Abstract: A controller is configured to obtain traffic information of one or more tunnels in the network, where the traffic information of each tunnel is indicative of a protection type of the tunnel against failures, and provide configuration information to each network node that is a head-end node of a determined tunnel with a certain protection type according to the obtained traffic information of the determined tunnel, where the configuration information includes a bandwidth threshold and a load balancing configuration for the determined tunnel. A network node is configured to receive configuration information from the controller, and send the notification to the controller, if it is determined that the traffic of the tunnel is above the bandwidth threshold.

Abstract: A pair of virtual routers is configured. In response to programmatic requests, dynamic transfer of routing information between the routers in accordance with configuration settings indicated by a client is enabled. The routing information is associated with a set of isolated networks to which the virtual routers are attached. A network packet originating at an address in a first isolated network is transmitted to an address in a second isolated network using a route determined from routing information transmitted between the virtual routers according to the configuration settings.

Abstract: Systems, devices, and methods for media processing and streaming, including receiving content to be prepared for a 5G media streaming (5GMS) corresponding to an input Common Media Application Format (CMAF) track and a set of output CMAF tracks; determining a content preparation template (CPT), wherein the CPT includes a Network Based Media Processing (NBMP) workflow description document (WDD) which specifies an input format of the input CMAF track, and an array of task instances corresponding to the set of output CMAF tracks; preparing the content according to the CPT; and streaming the prepared content over the 5GMS network to a media streaming client.

Abstract: A discovery and routing service may generate a URL related to an application to be deployed to a cloud computing platforms, the URL providing access to an edge list containing one or more edge nodes. The discovery and routing service may connect at least one agent to the URL. The discovery and routing service may send authentication information to the agent, including an identifier related to the agent, and a set of agent labels. The discovery and routing service may insert, after authentication by the edge node, the authentication information into a routing mesh. The discovery and routing service may locate the agent, in response to a request, based on a comparison between the set of request labels and a set of agent labels. The discovery and routing service may connect the located agent with traffic to and from the routing mesh.

Abstract: A computer implemented security method operable with a communications network in a vehicle, the network communicatively connecting devices including sensors and actuators in the vehicle such that information provided by sensors and states of actuators are determinable by data communicated via the network, the method including defining a Markov decision process model for the vehicle, the model specifying states of the vehicle and actions constituting transitions between states, wherein a state of the vehicle is indicated by information provided by one or more sensors and a state of one or more actuators, and an action corresponds to a change in the information provided by one or more sensors and/or a change to a state of one or more actuators, each action having associated a probability of occurrence; determining, by accessing data communicated via the network, a current state of the vehicle in the model; accessing data communicated via the network; responsive to the accessed data indicating an action to chang

Abstract: A method is disclosed for autonomously discovering and utilizing low-latency routing paths in a distributed data routing network. The method includes automatically measuring one-way latencies between a plurality of nodes, and automatically calculating relay health scores of potential relayed data routing paths in the distributed network. A relayed data routing path is automatically selected based on the one-way latencies and relay health scores of potential relayed data routing paths. A relay health score for a potential relayed data routing path is based on uptimes of the potential relay node, or bandwidths, jitters, data package losses, or amount of data routed through the routing segments in the potential relayed data routing path. The selected relayed routing path has a routing health score that meets a pre-determined criterion. The selected relayed data routing path has a total one-way latency smaller than a one-way latency associated with in a direct path.

Abstract: Systems and methods for dynamic service-based load balancing in an SD-WAN are provided. According to one embodiment, a subnet assigned to a client device by a hub network of the SD-WAN and one or more attributes of a path or a route to a group of clients within the subnet are received by a first process of an SD-WAN controller via a dynamic routing protocol. A tagged subnet is generated by the first process by tagging the subnet with a route tag corresponding to the one or more attributes. The first process informs the SD-WAN of the tagged subnet by communicating the tagged subnet to a second process of the SD-WAN controller via an inter-process communication mechanism. Responsive to receipt of the tagged subnet, the second process translates an SD-WAN service rule defined with reference to the route tag to an SD-WAN service rule defined with reference to the subnet.

Abstract: To collaborate in context, an online messaging platform is launched for a user to communicate by way of electronic messaging with one or more other users. The online messaging platform is launched in response to a user selecting text. One or more additional users are added to the online messaging platform, when the user tags the one or more additional users. Exchange of electronic messaging is facilitated, via the online messaging platform, between the user and the one or more additional users in regard to the selected text.

Abstract: Various embodiments of the present disclosure provide a method for traffic detection. The method which may be performed by a first network node includes receiving a message from a second network node. The method further includes determining packet flow description information for traffic detection according to the message. The packet flow description information may indicate a combination criterion for two or more packet flow descriptions, and/or a protocol matching criterion for a domain name in a packet flow description. According to the embodiments of the present disclosure, the packet flow description definition can be extended to support more accurate traffic detection.

Abstract: A method of compensating for potential interruptions in a wireless connection (110) over which data is transmitted from a host device (11) to a client device (12) involves determining an expectation of an interruption to the wireless connection (110), setting a second compression level for compressing the data when an interruption is due, the second compression level being set at a higher level than a first compression level normally used for the data, compressing the data at the second compression level, and forwarding the data compressed at the second compression level to a transmitting component (16) for transmittal to the client device (12).

