Abstract: Techniques and mechanisms for Fifth Generation (5G) system (5GS) failure detection monitoring of an application or control function in a network for efficient restoration of service are described. The network may be an Internet Protocol (IP) Multimedia Subsystem (IMS) network, and the voice or data service may be an IMS service that utilizes Session Initiation Protocol (SIP) signaling. The application or control function may be a Proxy-Call Session Control Function (P-CSCF) of the IMS network. In some implementations, the procedure may involve a session management function (SMF) programming of a user plane function (UPF) for UPF monitoring of the P-CSCF, using a ping procedure or health check procedure (e.g. for 3GPP Pre-Release 16). In other implementations, the procedure may involve the SMF monitoring of a P-CSCF via a Network Function (NF) Repository Function (NRF) (e.g. for 3GPP Release 16).

Abstract: This disclosure describes techniques and mechanisms for enabling streamlined and simplified cross domain routing policies within an enterprise networks. The techniques include receiving an intent of a user and, based on the intent, automatically determining a network topology and automatically generating a global policy, that includes policy definitions for domains (e.g., LAN, WAN, etc.) that take into account the various needs of LAN and WANs. The global policy may be deployed for enforcement within each domain and device of the network, ensuring consistent user experience and harmonious enforcement. The techniques may also generate catalogs of pre-defined global policies for particular industries. Users may customize and/or deploy the catalog(s) with minimal input, streamlining and simplifying cross domain routing in enterprise networks.

Abstract: The present disclosure describes aspects of systems and methods for managing modifications to processes of a facility such as a power plant or the like. An assessment module determines a baseline assessment of the facility, which may comprise determining technical, economic, and risk metrics for existing facility processes. Candidate processes are formulated to address identified improvement targets. Candidates may be selected for implementation based on technical, economic, risk, and/or adoption characteristics of the candidates relative to one another and/or corresponding facility baselines.

Abstract: This disclosure describes techniques and mechanisms for improving security within SDWAN fabric and utilizing telemetry data from non-enterprise providers to remediate compromised SDWAN site(s) and/or user(s). The techniques may implement an integration of non-enterprise application(s) and API(s) with an enterprise network, thereby enabling the enterprise network to identify compromised endpoint(s), identify user(s), group(s), site(s) that are impacted, and take a corrective action (by the enterprise network and/or the non-enterprise application(s) or API(s)) on the enterprise fabric.

Abstract: A method of facilitating interactive and guided experiencing of virtual real estate properties. Further, the method comprises receiving, using a communication device, a request from a user device associated with a user, generating, using a processing device, an interactive representation associated with a real estate property based on the request, transmitting, using the communication device, the interactive representation to the user device, receiving, using the communication device, an input associated with the user from the user device, obtaining, using the processing device, an output corresponding to an agent avatar based on the input, generating, using the processing device, an exploring parameter for exploring the interactive representation by the user avatar with the agent avatar based on the input and the output, transmitting, using the communication device, the exploring parameter and the output to the user device, and storing, using a storage device, the interactive representation.

Abstract: Systems and methods provide for creating a network device hierarchy among a plurality of nodes. The network device hierarchy may include a plurality of geography-based groups defined by a corresponding number of geolocations. The operations further include associating each of the plurality of geography-based groups with a plurality of different configuration intents, associating each of the plurality of nodes with one of the plurality of geography-based groups, and deploying the plurality of nodes based on their respective one of the geolocations.

Abstract: A system for managing additive manufacturing (AM) may comprise a datastore configured to store entries pertaining to a design for a three-dimensional (3D) object. The entries may be configured to include a respective set of parameters for an AM process. The parameters may be configured to cause an AM system to produce 3D objects having anisotropic mechanical properties that satisfy specified anisotropic mechanical requirements. The system may further comprise a design manager configured to determine a set of parameters that optimally satisfy the specified requirements, e.g., satisfy the requirements at a minimal cost.

Abstract: In one embodiment, a method includes onboarding, by an edge router, a first tenant from a network management system and determining, by the edge router, a mapping of a tenant identifier associated with the first tenant to a controller identifier associated with a controller. The method also includes reserving, by the edge router, a port number in a kernel for the first tenant and inserting, by the edge router, the tenant identifier into a first control packet. The method further includes communicating, by the edge router, the first control packet to the controller via an encrypted control connection during a first peering session. The first peering session shares the encrypted control connection with a second peering session.

Abstract: In one embodiment, a method includes receiving one or more 5G software-defined wide area network (SD-WAN) policies, identifying one or more identity-based policies from the one or more 5G SD-WAN policies, communicating the identified one or more identity-based policies to one or more WAN routers, communicating one or more 5G bindings to the one or more WAN routers, and applying the identified one or more identity-based policies to one or more flows between the one or more WAN routers.

