Abstract: Computing devices and method for performing a secure neighbor discovery. A local computing device transmits an encrypted local node identifier and an encrypted local challenge to a remote computing device. The remote computing device generates a local challenge response based on the local challenge; and transmits an encrypted remote node identifier and an encrypted local challenge response to the local computing device. The local computing device determines that the received local challenge response corresponds to an expected local challenge response generated based on the local challenge. The remote computing device further transmits an encrypted remote challenge. The local computing device generates a remote challenge response based on the remote challenge; and transmits an encrypted remote challenge response to the remote computing device.

Abstract: Computing devices and method for performing a secure neighbor discovery. A local computing device transmits an encrypted local node identifier and an encrypted local challenge to a remote computing device. The remote computing device generates a local challenge response based on the local challenge; and transmits an encrypted remote node identifier and an encrypted local challenge response to the local computing device. The local computing device determines that the received local challenge response corresponds to an expected local challenge response generated based on the local challenge. The remote computing device further transmits an encrypted remote challenge. The local computing device generates a remote challenge response based on the remote challenge; and transmits an encrypted remote challenge response to the remote computing device.

Abstract: An assembly includes a dispenser having a lower body including a bottom from which there extends a lower skirt, wherein the lower skirt there is fitted and an upper body including a neck, a pump adapted to be fixed in the neck, from the neck extends an upper skirt adapted to fit on the lower skirt, the lower body and the upper body defining a cavity in which a liquid pouch can be placed, the assembly comprising a support element comprising a wall-fixing plate to which a fixing base is fixed, the bottom comprising a bottom wall that is arranged around at least a part of the perimeter of the bottom and extends in the opposite direction to the lower skirt, forming an open housing, the bottom being provided with a connection device to the support element.

Abstract: Computing devices and method for performing a secure neighbor discovery. A local computing device transmits an encrypted local node identifier and an encrypted local challenge to a remote computing device. The remote computing device generates a local challenge response based on the local challenge; and transmits an encrypted remote node identifier and an encrypted local challenge response to the local computing device. The local computing device determines that the received local challenge response corresponds to an expected local challenge response generated based on the local challenge. The remote computing device further transmits an encrypted remote challenge. The local computing device generates a remote challenge response based on the remote challenge; and transmits an encrypted remote challenge response to the remote computing device.

Abstract: Computing devices and method for performing a secure neighbor discovery. A local computing device transmits an encrypted local node identifier and an encrypted local challenge to a remote computing device. The remote computing device generates a local challenge response based on the local challenge; and transmits an encrypted remote node identifier and an encrypted local challenge response to the local computing device. The local computing device determines that the received local challenge response corresponds to an expected local challenge response generated based on the local challenge. The remote computing device further transmits an encrypted remote challenge. The local computing device generates a remote challenge response based on the remote challenge; and transmits an encrypted remote challenge response to the remote computing device.

Abstract: Computing devices and methods for transmitting and receiving optimized tunneling IP packets. At the entry point of a tunnel, an IP packet comprising at least one header is received. If data comprised in one of the at least one header of the received IP packet are redundant with data comprised in one or more tunneling header of a tunneling IP packet, then the redundant header is removed from the received IP packet. The tunneling IP packet encapsulating the received IP packet (with its redundant header removed) is transmitted. A header removal field is positioned in the tunneling IP packet to indicate the positive determination of redundancy. At the exit point of the tunnel, the tunneling IP packet is received. The header removal field and the one or more tunneling header of the tunneling IP packet are used for identifying the previous determination of redundancy and recreating the removed header.

Abstract: Computing device and method for generating a fabric-wide IPv6 address in a data center comprising a plurality of fabrics. A configuration file is stored in a memory of a computing device. The configuration file comprises an Internet Protocol version 6 (IPv6) base prefix and a fabric identifier. A processing unit of the computing device determines a host identifier. The processing unit generates an IPv6 prefix, by combining the IPv6 base prefix stored in the configuration file and the fabric identifier stored in the configuration file. The processing unit generates an IPv6 address, by combining the IPv6 prefix and the host identifier. The processing unit further advertises the generated IPv6 address.

Abstract: Computing device (located in a fabric of a data center) and method for generating a link IPv6 address. The computing device determines a local node identifier and a local link identifier for a communication interface of the computing device. The computing device receives from a remote computing device a remote node identifier and a remote link identifier for a remote communication interface of the remote computing device. Based on a comparison of the local and remote node identifiers, the link IPv6 address is generated by using an IPv6 base prefix, the local node identifier, the remote node identifier, the local link identifier, the remote link identifier, and an indicator that the local node identifier is greater or lower than the remote node identifier. A network configuration of the computing device is performed by generating a fabric-wide IPv6 address and one or more link IPv6 address.

Abstract: Method and computing device performing a fabric deployment in a data center. The computing device stores a configuration file comprising first and second IPv6 base prefixes, and a fabric identifier. The computing device generates a host identifier, a fabric-wide IPv6 prefix by combining the first IPv6 base prefix and the fabric identifier, and a fabric-wide IPv6 address by combining the fabric-wide IPv6 prefix and the host identifier. The computing device determines a local node identifier and a local link identifier for a communication interface of the computing device. The computing device performs a (secure) neighbor discovery procedure for determining a remote node identifier and a remote link identifier for a communication interface of a remote computing device. The computing device generates a link IPv6 address based on the second IPv6 base prefix and at least some of: the local node and link identifiers, and the remote node and link identifiers.

