Abstract: Disclosed are various embodiments that extend customer premises networks onto a cloud provider network. In one embodiment, a layer-3 virtual private network is established between a tunneling agent and a virtual private network server on a cloud provider network. The tunneling agent is executed on an edge customer premises equipment (CPE) device on a customer premises network. A layer-2 virtual interface is established for an edge application on the cloud provider network using a tunnel to encapsulate layer-2 traffic between the customer premises network and the edge application over the layer-3 virtual private network.

Abstract: Disclosed are various embodiments that expose interfaces on customer premises networks for use by cloud-executed edge applications. In one embodiment, a layer-3 virtual private network is established between a cloud provider network and a customer premises network of a customer. A layer-2 virtual interface is established for an edge application executed on the cloud provider network using a tunnel to encapsulate layer-2 traffic over the layer-3 virtual private network. An interface on an edge device of the customer premises network is mapped so that the interface is accessible by the edge application via the tunnel.

Abstract: Disclosed are various embodiments relating to remotely connecting to customer premises networks to access cloud-executed edge applications. In one embodiment, a layer-3 virtual private network is established between a cloud provider network and a customer premises network of a customer. A layer-2 virtual interface is established for an edge application executed on the cloud provider network using a tunnel to encapsulate layer-2 traffic over the layer-3 virtual private network. A client device outside of the cloud provider network is connected to the customer premises network via the layer-3 virtual private network.

Abstract: Disclosed are various embodiments that enhance customer premises device functionality through the use of cloud-based micro-large language models. In one embodiment, a layer-3 virtual private network is established between a cloud provider network and a customer premises network of a customer. A layer-2 virtual interface is established for a cloud-based artificial intelligence (AI) engine executed on the cloud provider network using a tunnel to encapsulate layer-2 traffic over the layer-3 virtual private network. The cloud-based AI engine is used to provide a functionality for an edge device on the customer premises network.

Abstract: Technologies directed to respiration monitoring based on noise channel state information (CSI) data are described. A method includes receiving CSI data representing channel properties of a wireless channel used by a first wireless device and a second wireless device located in a geographical region. The method generates a set of CSI samples by sampling the CSI data and removes one or more outlier CSI samples using a sparse outlier process, and removes a cluster of outlier samples using a cluster outlier process. The method determines Fast Fourier Transform (FFT) data for each channel subcarrier index and a signal-to-noise ratio (SNR) value for each channel subcarrier index, and identifies a first number of channel subcarrier indexes having highest SNR values to obtain a subset of FFT data, which represents a breathing spectrum. The method determines a respiratory rate of a user in the geographical region from the subset of the FFT data.

Abstract: Techniques for establishing connections between user devices and headless devices attempting to connect to networks. A headless device may attempt to connect to an access point that requires interaction with a captive portal webpage for access to a network. However, the headless device my lack a display to present the captive portal webpage. The headless device may establish a connection with a user device using a PAN protocol. The headless device may then receive the captive portal webpage received from the access point, and relay the webpage to the user device using the PAN protocol. A user may use the user device to interact with the captive portal webpage, and the user device may then relay interaction data back to the headless device using the PAN protocol. The headless device may then provide that interaction data to the access point to be provided access to the network.

Abstract: Techniques for establishing communication channels between user devices experiencing network connectivity issues and remote communication systems are described herein. The techniques include the use of a secondary device to act as a proxy, or a “middle man,” to facilitate the communications with the user device. A user device may detect lack of network connectivity, and begin broadcasting advertisement messages that indicate the lack of connectivity. A secondary device may detect the advertisement message, and send a discovery message to a connectivity system indicating that it detected the advertisement message. The connectivity system can provide this information to a remote communication system, and the remote communication system can establish a connection with the secondary device and instruct the secondary device to establish a connection with the user device.

Abstract: Techniques for increasing the security and reliability of frame transmission are described. In an example, a network access device transmits a first frame indicating that a protected frame is to be used for a power mode change. The network access device receives a second frame that includes an identifier of a device and a change to a power mode of the device. The network access device determines whether the second frame is protected. In addition, the network access device determines whether data received for the device is to be stored prior to transmission to the device based at least in part on whether the second frame is protected.

Abstract: The disclosure describes, in part, techniques for attempting to diagnose the cause of a wireless connection problem in a client computing device and, in response, performing one or more actions for remedying the problem. In some instances, the techniques describe the client device communicating with one or more other client devices in the environment to determine whether they are connected to the WAP using the same password or a different password as the client device. If the former, then the client device may determine that the network stack is likely the cause of the connection error and may attempt to restart the network stack to current problem. If the other devices indicate that they are using the same password, however, then the client device may prompt a user to re-enter the network password.

Abstract: A softAP bridge is created to support a mesh network that also works seamlessly with any home Wi-Fi AP routers by using Layer-3 techniques to simulate a Layer-2 bridge. With this softAP bridge, Wi-Fi chipsets with integrated special Wi-Fi MAC Layer-2 mesh network support (e.g., 802.11s), or external gateway hubs, are not required. To accomplish this solution, one of the wireless devices may be designated as a relay device for communicating IPv6 data packets between a home AP router and the remaining wireless devices designated as client devices.

