Abstract: A method for reducing transmission of telemetry packets includes receiving, at a network controller, telemetry packets from network nodes in a communication pathway of data packets being transmitted from a sending host to a receiving host and determining from the telemetry packets a number of network nodes in the communication pathway. The method includes setting a network node threshold value equal to the determined number of network nodes in the communication pathway, and transmitting, from the network controller, the network node threshold value to each network node in the communication pathway.

Abstract: A method for link layer authentication includes receiving, at an edge network access node, a link layer authentication packet from a client, seeking network access, using a remote NAS agent running on the edge network access node. The method transmits, using a tunneling connection, the link layer authentication packet to a remote NAS in a link layer authentication process. The link layer authentication process exchanges the link layer authentication packet with an authentication server to authenticate the client. The method includes receiving a link layer authentication packet from the remote NAS over the tunneling connection. The received link layer authentication packet includes a response from the authentication server regarding the transmitted link layer authentication packet.

Abstract: An apparatus includes a packet encryption circuit that uses an encryption keys to encrypt each of two or more portions of a data packet. Each portion is encrypted with a different encryption key and includes one or more layers of the data packet. A first portion includes a layer of the data packet with MAC information. The apparatus includes a packet transmitter that transmits, from a source router, an encrypted data packet to an intermediate router between the source router and a destination router. The encrypted data packet includes an encrypted version of the data packet encrypted using the encryption keys. The intermediate router has encryption keys sufficient for a service level agreement of the intermediate router and lacks a portion of the encryption keys. The source and destination routers use a MAC security standard for encryption and decryption of the data packet using the encryption keys.

Abstract: Devices and methods for determining and indicating a source of power based on a characteristic of received power are disclosed. According to an aspect, a device includes a power line interface configured to receive power from multiple power lines. The device also includes a comparator module configured to compare one or more characteristics of the received power from the plurality of power lines. The comparator module is also configured to determine whether the received power on the power lines are from the same source based on the comparison. Further, the device includes a user interface configured to indicate whether the received power on the power lines are from the same source based on the determination.

Abstract: A method for reducing transmission of telemetry packets includes receiving, at a network controller, telemetry packets from network nodes in a communication pathway of data packets being transmitted from a sending host to a receiving host and determining from the telemetry packets a number of network nodes in the communication pathway. The method includes setting a network node threshold value equal to the determined number of network nodes in the communication pathway, and transmitting, from the network controller, the network node threshold value to each network node in the communication pathway.

Abstract: A method for authorization of internet of things (“IoT”) identity bootstrapping includes receiving from a device, at a network access server (“NAS”) of a user and in response to an attestation request sent to the device, a vendor network address of a vendor server of a vendor and a device identifier for the device. The method includes authenticating the vendor using the vendor network address and, in response to authenticating the vendor, sending the device identifier to the vendor server. The method includes communicating device attestation packets between the vendor server and the device. The device attestation packets validate the device to the vendor server. The method includes receiving device attestation from the vendor server. The device attestation indicating validity status of the device to the NAS. The method includes, in response to the device attestation indicating validity of the device, transmitting a new device identity to the device.

Abstract: An apparatus includes a controller adds telemetry data to a telemetry packet transmitted along a communication pathway for data packets being transmitted from a sending host to a receiving host. The controller determines, from the telemetry packet, a number of network nodes in the communication pathway that have added telemetry data to the telemetry packet. The controller transmits the telemetry packet to a next destination along the communication pathway and to a network controller in response to determining that the number of network nodes in the communication pathway that have added telemetry data to the telemetry packet is equal to or greater than a network node threshold. The controller just transmits the telemetry packet to the next destination in response to determining that the number of network nodes in the communication pathway that have added telemetry data to the telemetry packet is less than the network node threshold.

Abstract: An apparatus for optical link fault management includes a processor in a network device with an optical adapter of an optical link, and a memory that stores program code. The program code is executable by the processor to store state parameters from the optical adapter in a data log, input the state parameters from the data log into a failure prediction model, and generate, using the failure prediction model, a probability of failure of the optical adapter based on current state parameters from the data log. In response to the probability of failure reaching a failure threshold, the program code is executable by the processor to decrease data traffic in the optical link and to send an alert comprising the probability of failure. The failure threshold includes a probability of failure indicative of impending failure of the optical adapter.

Abstract: A method includes identifying, for each port of a storage controller, an optimal path between a port of the storage controller to a computer and identifying a port of the computer connected to the optimal path. Two or more interconnected switches connect the computer and the storage controller. The method includes assigning a static IP address to each port of the storage controller, and transmitting to the computer, for each port of the storage controller, a static MAC address of a port of the storage controller and the corresponding port of the computer that is part of the optimal path between the port of the storage controller and the computer. The computer uses the static MAC addresses and the corresponding ports to create a static map and uses the static map to determine which port of the computer to use to service a storage request.

Abstract: An apparatus for machine learning for workloads for ISA optimization is disclosed. The apparatus includes a processor and a memory that stores code executable by the processor. The executable code is executable to run program code to service a workload with a default instruction set of the processor, identify an instruction sequence from execution results for the workload, the instruction sequence called repeatedly during execution for the workload, and generate a custom instruction that includes the instruction sequence. The executable code is executable to write the custom instruction to a writable area of processor memory storing the default instruction set, recompile program code used to service the workload, where the recompiled program code includes the custom instruction, and run the recompiled program code to service the workload.

