Abstract: In one embodiment, a system includes a central hub comprising a power source, a data switch, a coolant system, and a management module, a plurality of network devices located within an interconnect domain of the central hub, and at least one combined cable connecting the central hub to the network devices and comprising a power conductor, a data link, a coolant tube, and a management communications link contained within an outer cable jacket.

Abstract: In one embodiment, a device in a network receives a set of sensor data from a plurality of sensors deployed in a location. The device determines a physical layout for furnishings in the location based on the received set of sensor data. One or more of the furnishings is equipped with one or more actuators configured to move the equipped furnishing in one or more directions. The device generates an instruction for the one or more actuators of a particular one of the furnishings based on the determined physical layout for the furnishings. The device sends the instruction to the one or more actuators of the particular furnishing, to implement the determined physical layout.

Abstract: In one embodiment, a classification device in a computer network analyzes data from a given device in the computer network, and classifies the given device as a particular type of device based on the data. The classification device may then determine whether a manufacturer usage description (MUD) policy exists for the particular type of device. In response to there being no existing MUD policy for the particular type of device, the classification device may then determine patterns of the analyzed data, classify the patterns into context-based policies, and generate a derived MUD policy for the particular type of device based on the context-based policies. The classification device may then apply one of either the existing or derived MUD policy for the given device within the computer network.

Abstract: In one embodiment, a client device includes an interface, a memory to store at least one part of a blockchain, and a processor to generate a client message indicating use of blockchain mode to establish a secure connection between the client device and a server, send the client message to the server on the interface, receive, from the server on the interface, a server message indicating use of the blockchain mode, and securely communicate with the server, on the interface, using at least one cryptographic key generated from information including cryptographic key generation information stored in the blockchain. Related apparatus and methods are also described.

Abstract: Disclosed is a system and method of providing a segment routing as a service application. The method includes receiving a configuration of an internet protocol environment. The configuration can be a layer 3 configuration of a single cloud environment or even across multiple cloud environments. The configuration defines routing, forwarding, and paths in the environment between different entities such as virtual machines. The method includes receiving a parameter associated with a workload of a tenant. The parameter can be a service level agreement (i.e., a best bandwidth available), a pathway requirement, a parameter associated with specific workload, and so forth. Based on the configuration and the parameter, the method includes generating tenant-defined layer 3 overlay segment routing rules that define how the workload of the tenant will route data in the internet protocol environment using segment routing.

Abstract: In one embodiment, a device obtains telemetry data indicative of channel usage by a plurality of Bluetooth Low Energy (BLE) tags. The device also obtains tag characteristic data indicative of one or more characteristics of the BLE tags. The device determines that usage of a particular channel by the BLE tags exceeds a predefined threshold, based on the obtained telemetry data. The device selects a subset of the plurality of BLE tags, based on their one or more characteristics indicated by the obtained tag characteristic data. The device instructs, for each of the selected subset of BLE tags, the selected BLE tag to increase an interval of time between BLE advertisements sent by the selected BLE tag.

Abstract: In one embodiment, an Internet of Things (IoT) device in a network establishes connections with a plurality of peers. The device identifies an event involving the IoT device. The device generates a GOAWAY message that includes metadata regarding the event within a metadata field of the message. The GOAWAY message indicates that the IoT device is not accepting new connections. The device sends the GOAWAY message to one or more of the peers.

Abstract: Systems and methods provide for validating a canary release of containers in a containerized production environment. A first container of the containerized production environment can receive network traffic. The first container can transmit the network traffic to a first version of a second container of the containerized production environment and to a traffic analysis engine. First metrics relating to processing by the first version of the second container can be captured. The traffic analysis engine can determine one or more traffic patterns included in the network traffic. The traffic analysis engine can cause simulated network traffic corresponding to the one or more traffic patterns to be transmitted to a second version (e.g., a canary release) of the containerized production environment. Second metrics relating to processing by the second version of the second container can be captured. A comparison between the first metrics and the second metrics can be presented.

Abstract: In one embodiment, a system includes a central hub comprising a power source, a data switch, a coolant system, and a management module, a plurality of network devices located within an interconnect domain of the central hub, and at least one combined cable connecting the central hub to the network devices and comprising a power conductor, a data link, a coolant tube, and a management communications link contained within an outer cable jacket.

Abstract: In one embodiment, a method comprises detecting, by an apparatus, establishment of a stateful application session between a mobile endpoint device and a stateful virtualized application executed by a first virtualization host in a data network, the mobile endpoint device establishing a network connection with the stateful virtualized application via a first wireless connection with a first network access point; generating, by the apparatus, a connection container comprising a connection identifier uniquely identifying the network connection, connection metadata describing the network connection, and application state metadata describing execution of the stateful virtualized application for the mobile endpoint device; and outputting, by the apparatus, the application state metadata for continuous execution of the stateful virtualized application by a second virtualization host associated with a second network access point, based on determining the mobile endpoint device connecting with the second network acces

Abstract: Systems, methods, and computer-readable mediums for distributing machine learning model training to network edge devices, while centrally monitoring training of the models and controlling deployment of the models. A machine learning model architecture can be generated at a machine learning structure controller. The machine learning model architecture can be deployed to network edge devices in a network environment to instantiate and train a machine learning model at the network edge devices. Performance reports indicating performance of the machine learning model at the network edge devices can be received by the machine learning structure controller from the network edge devices.

