Abstract: Methods and systems for performing operations comprising: receiving, by a server from a client device, a request to access a data object comprising one or more medical records, the request comprising authentication information; determining, by the server, that the authentication information is valid; in response to determining that the authentication information is valid, transferring, by the server, the data object to a temporary storage location; transmitting a first portion of the data object to the client device from the temporary storage location; and deleting the first portion of the data object from the temporary storage location after the first portion of the data object has been transmitted to the client device.

Abstract: An Internet of Things (IoT) server can transmit a series of data blocks of a software update to an IoT device by sending a series of data block messages to the IoT device over a telecommunication network. The IoT device can return data block receipt messages to confirm receipt of the data block messages. The IoT device can also attempt to validate received data block messages, and can return data block validation messages for the data block messages that have been validated. When the IoT server receives data block validation messages for all of the data blocks of the software update, the IoT server can determine that the IoT device has received a usable version of the software update.

Abstract: A method of determining a passive Round Trip Time, RTT, delay in a telecommunications system for exchanging data packets in accordance with a data transmission protocol between a first device and a second device. The first and second devices are identified by first and second device identifications, respectively. The data packets include an address part including a source address and a destination address. The method is performed in a node by modifying the address part of a received data packet from the first device, and creating a first timestamp before transmitting the modified data packet to the second device. Upon receiving, at the node, from the second device in response to the modified data packet, a data packet having the modified address part of the modified data packet, the node creates a second timestamp that provides for passively measuring the RTT delay.

Abstract: An electronic apparatus and a USB interface switching method. The electronic apparatus includes: a first control component corresponding to a first operating system, a second control component corresponding to a second operating system, a USB interface, and a USB interface switching circuit. The first control component is used to detect the data transmission state between the USB interface and the first control component. The second control component is used to detect the data transmission state between the USB interface and the second control component.

Abstract: A method of operating a network device is provided. In response to an unplanned reboot, the network device can determine whether an unplanned reboot expedited recovery feature has been enabled on the network device. After determining that the unplanned reboot expedited recovery feature is enabled, the network device can identify a cause of the unplanned reboot. If the cause of the unplanned reboot is from a first set of events, a first bootup sequence can be performed. If the cause of the unplanned reboot is from a second set of events, a second bootup sequence that is expedited relative to the first bootup sequence can be performed.

Abstract: In one embodiment, a service chain data packet is instrumented as it is communicated among network nodes in a network providing service-level and/or networking operations visibility. The service chain data packet includes a particular header identifying a service group defining one or more service functions, and is a data packet and not a probe packet. A network node adds networking and/or service-layer operations data to the particular service chain data packet, such as, but not limited to, in the particular header. Such networking operations data includes a performance metric or attribute related to the transport of the particular service chain packet in the network. Such service-layer operations data includes a performance metric or attribute related to the service-level processing of the particular service chain data packet in the network.

Abstract: In one aspect, the present disclosure relates to a method for method for efficient allocation of bandwidth in a wireless network. The method can include: identifying a plurality of network interfaces on a first user device; initializing a virtual network resource associated with the plurality of network interfaces; receiving, at the virtual network resource, data packets from an app executing on the first user device, the data packets destined for a remote device; sending a first portion of the data packets to the remote device via a first one of the plurality of network interfaces; and sending a second portion of the data packets to the remote device via a second one of the plurality of network interfaces. An aggregation platform can be configured to receive and reconstitute the first and second portions of the data packets, and to transmit the reconstituted data packets to the remote device.

Abstract: A method in a user device that supports a plurality of message authentication code (MAC) lengths for integrity protection of wireless communications includes receiving, from a base station, a first message including an information element (1002), determining, based on the information element, that a first MAC length of the plurality of MAC lengths is to be used for integrity protection (1004) and, thereafter, generating a second message including a MAC having the first MAC length (1006). The method also includes transmitting the second message to the base station (1008).