Abstract: An apparatus includes a packet encryption circuit that uses an encryption keys to encrypt each of two or more portions of a data packet. Each portion is encrypted with a different encryption key and includes one or more layers of the data packet. A first portion includes a layer of the data packet with MAC information. The apparatus includes a packet transmitter that transmits, from a source router, an encrypted data packet to an intermediate router between the source router and a destination router. The encrypted data packet includes an encrypted version of the data packet encrypted using the encryption keys. The intermediate router has encryption keys sufficient for a service level agreement of the intermediate router and lacks a portion of the encryption keys. The source and destination routers use a MAC security standard for encryption and decryption of the data packet using the encryption keys.

Abstract: An apparatus for machine learning for workloads for ISA optimization is disclosed. The apparatus includes a processor and a memory that stores code executable by the processor. The executable code is executable to run program code to service a workload with a default instruction set of the processor, identify an instruction sequence from execution results for the workload, the instruction sequence called repeatedly during execution for the workload, and generate a custom instruction that includes the instruction sequence. The executable code is executable to write the custom instruction to a writable area of processor memory storing the default instruction set, recompile program code used to service the workload, where the recompiled program code includes the custom instruction, and run the recompiled program code to service the workload.

Abstract: A method for authorization of internet of things (“IoT”) identity bootstrapping includes receiving from a device, at a network access server (“NAS”) of a user and in response to an attestation request sent to the device, a vendor network address of a vendor server of a vendor and a device identifier for the device. The method includes authenticating the vendor using the vendor network address and, in response to authenticating the vendor, sending the device identifier to the vendor server. The method includes communicating device attestation packets between the vendor server and the device. The device attestation packets validate the device to the vendor server. The method includes receiving device attestation from the vendor server. The device attestation indicating validity status of the device to the NAS. The method includes, in response to the device attestation indicating validity of the device, transmitting a new device identity to the device.

Abstract: An apparatus for optical link fault management includes a processor in a network device with an optical adapter of an optical link, and a memory that stores program code. The program code is executable by the processor to store state parameters from the optical adapter in a data log, input the state parameters from the data log into a failure prediction model, and generate, using the failure prediction model, a probability of failure of the optical adapter based on current state parameters from the data log. In response to the probability of failure reaching a failure threshold, the program code is executable by the processor to decrease data traffic in the optical link and to send an alert comprising the probability of failure. The failure threshold includes a probability of failure indicative of impending failure of the optical adapter.

Abstract: A method for link layer authentication includes receiving, at an edge network access node, a link layer authentication packet from a client, seeking network access, using a remote NAS agent running on the edge network access node. The method transmits, using a tunneling connection, the link layer authentication packet to a remote NAS in a link layer authentication process. The link layer authentication process exchanges the link layer authentication packet with an authentication server to authenticate the client. The method includes receiving a link layer authentication packet from the remote NAS over the tunneling connection. The received link layer authentication packet includes a response from the authentication server regarding the transmitted link layer authentication packet.

Abstract: An apparatus includes a controller adds telemetry data to a telemetry packet transmitted along a communication pathway for data packets being transmitted from a sending host to a receiving host. The controller determines, from the telemetry packet, a number of network nodes in the communication pathway that have added telemetry data to the telemetry packet. The controller transmits the telemetry packet to a next destination along the communication pathway and to a network controller in response to determining that the number of network nodes in the communication pathway that have added telemetry data to the telemetry packet is equal to or greater than a network node threshold. The controller just transmits the telemetry packet to the next destination in response to determining that the number of network nodes in the communication pathway that have added telemetry data to the telemetry packet is less than the network node threshold.

Abstract: An apparatus for writing an L2 frame type in a VXLAN header includes a VXLAN stripper configured to strip encapsulation headers in layers above a VXLAN packet encapsulating a L2 frame of a data packet in response to receiving the data packet over a VXLAN. The apparatus includes a L2 frame type reader configured to read a L2 frame type stored in the VXLAN header in response to stripping the encapsulation headers, and a VXLAN re-encapsulator configured to re-encapsulate the VXLAN packet in a same format as the layers and associated encapsulation headers stripped from the received data packet in response to the L2 frame type indicating the L2 frame comprises data for transmission.

Abstract: An apparatus for writing an L2 frame type in a VXLAN header includes a VXLAN stripper configured to strip encapsulation headers in layers above a VXLAN packet encapsulating a L2 frame of a data packet in response to receiving the data packet over a VXLAN. The apparatus includes a L2 frame type reader configured to read a L2 frame type stored in the VXLAN header in response to stripping the encapsulation headers, and a VXLAN re-encapsulator configured to re-encapsulate the VXLAN packet in a same format as the layers and associated encapsulation headers stripped from the received data packet in response to the L2 frame type indicating the L2 frame comprises data for transmission.

Abstract: Methods, systems and computer readable media for quality of service aware hybrid multicast networks are described. A method can include receiving a request for content from a first receiver and initiating a quality of service aware hybrid tree construction by sending a multicast service level specification message to a first overlay tree manager. The method can also include dividing the tree at the overlay tree manager and communicating with other overlay tree managers in the network. The method can further include computing, at each overlay tree manager, a shortest path tree using a constrained algorithm and sending, from each overlay tree manager, a message to each IP manager in the network requesting that the IP managers construct an IP multicast tree and install the tree on one or more corresponding routers. The method can also include enforcing multicast routes and quality of service on the one or more routers.

Abstract: Methods, systems and computer readable media for quality of service aware hybrid multicast networks are described. A method can include receiving a request for content from a first receiver and initiating a quality of service aware hybrid tree construction by sending a multicast service level specification message to a first overlay tree manager. The method can also include dividing the tree at the overlay tree manager and communicating with other overlay tree managers in the network. The method can further include computing, at each overlay tree manager, a shortest path tree using a constrained algorithm and sending, from each overlay tree manager, a message to each IP manager in the network requesting that the IP managers construct an IP multicast tree and install the tree on one or more corresponding routers. The method can also include enforcing multicast routes and quality of service on the one or more routers.