Abstract: A determination is made regarding whether a firewall will block a network packet. The network packet indicates a set of one or more characteristics. A test packet is generated that indicates the set of characteristics. The test packet is sent to the firewall without using a network. A test result is received from the firewall. The test result is stored.

Abstract: In a particular embodiment, a method includes determining, by a first device, a number of discovery messages received during at least one discovery interval. Based on the number of discovery messages, an estimated number of devices in an ad-hoc network is determined. The method further includes transmitting, during a second discovery interval that is subsequent to the at least one discovery interval, a discovery message. The discovery message indicates the estimated number of devices in the ad-hoc network.

Abstract: Disclosed are a method for SDN based network management and an apparatus performing the same. A method for network management, performed in a central control apparatus, may comprise receiving a path request message indicating a request to configure a path from a terminal; generating path list information including information about at least one configurable path, and providing the terminal with the path list information; receiving information about a specific path selected in the path list information from the terminal; and transmitting information about at least one detail function included in each of at least one node constituting the selected specific path to the terminal. Therefore, a path optimized for user's requirements may be easily configured, and so service quality may be enhanced.

Abstract: Implementing a Bloom filter index as a hierarchical data structure. Bloom filters are received and their bit vectors are decomposed into successive bit sequences. For each bit sequence except the last one, memory for at least storing a pointer to a memory location on the next level is allocated on the level corresponding to the bit sequence. The pointer storage is labeled by the value of the next bit sequence. A pointer to the allocated memory is stored in the pointer storage on the previous level that was labeled by the binary value of the current bit sequence. For the last bit sequence, memory for storing Bloom filters is allocated on the last level. A pointer to the allocated memory is stored in the pointer storage on the second-to-last level that was labeled by the value of the last bit sequence. The Bloom filter is stored in the allocated memory.

Abstract: In one embodiment, techniques are shown and described relating to dynamically determining node locations to apply learning machine based network performance improvement. In particular, a degree of significance of nodes in a network, respectively, is calculated based on one or more significance factors. One or more significant nodes are then determined based on the calculated degree of significance. Additionally, a nodal region in the network of deteriorated network health is determined, and the nodal region of deteriorated network health is correlated with a significant node of the one or more significant nodes.

Abstract: In one embodiment, techniques are shown and described relating to learning machine based computation of network join times. In particular, in one embodiment, a device computes a join time of the device to join a computer network. During joining, the device sends a configuration request to a server, and receives instructions whether to provide the join time. The device may then provide the join time to a collector in response to instructions to provide the join time. In another embodiment, a collector receives a plurality of join times from a respective plurality of nodes having one or more associated node properties. The collector may then estimate a mapping between the join times and the node properties and determines a confidence interval of the mapping. Accordingly, the collector may then determine a rate at which nodes having particular node properties report their join times based on the confidence interval.

Abstract: Control planes of virtual resource providers may be customized in a secure, stable and efficient manner with virtual control planes. Control planes may be modularized. Control plane modules may be supplied with data from standardized sensors, and required to generate standardized resource configuration requests responsive to solicitations with specified response latencies. Custom control plane modules may be selected to replace or complement default control plane modules. Financial and computational costs associated with control plane modules may be tracked. Competing resource configurations may be mediated by a control plane supervisor. Such mediation may be based on control plane module reputation scores. Reputation scores may be based on customer feedback ratings and/or measured performance with respect to module goals. Mediated configuration parameter values may be based on a combination of competing configuration parameter values weighted according to reputation.

Abstract: Methods and systems for displaying information in a hierarchical structure are disclosed. An embodiment provides a method for displaying HFC network monitoring information and alarms in a hierarchical, topological fashion within a network monitoring system.

Abstract: The present disclosure relates to a server that makes use of a host central processing unit (CPU) which accesses a production network to enable communications with a remotely located subsystem using the production network. A USB host system may be operably associated with the host CPU. A service processor may also be incorporated in the server, which is configured to communicate with an out of band network. A service processor USB system may be operably associated with the service processor and may communicate with the USB host system. This enables access to either an operating system or a hypervisor running on the host CPU via the out of band network, using an Ethernet-over-USB protocol.

