Abstract: A process can include determining a plurality of Network Address Translation (NAT) routes associated with respective edge routers included in a same virtual private network (VPN) for communicating with a software-defined wide area network (SDWAN). A process can include identifying a first subset of the plurality of NAT routes as mapped to a first public NAT address included in a NAT pool associated with the VPN. A process can include tagging each NAT route of the first subset with a tag value indicative of a preferred router for receiving return traffic of the respective NAT route. A process can include routing traffic on a respective NAT route of the plurality of NAT routes based on applying, at an SDWAN controller, a corresponding control policy matching the tag value of the respective NAT route.

Abstract: A process can include determining a plurality of Network Address Translation (NAT) routes associated with respective edge routers included in a same virtual private network (VPN) for communicating with a software-defined wide area network (SDWAN). A process can include identifying a first subset of the plurality of NAT routes as mapped to a first public NAT address included in a NAT pool associated with the VPN. A process can include tagging each NAT route of the first subset with a tag value indicative of a preferred router for receiving return traffic of the respective NAT route. A process can include routing traffic on a respective NAT route of the plurality of NAT routes based on applying, at an SDWAN controller, a corresponding control policy matching the tag value of the respective NAT route.

Abstract: This disclosure describes techniques and mechanisms for utilizing affinity routing in SDWAN networks. The techniques may enable network administrators to assign and/or configure affinity numbers to hub(s) and/or gateway(s), tunneling interface(s), service(s), etc., as well as affinity-preference-order(s) to edge device(s) within the network. Network administrators may also configure control polic(ies). The techniques enable a scalable and simplified way to automatically load-balance traffic across different gateways within a network, while reducing network resource usage. The techniques may utilize routing affinity to achieve a variety of networking related functionalities, including automatic load-balancing of traffic, provisioning of active and backup gateways, optimal route distribution to routers from routing controllers, optimized service placement for edge routers, without the need for any policy configuration at all, let alone complex policies.

Abstract: A method and an apparatus for identifying sensitive information identifier in a privacy-protection manner are provided. The method is performed at a first computing entity which is configured to access a set of license plate numbers and to communicate with a second computing entity which is configured to obtain a license plate number that is captured by one of one or more license plate recognition (LPR) devices distributed in a certain geographic area. The method comprises: receiving a first hash value of the license plate number from the second computing entity; determining that the first hash value matches a second hash value of a plurality of hash values in an association relationship; and generating a notification of an identified license plate number. The association relationship maps a respective one of the plurality of hash values to a corresponding license plate number in the set of license plate numbers.

Abstract: In one embodiment, a method includes receiving, by a network node, traffic within a hierarchical software-defined wide area network (SD-WAN) network. The method also includes determining, by the network node, a destination region of the traffic. The destination region is within the hierarchical SD-WAN network. The method further includes classifying, by the network node, the traffic based on a destination match condition. The destination match condition is associated with two or more destination regions.

Abstract: The present disclosure provides methods and systems for performing licence plate matching. A reference list comprising licence plate identifiers is obtained. At least one transformation rule is applied to the licence plate identifiers of the reference list to generate entries forming at least one augmented reference list, and storing the at least one augmented reference list in at least one database. A search request comprising an input licence plate identifier is obtained. The at least one transformation rule is applied to the input licence plate identifier to generate a search list comprising at least one search term. The at least one database is queried with the search list to identify a match between at least one of the entries of the at least one augmented reference list and the at least one search term of the search list. A signal responsive is output to identifying the match.

Abstract: A memory management system and methods of using the same are disclosed herein. The memory management system can include storage devices including a tier 0 memory and a tier 1 memory. The storage devices can be connected to one or several user devices via one or several SANs and one or several virtualization devices. The one or several virtualization devices can control the storing of data in the storage devices such that a piece of data is stored in one of the tier 0 memory and the tier 1 memory based on a data attribute of the piece of data. Particularly, the piece of data can be stored in the tier 0 memory until a predetermined amount of time has passed, and the piece of data can then be moved to the tier 1 memory.