Abstract: A network controller detects a congested peering link between a first router and a second router, and selects a first group of traffic flows from among the plurality of traffic flows to be offloaded from the congested peering link. The congested peering link carries a plurality of traffic flows, and the first group of traffic flows is associated with a first steering entity indicative of destination information for the first group of traffic flows. The network controller then selects an alternate peering link between the first and second routers to which to offload the first group of traffic flows from the congested peering link, and steers the first group of traffic flows from the congested peering link to the alternate peering link.

Abstract: The present disclosure discloses improvements in computer performance for supporting traffic steering based on a traffic steering capability. The traffic steering capability may be configured to support steering of traffic of a traffic flow, to be supported by a provider core network, along an end-to-end path between a source ingress provider edge router of the provider core network and a destination outside of the provider core network based on determination of the end-to-end path for the traffic flow (e.g., based on end-to-end path performance measurement information that includes internal path performance measurement information of potential internal paths of the provider core network and external path performance measurement information of potential external paths outside of the provider core network) and programming of the provider core network to support steering of the traffic of the traffic flow onto the end-to-end path for the traffic flow (e.g.

Abstract: The present disclosure discloses improvements in computer performance for supporting traffic steering based on a traffic steering capability. The traffic steering capability may be configured to support steering of traffic of a traffic flow, to be supported by a provider core network, along an end-to-end path between a source ingress provider edge router of the provider core network and a destination outside of the provider core network based on determination of the end-to-end path for the traffic flow (e.g., based on end-to-end path performance measurement information that includes internal path performance measurement information of potential internal paths of the provider core network and external path performance measurement information of potential external paths outside of the provider core network) and programming of the provider core network to support steering of the traffic of the traffic flow onto the end-to-end path for the traffic flow (e.g.

Abstract: Various embodiments include a method for managing a group of devices in communication with each other and sharing a set of keys. The method may include opening a secure channel with each of two devices from the group; providing the set of keys to the two devices from the group, wherein the set of keys include an encryption and an authentication key; indicating to the two devices to begin using the set of keys; and performing an audit process including verifying that nodes within a key group have the same copy of encryption and authentication keys. Embodiments of the method may include synchronization, active/standby redundancy and the ability to manage the network when some nodes perform the data encryption and some node do not, do, or when both encrypted and non-encrypted tunnels and services can work together.

Abstract: Various embodiments include a method for managing a group of devices in communication with each other and sharing a set of keys. The method may include opening a secure channel with each of two devices from the group; providing the set of keys to the two devices from the group, wherein the set of keys include an encryption and an authentication key; indicating to the two devices to begin using the set of keys; and performing an audit process including verifying that nodes within a key group have the same copy of encryption and authentication keys. Embodiments of the method may include synchronization, active/standby redundancy and the ability to manage the network when some nodes perform the data encryption and some node do not, do, or when both encrypted and non-encrypted tunnels and services can work together.