Abstract: Systems and methods for monitoring a network slice are provided. A method, according to one implementation, include extracting information from network traffic received from one or more User Plane Function (UPF) components of a network slice; examining the extracted information using Machine Learning (ML), and, in response to detecting of one or more malicious threats based on the examined extracted information by the ML, causing one or more actions to isolate the network traffic to protect at least the network slice from the one or more malicious threats.

Abstract: Loop detection systems and methods in an Ethernet Ring Protected network include, subsequent to creating a loop detection service on all nodes in the network, periodically transmitting a loop detection frame on both ports of the node; responsive to failing to receive the loop detection frame at the node, determining no loop exists in the ring; and, responsive to receiving the loop detection frame on a received port at the node, determining a loop exists in the ring and automatically implementing one or more recovery actions.

Abstract: A primary and secondary card are coupled to protect and working paths, respectively providing a redundant connection to a node. The primary and secondary cards implement an inter-card path that is a working path for the primary card and a protect path for the secondary card. Responsive to a fault in the working path, the secondary card generates a simulated error condition on the inter-card path, causing the primary card to make the protect path the active path. When the protect path is the active path and goes down, the primary card generates a simulated error condition on the inter-card path, causing the secondary card to make the working path the active path. Switching of packets to the active and protect paths on the primary and secondary cards and is performed by an FPGA that maintains its own state machine subject to instructions from software executed by the cards.

Abstract: Systems and methods are disclosed for providing redundancy in a network node implementing a ring protection protocol. Each of the two ring ports connecting the node to other nodes in a ring supporting the protocol may be maintained by a separate line card. Should one line card fail, traffic passing through the node may be redirected through the remaining ring port under the control of the surviving state machine. The two state machines may be coordinated over the backplane of the node to maintain a common state, making them transparent to other nodes. Additionally, the backplane link between the state machines may be monitored for failures that may be addressed with messages used to respond to general ring failures and by assigning one state machine to block a ring port upon recovery to prevent a loop within the ring until the ring protection link can be blocked.

Abstract: Systems and methods are disclosed for effectuating control-plane changes at increased speeds to protect a network in which switching operations are performed. Operations to effectuate control-plane changes in the network can be divided between software and more-rapid, dedicated hardware within a line card. Examples of operations reserved to hardware implementation can include blocking and unblocking of ports, flushing of learned entries from switch tables, and coordination of control-plane changes through the generation of messages sent between nodes, and also between line cards of a node. Determinations about the need for hardware-driven, control-plane changes may be made based on events occurring in the network in accordance with any of a number of different network protection protocols. The protocol may be implemented in a state machine and the software may determine the state of the hardware through a master/slave relationship.

Abstract: Loop detection systems and methods in an Ethernet Ring Protected network include, subsequent to creating a loop detection service on all nodes in the network, periodically transmitting a loop detection frame on both ports of the node; responsive to failing to receive the loop detection frame at the node, determining no loop exist in the ring; and, responsive to receiving the loop detection frame on a received port at the node, determining a loop exists in the ring and automatically implementing one or more recovery actions.

Abstract: A primary and secondary card are coupled to protect and working paths, respectively providing a redundant connection to a node. The primary and secondary cards implement an inter-card path that is a working path for the primary card and a protect path for the secondary card. Responsive to a fault in the working path, the secondary card generates a simulated error condition on the inter-card path, causing the primary card to make the protect path the active path. When the protect path is the active path and goes down, the primary card generates a simulated error condition on the inter-card path, causing the secondary card to make the working path the active path. Switching of packets to the active and protect paths on the primary and secondary cards and is performed by an FPGA that maintains its own state machine subject to instructions from software executed by the cards.

Abstract: A primary and secondary card are coupled to protect and working paths, respectively providing a redundant connection to a node. The primary and secondary cards implement an inter-card path that is a working path for the primary card and a protect path for the secondary card. Responsive to a fault in the working path, the secondary card generates a simulated error condition on the inter-card path, causing the primary card to make the protect path the active path. When the protect path is the active path and goes down, the primary card generates a simulated error condition on the inter-card path, causing the secondary card to make the working path the active path. Switching of packets to the active and protect paths on the primary and secondary cards and is performed by an FPGA that maintains its own state machine subject to instructions from software executed by the cards.

Abstract: Systems and methods are disclosed for providing redundancy in a network node implementing a ring protection protocol. Each of the two ring ports connecting the node to other nodes in a ring supporting the protocol may be maintained by a separate line card. Should one line card fail, traffic passing through the node may be redirected through the remaining ring port under the control of the surviving state machine. The two state machines may be coordinated over the backplane of the node to maintain a common state, making them transparent to other nodes. Additionally, the backplane link between the state machines may be monitored for failures that may be addressed with messages used to respond to general ring failures and by assigning one state machine to block a ring port upon recovery to prevent a loop within the ring until the ring protection link can be blocked.

Abstract: Systems and methods are disclosed for providing redundancy in a network node implementing a ring protection protocol. Each of the two ring ports connecting the node to other nodes in a ring supporting the protocol may be maintained by a separate line card. Should one line card fail, traffic passing through the node may be redirected through the remaining ring port under the control of the surviving state machine. The two state machines may be coordinated over the backplane of the node to maintain a common state, making them transparent to other nodes. Additionally, the backplane link between the state machines may be monitored for failures that may be addressed with messages used to respond to general ring failures and by assigning one state machine to block a ring port upon recovery to prevent a loop within the ring until the ring protection link can be blocked.

Abstract: Systems and methods are disclosed for effectuating control-plane changes at increased speeds to protect a network in which switching operations are performed. Operations to effectuate control-plane changes in the network can be divided between software and more-rapid, dedicated hardware within a line card. Examples of operations reserved to hardware implementation can include blocking and unblocking of ports, flushing of learned entries from switch tables, and coordination of control-plane changes through the generation of messages sent between nodes, and also between line cards of a node. Determinations about the need for hardware-driven, control-plane changes may be made based on events occurring in the network in accordance with any of a number of different network protection protocols. The protocol may be implemented in a state machine and the software may determine the state of the hardware through a master/slave relationship.