Abstract: A controller that is in communication with the plurality of network nodes establishes a service path for a service chain defined by an ordered sequence of service functions to be performed at respective ones of one or more of the plurality of network nodes. The controller assigns a predetermined service path identifier and a predetermined service index value for a segment of the service chain that includes only one or more network nodes not capable of decapsulating packets to extract a network service header so as to designate the one or more network nodes determined not capable of decapsulating packets to extract the network service header as a single service hop segment in the service chain.

Abstract: A method is provided in one example embodiment and includes determining an action to be performed with respect to a packet corresponding to a new flow received at a network device and determining whether a new entry comprising an indication of the determined action can be added to a flow table of the network device. The determination of whether a new entry can be added to the flow table is made with reference to reservation information specified in a port profile associated with the new flow. Responsive to a determination that the new entry can be added, the new entry is added to the flow table. In one embodiment, determining whether the new entry can be added comprises determining whether an existing entry can be aged out based on the reservation information specified in the associated port profile.

Abstract: Embodiments of the present invention include systems and methods for improving the exchange of routing information between information handling system by using compression. In embodiments, route information may be packetized as normally performed according to protocol. In embodiments, these packets may be compressed and placed into the data/payload portion of a new format packet. In embodiments, the new format packet includes an extended header with one or more fields that provide information related to the compressed packets in the packet payload. A receiving device receives the new packets with compressed data, decompresses the data, and processes the decompress data packets as per the normal protocol procedures.

Abstract: A method is provided in one example embodiment and includes receiving at a first network element a packet from a second network element; processing the packet at the first network element to obtain information regarding an identity of a virtual machine (“VM”) hosted by the second network element contained within the packet; and storing at the first network element the identifying information. The identifying information stored at the first network element is accessible by at least one third network element. In some embodiments, the first network element comprises a physical switch and the second network element comprises a virtual switch.

Abstract: An information handling system includes a server having a management system module. The management system module broadcasts an address resolution protocol request including a unique identifier in the information handling system. The management system module also receives multiple address resolution protocol responses to the address resolution protocol request. Each of the multiple address resolution protocol responses includes a different media access control address associated with the unique identifier. The management system module also creates a unique identifier table correlating each of the media access control addresses with the unique identifier.

Abstract: Some embodiments provide a forwarding element that inspects the size of each of several packets in a data flow to determine whether the data flow is an elephant flow. The forwarding element inspects the size because, in order for the packet to be of a certain size, the data flow had to already have gone through a slow start in which smaller packets are transferred and by definition be an elephant flow. When the forwarding element receives a packet in a data flow, the forwarding element identifies the size of the packet. The forwarding element then determines if the size of the packet is greater than a threshold size. If the size is greater, the forwarding element specifies that the packet's data flow is an elephant flow.

Abstract: A system of evaluating the reliability of deterioration-effect multi-state flow network and method thereof are disclosed in present invention. The system can evaluate the probability that d units of data of flow can be transmitted from a source node to a sink node. In practical application, the flow in a deterioration-effect multi-state flow network may undergo a loss due to deterioration. For example, electrical power will decrease if the transmission distance is too great. Therefore, how to evaluate the reliability of deterioration-effect multi-state flow network becomes an important issue.

Abstract: One embodiment of the present invention provides a switch. The switch comprises one or more ports, a link management module and a load balancing module. The link management module operates a port of the one or more ports of the switch in conjunction with a remote switch to form a virtual link aggregation. The load balancing module generates an index of a weight distribution vector based on address information of a multicast group associated with the virtual link aggregation. A slot of the weight distribution vector corresponds to a respective switch participating in the virtual link aggregation. In response to the index indicating a slot corresponding to the switch, the load balancing module designates the switch as primary switch for the multicast group, which is responsible for forwarding multicast data of the multicast group via the virtual link aggregation.

Abstract: Methods and apparatuses are described for virtualizing routing of network traffic by offloading routing decisions to a controller in communication with a plurality of network devices. For load balancing applications, the controller may make up-front decisions as to both destination and route, rather than wait until traffic has been routed to a load balancing point before determining the destination.

