Abstract: A network management system (NMS) is described that provides a granular troubleshooting workflow at an application session level using an application session-specific topology from a client device to a cloud-based application server. During an application session of a cloud-based application, a client device running the application exchanges data through one or more access point (AP) devices, one or more switches at a wired network edge, and one or more network nodes, e.g., switches, routers, and/or gateway devices, to reach a cloud-based application server. For a particular application session, the NMS generates a topology based on network data received from a subset of network devices, e.g., client devices, AP devices, switches, routers, and/or gateways, that were involved in the particular application session over a duration of the particular application session. In this way, the NMS enables backward-looking troubleshooting of the particular application session.

Abstract: Systems and methods for automatically prioritizing computing resource configurations for remediation include receiving information describing configuration issues that may result in impaired system performance or unauthorized access, parsing that information and automatically analyzing configuration details of a user's private computing environment to determine that assets provide an environment in which configuration issues may be exploited to produce undesired results. Such systems and methods can generate assessments indicating the likelihood an issue can be exploited and potential impacts of the issue being exploited. Such systems and methods can use these assessments to generate a report prioritizing remediation of specific configuration issues for specific vulnerable assets based on the actual configuration of the user's computing resources and the data managed using those resources.

Abstract: A building device including one or more memory devices configured to store instructions thereon, that, when executed by one or more processors, cause the one or more processors to implement a software gateway configured to receive one or more messages from building equipment, receive, based on the one or more messages, one or more software updates for the software gateway, wherein the one or more software updates are updates for communicating with the building equipment, communicate with the building equipment based on the one or more software updates and receive data describing the building equipment, and cause a configuration image to be generated for the software gateway based on the data describing the building equipment, the configuration image indicating a configuration of the software gateway for performing one or more gateway services.

Abstract: Methods, apparatus, and machine-readable storage media to monitor media presentations are disclosed. A disclosed example apparatus includes a locator to compare a location of a mobile device with a set of reference locations at which audio monitoring is to be performed. The disclosed example apparatus further includes an audio receiver to enable a microphone of the mobile device to collect audio for media monitoring when (1) the location of the mobile device corresponds to a first one of the reference locations and (2) a media presentation monitor at the first one of the reference locations indicates a likelihood of media being presented at the first location satisfies a threshold. In some disclosed examples, the audio receiver of the example apparatus is to disable the microphone from collecting audio for media monitoring when the location of the mobile device does not correspond to any of the reference locations.

Abstract: A packet transmission method includes: receiving, by a first network device, a first packet sent by a previous-hop device of the first network device, where the first packet includes an SR header; generating, by the first network device, cache index information of the SR header, and storing the cache index information and the SR header; generating, by the first network device, a second packet based on the first packet, where the second packet includes the cache index information but does not include the SR header; and sending, by the first network device, the second packet to a second network device.

Abstract: A system includes a processor and memory storing instructions that cause the processor to receive, from a client device, inputs defining associations between one or more control objectives and one more policies, wherein the one or more control objectives define one or more functions to be performed to comply with the one or more policies. The processor may map the one or more policies associated with the one or more control objectives to an application environment and receive, from the client device or a different client device, a change set to an application in the application environment, wherein the change set comprises one or more modifications to the application. The processor may then determine whether the change set adheres to the one or more policies and restrict implementation of the change set in response to determining that the change set does not adhere to the one more policies.

Abstract: A device management apparatus includes a communicator transmitting and receiving various types of data to and from the device; a management ID issuer issuing a unique management ID to the device; a storage that stores device specifying information of the device, the device specifying information including the management ID and predetermined device identification information; a display displaying, in a list of devices to be managed, the device to which the management ID is issued; and a controller controlling the communicator, the management ID issuer, the storage, and the display, where when the communicator has received a connection request from a device via the network, the controller judges whether the device has a management ID, and if the device has no management ID, the controller controls the management ID issuer to issue a unique management ID to the device and controls the communicator to transmit the unique management ID.

Abstract: A data processing system implements techniques for restricting which notifications and/or conversations are presented on a plurality of user devices associated with a user. Each user device is associated with a device category. The device categories are associated with time category information that associates each of a plurality of time periods with permitted device category information that indicates which categories of user devices associated with the user are permitted to present notifications that messages have been received for a particular time period and the categories of messages for which the notifications may be presented for that time period and/or which categories of conversations may be presented or hidden. The message category may be determined based on user input or by analyzing the message content with a machine learning model configured to predict the message category.

Abstract: A method and a system including a data plane service implementation (DPSI) platform operably accessible via application programming interfaces (APIs), implement packet processing network functions as a service. The APIs allow creation, customization, and configuration of network service-supporting application logics (ALs) and network service packages. The DPSI platform creates a packet processing primitive (PPP) by applying a use-case-specific primitive specification to a corresponding primitive template retrieved from a repository, and stores the PPP in a repository. Each PPP instance is implemented as an independent, self-contained, functional part of a whole data plane packet processing network function. The DPSI platform creates an AL based on a use-case-specific AL specification using one or more PPPs corresponding to the use-case-specific AL specification, and stores the AL in another repository.

Abstract: State information of a radio-based application, used to process messages of the application, is made accessible from a first compute instance and a second compute instance at a virtualization server. The first instance is assigned to process a first portion of a workload of the application, including a message which comprises a result of a network function executed at a network function accelerator of the server. In response to determining that a condition for migrating workload from the first compute instance has been met, an additional message of the first portion is directed to the second compute instance. The second compute instance processes the additional message using the state information.