Abstract: Computing devices and methods for transmitting and receiving optimized tunneling IP packets. At the entry point of a tunnel, an IP packet comprising at least one header is received. If data comprised in one of the at least one header of the received IP packet are redundant with data comprised in one or more tunneling header of a tunneling IP packet, then the redundant header is removed from the received IP packet. The tunneling IP packet encapsulating the received IP packet (with its redundant header removed) is transmitted. A header removal field is positioned in the tunneling IP packet to indicate the positive determination of redundancy. At the exit point of the tunnel, the tunneling IP packet is received. The header removal field and the one or more tunneling header of the tunneling IP packet are used for identifying the previous determination of redundancy and recreating the removed header.

Abstract: Computing devices and method for performing a secure neighbor discovery. A local computing device transmits an encrypted local node identifier and an encrypted local challenge to a remote computing device. The remote computing device generates a local challenge response based on the local challenge; and transmits an encrypted remote node identifier and an encrypted local challenge response to the local computing device. The local computing device determines that the received local challenge response corresponds to an expected local challenge response generated based on the local challenge. The remote computing device further transmits an encrypted remote challenge. The local computing device generates a remote challenge response based on the remote challenge; and transmits an encrypted remote challenge response to the remote computing device.

Abstract: Computing device (located in a fabric of a data center) and method for generating a link IPv6 address. The computing device determines a local node identifier and a local link identifier for a communication interface of the computing device. The computing device receives from a remote computing device a remote node identifier and a remote link identifier for a remote communication interface of the remote computing device. Based on a comparison of the local and remote node identifiers, the link IPv6 address is generated by using an IPv6 base prefix, the local node identifier, the remote node identifier, the local link identifier, the remote link identifier, and an indicator that the local node identifier is greater or lower than the remote node identifier. A network configuration of the computing device is performed by generating a fabric-wide IPv6 address and one or more link IPv6 address.

Abstract: Method and computing device performing a fabric deployment in a data center. The computing device stores a configuration file comprising first and second IPv6 base prefixes, and a fabric identifier. The computing device generates a host identifier, a fabric-wide IPv6 prefix by combining the first IPv6 base prefix and the fabric identifier, and a fabric-wide IPv6 address by combining the fabric-wide IPv6 prefix and the host identifier. The computing device determines a local node identifier and a local link identifier for a communication interface of the computing device. The computing device performs a (secure) neighbor discovery procedure for determining a remote node identifier and a remote link identifier for a communication interface of a remote computing device. The computing device generates a link IPv6 address based on the second IPv6 base prefix and at least some of: the local node and link identifiers, and the remote node and link identifiers.

Abstract: Computing device and method for generating a fabric-wide IPv6 address in a data center comprising a plurality of fabrics. A configuration file is stored in a memory of a computing device. The configuration file comprises an Internet Protocol version 6 (IPv6) base prefix and a fabric identifier. A processing unit of the computing device determines a host identifier. The processing unit generates an IPv6 prefix, by combining the IPv6 base prefix stored in the configuration file and the fabric identifier stored in the configuration file. The processing unit generates an IPv6 address, by combining the IPv6 prefix and the host identifier. The processing unit further advertises the generated IPv6 address.

Abstract: A method of supporting service chaining at a network device of a data network is disclosed. The data network offers a set of services associated with a set of network devices, where subscribers of the data network are served by chains of one or more services. The method starts upon receiving a frame, and the network device selects a chain of one or more services for the frame to be processed by the data network. The network device encapsulates the frame with a reflected frame message (RFM) header, the RFM header containing source information associated with the network device, destination information associated with an immediate next service for the frame to be processed, an operation code indicating the frame being an RFM frame. Then the network device sends the encapsulated frame out of the network device according to the destination information of the encapsulated frame.

Abstract: A method of supporting service chaining at a network device of a data network is disclosed. The data network offers a set of services associated with a set of network devices, where subscribers of the data network are served by chains of one or more services. The method starts upon receiving a frame, and the network device selects a chain of one or more services for the frame to be processed by the data network. The network device encapsulates the frame with a reflected frame message (RFM) header, the RFM header containing source information associated with the network device, destination information associated with an immediate next service for the frame to be processed, an operation code indicating the frame being an RFM frame. Then the network device sends the encapsulated frame out of the network device according to the destination information of the encapsulated frame.

Abstract: Presented is a system and method for distributing a network application across a plurality of geographically dispersed network sites. The system comprises a plurality of network sites connected by a shared network and interconnected by a dedicated non-blocking communication network. The system can use different interconnecting network topologies based on the number of sites to be interconnected. The method balances the network application load and resources across the interconnected network sites based on a distribution policy implemented without burdening the shared network. The method provides redundancy capabilities by detecting the loss of a network site and redistributing the network application load to the remaining network sites.

Abstract: A lattice of interconnected concepts is constructed from flow entries. Each concept describes a subset of flows and a subset of the flow attributes. Based on user queries, the lattice is used to build disjoint sets of flows referred to as flowsets. Each user query specifies one or more of the flow attributes to be measured. Each flowset includes one or more of the flows to thereby enable sharing of the hardware counters among the flows. One hardware counter is then assigned to each flowset.

Abstract: A lattice of interconnected concepts is constructed from flow entries. Each concept describes a subset of flows and a subset of the flow attributes. Based on user queries, the lattice is used to build disjoint sets of flows referred to as flowsets. Each user query specifies one or more of the flow attributes to be measured. Each flowset includes one or more of the flows to thereby enable sharing of the hardware counters among the flows. One hardware counter is then assigned to each flowset.

Abstract: Presented is a system and method for distributing a network application across a plurality of geographically dispersed network sites. The system comprises a plurality of network sites connected by a shared network and interconnected by a dedicated non-blocking communication network. The system can use different interconnecting network topologies based on the number of sites to be interconnected. The method balances the network application load and resources across the interconnected network sites based on a distribution policy implemented without burdening the shared network. The method provides redundancy capabilities by detecting the loss of a network site and redistributing the network application load to the remaining network sites.