Abstract: A network system has a switch which transfers a packet and a controller which sets a flow entry to the switch. The controller has a heavy load switch detecting section which detects a heavy load switch with the heavy load of new flow entry setting processing; a storage section which stores a switch list; an alternate route searching section which searches an alternate route; and a flow entry setting section which assigns a flow of packets to be transferred by using a new flow entry of the heavy load switch to the switch on the alternate route, without changing the flow entry which is already set to the heavy load switch.

Abstract: There is provided a frame transfer apparatus, which includes: a storage unit configured to store an address and a port in association with the address; a receiving unit configured to receive a frame; a switch unit configured to determine an output port based on a destination address of a received frame; and a transmitting unit configured to transmit the received frame, from the output port determined by the switch unit, wherein the switch unit includes a copying unit configured to copy the received frame when the destination address of the received frame has not been stored in the storage unit, and a rate control unit configured to control an output rate of a frame to be copied.

Abstract: Methods and systems wherein a first network device in a first network maintains attribute information for one or more routes to one or more network devices external to the first network. The first network device is configured to identify that a first route to the second network device external to the first network has a particular network traffic management capability, and to update the attribute information to indicate that the first route to the second network device has the network traffic management capability. The first network device is configured to select the first route for a new network packet flow from the first network to the second network device, based on the recorded information, and route the new network packet flow to an external network in the first route. In some implementations, the first network is a software-defined network.

Abstract: The present invention relates to a method and device of evaluating a traffic shaper used for shaping at least two traffic flows of a mobile terminal operating according to a particular DRX setting in a mobile communications network. The method comprises the steps of acquiring an estimated lower bound of battery savings as a function of transmission rate of each traffic flow (f1, f2) of the at least two traffic flows for the mobile terminal according to the particular DRX setting. Further, the method comprises acquiring an estimated battery savings measure for said each traffic flow (f1, f2) before shaping, and acquiring an estimated battery savings measure for said each traffic flow (f1, f2) after shaping.

Abstract: A method for detecting interactions on a forwarding element in a network, the element adapted to forward data according to rules, a rule set installed on the element, and including a match set and corresponding action set, the match set including at least one match field and the action set including one or more actions wherein action to be performed when matching a match set includes determining one or more relations between match sets based on match field relations, determining one or more relations between action sets, determining one or more interactions between rules based on determined relations between match sets and action sets, each rule being tested against another rule for determining the interaction, and reducing the rule set to an actual rule set according to determined interactions so that the actual rule set includes only rules with no interactions among them.

Abstract: A network system of the present invention includes a switch and controllers. The switch processes on a received packet in accordance with a flow entry in which are defined a rule and an action. The controllers set the flow entry to a flow table of the switch. The switch assigns a flow table to each controller, searches when receiving a packet from outside for a flow table matching with the packet in all flow tables, ignores a flow entry set by a controller of which a status of connection is invalid among flow entries matching with the packet and processes the packet in accordance with an action of a flow entry set by a controller of which a status of connection is valid.

Abstract: A data stream and data packet transmission method and device are described, relating to the field of interface data transmission technologies. The method includes: a home end detects whether data to be transmitted is a data stream or a data packet; when it is detected that the data stream and the data packet exist simultaneously, the data stream is preferentially transmitted; and upon completion of transmission of the data stream, then the data packet is transmitted. According to the embodiments of the disclosure, when the data stream and the data packet exist simultaneously, high efficiency transmission of the data stream may be achieved with no need of extra external time for scheduling operations, effectiveness of transmission of the data stream is enhanced, and data transmission efficiency through the interface is improved.

Abstract: Systems and methods for managing and providing content and services on a network system. Aspects of the invention include location-based determination of network content and services that may be provided to client computers. Other aspects of the invention include authorization and authentication components that determine access rights of client computers. Additional aspects include systems and methods for redirecting client computers to different network content. The disclosed systems and methods may be used in numerous network system applications.

Abstract: Performance of transport protocols over a mobile data network is improved by a mobile accelerator, which performs protocol optimizations on-the-fly without requiring any modification to server or client protocol implementations in the operating systems of the server or client. The proposed mobile accelerator is compatible with existing TCP protocol implementations at the server and the client device, without server/client OS modification.

