Abstract: A method for selecting between a plurality of paths for sending an encrypted packet from a source endpoint to a destination endpoint is provided. The method selects a first path of the plurality of paths for sending the encrypted packet from the source endpoint to the destination endpoint, each of the plurality of paths associated with a different one of a plurality of source ports, the encrypted packet being encrypted based on a security association established between the source endpoint and the destination endpoint in accordance with an IPSec protocol. The method further encapsulates, based on the SA having NAT-T enabled, the encrypted packet with a UDP header having a first source port associated with the first path. The method then transmits the encapsulated encrypted packet from the source endpoint to the destination endpoint via the first path.

Abstract: Techniques for user authentication via in-ear acoustic measurements are disclosed. An in-ear device emits an acoustic signal and detects an otic response to the acoustic signal. A user signature is generated based at least on the otic response to the acoustic signal. The user signature is compared with a reference signature, to determine whether the in-ear device has changed users.

Abstract: Various aspects include approaches for managing tinnitus in a user. In some particular aspects, a computer-implemented method of managing tinnitus of a user with at least one wearable device includes: actuating, according to a prescribed pattern and using the at least one wearable device: a) an electro-acoustic transducer to provide an audio output to the user, and b) a contact element to apply vibration to a body part of the user, where the prescribed pattern both stimulates the nervous system of the user and delivers a sound to the user, which together mitigate the tinnitus.

Abstract: System and computer-implemented method in a cloud architecture including a mixed network having local objects in a local network and external objects in an external network, wherein the external objects are accessed through proxy communications, uses a proxy inventory to determine whether a connection from a first computing object to a second computing object should be excluded from a proxy. The connection from the first computing object to the second computing object is performed based on the determination.

Abstract: Various implementations include systems for processing audio signals. In particular implementations, a system includes at least one microphone configured to capture acoustic signals; a wearable hearing assist device configured to amplify captured acoustic signals from the at least one microphone and output amplified audio signals to a transducer; a voice activity detector (VAD) configured to detect voice signals of a user from the captured acoustic signals; and a voice suppression system configured to suppress the voice signals of the user from the amplified audio signals being output to the transducer.

Abstract: Various implementations include control mechanisms for conversation assistance audio devices. In some cases, an interface with a representation of the conversation assistance audio device in space is used to control audio functions in the device. In other cases, directionality of the device is controlled based upon the user's visual focus direction. In additional cases, the operating mode of the device is adjustable based upon the signature of a nearby acoustic signal.

Abstract: An audio enhancement method includes receiving a first input signal representative of audio captured using an array of two or more sensors, the first input signal characterized by a first signal-to-noise ratio (SNR), with the audio being the signal-of-interest. The method also includes receiving a second input signal representative of the audio, the second input signal characterized by a second SNR. The second SNR is higher than the first SNR. The method further includes computing a spectral mask based on a frequency domain representation of the second input signal, and processing a frequency domain representation of the first input signal based on the spectral mask to generate one or more driver signals. The method further includes driving one or more acoustic transducers using the generated driver signals.

Abstract: Techniques leveraging CPU flow affinity to increase throughput of a layer 2 (L2) extension network are disclosed. In one embodiment, an L2 concentrator appliance, which bridges a local area network (LAN) and a wide area network (WAN) in a stretched network, is configured such that multiple Internet Protocol Security (IPsec) tunnels are pinned to respective CPUs or cores, which each process traffic flows for one of the IPsec tunnels. Such parallelism can increase the throughput of the stretched network. Further, an L2 concentrator appliance that receives FOU packets is configured to distribute the received FOU packets across receive queues based a deeper inspection of inner headers of such packets.

Abstract: An audio enhancement method includes receiving a first plurality of input signals representative of audio captured using an array of two or more sensors, the first plurality of input signals characterized by a first signal-to-noise ratio (SNR), with the audio being the signal-of-interest. The method also includes receiving a second input signal representative of the audio, the second input signal characterized by a second SNR. The second SNR is higher than the first SNR. The method further includes combining the first plurality of input signals and the second input signal to generate one or more driver signals, and driving one or more acoustic transducers using the one or more driver signals to generate an acoustic signal representative of the audio. The driver signals include spatial information derived from the first plurality of input signals, and are characterized by a third SNR that is higher than the first SNR.

Abstract: An audio enhancement method includes receiving a first input signal representative of audio captured using an array of two or more sensors, the first input signal characterized by a first signal-to-noise ratio (SNR), with the audio being the signal-of-interest. The method also includes receiving a second input signal representative of the audio, the second input signal characterized by a second SNR. The second SNR is higher than the first SNR. The method further includes computing a spectral mask based on a frequency domain representation of the second input signal, and processing a frequency domain representation of the first input signal based on the spectral mask to generate one or more driver signals. The method further includes driving one or more acoustic transducers using the generated driver signals.