Abstract: A framework supporting content delivery includes a plurality of devices, each device configured to run at least one content delivery (CD) service of a plurality of CD services. The plurality of CD services include adaptation services.

Abstract: In a content delivery network (CDN a method includes: receiving a request for a CDN service of a particular type, wherein a CDN service of said particular type defines a fixed number of configurable layers of request processing, sequentially from a first layer to a last layer; and processing said request, starting at said first layer, said processing being based on a modifiable runtime environment, said processing continuing conditionally through each of said layers in turn until either said request is terminated by one of said layers or said last layer processes said request. The CDN service may be selected from: delivery services, collector services, reducer services, rendezvous services, configuration services, and control services.

Abstract: A framework supporting content delivery includes a plurality of devices, each device configured to run at least one content delivery (CD) service of a plurality of CD services. The plurality of CD services include services supporting content delivery.

Abstract: A method of troubleshooting a communication service, a troubleshooting tool, and a system are disclosed. Each involves bi-lateral testing of a customer premise equipment in a customer network and a communication service provider router in a communication service provider network. Bi-directional information generated in the bi-lateral testing is stored in a datastore for later retrieval in troubleshooting the customer premise equipment and communication service provider router. User interaction is also stored in the datastore to track customer behavior which can be used alone or in combination with the bi-directional information to monitor performance and/or troubleshoot the customer premise equipment and communication service provider router.

Abstract: A method and a system implementing a service level agreement based storage access system. A service level agreement based storage access system presents a single interface for data storage consumers and translates generic data operation requests to data operation request specific to a storage server. The SLA based storage access system also monitors storage server performance and may throttle processes to ensure service level agreements are not violated.

Abstract: Embodiments of the present invention provide an approach for dynamically modifying Quality of Service (QoS) levels for resources (e.g., applications, processes, services, etc.) running in a networked computing environment. Specifically, embodiments of the present invention dynamically adjust transport level networking QoS parameters based on associated service level agreements (SLA) term. In a typical embodiment, a set of service level requirements associated with a resource running in the networked computing environment will first be identified (e.g., in a computer data structure). Then, the set of service level requirements will be mapped to a set of QoS parameters associated with a transport layer of the networked computing environment. A current performance of the resource within the transport layer will then be determined. Once the current performance has been determined, it will be further determined whether the current performance meets the set of service level requirements.

Abstract: A computer-implemented method analyzes a website to determine whether the website represents a potential source of spam, and, in response to the analyzing, flags content of the website as spam content. The determination can be made by computing a total number of content items associated with the website, calculating a publication frequency of the content items, and determining whether the website in its entirety represents spam content based on the total number and the publication frequency. The determination could also be made by generating a signature of a webpage containing a content item, obtaining an occurrence count for the generated characterizing signature, and, when the obtained occurrence count is greater than a threshold count, identifying the content item as spam.

Abstract: Consideration of system jitter in selecting a “message passing collectives algorithm” used in a message passing interface. A set of multiple message passing collectives algorithms are ranked against each other with at least some consideration of relative jitter-related performance as between the algorithms. The consideration of jitter includes consideration of “system jitter” (OS jitter and/or network jitter). In some embodiments, multiple rankings are performed for different levels of system jitter.

Abstract: A streams manager monitors performance of a streaming application on a physical machine, and determines operators that are underperforming and operators that are overperforming. When the performance needs to be improved, the streams manager automatically modifies the flow graph to deploy one or more operators of the streaming application that are overperforming to a virtual machine in a cloud. Moving the overperforming operators off of the physical machine to a VM leaves additional resources for the underperforming operators that are left on the physical machine to improve performance of the streaming application.

Abstract: Methods, systems, and computer readable media for storing data associated with packet related metrics are disclosed. According to one method, the method includes generating a test packet including a port tuple sequence number (PTSN), wherein the PTSN indicates a number of packets across multiple flows associated with a same port tuple, wherein the port tuple indicates an ingress port and an egress port that the test packet traverses at a device under test (DUT), and storing the PTSN in an entry of a data structure, wherein the entry is indexed by the port tuple.

