Abstract: Methods, devices and program instructions are disclosed for performing bit indexed explicit replication (BIER) including fast reroute capability. One embodiment of a method includes receiving, from an egress node of a BIER network, an advertisement at a forwarding node, where the advertisement identifies a mapping of the egress node to a bit position of a packet bit string to be carried by a packet through the network. The embodiment further includes generating or updating a primary entry for the egress node in a bit indexed routing table (BIRT) for the forwarding node, and determining whether a backup entry for the egress node is to be included in the BIRT. In response to a determination that a backup entry is to be included, the embodiment further includes generating or updating the backup entry in the BIRT.

Abstract: A method is provided in one example embodiment and may include receiving a packet by a forwarder in an Information-Centric Networking (ICN) network; determining Bit Index Explicit Replication (BIER) information associated with the packet; and forwarding the packet based, at least in part, on the BIER information associated with the packet. The packet can be an interest packet or a data packet received by the forwarder in the ICN network.

Abstract: In one embodiment, a device in a network receives traffic sent via a service function chain (SFC). The device models one or more behavioral characteristics of the traffic using a machine learning-based service function in the SFC. The device causes a change to the SFC based on the modeled one or more behavioral characteristics of the traffic.

Abstract: In one embodiment, a device in a network monitors Ethernet virtual private network (EVPN) traffic in the network for a plurality of media access control (MAC) addresses. The device generates a machine learning-based traffic model for the MAC addresses based on the monitored EVPN traffic. The device determines a timeout for a particular one of the MAC addresses based on traffic predicted by the machine learning-based traffic model for the particular MAC address. The device causes the particular MAC address to be timed out from one or more forwarding tables in the network based on the determined timeout.

Abstract: In one embodiment, a device in a network receives in-situ operations administration and management (iOAM) data regarding a plurality of traffic flows in the network. The iOAM data comprises entropy values for the plurality of traffic flows. The device receives network topology information indicative of network paths available in the network. The device generates a machine learning-based entropy topology model for the network based on the received iOAM data and the received network topology information. The entropy topology model maps path selection predictions for the network paths with entropy values. The device uses the entropy topology model to cause a particular traffic flow to use a particular network path.

Abstract: Various systems and methods for performing bit indexed explicit replication (BIER). For example, one method involves receiving a packet at a node. The packet includes a bit string includes information identifying a plurality of destinations. The node selects an entry in a bit indexed forwarding table (BIFT). The BIFT includes both a primary path entry and a backup path entry. The node forwards the packet based on information in the entry.

Abstract: A system for decentralized tracking of assets (devices (hardware) or software) is provided. One or more servers are configured to execute blockchain software for a blockchain that tracks ownership and usage of devices or software. Each transaction in the blockchain includes an asset identifier that identifies a particular device or instance of software and an owner identifier that identifies a particular owner of a particular device or instance of software. One or more computing devices are configured to run a blockchain client application that communicates with the blockchain software to provide updates to the blockchain as to ownership and usage of devices or software. The blockchain client application configured to add a new transaction to the blockchain to specify a new owner identifier when upon a sale/transfer and to specify when an update or change is made to a particular device or instance of software.

Abstract: Systems, methods, and computer-readable media for improving the reliability of service function (SF) application in a service function chain (SFC) are provided. In some aspects, the subject technology facilitates automatic service function type validation by a service function forwarder (SFF), for example, by using a probe configured query a function type of a SF module associated with the validating SFF.

Abstract: Systems, methods, and computer-readable media for service aware label address resolution or neighbor discovery protocol switched path instantiation for large-scale cloud networks. The system including a gateway server configured to receive from a first client, a request to communicate with a second client, the request including a destination and one or more attributes. The gateway server configured to determine a label based on the destination and the one or more attributes, the label corresponding to a pre-existing tunnel, and transmit a reply to the first client, including the destination, the one or more attributes, and the label.

