Abstract: A control device that controls a communication system in which a network device and a virtual network device on a cloud communicate with each other through a tunnel, the control device including: a calculation unit that calculates a predicted value of the number of future setting entries in the virtual network device; an autoscale execution unit that executes scale-out or scale-in of the virtual network device on the basis of a result of comparison between the predicted value and a threshold; and a control unit that performs routing control between an application and the virtual network device in a service platform on the cloud.

Abstract: Systems, methods, and computer-readable media are disclosed for proactively and adaptively rerouting data to a healthier path through network, as part of flow provisioning, based on environmental variables associated with devices in the network. The present technology includes identifying a routing path for forwarding traffic flows in a network, receiving diagnostic data of a routing device on the routing path. The diagnostic data include one or more environmental parameters associated with internal state and surroundings of the routing device. Further, the present technology includes comparing the diagnostic data of the routing device with a predetermined threshold and modifying, prior to a failure of the routing device, the routing path to bypass the routing device for at least a portion of the traffic flows based on the comparison between the diagnostic data of the routing device and the predetermined threshold.

Abstract: Described herein are systems, methods, and software to manage processing queue allocation based on addressing attributes of an inner packet. In one implementation, a first gateway identifies processing queues at a second gateway and assigns a unique flow label to each of the processing queues. The first gateway further receives a packet from a computing node that is directed toward the second gateway. The first gateway hashes addressing information in the packet to select a flow label, encapsulates the packet with the flow label in the outer encapsulation header for the encapsulated packet, and forwards the packet toward the second gateway.

Abstract: Aspects of the subject disclosure may include, for example, a system for indicating a program boundary in an adaptive bitrate media stream, where the system includes a memory and a processor that performs operations including generating multiple transcoded media output streams of different bit rates from an input linear media stream, fragmenting the multiple transcoded media output streams into chunks, detecting a program boundary in the input linear media stream, and supplying a program change indicator in a manifest file for implementing program change features in mobile communication devices. Other embodiments are disclosed.

Abstract: An environment includes at least two network devices and a plurality of downstream devices or networks. The downstream devices or networks are communicatively coupled to network interfaces of the network devices using a plurality of data cables. The data cables each comprise a switch device configured to switch communication paths to the coupled network devices. Each of the data cables communicatively couple each of the network devices to one of the plurality of downstream devices or networks so that each of the downstream devices or networks has a communications path to each of the network devices and a switchable communications path from each of the network devices. The network devices do not arbitrate active/passive status via direct communication. Based on data contained in a reply packet indicating that a request packet sent by the first network device was acknowledged, the first network device determines that the first network device is an active network device.

Abstract: A method includes selecting one or more green addresses, each being a different IP address from a block of IP addresses, associating the green addresses with the IP address of the server, and receiving a packet from a client directed to an IP address of the block of IP addresses. It is determined whether the destination address matches the one or more green addresses or is a yellow address. When determined that the destination address matches the one or more green addresses, the packet is sent to the IP address associated with the matching green address, bypassing any DPI. Otherwise, the packet is sent to a scrubber to analyze the packet using DPI and handle the packet or perform a redirection of the client. The redirection causes subsequent requests from the client to be sent to the IP address associated with the green address, bypassing any DPI.

Abstract: A disaggregated routing system is provided for use in a communication network comprising a plurality of white boxes, wherein at least four of the plurality of white boxes are each configured to carry out a functionality different from the functionalities which the other three of the at least four of the plurality of white boxes are configured to carry out, and wherein each of the at least four of the plurality of white boxes is identified based on its functionality.

Abstract: A network device may receive packets, wherein the network device includes a first routing component, a second routing component, a first forwarding component, a second forwarding component, and a physical interface card concentrator with multiple physical interface cards. The first routing component may provide, to the physical interface card concentrator, a signal indicating that the second forwarding component is to be an active forwarding component. The physical interface card concentrator may cause, based on the signal, a data path for the multiple physical interface cards to be switched from the first forwarding component to the second forwarding component. The first routing component may provide the packets to the second forwarding component. The second forwarding component may provide the packets to the multiple physical interface cards via the data path. The multiple physical interface cards may forward the packets toward destinations associated with the packets.

Abstract: In example embodiments, a shortest path first-based isolation trace function is provided to determines what switchable elements need to be closed to stop flow of a quality to a location in an infrastructure model arranged as a network. The shortest path first-based isolation trace function may perform shortest-path traces from the location to each source. For each successful shortest-path trace finding one or more switchable elements, the first switchable element encountered on the path of the trace is added to a solution set, and marked as active to prevent further traversal in subsequent shortest-path traces. When all the shortest-path traces are complete, the solution set may be returned as a result. If no switchable element is found on a path of one of the shortest-path traces, it may be concluded that the location cannot be isolated and such conclusion returned as the result instead of the solution set.

Abstract: Techniques are described herein for generating network topologies based on models, and deploying the network topologies across hybrid clouds and other computing environments that include multiple workload resource domains. A topology deployment system may receive data representing a logical topology model, and may generate a network topology for deployment based on the logical model. The network topology may include various services and/or other resources provided by different tenants in the computing environment, and tenant may be associated with different set of resources and deployment constraints. The topology deployment system may determine and generate the network topology to use the various resources and comply with various deployment constraints of the different tenants providing the services, and the tenants consuming the network topology.

