Abstract: A network element for network access by a subscriber in a control and user plane separation architecture includes at least one processor and at least one memory. The at least one memory stores instructions that, when executed by the at least one processor, cause the network element to establish a PFCP session to program a set of packet forwarding rules for forwarding data traffic and facilitate network access by the subscriber according to a first set of QoS parameters. The set of packet forwarding rules associate the subscriber with at least a first subscriber group. The first subscriber group includes the first set of QoS parameters that are shared between the subscriber and one or more additional subscribers.

Abstract: The disclosure describes techniques for detecting network measurement inaccuracies through the detection of sender delays or packet drops. For example, a sender device of a test packet may determine whether the sender device is experiencing any issues in sending the test packet to a receiver device and notify a controller of the issues such that the controller may generate an indication that one or more Key Performance Indicator (KPI) measurements based on the test packets from the sender device are inaccurate and/or untrustworthy, remove the inaccurate KPI measurements, and/or adjust the inaccurate KPI measurements.

Abstract: Facilitating elastic distributed computing for resource intensive tasks including split rendering in advanced networks is provided herein. Operations of a system include receiving information indicative of a request for split rendering for an application executing at a user equipment. The information is received via a session description protocol session. The operations can also include, based on the information indicative of the request, determining that an available computational resource capacity at the user equipment is insufficient to process the application executing at the user equipment. Further, the operations can include, based on the determining, enabling a first rendering of a first portion of the application at a first device and a second rendering of a second portion of the application at a second device different from the first device.

Abstract: A method for fetching a content from a web server to a client device is disclosed, using tunnel devices serving as intermediate devices. The client device accesses an acceleration server to receive a list of available tunnel devices. The requested content is partitioned into slices, and the client device sends a request for the slices to the available tunnel devices. The tunnel devices in turn fetch the slices from the data server, and send the slices to the client device, where the content is reconstructed from the received slices. A client device may also serve as a tunnel device, serving as an intermediate device to other client devices. Similarly, a tunnel device may also serve as a client device for fetching content from a data server. The selection of tunnel devices to be used by a client device may be in the acceleration server, in the client device, or in both.

Abstract: Systems and methods for the dynamic selection of IP address in email platforms, and the synchronization of hostnames and IP addresses in such platforms, are disclosed.

Abstract: In some implementations, an event data analysis system may identify event data that indicates user interactions with an application, each of the user interactions corresponding to an interaction with data filters. The system may generate specificity scores, each of the specificity scores indicating, for a corresponding user interaction, a measure of specificity associated with data filters that correspond to the corresponding user interaction. The system may filter the event data stream based on the specificity scores. The system may generate at least one entropy value for at least one data filter, each entropy value indicating a rate of change of a corresponding data filter. The system may identify, based on the specificity scores and the at least one entropy value, a set of relevant filter values associated with the event data. The system may provide output indicating the set of relevant filter values.

Abstract: A computer-implemented method, according to one embodiment, includes causing a first fault injection configuration to be injected into a first node of a first edge site of a cloud environment, where the first edge site includes a plurality of nodes, and the cloud environment includes a second edge site. The method further includes computing a first minimum cost maximum flow value for the first fault injection configuration, and causing a second fault injection configuration to be injected into a second node of the second edge site for causing a second fault injection. A second minimum cost maximum flow value is computed for the second fault injection configuration. In response to a determination that a difference of the minimum cost maximum flow values is less than a predetermined threshold, one of the fault injection configurations is retained and the other fault injection configuration is discarded.

Abstract: A computing system accesses actual aggregate service group utilization values that correspond to ones of a plurality of intervals over a first period of time and that identify an aggregate service group bandwidth utilization by cable modems in a service group at a plurality of intervals, the first period of time including multiple second periods of time having a same time duration, each second period of time having I ordinal intervals, and estimated aggregate service group utilization values that correspond to the actual aggregate service group utilization values. The computing system determines an additional bandwidth quantity for the service group such that an aggregate probability over a predetermined period of time that the plurality of cable modems will exceed a current provisioned bandwidth of the service group and the additional bandwidth quantity is within a desired probability range. A computing system sends, to a destination, the additional bandwidth quantity.

Abstract: Disclosed herein are embodiments of systems, methods, and products comprise an analytic server, which improves security of a system. The analytic server may monitor the system by retrieving status information from various devices within the system. The analytic server may generate an attack tree model based on a set of aggregation rules that are configured based on the monitored status information. The analytic server may detect one or more attacks by associating the status information with corresponding nodes of the attack tree model and executing a logic of the attack tree model. The analytic server may determine aggregated impact and risk metrics and calculate an impact score for each attack based on aggregated impact and risk metrics. The analytic server may generate reports comprising the one or more attacks ranked based on the impact scores. The analytic server may respond to one or more attacks by taking automated actions.

Abstract: A system and method for comprehensive data utilization and tracking comprising an ontological engine which in some embodiments is configured to create and curate various industry-specific ontologies which can be used to provide deeper context to an enterprise's network traffic and data transmission. The system and method further comprise a tagging and tracking engine configured to inspect network packets, apply a first tag associated with an authentication object, apply a second tag associated with an identified ontology, and track the tagged packets as they traverse the enterprise network, generating data utilization tracking information as the packets move through the network. A scoring engine may leverage the data utilization tracking information in combination with user entity and behavior data to compute a risk score associated with data utilization on the enterprise network.

