Abstract: Various example embodiments for supporting zero-trust policy enforcement in a communication system are presented herein. Various example embodiments for supporting zero-trust policy enforcement in a communication system may be configured to support zero-trust policy enforcement, including zero-trust authentication, for Remote Direct Memory Access (RDMA) communications. Various example embodiments for supporting zero-trust policy enforcement for RDMA communications may be configured to support transparent zero-trust policy enforcement for RDMA communications by leveraging programmable Smart Network Interface Cards (SmartNICs).

Abstract: Disclosed is an electronic device. The electronic device includes: a housing including a side wall at least partially configured as an antenna, a first printed circuit board disposed in the housing and including at least one ground part, a second printed circuit board, wherein the second printed circuit board includes an extension part extending along the side wall of the housing, a first part extending from one end of the extension part and connected to the first printed circuit board, and a second part extending from an opposite end of the extension part and electrically connected to the at least one ground part, at least one component disposed on the extension part, and a processor disposed on the first printed circuit board, and operatively connected to the at least one component through the first part of the second printed circuit board.

Abstract: A wearable electronic device according to an embodiment may comprise: a housing which includes a front housing, a rear housing opposite to the front member, and a side housing surrounding the inner space between the front housing and the rear housing; a circuit board disposed in the housing and including at least one ground portion; a speaker module comprising a speaker disposed at one side of the rear housing and connected to the circuit board; and a support configured to support the speaker module and comprising a conductive material, wherein the support is electrically connected to the ground portion of the circuit board.

Abstract: Various example embodiments for supporting zero-trust policy enforcement in a communication system are presented herein. Various example embodiments for supporting zero-trust policy enforcement in a communication system may be configured to support zero-trust policy enforcement, including zero-trust authentication, for Remote Direct Memory Access (RDMA) communications. Various example embodiments for supporting zero-trust policy enforcement for RDMA communications may be configured to support transparent zero-trust policy enforcement for RDMA communications by leveraging programmable Smart Network Interface Cards (SmartNICs).

Abstract: A CPU implements a virtual network function (VNF) associated with flow processing and can offload at least some of the flow processing to a hardware accelerator. A module (e.g., TOR switch), external to the software-based processor and the hardware accelerator, examines packet flows and determines (e.g., using a top-K elephant-flow-detection algorithm) which ones are more suitable for offloading from the software-based processor to the hardware accelerator than others. The external module communicates the relative suitability for offloading to the CPU using packet tags or out-of-band messaging, and the CPU uses the relative suitability to determine which flows to offload or onload. In some implementations, the CPU can instruct the external module to change the value of K used in the algorithm.

Abstract: An end-to-end telemetry system for a Remote Direct Memory Access (RDMA) communication network having multiple end-servers. The system includes an RDMA tracer for each end-server, one or more programmable data planes, and a telemetry collector. Each RDMA tracer extracts host-level telemetry information for one or more RDMA sessions associated with the corresponding end-server. Each programmable data plane extracts network-level telemetry information for one or more RDMA sessions associated with the programmable data plane. The telemetry collector (i) receives the host-level telemetry information from the RDMA tracers and the network-level telemetry information from the one or more programmable data planes and (ii) generates telemetry reports based on the host-level and network-level telemetry information. In some implementations, the system enables real-time monitoring of RDMA traffic at the RDMA protocol level granularity across all RDMA-enabled workloads for different use cases.

Abstract: Various example embodiments for supporting zero-trust policy enforcement in a communication system are presented herein. Various example embodiments for supporting zero-trust policy enforcement in a communication system may be configured to support zero-trust policy enforcement, including zero-trust authentication, for Remote Direct Memory Access (RDMA) communications. Various example embodiments for supporting zero-trust policy enforcement for RDMA communications may be configured to support transparent zero-trust policy enforcement for RDMA communications by leveraging programmable Smart Network Interface Cards (SmartNICs).

