Abstract: A network device in an overlay network can determine a role for a client device subsequent to detecting the client device via a local port. The network device can determine a roaming indicator for a client device indicating whether it is to roam to another network device. The network device can allocate a virtual local area network (VLAN) to the client device based on the role and the roaming indicator. The network device can determine flow information of a data flow from the client device. The flow information can indicate a category of an application generating the data flow. The network device can send, based on a messaging protocol, a message comprising the flow information to a broker of the messaging protocol. Subsequently, the flow information is to be distributed by the broker to a set of network devices subscribing to receive flow information associated with the VLAN.

Abstract: In a network, a network device can determine a service advertised by a server in the fields of a multicast data packet associated with a multicast group indicated by a Simple Service Discovery Protocol (SSDP). The network device can determine, based on a policy associated with the service, whether the first role of a client device is allowed to receive the service. The client device can be coupled to the network device via a first port. If the first role is allowed to receive the service, the network device can forward the first multicast data packet to the client device via the first port. If the first role is not allowed to receive the service, the network device can block the first multicast data packet at the first port to prevent advertisement of the service to the client device.

Abstract: In a network, a network device can determine a role for a client device coupled to a first port of the network device. The network device can then determine a set of telemetry parameters associated with the role. The network device can also determine a flow identifier of a data flow received from the client device via the first port. Subsequently, the network device can identify a respective packet in the data flow associated with the flow identifier. The network device can then record, based on a telemetry process of the network device, the set of telemetry parameters associated with the packet.

Abstract: In a network, a network device can determine a service advertised by a server in the fields of a multicast data packet associated with a multicast group indicated by a Simple Service Discovery Protocol (SSDP). The network device can determine, based on a policy associated with the service, whether the first role of a client device is allowed to receive the service. The client device can be coupled to the network device via a first port. If the first role is allowed to receive the service, the network device can forward the first multicast data packet to the client device via the first port. If the first role is not allowed to receive the service, the network device can block the first multicast data packet at the first port to prevent advertisement of the service to the client device.

Abstract: Some examples relate to applying a point-to-point security protocol to a network flow from a source application. In an example implementation, a network device can receive a network flow from a network client on a network. The network device can analyze a network packet of the network flow. Based on the analysis, the network device can identify a source application of the network flow. The network device can then refer to a lookup table in an integrated circuit (IC) on the network device that includes a point-to-point security protocol (PSP)-related policy for the source application. Based on the PSP policy in the lookup table, the network device can abstain from applying PSP-based encryption to the network flow from the source application.

Abstract: Some examples relate to applying a point-to-point security protocol to a network flow from a source application. In an example, in an example implementation, a network device can receive a network flow from a network client on a network. The network device can analyze a network packet of the network flow. Based on the analysis, the network device can identify a source application of the network flow. The network device can then refer to a lookup table in an integrated circuit (IC) on the network device that includes a point-to-point security protocol (PSP)-related policy for the source application. Based on the PSP policy in the lookup table, the network device can abstain from applying PSP-based encryption to the network flow from the source application.

Abstract: Implementations of the disclosure are directed to using a distributed ledger network to synchronize configuration changes across a network of servers that provide authentication, authorization, and accounting (AAA). In some implementations, a method includes: receiving, at a first server that provides AAA of users that access a network, a user request to update a configuration of a database of the first server, the database including authentication credentials for users that access the network, in response to receiving the user request, transmitting a transaction to the distributed ledger network for validation, the transaction comprising a request by the first server for each server of the distributed ledger network to update their respective database configuration in accordance with the user request; and after the transaction is validated by the distributed ledger network, the first server updating its database configuration in response to receiving the update comprising the validation of the transaction.

Abstract: Implementations of the disclosure are directed to using a distributed ledger network to synchronize configuration changes across a network of servers that provide authentication, authorization, and accounting (AAA). In some implementations, a method includes: receiving, at a first server that provides AAA of users that access a network, a user request to update a configuration of a database of the first server, the database including authentication credentials for users that access the network, in response to receiving the user request, transmitting a transaction to the distributed ledger network for validation, the transaction comprising a request by the first server for each server of the distributed ledger network to update their respective database configuration in accordance with the user request; and after the transaction is validated by the distributed ledger network, the first server updating its database configuration in response to receiving the update comprising the validation of the transaction.