Abstract: Techniques for configuring a virtual network device are provided. Embodiments identify a network device profile specifying a virtual link teaming domain. Upon receiving a network message advertising the virtual link teaming domain from a peer network device of the two or more network devices, on a plurality of links of the first network device, the plurality of links are teamed, based on the virtual link teaming domain, to create a first link bundle. Embodiments advertise a virtual link teaming identifier to a neighboring network device of the first network device. Here, the neighboring network device is configured to use the virtual link teaming identifier to bundle links between the neighboring network device and the virtual network device.

Abstract: Various embodiments disclosed relate to conjugated polyelectrolytes and methods of using the same. Various embodiments provide a conjugated polyelectrolyte including a subunit having the structure —R1—Y—R2—Z—. At each occurrence, R1 is independently chosen from 1,4-bonded phenylene substituted by —X—R3—R4 j times and 2,5-bonded thiophene substituted by —X—R3—R4 j times. At each occurrence, Y is independently chosen from a bond and —C?C—. At each occurrence, R2 is independently chosen from a bond, a substituted or unsubstituted phenylene, thiophenylene, azulenylene, heptalenylene, biphenylene, indacenylene, fluorenylene, phenanthrenylene, triphenylenylene, pyrenylene, naphthacenylene, chrysenylene, biphenylenylene, anthracenylene, and naphthylene. At each occurrence, Z is independently chosen from a bond and —C?C—. The variables j, R3, and R4 are as defined herein.

Abstract: Techniques and a network edge device are provided herein to extend local area networks (LANs) and storage area networks (SANs) beyond a data center while converging the associated local area network and storage area network host layers. A packet is received at a device in a network. It is determined if the packet is routed to a local or remote storage area network or local area network. In response to determining that the packet routed to a remote storage area network, storage area network extension services are performed with respect to the packet in order to extend the storage area network on behalf of a remote location. In response to determining that the packet is routed to a local local area network traffic, local area network extension services are performed with respect to the packet in order to extend the local area network on behalf of the remote location.

Abstract: Thiophene containing water-soluble oligomers were synthesized and characterized. The photophysical properties of these compounds were studied; transient absorption spectroscopy was used to probe the triplet excited state and their ability to sensitize singlet oxygen was spectroscopically monitored in deuterated methanol. The above compounds were tested for their light activated biocidal properties against S. aureus both under UV and visible radiation. Among the oligomers studied, the terthiophene derivative was found to kill the bacteria efficiently.

Abstract: An encryption key management system is provided for storage area network devices. A create key request is received at a storage area network switch. The key is created at the storage area network switch and the created key request is transmitted to a key management center. The key object is stored in the key management center and includes a unique identifier, an encrypted key, a wrapper unique identifier, and a key entity. The encrypted key can later be decrypted to generate a decrypted key. The encrypted key is decrypted using keying material accessed using the wrapper unique identifier that identifies another key object.

Abstract: A method of one example embodiment includes receiving at a first network element a packet from a host local to the first network element destined for a remote host; determining that a subnet of the remote host is not instantiated on the first network element; originating a discovery request to discover the remote host, wherein the discovery request is originated in a Virtual Routing Forwarding instance (“VRF”) and identifies the subnet to which the remote host belongs; and broadcasting the discovery request to network elements comprising the VRF. The method may further include, upon receipt of the discovery request, determining whether the identified subnet is configured locally on the second network element and if not, dropping the discovery request; otherwise, rewriting the discovery request to include to an anycast IP address of the remote host's subnet and forwarding the rewritten request.

Abstract: Techniques are provided for transmitting a plurality of Fiber-Channel packets in an FC network. A reliability protocol header comprising reliability attributes and FC attributes are prepended to the FC packets prior to their transmission for each packet in an exchange block comprising a plurality of FC packets. The FC packets are transmitted with the reliability protocol header across the FC network for delivery to a destination device.

Abstract: Efficient mechanisms are provided for transferring key objects associated with disk logical unit numbers and tape cartridges from one data center to another data center. A request is received to transfer a source data center key object from a source data center to a destination data center. The source data center key object corresponds to a data block, such as a disk logical unit number (LUN) or a tape cartridge, maintained in a storage area network (SAN) and includes a unique identifier, an encrypted key, and a wrapper unique identifier. The encrypted key is decrypted using a source data center key hierarchy. Key information is transmitted from the source data center to the destination data center. A destination data center key object is generated using a destination data center key hierarchy.

Abstract: Mechanisms are provided for generating a master key used to secure key objects associated with data blocks in a data center. A cryptographic node creation request is received. It is determined that a master key can not be obtained from another cryptographic node in the data center. A master key is generated. The master key is included in a key hierarchy used to encrypt a data center key object, the data center key object corresponding to a data block maintained in a storage area network (SAN), where the data center key object includes a unique identifier, an encrypted key, and a wrapper unique identifier. The master key is split into N shares, with M shares required to recreate the master key, wherein M is less than N. The N shares are distributed to different entities.

Abstract: Thiophene containing water-soluble oligomers were synthesized and characterized. The photophysical properties of these compounds were studied; transient absorption spectroscopy was used to probe the triplet excited state and their ability to sensitize singlet oxygen was spectroscopically monitored in deuterated methanol. The above compounds were tested for their light activated biocidal properties against S. aureus both under UV and visible radiation. Among the oligomers studied, the terthiophene derivative was found to kill the bacteria efficiently.