Abstract: Described herein are systems, methods, and software to manage the encapsulation of layer two communications across computing sites. In one example, a gateway at a first computing site may receive an encapsulated packet from a second gateway at a second computing site. After receiving the encapsulated packet, the gateway decapsulates the encapsulated packet and determines that the decapsulated packet satisfies MSS criteria. The gateway further, in response to determining that the decapsulated packet satisfies the MSS criteria, modifies an MSS option associated with the decapsulated packet to a maximum value and forwards the decapsulated packet to a destination virtual node in the first computing site.

Abstract: Various implementations include approaches for demonstrating wearable audio device capabilities. In particular aspects, a computer-implemented method of demonstrating a feature of a wearable audio device includes: receiving a command to initiate an audio demonstration mode at a demonstration device; initiating binaural playback of a demonstration audio file at wearable playback device being worn by a user and initiating playback of a corresponding demonstration video file at a video interface coupled with the demonstration device; receiving a user command to adjust a demonstration setting at the demonstration device to emulate adjustment of a corresponding setting on the wearable audio device; and adjusting the binaural playback at the wearable playback device based upon the user command.

Abstract: A head-worn acoustic device includes at least one acoustic transducer disposed such that, in a head-worn state, the transducer is in an open-ear configuration in which an ear canal of a user of the head-worn acoustic device is unobstructed. The acoustic device also includes at least one microphone configured to capture audio that is processed and played back through the transducer, and an amplifier circuit configured to process signals representing the audio captured using the microphone and generate driver signals for the transducer. The transducer and the microphone are disposed on the head-worn acoustic device such that, in the head-worn state, a lobe of a radiation pattern of the at least one acoustic transducer is directed towards the ear canal of the user, and the at least one microphone is positioned in an acoustic null in a radiation pattern of the at least one acoustic transducer.

Abstract: Systems and techniques are described for monitoring network communications using a distributed firewall. One of the techniques includes receiving, at a driver executing in a guest operating system of a virtual machine, a request to open a network connection from a process associated with a user, wherein the driver performs operations comprising: obtaining identity information for the user; providing the identity information and data identifying the network connection to an identity module external to the driver; and receiving, by a distributed firewall, data associating the identity information with the data identifying the network connection from the identity module, wherein the distributed firewall performs operations comprising: receiving an outgoing packet from the virtual machine; determining that the identity information corresponds to the outgoing packet; and evaluating one or more routing rules based at least in part on the identity information.

Abstract: The disclosure provides an approach for diagnosing a data plane of a network, wherein the network spans a first data center and a second data center, and wherein the second data center is remote to the first, the method comprising: accessing a secure connection between the first data center and the second data center; modifying, by the first performance controller, firewall settings of the first data center from a first setting to a second setting; opening on the second data center an instance of a performance tool; opening on the first data center a client of the instance of the performance tool; sending data packets over the data plane of the network; receiving the data packets; generating metrics associated with the data packets; and modifying firewall settings of the first data center from the second setting to the first setting.

Abstract: System and computer-implemented method in a cloud architecture including a mixed network having local objects in a local network and external objects in an external network, wherein the external objects are accessed through proxy communications, uses a proxy inventory to determine whether a connection from a first computing object to a second computing object should be excluded from a proxy. The connection from the first computing object to the second computing object is performed based on the determination.

Abstract: Various implementations include conversation assistance audio devices with settings that are adjustable based upon user feedback. In some cases, a computer-implemented method of personalizing a conversation assistance audio device includes: receiving a command from a user for assistance with audio settings in the conversation assistance audio device; applying a baseline set of audio settings to the conversation assistance audio device in response to receiving the user command for assistance; receiving a user command to change the baseline set of audio settings; and applying a modified set of audio settings to the conversation assistance audio device in response to receiving the user command to change the baseline set of audio settings, wherein the modified set of audio settings are applied based upon usage of the conversation assistance audio device and a population model of usage of similar conversation assistance audio devices.

Abstract: Various implementations include control mechanisms for managing hearing aid usage. In some cases, an interface with a representation of the hearing aid in space is used to control audio functions in the device. In other cases, directionality of the device is controlled based upon the user's visual focus direction. In additional cases, the operating mode of the device is adjustable based upon the signature of a nearby acoustic signal.

Abstract: The disclosure provides an approach for preventing the failure of virtual computing instance transfers across data centers. In one embodiment, a flow control module collects performance information primarily from components in a local site, as opposed to components in a remote site, during the transfer of a virtual machine (VM) from the local site to the remote site. The performance information that is collected may include various performance metrics, each of which is considered a feature. The flow control module performs feature preparation by normalizing feature data and imputing missing feature data, if any. The flow control module then inputs the prepared feature data into machine learning model(s) which have been trained to predict whether a VM transfer will succeed or fail, given the input feature data. If the prediction is that the VM transfer will fail, then remediation actions may be taken, such as slowing down the VM transfer.

Abstract: Systems, methods, and apparatus are provided for equalization preference learning for digital audio modification. A method for listener calibration of an audio signal includes modifying a reference sound using at least one equalization curve; playing the modified reference sound for a listener; accepting listener feedback regarding the modified reference sound; and generating a weighting function based on listener feedback. A listener audio configuration system includes an output providing a sound for listener review; an interface accepting listener feedback regarding the sound; and a processor programming an audio device based on listener feedback.