Abstract: A method implemented by a receiving host entity comprises transmitting, by a transmitter of the receiving host entity, an anonymized identifier of the receiving host entity, wherein the anonymized identifier is a temporary and recyclable identifier identifying the receiving host entity, and receiving, by a receiver of the receiving host entity, a data packet from a sending host entity, wherein the data packet includes the anonymized identifier.

Abstract: A computer-implemented method of transmitting encrypted data comprises accessing, by one or more processors of an origination endpoint, first data to be transmitted to a destination having a corresponding identifier; generating, by the one or more processors, an identifier security header; generating, by the one or more processors, second data from the first data and the identifier security header; encrypting, by the one or more processors, the second data; generating, by the one or more processors, authentication data based on the encrypted second data; generating, by the one or more processors, third data from the encrypted second data and the authentication data; generating, by the one or more processors, fourth data from the identifier corresponding to the destination and the third data; and sending, by the one or more processors, the fourth data to the destination.

Abstract: A router operates in both a Segment Routing (SR) network portion and a Multiprotocol Label Switching (MPLS) network portion of a network that utilizes Open Shortest Path First (OSPF). The router receives an OSPF advertisement message originated by a mapping server that includes a sub-Type-length-value (sub-TLV) element that identifies a preferred type of path across the MPLS network portion for an identifiable set of traffic that is to be received by the router from the SR network portion. The router identifies, based at least in part upon the sub-TLV element, one path of a plurality of available paths across the MPLS network portion for the identifiable set of traffic, and configures its forwarding plane to utilize the identified one path accordingly for the identifiable set of traffic. The OSPF advertisement message can be an OSPF LSA, and can carry an Extended Prefix Range TLV including the sub-TLV element.

Abstract: A computer-implemented method of transmitting encrypted data comprises accessing, by one or more processors of an origination endpoint, first data to be transmitted to a destination having a corresponding identifier; generating, by the one or more processors, an identifier security header; generating, by the one or more processors, second data from the first data and the identifier security header; encrypting, by the one or more processors, the second data; generating, by the one or more processors, authentication data based on the encrypted second data; generating, by the one or more processors, third data from the encrypted second data and the authentication data; generating, by the one or more processors, fourth data from the identifier corresponding to the destination and the third data; and sending, by the one or more processors, the fourth data to the destination.

Abstract: A method implemented by a receiving host entity comprises transmitting, by a transmitter of the receiving host entity, a message comprising an anonymization policy of the receiving host entity, the message comprising an anonymized identifier of the receiving host entity, the anonymized identifier being an ephemeral identifier of the receiving host entity, and receiving, by a receiver of the receiving host entity, a data packet from a sending host entity, a destination identifier field of the data packet including the anonymized identifier.

Abstract: A Self-Describing Packet block (SDPB) is defined that allows concurrent processing of various fixed headers in a packet block defined to take advantage of multiple cores in a networking node forwarding path architecture. SPDB allows concurrent processing of various pieces of header data, metadata, and conditional commands carried in the same data packet by checking a serialization flag set upon creation of the data packet, without needing to serialize the processing or even parsing of the packet. When one or h more commands in one or more sub-blocks may be processed concurrently, the one or more commands are distributed to multiple processing resources for processing the commands in parallel. This architecture allows multiple unique functionalities each with their own separate outcome (execution of commands, doing service chaining, performing telemetry, allows virtualization and path steering) to be performed concurrently with simplified packet architecture without incurring additional encapsulation overhead.

Abstract: A computer-implemented method of extending generic resilient identity services (GRIDS) is provided that comprises: receiving, by a mapping server, a resolve request from an originator endpoint for a locator of a destination endpoint; sending, by the mapping server, a request for authorization to provide the requested locator, the request for authorization indicating an identifier of the originator endpoint; receiving, by a policy server, the request for authorization; accessing, by the policy server, from a database, a set of policies for the destination endpoint; based on the identifier of the originator endpoint and the set of policies for the destination endpoint, sending, by the policy server, an authorization response to the mapping server; and based on the authorization response, sending, by the mapping server, a response to the resolve request to the originator endpoint.

