Abstract: An optical transceiver includes a built-in optical switch to switch between diverse fiber paths in switches in a datacenter or in switches between two datacenters. The built-in optical switch can be used to switch between racks in a datacenter to increase capacity for any rack that requests it. A controller, which receives a signal from a server computer in one of the racks, can be external to the optical transceiver or within the optical transceiver. In either case, the server computer can be provided with additional bandwidth when needed. For connections between datacenters, the built-in optical switch allows for optical line protection, but without the need for a splitter circuit, which incurs a significant power loss and requires a more expensive transceiver. Consequently, the built-in optical switch within an optical transceiver can be used in a variety of contexts to increase efficiency and reduce overall costs for network devices.

Abstract: A secure communication channel is established between network devices separated by an unsecured physical space by dynamically performing server/client resolution based on comparison of unique identifiers of the devices. After a link between a first network device and a second network device is established, the devices exchange start frames in accordance with a network security protocol such as the Media Access Control Security (MACsec) protocol. Comparison logic at the first network device compares a value of a unique identifier of the first network device to a value of a unique identifier of the second network device obtained from the start frame transmitted by the second network device, and vice versa. Based on the comparison, one of the devices assumes a server/authenticator role, and the other device assumes a client/supplicant role. The devices operate in their determined roles to perform an authentication process and thereby establish a secure communication channel.

Abstract: Information from optical modules can be combined with information from network switches to help detect and pinpoint problems along a network communications path. A control path between a network switch and a microcontroller of an optical module can be used to obtain monitoring and debugging data from a digital signal processor (DSP) of the optical module. The DSP data can be used with performance data from the network switch to separately determine the health of the electrical and optical sections of the communications link. The ability to pinpoint problems with the communications link enables appropriate remedial actions to be determined and taken automatically.

Abstract: The embodiments simplify the development of applications for current and future wireless communication devices, resolving the deficiencies of current methods by providing a hierarchical routing layer which abstracts the actual proximity of the network connection. An application can request and receive a type of network connection without having to address details of the actual connection established. A hierarchical routing layer is provided within the software architecture of each processor within the computing device. The hierarchical routing layer abstracts the actual proximity of the network connectivity on the modem from the applications using proxy network interfaces. The hierarchical routing layers on each processor cooperate to identify a best network interface for an application network request.

Abstract: A method includes receiving a request to bind a port to a requesting application and determining whether an open application is bound to the port. The method further includes binding the requesting application to the port when the open application is not bound to the port.

Abstract: Systems and methods for performing efficient network address (NAT) translation are described herein. In some aspects, partial NAT entries are created for data packets before all the IP fragments of the data packets are received. Further, the IP fragments are transmitted before all the IP fragments of the data packets are received. In some aspects, unique IP-IDs are generated for IP fragments and/or data packets at a NAT device.

Abstract: A method of transmitting and receiving data from a multi-homing network device to a data network is disclosed and includes defining a network policy and transmitting the network policy to a routing module. Further, the method includes receiving a route scope from the routing module. The route scope identifies a subset of data interfaces to the data network that satisfy the network policy wherein the subset of data interfaces are selected from a set of available data interfaces and wherein the subset of data interfaces includes at least one data interface.

Abstract: A method includes receiving a data packet from a data interface and comparing an Internet Protocol (IP) address of the data interface to a destination IP address associated with the packet. Further, the method includes dropping the data packet when the IP address of the data interface does not match the destination IP address.

Abstract: Architecture for performing WLAN offload in a wireless device is disclosed. In an exemplary embodiment, an apparatus includes an application section configured to form IP packets from data to be transmitted, a modem section configured to apply a cellular protocol to the IP packets to form cellular protocol packets, an endpoint configured to encapsulate the cellular protocol packets to form outer IP tunnel packets, and a WLAN interface configured to transmit the outer IP tunnel packets over a WLAN communication channel. In another exemplary embodiment, an apparatus includes a WLAN interface configured to receive outer IP tunnel packets over a WLAN communication channel, an endpoint configured to extract cellular protocol packets from the outer IP tunnel packets, a modem processor configured to remove a cellular protocol from the cellular protocol packets to form IP packets, and an application processor configured to extract received data from the IP packets.

