Abstract: In one embodiment, a method comprises causing, by a network controller device, a first access point (AP) device to initiate a reverse sounding operation comprising wirelessly requesting a mobile constrained network device to transmit a null data packet (NDP) at a first transmission interval, wirelessly receiving the NDP at the first transmission interval, and generating a reception report describing reception of the NDP and including beamforming information; causing, by the network controller device, a second AP device to generate a corresponding reception report describing a corresponding wireless detection of the NDP at the first transmission interval; and causing, by the network controller device, the mobile constrained network device to connect to a selected one of the first AP device or the second AP device for an identified data flow based on the respective reception reports from the first and second AP devices.

Abstract: Techniques for improved networking are provided. An access point (AP) determines an AP duty cycle based at least in part on transmission activity of a station (STA) associated to the AP. The AP duty cycle is signaled via one or more beacon frames transmitted by the AP. The AP exchanges data in accordance with the AP duty cycle, comprising exchanging data with the STA during one or more active periods indicated by the AP duty cycle, and sleeping during one or more inactive periods indicated by the AP duty cycle.

Abstract: In one embodiment, an intermediate device in a backhaul mesh for a wireless network receives a registration from an access point of the wireless network in communication with a mobile system. The intermediate device receives a packet that is multicast by a gateway into the backhaul mesh and destined for the mobile system. The intermediate device makes, based on the registration, a determination that the packet should be sent to the access point. The intermediate device sends the packet to the access point for transmittal to the mobile system.

Abstract: A backscatter communication device assistant may be provided. A computing device may designate a client device as a backscatter communication device assistant. Next, a report indicating a location of a backscatter communication device may be received from the backscatter communication device assistant. Then the backscatter communication device may be caused to receive energy. Data originating from the backscatter communication device may then be received.

Abstract: A method comprises: at an access point configured to communicate wirelessly with wireless stations: transmitting, to the wireless stations, a first multi-user trigger frame that identifies the wireless stations and allocates, to the wireless stations, resource units in which the wireless stations are to transmit data; and responsive to transmitting the first multi-user trigger frame, receiving, from the wireless stations, an uplink multi-user data frame that includes uplink data segments concurrently transmitted in the resource units by at least some of the wireless stations.

Abstract: In one embodiment, dynamic multi-cloud network provisioning is provided by an illustrative method comprising: identifying, by a process, source security groups associated with devices of a computer network; determining, by the process and based on observation of packets sourced from the devices, a set of destinations of the packets sourced from the devices; deducing, by the process, destination security groups associated with the devices based on the set of destinations used in the packets sourced from the devices; identifying, by the process, cloud services currently utilized by the devices based on the source security groups and the destination security groups; and establishing, by the process, a dynamic provisioning configuration for the computer network based on the cloud services currently utilized by the devices in the computer network.

Abstract: Broadcast energy and spectrum consumption optimization may be provided. It may be determined, by a computing device for each of a plurality of client devices, a corresponding plurality of respective minimum Modulation and Coding Schemes (MCSs) needed to reach each of the respective plurality of client devices from the computing device at a predetermined power level. Next, an optimal MCS from the plurality of respective minimum MCSs may be used to reach a first group of the plurality of client devices via broadcast. Then unicast may be used to reach a second group of the plurality of client devices wherein the optimal MCS is selected to minimize the total amount of airtime used for the broadcast and the unicast.

Abstract: Balancing Multi-link Operation (MLO) usage may be provided. A list of a plurality of Access Points (APs) for each of a plurality of Multi-link Operation (MLO) types indicating availability of each of the plurality of APs may be received. A first request indicating an MLO type associated with the first request is a first MLO type may be received. In response to the first request, a first subset of the list of the plurality of APs that support the MLO type associated with the first request may be sent. A second request indicating that an MLO type associated with the second request is the first MLO type may be received. In response to the second request, a second subset of the list of the plurality of APs that support the MLO type associated with the second request may be sent. The first subset is different from the second subset.

Abstract: Techniques for detecting and/or confirming a Man-in-The-Middle (MiTM) attack using Fine Timing Measurement (FTM) are provided. In one aspect, a FTM exchange is initiated between a second station and a first station to detect or confirm a MiTM attack in a network in which a MiTM is positioned between the first station and a third station. The MiTM attack is detected or confirmed, or both, based at least in part on FTM information determined during the FTM exchange.

Abstract: Systems and techniques for dynamically optimizing a wireless network topology to minimize energy consumption while preserving user quality of experience (QoE) are described. An example technique includes determining a set of applications that have a target service level agreement (SLA). Network traffic is monitored from the set of applications being executed by one or more client STAs within a network. A topology of the network is dynamically adapted to reduce an amount of energy consumption in the network while maintaining a threshold amount of the network traffic that satisfies the target SLA, based on monitoring the network traffic.