Abstract: System, method, and software for detecting anomalies in data generated by microservices. In one embodiment, an anomaly detector collects performance metrics for a microservice deployed in a data center for an application. The anomaly detector transforms the performance metrics into a time-series structured dataset for the microservice, and feeds the structured dataset to a machine learning system to determine whether an anomaly exists in the structured dataset based on an anomaly detection model. The anomaly detector performs an anomaly classification with the machine learning system based on an anomaly classification model and the structured dataset when an anomaly is detected in the structured dataset, and performs an action based on the anomaly classification.

Abstract: Various example embodiments for supporting zero-trust policy enforcement in a communication system are presented herein. Various example embodiments for supporting zero-trust policy enforcement in a communication system may be configured to support zero-trust policy enforcement, including zero-trust authentication, for Remote Direct Memory Access (RDMA) communications. Various example embodiments for supporting zero-trust policy enforcement for RDMA communications may be configured to support transparent zero-trust policy enforcement for RDMA communications by leveraging programmable Smart Network Interface Cards (SmartNICs).

Abstract: An end-to-end telemetry system for a Remote Direct Memory Access (RDMA) communication network having multiple end-servers. The system includes an RDMA tracer for each end-server, one or more programmable data planes, and a telemetry collector. Each RDMA tracer extracts host-level telemetry information for one or more RDMA sessions associated with the corresponding end-server. Each programmable data plane extracts network-level telemetry information for one or more RDMA sessions associated with the programmable data plane. The telemetry collector (i) receives the host-level telemetry information from the RDMA tracers and the network-level telemetry information from the one or more programmable data planes and (ii) generates telemetry reports based on the host-level and network-level telemetry information. In some implementations, the system enables real-time monitoring of RDMA traffic at the RDMA protocol level granularity across all RDMA-enabled workloads for different use cases.

Abstract: Disclosed is an electronic device. The electronic device includes: a housing including a side wall at least partially configured as an antenna, a first printed circuit board disposed in the housing and including at least one ground part, a second printed circuit board, wherein the second printed circuit board includes an extension part extending along the side wall of the housing, a first part extending from one end of the extension part and connected to the first printed circuit board, and a second part extending from an opposite end of the extension part and electrically connected to the at least one ground part, at least one component disposed on the extension part, and a processor disposed on the first printed circuit board, and operatively connected to the at least one component through the first part of the second printed circuit board.

Abstract: Packet-processing circuitry including one or more flow caches whose contents are managed using a cache-entry replacement policy that is implemented based on one or more updatable counters maintained for each of the cache entries. In an example embodiment, the implemented policy enables the flow cache to effectively catch and keep elephant flows by giving to the caught elephant flows appropriate preference in terms of the cache dwell time, which can beneficially improve the overall cache-hit ratio and/or packet-processing throughput. Some embodiments can be used to implement an Open Virtual Switch (OVS). Some embodiments are advantageously capable of implementing the cache-entry replacement policy with very limited additional memory allocation.

Abstract: An apparatus may implement an ad hoc service switch to establish an ad hoc link between ad hoc devices, such that the apparatus is a transparent node in an ad hoc link between the ad hoc devices. The apparatus may implement rule-based control of at least one ad hoc device, based on processing a data packet received from an ad hoc device via the ad hoc link. Rule-based control may include performing at least one operation of selectively forwarding the data packet, selectively inhibiting the data packet from being forwarded, modifying the data packet, and generating and transmitting a new data packet. The apparatus may establish the ad hoc link via an initial ad hoc link between the apparatus and the first device, a network communication link between the apparatus and an external apparatus, and an ad hoc link between the external apparatus and the second device.

Abstract: Packet-processing circuitry including one or more flow caches whose contents are managed using a cache-entry replacement policy that is implemented based on one or more updatable counters maintained for each of the cache entries. In an example embodiment, the implemented policy enables the flow cache to effectively catch and keep elephant flows by giving to the caught elephant flows appropriate preference in terms of the cache dwell time, which can beneficially improve the overall cache-hit ratio and/or packet-processing throughput. Some embodiments can be used to implement an Open Virtual Switch (OVS). Some embodiments are advantageously capable of implementing the cache-entry replacement policy with very limited additional memory allocation.