Abstract: Certain exemplary aspects directed to customization of communications services wherein a data communications server provides virtual office features to remote client entities.

Abstract: Techniques are described herein for service chaining in fabric networks such that hardware resources can be preserved without service nodes needing additional capabilities. The techniques may include storing a first configuration associated with a first VRF instance of a service forwarding node that is connected to a first service of a service chain sequence. The first configuration may indicate an identifier and a type associated with a second service of the service chain sequence where traffic is to be sent after the first service. Additionally, the techniques may also include storing a second configuration associated with a second VRF instance of the service forwarding node that is connected to the second service. The second configuration may indicate that the second service is a last service of the service chain sequence. When traffic is received at the service forwarding node, the service forwarding node can determine whether the traffic is pre-service traffic or post-service traffic.

Abstract: A data processing system is provided. A host processing device supports a host transport engine operable to establish a first transport stream over a network with a remote peer. Device hardware comprises a device transport engine. The device transport engine is configured to monitor the first transport stream to determine a state of the first transport stream and in response to an indication from the host processing device perform transport processing of the first transport stream.

Abstract: A method for communication includes partitioning local links in a subnetwork of a packet data network into at least first and second groups. For each local link that connects a first upper-tier switch to a first lower-tier switch in the subnetwork, a corresponding detour route is defined, passing through a first local link belonging to the first group from the first upper-tier switch to a second lower-tier switch, and from the second lower-tier switch over a second local link to a second upper-tier switch, and from the second upper-tier switch over a third local link belonging to the second group to the first lower-tier switch. Upon a failure of the local link connecting the first upper-tier switch to the first lower-tier switch, data packets arriving from the network at the first upper-tier switch are rerouted to pass via the corresponding detour route to the first lower-tier switch.

Abstract: Described herein are systems, methods, and software to manage communication path configurations between edge gateways in a computing environment. In at least one implementation, a controller monitors network characteristics associated with routes from a first edge gateway to a second edge gateway and determines whether a first route configuration for the first edge gateway to communicate with the second edge gateway fails to satisfy criteria based on the network characteristics. If the first route configuration fails to satisfy the criteria, the controller determines a second route configuration and applies the second route configuration for the first edge gateway to communicate with the second edge gateway.

Abstract: Some embodiments of the invention provide a novel network architecture for deploying guest clusters (GCs) including workload machines for a tenant (or other entity) within an availability zone. The novel network architecture includes a virtual private cloud (VPC) deployed in the availability zone (AZ) that includes a centralized routing element that provides access to a gateway routing element of the AZ. In some embodiments, the centralized routing element provides a set of services for packets traversing a boundary of the VPC. The services, in some embodiments, include load balancing, firewall, quality of service (QoS) and may be stateful or stateless. Guest clusters are deployed within the VPC and use the centralized routing element of the VPC to access the gateway routing element of the AZ.

Abstract: Devices, systems, methods, and techniques for multicast failover handling in a computer communication network are disclosed. The methods herein described are particularly suited to software-defined networks (SDNs), and comply with requirements for assuring delivery of network traffic to each destination from a source engaged in multicast network traffic dissemination, assured delivery of each data packet as introduced into the network by the source device and avoidance of duplicate delivery of data. The methods herein are agile and respond rapidly to changes in a network while traffic is on the network.

Abstract: A video player for playing a video stream that receives a master playlist identifying at least one variant playlist identifying a video file encoded as a series of video frames that when decoded provide the video stream. The video player based upon a configuration tag in the master play list selectively determining whether the video file is to be processed in a trusted execution environment. The trusted execution environment of the video player selectively includes at least one of (i) hack one, only hack one; (ii) output and link protection; (iii) hardware root of trust; and (iv) forensic watermarking, and decrypts and/or decodes the video stream in such an environment.

Abstract: An audio processing plug-in shim operates in conjunction with a plug-in host application executing on a computing device. The plug-in shim receives a stream of digital audio from the plug-in host application and transmits the digital audio to a network service executing in a network accessible remote distributed computing environment. The network service receives the digital audio and routes the digital audio to one or more audio processing plug-ins, also executing in the distributed computing environment. The audio plug-ins process the digital audio, such as by applying digital signal processing techniques to the digital audio, and return processed audio to the network service. The network service returns the processed audio to the plug-in shim executing on the remote computing device. The plug-in shim, in turn, receives the processed audio from the network service and provides the processed audio to the plug-in host application.

Abstract: A method for offloading multicast replication from multiple tiers of edge nodes implemented by multiple host machines to a physical switch is provided. Each of the multiple host machines implements a provider edge node and a tenant edge node. One host machine among the multiple host machines receives a packet having an overlay multicast group identifier. The host machine maps the overlay multicast group identifier to an underlay multicast group identifier. The host machine encapsulates the packet with an encapsulation header that includes the underlay multicast group identifier to create an encapsulated packet. The host machine forwards the encapsulated packet to a physical switch of the network segment. The physical switch forwards copies of the encapsulated packet to tenant edge nodes at one or more ports that are determined to be interested in the underlay multicast group identifier.