Abstract: Processing an ingress packet in a packet pipeline to determine a forwarding rule includes identifying a matching rule in each forwarding table in the pipeline. Prefix lengths of the respective matching rules are compared. The matching rule with the greatest prefix length serves as the basis for forwarding an egress packet.

Abstract: A method, computer program product, and a system where a processor(s) determines that a destination has been retained as a link in an application. The processor(s) monitors connections of the application to the destination retained as the link, where connecting is providing a locator of the destination to a server(s) to obtain an address for the destination. The processor(s) determines an average time period measured from providing the locator to the server(s) to obtaining the address. The processor(s) retains the returned address for each connection within a given time period. The processor(s) determines that the application has initiated a new connection to the destination and the new connection is incomplete after a time period calculated relative to the average time period has lapsed. The processor(s) provides selectable options in a user interface of the application that are the retained address(es).

Abstract: A home appliance comprises a communication circuitry configured to be operable in a first mode or a second mode, an input unit including a button to receive an input to control the home appliance, a memory and at least one processor to control the communication circuitry to operate in the first mode in response to detecting the button being pressed, establish a first communication interface with an external terminal, obtain network set-up information including a Service Set Identifier (SSID) of an external wireless access point apparatus and authentication information, the SSID is selected via the external terminal and the authentication information was previously stored in the external terminal, control the communication circuitry to operate in the second mode, establish a second communication interface with the external wireless access point apparatus using the stored network set-up information and control the communication circuitry to access an external server.

Abstract: A controlling device is disclosed for Ethernet virtual private network (EVPN). According to an embodiment, the controlling device determines a first provider (P) device which is to handle broadcast, unknown unicast or multicast (BUM) traffic from a first provider edge (PE) device in an EVPN instance, on behalf of remaining PE devices in the same EVPN instance. The controlling device performs route reflection from the remaining PE devices to the first PE device such that the first PE device knows that BUM traffic needs to be forwarded to the first P device. The controlling device configures the first P device such that upon receipt of BUM traffic from the first PE device, the first P device can forward the BUM traffic to the remaining PE devices.

Abstract: Network entities may indicate and negotiate one or more new protocols for communications using a current protocol. Indications may include one or more protocols which are supported, one or more protocols which are preferred, and the level of desire of preferences. Indications may further include schedules of times during which certain protocols are supported and/or schedules of functions for which certain protocols are preferred. Indications may be evaluated and acted upon immediately or stored for future reference. Evaluation may include comparison of relative desire levels and needs of various entities. Protocols may be messaging protocols, transport protocols, or combinations thereof.

Abstract: Techniques for securing a single page application (SPA) are provided. An API server that receives an API call from an SPA to navigate a first user to a first state of the SPA navigates the first user to the first state of the SPA and generates a first token indicating that the first user has accessed the first state of the SPA. When the API server receives a request from the first user to navigate to a second state of the SPA (the request including the first token), the API server verifies that the first token indicating that the first user has accessed the first state of the SPA is valid for the second state of the SPA before navigating the first user to the second state of the SPA. Additionally, the API server expires the first token upon navigating the first user to the second state of the SPA.

Abstract: A method by which a server controls a home device is provided. The method includes receiving a trigger signal generated by a sensor in a home in response to a mobile device being present at a specific location in the home, determining a home device corresponding to the specific location by using the trigger signal, selecting context information related to an operation of the determined home device from among context information received from the mobile device, and providing the selected context information to the home device.

Abstract: A method includes storing as communications data at least a portion of received electronic communications, such as emails, that are of interest to user; processing the stored communications data to identify at least one action item that pertains to the user; storing results of the processing including text descriptive of the at least one identified action item in a results repository; and outputting stored results in the results repository to a user device for review by the user. Also disclosed is a computer program product and a system that are configured to implement the method.

Abstract: Example methods and systems for packet handling based on a multiprocessor architecture configuration are provided. One example method may comprise: in response to receiving a first ingress packet that requires processing by a first virtual central processing unit (VCPU) running on the first node, steering the first ingress packet towards a first receive (RX) queue and performing local memory access on the first node to access the first ingress packet from the first RX queue. The method may also comprise: in response to receiving a second ingress packet that requires processing by a second VCPU running on the second node, steering the second ingress packet towards a second RX queue and performing local memory access on the second node to access the second ingress packet from the second RX queue.

Abstract: Certain embodiments provide systems and methods to perform in-line translation of message content according to FIX protocol variants in a trading system. An example method includes receiving, at a computing device, a message formatted according to a FIX protocol, the message including message content and a message wrapper, the message wrapper providing session and delivery information for the message to a target. The example method includes performing in-line translation of the message content of the received message to adjust the message content according to a predefined set of rules without affecting the message wrapper (with the possible exception of the message size) and message routing session. The example method includes facilitating routing of the message to the target based on the message wrapper.

Abstract: Systems and methods for a VRF-aware socket are provided. According to one embodiment, a user-space application of a network device, maintaining a virtual routing table for each of multiple VRF domains, creates a VRF-aware listening socket. The socket includes information regarding: (i) which of the virtual routing tables is to be used to look up routing or forwarding information for outgoing traffic; (ii) the VRF domain(s) from which the socket is able to receive incoming traffic; and/or (iii) the last VRF domain from which the socket read data. The socket is configured to be a super-VRF listening socket capable of receiving incoming traffic from all VRF domains by setting its VRF domain(s) to a wildcard value. The super-VRF listening socket then receives from a client device associated with a first VRF domain of the multiple VRF domains a request on behalf of the user-space application.