Abstract: An apparatus may implement an ad hoc service switch to establish an ad hoc link between ad hoc devices, such that the apparatus is a transparent node in an ad hoc link between the ad hoc devices. The apparatus may implement rule-based control of at least one ad hoc device, based on processing a data packet received from an ad hoc device via the ad hoc link. Rule-based control may include performing at least one operation of selectively forwarding the data packet, selectively inhibiting the data packet from being forwarded, modifying the data packet, and generating and transmitting a new data packet. The apparatus may establish the ad hoc link via an initial ad hoc link between the apparatus and the first device, a network communication link between the apparatus and an external apparatus, and an ad hoc link between the external apparatus and the second device.

Abstract: System, method, and software for detecting anomalies in data generated by microservices. In one embodiment, an anomaly detector collects performance metrics for a microservice deployed in a data center for an application. The anomaly detector transforms the performance metrics into a time-series structured dataset for the microservice, and feeds the structured dataset to a machine learning system to determine whether an anomaly exists in the structured dataset based on an anomaly detection model. The anomaly detector performs an anomaly classification with the machine learning system based on an anomaly classification model and the structured dataset when an anomaly is detected in the structured dataset, and performs an action based on the anomaly classification.

Abstract: A plurality of agents is instantiated on a corresponding plurality of servers that are running concurrent instances of a control plane application. A first agent is selected from the plurality of agents to mediate communication between a client and the concurrent instances of the control plane application running on the plurality of servers. The first agent replicates uplink packets received from the client for transmission to the plurality of agents. A first connection is used to convey the uplink packets. The first agent transmits a single copy of redundant downlink packets received from the plurality of agents to the client via the first connection. In some cases, the first connection is a stateful transmission control protocol (TCP) connection and the first agent replicates the uplink packets received in a single TCP stream. The first agent merges the redundant downlink packets into the single TCP stream.

Abstract: A packet splicer receives, from a first server of a plurality of servers, a first request for retransmission of an uplink packet that was received from a client and replicated to the plurality of servers. The plurality of servers is running concurrent instances of a control plane application configured to process information in the uplink packet. The packet splicer transmits the first request for retransmission of the uplink packet to the client. The packet splicer bypasses transmission of a second request for retransmission of the uplink packet received from a second server of the plurality of servers. In some cases, the packet splicer receives, from the client, a request for retransmission of a downlink packet that was redundantly transmitted by the plurality of servers. The packet splicer replicates the request for retransmission of the downlink packet to the plurality of servers.

Abstract: System, method, and software for managing packet forwarding by end devices that use Zigbee protocol. In one embodiment, a P4 switch is implemented at an edge of an IP network as an intermediary between the end devices that use Zigbee protocol so that packets forwarded by each of the end devices flow through the switch. The switch includes a transceiver configured to receive a packet forwarded by a first endpoint in an end device and destined for a second endpoint. The switch includes a P4 parser configured to parse the packet to identify fields of the packet, and a P4 analyzer configured to process a plurality of match-action tables and the fields of the packet to provide data plane handling of the packet.

Abstract: A packet splicer receives, from a first server of a plurality of servers, a first request for retransmission of an uplink packet that was received from a client and replicated to the plurality of servers. The plurality of servers is running concurrent instances of a control plane application configured to process information in the uplink packet. The packet splicer transmits the first request for retransmission of the uplink packet to the client. The packet splicer bypasses transmission of a second request for retransmission of the uplink packet received from a second server of the plurality of servers. In some cases, the packet splicer receives, from the client, a request for retransmission of a downlink packet that was redundantly transmitted by the plurality of servers. The packet splicer replicates the request for retransmission of the downlink packet to the plurality of servers.