Abstract: A system is provided comprising one or more application layer audit proxies arranged to obtain application layer network traffic sent in a network. Each of the application layer audit proxies configured to: receive application layer network traffic sent as part of a communication session between a producer entity and a consumer entity; record information about the application layer network traffic to an audit log in a distributed permissioned database comprising a blockchain of immutable data blocks; and forward the application layer network traffic to the producer entity or to the consumer entity.

Abstract: In one embodiment, a server generates expected levels of capability associated with possible combinations of settings for first and second adjustable parameters for an aspect of a software image feature. The server receives an indication of a desired level of capability for the aspect of the software image feature and, based on the indication, identifies a particular expected level of capability associated with a particular possible combination of the settings for the first and second adjustable parameters. The particular expected level of capability is closer to a desired level of capability for an aspect of a software image feature than the other expected levels of capability associated with the possible combinations of the settings for the first and second adjustable parameters. The server produces a software image that includes the particular possible combination of the settings for the first and second adjustable parameters.

Abstract: A system is provided comprising one or more application layer audit proxies arranged to obtain application layer network traffic sent in a network. Each of the application layer audit proxies configured to: receive application layer network traffic sent as part of a communication session between a producer entity and a consumer entity; record information about the application layer network traffic to an audit log in a distributed permissioned database comprising a blockchain of immutable data blocks; and forward the application layer network traffic to the producer entity or to the consumer entity.

Abstract: In one embodiment, a server generates expected levels of capability associated with possible combinations of settings for first and second adjustable parameters for an aspect of a software image feature. The server receives an indication of a desired level of capability for the aspect of the software image feature and, based on the indication, identifies a particular expected level of capability associated with a particular possible combination of the settings for the first and second adjustable parameters. The particular expected level of capability is closer to a desired level of capability for an aspect of a software image feature than the other expected levels of capability associated with the possible combinations of the settings for the first and second adjustable parameters. The server produces a software image that includes the particular possible combination of the settings for the first and second adjustable parameters.

Abstract: A method and apparatus for providing information in a network by way of a Pseudowire switching TLV is presented. A second device in the network receives a first message having information relating to a first device in the network. The second device appends information relating to the second device (by way of a Pseudowire switching TLV) to the first message, resulting in a second message. The second message is then forwarded to a third device in the network.

Abstract: In one embodiment, a stateful computing entity in a computer network determines underlying network information (physical and/or optical) for the computer network, and also determines topologies (Internet Protocol (IP) and/or Multiprotocol Label Switching (MPLS)) for the computer network and associated resource information. Further, the stateful computing entity determines label switched path (LSP) state information for the computer network. The stateful computing entity may then build network state knowledge by aggregating the underlying network information, the topologies and associated resource information, and the LSP state information, and establishes communication within a dynamic network of other stateful computing entities sharing network state knowledge for parallel computation performance. Accordingly, the stateful computing entity may perform network computation based on the network state knowledge.

Abstract: A method and apparatus for providing information in a network by way of a Pseudowire switching TLV is presented. A second device in the network receives a first message having information relating to a first device in the network. The second device appends information relating to the second device (by way of a Pseudowire switching TLV) to the first message, resulting in a second message. The second message is then forwarded to a third device in the network.

Abstract: In one embodiment, a stateful computing entity in a computer network determines underlying network information (physical and/or optical) for the computer network, and also determines topologies (Internet Protocol (IP) and/or Multiprotocol Label Switching (MPLS)) for the computer network and associated resource information. Further, the stateful computing entity determines label switched path (LSP) state information for the computer network. The stateful computing entity may then build network state knowledge by aggregating the underlying network information, the topologies and associated resource information, and the LSP state information, and establishes communication within a dynamic network of other stateful computing entities sharing network state knowledge for parallel computation performance. Accordingly, the stateful computing entity may perform network computation based on the network state knowledge.

Abstract: Techniques are provided to programming network analytics processing in virtual and physical network devices, useful for software-defined networking (SDN). A controller, e.g., a so-called SDN controller, is configured to identify a control-plane or data-plane flow originating, terminating or transiting a physical or virtual network element. The controller generates one or more network analytics processing actions to be performed by the physical or virtual network element based on inspection of traffic by the physical or virtual network element. The controller forms or generates an inspect/apply-action message containing information identifying the control-plane or data-plane flow for inspection and the one or more network analytics processing actions to be performed. The inspect/apply-action message is sent to the physical or virtual network element.

Abstract: A method and apparatus for providing information in a network by way of a Pseudowire switching TLV is presented. A second device in the network receives a first message having information relating to a first device in the network. The second device appends information relating to the second device (by way of a Pseudowire switching TLV) to the first message, resulting in a second message. The second message is then forwarded to a third device in the network.