Abstract: A synchronization trigger associated with synchronizing credit is obtained at a message receiver in a System On Chip (SOC). In response to receiving the synchronization trigger, a value for a local credit in the message sender is sent from the message receiver to a message sender in the SOC. At the message sender, the local credit is updated with the value for the credit that is received from the message receiver, wherein a requirement to send a message from the message sender to the message receiver is that the local credit has a non-zero value.

Abstract: An approach for establishing a priority ranking for endpoints in a network. This can be useful when triaging endpoints after an endpoint becomes compromised. Ensuring that the most critical and vulnerable endpoints are triaged first can help maintain network stability and mitigate damage to endpoints in the network after an endpoint is compromised. The present technology involves determining a criticality ranking and a secondary value for a first endpoint in a datacenter. The criticality ranking and secondary value can be combined to form priority ranking for the first endpoint which can then be compared to a priority ranking for a second endpoint to determine if the first endpoint or the second endpoint should be triaged first.

Abstract: In some examples, a method includes receiving, by an egress network device for a network, messages from each of a plurality of ingress network devices for the network, wherein each of the messages specifies a multicast source, a multicast group, and an upstream multicast hop weight value for multicast traffic for the multicast source and the multicast group; selecting, by the egress network device and based on the upstream multicast hop weight values specified by the received messages, one of the plurality of ingress network devices to which to send a multicast join message of a plurality of multicast join messages for the multicast source and multicast group; and sending, by the egress network device, the multicast join message to the selected one of the plurality of ingress network devices.

Abstract: Examples disclosed herein relate to a method for defining an ingress access policy at an ingress network device based on instructions from an egress network device. The egress network device receives data packets directed to a first entity from a second entity connected to an ingress network device. Each data packet transmitted includes a source role tag corresponding to the second entity. At the egress network device, the data packets may be dropped based on the enforcement of an egress access policy. When the number of data packets that are being dropped increases beyond a pre-defined threshold, the egress network device transmits a command to the ingress network device instructing the ingress network device to create a restriction on the transmission of subsequent data packets. The command is transmitted in a Border Gateway Protocol (BGP) Flow Specification (FlowSpec) route.

Abstract: A network device includes first, second, and third processors. The first processor detects congestion in a packet flow. The packet flow is i) one packet flow among a plurality of packet flows and ii) is formed of a plurality of packets of a same type received from a first device in a network via a first network connection. The packets in the packet flow are destined for a second device in the network. When congestion notification packet generation is enabled for the packet flow, the second processor generates a congestion notification packet by replicating a packet from the packet flow and sends the congestion notification packet to the first device via the first network connection. The congestion notification packet identifies the packet flow for which congestion is detected. The third processor forwards the plurality of packets in the packet flow to the second device via a second network connection.

Abstract: A network gateway is provided for routing data flows across a plurality of network connections, the network gateway including a plurality of network interfaces for transmitting data over the plurality of network connections, the plurality of network interfaces including a first network interface; at least one processor configured for: transmitting a sequential burst of packets across the first network interface; based on timestamps recorded when packets in the sequential burst of packets are received at a receiving node, and the size of the packets, generating a bandwidth of the first network interface; and routing a data flow of sequential packets across the plurality of network connections based on the generated bandwidth of the first network interface.

Abstract: Devices, system, and method of vehicular multiple-link wireless communication. A vehicular communication bonding unit creates a bonded wireless communication connection that transports data-packets of a source data-stream from a remote server to a vehicular transceiver, by transporting the data-packets over at least two wireless communication links. The vehicular communication bonding unit utilizes a vehicular cellular transceiver to receive a first batch of the data-packets over a first cellular communication link that connects between the vehicular cellular transceiver and the remote server. The vehicular communication bonding unit further utilizes least one end-user device, of an occupant of a vehicle, to receive a second batch of the data-packets of the particular data-stream, over a second cellular communication link that connects between the end-user device and the remote server.

