Abstract: A VPN tunnel interface is instantiated within a router based on a tunnel network namespace. One or more virtual peers corresponding to the VPN tunnel interface and one or more virtual ethernet interfaces corresponding to the one or more virtual peers are instantiated. The tunnel network namespace is configured to route, based on a source address, network traffic from a specified client device to a specified virtual peer of the one or more virtual peers via the VPN tunnel interface. A connection is established between a client device and a VPN process of the router and a traffic flow is transported to and from the client device through a VPN tunnel via the VPN tunnel interface, the one or more virtual peers, and the one or more virtual ethernet interfaces.

Abstract: Obtaining location metadata for network devices using augmented reality (AR) is disclosed herein. In one embodiment, an AR computing device receives first user inputs indicating boundary points of a device region, and determines first spatial coordinates for each boundary point. The AR computing device next receives a second user input that indicates a network device within the device region, and determines second spatial coordinates for the network device. The AR computing device may also correlate the network device with a known connected network device. The AR computing device then transmits, to a server computing device, first metadata that includes the first spatial coordinates and an identifier of the device region, and second metadata that includes the second spatial coordinates and an identifier of the indicated network device. In some embodiments, the metadata may be employed, e.g., to generate a floorplan visualization and/or a signal strength map of the device region.

Abstract: A first router obtains a first network address of a first local area network (LAN) implemented by a second router and a first subnet mask associated with the first LAN. The first router causes the establishment of a secure communications channel with the second router. The first router determines that a computing device seeks to join the first LAN. The first router obtains an internet protocol (IP) address that has a same network address as the first network address and sends, to the computing device, the IP address and the first subnet mask for use by the computing device.

Abstract: Obtaining location metadata for network devices using augmented reality (AR) is disclosed herein. In one embodiment, an AR computing device receives first user inputs indicating boundary points of a device region, and determines first spatial coordinates for each boundary point. The AR computing device next receives a second user input that indicates a network device within the device region, and determines second spatial coordinates for the network device. The AR computing device may also correlate the network device with a known connected network device. The AR computing device then transmits, to a server computing device, first metadata that includes the first spatial coordinates and an identifier of the device region, and second metadata that includes the second spatial coordinates and an identifier of the indicated network device. In some embodiments, the metadata may be employed, e.g., to generate a floorplan visualization and/or a signal strength map of the device region.

Abstract: A first router obtains a first network address of a first local area network (LAN) implemented by a second router and a first subnet mask associated with the first LAN. The first router causes the establishment of a secure communications channel with the second router. The first router determines that a computing device seeks to join the first LAN. The first router obtains an internet protocol (IP) address that has a same network address as the first network address and sends, to the computing device, the IP address and the first subnet mask for use by the computing device.

Abstract: Event-driven Internet of Things (IoT) abstraction using rules is disclosed herein. In one embodiment, a network computing device that provides an IoT management (IoTM) service is communicatively coupled to an IoT device. The IoTM service receives multiple rules, each of which comprises an event identifier that identifies an event that the IoT device is capable of emitting, and an action identifier that identifies an action to be performed by the IoTM service (e.g., a command to be issued to the IoT device or an operation to be performed by the IoTM service). Upon receiving a first event emitted by the IoT device, the IoTM service identifies a first rule of the plurality of rules based on a first event identifier of the first rule that matches the first event. The IoTM service then executes a first action, wherein a first action identifier of the first rule identifies the first action.

Abstract: A VPN tunnel interface is instantiated within a router based on a tunnel network namespace. One or more virtual peers corresponding to the VPN tunnel interface and one or more virtual ethernet interfaces corresponding to the one or more virtual peers are instantiated. The tunnel network namespace is configured to route, based on a source address, network traffic from a specified client device to a specified virtual peer of the one or more virtual peers via the VPN tunnel interface. A connection is established between a client device and a VPN process of the router and a traffic flow is transported to and from the client device through a VPN tunnel via the VPN tunnel interface, the one or more virtual peers, and the one or more virtual ethernet interfaces.

Abstract: Event-driven Internet of Things (IoT) abstraction using rules is disclosed herein. In one embodiment, a network computing device that provides an IoT management (IoTM) service is communicatively coupled to an IoT device. The IoTM service receives multiple rules, each of which comprises an event identifier that identifies an event that the IoT device is capable of emitting, and an action identifier that identifies an action to be performed by the IoTM service (e.g., a command to be issued to the IoT device or an operation to be performed by the IoTM service). Upon receiving a first event emitted by the IoT device, the IoTM service identifies a first rule of the plurality of rules based on a first event identifier of the first rule that matches the first event. The IoTM service then executes a first action, wherein a first action identifier of the first rule identifies the first action.

Abstract: A VPN tunnel interface is instantiated within a router based on a tunnel network namespace. One or more virtual peers corresponding to the VPN tunnel interface and one or more virtual ethernet interfaces corresponding to the one or more virtual peers are instantiated. The tunnel network namespace is configured to route, based on a source address, network traffic from a specified client device to a specified virtual peer of the one or more virtual peers via the VPN tunnel interface. A connection is established between a client device and a VPN process of the router and a traffic flow is transported to and from the client device through a VPN tunnel via the VPN tunnel interface, the one or more virtual peers, and the one or more virtual ethernet interfaces.

Abstract: A VPN tunnel interface is instantiated within a router based on a tunnel network namespace. One or more virtual peers corresponding to the VPN tunnel interface and one or more virtual ethernet interfaces corresponding to the one or more virtual peers are instantiated. The tunnel network namespace is configured to route, based on a source address, network traffic from a specified client device to a specified virtual peer of the one or more virtual peers via the VPN tunnel interface. A connection is established between a client device and a VPN process of the router and a traffic flow is transported to and from the client device through a VPN tunnel via the VPN tunnel interface, the one or more virtual peers, and the one or more virtual ethernet interfaces.

Abstract: Routing network traffic using router-terminated virtual private network (VPN) client sessions is disclosed herein. In one embodiment, a router computing device receives an indication of an association between a client computing device and VPN configuration data for a VPN, the indication comprising an identifier of the client computing device and the VPN configuration data. The router computing device binds a VPN client session instantiated by the router computing device to a network interface and implements a firewall rule to route network traffic to and from the client computing device via the network interface. The router computing device establishes a connection with the VPN using the VPN client session and the VPN configuration data. Finally, the router computing device receives network traffic for the client computing device and routes the network traffic via the network interface.

Abstract: Disclosed herein are methods and apparatus for continuous integration testing of network access devices. A testing platform includes a virtual environmental library and a processor.

Abstract: Obtaining location metadata for network devices using augmented reality (AR) is disclosed herein. In one embodiment, an AR computing device receives first user inputs indicating boundary points of a device region, and determines first spatial coordinates for each boundary point. The AR computing device next receives a second user input that indicates a network device within the device region, and determines second spatial coordinates for the network device. The AR computing device may also correlate the network device with a known connected network device. The AR computing device then transmits, to a server computing device, first metadata that includes the first spatial coordinates and an identifier of the device region, and second metadata that includes the second spatial coordinates and an identifier of the indicated network device. In some embodiments, the metadata may be employed, e.g., to generate a floorplan visualization and/or a signal strength map of the device region.

Abstract: Disclosed herein are methods and apparatus for continuous integration testing of network access devices. A testing platform includes a virtual environmental library and a processor.