Abstract: In general, techniques are described for decentralizing handling of subscriber sessions within a gateway device of a mobile network. A mobile network gateway comprises a data plane having a plurality of forwarding components to receive session requests from a mobile service provider network in which the mobile network gateway resides. A control plane comprises a plurality of distributed subscriber management service units coupled by a switch fabric to the data plane. Each of the subscriber management service units serve as anchors for communication sessions for mobile devices that are accessing one or more packet data network by the mobile service provider network. A request delegation module within each of the forwarding components directs the session requests to the subscriber management service units unit to provide management services for the sessions requested by the mobile device.

Abstract: In one example, a serving gateway device includes one or more network interfaces configured to receive a packet fragment from a packet data network gateway (PGW) device, and a control unit configured to hash a source Internet protocol (IP) address, a destination IP address, and a fragment identifier value for the packet fragment to determine an entry of a hash table, wherein the entry of the hash table includes data defining a next expected offset, a next expected fragment identifier, and a reference to a fragment table comprising data for at least one previous packet fragment corresponding to the packet fragment, to compare a length of the packet fragment to the next expected offset and the fragment identifier value for the packet fragment to the next expected fragment identifier, and store the packet fragment using the fragment table based on the comparison.

Abstract: In general, techniques are described for aggregating, within a network device, internal forwarding routes for multiple control protocols and allocating next hops for the routes among individual service units of a decentralized control plane for the network device. The techniques may also include aggregating internal forwarding routes for data protocols and allocating next hops for the routes among individual forwarding units of a decentralized data plane for the network device. In one example, a mobile gateway includes a plurality of subscriber management service units that present a uniform interface to nodes within a mobile service provider network. An allocation manager apportions a control protocol session identifier namespace into a plurality of contiguous, non-overlapping protocol session identifier ranges and allocates the ranges among the service units.

Abstract: A system, method and computer program product are provided for performing an action based on an aspect of a thread associated with electronic mail messages. In use, an aspect of a thread associated with a plurality of electronic mail messages is identified. Further, an action is performed based on the aspect of the thread.

Abstract: A data processing system, method and computer program product are provided. In use, data on a network is identified. In addition, a policy is identified. Further, the data is processed based on the policy for maintaining a confidentiality of the data.

Abstract: A refrigerator appliance is provided. The refrigerator appliance includes a drawer received within a chilled chamber. The drawer is mounted within the chilled chamber using drawer slides. The drawer slides are positioned at a bottom of the chilled chamber and support a bottom portion of a basket mounted on the drawer. Such a configuration can increase actual and/or perceived storage space within the chilled chamber and provide other improvements.

Abstract: Techniques are described for performing inline NAT functions in a forwarding element of a mobile gateway router or other device in which subscriber sessions of a mobile access network are distributed across a plurality of session management cards. The session management cards pre-allocate a public network address and port range for subscribers at the time a network connection is established in response to connection request prior to receiving any data traffic associated with the subscriber. NAT profiles are programmed into hardware forwarding elements of the mobile gateway router for inline NAT when routing subscriber traffic for the mobile access network.

Abstract: In general, techniques are described for encoding port ranges. In one example, a method includes generating an encoded value that represents a specified port range including a first element storing an identifier that identifies a frequently occurring port range stored in an associative data structure of most frequently occurring port ranges, a second element storing an index that represents a dynamically-learned port range specifying at least a part of the specified port range, the dynamically-learned port range represented in a tree-structure of dynamically-learned port ranges and identified by the index, and applying, by a forwarding plane of the computing device, one or more filters associated with the encoded value to a packet that specifies a port included in the specified port range.

Abstract: A system, method, and computer program product are provided for preventing access to data associated with a data access attempt. In use, a data access attempt associated with a remote data sharing session is identified. Further, access to the data is prevented.

Abstract: A system, method and computer program product are provided for performing an action based on an aspect of a thread associated with electronic mail messages. In use, an aspect of a thread associated with a plurality of electronic mail messages is identified. Further, an action is performed based on the aspect of the thread.

Abstract: A mobility assist assembly, consisting of a transportable patient support module including a support surface which is modifiable by at least a plurality of upwardly extending and individually height adjustable and articulate-able posts integrated into a supporting carriage. A power transport module can be docked to the carriage. The patient support surface further includes a plurality of individual height or width adjustable sections. A headboard proximate docking module interfaces with the patient support module and a power assist modules.

