Abstract: A cable distribution system includes a head end connected to a plurality of customer devices through a transmission network that includes a remote fiber node, that converts received data to analog data suitable to be provided on a coaxial cable for the plurality of customer devices. The plurality of vCores instantiated on at least one of servers is configured within a container to provide services to the plurality of customer devices through the transmission network, where each of the vCores includes a service endpoint that is accessible from within the container while each of the vCores does not include a service endpoint that is directly accessible from a network address exterior to the container. A gateway instantiated one of the servers within the container provides access to each of the vCores using said service endpoint over a non-encrypted channel, and provides access to the gateway from a network address exterior to the container over an encrypted channel.

Abstract: A cable distribution system includes a head end connected to a plurality of customer devices through a transmission network that includes a remote fiber node, that converts received data to analog data suitable to be provided on a coaxial cable for the plurality of customer devices. The plurality of vCores instantiated on at least one of servers is configured within a container to provide services to the plurality of customer devices through the transmission network, where each of the vCores includes a service endpoint that is accessible from within the container while each of the vCores does not include a service endpoint that is directly accessible from a network address exterior to the container. A gateway instantiated one of the servers within the container provides access to each of the vCores using said service endpoint over a non-encrypted channel, and provides access to the gateway from a network address exterior to the container over an encrypted channel.

Abstract: A system and method for securely and bi-directionally transmitting information including conditional access private data between a client and a headend is disclosed. In an exemplary embodiment, the method includes: establishing a hypertext transfer protocol secure (HTTPs) connection, establishing a hypertext transfer protocol secure (HTTPs) connection; upgrading the HTTPs connection to a persistent bi-directional connection, accepting a first message from a client via the web socket connection, wherein the first message comprises an identifier of the client, parsing the message for the identifier of the client, associating the identifier of the client with the secure web socket connection, and transmitting a second message notifying the headend of the secure web site that connection, the message comprising the identifier of the client.

Abstract: A system and method for securely and bi-directionally transmitting information including conditional access private data between a client and a headend is disclosed. In an exemplary embodiment, the method includes: establishing a hypertext transfer protocol secure (HTTPs) connection, establishing a hypertext transfer protocol secure (HTTPs) connection; upgrading the HTTPs connection to a persistent bi-directional connection, accepting a first message from a client via the web socket connection, wherein the first message comprises an identifier of the client, parsing the message for the identifier of the client, associating the identifier of the client with the secure web socket connection, and transmitting a second message notifying the headend of the secure web site that connection, the message comprising the identifier of the client.

Abstract: In the preferred embodiment, the invention provides a modified Shortest Path First routing algorithm for use in a heterogeneous network. The routing algorithm is modified to include predetermined heterogeneous characteristics of the network nodes and to take these characteristics into account when calculating the shortest paths. For example, information may be included in the algorithm which identifies heterogeneous network nodes as it calculates shortest paths. Once a node has been identified as heterogeneous, i.e., capable of supporting at least two protocol sets, this information is carried over into subsequent path entries created by the routing algorithm. The algorithm then uses the encapsulation capability identifier in the calculation of the shortest paths by including the cost of auto-tunneling between heterogeneous nodes to be taken into account when determining the short path.

Abstract: The invention relates to a routing apparatus for routing data packets in a network comprising a sub-network, in particular a broadcast sub-network. The routing apparatus is included in a first network element of the sub-network, the first network element being arranged to support first and second protocol sets, for example OSI protocols and IP protocols. Upon designation of the first network element to represent the other network elements in the sub-network in respect of the first and second protocol sets, the routing apparatus is arranged to create a respective routing data packet for each protocol set and to cause the routing data packets to be propagated through the network. Upon resignation of the first network element as representative in respect of one of the protocol sets, the routing apparatus is arranged to cause the respective routing data packet for that protocol set only to be purged from the network.