Abstract: Techniques are disclosed for controlling data transmission in multi-stream digital systems. The techniques disclosed allow an input stream to a conditional access system to be throttled when a FIFO begins to fill up. Each data stream may have its own FIFO, which sends data to a MUX and exports its status to a backpressure rate control module. Multiple seconds worth of data may be stored in a BPRC buffer ahead of the backpressure rate control module prior to being transmitted to a MUX FIFO buffer. The backpressure rate control module may use the cached data to fill available spaces within a MUX FIFO buffer. The determination to forward a data packet may be based on the individual MUX FIFO buffer levels, the sum of all the MUX FIFO buffer levels, and/or one or more configurable threshold values. In some embodiments, individual thresholds may be assigned to each FIFO buffer.

Abstract: Disclosed is a packet forwarding device which can reduce a development cost and realize desired QoS control. The packet forwarding device includes a second scheduler 2 including a second packet queue corresponding to each first packet queue included in a first scheduler, a second packet classification unit 22 which sorts a packet data to each second packet queue based on a second classification different from the classification set by the first scheduler, a throughput estimation unit 24 which estimates a throughput indicating an amount of the packet data forwarded to an information processing terminal from the first packet queue corresponding to the second packet queue, and a second packet scheduling unit 25 which forwards the packet data accumulated in each second packet queue based on the throughput and the priority of each second packet queue.

Abstract: A switch device for a network element includes a transfer system (110) for transferring data from ingress line interfaces of the network element to egress line interfaces of the network element in accordance with control information associated with the data. The transfer system includes a control section (111) configured to compare data traffic load to capacity available to the data traffic load at one of the egress line interfaces so as to generate a congestion indicator expressing whether a data flow (113) representing the data traffic load is a potential cause of congestion at the one of the egress line interfaces. The control section is further configured to direct a congestion control action to the data flow if the data flow is a potential cause of congestion. Thus, the congestion management related to the ingress and egress line interfaces can be carried out by the switch device.

Abstract: The invention provides a technique for assigning a server to manage resources. The server identifies a capacity value that represents a maximum number of resources that the server can simultaneously manage, and parses data included in a tracker directory to identify the resources that have the fewest number of servers assigned to manage them. Next, based on the capacity value, the server registers to manage the identified resources, where each registration to manage an identified resource results in the server actively managing the resource when no other server is registered to manage the resource, or acting as a backup manager to the resource when at least one other server is registered to manage the resource, and the tracker directory is updated accordingly. Finally, the server, for each registration that results in actively managing a resource, configures itself to process client device requests that are directed to utilizing the resource.

Abstract: Data flow node validation and provisioning techniques are described. In one or more implementations, a system is described that supports visual design and deployment of data flow pipelines to process streaming data flows. The system may be configured to include nodes and connections between the nodes to represent an arbitrary execution graph of data science algorithms (as algorithm action components) that are used to process the streaming data flows. The system may also support validation techniques to verify that the data flow pipeline may operate as intended. Further, the system may also support implementation and provisioning techniques that involve estimation and adjustment of runtime resource provisioning of a deployed data flow pipeline without preemption or starvation occurring for nodes within the pipeline.

Abstract: Embodiments of the present invention provide an approach to allow a user to link multiple cloud instances (e.g., virtual machines) together such that an action on one (cloud) instance is triggered when a second instance's state changes thereby invoking a predefined set of rules. Specifically, instances can be linked to one another via a graphical user interface (GUI or the like), and associated with a set of rules. The set of rules indicates a behavior/reaction of one instance when an action is performed with respect to another instance linked thereto. These embodiments could be implemented external to or within a cloud operating environment.

Abstract: A dual communication-interface facility monitoring and management system, the system including a multiplicity of facility monitoring\management devices, the devices including at least one of at least one facility monitoring sensor and at least one facility management device, the facility monitoring sensors being operative to monitor at least a part of a facility, the facility management devices being operative to manage at last part of the facility, a facility communication gateway operative to facilitate electronic communication between a local area network (LAN) associated with the facility and an a wide area network (WAN) external to the facility, and a dual communication-interface facility monitoring and management subsystem operative to communicate with each of the multiplicity of devices via at least one of a first multiplicity of communication protocols and to communicate with the facility communication gateway via at least one of a second multiplicity of communication protocols.

