Abstract: Techniques are described for providing a method and apparatus for determining source address validation of a data packet in a network in the presence of asymmetric routing. When a data packet is received by a node such as a router, a reverse path forwarding lookup is performed to determine if the data packet was received on a next-hop interface and if the reverse path forwarding fails, a Shortest Path First (SPF) computation at the router advertising the source route will be performed using the link state database to determine whether the data packet arrived from a valid path of the network.

Abstract: Techniques are presented for evaluating Equal Cost Multi-Path (ECMP) performance in a network that includes a plurality of nodes. According to an example embodiment, a method is provided that includes obtaining information indicating equal cost multi-path (ECMP) paths in the network and a branch node in the network. For the branch node in the network, the method includes instantiating a virtual network function that simulates an ECMP hashing algorithm employed by the branch node to select one of multiple egress interface of the branch node; providing to the virtual network function for the branch node, a query containing entropy information as input to the ECMP hashing algorithm that returns interface selection results; and obtaining from the virtual network function a reply that includes the interface selection results. The method further includes evaluating ECMP performance in the network based on the interface selection results obtained for the branch node.

Abstract: Disclosed in the embodiments of the present disclosure are a packet forwarding method, apparatus and system, a network device and a storage medium. The method includes: carrying, according to Deterministic Networking (DetNet) requirements for a multicast packet based on Bit Index Explicit Replication (BIER), corresponding DetNet configuration information in BIER header information of the multicast packet; and sending the multicast packet carrying the BIER header information.

Abstract: A packet sending method and device. The first node sets a next-hop of the routing information to a next-hop through which the first node reaches the first route source. The destination address of the routing information is the address prefix. When the second route source is superior to the first route source, the first node switches the next-hop of the routing information to a next-hop through which the first node reaches the second route source. Then, the first node adds, to a target packet, path information of a forwarding path from the first node to the second route source according to the switching operation, where a destination address of the target packet matches the address prefix. Finally, the first node forwards the target packet to the second route source through the forwarding path.

Abstract: Methods, and systems, for Multiagent Pathfinding for Non Dynamic Programming Problems, including a CE method which provides for sampling from a complex probability distribution that is not necessarily known in a closed form. The applications of this method include rare-event simulation, variance reduction for estimation problems, and stochastic optimization. The method iteratively searches for a probability distribution that is “close” to the intended distribution, where the closeness of distributions is measured using the Kullback-Liebler (KL) divergence between the distributions. At each step, the method generates samples according to a current candidate distribution from the family. Next, it uses those current candidate distribution samples to move the distribution toward a new candidate distribution that is closer in the sense of KL divergence to the target distribution.

Abstract: The present technology is directed to a system and method for application aware management and recovery of link failures resulting from excessive errors observed on the link. One aspect of the proposed technology is based on identification of link errors associated with application-specific data patterns traversing link. Other aspects involve corrective actions based on relocation or modification of specific application traffic to thereby alleviate the observed excessive link errors and prevent a link failure or shut down. Relocation may involve moving the source application to a different virtual machine/container/physical device or rerouting application traffic by updating relevant routing protocols. Modification may involve harmlessly changing payload data pattern to remove data-pattern dependent signal attenuation.

Abstract: A network interface controller (NIC) capable of performing message passing interface (MPI) list matching is provided. The NIC can include a host interface, a network interface, and a hardware list-processing engine (LPE). The host interface can couple the NIC to a host device. The network interface can couple the NIC to a network. During operation, the LPE can receive a match request and perform MPI list matching based on the received match request.

Abstract: A method for packet transmission in a network includes receiving, by a first node, a second segment identifier sent by the third node, receiving, by the first node, a packet sent by the second node through the first path, determining, by the first node, that a next-hop node of the first node on the first path is faulty, and in response to the determining, by the first node, that a next-hop node of the first node on the first path is faulty, adding, by the first node, the second segment identifier to the packet, and sending the packet to the third node through a second path, where the second path is established by the first node based on the second segment identifier.

