Abstract: Edge clusters execute in a plurality of regional clouds of a cloud computing platforms, which may include cloud POPs. Edge clusters may be programmed to control access to applications executing in the cloud computing platform. Edge clusters and an intelligent routing module route traffic to applications executing in the cloud computing platform. Cost and latency may be managed by the intelligent routing module by routing requests over the Internet or a cloud backbone network and using or bypassing cloud POPs. The placement of edge clusters may be selected according to measured or estimated latency. Latency may be estimated using speed test servers and the locations of speed test servers may be verified.

Abstract: Techniques are provided for predicting data for precaching and/or recaching at a computer cache of a computer environment. Based on a detected login event of a user, a precache API request can be generated for a type of API data request most often utilized by the user over a predetermined time period. An API gateway may use the precache API request to obtain a corresponding precache API response from a microservice. The precache API response may be stored together at an API gateway cache. Subsequently, when information from an API call substantially matches a cache key corresponding to the precache API response, the precache API response can be provided to the user instead of obtaining the response from the microservice. Additionally, the precache API request may include a recache value that can be used to iteratively obtain up-to-date precache API responses from the microservice.

Abstract: A first computer is connected to a communication network and is assigned a first network address on the communication network. A second computer is connected to the communication network and is assigned the first network address on the communication network. A first message, including the first network address and a request to generate a random number, is transmitted by the first computer via the communication network. A first reply message, including the random number, is received from the second computer in response to the request. A second network address is assigned for the second computer by the first computer based on the random number. A second message, including the second network address and the random number, is transmitted by the first computer via the communication network.

Abstract: A route advertisement method and a device for improving efficiency of generating a route advertisement message are disclosed. The method is applied to a network including a first network device and a second network device, and the first network device and the second network device establish a user datagram protocol (UDP)-based border gateway protocol (BGP) connection. The method includes: The first network device obtains one or more route sending groups, where each of the one or more route sending groups includes one or more pieces of route information; the first network device separately generates at least one route advertisement message based on each of the one or more route sending groups, each of the at least one route advertisement message includes the one or more pieces of route information in the route sending group corresponding to the route advertisement message; and the first network device sends the route advertisement message to the second network device through the BGP connection.

Abstract: An apparatus and a method for generating a descriptor for a network slice are provided. The apparatus includes a transceiver, a memory storing one or more instructions, and at least one processor configured to execute the one or more instructions stored in the memory to obtain requirements for a network slice, determine at least one of a plurality of network slice templates (NSTs), a plurality of network slice descriptors (NSLDs), or a plurality of network slice instances (NSIs), based on the obtained requirements, when at least one of the plurality of NSTs is determined, determine at least one specific node to substitute for a plurality of abstract nodes included in the at least one of the plurality of NSTs, based on the obtained requirements, and generate a descriptor for a network slice, based on the determined at least one specific node.

Abstract: Embodiments of the disclosure provide systems and methods for migrating cloud-based content between storage locations while maintaining availability of the content being migrated. Embodiments described herein allow data undergoing migration, even data that is inflight, to be accessed, edited, copied, moved, and/or deleted without downtime, blackout periods, or other restrictions.

Abstract: Systems and methods for coalescing and/or aligning publications in a publication/subscription architecture to reduce the number of publication events and to improve the performance of microservices in a communications network are provided. A method, according to one implementation, includes the step of obtaining client-based tolerance input with respect to a plurality of subscriptions requested by a plurality of clients in a publication/subscription system. Based on the client-based tolerance input, the method also includes the step of adjusting the timing of publications to reduce the phase variability of the plurality of subscriptions.

Abstract: An example operation may include one or more of receiving blockchain specification information, generating one or more security configuration files for a blockchain based on the blockchain specification information, and launching the blockchain on a host platform, and hooking into the host platform via one or more modules which configure security settings of the blockchain based on the one or more security configuration files.

Abstract: Techniques for identifying a visitor device to a website may include capturing device identification information of the visiting device(s). The identification information may include device fingerprints, cookies, domain user identifications and/or other identifiers (e.g., IP addresses, visiting history, etc.). Based on the device identification information, a device graph including a plurality of nodes may be constructed by associating the devices with nodes and connecting the nodes to form the device graph. A community detection algorithm may be applied to the device graph to determine community information for the nodes. Using the identification information and the community information, visitor profiles may be generated, which may be used to identify visiting devices to the website.

Abstract: Various aspects of the present disclosure generally relate to wireless communication. In some aspects, a user equipment (UE) may receive configuration information to configure a sidelink channel, to be utilized by the UE to conduct groupcast sidelink communication, with a plurality of bandwidth parts. The UE may transmit or receive data based at least in part on the plurality of bandwidth parts. Numerous other aspects are provided.