Abstract: Systems, methods, and computer-readable media for interconnecting SDWANs through segment routing. A first SDWAN and a second SDWAN of a SDWAN fabric can be identified. A segment routing domain that interconnects the first SDWAN and the second SDWAN can be formed across a WAN underlay of the SDWAN fabric. Data transmission between the first SDWAN and the second SDWAN can be controlled by performing segment routing through the segment routing domain formed between the first SDWAN and the second SDWAN.

Abstract: A method for allocating resources of a virtual controller is disclosed. The method comprises: allocating resources of a virtual controller to a first tenant, wherein the first tenant is allocated a first tenant quantity of guaranteed resources of the virtual controller and a second tenant is allocated a second tenant quantity of guaranteed resources of the virtual controller; determining that resources requested by the first tenant are greater than the first tenant quantity of guaranteed resources; determining that the virtual controller has unutilized resources sufficient to at least partially provide additional resources beyond the first tenant quantity of guaranteed resources to the first tenant; and temporarily provisioning the additional resources to the first tenant, wherein the additional resources are greater than the first tenant quantity of guaranteed resources.

Abstract: Systems, methods, and computer-readable media for performing threat remediation through a switch fabric of a virtualized network environment. Data traffic passing into a virtualized network environment including a plurality of virtual machines running on a switch fabric is monitored. A network threat introduced through at a least a portion of the data traffic is identified at the switch fabric. One or more remedial measures are performed in the network environment based on the identification of the network threat in the virtualized network environment.

Abstract: Systems and methods provide for creating a network device hierarchy among a plurality of nodes. The network device hierarchy may include a plurality of geography-based groups defined by a corresponding number of geolocations. The operations further include associating each of the plurality of geography-based groups with a plurality of different configuration intents, associating each of the plurality of nodes with one of the plurality of geography-based groups, and deploying the plurality of nodes based on their respective one of the geolocations.

Abstract: Techniques for determining an optimal path for data traffic are described. The techniques may include receiving, by a first router located at a remote location of an enterprise organization and from a second router located at the remote location, first routing performance data indicating a first performance of a first path form the remote location to an application infrastructure. The first router also receives second routing performance data indicating a second performance of a second path from the remote location to the application infrastructure from a third router. The first router compares the first routing performance data and the second routing performance data, and based on the comparing, determines whether the first path or the second path is optimal, and transmits data traffic to the application infrastructure via the optimal path.

Abstract: The present technology pertains to receiving a tag associating at least one routing domain in an on-premises site with at least one virtual network in a cloud environment associated with a cloud service provider. The present technology also pertains to the automation of populating route and propagation tables with the cloud service provider.

Abstract: Symmetric networking techniques disclosed herein can be applied by gateway routers in cloud networks. The techniques can ensure that both outbound traffic received at a cloud from a branch device and return traffic directed from the cloud back to the branch device are processed by a same gateway router. The gateway router can use network address translation to insert IP addresses from an inside pool and an outside pool assigned to the router.

Abstract: A computer-implemented method and system for optimizing user experience and power management are disclosed. The method includes determining power profile of a target device; determining historical behavior of at least one user in relation to the target device; considering the historical behavioral data of the at least one user in relation to the target device based on the determined power profile of the target device; using rules to select at least one of a plurality of approaches for establishing connection with a server in relation to a result of the considering; and establishing the connection with the target device based on the at least one of the plurality of approaches selected.

Abstract: In one example, a first connectivity request for a first network connection between a user equipment and a first network is obtained. A control plane serving gateway node for the first network connection is selected. The control plane serving gateway node is co-located with a control plane packet data network gateway node configured to support a second network connection between the user equipment and a second network that is different from the first network. A second connectivity request for the second network connection is obtained. The second network connection is established with the control plane serving gateway node and the control plane packet data network gateway node.

Abstract: Systems, methods, and computer-readable media for performing threat remediation through a switch fabric of a virtualized network environment. Data traffic passing into a virtualized network environment including a plurality of virtual machines running on a switch fabric is monitored. A network threat introduced through at a least a portion of the data traffic is identified at the switch fabric. One or more remedial measures are performed in the network environment based on the identification of the network threat in the virtualized network environment.

Abstract: Techniques for an application watcher system that includes a plurality of watchers that obtain various types of application configurations and/or state data which is used to make networking decisions and drive networking operations. The watchers of the application watcher system may each be configured to communicate with an application orchestration system that manages the application and obtain different types of application configurations and/or state data. In some instances, the application watcher system may run on a network orchestrator of the network, or be in communication with the network orchestrator, and provide application configurations and/or state data to the network orchestrator to make networking decisions.