Abstract: In some implementations, a method includes: preparing, at a first networking device, an incoming security key update request transaction, the incoming security key update request transaction including a request by the first networking device to use an incoming security key for incoming communications with other networking devices during an IPsec session, where the first networking device and the other networking devices communicate over a blockchain network including a blockchain; transmitting the incoming security key update request transaction from the first networking device to the blockchain network for validation; updating a copy of the blockchain with a block, the block including a validation of the incoming security key update request transaction that was transmitted to the blockchain network; and using at least the updated blockchain to update an IPsec security association (SA) or an IPsec security policy (SP) used by the first networking device.

Abstract: A method may include storing updated firmware in storage of a target switch, transmitting instructions to the target switch to initiate a restart thereof, and transmitting a respective notification to (i) at least one switch in each of a core layer and aggregation layer of the computer system, and (ii) switches in an access layer if a switch of the aggregation layer is the selected target switch. The notification may be indicative of an impending shut down of the target switch and include instructions to each recipient switch to cease directing packets thereto. The method may also include processing any packets directed to the target switch prior to the receipt of the notification and compliance thereto by each recipient switch, confirming all packets directed to the target switch from each recipient switch have been received and processed, and restarting the target switch, thereby updating the firmware on the target switch.

Abstract: In some implementations, a method includes: preparing, at a first networking device, an incoming security key update request transaction, the incoming security key update request transaction including a request by the first networking device to use an incoming security key for incoming communications with other networking devices during an IPsec session, where the first networking device and the other networking devices communicate over a blockchain network including a blockchain; transmitting the incoming security key update request transaction from the first networking device to the blockchain network for validation; updating a copy of the blockchain with a block, the block including a validation of the incoming security key update request transaction that was transmitted to the blockchain network; and using at least the updated blockchain to update an IPsec security association (SA) or an IPsec security policy (SP) used by the first networking device.

Abstract: A method may include storing updated firmware in storage of a target switch, transmitting instructions to the target switch to initiate a restart thereof, and transmitting a respective notification to (i) at least one switch in each of a core layer and aggregation layer of the computer system, and (ii) switches in an access layer if a switch of the aggregation layer is the selected target switch. The notification may be indicative of an impending shut down of the target switch and include instructions to each recipient switch to cease directing packets thereto. The method may also include processing any packets directed to the target switch prior to the receipt of the notification and compliance thereto by each recipient switch, confirming all packets directed to the target switch from each recipient switch have been received and processed, and restarting the target switch, thereby updating the firmware on the target switch.

Abstract: In some examples, a method includes determining, with a Software-Defined Networking (SDN) controller, a network topology for an SDN portion of a heterogeneous network. SDN portion 111 can, for example, be formed by hybrid and SDN devices. The heterogeneous network can, for example, include a non-SDN portion that borders SDN portion 111 and is formed by non-SDN devices. The method can further include sending tunneling instructions to a first hybrid border switch to create a tunnel between the first hybrid border switch and a second hybrid border switch in order to allow Open Shortest Path First (OSPF) routing between two non-SDN portions separated by an SDN portion within the heterogeneous network.

Abstract: In some examples, a method includes determining, with a Software-Defined Networking (SDN) controller, a network topology for an SDN portion of a heterogeneous network. SDN portion 111 can, for example, be formed by hybrid and SDN devices. The heterogeneous network can, for example, include a non-SDN portion that borders SDN portion 111 and is formed by non-SDN devices. The method can further include sending tunneling instructions to a first hybrid border switch to create a tunnel between the first hybrid border switch and a second hybrid border switch in order to allow Open Shortest Path First (OSPF) routing between two non-SDN portions separated by an SDN portion within the heterogeneous network.