Abstract: A method and apparatus for delivering a service to an end point, such as a UE or server, via a communication network, is provided. A virtual network is pre-configured to handle service packets and includes virtual routers for routing packets via logical tunnels. The end point pre-registers with the virtual network and/or service and receives operating parameters for use in service access. The end point location may be tracked following pre-registration. The end point subsequently transmits and/or receives service packets using the operating parameters via an edge node, such as an access node or gateway. The edge node transmits service packets using the operating parameters and, upon detecting operating parameter usage by the end point, forwards received service packets to the virtual network. Operating parameters may include an identifier included in the packet. The end point may use multiple different edge nodes to access the service.

Abstract: A packet sending method in distributed router networking, a device, and a system are disclosed, and relate to the field of network communication technologies. The distributed router networking includes at least two routers, the at least two routers are located in a same local area network, and each router has a capability of communicating with an external network. After receiving a packet, any router in the local area network may distribute the packet to the plurality of routers in the local area network according to a packet load balancing rule, and the plurality of routers distribute the packet to the external network.

Abstract: In some implementations, an ingress network device of a multiprotocol label switching (MPLS) network may receive a packet destined for a destination network device. The ingress network device may determine, based on the packet, a secure function to secure the packet and a label associated with a label-switched path (LSP) from the ingress network device to an egress network device of the MPLS network that is associated with the destination network device. The ingress network device may encrypt, using the secure function, the packet to generate an encrypted packet. The ingress network device may generate an MPLS packet comprising: an MPLS header that includes the label and a secure function indicator, a secure MPLS data header that includes information identifying the secure function, and an MPLS payload that includes the encrypted packet. The ingress network device may forward, based on the label, the MPLS packet.

Abstract: The present disclosure provides a network packet transmission device and a network packet transmission method thereof. The network packet transmission method includes: receiving a network packet, wherein the network packet has at least one packet attribute; determining at least one destination VID for the network packet according to the at least one packet attribute; determining a transmission speed corresponding to the at least one destination VID based on at least one LAN speed table; and transmitting the network packet to a VLAN corresponding to the at least one destination VID according to the transmission speed.

Abstract: A packet header information obtaining method. The method includes: obtaining, by a communications device, a first packet, where the first packet includes a plurality of extension packet headers; and obtaining an extension header self-describing option from the first packet, where the extension header self-describing option is used to indicate information about the plurality of extension packet headers. Therefore, the communications device obtains, based on the extension header self-describing option in the first packet, a first extension packet header included in the plurality of extension packet headers. Packet header information of the extension packet header in the first packet can be obtained by using the extension header self-describing option, and the first extension packet header that needs to be parsed can be directly located from the first packet by using the obtained packet header information.

Abstract: Systems and methods implemented in a network element in a Segment Routing network include, for a service having two or more candidate paths and responsive to a failure on a current candidate path of the two or more candidate paths, setting an eligibility flag for the current candidate path; and selecting another candidate path of the two or more candidate paths, for the service, based on their eligibility flag.

Abstract: Systems and methods are disclosed herein for filtering Ethernet device source addresses for loop avoidance in a cellular communications system. Embodiments of a method performed by a User Plane Function (UPF) in a core network of a cellular communications system and corresponding embodiments of a UPF are disclosed. In some embodiments, a method performed by a UPF in a core network of a cellular communications system comprises obtaining a Medium Access Control (MAC) address that is reachable over a particular Protocol Data Unit (PDU) session. The method further comprises installing, at the UPF, a filtering rule that prevents Ethernet frames having the MAC address as a source address from being delivered by the UPF via downlink on the particular PDU session. In this manner, loopback of Ethernet frames on the PDU session is avoided.

Abstract: In one embodiment, a method includes receiving energy efficiency data from a plurality of nodes within a network. The method also includes determining an energy efficiency node quotient for each of the plurality of nodes within the network to generate a plurality of energy efficiency node quotients and determining an energy efficiency path quotient for each of a plurality of paths within the network to generate a plurality of energy efficiency path quotients. The method further includes determining one or more policies associated with the plurality of paths and selecting a path from the plurality of paths based at least on the plurality of energy efficient path quotients and the one or more policies.

