Abstract: Some embodiments provide a method for an orchestration program instance assigned a particular network device in a network. Each network device of multiple network devices is assigned to a different orchestration program instance in a cluster. The method receives a notification message that a configuration for the particular network device has been modified. In response to the notification message, the method identifies a set of network correctness requirements to be evaluated for the network. The method sends a separate notification message for each identified network correctness requirement specifying that the particular network device configuration has been modified so that a set of evaluation program instances can re-evaluate any network correctness requirements dependent on the particular network device.

Abstract: Some embodiments provide a method for evaluating a network correctness requirement at an evaluation program instance assigned to evaluate a particular network correctness requirement. The method identifies data message properties associated with the particular network correctness requirement. The method evaluates the particular network correctness requirement by (i) determining a path through a set of network devices for a data message having the identified data message properties and (ii) from a data storage that stores data message processing rules for a plurality of network devices including the set of network devices and additional network devices, retrieving and storing in memory data specifying data message processing rules for the set of network devices to use in evaluating the particular network correctness requirement.

Abstract: Some embodiments provide a method for evaluating a network. The method identifies multiple network correctness requirements configured for the network. The method instantiates a separate respective evaluation program instance for each respective identified network correctness requirement to evaluate the respective network correctness requirement. At least two evaluation program instances are instantiated on different machines. Each respective evaluation program instance stores in a respective memory a respective set of network device data to evaluate the respective network correctness requirement. Each set of network device data requires less memory than storing network device data for the entire network.

Abstract: A search engine queries a network model for behavior of the entire network, such as data flow, based on combinations of multiple network elements. The search engine provides the state information and/or predicted behavior of the network by searching network objects in a graph-based model or a network state database that satisfy constraints given in a search query. The search engine provides the state information and/or predicted behavior based on regular-expression or plain language search expressions that do not provide packet header information. The search engine parses such search expression into a sequence of atoms that encode forwarding paths of interest to the user. A flow path through the modeled network can be generated dynamically, within the context of the search queries.

Abstract: An application reconciliation to improve flow-based applications. Generating a first application source graph based on first discovery information. Generating a second application graph based on first discovery information. Clustering the applications generated in the second graph of connected components. Performing a reconciliation of the connected components to cluster applications with similar members to obtain a reduced output of clustered applications.

Abstract: A search engine queries a network model for behavior of the entire network, such as data flow, based on combinations of multiple network elements. The search engine provides the state information and/or predicted behavior of the network by searching network objects in a graph-based model or a network state database that satisfy constraints given in a search query. The search engine provides the state information and/or predicted behavior based on regular-expression or plain language search expressions that do not provide packet header information. The search engine parses such search expression into a sequence of atoms that encode forwarding paths of interest to the user. A flow path through the modeled network can be generated dynamically, within the context of the search queries.

Abstract: A property-based application discovery. Generating a first application member properties graph based on first discovery information. Generating a second application member properties graph based on second discovery information. Creating a distance matrix based upon the first application member properties graph and the second application member properties graph. Performing a dimension reduction operation on the distanced matrix to obtain a reduced similarity matrix. Performing a property based application discovery operation using the reduced similarity matrix to obtain a reduced output of clustered applications.

Abstract: Some embodiments provide a method. The method determines a forwarding path for a packet set by using a data plane model of a network. The method identifies a rule table implementing a step in the forwarding path of the packet set. The method retrieves an indexing file at a scalable storage based on the identified rule table. The indexing file stores rule entries for one or more rule tables of the network. The method retrieves provenance data regarding a rule of the rule table that is applicable to the packet set from the indexing file. The method presents the retrieved provenance information of the identified rule.

Abstract: Thermal management systems are disclosed. One thermal management system includes a first element, a second element adjacent the first element, and an optional third element adjacent the second element and opposed to the first element. The first element and the optional third element include a flexible graphite article, which may have the same or different physical properties. The second element includes an insulation material, such as an aerogel-based insulation material or a porous polymer matrix such as an expanded polytetrafluoroethylene (ePTFE) membrane. Also disclosed are electronic devices that include the thermal management systems to manage the heat generated therein to reduce or eliminate hot spots or for other purposes.

Abstract: Physical communication links are determined between devices in a network of devices without human input. A network topology engine determines the physical communication links between devices in the network and constructs a network topology based on the determined physical communication links. The network topology engine infers the presence of each physical communication link from network traffic that is currently flowing in the network. The network topology engine collects reachability information from the network devices included in the network that are already stored by the network devices, such as device identification entries included in address resolution protocol tables and media access control address tables. The network topology engine populates a flow graph of potential physical links between network interfaces that is weighted based on the collected reachability.

Abstract: Methods, apparatus, systems, and articles of manufacture are disclosed herein to formally verify a network with both physical and virtual components. The modeling and formal verification is performed by an apparatus comprising: a topology generator to generate a network model including a plurality of devices connected in a network; a flow modeler to add a rule to the network model, the rule to define a flow of network packets through the network model; a reduction mapper to identify the rules common to ones of the devices; and a mapping verifier to verify the network meets a user specification.

Abstract: A system for managing a network using intent inference includes a network interface that is configured to obtain device information regarding a plurality of hardware devices within a data communication network. A processor is configured to infer intended packet handling behavior of a plurality of the devices. A network verification system models packet handling behavior of the devices within the network and compares the inferred intended behavior to the modeled packet handling behavior. The system can take action in response to the results of the comparison, which can include initiating a configuration change to one or more of the hardware devices of the data communication network.

Abstract: A furnace insulation assembly includes a main body having a generally U-shaped cross-section. The main body includes a pair of side walls. A pair of end plates are secured to opposed ends of the main body. The end plates and the main body form an interior chamber. The end plates and side walls are made of a thermal insulation material formed from carbon fibers, said carbon fibers in each end plate and side wall are oriented against-grain direction points inwardly toward the interior chamber.