Abstract: Described herein are devices, systems, methods, and processes for managing power congestion in multi-path routing systems. Indications may be similar to the ECN, and may be used in network headers, including headers for IPv6, SRv6, NSH, or other tunneling protocols. The indications, namely EOPN, PTE, and ECMP-exclude, can provide a mechanism for managing network power consumption and controlling ECMP routing based on flow priority and characteristics. The power budget can be dynamically adjusted based on the current power source mix, which may help to achieve sustainability goals. Hashing optimizations and signaling can be utilized to manage network power congestion and bandwidth-normalized power efficiency availability. A process may be implemented to ensure there is sufficient capacity to serve the expected traffic for different next-hop paths.

Abstract: Techniques performed by offload computing devices that establish and advertise confidential computing environments for use by other computing devices. The offload computing devices may each be executing an attestable bootloader that creates the confidential computing environments, advertises the available resources to the other computing devices, establish secure encrypted channels with the other devices, and run processes in the confidential computing environments on behalf of the other computing devices. In addition to advertising the availability of computing resources in the confidential environments, the offload computing devices may additionally advertise performance metrics associated with the confidential computing environments. Computing devices may receive the advertisements, and send requests to the offload computing devices to run processes on their behalf in the confidential computing environments.

Abstract: In one embodiment, a supervisory device in a network notifies, via an access point of the network, a node as to an ability of the network to support virtual access points. The supervisory device receives, in response to notifying the node, information from the node regarding characteristics of the node. The supervisory device selects, based on the characteristics of the node, a plurality of access points in the network to form a virtual access point with which the node may communicate. The supervisory device configures the plurality of access points to function as the virtual access point, wherein the node communicates with the network via the virtual access point.

Abstract: In one embodiment, dynamic multi-cloud network provisioning is provided by an illustrative method comprising: identifying, by a process, source security groups associated with devices of a computer network; determining, by the process and based on observation of packets sourced from the devices, a set of destinations of the packets sourced from the devices; deducing, by the process, destination security groups associated with the devices based on the set of destinations used in the packets sourced from the devices; identifying, by the process, cloud services currently utilized by the devices based on the source security groups and the destination security groups; and establishing, by the process, a dynamic provisioning configuration for the computer network based on the cloud services currently utilized by the devices in the computer network.

Abstract: Techniques for managing communications between access points (APs) and stations (STAs) are described herein. In one embodiment, an AP broadcasts a trigger message to a plurality of STAs, the trigger message including a matrix defining a plurality of resource units (RUs) that the plurality of STAs are assigned to transmit or receive data, and a fragment flag. The presence of the fragment flag, within the scheduling matrix, informs the AP that the data transmission that the fragment flag is appended to is a partial transmission that will be completed in a subsequent transmission opportunity.

Abstract: Systems, methods and computer-readable storage media are provided for encoding, within the SRH-6LoRH field within a data packet, an IPv6 address that can be used to decompress the SCHC information in the data packet. A rule is generated that indicates that the first network address in the SRH-6LoRH field of the data packet is usable to decompress the SCHC information from the data packet as opposed to the compression residue. When the data packet is received at the destination node, the destination node, through a SCHC decompressor, uses the first network address in the SRH-6LoRH field according to the rule to decompress the SCHC information.

Abstract: Described herein are devices, systems, methods, and processes for intelligently managing power consumption in a network by allocating a power budget for packet processing. The power budget can be allocated based on criticality and/or the trust level of the flow. A network device may determine which subsets of features can be executed within the power budget for specific flows. Network devices can signal their capability to run features based on power consumption and adherence to the power budget, allowing for cooperative end-to-end power-based decision-making and policy enforcement. Network devices unable to run all features can select a subset of the features within their power budget and a viable path where other network devices can execute the missing features. Source route information can be added to indicate the path and missing features to be executed by network devices down the segment routing path.

Abstract: A cross-domain approach to optimize Wireless Fidelity (WiFi) device roaming in a fabric-based network may be provided. A first Access Point (AP) may determine a current location of a first user device connected to the first AP of a fabric-based network. The first AP may be attached to a first Fabric Edge (FE). The first AP may receive an indication of movement of the first user device from the current location. The first AP may predict a next AP where the first user device is most likely to roam to from the first AP based on the current location and a trajectory of the movement from the current location. The next AP may be attached to a second FE of the fabric-based network. The first AP may trigger pre-provisioning of resources at the second FE to create a secondary route for the first user device through the second FE.

Abstract: Alternative communications techniques for troubleshooting may be provided. Using alternative communications techniques for troubleshooting can include sending an alternative communications advertisement frame to a client, the alternative communications advertisement frame identifying an alternative connection for communicating with the client. An alternative communications troubleshooting frame is then received from the client via the alternative connection, the alternative communications troubleshooting frame comprising troubleshooting information associated with a connection issue of a wireless network. The troubleshooting information is sent to a network device.

Abstract: A process can include determining respective link state information corresponding to a plurality of links between two or more border routers and a plurality of child nodes of the two or more border routers, the border routers and the child nodes included in a Destination Oriented Directed Acyclic Graph (DODAG) of a Low-Power Lossy Network (LLN). Consensus information indicative of a current status of each border router of the two or more border routers can be determined based on the respective link state information. The consensus information can be used to update an election of one or more active border routers from the two or more border routers to utilize as a virtual DODAG root for the LLN. Traffic directed to the virtual DODAG root can be routed to an active border router of the two or more border routers based on the updated election.