Abstract: This disclosure describes techniques relating to assigning unique segment identifiers (SIDs) in a segment routing network. In one example, this disclosure describes a method that includes receiving, by a computing system and from a node on a network, a request to allocate a segment identifier for use in a segment routing network; allocating, by the computing system and from a block of addresses, an assigned segment identifier; responding to the request by outputting, by the computing system and over the network to the node, information about the assigned segment identifier; and maintaining the assigned segment identifier.

Abstract: In various embodiments, domain name system (DNS) servers are implemented on a content distribution network (CDN) infrastructure in order to facilitate centralized control of traffic steering. Each server appliance in the CDN infrastructure acts as both an authoritative DNS nameserver and a dynamic request proxy, and each such server appliance is assigned to one of multiple cloud computing system regions. The assignment of server appliances to cloud regions is based on latency measurements collected via client application probes and an optimization that minimizes an overall latency experienced by the client applications subject to constraints that the maximum traffic to each cloud region is less than a capacity constraint for that region, the maximum deviation of traffic to each cloud regions at any point in time is less than a given percentage, and the maximum deviation of traffic between direct and indirect paths is less than a given percentage.

Abstract: Techniques are disclosed for scaling an IP address in overlay networks without using load balancers. In certain implementations, an overlay IP address can be attached to multiple compute instances via virtual network interface cards (VNICs) associated with the multiple compute instances. Traffic directed to the multi-attached IP address is distributed across the multiple compute instances. In some other implementations, ECMP techniques in overlay networks are used to scale an overlay IP address. In forwarding tables used for routing packets, the IP address being scaled is associated with multiple next hop paths to multiple network virtualization devices (NVDs) associated with the multiple compute instances. When a particular packet directed to the overlay IP address is to be routed, one of the multiple next hop paths is selected for routing the packet. This enables packets directed to the IP address to be distributed across the multiple compute instances.

Abstract: An active-active cluster control method includes that a control node receives a first query request from a first network processing node in an active-active cluster, configures an outbound forwarding rule based on forwarding information, generates an inbound forwarding rule, and sends the outbound forwarding rule to the first network processing node. The control node may further receive a second query request, determine that forwarding information of a second packet matches the inbound forwarding rule, obtain the recorded inbound forwarding rule, and send the inbound forwarding rule to the second network processing node.

Abstract: Systems and methods are provided for operating a media transmission network. The system includes at least one destination device for receiving a plurality of media streams from a plurality of source devices. The system further includes a controller that is configured to, for each media stream of the plurality of media streams: determine a media property adjustment for the media stream based at least on the media stream; identify a source device from the plurality of source devices associated with generating the media stream; determine at least one device setting for the identified source device to apply the media property adjustment to the media stream; generate a control packet for configuring the identified source device based on the at least one device setting, the control packet including the at least one device setting; and transmit the control packet to the identified source device.

Abstract: Aspects of the disclosed technology comprise generating firewall rules based on traffic, outputting the generated firewall rules to an output file, and using the output file to set firewall rules in a network. The firewall rules may be generated without a priori knowledge of the network; alternatively no firewall rules are required. Generated rules may be tuned for user preferences to adjust for the number of generated firewall rules, and their over or under inclusiveness to non-historic traffic data.

Abstract: A method of performing resource discovery includes receiving, by a processing device, a resource identifier describing a resource of a computing cluster to be accessed by a workflow application. The method also includes sending the resource identifier to a container orchestration API to determine whether an endpoint exists for the resource. The method also includes, in response to an indication from the container orchestration API that the endpoint exists, receiving, from the container orchestration API, endpoint details used to access the resource, identifying an endpoint address based on the endpoint details, and binding the endpoint address to the resource in a runtime version of the workflow application to enable the workflow application to access the resource.

Abstract: A method, an apparatus, an electronic device and a computer readable storage medium for adjusting an instance number are provided. The method includes: acquiring an actual performance index of a current time window; determining a theoretical instance number corresponding to the actual performance index; and in response to the theoretical instance number being greater than an instance creating upper limit of a current edge computing node, requesting another edge computing node having an instance addition capability to jointly create an instance of a total number equal to the theoretical instance number.

Abstract: An optimizing agent of a network device that does not support low latency DOCSIS can identify traffic or packets associated with a client resource for an optimization service flow. For example, the optimizing agent can receive a priority notification associated with a client resource from a low latency controller that is indicative of a low latency requirement associated with the client resource. The optimizing agent identifies the traffic for the optimized service flow based on the priority notification. The identifying can require modifying one or more parameters of an existing service flow, creating a new service flow, or selecting an existing service flow with low latency. The identified traffic can be routed to the optimized service flow to achieve low latency or high QoS.

Abstract: An accurate monitoring system for a multi-tenant system monitors each data stream of the multi-tenant system and determines the identity of the tenant using each of the data streams, and the application that the tenant is accessing. Aspects of each data stream are aggregated by a bucket aggregator to track and record trends for each tenant and/or each application. The aggregated data could be filtered, sorted, and reported for accurate subscription billing for each of the tenants and/or applications within a multi-tenant system.