Abstract: A communication method includes: determining, based on first indication information and second indication information, a transmit end and a receive end that communicate with each other by using a data flow, to indicate that a first device is the transmit end and the second indication information is used to indicate that a second device is the receive end, or to indicate that the first device is the receive end and the second indication information is used to indicate that the second device is the transmit end; obtaining, bandwidth information of the data flow; and sending, data flow information and the bandwidth information to indicate at least one of a port identifier of the transmit end and a port identifier of the receive end, and the port identifier of the transmit end, the port identifier of the receive end, and the bandwidth information are used to create the data flow.

Abstract: In the present disclosure, a transmitting device receives zero header information from a receiving device, generates a MAC PDU based on the zero header information, and transmits the MAC PDU. The zero header information may include information regarding a logical channel or MAC control element (CE). The MAC PDU may include a MAC subPDU containing data of the logical channel or the MAC CE without corresponding MAC subheader.

Abstract: This application provides a route event record entry processing method, a network device, and a control device. The method includes: obtaining, by a network device, first information and second information that correspond to a route prefix, where the first information is used to indicate information about a first route policy for the route prefix, and the second information is used to indicate attribute information obtained after processing the route prefix by using the first route policy; and generating, by the network device, a route event record entry for the route prefix based on the first information and the second information, where the route event record entry includes the route prefix, the first information, and the second information.

Abstract: Various data bus monitoring, analysis, and logging systems, devices, and methods are described herein. In one example, an apparatus includes a first circuit configured to monitor first packets among traffic carried by one or more first directional lanes of a communication link established between a host and one or more endpoint devices and determine header information for the first packets. The apparatus includes a second circuit configured to detect second packets among traffic carried by one or more second directional lanes of the communication link based at least in part on the header information determined for the first packets. The apparatus includes an analysis element configured to establish transaction metadata comprising properties of transactions on the communication link based at least on correlations among the first packets and the second packets.

Abstract: The present disclosure discloses a UDF-based traffic offloading method and a system, the method includes: step 1, performing P4 language programming: performing P4 language programming description on a protocol packet format of the target traffic in a network and a corresponding flow table description on a protocol packet format of the target packet and parsing, matching and offloading rules of the target packet; step 2: compiling and mapping the P4 program by UDF-oriented compilation and mapping method, to an ASIC chip; step 3: in the ASIC chip, matching a traffic offloading rule according to the UDF rule, and executing a traffic offloading action according to the traffic offloading rule, where the traffic offloading action includes offloading the target packet to a corresponding processing node or discarding the target packet.

Abstract: When the load becomes high, an identification unit (301) of a second packet forwarding device (30) identifies an application of a new flow. Then, a determination unit (302) determines whether or not distribution of new flow is necessary, based on the flow characteristic of the application and the type of the high load. Then, when distribution of the new flow is necessary, a decision unit (303) acquires a list of second packet forwarding devices (30) having a low load from the load monitoring device (10), and decides a second packet forwarding device (30) as the distribution destination. Then, a control unit (304) performs a route control for guiding the flow to the second packet forwarding device (30) which is the distribution destination.

Abstract: A network device includes first, second, and third processors. The first processor detects congestion in a packet flow. The packet flow is i) one packet flow among a plurality of packet flows and ii) is formed of a plurality of packets of a same type received from a first device in a network via a first network connection. The packets in the packet flow are destined for a second device in the network. When congestion notification packet generation is enabled for the packet flow, the second processor generates a congestion notification packet by replicating a packet from the packet flow and sends the congestion notification packet to the first device via the first network connection. The congestion notification packet identifies the packet flow for which congestion is detected. The third processor forwards the plurality of packets in the packet flow to the second device via a second network connection.

Abstract: A bandwidth information notification method includes: obtaining bandwidth information of a microwave link; and sending a plurality of OAM messages carrying the bandwidth information to an endpoint, wherein first one or more OAM messages of the plurality of OAM messages are sent more quickly than at least one of the rest of the plurality of OAM messages.