Abstract: Embodiments may be generally directed to techniques to cause communication of a registration request between a first end-point and a second end-point of an end-to-end path, the registration request to establish resource load monitoring for one or more resources of the end-to-end path, receive one or more acknowledgements indicating resource loads for each of the one or more resources of the end-to-end path, at least one of the acknowledgements to indicate a resource of the one or more resources is not meeting a threshold requirement for the end-to-end path, and perform an action for communication traffic utilizing the one or more resources based on the acknowledgement.

Abstract: A unidirectional transfer protocol allows data to be transmitted from a non-secure network into a secure network. A non-secure gateway may receive data and/or information, intended for the secure network, from one or more devices. The gateway may fragment the data and/or information into smaller chunks and transmit the chunks to a secure gateway via a unidirectional communication channel. The secure gateway may verify the chunks using one or more rules and reassemble the chunks when the data is validated. The reassembled data may be sent across a secure network enclave. The unidirectional transfer protocol may provide a hardware-agnostic solution for transmitting data over a unidirectional communication channel.

Abstract: A network interface controller (NIC) capable of facilitating fine-grain flow control (FGFC) is provided. The NIC can be equipped with a network interface, an FGFC logic block, and a traffic management logic block. During operation, the network interface can determine that a control frame from a switch is associated with FGFC. The network interface can then identify a data flow indicated in the control frame for applying the FGFC. The FGFC logic block can insert information from the control frame into an entry of a data structure stored in the NIC. The traffic management logic block can identify the entry in the data structure based on one or more fields of a packet belonging to the flow. Subsequently, the traffic management logic block can determine whether the packet is allowed to be forwarded based on the information in the entry.

Abstract: A method of assigning a space for a ride-share vehicle includes: providing a rideshare parking space management server; providing data corresponding to a parking space available for use by a rideshare vehicle; receiving a request for one of a pick-up or drop-off of a rideshare passenger from one of a passenger device, driver device, autonomous rideshare vehicle, or rideshare server; assigning the parking space to the rideshare vehicle; transmitting with the processor a parking space code corresponding to the assigned parking space to one of a driver device, the autonomous rideshare vehicle, or rideshare server; transmitting the parking space code corresponding to the assigned parking space to a passenger device; displaying the parking space code corresponding to the request for one of a pick-up and drop-off of the rideshare passenger on the passenger device.

Abstract: In order for efficiently managing communications between a UE (10) and multiple SCSs (20_1-20_n), the UE (10) includes, in one message, multiple pieces of data to be transmitted to the SCSs (20_1-20_n), and sends the message to an MTC-IWF (30). The MTC-IWF (30) receives the message from the UE (10), and distributes the date to the SCSs (20_1-20_n). Each of the SCSs sends (20_1-20_n), to the MTC-IWF (30), data to be transmitted to the UE (10) and an indicator that indicates for the SCSs (20_1-20 n) the time tolerance until the data is transmitted to the UE (10). The MTC-IWF (30) receives the data and the indicators from the SCSs (20_1-20_n), and determines when to forward the data to the UE (10) based on the indicators.

Abstract: A system and method for performing rate adaptation of constant bit rate (CBR) client data for transmission over a Metro Transport Network (MTN) by defining a plurality of pseudo-Ethernet packets at a source node, assembling a plurality of Generic Mapping Procedure (GMP) frames by mapping a plurality of blocks from a stream of encoded blocks of CBR client data, a plurality of pad blocks, and GMP overhead into consecutive pseudo-Ethernet packets of the plurality of pseudo-Ethernet packets, inserting a variable number of idle blocks between one or more of the consecutive pseudo-Ethernet packets and inserting an MTN path overhead (POH) frame that is aligned to the plurality of GMP frames to generate a plurality of rate adapted GMP frames for transmission over the MTN to an intermediate node or a sink node.