Abstract: Media, methods, and systems are disclosed for mitigating network resource contention. Event scheduling details are received regarding one or more virtual events. In response to determining that an upcoming virtual event will begin within a predetermined time threshold, various steps are performed. First, a predicted number of event participants is determined. Next, database artifacts associated with the upcoming virtual event are prefetched. Then static event display resources are accessed prior to a start of the upcoming virtual event, and the database artifacts and the static event display resources are cached. A network protocol request to access network resources is received from a client device. The database artifacts and the static event display resources are pushed to a client-side cache associated with the client device, and a minimal network response is transmitted to the client device.

Abstract: The present application discloses a method for modifying an internal configuration of a virtual machine, a system and a device, wherein the method is applied to a virtual machine installed with a proxy service therein, and the proxy service is configured for, after the proxy service itself is started up, sending a datum request to a preset IP address via a virtual network card corresponding to the virtual machine. The method includes, when there is a target virtual network card sending a datum request to the preset IP address, according to a predetermined corresponding relation between virtual network cards and virtual machines, determining a target virtual machine corresponding to the target virtual network card; from a database, obtaining target configuration data corresponding to the target virtual machine.

Abstract: An apparatus can be configured to receive monitoring information associated with a machine learning (ML) or artificial intelligence (AI) workload implemented by an edge compute unit of a plurality of edge compute units. Status information corresponding to a plurality of connected edge assets can be received, the plurality of edge compute units and connected edge assets included in a fleet of edge devices. A remote fleet management graphical user interface (GUI) can display a portion of the monitoring or status information for a subset of the fleet of edge devices, based on a user selection input, and can receive a user configuration input indicative of an updated configuration for at least one workload corresponding to a pre-trained ML or AI model deployed on the at least one edge compute unit. A cloud computing environment can transmit control information corresponding to the updated configuration to the at least one edge compute unit.

Abstract: An example network analysis system includes a memory storing telemetry data received from a plurality of network devices, the plurality of network devices includes extract entity information and connectivity information from the received telemetry data, wherein the entity information represents one or more network devices of the plurality of network devices and the connectivity information represents network connections between one or more devices of the plurality of network devices; and store the connectivity information and entity information as a network topology graph in a graph database, wherein the entity information is stored as nodes of the network topology graph and the connectivity information is stored as edges of network topology graph, and wherein the network topology graph represents an organization level topology of the organization network.

Abstract: Systems and methods include receiving Operations, Administration, Maintenance, and Provisioning (OAM&P) data from an optical network; providing a Graphical User Interface (GUI) based on the OAM&P data with the GUI including a topology view; and providing a visualization that includes one of a power readings graph, a spectral analysis graph, and a spectral allocation graph, in the GUI, and the visualization is positioned logically next to the topology view.

Abstract: This application provides a VNF instantiation method and apparatus, applied to various NFV systems, to implement an existing VNFD model—defined VNF. The method includes: An NFVO obtains a VNFD, where the VNFD is for instantiating a VNF, the VNFD includes first indication information and resource requirement information of a first internal network, and the first indication information indicates that the resource requirement information of the first internal network is externally visible. Then, the NFVO sends an external network instantiation request to a VIM, where the external network instantiation request is used by the VIM to instantiate, based on the resource requirement information of the first internal network, an external network connected to the VNF. Then, the NFVO sends a VNF instantiation request to a VNFM. The VNF instantiation request is used by the VNFM to instantiate the VNF based on the VNFD.

Abstract: Efficient scaling of in-network compute operations to large numbers of compute nodes is disclosed. Each compute node is connected to a same plurality of network compute nodes, such as compute-enabled network switches. Compute processes at the compute nodes generate local gradients or other vectors by, for instance, performing a forward pass on a neural network. Each vector comprises values for a same set of vector elements. Each network compute node is assigned to, based on the local vectors, reduce vector data for a different a subset of the vector elements. Each network compute node returns a result chunk for the elements it processed back to each of the compute nodes, whereby each compute node receives the full result vector. This configuration may, in some embodiments, reduce buffering, processing, and/or other resource requirements for the network compute node or network at large.

Abstract: A system comprises a virtualized network function (VNF) instantiation method, a network function virtualization (NFV) orchestrator (NFVO), a virtualized infrastructure manager (VIM), a VNF manager (VNFM), and a system where when a VNF instance for implementing a function of a multi-access edge application is deployed on an edge cloud using an NFV management and orchestration (NFV-MANO) system structure framework, a location of the VNF instance for implementing the application is no longer determined according to an affinity/anti-affinity rule. Instead, a mapping relationship between a different virtual resource location area on the edge cloud and a quality of service (QoS) attribute is established, so that a virtual resource location area that meets a QoS attribute of a VNF can be dynamically matched for the VNF based on the QoS attribute of the VNF.

Abstract: Techniques are disclosed for generating a combined visual representation of subsets of devices associated with corresponding sub-networks of a private network, where at least two devices in corresponding sub-networks share a same private internet protocol (IP) address. The system generates a separate profile for each device using a combination of elements including at least (a) a private IP address corresponding to the device and (b) a network identifier corresponding to a sub-network associated with the device. These sub-networks and their constituent devices may be visually represented in corresponding user interface elements.

Abstract: A system is disclosed for storage, processing, and accessing of data. The system includes a front end system and a back end system communicatively connected to the front end system. A front end system is configured to provide one or more user interfaces configured to store, process, and access data in a first data server, in response to user input, by sending messages to the back end system. The back end system includes the first data server and one or more processing servers. The one or more processing servers are configured to process messages received from the front end system by accessing in the first data server to perform one or more operations specified by the messages. The back end system also includes a blockchain server configured to maintain a record of changes made to data in the first data server by the one or more processing servers.