Abstract: A switch network may include a plurality of switch stages arranged in sequential stages. The plurality of switch stages may include a first switch stage connected to a plurality of inputs, a second switch stage connected to each switch in the first switch stage, a third switch connected to each switch in the second switch stage, a fourth switch stage connected to each of the switches in the third switch stage, and a fifth switch stage connected to a plurality of outputs and each switch in the fourth switch stage, and a control element configured to control each of the plurality of switch stages for routing a signal from one of the plurality of inputs to one of the plurality of outputs.

Abstract: Embodiments of the present invention relate to a scalable interconnection scheme of multiple processing engines on a single chip using on-chip configurable routers. The interconnection scheme supports unicast and multicast routing of data packets communicated by the processing engines. Each on-chip configurable router includes routing tables that are programmable by software, and is configured to correctly deliver incoming data packets to its output ports in a fair and deadlock-free manner. In particular, each output port of the on-chip configurable routers includes an output port arbiter to avoid deadlocks when there are contentions at output ports of the on-chip configurable routers and to guarantee fairness in delivery among transferred data packets.

Abstract: A server application is executed on an active device within the SAS domain, the active device connected to a remote client via an Ethernet connection. At least one command is received from the remote client via the Ethernet connection. An Ethernet frame of the at least one command is converted to at least one SAS frame. The at least one SAS frame is routed via a SAS data path to a SAS target device connected to the active device, the SAS target device corresponding to a field of the command.

Abstract: Within a networking device, packet portions from multiple PDRSDs (Packet Data Receiving and Splitting Devices) are loaded into a single memory, so that the packet portions can later be processed by a processing device. Rather than the PDRSDs managing the storing of packet portions into the memory, a packet engine is provided. The PDRSDs use a PPI addressing mode in communicating with the packet engine and in instructing the packet engine to store packet portions. A PDRSD requests a PPI from the packet engine, and is allocated a PPI by the packet engine, and then tags the packet portion to be written with the PPI and sends the packet portion and the PPI to the packet engine. Once the packet portion has been processed, a PPI de-allocation command causes the packet engine to de-allocate the PPI so that the PPI is available for allocating in association with another packet portion.

Abstract: A multichannel system, including a multiplexer having inputs for a plurality of input channels, and a pre-charge buffer having a plurality of inputs coupled to an input of the multiplexer, and an output coupled to a multiplexer output. The multichannel system may stand alone, or may be coupled to a receiving circuit having an input coupled to an output of the multiplexer. In some instances, the receiving circuit is an analog to digital converter.

Abstract: A method and apparatus for processing message is described. In one embodiment, an application programming interface is configured for receiving and sending messages. A multiplexer receives messages from different servers. A service name is coupled to each message with the corresponding destination service. A single shared channel is formed. The messages are processed over the single shared channel.

Abstract: Multiple camera angles of an interactive event are simultaneously transmitted as part of a broadcast. The simultaneous distribution of multiple synchronized streams of audio and/or visual information enables switching between cameras to be made by the audience members without interruption of the presentation of the event. In one embodiment, a performance studio might send out multiple synchronized concurrent streams. For example, a performance studio might transmit four distinct camera angles or streams, each at varying quality levels, such as the illustrated high-bandwidth and low-bandwidth encodings. Selection of the stream may also direct interactive feedback portions generated by the selecting audience member towards the selected object/individual. Alternatively, interactive feedback generated by the audience member may be directed globally to the producers of the event and selectively to the performers and other audience members of the event.

Abstract: Methods and apparatus related to providing additional information related to a vague term in a message. For example, in some implementations, one or more messages sent by a sender and received by one or more recipients may be identified, a vague term in the message may be identified, a user-restricted database may be identified that is associated with the sender or a recipient, and additional information related to the vague term may be determined from the user-restricted database. A vague term is a term which may have multiple meanings and that can be clarified with additional information. In some implementations, user-restricted databases may include additional information that is associated with the user that may be utilized to replace the vague term with a clarified term. In some implementations, a user-restricted database may be utilized to identify additional information in another database that may be utilized to clarify the vague term.