Abstract: The present disclosure relates to methods and systems for load balancing traffic per the capacities of direct IPs (DIPs). The methods and systems use latency measurements from each DIP to determine the capacity of each DIP. The methods and systems use the latency measurements to determine the weights for each DIP using an Integer Linear Program (ILP). The weights identify an amount of traffic to provide to each DIP. The methods and systems provide the weights for each DIP to a load balancer controller to program the load balancer dataplane with the weights.

Abstract: A topology-reprogrammable test environment is provided that can support the needs of CI/CD/CV in the field. The system disclosed provides a highly scalable network architecture to simplify the implementation of network slicing, TaaS and network CI/CD, and solves problems related to the complexity of cloud-native network (CNN) deployments. A Network Cell (NC), comprises or consists of a Containerized Network Function (CNF), a Containerized Digital Twin (CDT), and a Containerized Test Agent (CTA). The CDT has at least two personalities, e.g., an emulator of the CNF in the same NC or a nodal of the CNF. The choice of personality of the CDT is controlled by the CTA of the NC. A number of NCs use a 3D IP address to interconnect and form a new kind of CNN over the infrastructure of VRs.

Abstract: A dynamically-managed microservices platform. The microservices platform is configured to selectively accept admission of microservices and to selectively throttle microservices based on a continually-trained machine learning model. The system is configured to implement multiple microservice lifecycle strategies, where individual ones of the multiple microservice lifecycle strategies use a prediction model having long-term and short term demand predictions. One or another of the multiple microservice lifecycle strategies are invoked at different times under different conditions. Under a first set of conditions, a prediction model is used to select a first strategy to admit or throttle a microservice based upon long-term or short-term demand predictions. Under a second set of conditions, the prediction model is used to select a different strategy to admit or throttle a microservice.

Abstract: Certain aspects of the disclosure provide a method for detecting data collection errors by processing error data with a plurality of regression models to generate a plurality of predicted error rates over a plurality of time intervals. The method includes determining an error mode by applying a set of policy rules optimized for determining the error mode to the plurality of predicted error rates.

Abstract: A Deterministic Traffic (DT) transmission method and device is provided. The method includes: in a case where it is determined that a received packet belongs to a DT, and the packet does not carry Cycle Specified Queuing and Forwarding (CSQF) domain schedule information, determining a target time slot number corresponding to an arrival time of the packet; according to the target time slot number, querying a time slot schedule cycle mapping table at an egress interface for the packet, and determining a target cycle schedule queue corresponding to the target time slot number, where the time slot schedule cycle mapping table is determined based on intra-node jitter at the network node, and is used to record a mapping relationship between a time slot number and a cycle schedule queue number; scheduling the packet to the target cycle schedule queue at the egress interface for the packet.

Abstract: A method for deploying a service includes a controller that creates a service instance corresponding to a service, and creates, in the service instance, a first network instance and a second network instance that correspond to the service. The first network instance is a network instance corresponding to a first device, and the first network instance includes a device identifier of the first device. The second network instance is a network instance corresponding to a first cloud provider edge PE, and the second network instance includes a device identifier of the first cloud PE. The first cloud PE is for connecting to the first cloud.

Abstract: Containerized orchestration of secure socket layer virtual private network benchmarking is disclosed. A test portal can accommodate developing test event information (TEI) based on test input information. Test input information can be used to generate event images, e.g., containers, that can be readily scaled, mutated, etc., via a containerization environment instance. One or more event image can be groups into a pod. An event image can be a new container, a previously used container, or a permutation of a container. Event image(s) can be retrieved from external sources, e.g., a library, a commercial vendor of event images, etc. TEI can be based on a pod(s) and communicated to a device-under-test (DUT). DUT performance can be measured, and results can be accessed by an entity, e.g., a test engineer, a results analysis engine, etc. Results can be employed to direct subsequent DUT testing.

Abstract: A method for fetching a content from a web server to a client device is disclosed, using tunnel devices serving as intermediate devices. The client device accesses an acceleration server to receive a list of available tunnel devices. The requested content is partitioned into slices, and the client device sends a request for the slices to the available tunnel devices. The tunnel devices in turn fetch the slices from the data server, and send the slices to the client device, where the content is reconstructed from the received slices. A client device may also serve as a tunnel device, serving as an intermediate device to other client devices. Similarly, a tunnel device may also serve as a client device for fetching content from a data server. The selection of tunnel devices to be used by a client device may be in the acceleration server, in the client device, or in both.

Abstract: The present invention provides a debugging system, which is embedded on a forwarding path of a Wi-Fi module and includes a service flow matching module and a service flow debug execution module. The service flow matching module receives and analyzes a message, and determines a service flow type and a debugging means involving the message according to a dynamic service flow type association table, wherein the dynamic service flow type association table includes a corresponding service flow type and a corresponding debugging means involving the message. The service flow debug execution module executes the corresponding debugging means for the message according to a determination result from the service flow matching module; wherein the message is an 802.11 protocol message or an 802.3 protocol message.

Abstract: The present disclosure relates to methods and apparatuses for processing a control packet in a collective communication system, where the collective communication system includes a switch network and multiple computing nodes, and the switch network includes a first switch. In one example method, the first switch forwards a query packet transmitted by a source node to a destination node, where the query packet is generated by the source node based on a context of the collective communication system. Then, the first switch forwards a notification packet transmitted by the destination node to the source node, where the notification packet carries an in-network computing capability of the switch network.