Abstract: A network device stores in its nonvolatile memory, in response to detecting a power outage in a tree-based network, an identifier for a preferred parent and a distance identifier for the network device within the network. In response to power restoration, the network device starts a trickle timer based on the ring identifier, for determining whether a beacon request from a transmitting node and destined for the preferred parent is detected during the waiting interval. In response to the network device detecting the beacon request during the waiting interval, the network device sets its channel hopping schedule to the corresponding channel hopping schedule of the transmitting node in response to determining the beacon request is destined for the preferred parent, enabling rejoining with the preferred parent in response to detecting a beacon from the preferred parent to the transmitting node via the corresponding channel hopping schedule of the transmitting node.

Abstract: In one embodiment, a device in a network inserts a profile tag into an address request sent by an endpoint node in the network to a lookup service. The lookup service is configured to identify one or more addresses with which the endpoint node is authorized to communicate based on a profile for the endpoint node associated with the inserted profile tag. The device receives an address response sent from the lookup service to the endpoint node that indicates the set of one or more addresses with which the endpoint node is authorized to communicate. The device determines whether a communication between the endpoint node and a particular network address is authorized using the set of one or more addresses with which the endpoint node is authorized to communicate. The device blocks the communication based on a determination that the particular network address is not in the set of one or more addresses with which the endpoint node is authorized to communicate.

Abstract: In one embodiment, a method comprises identifying, by a controller device, first and second paths between an ingress network node and an egress network node in a deterministic network for an identified flow of data packets in an identified sequence, the identifying including identifying a replication node for replicating the identified flow into the first and second paths, and identifying an elimination node for receiving transmitted data packets along the first and second paths for the identified flow and transmitting the identified flow of data packets in the identified sequence; determining a jitter difference of the identified flow between the first and second paths, the jitter difference identifying a maximum jitter encountered in an average difference of latency between the first and second paths; and causing at least one of the elimination node or an upstream node along one of the first or second paths to absorb the jitter difference.

Abstract: In one embodiment, a network device starts a deferred discovery that defers to a prescribed transmission operation in response to detecting a message is from an identified higher device that is closer to a root of a network topology in a data network. The prescribed transmission operation and the deferred discovery each require a corresponding network device to wait at least a first half of a selected minimum contention interval before attempting transmission at a randomized position within a second half of the selected minimum contention interval. The minimum contention interval of the deferred discovery is at least twice the selected minimum contention interval. The network device transmits an updated message during the deferred discovery only if, upon reaching the corresponding randomized position of the deferred discovery, the subsequent messages from identified higher devices are less than a prescribed redundancy constant.

Abstract: In one embodiment, a supervisory device in a network assigns different access points in the network to different access point groupings. Each of the different access point groupings uses a different network path to communicate with a given endpoint in the network. The supervisory device selects at least one of the access points in each of the different access point groupings for mapping to a virtual access point (VAP) for a node in the network as part of a VAP mapping. The supervisory device instructs the selected access points to form a VAP for the node. The node treats the access points in the VAP mapping as a single access point for purposes of communicating with the network.

Abstract: A management device for a low power wide area network can: generate and send, to each constrained wireless network device via a wired gateway, a link layer multicast listener command specifying a listening interval and causing each constrained wireless network device to change from a low-power optimized mode to a listening mode until reception of a multicast data packet within the listening interval; generate collision avoidance parameters including a minimum waiting interval, a maximum waiting interval relative to the listening interval, and a redundancy constant; and instruct the wired gateways to selectively transmit the multicast data packet based on the collision avoidance parameters, wherein each wired gateway responds by waiting a randomly-selected wait interval between the minimum and maximum waiting intervals, and selectively transmitting the multicast data packet only if a received number of the multicast data packet by the corresponding wired gateway is less than the redundancy constant.

Abstract: In one embodiment, a method comprises promiscuously detecting, by a network device in a wireless data network, a wireless data packet comprising a source route header specifying a hop-by-hop path for reaching a destination device in the wireless data network; determining, by the network device, that the network device is identified in the hop-by-hop path as following a first next-hop device targeted for reception of the wireless data packet; and executing intercepted forwarding of the wireless data packet, by the network device, to a second next-hop device successively following the network device in the hop-by-hop path.

Abstract: In one embodiment, a device maintains a journal of uncommitted changes to a file system of the device in a layer that is hot-swappable with a writable container layer. The device augments the journal with metadata regarding a particular uncommitted change to the file system of the device. The device applies, within a sandbox environment of the device, a machine learning-based anomaly detector to the particular uncommitted change to the file system and the metadata regarding the change, to determine whether the particular uncommitted change to the file system is indicative of a destruction of service attack on the device. The device causes performance of a mitigation action when the machine learning-based anomaly detector determines that the particular uncommitted change to the file system is indicative of a destruction of service attack on the device.

Abstract: In one embodiment, a device in a network determines whether a destination address of a packet received by the device is within a neighbor discovery (ND) cache of the device. The device determines whether the destination address is not in a set of addresses used to generate an address lookup array or possibly in the set of addresses used to generate the address lookup array, in response to determining that the destination address of the packet is not within the ND cache. The device performs address resolution for the destination address of the packet, in response to determining that the destination address of the packet is possibly in the set of addresses used to generate the address lookup array.

Abstract: In one embodiment, a supervisory device in a network forms a virtual access point (VAP) for a node in the network whereby a plurality of access points (APs) in the network are mapped to the VAP as part of a VAP mapping. The node treats the APs in the VAP mapping as a single AP for purposes of communicating with the network. The supervisory device determines a data traffic management strategy for the node based on traffic associated with the node. The supervisory device instructs the APs in the VAP mapping to implement the data traffic management strategy for the node.

