Abstract: A technique includes determining that a rate at which a link state of a network interface of a network device changes violates a predetermined rate threshold. The technique includes, responsive to determining that the rate violates the predetermined rate threshold, dampening network activity associated with the network interface. The dampening includes regulating the duration of a recovery time period based on a randomly-generated time value or a pseudorandomly-generated time value. The dampening includes measuring the recovery time period and disabling the network interface responsive to the measuring of the recovery time period. The dampening includes, responsive to an end of measuring the recovery period, re-enabling the network interface.

Abstract: Some examples relate to applying a point-to-point security protocol to a network flow from a source application. In an example, in an example implementation, a network device can receive a network flow from a network client on a network. The network device can analyze a network packet of the network flow. Based on the analysis, the network device can identify a source application of the network flow. The network device can then refer to a lookup table in an integrated circuit (IC) on the network device that includes a point-to-point security protocol (PSP)-related policy for the source application. Based on the PSP policy in the lookup table, the network device can abstain from applying PSP-based encryption to the network flow from the source application.

Abstract: Methods and systems are provided for creating and using custom Type-Length-Value (TLV) elements. For example, a method includes receiving an information from a user, the information including a plurality of commands that together define both a type and a structure of a custom TLV, parsing the received information to create a custom TLV configuration database entry using the received plurality of commands, and writing the TLV configuration database entry into a TLV configuration database accessible by a message parsing device.

Abstract: A hybrid software defined networking (SDN) switch has a forwarding table including local flow entries and SDN flow entries. In one example, the hybrid SDN switch may send both local flow entries and SDN flow entries to a SDN controller.

Abstract: In one example, a software-defined networking (SDN) controller can access flow capability information for flow paths along network data path elements in the control plane of the SDN controller. The SDN controller can determine network compatibility for an SDN controller application based on whether the accessed flow capability information fails to meet a flow requirement for the application. The SDN controller can further notify the application when it is determined that the flow requirements for the application are not met by a flow path. Related methods and machine-readable storage mediums are also described.

Abstract: In one example, a software-defined networking (SDN) controller can access flow capability information for flow paths along network data path elements in the control plane of the SDN controller. The SDN controller can determine network compatibility for an SDN controller application based on whether the accessed flow capability information fails to meet a flow requirement for the application. The SDN controller can further notify the application when it is determined that the flow requirements for the application are not met by a flow path. Related methods and machine-readable storage mediums are also described.

Abstract: A hybrid software defined networking (SDN) switch has a forwarding table including local flow entries and SDN flow entries. In one example, the hybrid SDN switch may send both local flow entries and SDN flow entries to a SDN controller.

Abstract: Examples disclosed herein relate to matching a packet field in OpenFlow. In an example, an SDN controller may define a custom match field in a flow table entry of an OpenFlow table in a network switch. The network switch may use the custom match field to match against a packet field in a received packet.