Abstract: In order to edit, in a transmission-efficient manner, multimedia news before sending or receiving such news, the existing user data volume (VOL) of a piece of multimedia news (MM) is determined prior to, during, and after putting together such piece of multimedia news (MM). At least one application reducing the original user data volume (VOL) of such piece of multimedia news (MM) is supplied and run in case a predefined user data volume threshold (SGx) or an upper price limit (SPx) is exceeded.

Abstract: Disclosed are various embodiments for a transmission service to suspend temporarily transmission of electronic communications to a recipient. In one embodiment, the transmission service receives a request to suspend receiving electronic communications temporarily for a suspension period. In response, the transmission service suspends transmitting electronic communications to the recipient during the duration of the suspension period. Then, the transmission service resumes transmitting electronic communications to the recipient upon the expiration of the suspension period.

Abstract: A computer-readable recording medium stores a consolidation support program that causes a computer to execute a process that includes acquiring an electronic message transmitted and received among apparatuses; converting the electronic message into a first electronic message based on a first consolidation rule selected from a consolidation rule group to convert the electronic message by substituting with a specific value, a character string that matches a specific pattern and is included in the electronic message; converting the electronic message into a second electronic message based on a second consolidation rule having a priority rank that is higher than that of the first consolidation rule; determining whether the first and the second electronic messages match; and producing when the first and the second electronic messages do not match, a restrictive condition that the first consolidation rule is to be selected after the second consolidation rule, from the consolidation rule group.

Abstract: Disclosed is a communication journaling and archival system which obtains content from social networks, handles re-authentication requirements which occur with respect to monitored users and social networks, includes content obtained from social networks in a journal and archiving system compatible with email journaling and archiving, and can be configured to send a journaled communication to multiple journal destinations and journal formats.

Abstract: A computer-implemented system keeps records of communications between participants as a conversation. All communications between participants in a transaction are stored as part of the conversation including documents, photographs, forms etc. needed to complete the transaction. A computer system interacts with a wallet service of one or more participants to keep a record of, or to affect the transfer of, consideration between participants in the transaction. Conversations can occur for any topic or conversations for a particular topic can be selected and a template provided for documents and/or conversation participants most often needed to complete an associated transaction.

Abstract: Establishing the likely duration and precision with which the post was written is disclosed. An analysis may be used to infer how confident the user is of the subject matter they are writing. A user's post (e.g., response, comment for, but not limited to, a thread, blog, community) may be monitored and its subject matter analyzed to determine benchmark style and speed with which a user can comment.

Abstract: An example method is provided that includes determining whether an address resolution protocol reply from a local machine has been received at an edge node; updating a local cache based on the reply from the local machine; and sending the reply to a plurality of edge nodes through a data plane of a data center interconnect. In more specific implementations, the method can include determining whether an address resolution protocol request has been received from the local machine. The method could also include updating a local machine cache based on the request. In certain implementations, the method can include determining whether the request is targeting the local machine; and dropping the request if the request is targeting the local machine. The method could also include sending the request through the data center interconnect if the request is not targeting the local machine.

Abstract: A method for communication, includes routing unicast data packets among nodes in a network using respective Layer-3 addresses that are uniquely assigned to each of the nodes. Respective Layer-2 unicast addresses are assigned to the nodes in accordance with an algorithmic mapping of the respective Layer-3 addresses. The unicast data packets are forwarded within subnets of the network using the assigned Layer-2 addresses.

Abstract: A network protection service for providing protective assistance to a subscribing host is presented. The network protection service is configured determine a set of rules for filtering network traffic for a subscribing host. The network protection service is further configured to receive network traffic on behalf of the subscribing host, filter the received network traffic according to the set of rules, and forward a portion of the filtered network traffic to the subscribing host. Still further, the network protection service is configured to analyze the received network traffic via the analysis server, and refine the set of rules for filtering the received network traffic based on the analysis of the received network traffic by the analysis server.

Abstract: A security management capability enables migration of individual security rules between storage/application locations. The migration of a security rule may include selection of a location at which the security rule is to be applied and migration of the security rule to the selected location at which the security rule is to be applied. The selection of the location at which the security rule is to be applied may be performed based on security rule policies and/or security rule location selection information. The security rule is migrated from a current location (e.g., a location at which the security rule is currently applied, a management system, or the like) to the selected location at which the security rule is to be applied. In this manner, a fluid security layer may be provided. The fluid security layer may be optimized for one or more of security level, performance, cost, or the like.

