Abstract: Network fabric devices capable of participating in an anonymity protocol can be configured to operate as virtual circuit end-points where the node routes packets between a virtual circuit associated with a hidden service address and a port-level channel. Through management of the virtual circuit end-points, the network fabric devices participate as a hop in a virtual circuit, host hidden services, or operate as an interface to hidden services while reducing latency and truly hiding hidden services.

Abstract: A network switch comprises a plurality of optical physical transport layer resources and a control plane management engine capable of receiving, via a request over a network interface, at least one control plane provisioning policy that maps at least one upper layer resource to at least some of the optical physical transport layer resources. The control plane management engine provisions at least some of the optical physical transport layer resources for use by at least one virtual control plane, which operates according to rules of the control plane provisioning policy. The control plane management engine is configured to manage network traffic among the at least some optical physical transport layer resources and external networking nodes according to the at least one virtual control plane.

Abstract: A control plane management system is disclosed for distributed or virtualized network fabrics. The system instantiates a harmonized control plane that aids in provisioning resources across layers within a fabric. The system comprises a network fabric interface that couples with a network fabric of interconnected nodes. The system further comprises a control plane management engine coupled with the network fabric interface. The management engine obtains one or more resource profiles related to each of an upper networking layer of the fabric and a lower networking layer of the fabric, and constructs a control plane provisioning policy as a function of the upper and lower networking layer resource profiles. The management engine then instantiates a harmonized control plane, according to the provisioning policy, by creating a harmonized control plane object having rules outlining the responsibilities of the harmonized control plane.

Abstract: Methods of detecting anomalous behaviors associated with a fabric are presented. A network fabric can comprise many fungible networking nodes, preferably hybrid-fabric apparatus capable of routing general purpose packet data and executing distributed applications. A nominal behavior can be established for the fabric and represented by a baseline vector of behavior metrics. Anomaly detection criteria can be derived as a function of a variation from the baseline vector based on measured vectors of behavior metrics. Nodes in the fabric can provide a status for one or more anomaly criterion, which can be aggregated to determine if an anomalous behavior has occurred, is occurring, or is about to occur.

Abstract: A device configured to or programmed to instantiate an isolated sub-fabric is presented. A network configuration device uses a virtual air gap policy to instantiate a sub-fabric from a fabric of networking nodes. The sub-fabric is configured with an internal routing policy that respects the nature of the defined isolation. Further, the fabric is provisioned with a virtual air gap that ensures the external networking nodes respect the isolation of the sub fabric.

Abstract: Methods of detecting anomalous behaviors associated with a fabric are presented. A network fabric can comprise many fungible networking nodes, preferably hybrid-fabric apparatus capable of routing general purpose packet data and executing distributed applications. A nominal behavior can be established for the fabric and represented by a baseline vector of behavior metrics. Anomaly detection criteria can be derived as a function of a variation from the baseline vector based on measured vectors of behavior metrics. Nodes in the fabric can provide a status for one or more anomaly criterion, which can be aggregated to determine if an anomalous behavior has occurred, is occurring, or is about to occur.

Abstract: A data delivery system leverages existing satellite infrastructure to deliver massive data sets (e.g., genomic data) to last-mile, remote or rural, locations. The system repurposes existing high-capacity satellite links normally used to broadcast entertainment content by creating customized channels specifically adapted to delivering large data sets to be stored upon computer systems.

Abstract: A network fabric application coupled to a data link layer is provided with access to network elements in an optical fiber network. The network fabric application defines a network fabric configuration comprising at least a subset of the network elements, wherein the network fabric forms a multi-path communication network among the subset. The network fabric is configured to transmit data among networked devices in the network fabric along the multi-path communication network.

Abstract: A first fabric abstraction layer couples to a data link layer and a physical layer of a network fabric device. The network fabric device is connected to other network elements within a network via at least one network connection, such as a fiber optic connection. A second fabric abstraction layer couples to the data link layer and an application of the network device. The second fabric abstraction layer provides an application programming interface (API) to the application. The API allows the application to generate configuration instructions for configuring the at least one network connection. Upon receiving the configuration instructions generated by the application, the second abstraction layer sends the configuration instructions to the first abstraction layer via the data link layer. The first abstraction layer then configures the at least one network connection to transmit data according to the configuration instructions.

Abstract: A power management system for a personal area fabric having a plurality of nodes is presented. The system implements power management functions at the fabric-level via fabric-level power profiles reflecting the aggregated power profiles from some or all of the nodes in the fabric. The fabric-level power profiles are used to trigger the implementation of fabric power configurations that cause the individual nodes to modify their operations in the interest of a fabric-level power management plan.