Abstract: Techniques for routing data via lower layer paths through lower layers of a protocol stack are described. A lower layer path may be composed of a flow for packets, a link at a link layer, and a channel at a physical layer. A packet may be received from an application. A most preferred lower layer path for the packet may be selected from among at least one available lower layer path. The available lower layer path(s) may be arranged in an order of preference based on treatment of packets (e.g., best effort or QoS), protocols used at the link layer, channel types at the physical layer, and/or other factors. The packet may be sent via the selected lower layer path. A highest precedence lower layer path for the packet may be set up (e.g., in parallel) if this path is not among the at least one available lower layer path.

Abstract: A method and apparatus are provided for connecting a mobile device to a subscriber access network, such as 3G network over an untrusted network, such as a wireless local area network (WLAN). SIP signaling is performed to authenticate and establish a connection to the subscriber access network. A unique identifier may be assigned to the mobile device for transmitting data to and receiving data from the subscriber access network.

Abstract: A method includes receiving a request to bind a port to a requesting application and determining whether an open application is bound to the port. The method further includes binding the requesting application to the port when the open application is not bound to the port.

Abstract: A user interface includes an application menu. The application menu includes a list of applications that are installed at a multi-home network device. An application identified by the application menu is selectable in order to edit at least one network setting associated with the application.

Abstract: A method includes receiving a data packet from a data interface and comparing an Internet Protocol (IP) address of the data interface to a destination IP address associated with the packet. Further, the method includes dropping the data packet when the IP address of the data interface does not match the destination IP address.

Abstract: Apparatus and methods for efficient NAT and ALG processing is disclosed. An exemplary method includes the operations of deep scanning a packet received over a connection to determine an application level gateway (ALG) process to be performed on the packet, associating the connection with the ALG process, and forwarding additional packets received over the connection to receive the ALG process based on said associating so that deep scanning of the additional packets is bypassed. An exemplary apparatus includes a processor to deep scan a packet received over a connection to determine an ALG process to be performed on the packet, a database to associate the connection with the ALG process, and a packet transmitter to forward additional packets received over the connection to receive the ALG process based on said associating so that deep scanning of the additional packets is bypassed.

Abstract: A method of transmitting and receiving data from a multi-homing network device to a data network is disclosed and includes defining a network policy and transmitting the network policy to a routing module. Further, the method includes receiving a route scope from the routing module. The route scope identifies a subset of data interfaces to the data network that satisfy the network policy wherein the subset of data interfaces are selected from a set of available data interfaces and wherein the subset of data interfaces includes at least one data interface.

Abstract: Methods and devices for reducing power consumption in a multi-processor computing device include filtering indications from the second processor intended for the first processor while the first processor is in a low power state, so that only selected, such as significant, indications are transmitted. The second processor may be informed when the first processor is in a low power state. Indications generated by the second processor may be compared to indication filtering criteria to determine whether each should be transmitted to the first processor. Those indications satisfying the indication filtering criteria may be sent to the first processor, causing it to return to a normal power state. In mobile computing device the first processor may be an applications processor and the second processor may be a modem. Filtering of indications may be accomplished in the second processor or in a power controller in some implementations.

Abstract: A method of transmitting and receiving data from a multi-homing network device to a data network includes defining a network policy and transmitting the network policy to a routing module. Further, the method includes receiving a route scope from the routing module. The route scope identifies a subset of data interfaces to the data network that satisfy the network policy wherein the subset of data interfaces are selected from a set of available data interfaces and wherein the subset of data interfaces includes at least one data interface.

Abstract: Apparatus and methods for efficient NAT and ALG processing is disclosed. An exemplary method includes the operations of deep scanning a packet received over a connection to determine an application level gateway (ALG) process to be performed on the packet, associating the connection with the ALG process, and forwarding additional packets received over the connection to receive the ALG process based on said associating so that deep scanning of the additional packets is bypassed. An exemplary apparatus includes a processor to deep scan a packet received over a connection to determine an ALG process to be performed on the packet, a database to associate the connection with the ALG process, and a packet transmitter to forward additional packets received over the connection to receive the ALG process based on said associating so that deep scanning of the additional packets is bypassed.

Abstract: Systems and methods for performing efficient network address (NAT) translation are described herein. In some aspects, partial NAT entries are created for data packets before all the IP fragments of the data packets are received. Further, the IP fragments are transmitted before all the IP fragments of the data packets are received. In some aspects, unique IP-IDs are generated for IP fragments and/or data packets at a NAT device.