Abstract: Aspects of the subject disclosure may include, for example, a method comprising transmitting, by a controller comprising a processor, a request to a server to enable initiation of a virtual private network session on behalf of devices other than the controller. The controller transmits authentication information to enable the server to validate the request, and receives a first list of computing devices. The controller transmits a first selection of a target device from the first list to cause the server to initiate the virtual private network session between the target device and a service node providing services to the target device via the virtual private network session. The controller receives a second list of applications executable on each of the computing devices, and transmits to the server a second selection of an application from the second list that is executable by the target device. Other embodiments are disclosed.

Abstract: A method, system and computer program product for a VPN for containers and VMs implemented on different network node. A number of network hardware nodes have containers and VMs running on them. The containers and VMs are aggregated into VPNs assembled across the hardware nodes. Each hardware node has a network edge programmable switch configured to route packets to containers and VMs only inside a particular VPN. The switch detects a number of the VPN inside the packet header, replaces this number by a standard broadcast header number and multi-casts the packet to the containers and the VMs inside the VPN.

Abstract: Some embodiments use proxies on host devices to suppress broadcast traffic in a network. Each host in some embodiments executes one or more virtual machines (VMs). In some embodiments, a proxy operates on each host between each VM and the underlying network. For instance, in some of these embodiments, a VM's proxy operates between the VM and a physical forwarding element executing on the VM's host. The proxy monitors the VM's traffic, and intercepts broadcast packets when it knows how to deal with them. The proxy connects to a set of one or more controllers that provides a directory service that collects and maintains global information of the network. By connecting to the controller cluster, the proxy can obtain information that it can use to resolve broadcast requests. In some embodiments, the connection between the proxy and the controller cluster is encrypted and authenticated, to enhance the security.

Abstract: A validating server receives from a client device a first request that does not include a cookie for a validating domain that resolves to the validating sever. The first request is received at the validating server as a result of a proxy server redirecting the client device to the validating domain upon a determination that a visitor belonging to the client device is a potential threat based on an IP (Internet Protocol) address assigned to the client device used for a second request to perform an action on an identified resource hosted on an origin server for an origin domain. The validating server sets a cookie for the client device, determines a set of characteristics associated with the first client device, and transmits the cookie and a block page to the client device that has been customized based on the set of characteristics, the block page indicating that the second request has been blocked.

Abstract: A method and apparatus for dynamic home address assignment by a home agent in multiple network interworking. The invention provides a method and apparatus send a key authorization request from a mobile station to a network device, the request indicating that the mobile station wishes to use a foreign agent care-of address to continue to receive data. The network device assigns a temporary address to the mobile station and creates a security policy database for the mobile station. The mobile station receives agent advertisements from foreign agents that may be able to provide service. The mobile station registers with a foreign agent. The network device then modifies the security policy database to reflect the information of the foreign agent. The Home Agent then assigns a home address to the mobile station and the network device updates the security policy database to include only the mobile device's home address as a selector.

Abstract: A server system for distributing information securely includes a network interface for receiving, over a network, an information object accompanied by metadata. A repository stores the information object. Metadata is mapped to electronic addresses of trusted recipients. A processor is configured to generate a link for accessing the information object in the repository, acquire an electronic address of a trusted recipient based on the metadata accompanying the information object, insert the link into an electronic message addressed to the electronic address of the trusted recipient, and send the electronic message with the link to the trusted recipient. The processor is further configured to receive, over a second network, a request for the information object sent from a user device in response to an activation of the link, retrieve the information object from the repository, and transmit the information object to a browser of the user device over the second network.

Abstract: An encryption/decryption method are described, which includes that a terminal performs an encryption operation according to information of an encryption sub-node of an Encrypt And Decrypt Management Object (EADMO) node of a local Device Management (DM) tree and reports to a DM server encrypted data state information generated after the encryption succeeds; and the terminal performs a decryption operation according to the encrypted data state information sent from the DM server. An encryption/decryption system and device are also described. By means of technical solutions of embodiments of the disclosure, operations are simple without causing data loss, and a problem that data of a non-local terminal cannot be encrypted is solved.