Abstract: A semiconductor chip for implementing load-aware equal-cost multipath routing includes a number of ports and several pipes, each pipe being coupled to a portion of ports on the semiconductor chip, and a central unit consisting of a state machine and multiple databases. The databases contain information regarding a communication network including an overlay network and an underlay network, and the state machine is implemented in hardware and can determine at least one feature of the overlay network and a corresponding group of paths within the underlay network.

Abstract: The packet capture manager uses a multi-tiered storage for storing captured network traffic. Captured packets are stored on a primary storage with a time-to-live according to a retention policy. The packet capture manager receives instructions from one or more network monitoring devices identifying one or more captured packets as packets of interest. The packet capture manager flags the identified packets as packets of interest, moves the flagged packets to a secondary storage, and changes the TTL of the moved packets. A machine learning model analyzes historical data of the instructions received from the one or more network monitoring devices. The packet capture manager uses the machine learning model to identify packets of interest and move identified packets to the secondary storage without specific instructions from a network monitoring device.

Abstract: A method includes maintaining, by a controller device that manages a plurality of network devices, a data structure and receiving, by the controller device, an indication of a stateful intent. The method further includes generating, by the controller device, a logical packet based on the stateful intent and determining, by the controller device, a dependent intent of the data structure based on the logical packet. The method further includes determining that the dependent intent conflicts with the stateful intent. The method further includes, in response to determining that the dependent intent conflicts with the stateful intent, determining, by the controller device, a resolution that resolves the conflict between the dependent intent and the stateful intent based on the dependent intent and the stateful intent and outputting, by the controller device, an indication of the resolution.

Abstract: A social network service method implemented with a computer is provided which includes receiving at least one control condition for controlling an operation of a social network service from a user, generating a folder operated by the at least one control condition, associating at least one chatting element with the folder, and determining whether to control the operation of the social network service based on the at least one control condition, in response to a message from a conversation partner associated with the at least one chatting element.

Abstract: A method of transmitting a covert message over a network from an origin device to a destination device includes using selection a plurality of network paths, network channels, and network tunnels to signal to the destination device symbols. Sequences of the symbols are interpreted by the destination device as values in an n-base number system. The values are decoded by the destination device to obtain the covert message. Some preferred implementations use a binary number system and some use a hexadecimal number system. Some utilize network path selection and incorporate network watermarks, by which the network path that was selected for each received packet is determined. Network paths preferably are differentiated from one another by redirects that are storage servers in an overlay network. Network communications can be opened between the origin device and destination device for continuously communicating packets without signaling symbols when no covert message is being transmitted.

Abstract: Systems and methods include receiving a request for a path in a network including a plurality of network elements interconnected to one another via links, wherein the request includes values for a plurality of criteria, wherein the plurality of criteria include one or more of trust, privacy, and secrecy; utilizing a multi-criteria path selection process to determine the path through the plurality of network elements over the links based on the plurality of criteria and the associated values; and providing a display of the determined path in a network map. The trust quantifies trustworthiness of each link in the network and the values of trust are any of a rating and a selection for inclusion or exclusion, the privacy quantifies a number of the links the network path is routed over for network obfuscation, and the secrecy quantifies a level of encryption utilized on the links.

Abstract: Edge clusters execute in a plurality of regional clouds of a cloud computing platforms, which may include cloud POPs. Edge clusters may be programmed to control access to applications executing in the cloud computing platform. Edge clusters and an intelligent routing module route traffic to applications executing in the cloud computing platform. Cost and latency may be managed by the intelligent routing module by routing requests over the Internet or a cloud backbone network and using or bypassing cloud POPs. The placement of edge clusters may be selected according to measured or estimated latency. Latency may be estimated using speed test servers and the locations of speed test servers may be verified.

Abstract: A method for autonomous selection of a data routing path in a computer network includes: forming a pulse group comprising a plurality of nodes in a computer network, automatically sending a plurality of pulse messages from a first node in the pulse group to other nodes in the pulse group, receiving one of the plurality of pulse messages by a second node in the pulse group, automatically computing a first one-way latency for a direct path from the first node to the second node based on a first time stamp and a second time stamp, automatically recording one-way latencies between each pair of nodes in the pulse group in a one-way latency matrix, and automatically determining a low-latency data routing path from the first node to the second node based on the one-way latencies in the one-way latency matrix.

Abstract: A backbone service exposes the efficiency of the backbone network using tunnels between any source-destination pairs. The efficiency can be calculated using a ratio of a transmission rate of the packets through a tunnel and a number of hops in the tunnel. The efficiency also can be tracked based upon services using the backbone network in a compute service provider environment. The data generated by the backbone service can be transmitted, stored or displayed for informational purposes to provide insights to service teams on how to improve efficiency in the backbone by change routing behavior, such as by moving caches, adding or removing hops or changing advertisements to network devices.

Abstract: Example methods and systems for self-learning packet flow monitoring. One example method may comprise monitoring a packet flow to identify attribute information associated with the packet flow between a source and a destination; and classifying the packet flow using a classification engine that is trained using a training dataset to determine a classification output associated with the packet flow. The example method may also comprise providing, to a user device, a user interface (UI) that includes a visualization of the packet flow and the classification output; requesting, via the UI, a feedback associated with the classification output for the packet flow; and updating the classification engine or the training dataset based on the feedback from the user device.

