Abstract: A method including receiving, at a first VPN server during an established VPN connection, a first data request and a second data request from a user device; transmitting, by the first VPN server during the established VPN connection, the first data request to a second VPN server and the second data request to a third VPN server; receiving, by the first VPN server from the second VPN server during the established VPN connection, first data associated with the first data request; and receiving, by the first VPN server from the third VPN server during the established VPN connection, second data associated with the second data request, the second exit IP address being different from the first exit IP address. Various other aspects are contemplated.

Abstract: A packet transmission method, device, and system for network technologies are disclosed. A first network device receives, by using a first VPLS instance a packet to be sent to a user-side device connected to the second network device. The first network device forwards, based on an association relationship between the first VPLS instance and the first VPWS instance, the packet to a second VPWS instance in the second network device by using the first VPWS instance. A VPLS instance is associated with a VPWS instance in the first network device. A packet that is received by using the VPLS instance and that is to be sent to a user-side device can be forwarded by using the associated VPWS instance, so that pressure to learn a MAC address for packet transmission is reduced, and forwarding performance of the system is ensured.

Abstract: Examples described herein relate to the selection of virtual private network profiles. A device obtains VPN metrics associated with a plurality of VPN server nodes and monitors device usage metrics. The device is configured with a first VPN profile, which indicates that a first VPN tunnel connection is associated with a first VPN server node from the plurality of VPN server nodes. The device determines a latency associated with each of the plurality of VPN server nodes based on the VPN metrics and the device usage metrics. A second VPN server node associated with a least latency among the plurality of VPN server nodes is selected. A second VPN tunnel connection associated with the second VPN server node is determined based on the device usage metrics. A second VPN profile indicating that the second VPN tunnel connection is associated with the second VPN server node is displayed as a recommendation to a user.

Abstract: Systems and methods for isolating applications associated with multiple tenants within a computing platform receive a request from a client associated with a tenant for running an application on a computing platform. Hosts connected to the platform are associated with a network address and configured to run applications associated with multiple tenants. A host is identified based at least in part on the request. One or more broadcast domain(s) including the identified hosts are generated. The broadcast domains are isolated in the network at a data link layer. A unique tenant identification number corresponding to the tenant is assigned to the broadcast domains. In response to launching the application on the host: the unique tenant identification number is assigned to the launched application and is added to the network address of the host; and the network address of the host is sent to the client associated with the tenant.

Abstract: An application configuration tool and associated method for supporting deployment of an application on a server that has a set of configurations available for applications deployed on the server. The method attempts to match every configuration required by the application to a configuration available on the server. In case of multiple candidates that match, one is selected. When there is no match an error message is generated. The method is iterated to inspect each selected configuration to identify any references contained in the selected configuration that themselves need further configurations. The iteration of inspecting and the matching to follow the references is continued until all such references are exhausted either by matching or failure to match and consequent error message generation. Finally, a configuration report is output specifying the selected configurations and, to the extent that not all required configurations have been matched to available configurations, the error messages.

Abstract: A system for dynamically activating a virtual network is provided. During operation, the system can operate a switch as a tunnel endpoint of a tunnel in conjunction with a remote switch. The tunnel can facilitate a virtual private network (VPN) spanning the switch and the remote switch. The system can maintain an inactive state for a virtual local area network (VLAN) and a corresponding tunnel network identifier identifying the VLAN for the tunnel. If a notification indicating the activation of the VLAN at a downstream switch is received by the switch, the system can activate the VLAN at the switch. The system can then activate the tunnel network identifier in a routing process of the VPN, thereby enabling sharing of a media access control (MAC) address associated with the VLAN via the tunnel.

Abstract: A system and method for managing a population of devices and in particular, software updates and version control of applications across the population includes permitting a first device to receive an update from a publisher and generating an update manifest that is propagated to other devices in the population. Applications within a population of devices are selectively disabled and enabled to prevent multiple update versions of the same application across the population.

Abstract: An automated operating system networking configuration system includes a server computing device with an operating system that is included in a trust domain, and a management controller device included in the trust domain and coupled to the server computing device via a management channel. The management controller device identifies an operating system networking configuration for the operating system and transmits an instruction via the management channel to the server computing device to perform operating system networking configuration operations using the operating system networking configuration. A management service in the operating system receives the instruction from the management controller device via the management channel and, in response to receiving the instruction while being in the trust domain with the management controller device, automatically retrieves the operating system networking configuration.

Abstract: A method including receiving, at a first VPN server during an established VPN connection, a first data request and a second data request from a user device; transmitting, by the first VPN server during the established VPN connection, the first data request and the second data request to a second VPN server; and receiving, by the first VPN server from the second VPN server during the established VPN connection, first data associated with the first data request and second data associated with the second data request, the first data being retrieved by the second VPN server using a first exit IP address associated with the second VPN server and the second data being retrieved by the second VPN server using a second exit IP address associated with the second VPN server, the second exit IP address being different from the first exit IP address. Various other aspects are contemplated.

Abstract: A method including determining, by a virtual private network (VPN) server providing VPN services to one or more user devices, an average threshold level associated with an aggregate amount of VPN data communicated with a host device during a reference period; determining, by the VPN server, an observed average aggregate amount of VPN data communicated with the host device during an operation period; comparing, by the VPN server, the observed average aggregate amount with the average threshold level; and selectively adjusting, by the VPN server, an amount of VPN data communicated with the host device during the operation period based at least in part on a result of comparing the observed average aggregate amount with the average threshold level. Various other aspects are contemplated.