Abstract: Method and system for providing time-critical services via a flow control environment, wherein at least one respective server component is provided for each service, wherein the server component is formed by a flow control component that is loadable into the flow control environment and executed there, where a configuration unit for at least one gateway component of a subnetwork forming the flow control environment ascertains globally valid access information associated with respective addressing information of the server components that is valid within the subnetwork, based on a mode of operation predefined via the configuration unit, one or more gateway components connected in parallel and/or in series are used, and where the at least one gateway component forwards service access requests to the server components in accordance with the forwarding and/or filter rules and the mode of operation.

Abstract: Disclosed are systems and methods for managing computing resources for a remote session that has been established between a client and a remote server via a communication channel. Such a remote session is configured to automatically adapt image quality of the remote session based on a network status of the communication channel. The described technique includes detecting an inactive state of the remote session, and in turn, modifying at least one network setting of the client using a network shaping rule specified to artificially reduce a network quality of the communication channel used by the client for traffic of the remote session, so as to cause the client to reduce image quality of the remote session and reduce an amount of data exchanged between the remote server and the client.

Abstract: A method and system for classifying a device accessing a computer network. The method including: providing a framework of models configured to classify the device; reviewing a network traffic flow associated with a device; extracting flow attributes associated with a network traffic flow; deriving further flow attributes based on the extracted flow attributes; determining at least one model of the framework of models based on the derived flow attributes and extracted encrypted flow attributes; and classifying the device associated with the network traffic flow based on the at least one model. The system includes: a learning engine configured to provide a framework of models; a packet processing engine configured to review a network traffic flow associated with a device; a device classification engine configured to extract flow attributes, derive further flow attributes and determine at least one model; and a device information aggregator configured to classify the device.

Abstract: An example method includes receiving, from a network device, data indicating characterizations of network traffic on a plurality of ports of the network device; determining, by processing circuitry, for each port of the plurality of ports, an indicator of a port type for the port based on the data indicating the characterizations of network traffic on the plurality of ports, wherein the port type indicates a link type of network traffic exchanged by the port; and outputting, by the processing circuitry, the indicator of the port type to an output device.

Abstract: This application provides a traffic classification method and apparatus. The method includes: determining, based on distribution characteristics of concerned bits of a plurality of rules in a first rule set, an effective bit corresponding to the first rule set; determining a hash key value of each rule based on a value of the effective bit of each rule in the first rule set, and storing each rule in the first rule set in at least one of S storage units based on the hash key value, where the first rule set is any one of N rule sets, the N rule sets are stored in the S storage units; and when traffic classification is performed, searching for a corresponding rule in each of the S storage units based on a hash key value of a search key.

Abstract: A target communication line defined as a congestion determination target and a client that transmits an ACK signal to a communication partner in a case where a signal is received from the communication partner are relayed to each other. It is determined whether a congestion occurs on a target communication line. A communication of the ACK signal is limited by a capture process that captures the signal communicated by the client in a case where determining that the congestion occurs on the target communication line.

Abstract: A method of managing a fill state of a buffer in an external device includes monitoring the latency of a network connection to an external device having a network buffer via a managing device. A state of fill of the network buffer is determined based on at least the monitored latency of the network connection, and the effective network speed is estimated based on the state of fill of the network buffer. One or more network traffic scheduling parameters are adjusted in response to the estimated effective network speed, such as a maximum currently usable network speed that is lower than a maximum possible speed of the network. The maximum currently usable network speed of the network connection is periodically increased if the monitored latency is in a normal state and the maximum currently usable network speed is lower than the maximum possible speed of the network.

Abstract: A method performed in a network node for handling an Internet Protocol, IP, packet. The IP packet originates from a source node and addresses to a destination node in an IP communication network. Upon receipt of the IP packet, the network node decapsulates the IP packet to obtain, from a network layer header of the IP packet, an indication of a point in time to drop the IP packet. The point in time to drop the IP packet is based on a first maximum delay of the IP packet between the source node and the destination node. The first maximum delay was obtained from an application software running on the source node. The network node determines whether or not to drop the IP packet based on the indication, using a clock of the network node synchronized with a clock of the source node.

