Abstract: A non-transitory computer readable medium, a device, and a method for configuring a channel at an access point (AP) are disclosed. In an embodiment, the non-transitory computer readable medium includes instructions for receiving an Internet Protocol (IP) geolocation of an AP at an AP manager, where the IP geolocation indicates a physical location country of the AP, obtaining a configuration of the AP from a configuration database, the configuration of the AP including a configured country, determining whether the physical location country matches the configured country, identifying a common channel when the physical location country of the AP and the configured country of the AP do not match, the common channel including a channel that is authorized for use in both the physical location country and in the configured country, and pushing an indication of the common channel from the AP manager to the AP in a configuration message.

Abstract: A flow identifier is described for packet sequences through a secure tunnel of an SD-WAN in a tunnel-less mode. A method includes receiving a sequence of packets from a first client at the first hub, the sequence of packets each having a same flow and facilitating a secure tunnel between the first hub and the second hub. A flow identifier is assigned to the sequence of packets. Fields of a header of a start packet of the sequence of packets are associated with the flow identifier and the associated fields are removed from a header of a second packet of the sequence of packets to form a reduced packet. The reduced packet is encapsulated in a wrapper that includes the flow identifier, and the encapsulated reduced packet of the sequence of packets is sent from the first hub to the second hub through the secure tunnel.

Abstract: A flow identifier is described for packet sequences through a secure tunnel of an SD-WAN in a tunnel-less mode. A method includes receiving from a first client packets of a same flow, facilitating a secure tunnel between the first hub and the second hub, assigning a flow identifier to the packets, associating fields of a header of a start packet with the flow identifier, sending the start packet with the flow identifier through the secure tunnel, receiving an acknowledgement of the flow identifier, updating a state of the secure tunnel, removing the associated fields from a header of a second packet to form a reduced packet in response to 10 receiving the acknowledgment, encapsulating the reduced packet in a wrapper that includes the flow identifier, and sending encapsulated reduced packet.

Abstract: A flow identifier is described for packet sequences through a secure tunnel of an SD-WAN in a tunnel-less mode. A method includes receiving a sequence of packets from a first client at the first hub, the sequence of packets each having a same flow, facilitating a secure tunnel between the first hub and the second hub, assigning a flow identifier to the sequence of packets, converting fields from a header of the packet to a metadata supplement to the packet to form a reduced packet, encapsulating the reduced packet in a wrapper that includes the flow identifier, and sending the packet of the sequence of packets from the first hub to the second hub the secure tunnel.

Abstract: A non-transitory computer readable medium, a device, and a method for configuring a channel at an access point (AP) are disclosed. In an embodiment, the non-transitory computer readable medium includes instructions for receiving an Internet Protocol (IP) geolocation of an AP at an AP manager, where the IP geolocation indicates a physical location country of the AP, obtaining a configuration of the AP from a configuration database, the configuration of the AP including a configured country, determining whether the physical location country matches the configured country, identifying a common channel when the physical location country of the AP and the configured country of the AP do not match, the common channel including a channel that is authorized for use in both the physical location country and in the configured country, and pushing an indication of the common channel from the AP manager to the AP in a configuration message.

Abstract: A flow identifier is described for packet sequences through a secure tunnel of an SD-WAN and an error message for recovering the flow. A method includes receiving a sequence of packets, facilitating a first secure tunnel between a first hub and a second hub, assigning a first flow identifier to the sequence of packets, encapsulating a first start packet, the wrapper including the first flow identifier, sending the encapsulated first start packet to the second hub through the first secure tunnel, receiving an error message from the second hub, the error message including the first flow identifier and an error code, facilitating a second secure tunnel, assigning a second flow identifier, encapsulating a second start packet, the wrapper including the second flow identifier, and sending the encapsulated second start packet through the second secure tunnel.

Abstract: Embodiments herein disclose path selection for data traffic within a software-defined wide area network using traffic metrics. Some embodiments relate to a method that includes polling peers of the SD-WAN for traffic metrics, receiving traffic metrics from at least a portion of the peers, combining the received traffic metrics, calculating performance of a plurality of possible paths from a source node to a destination node, the nodes being within the SD-WAN topology, and selecting a path from the source node to the destination node based on the calculated performance.

Abstract: End-to-end data packet flow control is described for an overlay environment of a wide area network. A method includes detecting an active session of a specific application with a source node and a destination node within an overlay environment, detecting a traffic flow from the source node to the destination node associated with the active session, mapping the traffic flow to a dedicated service processing thread of a network services appliance, mapping an identifier to the dedicated service processing thread, and forwarding the traffic flow to the destination node through the dedicated service processing thread by applying the identifier to the traffic flow.

Abstract: Embodiments herein disclose conditioning traffic through multiple data paths of a Software-Defined Wide Area Network (SD-WAN). Some embodiments include monitoring a path through an SD-WAN to reach a destination node, determining a quality score for packets to the destination node on the path, determining a link utilization for the path, sending a data packet sequence to the destination node on the path, generating a forward error correction (FEC) packet for the data packet sequence, and sending the FEC packet to the destination node on the path in response to the quality score being less than a quality threshold and the link utilization being less than a high utilization threshold.