Abstract: Systems and methods are disclosed which facilitate monitoring of usage information associated with services implemented within a hosted computing environment. Providers of a service, or other authorized parties, may be enabled to associate one or more descriptors with a service. Thereafter, each service instances may be monitored for such descriptors. By correlating usage information of instances with specific descriptors, usage information for the descriptor may be generated. In some instances, usage information corresponding to a descriptor may be utilized to monitor license agreements associated with services including the descriptor. Further, use of descriptors may reduce or eliminate the need to associate services with physical attributes of hosting computing devices, such as media access control addresses.

Abstract: The following description is directed to monitoring an interconnection network. In one embodiment, a method of monitoring an internal link of an interconnection network can comprise creating a network packet. The network packet can comprise a data-link-layer destination address corresponding to a management interface of a first router of the interconnection network, and a network-layer destination address corresponding to a host computer. The network-layer destination address can be within a subnet associated with a management interface of a second different router of the interconnection network. The internal link can connect the first router and the second router. The method can further comprise transmitting the network packet from the host computer, and determining one or more performance metrics of the internal link based, at least in part, on whether the network packet is received at the host computer.

Abstract: A gossiping scheme for sharing node status in a cluster of nodes provides a robust mechanism for determining node status within the cluster. Nodes transmit gossip messages to each other nodes, the gossip messages listing other nodes in the cluster that are operational. When a node does not receive a gossip message from a particular node within a predetermined time period, then the node transmits messages to the other nodes indicating that the particular node is down. However, if another node has received a packet from the particular node within the predetermined time period and receives the node down message, then the other node responds with a node alive message.

Abstract: A terminal apparatus included in a contents centric network and a communication method thereof are provided, the communication method including receiving an interest packet regarding a specific content from an external terminal apparatus, adjusting a window size of the interest packet based on at least one of a requesting frequency of the specific content corresponding to the interest packet and a communication status, and after adjusting the window size, transmitting the interest packet to surrounding terminal apparatuses.

Abstract: A system includes a first regional network including a first network element; a second regional network including a virtualized control plane network element, the virtualized control plane network element supporting a routing protocol at the first regional network, the routing protocol employing a location-based cost model; and a network connection connecting the virtualized control plane network element to the first regional network, the network connection having a network connection cost, the network connection cost applied in the location-based cost model to support the routing protocol at the first regional network.

Abstract: A first media packet from a first endpoint of an access network behind a NAPT device is received by a media device between a core network and the access network. The first media packet includes a first source IP address and port combination identifying the first endpoint. An UPDATE request or a reINVITE request is transmitted by the media device. A second IP address and port combination for the media device to receive future media packets from the first endpoint is negotiated. The media device compares a first IP address of the first source IP address and port combination to a second IP address of a second source address and port combination for a second media packet received on the second IP address and port combination. If the first and second IP addresses match, the media device relays media packets from the core network to the first endpoint.

Abstract: Techniques for resolving single source shortest path for database processing are provided. Graph data for nodes having weights for edges of a database network are iterated producing a new message table and results table in each iteration. The results table stores the minimum path weight. For each iteration the graph data and message table are joined to produce a state of a node and outgoing edge messages. The message table and results table are co-grouped to generate a new message for a next node to process. When done the single source shortest path for the network is produced.

Abstract: A traffic engineering process seeks to optimize network utilization and creating paths in the network such that the network is used efficiently. The exemplary embodiments seek to maintain fairness across allocation of flows while honoring constraints on the number of paths used per flow and the granularity of splits allowed. Exemplary embodiments provide a solution in a speedy manner and get close to optimal solutions for allocation of the network traffic.

Abstract: A port switching method performed by a processor included in an analysis device coupled to a first port and a second port which are included in at least one of a plurality of switches, the port switching method includes receiving a first copy packet from the first port; determining whether the first copy packet succeeded a second copy packet based on sequence information of the first copy packet, and based on sequence information of a second copy packet received before the receiving; specifying a target port outputted the first copy packet to the first port, the target port being included in a target switch among the plurality of switches when it is determined that the first copy packet did not succeed the second copy packet; and causing the target switch to transmit, from the target port, a third copy packet generated at the target switch to the second port.