Abstract: Presented herein are methodologies to on-board and monitor Internet of Things (IoT) devices on a network. The methodology includes receiving at a server, from a plurality of IoT devices communicating over a network, data representative of external environmental factors being experienced by individual ones of the plurality of IoT devices at a predetermined location; generating, using machine learning, an aggregated model of the external environmental factors at the predetermined location; receiving, at the server, a communication indicative that a new IoT device seeks to join the network at the predetermined location; receiving, from the new IoT device, data representative of external environmental factors being experienced by the new IoT device; determining whether there is a discrepancy between the external environmental factors of the new IoT device and the aggregated model; and when there is such a discrepancy, prohibiting the new IoT device from joining the network.

Abstract: Techniques for establishing network policy parameters for an internet of things (IoT) device. A first network message is received from the IoT device using a cellular communication network. The first network message includes a protocol configuration options (PCO) element including a network policy identifier relating to the IoT device. A packet data network gateway (PGW) in the cellular communication network determines network policy parameters relating to the IoT device and the cellular communication network, based on the policy identifier. The network policy parameters for the IoT device are established in the cellular communication network.

Abstract: In one embodiment, a device obtains telemetry data indicative of channel usage by a plurality of Bluetooth Low Energy (BLE) tags. The device also obtains tag characteristic data indicative of one or more characteristics of the BLE tags. The device determines that usage of a particular channel by the BLE tags exceeds a predefined threshold, based on the obtained telemetry data. The device selects a subset of the plurality of BLE tags, based on their one or more characteristics indicated by the obtained tag characteristic data. The device instructs, for each of the selected subset of BLE tags, the selected BLE tag to increase an interval of time between BLE advertisements sent by the selected BLE tag.

Abstract: In an embodiment, a computer implemented method comprises receiving, at a first computing device associated with a managing entity, a request to perform an operation of a managed service; publishing to a first block of a distributed ledger system, by the first computing device associated with the managing entity, identification information of the managing entity; identifying, by a second computing device associated with the managed service, the identification information published to the first block of the distributed ledger system; publishing to a second block of the distributed ledger system, by the second computing device associated with the managed service, acknowledgement information comprising an indication that the identification information of the managing entity published to the first block was received and verified; publishing to a third block of the distributed ledger system, by the second computing device associated with the managed service, management request information comprising an operation r

Abstract: Automatic, adaptive stimulus generation includes receiving, at a network device that is associated with a network or system, analytics data that provides an indication of how the network or system is responding to a set of test stimuli introduced into the network or system to facilitate an analysis operation. The network device analyzes the analytics data based on an intended objective for the analysis operation and generates control settings based on the analyzing. The control settings control creation of a subsequent stimulus to be introduced into the network or system during subsequent execution of the analysis operation.

Abstract: Certain aspects of the present disclosure provide a method for managing network operations. The method generally includes selecting an edge cloud of a plurality of edge clouds to be used for performing one or more network operations for at least one endpoint device. In certain aspects, the selection may be based on an indication of at least one of an amount of available resources or capabilities associated with each of the plurality of edge clouds. In certain aspects, the method also includes configuring the edge cloud to perform the one or more network operations based on the selection.

Abstract: In one embodiment, a device is described, the device comprising a processor, a memory operative to store data used by the processor, a network interface operative to enable network communications with at least one other device, and a client executed by the processor, the client operative to utilize a first networking protocol to chain a request for information from the at least one other device and to send an information request packet via the network interface to the at least one other device, the information request packet comprising a request for information from the at least one other device, and a header of a second network protocol, in which a response to the request for information may be provided. Related devices, systems, and methods are also described.

Abstract: Techniques for orchestrating a machine learning (ML) system on a distributed network. Determined performance levels for a ML system, determined from performance data received from the distributed network, are compared to performance requirements from the ML system. An orchestration module for the ML system then determines adjustments for the ML system that will improve the performance of the ML system and executes the adjustments for the ML system.

Abstract: Disclosed is a system and method of providing a segment routing as a service application. The method includes receiving a configuration of an internet protocol environment. The configuration can be a layer 3 configuration of a single cloud environment or even across multiple cloud environments. The configuration defines routing, forwarding, and paths in the environment between different entities such as virtual machines. The method includes receiving a parameter associated with a workload of a tenant. The parameter can be a service level agreement (i.e., a best bandwidth available), a pathway requirement, a parameter associated with specific workload, and so forth. Based on the configuration and the parameter, the method includes generating tenant-defined layer 3 overlay segment routing rules that define how the workload of the tenant will route data in the internet protocol environment using segment routing.