Abstract: Various example embodiments for providing protection in communication networks are presented herein. Various example embodiments for providing protection in communication networks may be configured to provide protection in tunnel-over-tunnel topologies supported within communication networks. Various example embodiments for providing protection in tunnel-over-tunnel topologies may be configured to provide dynamic application of protection in tunnel-over-tunnel topologies rather than static application of protection in tunnel-over-tunnel topologies. Various example embodiments for providing protection in tunnel-over-tunnel topologies may be configured to provide dynamic application of protection for a primary path that is a tunnel-over-tunnel path based on a hierarchy of protocols.

Abstract: Disclosed herein are methods, systems, and devices for detection of nucleotide variants. In some aspects, the methods, systems, and devices of the present disclosure can be used to detect germline variant or somatic variant in a biological sample, e.g., a sample from a tumor tissue. In other aspects, the methods, systems, and devices of the present disclosure can be used to detect somatic variant in cell-free nucleic acids from a biological sample, such as blood, plasma, serum, saliva, or urine. In some aspects, the methods, systems, and devices of the present disclosure make use of neural networks, such as convolutional neural networks for variant detection.

Abstract: The invention is directed to a method and system for selecting queues for source-based queuing in a packet router, requiring only one flow per destination route. The invention stores source interface information for each packet while it is being processed. The invention applies to packet routers including IP routers, Ethernet routers and Label Switched Routers (LSR).

Abstract: A method, apparatus, and machine readable storage medium is disclosed for performing network address translation (NAT) on fragments of a Internet Protocol (IP) packet, comprising: receiving a packet fragment of the packet; calculating a hash key based on a subset of header information in the fragment; if the packet fragment is the first fragment of the packet; initiating a NAT session for the packet; storing the NAT session identifier at an entry in the linked list indexed by the hash key; and if the packet fragment is not the first fragment of the packet, then: retrieving a NAT session identifier, if available, at an entry in said linked list indexed by said hash key; and performing NAT on the fragment using the NAT session identified by the NAT session identifier. The hash key is a subset of a CRC32 calculation performed on: IPv4 source address; IPv4 destination address; and IP Identifier of the fragment.

Abstract: A method, apparatus, and machine readable storage medium is disclosed for performing network address translation (NAT) on fragments of a Internet Protocol (IP) packet, comprising: receiving a packet fragment of the packet; calculating a hash key based on a subset of header information in the fragment; if the packet fragment is the first fragment of the packet; initiating a NAT session for the packet; storing the NAT session identifier at an entry in the linked list indexed by the hash key; and if the packet fragment is not the first fragment of the packet, then: retrieving a NAT session identifier, if available, at an entry in said linked list indexed by said hash key; and performing NAT on the fragment using the NAT session identified by the NAT session identifier. The hash key is a subset of a CRC32 calculation performed on: IPv4 source address; IPv4 destination address; and IP Identifier of the fragment.

Abstract: Various exemplary embodiments relate to a method and related network node including one or more of the following: determining, by the network node, that a port of the network node is ready to receive a packet; identifying a packet having a highest packet priority among a plurality of packets received via a plurality of interfaces, wherein the step of identifying includes, for each of a plurality of components at a first hierarchy level: identifying a first level highest priority packet among a plurality of packets available to the component, based on a packet priority associated with each of the plurality of packets available to the component, sharing the packet priority of the first level highest priority packet with at least one component at a second hierarchy level; and transmitting the packet having the highest priority to the port.

Abstract: Various exemplary embodiments relate to a method performed by a network processing device for creating a NAT session with a tunnel between two nodes, the method comprising: receiving a packet; determining the packet does not have a Security Association; establishing a Security Association associated with a tunnel; generating a tunnel identifier for the tunnel; creating a NAT session information; and storing the NAT session information and the tunnel identifier.

Abstract: Various exemplary embodiments relate to a method and related network node including one or more of the following: determining, by the network node, that a port of the network node is ready to receive a packet; identifying a packet having a highest packet priority among a plurality of packets received via a plurality of interfaces, wherein the step of identifying includes, for each of a plurality of components at a first hierarchy level: identifying a first level highest priority packet among a plurality of packets available to the component, based on a packet priority associated with each of the plurality of packets available to the component, sharing the packet priority of the first level highest priority packet with at least one component at a second hierarchy level; and transmitting the packet having the highest priority to the port.

Abstract: Various exemplary embodiments relate to a method and related network node including one or more of the following: determining, by the network node, that a port of the network node is ready to receive a packet; identifying a packet having a highest packet priority among a plurality of packets received via a plurality of interfaces, wherein the step of identifying includes, for each of a plurality of components at a first hierarchy level: identifying a first level highest priority packet among a plurality of packets available to the component, based on a packet priority associated with each of the plurality of packets available to the component, sharing the packet priority of the first level highest priority packet with at least one component at a second hierarchy level; and transmitting the packet having the highest priority to the port.

Abstract: Embodiments of the invention are directed to multicasting packets in a system such as a data packet switch or router having a distributed architecture. A first device such as a line card receiving a packet that requires multicasting forwards the packet to a fabric switch where the packet is replicated to obtain one respective packet for each line card of the system. Each line card receives its respective packet from the fabric switch and further duplicates the packet to obtain a duplicate packet for each egress endpoint of a service associated with the packet that is eligible to receive such a duplicate packet. Replication and duplication of packets requiring multicasting performed in this manner efficiently uses bandwidth of the fabric switch and links connecting it to the line cards.