Abstract: A method for optimizing network device resources that includes receiving, by an optimizer, first resource utilization data, making a first determination, based on the first resource utilization data, that resource utilization exceeds an upper threshold, starting, based on the first determination, an optimization process, that includes identifying a resource optimization entry of a resource class optimization queue, and initiating optimization of a resource fragment specified by the resource optimization entry. After initiating optimization of the region of the memory, the method additionally includes receiving second resource utilization data, making a second determination, based on the second resource utilization data, that the resource utilization is below a lower threshold, and halting, based on the second determination, the optimization process.

Abstract: In one embodiment, a device generates an application map for an online application accessed via a network that indicates a set of network addresses at which the online application was accessed, client information for clients that accessed the online application via the network, and quality of experience metrics for the online application. The device identifies a location change of the online application by tracking changes to the application map. The device determines a correlation between the location change and a degradation in the quality of experience metrics. The device adjusts, based on the correlation, routing of traffic associated with the online application in the network.

Abstract: A communication system includes: a management server that receives, from an information terminal connectable to a first network, a connection request for connecting to a web service provided by a web server connectable to a second network; first communication control circuitry that controls communication of a communication apparatus connectable to the second network, and second communication control circuitry that controls communication of the information terminal. The first communication control circuitry connects to a relay server that relays communication between the second network and the first network. The second communication control circuitry connects the information terminal to the relay server. A request for the web service provided by the web server and a response to the request are transmitted and received between a web browser of the information terminal and the web server via the relay server and the first communication control circuitry.

Abstract: Systems, methods, and software can be used for securing in-tunnel messages. One example of a method includes establishing a tunneling connection between a server and an endpoint. The method further includes receiving a packet from the server over the tunneling connection. The method yet further includes determining that the packet comprises a tunneling control message based on at least one address in the packet. Based on the determination of a received packet comprising a tunneling control message, the method can ensure the security of in-tunnel messages based on an indication in the tunneling control message.

Abstract: Example methods and systems for quality-aware user data forwarding in a mobile communications system are described. One example may involve a first virtualized network function (VNF) instance supported by a computer system establishing a user plane tunnel with a second VNF instance; and learning path quality information associated with multiple paths over the user plane tunnel. In response to receiving a packet that includes user data for forwarding in an uplink direction or a downlink direction, the first VNF instance may select the first path over the second path based on at least the path quality information; and generate and send an encapsulated packet over the user plane tunnel towards the second VNF instance. The encapsulated packet may include the packet and an outer header specifying the first outer source port number associated with the first path.

Abstract: An apparatus includes a network interface that receives a registration request and an event notification, the registration request indicating an identity of a sensor and a physical location of the sensor, the event notification identifying a location of an event. The apparatus also includes a processing unit that determines a first geofence, at least in part based on the location and a distance from the location. The processing unit determines that the sensor is within the first geofence, at least in part based on the physical location of the sensor. The network interface transmits a request indicating the sensor and receives a response including data associated with the sensor.

Abstract: This disclosure is directed to network optimization in a complex joint network for increasing the network utility of the complex joint network. A computing device in the complex joint network may receive a data flow via a complex joint network. The computing device may determine, based on a network template, a mission utility associated with the data flow and a traffic class associated with the data flow. The computing device may control one or more quality of service decisions based at least in part on the mission utility associated with the data flow and the traffic class associated with the data flow.

Abstract: Systems and methods for data storage and data streaming in decentralized, self-organized networks are provided. A plurality of computing devices are disposed in a unidirectional communication ring having a plurality of serially-connected spikes. Each spike includes n computing devices, and n×p connections directly connecting each of the n computing devices to p downstream computing devices. Each computing device is configured to request and receive an inventory of the plurality of computing devices; select a computing device from the plurality of computing devices; transmit a join request comprising the inventory to the selected computing device; and request reorganizing the unidirectional communication ring in response to the receipt of the transmitted join request after propagation through each of the plurality of spikes of the unidirectional communication ring.

Abstract: A method for use with a public cloud network is disclosed. The method includes setting up at least one virtual machine, at least one private cloud call-back server (PCCBS) and at least one smart device client on the side of the PCCBS to provide cloud based web services, and at least one private cloud routing server (PCRS) and at least one smart device client on the side of the PCRS in a client server relationship. The virtual machine and PCCBS usually reside in a hyperscale data center, while the PCRS resides in the client's remote premises. An internet platform owner that maintains the virtual machine, offers to a subscriber to host the PCCBS in the virtual machine, constructs and deploys a community pair of peer-to-peer communication relationship between at least one PCCBS Device Client and a PCRS Device Client.

Abstract: Novel tools and techniques are provided for implementing data packet processing, data packet capture, data packet storage, data packet retrieval, and data packet distribution. In various embodiments, a method might include detecting, with a computer, network traffic comprising one or more data packets within a network. Based on a detection of the network traffic comprising the one or more data packets within the network, the method might include capturing the one or more data packets to move the one or more data packets from the network to a storage of the computer. Next, the method might include determining one or more attributes associated with each captured data packet. Based on a determination of the one or more attributes, the method might additionally include storing each captured data packet according to the one or more first attributes in the storage of the computer.