Abstract: A client device in a wireless network accesses a queue comprising Transmission Control Protocol Acknowledgement (TCP ACK) packets. At least some packets include packet descriptors with a flow identifier indicating a corresponding TCP flow, and a TCP ACK Generation Count. The device inspects a packet descriptor of a first TCP ACK packet, and identifies a first flow identifier and a first TCP ACK Generation Count. The device accesses entries in a data structure that each includes a first field and a second field respectively storing a flow identifier and a TCP ACK Generation Count. The device determines that a condition is satisfied, comprising that an entry in the data structure includes a flow identifier and a TCP ACK Generation Count matching the first flow identifier and the first TCP ACK Generation Count, respectively. In response to the determination, the device marks the first TCP ACK packet to be dropped.

Abstract: Example methods and systems to perform flow cache information update(s) for packet processing are described. In one example, a network element may configure flow cache information specifying a set of actions based on a sequence of stages that is executable during slow-path packet processing. The network element may configure dependency information specifying execution dependence or independence among the set of actions during fast-path packet processing. In response to detecting a configuration change associated with stage(s) from the sequence of stages, the network element may identify first action(s) affected by the configuration change and second action(s) not affected by the configuration change. This way, a granular update may be performed to the flow cache information by updating the at least one first action, but not the at least one second action.

Abstract: A communication system according an embodiment includes one or more hardware processors. The one or more hardware processors calculate indicators used to detect presence of abnormality caused by a situation in which a size of a message is larger than a maximum allowable size of a queue, the indicators being calculated based on gate control information including a plurality of entries each of which indicates gate states corresponding to a plurality of queues.

Abstract: A system of terminating data server nodes based on insufficient processing of messages. In embodiments, a plurality of time-stamped, searchable events from machine data are created. A plurality of data server nodes that service messages across one or more portions of the plurality of time-stamped, searchable events, are executed in parallel. For each message received, the message is sent to a data server node, of the plurality of data server nodes, to cause the receiving data server node to perform a data operation associated with the received message. A determination can then be made that a particular data server node insufficiently processes messages sent to the particular data server node. Thereafter, termination of the particular data server node is initiated to terminate processes or threads executed by the particular data server node.

Abstract: A transactional method and system of managing access to API services based on the performance of computational tasks by an end-user is disclosed. The system and method are configured to identify requests from an end-user to an API for services that are associated with a transactional cost. This cost is passed on to the end-user by generation of a computational task assignment to be completed by the client computing system. Once the assignment has been performed, the end-user may be granted access to the requested service.

Abstract: A token-based billing model for delivering server-side rendered applications to remote users. A token represents a right to access a server-side rendered application. Each remote user is associated with one or more tokens. When a given token expires, the set of tokens associated with a user is decremented. The rate at which tokens expire are modulated based on aggregate load across the resources of the server-side rendered application provider, as well as the individual loads attributable to each of the users.

Abstract: A pluggable cloud security system includes a plurality of nodes. Each node has a memory and a processor. At least one memory is configured to store rules indicating criteria for allowing communication between user applications and a hosted application executed by a cloud infrastructure. At least one processor is configured to receive data to be communicated to the cloud application, determine a source of the received data as a first user application, determine a channel used to transmit the received data, and determine, using the rules, whether the source and the channel satisfy criteria for allowing communication between the first user application and the hosted application. If it is determined that the source satisfies the first criteria, transmission of the data is allowed. Otherwise, transmission of the data is prevented.

Abstract: An electrical computer system processing architecture for providing an indication of activity in the electrical computer system, the electrical computer system processing architecture comprising a plurality of client computers connected to at least one server by a computer network. Each of the client computers is configured to provide requests to the at least one server. The or each server comprises a store for storing requests provided by the plurality of client computers. The or each server is configured to match complementary requests from the plurality of client computers stored in the store. Following the matching of complementary requests, the or each server counts unmatched requests corresponding to one or other of the complementary requests in the store, and outputs the counted number of unmatched requests to provide the indication of activity in the computer system.

Abstract: A port selection method applied to a first network device and a second network device includes determining that a port status of a first port that is in the first network device and that is used for dual-homing access can switch from a first state to an UP state; receiving a port status of a second port that is in the second network device and that is used for dual-homing access; and selecting, based on the port status of the first port and the port status of the second port, a port to be switched to the UP state from the first port and the second port.