Abstract: In one embodiment, a node in a shared-media communication network may determine a first directed acyclic graph (DAG) topology, wherein the first DAG topology has a particular direction. The node may determine a second DAG topology in the shared-media communication network based on the first DAG topology. The second DAG topology may share the particular direction of the first DAG topology, to prevent loops between the first and the second DAG topologies.

Abstract: Embodiments relate to path selection for packet transfer in a network. An aspect includes a method of selecting a path among a plurality of paths in a network for transfer of a packet from a first system to a second system in the network. The method includes storing, in a memory device, a static path performance vector indicating a tier among a plurality of tiers corresponding with each of the plurality of paths, each of the plurality of tiers corresponding with a relative performance level. The method also includes maintaining a path availability bit vector indicating an availability of each of the plurality of paths, and selecting, using a processor, the path among the plurality of paths based on the path performance vector and the path availability bit vector.

Abstract: A method of updating conversation allocation in link aggregation is disclosed. The method starts with verifying that an implementation of a conversation-sensitive link aggregation control protocol (LACP) is operational at a network device of a network for an aggregation port. Then it is determined that operations through enhanced link aggregation control protocol data units (LACPDUs) are possible. The enhanced LACPDUs can be used for updating conversation allocation information, and the determination is based at least partially on a compatibility check between a first set of operational parameters of the network device and a second set of operational parameters of a partner network device. Then a conversation allocation state of an aggregation port of the link aggregation group is updated based on a determination that the conversation allocation state is incorrect, where the conversation allocation state indicates a list of conversations transmitting through the aggregation port.

Abstract: A system and method for regional routing of internet protocol based real-time communication that includes registering a set of client application endpoint routes, comprising registering at least a first client gateway route of a first endpoint in a first region; receiving a communication invitation of the first endpoint; processing a set of communication instructions associated with the communication invitation and identifying a set of communication resources and at least a second endpoint; querying the client application endpoint routes and identifying a client gateway route of the second endpoint; and dynamically directing signaling path and media path of the communication according to the regional availability of the communication resources, the client gateway route of the first endpoint, and client gateway instance route of the second endpoint.

Abstract: The present disclosure describes reducing flooding of link state information of a link state protocol in a network with multiple routers. A filtering strategy is pre-configured on a router interface for filtering link state information generated by a first router. The filtering strategy is to enable link state database (LSDB) isolation between a second router associated with the router interface and the first router. Link state information generated by the first router is received or sent according to the pre-configured filtering strategy via the router interface.

Abstract: A network device may comprise storage media configured to store traffic, instructions for a lookup engine, a map manager, a traffic forwarder, and a map. The map may comprise rules associating IPv4 and IPv6 addresses. The traffic forwarder may be configured to forward outbound traffic to the second device. The lookup engine may comprise instructions to cause the processor to check the map to determine whether the map comprises a rule associating the second address of the second device and the first address of the first device. If so, the instructions may cause the processor to forward the inbound traffic from the second device to the first device. If the map does not comprise this rule, the instructions may cause the processor to send a query to a second network device asking whether the second network device comprises a rule associating the first and second address.

Abstract: A method, system and computer readable medium for advertising and interoperating Layer 2 VPN services from an access node to a core network. The method can include executing, using one or more processors, a routing protocol on an access node to establish adjacency with a core network node in an access mode. The method can also include mapping, using the one or more processors, an access network Layer 2 service identifier to a core network service identifier. The method can further include advertising, using the one or more processors, a mapping for the L2VPN service to the core network node. The method can also include sending, using the one or more processors, network traffic from the access node to the core network node without core network encapsulation.

Abstract: Some embodiments provide a method that generates different network measurements data (e.g., network topology, bandwidth estimation of different paths, etc.) for a pair of endpoints upon receiving a network administrative request (e.g., an application programming interface (API) request) or by other means (e.g., automatically and without intervention of a user). In some embodiments, the method is implemented by a network measurement agent operating on each endpoint and a centralized service component (e.g., web service layer) executing on a network manager machine (e.g., a controller) that responds to measurement requests. The network measurement agent probes the network periodically (i.e., in certain time intervals) or upon an API request that it receives through the network manager machine to gather the measurement data of a particular network topology between a pair of endpoints.