Abstract: Configuring a mesh network of node devices for routing data is described. Based on detecting a connection to a second device, a first node device sends a mesh node signature to the second device and receives a mesh node signature from the second device. The mesh node signature list of the first node device is updated to include the mesh node signature of the second device. If mesh network requirements are satisfied based on the mesh node signature list, a mesh network configuration is generated by the first node device based on mesh network configuration rules and the updated mesh node signature list. The mesh network configuration is sent to at least the second device by the first node device based on the mesh node signature list. The first node device routes network traffic data to at least the second device based on the mesh network configuration.

Abstract: Techniques for orchestration of directory management updates across regions of a provider network are described. A method for orchestration of directory management updates across regions may include receiving a request at a service in a home region of a provider network to perform a cross-region service update, executing a cross-region workflow corresponding to the cross-region directory service update, and updating one or more resources of the service in each of a plurality of regions of the provider network based on the cross-region workflow.

Abstract: A media stream is transmitted from a server device to a client device. The client device (10) transmits set-up request messages (43a), discovery messages (44b) and a play command message (45a). The server receives versions of the set-up request messages 43b), the discovery message (44b) and the play message (45b) with matching identifier in the payloads if the messages. The server device (12) receives the discovery messages (44b) on a predetermined port and stores information recording that the discovery messages (44b) have been received, at least when no corresponding set-up request message 43b has been received before. The server device (12) compares the identifiers from the received set up request message (43b) and the discovery message (44b) according to the information recording reception, at least when the discovery message (44b) has been received before the set-up request message (43b).

Abstract: Techniques for combining the functionality of fabric interconnects and switches (e.g., Top-of-Rack (ToR) switches) into one network entity, thereby reducing the number of devices in a fabric and complexity of communications in the fabric. By collapsing FI and ToR switch functionality into one network entity, server traffic may be directly forwarded by the ToR switch and an entire tier is now eliminated from the topology hierarchy which may improve the control, data, and management plane. Further, this disclosure describes techniques for dynamically managing the number of gateway proxies running on one or more computer clusters based on a number of managed switch domains.

Abstract: A media stream sending method provides a live media stream for a client that enters a live broadcast room. A proxy server receives, from a first client, a first live broadcast room request message for requesting to enter the live broadcast room; the proxy server determines a role of the first client based on the first live broadcast room request message; and if the role of the first client is a slave user, the proxy server sends a first live media stream cached in the proxy server to the first client, where the first live media stream is a media stream that is sent by a media server to a second client through the proxy server, and a role of the second client is a master user.

Abstract: There is provided mechanisms for configuration of parameters for a networked device to be provisioned in a network. A method is performed by a device configuration node. The method includes obtaining a request for configuration of parameters for the networked device. The request indicates that the networked device is of a certain device type. The method includes selecting a template from a set of templates stored in a database. The template is selected based on the certain device type. The method includes providing configuration of at least a subset of the parameters for the networked device based on the template.

Abstract: A system for enabling users to register to use external financial services comprises a central office comprising an operating platform including a communication interface and a user database having a plurality of records for individual users; wherein the central office communicates via the communication interface with a plurality of remote formless, self-service registration stations; whereby a registration station scans an identification card with a card scanner, photographs the user to create a verification image and records a biometric parameter unique to the user, whereupon the registration station transmits an image of the identification card, the biometric parameter and the verification image to the central office; wherein the operating platform translates text from the identification card and creates a record for the user and wherein the operating platform uses the translated text to populate fields in the user record and retrieves and displays the record to an administrator for review.

Abstract: Leveraging non-transient or persistent device identifiers to enforce device quarantine instead of IP addresses accommodates the transient associations of IP addresses to devices without compromising the effectiveness of quarantine. When a device has been determined to be compromised and is quarantined, the quarantine of the device is enforced using the IP address of the device. However, IP address assignment is transient. With each connection, a device can be assigned a different IP address. After a connection is established, a gateway can collect a device identifying value(s) that persists across network connections (e.g., host identifier (hostid) and device serial number). With a persistent device identifier, a quarantine list can be enforced in a data/forwarding plane regardless of a compromised device being assigned different network addresses.

Abstract: Systems, methods, and software described herein manage server connection resets based on domain name server (DNS) information. In one implementation, a firewall may receive a reverse DNS request from a computing system and communicate a request to a DNS security service to determine whether a destination associated with the reverse DNS request is malicious. The firewall further receives a response from the DNS security service that indicates that the destination is malicious and, when the response indicates that the destination is malicious, communicates a reset command to the destination to reset a connection between the destination and the computing system.

Abstract: For a network control system that receives, from a user, logical datapath sets that logically express desired forwarding behaviors that are to be implemented by a set of managed switching elements, a controller for managing several managed switching elements that forward data in a network that includes the managed switching elements is described. The controller includes a set of modules for detecting a change in one or more managed switching elements and for updating logical datapath set based on the detected change. The logical datapath set is for subsequent translation into a set of physical forwarding behaviors of the managed switching elements.