Abstract: Mechanisms are provided for generating a master key used to secure key objects associated with data blocks in a data center. A cryptographic node creation request is received. It is determined that a master key can not be obtained from another cryptographic node in the data center. A master key is generated. The master key is included in a key hierarchy used to encrypt a data center key object, the data center key object corresponding to a data block maintained in a storage area network (SAN), where the data center key object includes a unique identifier, an encrypted key, and a wrapper unique identifier. The master key is split into N shares, with M shares required to recreate the master key, wherein M is less than N. The N shares are distributed to different entities.

Abstract: Techniques for configuring a virtual network device are provided. Embodiments identify a network device profile specifying a virtual link teaming domain. Upon receiving a network message advertising the virtual link teaming domain from a peer network device of the two or more network devices, on a plurality of links of the first network device, the plurality of links are teamed, based on the virtual link teaming domain, to create a first link bundle. Embodiments advertise a virtual link teaming identifier to a neighboring network device of the first network device. Here, the neighboring network device is configured to use the virtual link teaming identifier to bundle links between the neighboring network device and the virtual network device.

Abstract: The invention provides methods and materials for decontamination of surfaces and fabrics, such as non-woven fabrics, that are contaminated with infestations of microorganisms such as bacteria. Biocidal oligomers having conjugated oligo-(aryl/heteroaryl ethynyl) structures and comprising at least one cationic group can be used to decontaminate infested surfaces in the presence of oxygen and, optionally, illumination. Fibers incorporating biocidal oligomers having conjugated oligo-(aryl/heteroaryl ethynyl) structures and comprising at least one cationic group, wherein the oligomer is physically associated with or covalently bonded to, or both, the fiber-forming polymer can be used to form non-woven mats. Biocidal non-woven mats prepared by methods of the invention, incorporating the biocidal oligomers, can be used to suppress bacterial growth in wound and surgical dressings and personal hygiene products.

Abstract: Techniques and a network edge device are provided herein to extend local area networks (LANs) and storage area networks (SANs) beyond a data center while converging the associated local area network and storage area network host layers. A packet is received at a device in a network. It is determined if the packet is routed to a local or remote storage area network or local area network. In response to determining that the packet routed to a remote storage area network, storage area network extension services are performed with respect to the packet in order to extend the storage area network on behalf of a remote location. In response to determining that the packet is routed to a local local area network traffic, local area network extension services are performed with respect to the packet in order to extend the local area network on behalf of the remote location.

Abstract: Methods and apparatus for performing Storage Media Encryption (SME) are disclosed. In one embodiment, an apparatus includes a memory and a plurality of processors. The apparatus receives a write command from a network device. The apparatus sends a transfer ready to the network device in response to the write command. The apparatus receives data from the network device. The apparatus composes a status and sends the status the network device. The status is sent to the network device after the data has been received from the network device and prior to both compressing and encrypting the data. The apparatus compresses the data to generate compressed data. One of the plurality of processors encrypts the compressed data to generate modified data. The apparatus then sends the modified data to a target indicated by the write command.

Abstract: Techniques are disclosed for redirecting fiber channel data transmitted between nodes in a fiber channel fabric. The redirection allows traffic sent from a host to a target in a storage area network (SAN) to flow through a cascade of applications provided by certain nodes of the fabric (or in some cases, by external appliances). That is, techniques are disclosed for application chaining in the SAN. Doing so allows the SAN to be used as a true network platform for providing a variety of intelligent services within the network (e.g., data migration, encryption, etc).

Abstract: Methods and apparatus for encrypting data are disclosed. In accordance with one embodiment, data path information identifying a data path is provided to one or more of a plurality of nodes in a cluster of nodes in a network, each of the nodes in the cluster being configured for encryption of data. One of the nodes is selected to be responsible for encryption of data in the data path. The selected one of the nodes is notified of its responsibility for encryption of data associated with the data path, wherein traffic associated with the data path is redirected to the selected one of the nodes.

Abstract: Techniques are disclosed for abstracting write acceleration techniques and tape acceleration techniques away from transport providers (e.g., away from an FC or FCIP interlink between two storage area networks) and allowing acceleration to be provided as a service by nodes within the storage area network (SAN). Doing so allows the acceleration service to be provided anywhere in the SAN. Further, doing so allows users to scale the acceleration service as needed, without having to create awkward topologies of multiple VSANS. Further still, as the acceleration service is offered independently from the transport, compression, encryption, and other services may be offered as part of the transport between the FC/FCIP connection along with the acceleration service.

Abstract: The present invention defines a new protocol for communicating with an offload engine that provides Transmission Control Protocol (“TCP”) termination over a Fibre Channel (“FC”) fabric. The offload engine terminates all protocols up to and including TCP and performs the processing associated with those layers. The offload protocol guarantees delivery and is encapsulated within FCP-formatted frames. Thus, the TCP streams are reliably passed to the host. Additionally, using this scheme, the offload engine can provide parsing of the TCP stream to further assist the host. The present invention also provides network devices (and components thereof) that are configured to perform the foregoing methods. The invention further defines how network attached storage (“NAS”) protocol data units (“PDUs”) are parsed and delivered.

Abstract: Techniques are disclosed for redirecting fibre channel data transmitted between nodes in a fibre channel fabric. The redirection allows traffic sent from a host to a target in a storage area network (SAN) to flow through a cascade of applications provided by certain nodes of the fabric (or in some cases, by external appliances). That is, techniques are disclosed for application chaining in the SAN. Doing so allows the SAN to be used as a true network platform for providing a variety of intelligent services within the network (e.g., data migration, encryption, etc).