Abstract: Some embodiments provide a method for a set of central controllers that manages forwarding elements operating in a plurality of datacenters. The method receives a configuration for a bridge between (i) a logical L2 network that spans at least two datacenters and (ii) a physical L2 network. The configuration specifies a particular one of the datacenters for implementation of the bridge. The method identifies multiple managed forwarding elements that implement the logical L2 network and are operating in the particular datacenter. The method selects one of the identified managed forwarding elements to implement the bridge. The method distributes bridge configuration data to the selected managed forwarding element.

Abstract: One or more computing devices, systems, and/or methods for dynamically selecting a personality for a digital assistant are provided. For example, audio associated with a conversation with a digital assistant may be received from a user. The audio may be converted into a request comprising text. A task may be determined based upon the request. One or more sentences associated with information associated with the task may be determined. A context of the conversation may be determined based upon the request and a user profile of the user. A first personality may be selected for the digital assistant from one or more personalities based upon the context of the conversation. The first personality may be used to generate audio of the one or more sentences. The audio of the one or more sentences may be presented as part of the conversation to the user.

Abstract: The technology disclosed herein enables high availability bridging between Layer 2 (L2) networks. In a particular embodiment, a method includes high availability bridge cluster comprising a first bridge node and a second bridge node. The first and second bridge nodes include first and second active bridges and first and second standby bridges, respectively. The method provides, in the first active bridge, bridging network communications between two or more L2 networks. The second standby bridge acts as a failover bridge for the first active bridge. The method further provides generating a failure detection message that incorporates a hardware address of the first bridge node and transferring the failure detection message from the first bridge node to the second bridge node. In the second standby bridge, the method provides receiving the failure detection message and using the hardware address to synchronize bridging information between the first active bridge and the second standby bridge.

Abstract: The disclosure provides an approach for reliable and secure data delivery on a data plane of a network between virtual tunnel endpoints of hypervisors. The approach involves using the Bidirectional Forwarding Detection protocol to transport additional information without adding to network congestion. Data is added to periodic health-check packets and processed by the receiving side. The packets are further modified to set an echo bit and receive an acknowledgement of the packets' successful transmission to the destination side.

Abstract: Some embodiments provide a method for a network manager that manages multiple managed forwarding elements at a particular datacenter. The method receives a configuration for a bridge between a logical L2 network that spans at least two datacenters and physical L2 networks at one or more of the spanned datacenters. The configuration includes a generic physical network identifier. The method maps the generic physical network identifier to a particular physical L2 network at the particular datacenter. The generic physical network identifier maps to other physical networks at other spanned datacenters. The method provides the configuration to a set of central controllers using an identifier for the particular physical L2 network. The set of central controllers configures a managed forwarding element operating at the particular datacenter to implement the bridge to bridge packets between the logical L2 network and the particular physical L2 network.

Abstract: One or more computing devices, systems, and/or methods for dynamically selecting a personality for a digital assistant are provided. For example, audio associated with a conversation with a digital assistant may be received from a user. The audio may be converted into a request comprising text. A task may be determined based upon the request. One or more sentences associated with information associated with the task may be determined. A context of the conversation may be determined based upon the request and a user profile of the user. A first personality may be selected for the digital assistant from one or more personalities based upon the context of the conversation. The first personality may be used to generate audio of the one or more sentences. The audio of the one or more sentences may be presented as part of the conversation to the user.

Abstract: Some embodiments provide a method for a set of central controllers that manages forwarding elements operating in a plurality of datacenters. The method receives a configuration for a bridge between (i) a logical L2 network that spans at least two datacenters and (ii) a physical L2 network. The configuration specifies a particular one of the datacenters for implementation of the bridge. The method identifies multiple managed forwarding elements that implement the logical L2 network and are operating in the particular datacenter. The method selects one of the identified managed forwarding elements to implement the bridge. The method distributes bridge configuration data to the selected managed forwarding element.

Abstract: Some embodiments provide a method for a network manager that manages multiple managed forwarding elements at a particular datacenter. The method receives a configuration for a bridge between a logical L2 network that spans at least two datacenters and physical L2 networks at one or more of the spanned datacenters. The configuration includes a generic physical network identifier. The method maps the generic physical network identifier to a particular physical L2 network at the particular datacenter. The generic physical network identifier maps to other physical networks at other spanned datacenters. The method provides the configuration to a set of central controllers using an identifier for the particular physical L2 network. The set of central controllers configures a managed forwarding element operating at the particular datacenter to implement the bridge to bridge packets between the logical L2 network and the particular physical L2 network.

Abstract: An approach for securing a DHCP server against unauthorized client attacks in a SDN environment is presented. In an embodiment, a method comprises: determining a count of sub-interfaces implemented on an interface card of a virtual machine; setting a count of unique client identifiers for the virtual machine to zero; determining whether a dynamic host configuration protocol (DHCP) request has been received from the virtual machine; in response to determining that a DHCP request has been received from the virtual machine, incrementing the count of unique client identifiers; determining whether the count of unique client identifiers exceeds the count of sub-interfaces implemented on the interface card of the virtual machine; and in response to determining that the count of unique client identifiers does not exceed the count of sub-interfaces implemented on the interface card of the virtual machine, forwarding the DHCP request to an uplink port.

Abstract: The technology disclosed herein enables remote gateways to quickly re-learn MAC addresses of workloads for a gateway that has taken over for another gateway. In a particular embodiment, a method provides determining that a backup gateway should begin handling communications exchanged with one or more workloads of an active gateway for a logical network. The method further provides transferring a control message to one or more remote gateways in communication with the backup gateway. The control message instructs the remote gateways to change MAC addresses learned from, and associated with, the active gateway to being associated with the backup gateway. The method also provides, in the backup gateway, receiving network communications directed to one or more of the workloads from one or more of the remote gateways.

