Abstract: A method includes obtaining performance characterization values from endpoints managed by a first fog node at a first hierarchical level in a hierarchy of fog nodes. The method includes changing a first operating characteristic of the wireless network based on the performance characterization values. The first operating characteristic affects the operation of one or more of the endpoints. The method includes transmitting a portion of the performance characterization values to a second fog node at a second hierarchical level in the hierarchy of fog nodes. The method includes changing a second operating characteristic of the wireless network based on an instruction from the second fog node. The second operating characteristic affects the operation of the first fog node and/or other fog nodes at the first hierarchical level. Changing one or more of the first operating characteristic and the second operating characteristic satisfies an operating threshold for the wireless network.

Abstract: The present disclosure involves systems and methods for obtaining and correlating workload performance information from multiple tenants on a computing network and providing deployment improvement suggestions to a cloud operator or tenant based at least on the correlated workload performance information. In one particular implementation, applications deployed and executed on the cloud environment may provide performance logs and/or metrics to an inter-tenant workload engine of the cloud environment. The workload engine may utilize the received performance information to detect performance patterns of an application across the different tenant deployments. A recommendation engine may analyze the performance characteristics across the multiple tenant applications and determine an optimized deployment of the application and generate recommended deployment instructions to a cloud environment administrator and/or one or more tenants of the cloud environment.

Abstract: Disclosed is a system and method of providing transport-level identification and isolation of container traffic. The method includes assigning, by a software-defined-network (SDN) controller in an SDN-enable cloud environment, a service-ID to a service, a tenant-ID to a tenant and/or workload-ID to yield universal cloud classification details, and extracting, from a data flow, the universal cloud classification details. The method includes receiving a policy, generating flow rules based on the policy and universal cloud classification details, and transmitting the flow rules to an openflow application to confine packet forwarding decisions for the data flow.

Abstract: A community exchange gathers machine consumable modules in a centralized database. The community exchange receives information associated with the status of a computing device. One or more device tags are generated based on the first information. Each of the device tags is related to at least a portion of the status of the computing device. The community exchange stores a database of machine consumable modules in association with one or more existing tags. By cross-referencing the device tags with the existing tags, the community exchange determines whether one of the machine consumable modules is associated with the device tags. Responsive to a determination that no machine consumable module in the database is associated with the device tags, the information received from the computing device is stored as a machine consumable module associated with the device tags.

Abstract: In one embodiment, a service function classifier device determines a classification of a packet using one or more packet classification rules. The device selects a service function path based on the classification of the packet. The device determines one or more traffic flow characteristics based on the classification of the packet. The device generates a service function chaining (SFC) header that identifies the selected service function path and the determined one or more traffic flow characteristics. The SFC header is configured to cause a device along the service function path to forward the encapsulated packet based on the identified service function path and the determined one or more traffic flow characteristics. The device sends the packet along the selected service function path as an encapsulated packet that includes the generated SFC header.

Abstract: Various implementations disclosed herein enable improved allocation of fog node resources, which supports performance driven partitioning of competing client applications. In various implementations, methods are performed by a fog orchestrator configured to determine allocations of fog resources for competing client applications and partition the competing client applications based on the fog resource allocations. Methods include receiving reservation priority values (RPVs) associated with a plurality of client applications competing for a contested fog node resource, transmitting, to a subset of client devices, a request to provide updated RPVs, and awarding the contested fog node resource to one of the plurality of client applications based on the received RPVs and any updated RPVs.

Abstract: Disclosed is a system, method and computer readable medium enabling collaboration service providers to more accurately predict packet loss, jitter and delay based on current session, historical session and user location parameters. The prediction can be used to forecast the occurrence of poor media quality at the current location and potential future locations.

Abstract: Generating and enforcing tenant-specific policies within a container includes, applying a first policy for a specific operational parameter when a software package that is running within a container and that is utilized by a plurality of tenants is leveraged by a first tenant of the plurality of tenants. A second policy is applied for the specific operational parameter when the software package is leveraged by a second tenant of the plurality of tenants.

Abstract: A cloud provider provides services to tenants over a network. Each cloud-based service is configured according to a respective service deployment scheme. The cloud provider maintains, for each service, classification information, including: a scheme type; a three-tuple cloud identifier including a cloud identifier, a service identifier, and a tenant identifier; and one or more scheme-specific service identifiers. The cloud provider distributes the classification information within the cloud provider, including to the services, to enable a respective tenant to exchange Internet Protocol (IP) packets with, and thereby access, a respective service and components of the service based on the classification information. The IP packet includes, for the respective service, the scheme type, the cloud identifier, the service identifier, the tenant identifier of the respective tenant, and the one or more scheme-specific service identifiers.