Abstract: Technologies directed to determining a TCP throughput of one or more communication links between two or more devices of a LAN. One method includes a first device that generates a second data packet from a first data packet by modifying a destination address field to be the same as a source address field. The first device sends the second data packet to the second device and receives a third data packet in response. The third data packet specifies the address of the first device in a destination address field and a source address field. The first device generates a fourth data packet from the third data packet by modifying data in the source address field to specify the address of the second device and determines a first value indicative of TCP throughput of a first communication link between the first device and the second device.

Abstract: Techniques for establishing connections between user devices and headless devices attempting to connect to networks. A headless device may attempt to connect to an access point that requires interaction with a captive portal webpage for access to a network. However, the headless device my lack a display to present the captive portal webpage. The headless device may establish a connection with a user device using a PAN protocol. The headless device may then receive the captive portal webpage received from the access point, and relay the webpage to the user device using the PAN protocol. A user may use the user device to interact with the captive portal webpage, and the user device may then relay interaction data back to the headless device using the PAN protocol. The headless device may then provide that interaction data to the access point to be provided access to the network.

Abstract: Techniques for establishing communication channels between user devices experiencing network connectivity issues and remote communication systems are described herein. The techniques include the use of a secondary device to act as a proxy, or a “middle man,” to facilitate the communications with the user device. A user device may detect lack of network connectivity, and begin broadcasting advertisement messages that indicate the lack of connectivity. A secondary device may detect the advertisement message, and send a discovery message to a connectivity system indicating that it detected the advertisement message. The connectivity system can provide this information to a remote communication system, and the remote communication system can establish a connection with the secondary device and instruct the secondary device to establish a connection with the user device.

Abstract: Techniques for performing high-precision presence detection by establishing and monitoring peer-to-peer communication links between user devices residing in a same physical environment. A user device that resides in the environment may establish communication links with multiple other user devices residing in the environment. The user device may monitor the channel properties for those communication links to detect fluctuations in the channel properties caused by a user moving through a signal of the communication links. In examples where the user device detects fluctuations in channel properties for multiple communication links, the user device may determine that the user had moved though signals of the communication links. The user device may determine that, because the user moved through signals of multiple communication links, the user may be in close proximity to the user device, such as in the same room.

Abstract: Techniques for increasing the security and reliability of frame transmission are described. In an example, a network access device transmits a first frame indicating that a protected frame is to be used for a power mode change. The network access device receives a second frame that includes an identifier of a device and a change to a power mode of the device. The network access device determines whether the second frame is protected. In addition, the network access device determines whether data received for the device is to be stored prior to transmission to the device based at least in part on whether the second frame is protected.

Abstract: Technologies for cloud-based secure WLAN group self-forming are described. One provisioner portal device receives, from a client provisionee device that desires to connect to a home WLAN, a first SSID and forwards, to a cloud service via a wireless AP device, the first SSID and a MAC address. The provisioner portal device receives, from the cloud service via the WAP device, a second SSID and a passphrase. The provisioner portal device sends, to the client provisionee device, a response that includes the second SSID. The provisioner portal device creates a one-time provisioning wireless network with the second SSID and the passphrase. Through the provisioner portal device, WAP credentials can be exchanged from the cloud server to the client provisionee device over a secure channel. The WAP credentials can be used to switch to the home WLAN without user interaction to manually enter the WAP credentials at the client provisionee device.

Abstract: Techniques for connecting computing devices to a network are described. For example, a network access device (NAD) connects to a first network that includes a first access point (AP). The NAD receives, from a computing device, first data identifying a second network to be established for the computing device and sends the first data to a server. The NAD receives back a first credential associated with access to the second network and sets up a second AP to the second network. The second AP is associated with the first credential. The NAD sends, to the computing device, second data indicating that access to the second network is available, generates a second credential associated with access to the first network via the first AP, and sends the second credential to the computing device via the second AP.

Abstract: A mesh network device includes a radio and an application processor coupled to the radio. The application processor includes a network association engine, which receives, receives, from a client consumption device, a requested content identifier; receives, from a first access point, a beacon including a first throughput of the network path between the network ingress device and the first access point; receives, from a second access point, a beacon including a second throughput of the network path between the network ingress device and the second access point; determines that the first throughput exceeds the second throughput; transmits, to the first access point, an association request followed by a digital content request comprising a requested content identifier; receives, from the first access point, the first requested digital content item; and causes the requested digital content item to be rendered by the client consumption device.

Abstract: Technology for network loop detection in a hybrid mesh network is described. In one embodiment, processing logic receives a network event message indicating a change in a network topology of a mesh network and, responsive to the network event message, determines that the mesh network includes at least one network loop comprising a plurality of communication links connecting two nodes of the mesh network. The processing logic further determines that the at least one network loop includes at least one wired communication link and disables at least one of the plurality of communication links to disconnect the at least one network loop.

Abstract: Techniques are described for an unbuffered multicast delivery mode representing the capability of transmitting a multicast frame within a same DTIM interval during which the multicast frame is received. In an example, a network access device determines that a first computing device is in a power saving mode. The network access device receives, during a DTIM interval while the first computing device is in the power saving mode, a multicast frame destined to a multicast MAC address. The network access device determines an association between the multicast MAC address and a device MAC address of a second computing device. The network access device sends, during the DTIM interval and based on the association, the multicast frame to the second computing device.