Abstract: A method for evaluating a load balancing (LB) mechanism, the method comprising: at a test system implemented using at least one processor: sending, via one or more paths comprising network nodes, a first set of test packets comprising transmit (TX) timestamps for evaluating a first LB mechanism; receiving, at a packet destination, the first set of test packets; generating receive (RX) timestamps for the first set of test packets at the packet destination; computing, by the packet destination or a packet analyzer, first in-flight metrics for the first set of test packets using the TX and RX timestamps, wherein computing the first in-flight metrics includes grouping the first set of test packets based on packet or flow characteristics and generating an average in-flight metric, a minimum in-flight metric, or a maximum in-flight metric for each of a plurality of groups; and evaluating the first LB mechanism using the in-flight metrics.

Abstract: An apparatus comprises a memory communicatively coupled to a processor. The memory is configured to store multiple deployment operations configured to control access to one or more portions of application data. The processor is configured to determine a deployment operation associated with a portion of the application data, perform multiple collected testing operations for the portion of the application data based at least in part upon the deployment operation, and determine pod data indicating multiple role parameters based at least in part upon the deployment operation. The role parameters are configured to indicate multiple testing operations on the portion of the application data. Further, the processor is configured to identify a pod that at least partially matches the pod data and trigger one or more distributed testing operations at the pod.

Abstract: An embodiment selects, using performance data of a plurality of paths, a first path, each path comprising a data communication path from a first network endpoint through a subset of a plurality of network elements in a data communication network to a second network endpoint. An embodiment adjusts a packet header of a data packet, wherein a parameter setting in the adjusted data packet header causes a first network element in the data communication network to forward the adjusted data packet to a next network element in the data communication network along the first path. An embodiment sends the adjusted data packet, wherein the adjusted data packet causes a first subset of the plurality of network elements in the data communication network to forward the adjusted data packet to the second network endpoint along the first path.

Abstract: Provided are a method and apparatus for supporting a remote access to an Internet of things (IoT) device connected to a private network. The apparatus may include a memory configured to store information and data received from or transmitted to other devices, and generated in the apparatus and store a port forwarding table, a transceiver circuit configured to receive a remote access request message including a service port number of an IoT device connected to a private network from a user equipment of a network operator connected to the router through a public network, and a processor circuit configured to perform port forwarding between the user equipment and the IoT device using a private IP address corresponding to the service port number of the IoT device based on the port forwarding table stored in the memory.

Abstract: Techniques for diagnosing anomalies (e.g., faults, degradation and/or loss of service) occurring in a passive optical network (PON) include integrating, based on temporal precedence, real-time diagnostic information from multiple (and typically mutually-exclusive) domains of the PON into an integrated, multi-domain graphical view. The integrated, multi-domain graphical view may include a scrolling timeline and may organize alarm and other domain-specific events, environmental data, support information, and data from other domains to detect temporal correlations between events occurring in the different domains and thereby determine sources of anomalies occurring within the PON and initiate mitigating actions.

Abstract: A distributed network includes a first group of computing devices. Each computing device is to be coupled to two neighbor computing devices of the first group of computing device and is to: (i) aggregate gradient values received from a first neighbor computing device with local gradient values to generate a partial aggregate of gradient values that are to train a neural network model; (ii) transfer the partial aggregate of gradient values to a second neighbor computing device; and repeat (i) and (ii) until a first aggregate of gradient values from the first group of computing devices is buffered at a first computing device of the first group of computing devices. The first computing device is to transfer the first aggregate of gradient values to a second group of computing devices of the distributed network for further aggregation.

Abstract: A network element for network access by a subscriber in a control and user plane separation architecture includes at least one processor and at least one memory. The at least one memory stores instructions that, when executed by the at least one processor, cause the network element to establish a PFCP session to program a set of packet forwarding rules for forwarding data traffic and facilitate network access by the subscriber according to a first set of QoS parameters. The set of packet forwarding rules associate the subscriber with at least a first subscriber group. The first subscriber group includes the first set of QoS parameters that are shared between the subscriber and one or more additional subscribers.

Abstract: The disclosure describes techniques for detecting network measurement inaccuracies through the detection of sender delays or packet drops. For example, a sender device of a test packet may determine whether the sender device is experiencing any issues in sending the test packet to a receiver device and notify a controller of the issues such that the controller may generate an indication that one or more Key Performance Indicator (KPI) measurements based on the test packets from the sender device are inaccurate and/or untrustworthy, remove the inaccurate KPI measurements, and/or adjust the inaccurate KPI measurements.

Abstract: Facilitating elastic distributed computing for resource intensive tasks including split rendering in advanced networks is provided herein. Operations of a system include receiving information indicative of a request for split rendering for an application executing at a user equipment. The information is received via a session description protocol session. The operations can also include, based on the information indicative of the request, determining that an available computational resource capacity at the user equipment is insufficient to process the application executing at the user equipment. Further, the operations can include, based on the determining, enabling a first rendering of a first portion of the application at a first device and a second rendering of a second portion of the application at a second device different from the first device.

Abstract: A method for fetching a content from a web server to a client device is disclosed, using tunnel devices serving as intermediate devices. The client device accesses an acceleration server to receive a list of available tunnel devices. The requested content is partitioned into slices, and the client device sends a request for the slices to the available tunnel devices. The tunnel devices in turn fetch the slices from the data server, and send the slices to the client device, where the content is reconstructed from the received slices. A client device may also serve as a tunnel device, serving as an intermediate device to other client devices. Similarly, a tunnel device may also serve as a client device for fetching content from a data server. The selection of tunnel devices to be used by a client device may be in the acceleration server, in the client device, or in both.