Abstract: A router operates in both a Segment Routing (SR) network portion and a Multiprotocol Label Switching (MPLS) network portion of a network that utilizes Intermediate System to Intermediate System (IS-IS). The router receives an IS-IS advertisement message originated by a mapping server that includes a sub-Type-length-value (sub-TLV) element that identifies a preferred type of path across the MPLS network portion for an identifiable set of traffic to be received by the router from the SR network portion. The router identifies, based at least in part upon the sub-TLV element, one path of a plurality of available paths across the MPLS network portion for the identifiable set of traffic, and configures its forwarding plane to utilize the identified one path for the identifiable set of traffic. The IS-IS advertisement message can be an IS-IS TLV such as a SID/Label Binding TLV 149 or Multi-topology SID/Label Binding TLV 150.

Abstract: A method is implemented by a network device functioning as a Border Gateway Protocol (BGP) speaker to adaptively control a flow of link-state information to a peer BGP speaker. The network device stores, in a database, link-state information pertaining to a network in which it operates. The method includes determining that a pending change to the link-state information in the link-state database exists, determining whether a length of a change list queue meets/exceeds a threshold value, holding off on enqueuing link-state information into the change list queue while the length of the change list queue meets or exceeds the threshold value, determining aggregated link-state information to transmit to the peer BGP speaker in response to a determination that the length of the change list queue falls below the threshold value, and enqueuing the aggregated link-state information into the change list queue for eventual transmission to the peer BGP speaker.

Abstract: A method for providing mobility for Transmission Control Protocol (TCP) transport with session continuity. In one embodiment, the method establishes a communication session between a first communication device and a second communication device using a TCP seamless mobility option (TCP-SMO) connection identifier for identifying the communication session between the first communication device and the second communication device. The method exchanges data between the communication device and the second communication device during the communication session. The method maintains the communication session between the communication device and the second communication device in response to a mobility event using the TCP-SMO connection identifier.

Abstract: A mechanism is disclosed for performing network embedded real time service level objective (SLO) validation. A first data packet is received as part of a data flow. The first data packet includes a SLO indicating a network service threshold, the SLO including a key performance indicator (KPI) indicating a network service metric to be compared to the network service threshold. A service provided by the network device is measured according to the network service metric indicated by the KPI to obtain a measured service result. The measured service result is compared to the network service threshold indicated by the SLO to determine when the service provided by the network device has violated the SLO. Based on the determination that the service has violated the SLO, a defined action is performed.

Abstract: An apparatus in an IP network, the apparatus comprises: a receiver configured to: obtain an identity of a first entity, the identity is a unique identification of the first entity at a given time, obtain a first identifier of the identity, and obtain a second identifier of the identity, the first identifier and the second identifier are identifications of the identity; and a processor coupled to the receiver and configured to: create an association of the first identifier and the second identifier with the identity, and instruct storage of the association in a database.

Abstract: A method is implemented by a first Provider Edge (PE) network device in a network to configure a pseudo-wire (PW) between the first PE network device and a second PE network device in the network using Intermediate System to Intermediate System (IS-IS). The method includes receiving a first LSP update flooded in the network by the second PE network device via IS-IS, where the first LSP update advertises the PW. The method further includes configuring a local forwarding information base with a local PW label associated with the PW such that the first PE network device forwards traffic encapsulated with the local PW label to an Attachment Circuit associated with the PW and flooding a second LSP update in the network via IS-IS that includes an indication that the first PE network device is ready to receive traffic from the second PE network device over the PW.