Abstract: A method is provided for content subscription in content network. A content requesting node in the content network receives a first interest packet comprising a content identifier through a first port from a first user device, creates a subscription entry comprising the content identifier and an identifier of the first port, sends the first interest packet to the content providing node, receives a second interest packet through a second port from a second user device; adds an identifier of the second port to the subscription entry, receives multiple data packets provided by the content providing node according to the first interest packet, and sends the multiple data packets through the first port and the second port respectively to the first user device and the second user device according to the subscription entry.

Abstract: A method applicable to a commonest application scenario, the method includes: an AR receives a first packet sent in a unicast manner by a CGN. The first packet includes information for indicating Restart announce, the first packet's source address is the CGN's address, and the first packet's destination address is the AR's address; AR changes the first packet's destination address to an address of a CPE connected to the AR, to obtain a second packet, where the AR and the CPE are connected by using a Layer 2 network, and the CPE's address is a multicast address; and the AR sends the second packet. The method is used for quickly informing, after the CGN restarts or undergoes an active/standby switchover, the CPE that an exception occurs, for example, the CGN restarts or undergoes an active/standby switchover, so that a CGN has relatively small load when recreating NAT mapping.

Abstract: In one embodiment, a packet is processed by three flow tables in a network device of a software-defined networking (SDN) system. In the first flow table, upon finding a match based at least partially on an IP address value of the packet, the network device adds a first identifier based on the IP address value to metadata of the packet and forwards the packet to a second flow table, where upon finding a match based at least partially on a port value of the packet, the network device adds a second identifier based on the port value to the metadata and forwards the packet to a third flow table. At the third flow table, upon finding a match based at least partially on a combination of the first and second identifiers, the network device performs one set of instructions of the matching entry on the packet.

Abstract: Some embodiments provide a method for a managed forwarding element. The method receives a set of packets for processing by the managed forwarding element. For each of several packets in the set, the method associates the packet with one of several groups of other packets in the set. Each group of packets shares a set of characteristics. For each group of packets the method identifies a set of actions to perform and executes the specified set of actions on all of the packets in the group together.

Abstract: In one aspect, one or more processors may be coupled to a content-addressable memory, a first memory and a second memory. The one or more processors may be configured to receive a data packet, read a predetermined number of bytes from the data packet, and match the read bytes to patterns corresponding to rows of the content-addressable memory. Further, the one or more processors may determine a number associated with the matched row, and based on the number, determine an initial routing instruction. The one or more processors may then determine which bits of the read bytes to hash using hash information stored in the first memory, hash the bits to generate a hash value, determine whether the value corresponds to routing information in the second memory, and route the data packet based on the routing information.

Abstract: A distributed load balancer in which a router receives packets from at least one client and routes packet flows to multiple ingress servers. For unknown packet flows, an ingress server cooperates with primary and secondary flow trackers to establish connections to server nodes. For known packet flows, the ingress server sends the packets to target server nodes. The server nodes randomly select egress servers for outgoing packets of the packet flows. The ingress servers, flow trackers, and egress servers are implemented by multiple load balancer nodes in a load balancer node layer. The ingress and egress servers for a given packet flow may be on different load balancer nodes. The load balancer nodes may use a consistent hash function to compute a consistent hash ring for the nodes according to packet flow client/public endpoint pairs so that nodes associated with given packet flows can be located.

Abstract: According to one aspect of the present disclosure, a method and technique for dynamic reconfiguration of network devices for outage prediction is disclosed. The method includes: aggregating a plurality of network devices to form an input/output (I/O) link bundle; identifying a quality of service level of data throughput needed by at least one workload utilizing the I/O link bundle; monitoring a parameter of each of the network devices of the I/O link bundle; determining whether the monitored parameter indicates a predicted data throughout quality of service level decrease by a network device being utilized by the workload below the quality of service level for the workload; and responsive to determining that the monitored parameter indicates a predicted quality of service level decrease by the respective network device, dynamically reconfiguring the link bundle to maintain the quality of service level for the workload utilizing the I/O link bundle.

