Abstract: A method for processing state information updates. The method includes receiving, by a coordination point, a plurality of state information from a plurality of network elements; processing at least one of the plurality of state information to generate a result; and applying the result to at least one of the plurality of network elements in order to modify an operation of the at least one of the plurality of network elements.

Abstract: A method and system for maintaining persistent network policies for a virtual machine (VM) that includes determining a name of the VM executing on a first host connected to a first network device; binding the name of the VM to a network policy for the VM on the first network device; acquiring from VM management software, using the name of the VM, a universally unique identifier (UUID) of the VM; associating the UUID to the network policy on the first network device; applying the network policy for the VM on the first network device; subscribing to receive notifications from the VM management software of changes to the configuration of the VM corresponding to the UUID; receiving notification from the VM management software of a configuration change made to the VM corresponding to the UUID; and updating the network policy of the VM to reflect the configuration change of the VM.

Abstract: In general, embodiments of the invention relate to processing network traffic data units (NTDUs). More specifically, embodiments of the invention relate to processing NTDUs transmitted between client device and the one or more protected resources. The protected resources are logically surrounded by a perimeter, which is implemented as a set of network devices that manage the flow of NTDUs between client devices and the protected resources. The perimeter works in conjunction with a set of filtering devices to determine whether a given NTDU can ultimately be transmitted to, and processed by, a protected resource.

Abstract: A method for processing network traffic data units (NTDUs). The method includes receiving, by a wireless access point (WAP), a NTDU from a client device. The method further includes identifying a virtual tunnel upon which to transmit the NTDU, where the virtual tunnel is associated with a network device and transmitting, via the virtual tunnel, the NTDU to the network device.

Abstract: A method for detecting abnormalities in network element operation. The method includes monitoring at least a portion of the network element for abnormalities and making a determination that an abnormality exists, in response to the monitoring, and based on the determination, tracking the abnormality. An abnormality includes a measured performance that deviates from a nominal performance, but that does not cause erroneous behavior of the network element.

Abstract: A method for managing networking devices. The method includes receiving, by a second management system, first network device state information (NDSI) for a first plurality of network devices, where the first NDSI is obtained by a first management system and where the first management system manages the first plurality of network devices. The method further includes initiating performance of a management action based on a result, wherein the result is obtained by processing at least the first NDSI.

Abstract: A network device includes computing resources for utilization by processes hosted by the network device and a computing resources manager. The computing resources manager automatically instantiate a new instance of a first process of the processes upon termination of the first process; makes a determination that the network device has entered an out of computing resources state; and in response to the determination: performs an action set to increase a quantity of the computing resources that are available for allocation to the processes.

Abstract: A method for processing network traffic data units (NTDUs). The method includes receiving, by a wireless access point (WAP), a NTDU from a client device. The method further includes identifying a virtual tunnel upon which to transmit the NTDU, where the virtual tunnel is associated with a network device and transmitting, via the virtual tunnel, the NTDU to the network device.

Abstract: In general, embodiments of the invention relate to processing network traffic data units (NTDUs). More specifically, embodiments of the invention relate to processing NTDUs transmitted between client device and the one or more protected resources. The protected resources are logically surrounded by a perimeter, which is implemented as a set of network devices that manage the flow of NTDUs between client devices and the protected resources. The perimeter works in conjunction with a set of filtering devices to determine whether a given NTDU can ultimately be transmitted to, and processed by, a protected resource.

Abstract: A method for managing networking devices. The method includes receiving, by a second management system, first network device state information (NDSI) for a first plurality of network devices, where the first NDSI is obtained by a first management system and where the first management system manages the first plurality of network devices. The method further includes initiating performance of a management action based on a result, wherein the result is obtained by processing at least the first NDSI.

Abstract: A method and apparatus of a device that triggers a pause watchdog is described. In an exemplary embodiment, the device receives a pause message from a second network element on a first network element, where the pause message indicates that data should not be transmitted by the first network element. The device additionally triggers a pause watchdog on the first network element if the pause message is above a pause watchdog threshold, where the pause watchdog reduces the effect of the pause message.

Abstract: A method for processing network traffic data units (NTDUs). The method includes receiving, by a wireless access point (WAP), a NTDU from a client device. The method further includes identifying a virtual tunnel upon which to transmit the NTDU, where the virtual tunnel is associated with a network device and transmitting, via the virtual tunnel, the NTDU to the network device.

Abstract: A method and apparatus of a network element that installs a device driver used to manage hardware of the network element is described. In an exemplary embodiment, the network element detects, with a functionality of a network element operating system, the hardware of a data plane of the network element, where at least one component of the network element operating system is executing in a first container as a first set of processes. The network element further determines a device driver for the hardware and installs the device driver in a kernel of the host operating system. The network element additionally manages the data, with the network element operating system, using the device driver.

Abstract: A method and apparatus of a device that simulates a plurality of network elements is described. In an exemplary embodiment, the device receives network topology information for the plurality of simulated network elements. The device further instantiates a container for each of the plurality of simulated network elements. The device additionally configures a set of processes for each of the plurality of containers, where each of the set of processes simulates at least one of the plurality of simulated network elements. The plurality of set of processes further implements a network topology represented by the network topology information. The device performs a test of the network topology and saves the results of the test.

Abstract: Embodiments of the invention may relate to methods, systems, and/or non-transitory computer readable mediums for sidelining Such sidelining may include making a first determination, by a first network device, that a first network device state has degraded and making a first request, based on the first determination, to receive a first sideline token from a network controller. The network controller, in response to the first request, may make a second determination that a remaining sideline token is available. The method may also include receiving, by the first network device and based on the second determination, the remaining sideline token from the network controller and initiating, by the first network device, a graceful offlining based on receiving the remaining sideline token.

Abstract: Embodiments disclosed herein relate to method and systems for updating hardware tables. Such methods may include receiving a flexible pipeline definition from a controller at a compiler; generating, by the compiler, a hardware table update initial instruction set; and transmitting the hardware table update initial instruction set to a network device. The network device may use the hardware table initial instruction set to configure the network device to implement the flexible pipeline definition for a network chip.

Abstract: A method and apparatus of a device that evaluates multiple network asserts in response to changing network of network elements is described. In an exemplary embodiment, the device receives the multiple network asserts, where each of the plurality of network asserts represents a Boolean expression regarding a condition of at least one characteristic of at least one of the network elements. The device further detects a change in the network. In response to the detected change, the device, for one or more of the network asserts, evaluates this network assert to determine if this network asserts raises an action associated with this network assert. The device further performs the action associated this network assert if the network assert was raised.

Abstract: A method for managing networking devices. The method includes receiving, by a second management system, first network device state information (NDSI) for a first plurality of network devices, where the first NDSI is obtained by a first management system and where the first management system manages the first plurality of network devices. The method further includes initiating performance of a management action based on a result, wherein the result is obtained by processing at least the first NDSI.

Abstract: A method and apparatus of a device that triggers a pause watchdog is described. In an exemplary embodiment, the device receives a pause message from a second network element on a first network element, where the pause message indicates that data should not be transmitted by the first network element. The device additionally triggers a pause watchdog on the first network element if the pause message is above a pause watchdog threshold, where the pause watchdog reduces the effect of the pause message.

Abstract: A method for accessing operational information of a deployed network device through non-preprogrammed command line interface instructions. More specifically, a show command service is disclosed, which enables the procurement of additional configuration and/or state information on a network device through a coordination point.