Abstract: Various implementations disclosed herein enable transforming mutable wireless coverage areas using network coverage vehicles (NVCs) that are orchestrated by a network coverage controller. In various implementations, the method includes receiving coverage area performance characterization values from NCVs configured to provide a plurality of mutable wireless coverage areas. In various implementations, an arrangement of the mutable wireless coverage areas mutably defines the service area, which changes in accordance with changes to the arrangement of the mutable wireless coverage areas. In various implementations, the method also includes determining NCV operation adjustments for some of the NCVs based on the received coverage area performance characterization values in accordance with a service performance metric; and, altering an arrangement of one or more of the plurality of mutable wireless coverage areas within the service area by providing the NCV operation adjustments to some of the NCVs.

Abstract: Disclosed is a router (and method) for virtualizing a control plane of the router without redundancy. The router can include a processor, a data plane, a control plane, and a computer-readable storage medium having stored therein instructions which, when executed by the processor, cause the processor to request, a cloud service to instantiate a virtual instance of the control plane, receive a confirmation of instantiation of the virtual instance, transfer to the virtual instance of the control plane, an active state of the control plane, perform offline services (e.g., configuration change, operating system update, or firmware upgrade, etc.) and in response to completion of the offline services, receive the active state.

Abstract: In one embodiment, an intermediate node, of a multi-stage process path through a computer network, receives a workload message with an associated latency budget to complete the multi-stage process at a final stage device. In response, the intermediate node determines a current latency from an initial stage device for the workload message to the receiving of the workload message, and also determines a remaining portion of the latency budget based on the current latency. In response to the remaining portion of the latency budget being less than expected at the intermediate node, the intermediate node may perform one or more latency-reducing actions, and then transmits the workload message toward the final stage device.

Abstract: In one embodiment, a device in a network intercepts a Domain Name System (DNS) query sent by a node in the network to a DNS service. The device inserts metadata information about the node into the DNS query before sending the DNS query on to the DNS service. The device extracts policy information regarding the node from a DNS response sent from the DNS service back to the node in response to the DNS query. The device implements a network policy for the node within the network based on the policy information extracted from the DNS response.

Abstract: In one embodiment, a first device in a network receives information regarding one or more nodes in the network. The first device determines a property of the one or more nodes based on the received information. The first device determines a degree of trustworthiness of the one or more nodes based on the received information. The first device attests to the determined property and degree of trustworthiness of the one or more nodes to a verification device. The verification device is configured to verify the attested property and degree of trustworthiness.

Abstract: Disclosed is a system, method and computer readable medium enabling collaboration service providers to more accurately predict packet loss, jitter and delay based on current session, historical session and user location parameters. The prediction can be used to forecast the occurrence of poor media quality at the current location and potential future locations.

Abstract: In one embodiment, a device receives data regarding a plurality of heterogeneous computing environments. The received data comprises measured application metrics for applications executed in the computing environments and indications of processing capabilities of the computing environments. The device generates a training dataset by applying a machine learning-based classifier to the received data regarding the plurality of existing heterogeneous environments. The device trains a machine learning-based configuration engine using the training dataset. The device uses the configuration engine to generate configuration parameters for a particular heterogeneous computing environment based on one or more system requirements of the particular heterogeneous computing environment. The device provides the configuration parameters to the particular heterogeneous computing environment.

Abstract: In one embodiment, a device in a network maintains a plurality of network paths for a media session. The device identifies a subset of data for the media session as requiring redundancy. The device sends a packet in the identified subset of data for the media session as redundant packets via two or more of the plurality of network paths for the media session. The device sends a particular packet outside of the identified subset of data for the media session non-redundantly via one of the plurality of network paths for the media session.

Abstract: Embodiments herein describe a perch for screening drones before permitting access to a restricted geographic region. The perch may include various scanners for evaluating the payload of the drone, its hardware, and flight control software. In one embodiment, the screening perch includes a conveyor belt that moves the drone through various scanners or stages in the perch. In one embodiment, the perch ensures the drone is properly configured to enter the restricted geographic region. The region may include multiple requirements or criteria that must be satisfied before a drone is permitted to enter. For example, the drone may need a signed flight plan, cargo that is less than a certain percentage of its weight, or an approved flight controller before being permitted into the restricted region. In this manner, the perch serves as a controlled entrance point for drones attempting to enter the restricted region.

Abstract: A network device may connect to a smart-enabled network. Once connected, the network device may receive a network address for a network management server (NMS). Having the network address for the NMS, the network device may generate a vCard comprising the attributes necessary for registering with the NMS. The network device may then communicate the vCard to the NMS. The NMS may then be configured to identify, register, and add the network device to a directory.

Abstract: In one embodiment, a server determines a particular computer network outside of a lab environment to recreate, and also determines, for the particular computer network, hardware components and their interconnectivity, as well as installed software components and their configuration. The server then controls interconnection of lab hardware components within the lab environment according to the interconnectivity of the hardware components of the particular computer network. The server also installs and configures lab software components on the lab hardware components according to the configuration of the particular computer network. Accordingly, the server operates the installed lab software components on the interconnected lab hardware components within the lab environment to recreate operation of the particular computer network within the lab environment, and provides information about the recreated operation of the particular computer network.