Abstract: This patent provides a deadlock-free adaptive routing apparatus, method and computer storage medium for packets in two-dimensional mesh network based on the overlapping virtual network partitioning scheme, including: according to the offset between the source node and the destination node of the packet along the x-dimension or y-dimension, then use the x dimension and the y dimension to partition the two-dimensional mesh network into virtual networks; corresponding to each of the partitioned virtual networks, corresponding packet classes are respectively set, then merge virtual networks; based on the class the packet, inject the packet into the corresponding merged virtual network to route. This routing method balances utilization of the channels and improves efficiency of the data transmission.

Abstract: A method and system for multi-layer traffic steering for enabling service chaining over a software defined network (SDN) are provided. The method is performed by a central controller of the SDN and includes receiving at least one service chaining rule defining at least one value-added service (VAS) to assign to an incoming traffic flow addressed to a destination server; analyzing each of the at least one received service chaining rule to determine if an application-layer steering is required; generating at least one application-layer steering rule, upon determining that an application-layer steering is required; generating at least one network-layer steering rule, upon determining that an application-layer steering is not required; and programming a multi-layer steering fabric with the generated at least one of network-layer steering rule and application-layer steering rule.

Abstract: A content distribution network includes a first server in communication with an anycast server that provides content via a unicast signal, and with a multicast server that provides the content via a multicast signal. The first server is configured to receive a list of source addresses associated with the content, and to provide a metadata file including an anycast Internet protocol address of the anycast server from the list of source addresses as an Internet protocol address of the content in response to a first request for the content. When the number of client devices requesting the content exceeds a first threshold, the first server receives an updated list of sources including a multicast Internet protocol address of a multicast server, and provides the multicast Internet protocol address of the multicast server as the Internet protocol address of the content in the metadata file.

Abstract: In some implementations, an audit platform may determine a first availability of a particular IP address based on data identifying IP addresses assigned for wireless and/or wireline services, a second availability of the particular IP address based on data identifying contact and registration information for IP addresses, and a third availability of the particular IP address based on data identifying active IP addresses associated with a backbone router. The audit platform may determine a fourth availability of the particular IP address based on data identifying responses to ping commands associated with the IP addresses, and a fifth availability of the particular IP address based on data identifying responses to traceroute commands associated with the IP addresses. The audit platform may calculate a confidence score, indicating a confidence level that the particular IP address is available, based on the first availability, second availability, third availability, fourth availability, and fifth availability.

Abstract: Systems and methods for processing alerts indicative of conditions of nodes of a computing infrastructure are herein disclosed as comprising, in an implementation, generating a node hierarchy comprising nodes associated with a service model, wherein relationships between the nodes are based on impact rules, identifying alerts related to the node hierarchy, wherein the alerts are indicative of impairments affecting at least a portion of the node hierarchy, and performing impact calculation for nodes of the node hierarchy based on the identified alerts. In an implementation, the impact values may be calculated in parallel for nodes indicated for processing. In an implementation, the nodes associated with the service model represent infrastructure or applicative resources and comprise nodes included in the service model and nodes related to, but not included in, the service model.

Abstract: Some implementations of the disclosure are directed to receiving over a distributed ledger network, at an edge network device, a network configuration update transaction, the network configuration update transaction including an update to a configuration of a network device group including a plurality of network devices, where the edge network device is communicatively coupled to one or more of the plurality of network devices; validating, at the edge network device, that the transaction was sent by a cloud-based networking management platform that manages configurations of network devices that are members of the network device group; and after validating the transaction, updating at the edge network device a local copy of a distributed ledger associated with the distributed ledger network to include the update to the network device group configuration.

Abstract: There are provided a method and a system for controlling downloading of a file in a cloud storage service. The method can be executed at a server. The method comprises appreciating an activity parameter representative of total download activity of a file from a cloud storage service via a communication network, and, responsive to the activity parameter being above a pre-determined threshold, applying a remedial action to the downloading of the file, such that the remedial action is applied only to downloading of the file via a data transmittal path that a user has received from the user who uploaded the file to the cloud storage service, and downloading of the file by the user who uploaded the file is not affected.

Abstract: Systems and methods for providing location-restricted message exchange include receiving, by a system provider device over a network from a sender device, a location-restricted message that includes sender message information and first location information that is associated with a first location. The system provider device then receives, over the network from a first receiver device, second location information that is associated with a second location. The system provider device then determines that the second location is in a limited geographic message exchange area with the first location and, in response, sends at least some of the sender message information by the system provider device over the network to the first receiver device. They system provider device may use filtering criteria provided by the first or second receiver device and use that filtering criteria to determine whether to send the sender message information to the first or second receiver device.

Abstract: Systems and methods for application of virtual host channel adapter configuration policies. An exemplary embodiment can provide a host channel adapter (HCA) with a control circuit and a memory, and at least one port operative to connect the HCA to a network fabric. A software driver of the HCA can provide a control API that exposes functionality to hyper-privileged software executing on the host. The hyper privileged software, through the control API, can request registration of a virtual HCA (vHCA) with a virtual function of the HCA. The HCA can forward the registration request to a subnet manger, which can retrieve configuration policies from a cache and return the policies to the HCA for implementation with the virtual function of the HCA.