Abstract: Systems, methods, and other embodiments associated with multiple NAT traversal are provided. A request is received from a host for a publicly-routable communication path identifier for the host, where the host is a member of a private network associated with a first network address translation device. The first network address translation device communicates with a second network address translation device using an address-port-borrowing-protocol to acquire information related to the publicly-routable communication path identifier. Information related to the publicly-routable communication path identifier is received with the first network address translation device and the publicly-routable communication path identifier is provided to the host.

Abstract: A method, apparatus and computer program product for routing data within a packet-switched network using a PW wherein the PW is terminated directly on the layer-3 routing device such that certain services and applications can be utilized is presented. The method, apparatus and computer program product receives an encapsulated layer-2 Protocol Data Unit (PDU) from a pseudowire emulating a service. The encapsulation is removed from the encapsulated layer-2 PDU and a layer-2 circuit associated with the pseudowire is terminated. The circuit is treated as an interface and the PDU is forwarded based on upper layer protocol information within the PDU.

Abstract: A method, apparatus and computer program product for building multipoint Pseudo Wires (PWs) using Multicast Label Distribution Protocol (MLDP) is presented. A multipoint PW leaf identifier (mTAI) is configured on one or more Layer 2 (L2) leaf interface(s) of a multipoint PW. A multipoint PW root identifier identifying the root of the multipoint PW is also configured and an opaque value is computed, the opaque value used in MLDP label mapping messages that will flow upstream towards a the root of the multipoint PW. The opaque value is computed from the multipoint leaf identifier and the multipoint root identifier. The PE leaf routers direct MLDP label mapping to the root PE router via a core network.

Abstract: In one embodiment, a method can include: receiving a packet in a device; classifying the received packet as a first packet type or a second packet type; when the packet is the first packet type, forwarding the packet to a next hop; and when the packet is the second packet type: performing forward error correction (FEC) encoding on the packet to generate repair data, modifying the packet by adding a multi-protocol label switching (MPLS) header to indicate that the packet is to be forwarded on an FEC-protected label switched path (LSP), generating an additional MPLS packet carrying the repair data, and forwarding the modified packet and the additional packet to a next hop.

Abstract: A method and apparatus for performing Layer 2 (L2) interworking is presented. A L2 Protocol Data Unit (PDU) is received at an L2 Switching Entity (SE). The L2 PDU is converted to a normalized Pseudowire (PW) PDU. The normalized PW PDU is then forwarded to a Layer 3 (L3) Routing Entity (RE). The normalized PDU may be in the form of a predetermined L2 protocol or a L2 agnostic protocol.

Abstract: In one embodiment, a method can include: receiving a packet in a device; classifying the received packet as a first packet type or a second packet type; when the packet is the first packet type, forwarding the packet to a next hop; and when the packet is the second packet type: performing forward error correction (FEC) encoding on the packet to generate repair data, modifying the packet by adding a multi-protocol label switching (MPLS) header to indicate that the packet is to be forwarded on an FEC-protected label switched path (LSP), generating an additional MPLS packet carrying the repair data, and forwarding the modified packet and the additional packet to a next hop.

Abstract: A method, apparatus and computer program product for routing data within a packet-switched network using a PW wherein the PW is terminated directly on the layer-3 routing device such that certain services and applications can be utilized is presented. The method, apparatus and computer program product receives an encapsulated layer-2 Protocol Data Unit (PDU) from a pseudowire emulating a service. The encapsulation is removed from the encapsulated layer-2 PDU and a layer-2 circuit associated with the pseudowire is terminated. The circuit is treated as an interface and the PDU is forwarded based on upper layer protocol information within the PDU.

Abstract: A method, apparatus and computer program product for routing data within a packet-switched network using a PW wherein the PW is terminated directly on the layer-3 routing device such that certain services and applications can be utilized is presented. The method, apparatus and computer program product receives an encapsulated layer-2 Protocol Data Unit (PDU) from a pseudowire emulating a service. The encapsulation is removed from the encapsulated layer-2 PDU and a layer-2 circuit associated with the pseudowire is terminated. The circuit is treated as an interface and the PDU is forwarded based on upper layer protocol information within the PDU.

Abstract: A method and apparatus for performing Layer 2 (L2) interworking is presented. A L2 Protocol Data Unit (PDU) is received at an L2 Switching Entity (SE). The L2 PDU is converted to a normalized Pseudowire (PW) PDU. The normalized PW PDU is then forwarded to a Layer 3 (L3) Routing Entity (RE). The normalized PDU may be in the form of a predetermined L2 protocol or a L2 agnostic protocol.

Abstract: A method and apparatus for providing information in a network by way of a Pseudowire switching TLV is presented. A second device in the network receives a first message having information relating to a first device in the network. The second device appends information relating to the second device (by way of a Pseudowire switching TLV) to the first message, resulting in a second message. The second message is then forwarded to a third device in the network.