Abstract: In one embodiment, a first device in a multicast label distribution (mLDP) network receives a first label mapping message that includes IPv4 and IPv6 addresses of a root node of a multicast tree. The first device also receives a second label mapping message from a second device that identifies the multicast tree and includes one of: the IPv4 address or the IPv6 address of the root node. The first device determines that the second label mapping message is associated with the multicast tree. In response to determining that the second label mapping message is associated with the multicast tree, the first device adds the second device to the multicast tree.

Abstract: Aspects of the embodiments are directed to receiving an address resolution protocol (ARP) request message from a requesting virtual machine, the ARP request message comprising a request for a destination address for a destination virtual machine, wherein the destination address comprises one or both of a destination hardware address or a destination media access control address; augmenting the ARP request message with a network service header (NSH), the NSH identifying an ARP service function; and forwarding the augmented ARP request to the ARP service function.

Abstract: Aspects of the embodiments are directed to receiving an address resolution protocol (ARP) request message from a requesting virtual machine, the ARP request message comprising a request for a destination address for a destination virtual machine, wherein the destination address comprises one or both of a destination hardware address or a destination media access control address; augmenting the ARP request message with a network service header (NSH), the NSH identifying an ARP service function; and forwarding the augmented ARP request to the ARP service function.

Abstract: Systems, methods, and computer-readable media for improving the reliability of service function (SF) application in a service function chain (SFC) are provided. In some aspects, the subject technology facilitates automatic service function type validation by a service function forwarder (SFF), for example, by using a probe configured to query a function type of a SF module associated with the validating SFF.

Abstract: In one embodiment, a device in a network receives a network registration request from a particular node. The network registration request comprises information about the particular node. The device causes performance of a validation of the information about the particular node via comparison of the information about the particular node to a distributed block chain that includes information regarding the particular node and one or more other nodes. The device causes an update to the block chain based on the information about the particular node and the validation of the information about the particular node. The device uses the updated block chain to control behavior of the particular node and the one or more other nodes.

Abstract: In one embodiment, a provider edge (PE) device in a computer network determines an IPv4 address and link-layer address for each adjacent customer premise equipment (CPE) device, and assigns each CPE device a unique IPv6 address. The PE device stores a key-pair mapping between the unique IPv6 address and combined IPv4 and link-layer address for each adjacent CPE, the mapping bound by a CPE session context, and uses the CPE session context to convert between IPv4 and IPv6 for all network traffic to and from a particular CPE device.

Abstract: In one embodiment, a device in a network receives a packet that includes one or more forwarding labels and a service function chaining (SFC) header. The device removes the one or more forwarding labels from the packet. The device inserts an indication of the one or more forwarding labels into metadata of the SFC header. The device forwards the packet with the inserted indication of the one or more forwarding labels to a service function.

Abstract: Techniques are disclosed for dynamically determining or learning hostnames. According to embodiments described herein, a solicitation message is received at a first network device. Based on the solicitation message, a hostname is determined for a second network device that sent the solicitation message. A first network address is also determined for the second network device that sent the solicitation message. A mapping between the hostname and the first network address is stored at the first network device.

Abstract: In one embodiment, an ingress router sends a multipath information query across a computer network toward an egress router, and builds an entropy table based on received query responses. The entropy table maps the egress router to one or more available paths to the egress router, and associated entropy information for each respective available path of the one or more available paths. The ingress router may then forward traffic to the egress router using the entropy table to load share the traffic across the one or more available paths using the associated entropy information for each respective available path. In response to detecting a failure of a particular path of the one or more available paths, however, the ingress router then removes the particular path from the entropy table, thereby ceasing forwarding of traffic over the particular path.

Abstract: In an embodiment, a method comprises obtaining a second network address at a computer node, which has been already associated with a first network address and provided first keying information; sending, to a key server computer, an update message that comprises both the first network address and the second network address; using the first keying information to encrypt messages that the computer node sends from the second network address to one or more other members of a group.

Abstract: A method is provided in one example and includes communicating a first request message to a first network element functioning as a point of local repair for a backup label switched path. The first request message includes a first network address having a predetermined value and an indication of a forwarding equivalence class associated with the backup label switched path. The method further includes receiving a first reply message from the first network element. The first reply message includes at least one backup path parameter associated with the backup label switched path.