Abstract: A metallic glass coating material is composed of an alloy of Fe, B, and one of the metals Nb, Mo, Zr, or W. The ratios of Fe, B, and the metal are predetermined using machine learning predictions and high-throughput experiments. In one example, the material is an alloy of Fe, Nb, Mo and B, of the form Fex(Nb, Mo)yBz, where x is in the range 18-28, y is in the range 35-45, and z is in the range 32-42. In another example, the material may be the alloy Fe23(Nb, Mo)40B37. The alloy may be doped with Zr and/or W, where the Zr and/or W comprises at most 10% of the alloy.

Abstract: Methods and system for providing network connectivity are disclosed. In an embodiment, a method for providing network connectivity involves receiving from a Mobile Network Operator (MNO) an access ID and an IP address at a SASE domain, wherein the access ID and the IP address correspond to a wireless device, generating an IP address-to-tenant mapping at the SASE domain by applying the access ID and the IP address to an access ID-to-tenant mapping, and forwarding traffic received at the SASE domain from the wireless device via the MNO according to the IP address-to-tenant mapping.

Abstract: Embodiments of methods and systems for managing traffic across a WAN are disclosed. A method for managing traffic across a WAN involves identifying incoming traffic as Direct Internet Access (DIA) traffic at a first node, identifying incoming traffic as SD-WAN traffic at the first node, policing the DIA traffic at the first node, and adapting the policing of the DIA traffic at the first node in response to a comparison between the SD-WAN traffic and an SD-WAN traffic threshold.

Abstract: End-to-end data packet flow control is described for an overlay environment of a wide area network. A method includes detecting an active session of a specific application with a source node and a destination node within an overlay environment, detecting a traffic flow from the source node to the destination node associated with the active session, mapping the traffic flow to a dedicated service processing thread of a network services appliance, mapping an identifier to the dedicated service processing thread, and forwarding the traffic flow to the destination node through the dedicated service processing thread by applying the identifier to the traffic flow.

Abstract: Embodiments herein disclose conditioning traffic through multiple data paths of a Software-Defined Wide Area Network (SD-WAN). Some embodiments include monitoring available paths through an SD-WAN to reach a destination node, determining a quality score for packets to the destination node on a first path of the available paths, sending a data packet sequence to the destination node on the first path, generating a forward error correction (FEC) packet for the packet sequence, and sending the FEC packet to the destination node on a second path of the available paths in response to the quality score being less than a quality threshold.

Abstract: Method and systems for transitioning a wireless device between client-less connectivity and client-based connectivity are disclosed. In an embodiment, a method for transitioning a wireless device between client-less connectivity and client-based connectivity involves forwarding traffic from a wireless device through a SASE domain, receiving a request for information related to a SASE gateway in the SASE domain from the wireless device, transmitting information related to the SASE gateway from the SASE domain to the wireless device in response to the request, and transitioning the wireless device between client-less connectivity to the SASE gateway and client-based connectivity to the SASE gateway.

Abstract: Method and systems for transitioning a wireless device between client-less connectivity and client-based connectivity are disclosed. In an embodiment, a method for transitioning a wireless device between client-less connectivity and client-based connectivity involves forwarding traffic from a wireless device through a SASE domain, receiving a request for information related to a SASE gateway in the SASE domain from the wireless device, transmitting information related to the SASE gateway from the SASE domain to the wireless device in response to the request, and transitioning the wireless device between client-less connectivity to the SASE gateway and client-based connectivity to the SASE gateway.

Abstract: Methods and system for providing network connectivity are disclosed. In an embodiment, a method for providing network connectivity involves receiving from a Mobile Network Operator (MNO) an access ID and an IP address at a SASE domain, wherein the access ID and the IP address correspond to a wireless device, generating an IP address-to-tenant mapping at the SASE domain by applying the access ID and the IP address to an access ID-to-tenant mapping, and forwarding traffic received at the SASE domain from the wireless device via the MNO according to the IP address-to-tenant mapping.

Abstract: Embodiments herein disclose path selection for data traffic within a software-defined wide area network using traffic metrics. Some embodiments relate to a method that includes polling peers of the SD-WAN for traffic metrics, receiving traffic metrics from at least a portion of the peers, combining the received traffic metrics, calculating performance of a plurality of possible paths from a source node to a destination node, the nodes being within the SD-WAN topology, and selecting a path from the source node to the destination node based on the calculated performance.

Abstract: A metallic glass coating material is composed of an alloy of Fe, B, and one of the metals Nb, Mo, Zr, or W. The ratios of Fe, B, and the metal are predetermined using machine learning predictions and high-throughput experiments. In one example, the material is an alloy of Fe, Nb, Mo and B, of the form Fex(Nb, Mo)yBz, where x is in the range 18-28, y is in the range 35-45, and z is in the range 32-42. In another example, the material may be the alloy Fe23(Nb, Mo)40B37. The alloy may be doped with Zr and/or W, where the Zr and/or W comprises at most 10% of the alloy.

Abstract: Embodiments herein disclose conditioning traffic through multiple data paths of a Software-Defined Wide Area Network (SD-WAN). Some embodiments include monitoring a first and a second path through an SD-WAN to reach a destination node, comparing the link utilization for the first and the second path to generate an allocation ratio of the first and the second path, allocating a sequence of data packets to the first and the second path using the allocation ratio to generate a first path data sequence and a second path data sequence, generating a forward error correction (FEC) packet for first path sequence, sending the first path data sequence to the destination node on the first path, sending the second path data sequence to the destination node on the second path, and sending the FEC packet on at least one of the first and the second path.