Abstract: A method including configuring a VPN server to determine aggregate amounts of VPN data communicated with a host device during sample durations of time within a reference period; configuring the VPN server to determine difference amounts indicating differences in the aggregate amounts of VPN data communicated with the host device during successive sample durations of time; configuring the VPN server to determine average aggregate amounts of VPN data communicated with the host device based at least in part on averaging the difference amounts; configuring the VPN server to determine a largest average aggregate amount as an average threshold level; and configuring the VPN server to selectively adjust an amount of VPN data communicated with the host device based at least in part on a result of comparing the average threshold level with an observed average aggregate amount of VPN data communicated with the host device. Various other aspects are contemplated.

Abstract: Exemplary embodiments relate to techniques for improving the speed and rendering quality of an image (e.g., a JPEG), particularly in an end-to-end encrypted environment. The image may be analyzed on the sending-client side and the image data may be broken into a thumbnail and a full-quality image, where the full-quality image data relies on the thumbnail data to render a high-quality image. The image is uploaded to a blob store, and a message is sent to the receiving client with image information. At the recipient side, the JPEG image data is retrieved from the blob store and the thumbnail is first rendered. Subsequently, as the remainder of the image data is received at the receiving client, the image is updated. Consequently, images are rendered faster, and the thumbnail can be automatically downloaded so that a user can determine if they wish to download the full image.

Abstract: Aspects of the present disclosure involve a system comprising a computer-readable storage medium storing a program and method for setting a shared ringtone for calls between users. The program and method provide for receiving, from a first device associated with a first user, selection of a ringtone for use with the first device and a second device associated with a second user, the first user and the second user corresponding to contacts in a messaging application; and saving, in response to the receiving, a ringtone setting that is shared by the first user and the second user, the ringtone setting indicating to use the ringtone for a call between the first device and the second device.

Abstract: Broadly speaking, embodiments of the present technique provide methods, apparatuses and systems for operating a server in communication with a network-attachable electronic device, comprising: storing, in storage accessible by the server, a device registration and a registration lifetime value for the device; receiving at least one message from the device; analysing the message to derive a confidence modifier associated with a message type associated with that message; applying the derived confidence modifier to a calculation of a confidence score for the device; and responsive to the calculation, determining whether a stored registration lifetime value for the device is to be adjusted based upon the confidence score.

Abstract: Techniques are disclosed for capturing network traffic in a computing environment comprising a plurality of computing devices. A data capture definition defines a network element of interest and data traffic that is to be captured for the network element. The network element to selectively identifies the data packets to be captured. The identified packets are encapsulated within a VXLAN session and sent to a storage service.

Abstract: A method for configuring at least one OPC UA PubSub subscriber in an in particular industrial network, in which a) a virtual address space is provided for the at least one subscriber on a configuration module that is separate from the at least one subscriber, b) a configuration for the at least one subscriber is performed and/or a configuration already existing for the at least one subscriber is changed in the virtual address space of the at least one subscriber, c) the configuration module converts the configuration and/or configuration change into at least one PubSub message, d) the at least one PubSub message is transmitted to the at least one subscriber, and e) the at least one subscriber is configured according to the at least one PubSub message. In addition, the invention relates to an automation system, a computer program and a computer-readable medium.

Abstract: Systems and methods for compatibility in European Telecommunications Standards Institute (ETSI) Cooperative Intelligent Transport System (C-ITS) station communications are disclosed. Embodiments of a method performed by a C-ITS station are disclosed. In some embodiments, the method comprises receiving a message, determining whether the message was received via an external interface of the C-ITS station or a short range interface of the C-ITS station, and upon determining that the message was received via the external interface of the C-ITS station, treating the message differently as compared to if the message was received via the short range interface of the C-ITS station.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for dynamically configuring a hardware device. A hardware configuration descriptor can be customized, where the hardware configuration descriptor includes a set of hardware interface attributes for use in configuring hardware interfaces of a hardware device and indicates one or more web addresses corresponding to computer-readable instructions configurable to control operation of the hardware device during runtime. The hardware configuration descriptor can be transmitted to the hardware device responsive to a request from the hardware device. The hardware device automatically applies the hardware configuration descriptor to configure its interfaces and subsequently accesses the web addresses during operation of the hardware device.

Abstract: A network device includes a network interface, a host interface and processing circuitry. The network interface is configured to connect to a communication network. The host interface is configured to connect to a host including a host processor running a client process. The processing circuitry is configured to receive packets originating from a peer process, to identify, in at least some of the received packets, application level information that is exchanged between the client process and the peer process, and to initiate reporting of one or more of the received packets to the client process, based on the application level information.

Abstract: Disclosed herein are systems and methods for creating an ultra-lightweight multi-tenant network virtualization model by augmenting an OSI layer 4 tuple (protocol, source IP address, destination IP address, source port, destination port) with additional private gateway-specific source and destination augmented addresses. A unique OpenVPN Augmented Address (OAA) may be created and assigned to each device on a network such as a mesh-linked system. This OAA may form part of a packet shim created with routing path information for both the source and the destination resources. Once created, the shim may be inserted into a packet header for transmission. Once the initial packet is transmitted, each hop creates its own resources for managing transmission of subsequent packets in this session. The packet shim operates to establish a communications session on layer 4 (Transport) between the requestor and the target resource which is intermediate-device agnostic.