Abstract: Systems and methods for receiving information on network firewall policy configurations are disclosed. Based on the received firewall configuration information, a configuration of a firewall and/or subnet of network devices is automatically provisioned and/or configured to control network traffic to and from the subnet.

Abstract: A content delivery network has at least a first tier of servers. A content delivery method includes, at a first server in the first tier of servers, obtaining a request from a client for a resource. If the resource is available at the first server or at a peer of the first server, then the resource is served to the client from the first server. Otherwise, it is determined whether the resource is popular, and if the resource is determined to be popular, then the first server obtains the resource and the first server serves the resource to the client. If the resource is determined not to be popular, the server contacts a second server to obtain the resource, not in the first tier of servers, and the second server provides the resource to the first server. The first server is instructed not to cache the unpopular content.

Abstract: Provided is a content delivery method and architecture for delivering content from a node in a content delivery network (CDN) using an anycast address to direct a requesting device to access a content manifest. The manifest server of the CDN may select the provided manifest based on information received from the requesting device and/or any other network information, may alter attributes of the manifest itself, or direct the requesting device to a different device or manifest server of the CDN to obtain the manifest. The selection of the manifest, alteration of the manifest, or new location to obtain the manifest causes the connection for content to occur at one or more servers accessible through a unicast address, rather than an anycast address.

Abstract: Aspects of the present disclosure involve a CDN utilizing a Direct Server Return (DSR) request command to create a tunnel from one content server to another content server of the CDN. Through the DSR tunnel, a request for content may be served from a content server that is more advantageous for the CDN for any number of reasons, such as from a content server that is logically closer to the content server. In determining when a DSR tunnel is created to provide the content, the CDN may access a database storing various information concerning the CDN, such as the location of egress gateways of the CDN in relation to one or more content servers, connecting network location information, the capabilities of one or more content servers, and/or load information of available content servers.

Abstract: An optical network including a plurality of gateway nodes interconnected with a plurality of intermediate nodes with segments of fiber. The network includes a plurality of devices, such as reconfigurable optical add drop multiplexers, optimally placed at various nodes throughout the network. The device placement is optimized with an integer linear programming analysis considering span definition such that any given span involves some number of segments not exceeding a number of segments that would require wavelength regeneration, cost of placement of a device at a given node, cost of wavelength regeneration, and various parameters and constraints.

Abstract: Disclosed herein are system, method, and computer program product embodiments for providing an API description of an external network service and using the API to integrate the external service into a network. An embodiment operates by receiving, from a service provider, a description of an application programming interface (API), transmitting a call to the service provider using the API for creating a new instance of a service and transmitting to the service provider a traffic flow upon which the service will be applied.

Abstract: In an embodiment, a method monitors a plurality of data streams passing through a router in the connectivity service provider environment, and for each of the data streams, periodically samples packets at the router. The method further generates a stream signature based at least on the payload of the sampled packets. The method further includes, for each generated stream signature, attaching information to the stream signature. Such information may, for example, include time-stamp information for the stream signature, or an identification of the router. The method may further comprise storing the stream signatures corresponding to the data streams in a database. The stored stream signatures may be compared to determine matching stream signatures. Matching signatures may identify data streams that carry identical or similar content.

Abstract: In an embodiment, a computer implemented method receives flow data for one or more flows that correspond to a device-circuit pair. The method calculates a time difference for each flow that corresponds to a device-circuit pair. Based on the calculated time differences and the received flow data, the method updates a probability distribution model associated with the device-circuit pair. Then, the method determines whether a time bucket is complete or open based on the updated probability distribution model.

Abstract: Systems, methods, and non-computer-readable storage media for repairing a Network Element (NE) to transport data within a network. When a NE on the network encounters an error, such as a port not receiving data, that NE will issue an alarm. Unlike previous mechanisms for resolving the alarm, systems configured according to this disclosure provide for an automatic mechanism to repair the alarm. In some instances, this can mean automatically deploying resources to re-connect the NE according to a network plan. In other instances this can mean verifying the status of the NE matches a planned status (i.e., that the loss of signal, and the subsequent alarm, were planned for). If neither of these actions resolves the problems of the NE, the system can issue a notification for a network engineer to perform maintenance on the NE.

Abstract: Aspects of the present disclosure describe systems and methods for automatically configuring, managing, updating, and/or monitoring the configuration of various computing resources and/or network devices within a communications network, such as a telecommunications network. Configuration code may be deployed to a repository for a cluster of computing resources and one or more layers may be defined describing configurable aspects of the cluster. Subsequently, a script may be identified and executed to configure the cluster based on the configuration code.

Abstract: Implementations described and claimed herein provide systems and methods systems and methods for managing network health, including alarm reduction in a subnetwork. In one implementation, an alarm list is received. The alarm list has alarm data captured from a plurality of remote nodes and consolidated at an aggregator node. A first alarm corresponding to an optical interface deployed in a circuit of a telecommunications subnetwork is identified from the alarm list. A topology associated with the optical interface is discovered by traversing a path of the circuit. An interface list is generated based on the topology. One or more alarms related to a root cause of the first alarm are identified based on a comparison of the interface list to the alarm list. The related alarms are correlated to the first alarm for concurrent resolution.

