Abstract: Some embodiments provide a method for a network management and control system that manages a virtual infrastructure deployed across a set of datacenters. Based on input from a top-level user of the virtual infrastructure, the method deploys a first logical network within the virtual infrastructure and defines one or more second-level users of the virtual infrastructure. The method receives input from a second-level user of the virtual infrastructure to define a second logical network and connect the second logical network to the first logical network. The first and second logical networks use a same data model and the second-level users are restricted from viewing configuration of the first logical network.

Abstract: Some embodiments provide a method for a network management and control system that manages a virtual infrastructure deployed across a set of datacenters. Based on input from a top-level user of the virtual infrastructure, the method deploys a first logical network within the virtual infrastructure and defines one or more second-level users of the virtual infrastructure. The method receives input from a second-level user of the virtual infrastructure to define a second logical network and connect the second logical network to the first logical network. The first and second logical networks use a same data model and the second-level users are restricted from viewing configuration of the first logical network.

Abstract: The disclosed apparatus may include a physical link that facilitates communication for a plurality of customer networks connected to a service provider network. The apparatus may also include a network device communicatively coupled to the physical link. The network device may identify first and second route-update messages that advertise a plurality of route targets representing the plurality of customer networks to at least one other network device within the service provider network. The network device may remove a route target from the first route-update message due at least in part to the physical link no longer facilitating communication for a customer network represented by the route target. The network device may then maintain the second route-update message intact despite the removal of the route target from the first route-update message. Various other apparatuses, systems, and methods are also disclosed.

Abstract: A label switched path (LSP) is established within a network using an MPLS fast reroute bypass tunnel when a resource along a primary path of the LSP has failed but is protected by the MPLS fast reroute bypass tunnel. While establishing the LSP, a network device identifies a failed resource along a primary path of the LSP. In response to identifying the failed resource, the network device determines whether a bypass tunnel exists from the network device to a node along the primary path, wherein the bypass tunnel avoids the failed resource. Upon determining that the bypass tunnel exists, the network device tunnels a message for establishing the LSP to the node over the bypass tunnel.

Abstract: A system architecture is described for supporting protocol independent multicast routing and local group membership multicast protocols concurrently and consistently within a multi-cast border router on a packet switched network.