Abstract: An improved method and apparatus for making forwarding decisions in a switching device. The invention reduces the flooding of frames to particular network segments connected to the switch. To insure a device sees a frame addressed to it, if a switch does not know what segment a device address is connected to for a unicast frame, the switch typically floods the frame to all segments in the broadcast domain. This invention allows segments to be identified as having a predefined maximum number of device addresses that will be associated with it. When that number of addresses is already in the forwarding table the switch will not flood unicast frames to that segment since no more devices should be connected to that segment.

Abstract: One embodiment provides a system that facilitates an intermediate node to handle a potential timeout event. During operation, the system receives, by an intermediate node, a keep-alive control packet which indicates a name for an Interest message, an indicator to keep alive a Pending Interest Table (PIT) entry, and a time period for which to keep the PIT entry alive. The intermediate node determines whether the keep-alive control packet corresponds to the PIT entry based on the name, and, responsive to determining that the keep-alive control packet corresponds to the PIT entry, updates a timeout value of the PIT entry based on the time period indicated in the keep-alive control packet. Responsive to determining one or more interfaces specified in the PIT entry from which the Interest message is received, the intermediate node forwards the keep-alive control packet to the one or more interfaces.

Abstract: In one embodiment, a device in a network identifies a set of one or more destination addresses for which traffic shaping is to be performed by controlling the data rate at which traffic is sent to the one or more destination addresses. The device sends the traffic to one of the destination addresses along a communication path in the network and at a particular data rate. The device identifies a change in a performance characteristic for the communication path. The device adjusts the data rate at which the traffic is sent along the communication path, in response to identifying the change in the performance characteristic for the communication path.

Abstract: A method for controlling data flow by a proxy server connected between a User Equipment (UE) and a content server is disclosed. The proxy server estimates a first amount of data reception indicating an amount of data received by the UE and calculates a second amount of data reception indicating an amount of data received by the proxy server from the content server. The proxy server delays transmission of acknowledgement (ACK) on data received by the proxy server from the content server and waits until a time allowed for the transmission, if the second amount of data reception is greater than the first amount of data reception by a predetermined threshold. The resent disclosure may prevent a waste of network load and unnecessary resources by the proxy server controlling download data rate from the content server.

Abstract: A server apparatus recognizes start of a voice call including the first terminal based on an operation signal received from the first terminal. The server apparatus allows a packet storing voice data to go through to the first terminal when the packet is received from a second terminal connected via the network in a case where start of the voice call is recognized. The server apparatus estimates a bandwidth of the network based on a first response packet sent from the first terminal in response to a packet sent to the first terminal, calculates a bit rate of the voice call according to the estimated bandwidth, and notifies the first terminal of the calculated bit rate. The first terminal switches a bit rate of the voice call according to the notified bit rate.

Abstract: A system with distributed proxy for reducing traffic in a wireless network to satisfy data requests made by a mobile application is provided. The system includes a mobile device having a local proxy for intercepting a data request made by the mobile application. The local proxy simulates application server responses for the mobile application on the mobile device for data requests where responses are available in the local cache. A proxy server is coupled to the mobile device and an application server to which the data request is made. The proxy server is able to communicate with the local proxy. The local proxy forwards the data request to the proxy server for transmission to the application server for a response to the data request. The proxy server queries the application server independent of activities of the mobile application for any changes to the data request.

Abstract: Embodiments disclosed herein provide systems and methods for dividing packet content for transmission over diverse wireless links. In a particular embodiment, a method provides generating a packet for transmission to a destination and examining the packet to determine if content within the packet qualifies for transmission over diverse wireless links comprising a first wireless link and a second wireless link. The method further provides, if the content qualifies for transmission over the diverse wireless links, generating a first alternate packet that contains a first portion of the content and a second alternate packet that contains a second portion of the content. The method further provides transferring the first alternate packet over the first wireless link for delivery to the destination and transferring the second alternate packet over the second wireless link for delivery to the destination.