Abstract: A method is implemented by a network device functioning as a Border Gateway Protocol (BGP) speaker to adaptively control a flow of link-state information to a peer BGP speaker. The network device stores, in a database, link-state information pertaining to a network in which it operates. The method includes determining that a pending change to the link-state information in the link-state database exists, determining whether a length of a change list queue meets/exceeds a threshold value, holding off on enqueuing link-state information into the change list queue while the length of the change list queue meets or exceeds the threshold value, determining aggregated link-state information to transmit to the peer BGP speaker in response to a determination that the length of the change list queue falls below the threshold value, and enqueuing the aggregated link-state information into the change list queue for eventual transmission to the peer BGP speaker.

Abstract: Servicing a pseudowire communication across multiple Administrative Systems (AS) by components of packet data networks. A first Provider Edge (PE) router of a first AS receives a first Interior Gateway Protocol (IGP) message from a source PE router of the first AS that includes pseudowire data. The first PE router creates a first Border Gateway Protocol Link State (BGP-LS) message that includes the pseudowire data and transmits the first BGP-LS message to a second PE router of a second AS and intended for a destination PE router of the second AS. The first PE router then receives a second BGP-LS message from the second PE router that includes modified pseudowire data. The first PE router creates a second IGP message that includes the modified pseudowire data and transmits the second IGP message to the source PE router.

Abstract: A method is implemented by a network device functioning as a Border Gateway Protocol (BGP) speaker to transmit aggregated link-state information pertaining to a network in which the network device operates to a peer BGP speaker. The method includes storing, in a link-state database, node entries representing nodes in the network, fragment entries representing fragments received from nodes in the network, and link/prefix entries representing links/prefixes in the network. Each link/prefix entry is assigned a state from a possible set of states, where the possible set of states include a new entry state, a modified entry state, a deleted entry state, and an unmodified entry state. The method further includes determining link-state information to transmit to the peer BGP speaker based on a state assigned to a link/prefix entry, and transmitting the determined link-state information to the peer BGP speaker.

Abstract: A method is implemented by a first Provider Edge (PE) network device in a network to configure a pseudo-wire (PW) between the first PE network device and a second PE network device in the network using an Interior Gateway Protocol (IGP). The method includes receiving a first advertisement message flooded in the network by the second PE network device via the IGP, where the first advertisement message advertises the PW. The method further includes configuring a local forwarding information base with a local PW label associated with the PW such that the first PE network device forwards traffic encapsulated with the local PW label to an Attachment Circuit associated with the PW and flooding a second advertisement message in the network via the IGP that includes an indication that the first PE network device is ready to receive traffic from the second PE network device over the PW.

Abstract: A provider edge (PE) router and methods for establishing a pseudowire using open shortest path first (OSPF) link state advertisement (LSA) messages. The pseudowire links the PE router with a remote PE router through a packet switched network (PSN), and emulates other communications protocols to provide customer edge (CE) equipment connected to the PE routers the appearance of a dedicated private circuit.

Abstract: A method is implemented by a network device functioning as a Border Gateway Protocol (BGP) speaker to transmit aggregated link-state information pertaining to a network in which the network device operates to a peer BGP speaker. The method includes storing, in a link-state database, node entries representing nodes in the network, fragment entries representing fragments received from nodes in the network, and link/prefix entries representing links/prefixes in the network. Each link/prefix entry is assigned a state from a possible set of states, where the possible set of states include a new entry state, a modified entry state, a deleted entry state, and an unmodified entry state. The method further includes determining link-state information to transmit to the peer BGP speaker based on a state assigned to a link/prefix entry, and transmitting the determined link-state information to the peer BGP speaker.

Abstract: Servicing a pseudowire communication across multiple Administrative Systems (AS) by components of packet data networks. A first Provider Edge (PE) router of a first AS receives a first Interior Gateway Protocol (IGP) message from a source PE router of the first AS that includes pseudowire data. The first PE router creates a first Border Gateway Protocol Link State (BGP-LS) message that includes the pseudowire data and transmits the first BGP-LS message to a second PE router of a second AS and intended for a destination PE router of the second AS. The first PE router then receives a second BGP-LS message from the second PE router that includes modified pseudowire data. The first PE router creates a second IGP message that includes the modified pseudowire data and transmits the second IGP message to the source PE router.