Abstract: In one embodiment, a device in a network inserts a profile tag into an address request sent by an endpoint node in the network to a lookup service. The lookup service is configured to identify one or more addresses with which the endpoint node is authorized to communicate based on a profile for the endpoint node associated with the inserted profile tag. The device receives an address response sent from the lookup service to the endpoint node that indicates the set of one or more addresses with which the endpoint node is authorized to communicate. The device determines whether a communication between the endpoint node and a particular network address is authorized using the set of one or more addresses with which the endpoint node is authorized to communicate. The device blocks the communication based on a determination that the particular network address is not in the set of one or more addresses with which the endpoint node is authorized to communicate.

Abstract: In one embodiment, a supervisory device in a network classifies mobility and traffic characteristics of a first node in the network. The supervisory device identifies wireless channels supported by access points (APs) in the network. The supervisory device selects one of the wireless channels for use by the first node based on the classified mobility and traffic characteristics of the first node. The supervisory device forms a first virtual access point (VAP) for the first node on the selected wireless channel. A plurality of the access points (APs) in the network that support the selected channel are mapped to the first VAP as part of a VAP mapping. The first node treats the APs in the VAP mapping as a single AP for purposes of communicating with the network.

Abstract: In one embodiment, a supervisory device in a network forms a first virtual access point (VAP) for a first node in the network. A plurality of access points (APs) in the network are mapped to the first VAP as part of a VAP mapping and the first node treats the APs in the VAP mapping as a single AP for purposes of communicating with the network. The supervisory device determines a communication schedule for the first node based on a radio chain of at least one of the APs in the VAP mapping for the first VAP being shared by the first VAP and a second VAP for a second node in the network. The supervisory device, according to the communication schedule for the first node, causes one or more of the APs in the VAP mapping for the first VAP to instruct the first node to stop transmitting for a period of time.

Abstract: In one embodiment, a device in a network receives a plurality of packets from one or more neighbors of the device. Each of the packets has a scheduled delivery time interval according to a deterministic communication schedule. The device determines an amount of clock drift for each of the one or more neighbors of the device by comparing arrival times of the received packets to their scheduled delivery time intervals according to the deterministic communication schedule. The device calculates a clock adjustment based on the amount of clock drift for each of the one or more neighbors. The device adjusts a clock of the device using the calculated clock adjustment.

Abstract: In one embodiment, a method comprises creating, in a computing network, a loop-free routing topology comprising a plurality of routing arcs for reaching a destination device, each routing arc comprising a first network device as a first end of the routing arc, a second network device as a second end of the routing arc, and at least a third network device configured for routing any network traffic along the routing arc toward the destination device via any one of the first or second ends of the routing arc; and causing the network traffic to be forwarded along at least one of the routing arcs to the destination device.

Abstract: In one illustrative example, one or more controllers may be configured to perform a path selection procedure for selecting a connection path for multi-hop device-to-device (D2D) communications. Identifiers of candidate D2D device pairings from D2D peer discovery performed by a plurality of UEs served in a plurality of base stations and link quality data associated with each candidate D2D device pairings are obtained. D2D network topology map data including a plurality of link-state relationships are generated based on the identifiers of candidate D2D device pairings. A plurality of connection paths of UEs are computed based on the generated link-state relationships and the link quality data, where each computed connection path includes UEs indicated as required nodes and at least one UE indicated as a candidate relay node. An optimal connection path that satisfies a latency parameter is selected from the plurality of computed connection paths (e.g. based on a shortest path first or SPF algorithm).

Abstract: In one embodiment, a cloud-based service instructs one or more networking devices in a local area network (LAN) to form a virtual network overlay in the LAN that redirects traffic associated with a particular node in the LAN to a first isolation application instance hosted by the service. The first isolation application instance receives the redirected traffic associated with the particular node. The first isolation application instance determines a routing path for the traffic that comprises one or more other isolation application instances hosted by the cloud-based service. The first isolation application instance tags the traffic to indicate the determined routing path. The first isolation application forwards the tagged traffic to a second isolation application instance along the determined routing path.

Abstract: In one embodiment, a controller in a network trains a deep reinforcement learning-based agent to predict traffic flows in the network. The controller determines one or more resource requirements for the predicted traffic flows. The controller assigns, using the deep reinforcement learning-based agent, paths in the network to the flows based on the determined one or more resource requirements, to avoid fragmentation of a flow during transmission of the flow through the network. The controller sends, to nodes in the network, assignment instructions that cause the flows to traverse the network via their assigned paths.

Abstract: In one embodiment, a cloud-based service instructs one or more networking devices in a local area network (LAN) to form a virtual network overlay in the LAN that redirects traffic associated with a particular node in the LAN to the service. The service receives multicast or broadcast traffic sent by the particular node in the LAN and redirected to the service via the virtual network overlay. The service identifies a group of nodes in the network that are to receive the traffic sent by the particular node, based in part by profiling the traffic associated with the particular node. The service sends the traffic sent by the particular node to at least one networking device in the LAN with an indication of the identified group of nodes in the network that are to receive the traffic sent by the particular node. The at least one networking device forwards the traffic sent by the particular node to the nodes in the identified group.

Abstract: In one embodiment, a method comprises receiving, by a network device in a deterministic data network, one or more deterministic schedules for reaching a destination network device along one or more deterministic paths in the deterministic data network; generating, by the network device, a deterministic source-route path for reaching the destination network device based on the deterministic schedules allocated for the deterministic paths, the deterministic source-route path comprising, for each specified hop, a corresponding deterministic start time; and outputting, by the network device, a source routed deterministic packet comprising the deterministic source-route path for deterministic forwarding of the source routed deterministic packet to the destination network device.