Abstract: A data loss prevention system, method, and computer program product are provided for determining whether a device is protected with an encryption mechanism before storing data thereon. In operation, data to be stored on a device is identified. Additionally, it is determined whether the device is protected with an encryption mechanism. Furthermore, there is conditional reaction, based on the determination.

Abstract: In general, this disclosure describes techniques for applying, with a network device, subscriber-specific packet processing using an internal processing path that includes service objects that are commonly applied to multiple packet flows associated with multiple subscribers. In one example, a network device control plane creates subscriber records that include, for respective subscribers, one or more variable values that specify service objects as well as an identifier for a packet processing template. A forwarding plane of the network device receives and maps subscriber packets to an associated subscriber record and then processes the packet by executing the packet processing template specified by the subscriber record. When the forwarding plane reaches a variable while executing the specified packet processing template, the forwarding plane reads the associated variable value from the subscriber record to identify and then apply the subscriber-specific service object specified by the variable.

Abstract: In general, techniques are described for selectively applying and reusing filters stored in a router. In one example, a method includes receiving a network access request from a first user. The method also includes selecting a candidate rule group associated with the packet flow, wherein the candidate rule group comprises one or more currently deployed rules of an existing rule group on the computing device that are currently installed within a forwarding plane and are being applied by the forwarding plane to network traffic associated with a second user. The method also includes installing a new rule group comprising the one or more currently deployed rules of the existing rule group and one or more new rules associated with the first user and not currently installed within a forwarding plane. The method also includes applying each rule of the new rule group to network traffic associated with the first user.

Abstract: In general, techniques are described for encoding port ranges. In one example, a method includes generating an encoded value that represents a specified port range including a first element storing an identifier that identifies a frequently occurring port range stored in an associative data structure of most frequently occurring port ranges, a second element storing an index that represents a dynamically-learned port range specifying at least a part of the specified port range, the dynamically-learned port range represented in a tree-structure of dynamically-learned port ranges and identified by the index, and applying, by a forwarding plane of the computing device, one or more filters associated with the encoded value to a packet that specifies a port included in the specified port range.

Abstract: In general, techniques are described for decentralizing handling of subscriber sessions within a gateway device of a mobile network. A mobile network gateway comprises a data plane having a plurality of forwarding components to receive session requests from a mobile service provider network in which the mobile network gateway resides. A control plane comprises a plurality of distributed subscriber management service units coupled by a switch fabric to the data plane. Each of the subscriber management service units serve as anchors for communication sessions for mobile devices that are accessing one or more packet data network by the mobile service provider network. A request delegation module within each of the forwarding components directs the session requests to the subscriber management service units unit to provide management services for the sessions requested by the mobile device.

Abstract: A device includes one or more network interfaces to receive layer two (L2) communications from an L2 network having a plurality of L2 devices; and a control unit to forward the L2 communications in accordance with forwarding information defining a plurality of flooding next hops. Each of the flooding next hops stored by the control unit specifies a set of the L2 devices within the L2 network to which to forward L2 communications in accordance with a plurality of trees, where each of the trees has a different one of the plurality of L2 devices as a root node. The control unit of the device computes a corresponding one of flooding next hops for each of the trees using only a subset of the trees without computing all of the trees having all of the different L2 network devices as root nodes.

Abstract: A consumer appliance, such as a refrigerator, includes a compartment having opposite sides and a bottom wall. A pull-out drawer is configured above the bottom wall of the compartment. A slide assembly is configured on each opposite side of the compartment and includes a base mounted to the compartment and a slide member linearly moveable along the base. The pull-out drawer has a slide bracket mounted to each respective slide member for movement of the drawer into and out of the compartment. A bottom slide assembly has a slide member and a base mounted on the bottom wall of the compartment. A cross bar is connected to and spans between the slide brackets below the pull-out drawer and is connected to the slide member of the bottom slide assembly.

Abstract: A system, method, and computer program product are provided for determining whether an electronic mail message is compliant with an etiquette policy. In use, a predetermined event associated with an electronic mail message is identified. Additionally, it is determined whether the electronic mail message is compliant with an etiquette policy, in response to the predetermined event. Furthermore, a reaction is performed, based on the determination.

Abstract: A system, method, and computer program product are provided for preventing data loss associated with an image. In use, an image is identified, and it is determined whether the image includes predetermined data. In addition, an action is performed based on the determination, for preventing data loss.