Abstract: Systems and methods for the dynamic selection of IP address in email platforms, and the synchronization of hostnames and IP addresses in such platforms, are disclosed.

Abstract: In some implementations, an event data analysis system may identify event data that indicates user interactions with an application, each of the user interactions corresponding to an interaction with data filters. The system may generate specificity scores, each of the specificity scores indicating, for a corresponding user interaction, a measure of specificity associated with data filters that correspond to the corresponding user interaction. The system may filter the event data stream based on the specificity scores. The system may generate at least one entropy value for at least one data filter, each entropy value indicating a rate of change of a corresponding data filter. The system may identify, based on the specificity scores and the at least one entropy value, a set of relevant filter values associated with the event data. The system may provide output indicating the set of relevant filter values.

Abstract: A computer-implemented method, according to one embodiment, includes causing a first fault injection configuration to be injected into a first node of a first edge site of a cloud environment, where the first edge site includes a plurality of nodes, and the cloud environment includes a second edge site. The method further includes computing a first minimum cost maximum flow value for the first fault injection configuration, and causing a second fault injection configuration to be injected into a second node of the second edge site for causing a second fault injection. A second minimum cost maximum flow value is computed for the second fault injection configuration. In response to a determination that a difference of the minimum cost maximum flow values is less than a predetermined threshold, one of the fault injection configurations is retained and the other fault injection configuration is discarded.

Abstract: A computing system accesses actual aggregate service group utilization values that correspond to ones of a plurality of intervals over a first period of time and that identify an aggregate service group bandwidth utilization by cable modems in a service group at a plurality of intervals, the first period of time including multiple second periods of time having a same time duration, each second period of time having I ordinal intervals, and estimated aggregate service group utilization values that correspond to the actual aggregate service group utilization values. The computing system determines an additional bandwidth quantity for the service group such that an aggregate probability over a predetermined period of time that the plurality of cable modems will exceed a current provisioned bandwidth of the service group and the additional bandwidth quantity is within a desired probability range. A computing system sends, to a destination, the additional bandwidth quantity.

Abstract: Disclosed herein are embodiments of systems, methods, and products comprise an analytic server, which improves security of a system. The analytic server may monitor the system by retrieving status information from various devices within the system. The analytic server may generate an attack tree model based on a set of aggregation rules that are configured based on the monitored status information. The analytic server may detect one or more attacks by associating the status information with corresponding nodes of the attack tree model and executing a logic of the attack tree model. The analytic server may determine aggregated impact and risk metrics and calculate an impact score for each attack based on aggregated impact and risk metrics. The analytic server may generate reports comprising the one or more attacks ranked based on the impact scores. The analytic server may respond to one or more attacks by taking automated actions.

Abstract: A system and method for comprehensive data utilization and tracking comprising an ontological engine which in some embodiments is configured to create and curate various industry-specific ontologies which can be used to provide deeper context to an enterprise's network traffic and data transmission. The system and method further comprise a tagging and tracking engine configured to inspect network packets, apply a first tag associated with an authentication object, apply a second tag associated with an identified ontology, and track the tagged packets as they traverse the enterprise network, generating data utilization tracking information as the packets move through the network. A scoring engine may leverage the data utilization tracking information in combination with user entity and behavior data to compute a risk score associated with data utilization on the enterprise network.

Abstract: The present disclosure relates to methods and systems for load balancing traffic per the capacities of direct IPs (DIPs). The methods and systems use latency measurements from each DIP to determine the capacity of each DIP. The methods and systems use the latency measurements to determine the weights for each DIP using an Integer Linear Program (ILP). The weights identify an amount of traffic to provide to each DIP. The methods and systems provide the weights for each DIP to a load balancer controller to program the load balancer dataplane with the weights.

Abstract: A topology-reprogrammable test environment is provided that can support the needs of CI/CD/CV in the field. The system disclosed provides a highly scalable network architecture to simplify the implementation of network slicing, TaaS and network CI/CD, and solves problems related to the complexity of cloud-native network (CNN) deployments. A Network Cell (NC), comprises or consists of a Containerized Network Function (CNF), a Containerized Digital Twin (CDT), and a Containerized Test Agent (CTA). The CDT has at least two personalities, e.g., an emulator of the CNF in the same NC or a nodal of the CNF. The choice of personality of the CDT is controlled by the CTA of the NC. A number of NCs use a 3D IP address to interconnect and form a new kind of CNN over the infrastructure of VRs.

Abstract: A dynamically-managed microservices platform. The microservices platform is configured to selectively accept admission of microservices and to selectively throttle microservices based on a continually-trained machine learning model. The system is configured to implement multiple microservice lifecycle strategies, where individual ones of the multiple microservice lifecycle strategies use a prediction model having long-term and short term demand predictions. One or another of the multiple microservice lifecycle strategies are invoked at different times under different conditions. Under a first set of conditions, a prediction model is used to select a first strategy to admit or throttle a microservice based upon long-term or short-term demand predictions. Under a second set of conditions, the prediction model is used to select a different strategy to admit or throttle a microservice.

Abstract: Certain aspects of the disclosure provide a method for detecting data collection errors by processing error data with a plurality of regression models to generate a plurality of predicted error rates over a plurality of time intervals. The method includes determining an error mode by applying a set of policy rules optimized for determining the error mode to the plurality of predicted error rates.