Abstract: Systems and methods associated with distributing an application's network interface over nodes of a networking fabric are presented. Nodes of the fabric can operate as interface modules, each taking on a role or responsibility for a portion of the application's network address including IP address, port assignments, or other portions of the network address. Interface modules of the networking nodes can then spoof or cloak the application to provide security against internal or external threats.

Abstract: A data delivery system leverages existing satellite infrastructure to deliver massive data sets (e.g., genomic data) to last-mile, remote or rural, locations. The system repurposes existing high-capacity satellite links normally used to broadcast entertainment content by creating customized channels specifically adapted to delivering large data sets to be stored upon computer systems.

Abstract: A hybrid routing—application network fabric apparatus is presented where a fabric apparatus has multiple apparatus components or resources that can be dedicated to one or more application topologies. The apparatus can receive a topology image definition file describing an application topology and the apparatus can dedicate its local components for use with the application topology. The apparatus can dedicate general purpose processing cores, dedicated routing cores, data channels, networking ports, memory or other local resources to the application topology. Contemplated application topologies include routing topologies, computation topologies, database topologies, storage topologies, or other types of application topologies. Furthermore, application topologies can be optimized by modeling or simulating the topologies on a network fabric.

Abstract: A data delivery system leverages existing satellite infrastructure to deliver massive data sets (e.g., genomic data) to last-mile, remote or rural, locations. The system repurposes existing high-capacity satellite links normally used to broadcast entertainment content by creating customized channels specifically adapted to delivering large data sets to be stored upon computer systems.

Abstract: A control plane management system is disclosed for distributed or virtualized network fabrics. The system instantiates a harmonized control plane that aids in provisioning resources across layers within a fabric. The system comprises a network fabric interface that couples with a network fabric of interconnected nodes. The system further comprises a control plane management engine coupled with the network fabric interface. The management engine obtains one or more resource profiles related to each of an upper networking layer of the fabric and a lower networking layer of the fabric, and constructs a control plane provisioning policy as a function of the upper and lower networking layer resource profiles. The management engine then instantiates a harmonized control plane, according to the provisioning policy, by creating a harmonized control plane object having rules outlining the responsibilities of the harmonized control plane.

Abstract: Systems and methods associated with distributing an application's network interface over nodes of a networking fabric are presented. Nodes of the fabric can operate as interface modules, each taking on a role or responsibility for a portion of the application's network address including IP address, port assignments, or other portions of the network address. Interface modules of the networking nodes can then spoof or cloak the application to provide security against internal or external threats.

Abstract: A hybrid routing—application network fabric apparatus is presented where a fabric apparatus has multiple apparatus components or resources that can be dedicated to one or more application topologies. The apparatus can receive a topology image definition file describing an application topology and the apparatus can dedicate its local components for use with the application topology. The apparatus can dedicate general purpose processing cores, dedicated routing cores, data channels, networking ports, memory or other local resources to the application topology. Contemplated application topologies include routing topologies, computation topologies, database topologies, storage topologies, or other types of application topologies. Furthermore, application topologies can be optimized by modeling or simulating the topologies on a network fabric.

Abstract: Methods of detecting anomalous behaviors associated with a fabric are presented. A network fabric can comprise many fungible networking nodes, preferably hybrid-fabric apparatus capable of routing general purpose packet data and executing distributed applications. A nominal behavior can be established for the fabric and represented by a baseline vector of behavior metrics. Anomaly detection criteria can be derived as a function of a variation from the baseline vector based on measured vectors of behavior metrics. Nodes in the fabric can provide a status for one or more anomaly criterion, which can be aggregated to determine if an anomalous behavior has occurred, is occurring, or is about to occur.

Abstract: Methods of detecting anomalous behaviors associated with a fabric are presented. A network fabric can comprise many fungible networking nodes, preferably hybrid-fabric apparatus capable of routing general purpose packet data and executing distributed applications. A nominal behavior can be established for the fabric and represented by a baseline vector of behavior metrics. Anomaly detection criteria can be derived as a function of a variation from the baseline vector based on measured vectors of behavior metrics. Nodes in the fabric can provide a status for one or more anomaly criterion, which can be aggregated to determine if an anomalous behavior has occurred, is occurring, or is about to occur.

Abstract: A managed surface-space network fabric is presented. The surface-space network fabric can include a spaced-based network fabric and a surface-based network fabric integrated together to form a single fabric managed by a global fabric manager. The global fabric manager cooperates with other fabric managers local to each fabric to establish a communication topology among all the nodes of the fabric. Preferred topologies include paths from any port on a node to any other port on another node in the fabric. The surface-space fabric, and each individual fabric, can function as a distributed core fabric operating as a single, coherent device.