Abstract: Modules for hub network elements and methods are described, including a method comprising (a) generating a partial key indicative of a unique public key associated with a hub network element in a transport network, (b) sending a partial-key message comprising the partial key and an ordered sequence to a particular network element of the ordered sequence, (c) receiving, from the particular network element to which the partial-key message was sent, the partial-key message having been modified by a unique private key associated with the particular network element, (d) repeating steps (b) and (c) for each successive network element in the ordered sequence except for a source network element and a destination network element designated by the ordered sequence, and (e) sending the partial-key message to the destination network element. The transport network comprises a plurality of network elements including the hub network element and a plurality of leaf network elements.

Abstract: A regen node is described. The regen node includes a coherent receiver, a control module and a coherent transmitter. The coherent receiver has circuitry to convert a first optical signal received from an upstream node in an optical layer of an optical network to a first digital data stream in a digital layer having a first FEC frame and a data traffic. The control module extracts a first fault signal from the first FEC frame; generates a second fault signal based at least in part on the first fault signal; and encodes the second fault signal within a second FEC frame with the data traffic into a second digital data stream on the digital layer. The coherent transmitter has circuitry to convert the second digital data stream into a second optical signal on the optical layer and to transmit the second optical signal to a downstream node.

Abstract: A method includes receiving client data; extracting overhead data from the client data; mapping the client data into one or more frames, where each of the one or more frames has a frame payload section and a frame overhead section, where the client data is mapped into the one or more frames; inserting the overhead data into the frame overhead section of the one or more frames; transporting the one or more frames across a network by generating a plurality of optical subcarriers carrying the one or more frames; extracting the overhead data from the frame overhead section of the one or more frames; recovering the client data from the one or more frames; inserting the extracted overhead data into the recovered client data to create modified client data; and outputting the modified client data.

Abstract: A method of executing in-session encryption verification includes receiving a plurality of client data packets for transmission through a network; receiving one or more test data packets for verifying an encryption device; merging the client data packets and the one or more test packets into a data stream; selecting security parameters for each packet in the data stream based on a corresponding packet type; encrypting each packet in the data stream using the encryption device and the corresponding security parameters; and transmitting the data stream comprising encrypted packets through the network. The method also includes decrypting the encrypted packets at a receiving system using congruent techniques.

Abstract: A regen node is described. The regen node includes a coherent receiver, a control module and a coherent transmitter. The coherent receiver has circuitry to convert a first optical signal received from an upstream node in an optical layer of an optical network to a first digital data stream in a digital layer having a first FEC frame and a data traffic. The control module extracts a first fault signal from the first FEC frame; generates a second fault signal based at least in part on the first fault signal; and encodes the second fault signal within a second FEC frame with the data traffic into a second digital data stream on the digital layer. The coherent transmitter has circuitry to convert the second digital data stream into a second optical signal on the optical layer and to transmit the second optical signal to a downstream node.

Abstract: A method of executing in-session encryption verification includes receiving a plurality of client data packets for transmission through a network; receiving one or more test data packets for verifying an encryption device; merging the client data packets and the one or more test packets into a data stream; selecting security parameters for each packet in the data stream based on a corresponding packet type; encrypting each packet in the data stream using the encryption device and the corresponding security parameters; and transmitting the data stream comprising encrypted packets through the network. The method also includes decrypting the encrypted packets at a receiving system using congruent techniques.

Abstract: Methodologies and systems that pass signals between control planes of nodes within a FlexE Network also conforming to the Generalized Multiprotocol Label Switching (GMPLS) protocol are described. The signals passed between the control planes conform to the GMPLS protocol and comprise a FlexE Ethernet Group Number and identify at least one Ethernet PHY conforming to the requirements of IEEE 802.3-2015. The Flexible Ethernet Group Number and the at least one Ethernet PHY are stored in non-transitory memory accessible by a node within the FlexE Network. Then, the node configures a FlexE Group based upon the Flexible Ethernet Group Number and the at least one Ethernet PHY.

Abstract: A method and system for flow tracing for use in a packet-optical network is disclosed herein. A device in the packet-optical network may receive a packet including a header and payload. The device may read intent information from the header, and translate the intent information to generate a device-specific action in an optical layer to provide one or more globally unique identifiers (IDs) associated with the device. The device may execute the device-specific action in the optical layer to generate a response including the globally unique IDs corresponding to the intent, where the response forms part of the flow trace. The device may associate the response with the intent, and encode the response for downstream data forwarding. The device may further add multi-layer proof-of-transit (POT) information to the response that may be used to securely verify the path indicated in the SmartFlow flow trace.

Abstract: A method and system for packet-optical in-band telemetry (POINT) that may be used in a packet-optical network is disclosed herein. An intermediate POINT device may receive a packet including at least a header and a payload at a packet layer. The POINT device may read intent information from the header, and the intent information may indicate a type of telemetry data to be collected. The POINT device may translate the intent information from the packet layer to generate a device-specific action in an optical layer to the type of telemetry data indicated by the intent. The POINT device may execute the device-specific action in the optical layer to generate a response corresponding to the intent, associate the response with the intent, and encode the response in the packet layer for downstream data forwarding.

Abstract: A method and node are disclosed. In the method, circuitry of a first node generates a link state advertising message including bandwidth information indicative of unreserved number of optical channel data unit containers for a plurality of different types of signals supported by an interface of the first node. The link state advertising message is transmitted from the first node to a plurality of second nodes within a mesh network.