Abstract: Aspects of the present disclosure involve systems, methods, computer program products, and the like, for managing the distribution of content and/or communications from a telecommunications or computer network to an end user of the network. In general, the system receives a request for content from a user of the network and analyzes the request to determine an estimated geographic region and/or an access network associated with the requesting device. Based on the determined geographic region or access network, a networking device returns a specific anycast IP address from which the content may be received. In this manner, the content providing network may utilize multiple anycast IP addresses within the network to provide content to one or more end users of the network. The specific anycast IP address is provided to an end user device to obtain the requested content.

Abstract: Aspects of the present disclosure involve provisioning customers of an aggregator, such as a reseller, of a content delivery network (CDN). In one aspect, content requests to the CDN are processed in accordance with the virtual IP (VIP) address at which the request was received, according to a property template bound to the VIP where the template is selected by the customer and only involves discrete parameters for the reseller. In another aspect, cache fills of the network are processed without direct knowledge of the customer origin through a combination of some request attribute, e.g., alias host of the customer, and an attribute of the reseller to make a DNS request to a name server outside the CDN. Another aspect involves receiving a property template selection, an origin and an alias from a customer of the reseller, and providing appropriate DNS entries to validate the customer and provide origin information to the CDN.

Abstract: Aspects of the present disclosure involve systems, methods, computer program products, and the like, for collaboration conferencing with multiple participants over a communications network, and more specifically for a conferencing controller in the network configured to control certain aspects of establishing a collaboration conference. In one particular embodiment, the user of the network may access the control system application to provide one or more conferencing parameters or settings the user wishes to be present during a collaboration conference session. The parameters may then be established by the control system and associated with the conferencing session involving the user. In one embodiment, such information may be associated with the identification token. In yet a further embodiment, a user to the collaboration control system may subscribe to receive a notification when another user of the system accesses a portion of a collaboration of the system.

Abstract: A route viewing system includes a computing system that receives information associated with one or more routes through a network, and identifies the routes that are associated with at least one illicit user computer used by an illicit user. The computing system then obtains a source location of a source address of the routes and a destination location of a destination address of the routes, and displays the routes on a geographical display at the source location of the source address and the destination location of the destination address of each of the routes.

Abstract: Examples described herein relate to apparatuses and methods for associating a first account with a second account, the first account being hosted by a first server, the second account being hosted by a second server, including but not limited to, authenticating, by the first server, first login credentials associated with the first account, wherein the first login credentials are received from a user device, receiving, by the first server from the user device, second login credentials associated with the second account, sending, by the first server, the second login credentials to the second server for authentication, in response to determining that the second login credentials are authenticated by the second server, associating, by the first server, the first account with the second account, and connecting, by the first server to the second server, to allow the user device to access services commensurate with the second account without prompting the user device for the second login credentials.

Abstract: A method for identifying VLANs associated with a network includes gathering actual network element configuration data from a plurality of network elements in the network, wherein the actual network element configuration data identifies one or more VLANs that at least some of the plurality of network elements are actually allocated to; correlating the actual network element configuration data with administrative VLAN data; and determining one or more VLANs that are not commonly identified in both the actual network element configuration data and the administrative VLAN data.

Abstract: An order entry system communicates with the customer over a user interface and at the same time works with an automated installation system for installing network service. The order entry system prompts the customer to place a new service order. The service parameters of the new service order are passed to the installation system. The order entry system notifies the customer of the route and prompts the customer to add a service order for the route to the customer order. If the customer adds the service order to the customer order, the order entry system prompts the customer to reserve the service order or to submit an order for the service. If the customer reserves or submits an order for the service, the order entry system requests the installation system to design an actual communication line circuit to satisfy the order.

Abstract: A computer-implemented method, operable on a device in a content delivery network (CDN), wherein the CDN delivers content on behalf of at least one content provider, the device implementing a content delivery (CD) service, the method includes, by the service on the device: receiving a request for a particular resource from a client; determining whether the client includes an optimization support mechanism; when the client includes an optimization support mechanism, providing the client with a first version of the particular resource, optimized, at least in part, for the capabilities of the client in combination with the optimization support mechanism; otherwise providing the client with either (i) an un-optimized version of the particular resource, or (ii) a version of the particular resource optimized, at least in part, for the capabilities of the client without the capabilities of the optimization support mechanism.

Abstract: In an embodiment, a computer-implemented method receives and monitors performance metrics from network element. The method also includes receiving periodic control metrics corresponding to object instances. Performance metrics and control metrics provide information about operation of object instances. By monitoring the metrics, a network server is able to detect an operational flaw in the network. Monitoring the performance and control metrics in real time increases the speed of detecting any operational flaw in the network.