Abstract: A routing apparatus comprises memory including a common group identifier correlated to a plurality of values each derived using a specified network parameter, memory including a common group action correlated to the common group identifier, a parse action module configured for accessing the common group identifier correlating memory and for associating the common group identifier with a packet configured with the specified network parameter, and a common group action module configured for accessing the common group action correlating memory and for determining the common group action be applied to the packet. Determining the common group action to be applied to the packet includes selecting the common group action dependent upon the common group identifier.

Abstract: A router includes a network ingress processor and a network egress processor. The network ingress processor is configured for modifying a received MPLS packet such that an internal header thereof includes a pre-configured IP flow identifier therein in place of an as-received MPLS flow identifier. Such modifying is performed in response to the network ingress processor parsing a MPLS label stack of the received MPLS packet to determine if an existing MPLS label of the label stack needs to be replaced with an Implicit Null label and in response to determining that there is no other label in the MPLS label stack. The network egress processor includes a flow selector configured for directing packets dependent upon a type of flow identifier included in an internal header thereof, for receiving the modified MPLS packet, and for replacing the internal header with a port-specific header.

Abstract: Various exemplary embodiments relate to a method and related network node including one or more of the following: determining, by the network node, that a port of the network node is ready to receive a packet; identifying a packet having a highest packet priority among a plurality of packets received via a plurality of interfaces, wherein the step of identifying includes, for each of a plurality of components at a first hierarchy level: identifying a first level highest priority packet among a plurality of packets available to the component, based on a packet priority associated with each of the plurality of packets available to the component, sharing the packet priority of the first level highest priority packet with at least one component at a second hierarchy level; and transmitting the packet having the highest priority to the port.

Abstract: Embodiments of the invention are directed to multicasting packets in a system such as a data packet switch or router having a distributed architecture. A first device such as a line card receiving a packet that requires multicasting forwards the packet to a fabric switch where the packet is replicated to obtain one respective packet for each line card of the system. Each line card receives its respective packet from the fabric switch and further duplicates the packet to obtain a duplicate packet for each egress endpoint of a service associated with the packet that is eligible to receive such a duplicate packet. Replication and duplication of packets requiring multicasting performed in this manner efficiently uses bandwidth of the fabric switch and links connecting it to the line cards.

Abstract: Embodiments of the invention are directed to efficiently processing packet traffic in a system such as a switch or router having a distributed architecture. An internal header is appended to an ingress packet by an ingress packet processing device before the packet is forwarded to a fabric switch of the system. The internal header corresponds to a configuration of an ingress interface over which the packet was received. An egress packet processing device, upon receiving the packet from the switch, processes the packet based on the internal header and a configuration of an egress interface associated with the egress device. Advantageously, some packet tag manipulation operations are performed only at the egress packet processing device; thereby somewhat freeing up ingress packet processing resources.

Abstract: Embodiments of the invention are directed to processing Virtual Private LAN Service (VPLS) packets. Each VPLS packet is processed in two stages. In a first stage Layer 2 and Layer 3 headers are parsed from the packet to obtain an Ethernet frame and Traffic management characteristics are determined according to the L3 header. In a second stage a type of Ethernet frame is determined, as either one requiring replication or not, and the Ethernet frame is forwarded in accordance with the TM characteristics based on the determined frame type. This approach allows for a modular implementation which provides enables high performance and efficient utilization of processing resources.

Abstract: A method and system for profile-marking and scheduling of packets are disclosed. Using a dual-rate scheduler, the profile state of a packet being scheduled for transmission by a flow traffic descriptor is determined based on the traffic rate of the flow traffic descriptor, which is associated with the queue that the packet belongs to. The profile state of the packet is marked prior to the transmission of the packet.

Abstract: The invention is directed to a method and system for selecting queues for source-based queuing in a packet router, requiring only one flow per destination route. The invention stores source interface information for each packet while it is being processed. The invention applies to packet routers including IP routers, Ethernet routers and Label Switched Routers (LSR).

Abstract: A router includes a network ingress processor and a network egress processor. The network ingress processor is configured for modifying a received MPLS packet such that an internal header thereof includes a pre-configured IP flow identifier therein in place of an as-received MPLS flow identifier. Such modifying is performed in response to the network ingress processor parsing a MPLS label stack of the received MPLS packet to determine if an existing MPLS label of the label stack needs to be replaced with an Implicit Null label and in response to determining that there is no other label in the MPLS label stack. The network egress processor includes a flow selector configured for directing packets dependent upon a type of flow identifier included in an internal header thereof, for receiving the modified MPLS packet, and for replacing the internal header with a port-specific header.

Abstract: A routing apparatus comprises memory including a common group identifier correlated to a plurality of values each derived using a specified network parameter, memory including a common group action correlated to the common group identifier, a parse action module configured for accessing the common group identifier correlating memory and for associating the common group identifier with a packet configured with the specified network parameter, and a common group action module configured for accessing the common group action correlating memory and for determining the common group action be applied to the packet. Determining the common group action to be applied to the packet includes selecting the common group action dependent upon the common group identifier.