subscriber devices. In one example, an orchestration engine pre-creates pools of different virtual network functions (VNFs). Upon receiving a request to service network traffic from a subscriber device, the orchestration engine dynamically creates a service chain using the appropriate VNFs from the pools of different VNFs. In another example, the orchestration engine pre-creates pools of common service chains. Upon receiving a request to service network traffic from a subscriber device, the orchestration engine selects the appropriate service chain from the pools of service chains. After configuring the service chain, the orchestration engine issues instructions to a Software-Defined Networking (SDN) controller causing the SDN controller to update forwarding information in the service provider network to enable the service chain to service the subscriber traffic.