Abstract: A system and methods for reliable telemetry are disclosed herein. In an example of reliable in-band telemetry in a communications network, intent information for a destination device may be generated at a network device indicating a type of telemetry data to be collected. The network device may update a locally stored invertible Bloom function (IBF) by applying one or more hash function to the intent information, a destination identifier (ID) associated with the destination device, and/or a local timestamp, and periodically forward the locally stored IBF to the destination device. The network device may receive a notification message by the destination device that the intent information is missing at the destination device and re-forward the intent information to the destination device. In another example, a network device may maintain and periodically forward a locally stored IBF based on response data and the destination ID.

Abstract: A method and system for flow tracing for use in a packet-optical network is disclosed herein. A device in the packet-optical network may receive a packet including a header and payload. The device may read intent information from the header, and translate the intent information to generate a device-specific action in an optical layer to provide one or more globally unique identifiers (IDs) associated with the device. The device may execute the device-specific action in the optical layer to generate a response including the globally unique IDs corresponding to the intent, where the response forms part of the flow trace. The device may associate the response with the intent, and encode the response for downstream data forwarding. The device may further add multi-layer proof-of-transit (POT) information to the response that may be used to securely verify the path indicated in the SmartFlow flow trace.

Abstract: A method and system for elastic timestamping for use in computing and networking applications including telemetry is disclosed herein. A device that is part of a system may initially generate a variable size timestamp or elastic n-dimensional timestamp (ENTS) with n time dimensions fields for a corresponding event in the system for which timing or temporal order information is needed. The device may select a subset of the n time dimensions fields of the ENTS based on a relevant time granularity of the corresponding event to generate a compact ENTS with a reduced size. The device may communicate the compact ENTS for further processing. In an example, the ENTS may be generated for a device-specific action performed to gather telemetry data in response to received telemetry intent at the device, and the compact ENTS may be communicated with a corresponding telemetry response.

Abstract: A method and system for packet-optical in-band telemetry (POINT) that may be used in a packet-optical network is disclosed herein. An intermediate POINT device may receive a packet including at least a header and a payload at a packet layer. The POINT device may read intent information from the header, and the intent information may indicate a type of telemetry data to be collected. The POINT device may translate the intent information from the packet layer to generate a device-specific action in an optical layer to the type of telemetry data indicated by the intent. The POINT device may execute the device-specific action in the optical layer to generate a response corresponding to the intent, associate the response with the intent, and encode the response in the packet layer for downstream data forwarding.

Abstract: Methodologies and systems that pass signals between control planes of nodes within a FlexE Network also conforming to the Generalized Multiprotocol Label Switching (GMPLS) protocol are described. The signals passed between the control planes conform to the GMPLS protocol and comprise a FlexE Ethernet Group Number and identify at least one Ethernet PHY conforming to the requirements of IEEE 802.3-2015. The Flexible Ethernet Group Number and the at least one Ethernet PHY are stored in non-transitory memory accessible by a node within the FlexE Network. Then, the node configures a FlexE Group based upon the Flexible Ethernet Group Number and the at least one Ethernet PHY.

Abstract: Methods and nodes are disclosed for the support of traffic protection and recovery in mesh networks having multiple nodes communicating via communication links. The problem of timely and reliable Shared Mesh Protection message delivery is addressed through creation of protocols and encoding of Shared Mesh Protection messages within an overhead of the optical data unit container, and by processing the Shared Mesh Protection messages by intermediate nodes of the mesh network. Thus, the Shared Mesh Protection messages are transmitted through the data plane with the transmission of user data.

Abstract: Systems and methods are disclosed for modulating, with circuitry of a source node in a communication network, at least one optical carrier to carry data utilizing a format of a soft decision forward error correction (SD-FEC) data field of an overhead portion of a data frame; encoding, with the circuitry of the source node, first data being SD-FEC data and second data being additional data into the SD-FEC data field, the first and second data being accessible without accessing client data traffic; and transmitting, with the circuitry of the source node, the data frame including the soft decision forward error correction data field. In one implementation, the second data comprises automatic protection switching bytes.

Abstract: A node is configured to receive first optical channel data unit (ODU) signals; encapsulate the first ODU signals into a second ODU signal; distribute data of the second ODU signal to a group of third ODU signals; encapsulate each of the third ODU signals into a respective optical channel transport unit (OTU) signal; and transmit each of the OTU signals on a respective optical channel of a group of optical channels. Each optical channel, of the group of optical channels, has a corresponding one of group of wavelengths. The data of the second ODU signal is carried by the group of optical channels.

Abstract: A node is configured to receive first optical channel data unit (ODU) signals; encapsulate one or more of the first ODU signals into a second ODU signal; encapsulate the second ODU signal into an optical channel transport unit (OTU) signal; and transmit the OTU signal on one or more optical channels.

Abstract: A method performed by an optical node, operating as a first network edge device of an optical layer one virtual private network (L1VPN), includes generating, by a first module of the optical node, a first optical data frame, where the first optical data frame includes an L1VPN overhead, and where the L1VPN overhead includes a control plane communication field; generating, by a second module of the optical node, a first control plane message for a second network edge device of the optical L1VPN, where the second network edge device is connected to the first network edge device across a provider network via an optical L1VPN link; incorporating, by the first module, the first control plane message into the control plane communication field of the first optical data frame; and transmitting, by the first module, the first optical data frame to the second network edge device via the optical L1VPN link.