Abstract: An embodiment is directed to switchover operations with a mobile virtualized network device in a mobile device. The mobile virtualized hardware switchover operations may be used to selectively and temporarily provide virtualized control-plane operations to the data-plane of a non-redundant network device undergoing an upgrade or a reboot of its control plane. A non-redundant network device may operate hitless, or near hitless, operation even when its control plane is unavailable.

Abstract: A data sequence correction method for temporarily saving data with sequence information in a ring buffer and performing sequence correction is provided. The ring buffer includes a number of storage regions, a monitoring section having one or more continuous sequence numbers, and an acceptance section having a first or second sequence number of the monitoring section as a start sequence number and a sequence number immediately preceding the start sequence number of the monitoring section as an end sequence number. The method includes, when a value determined based on a remainder obtained by dividing a sequence number of received data by the number of storage regions is inside the acceptance section, writing the received data in a position of the storage region corresponding to the determined value, and when data are written in the entire monitoring section, reading out all the data in the monitoring section.

Abstract: Embodiments of a method and an apparatus for wireless communications are disclosed. In an embodiment, a method for wireless communications involves encoding bits in a Physical Layer Protocol Data Unit (PPDU) using a basic bandwidth that is smaller than a signal bandwidth, wherein the bits are duplicated within the PPDU, and transmitting the PPDU with duplicated bits in accordance with a power spectrum density (PSD) limit.

Abstract: Provided is a terminal including a receiver, which, in operation, receives a Channel State Information Reference Signal (CSI-RS) candidate list for CSI-RS configuration information. The CSI-RS candidate list is indicated as Radio Resource Control (RRC) control information for respective terminals. The terminal further includes circuitry, which, in operation, specifies at least one CSI-RS resource information of a measurement target based on the CSI-RS candidate list, and measures a reception power using the specified CSI-RS resource information. The terminal also includes a transmitter, which, in operation, reports the result of the reception power measurement. A reception power measurement method is also provided.

Abstract: Certain aspects of the present disclosure relate to a technique for multiplexing downlink control information (DCI) signals for multiple user equipments (UEs) at an aggregation level (AL) by coding the DCI signals together in a control channel and transmitting the control channel. In an exemplary method, a BS multiplexes a first plurality of downlink control information (DCI) signals for a first plurality of user equipments (UEs) at a first aggregation level (AL) coded together in a first control channel and transmits the control channel.

Abstract: A transmission apparatus includes a transmitter and a receiver. The transmitter transmits a Trigger Frame for allocating resources for Uplink Multi User (UL MU) transmission, the Trigger Frame comprising a common information field that includes a type subfield indicating one of a plurality of trigger types, wherein the plurality of trigger types includes a first trigger type, a second trigger type and a third trigger type, the first trigger type indicating a basic trigger, the second trigger type indicating multi-user block ack request, and the third trigger type indicating a specific trigger used for soliciting a specific type of UL MU response frame from a plurality of terminal stations. The receiver, responsive to the type subfield indicating the third trigger type, receives the specific type of UL MU response frame from the plurality of terminal station.

Abstract: Disclosed are various techniques for wireless communication. In an aspect, a user equipment (UE) receives, from a network entity, a positioning reference signal (PRS) configuration. The UE receives, from a serving base station, a measurement gap (MG) configuration. The UE determines that one or more transmission properties of one or more resources should be modified and transmits PRS modification information to the network entity based on the one or more transmission properties of one or more PRS resources to be modified. The network entity may be a location server or location management function.

Abstract: A user equipment (UE) for receiving information on a length of a reference signal (RS) sequence and information on an offset of the RS sequence and performing an RS sequence mapping to map the RS sequence to a physical resource block 0 (PRB0) of the UE within a bandwidth part (BWP) based on the length of the RS sequence and the offset of the RS sequence. The UE also transmits, to the network, the RS sequence.

Abstract: The present invention discloses a method for transmitting and receiving signals between a user equipment and a base station in a wireless communication system and device for supporting the same. More specifically, the invention discloses a signal transmission method applicable when a user equipment simultaneously transmits uplink control information and a reference signal to a base station.