Abstract: Example methods are provided for a first host to maintain data-plane connectivity with a second host via a third host in a virtualized computing environment. The method may comprise identifying an intermediate host, being the third host, having data-plane connectivity with both the first host and the second host. The method may also comprise: in response to detecting, from a first virtualized computing instance supported by the first host, an egress packet that includes an inner header addressed to a second virtualized computing instance supported by the second host, generating an encapsulated packet by encapsulating the egress packet with an outer header that is addressed from the first host to the third host instead of the second host; and sending the encapsulated packet to the third host for subsequent forwarding to the second host.

Abstract: Exemplary methods, apparatuses, and systems maintain network membership information for a host when it is disconnected from a controller. When the host detects a loss of connectivity with the network controller, the host identifies and selects one or more hosts that are members of a control logical network. The control logical network includes hosts configured to run data compute nodes that are members of the overlay network, regardless of whether or not each of the hosts is currently running a data compute node that is a member of the overlay network. The host then sends any broadcast, unknown destination, or multicast (BUM) data packet(s) to the selected one or more hosts.

Abstract: The technology disclosed herein enables high availability bridging between Layer 2 (L2) networks. In a particular embodiment, a method includes high availability bridge cluster comprising a first bridge node and a second bridge node. The first and second bridge nodes include first and second active bridges and first and second standby bridges, respectively. The method provides, in the first active bridge, bridging network communications between two or more L2 networks. The second standby bridge acts as a failover bridge for the first active bridge. The method further provides generating a failure detection message that incorporates a hardware address of the first bridge node and transferring the failure detection message from the first bridge node to the second bridge node. In the second standby bridge, the method provides receiving the failure detection message and using the hardware address to synchronize bridging information between the first active bridge and the second standby bridge.

Abstract: Example methods are provided for a first host to restore control-plane connectivity with a network management entity. The method may comprise: detecting a loss of control-plane connectivity between the first host and the network management entity; and determining connectivity status information associated with one or more second hosts. The method may also comprise, based on the connectivity status information, selecting, from the one or more second hosts, a proxy host having data-plane connectivity with the first host and control-plane connectivity with the network management entity. The method may further comprise restoring control-plane connectivity between the first host with the network management entity via the proxy host such that the first host is able to send control information to, or receive control information from, the network management entity via the proxy host.

Abstract: Example methods are provided for a first host to perform address resolution suppression in a logical network. The first host may support a first virtualized computing instance located on the logical network and a first hypervisor. The method may comprise the first hypervisor broadcasting a notification message within the logical network to trigger one or more control messages, and learning protocol-to-hardware address mapping information associated with multiple second virtualized computing instances located on the logical network based on the one or more control messages. The method may also comprise: in response to the first hypervisor detecting an address resolution request message that includes a protocol address associated with one of the multiple second virtualized computing instances, the first hypervisor generating and sending an address resolution response message to a first virtualized computing instance without broadcasting the address resolution request message on the logical network.

Abstract: One or more computing devices, systems, and/or methods for dynamically selecting a personality for a digital assistant are provided. For example, audio associated with a conversation with a digital assistant may be received from a user. The audio may be converted into a request comprising text. A task may be determined based upon the request. One or more sentences associated with information associated with the task may be determined. A context of the conversation may be determined based upon the request and a user profile of the user. A first personality may be selected for the digital assistant from one or more personalities based upon the context of the conversation. The first personality may be used to generate audio of the one or more sentences. The audio of the one or more sentences may be presented as part of the conversation to the user.

Abstract: A communication apparatus for remote communication may include a local communication proxy module configured to receive streams from a local communication application module. The streams may be in a form utilizing a first transmission protocol and destined to a remote destination. The local communication proxy module may be configured to facilitate sending, utilizing a second transmission protocol, the streams in real-time over a network to a remote communication proxy module. The local communication proxy module may be configured to conceal characteristics of the network from the local communication application module. The local communication proxy module may also be configured to be transparent to the local communication application module. A machine-readable medium and a method are also disclosed.

Abstract: A communication apparatus for remote communication may include a local communication proxy module configured to receive streams from a local communication application module. The streams may be in a form utilizing a first transmission protocol and destined to a remote destination. The local communication proxy module may be configured to facilitate sending, utilizing a second transmission protocol, the streams in real-time over a network to a remote communication proxy module. The local communication proxy module may be configured to conceal characteristics of the network from the local communication application module. The local communication proxy module may also be configured to be transparent to the local communication application module. A machine-readable medium and a method are also disclosed.

Abstract: A communication apparatus for remote communication may include a local communication proxy module configured to receive streams from a local communication application module. The streams may be in a form utilizing a first transmission protocol and destined to a remote destination. The local communication proxy module may be configured to facilitate sending, utilizing a second transmission protocol, the streams in real-time over a network to a remote communication proxy module. The local communication proxy module may be configured to conceal characteristics of the network from the local communication application module. The local communication proxy module may also be configured to be transparent to the local communication application module. A machine-readable medium and a method are also disclosed.

Abstract: A communication apparatus for remote communication may include a local communication proxy module configured to receive streams from a local communication application module. The streams may be in a form utilizing a first transmission protocol and destined to a remote destination. The local communication proxy module may be configured to add first header information including one or more of the following: a packet sequence identifier, a packet size, a packet type identifier, and additional information related to a packet type identifier. The local communication proxy module may be configured to add second header information. The local communication proxy module may be also configured to form packets and to facilitate sending, utilizing a second transmission protocol, the packets in real-time over a network to a remote communication proxy module. A machine-readable medium and a method are also disclosed.