Abstract: Systems and methods for routing packet data for transmission via a plurality of communication links are described. A method may include dividing a usage cycle for the plurality of communication links into a plurality of timeslots. Packet data traffic demands for the packet data for transmission via the plurality of communication links may be received. Based on a mixed integer linear programming model, an allocation of the packet data traffic demands to the plurality of communication links during the usage cycle may be determined using binary constraints of the mixed integer linear programming model. The binary constraints may prioritize respective subsets of the plurality of timeslots for at least some of the plurality of communication links. For each of the plurality of timeslots, an allocation of the packet data traffic demands to each of the plurality of communication links may be determined using the mixed integer linear programming model.

Abstract: Implementations of the present disclosure are directed to systems and methods for flow control using a multiple flit interface. A credit return field is used in a credit-based flow control system to indicate that one or more credits are being returned to a sending device from a receiving device. Based on the number of credits available, the sending device determines whether to send device or wait until more credits are returned. The amount of buffer space used by the receiver to store the packet is determined by the number of transfer cycles used to receive the packet, not the number of flits comprising the packet. This is enabled by having the buffer be as wide as the bus. The receiver returns credits to the sender based on the number of buffer rows used to store the received packet, not the number of flits comprising the packet.

Abstract: A device implementing a system for packet loss management may include a memory and at least one processor configured to identify a plurality of categories of packets provided for transmission to an electronic device. The at least one processor may be further configured to determine a respective packet loss value for a respective category of the plurality of categories of packets. The at least one processor may be further configured to identify a particular category of the plurality of categories of packets for which the determined respective packet loss value satisfies a packet loss condition. The at least one processor may be further configured to adjust subsequent transmission of packets in the particular category of packets based at least in part on the packet loss condition being satisfied by the determined respective packet loss value for the particular category of packets.

Abstract: An apparatus for implementing power control for a radio device that has multiple radio transceivers operating in different bands, including sub-bands of a single frequency band. The device implements a power control protocol for communications between the device and a similar peer device. The device sets-up the power control protocol by generating a request to use one of the multiple bands to signal power control operations, and to use another one of the multiple bands to transfer data between the device and the peer device. The device sends the request to the peer device and receives a response. Based on the response, the device identifies a control channel band and a data channel band from among the multiple bands.

Abstract: A network monitoring device may receive, from a mediation device, flow-tap content data (generated by the mediation device based on current and/or previous investigation reports associated with flow tapping) that needs to be monitored. The network monitoring device may map the content data to a flow-tap content destination address of a content destination device in an entry of a flow-tap content filter. The network monitoring device may analyze, using the flow-tap content filter, network traffic of the network to detect a traffic flow that includes the content data. The network monitoring device may generate, based on successfully detecting a traffic flow that includes the content data, a traffic flow copy and may provide the traffic flow copy to the flow-tap content destination address, wherein the traffic flow copy is to be accessible to the content destination device to enable a context analysis of the content data.

Abstract: In a secure network where the network characteristics are not known, a call admission control algorithm and a preemption control algorithm based on a destination node informing the source node of the observed carried traffic are used to regulate the amount of traffic that needs to be preempted by the source. The amount of traffic that needs to be preempted is based on the carried traffic measured at the destination node. The traffic to be preempted is based on the priority of the traffic, where the lowest priority traffic is the first to be preempted until the amount of traffic preempted is sufficient to allow the remaining traffic to pass through the network without congestion.

Abstract: A buffered switch system for end-to-end data congestion and traffic drop prevention. More specifically, and without limitation, the various aspects and embodiments of the invention relates to the management of buffered switch to prevent the balancing act of buffer sizing, latency, and traffic drop.

Abstract: A data transmission method implemented by a network device, where the data transmission method includes receiving a first data packet sent by a transmit end, buffering the first data packet to a low-priority queue when the first data packet is sent by the transmit end during a first round-trip time (RTT) of a data transmission phase between the transmit end and a receive end, receiving a second data packet from the transmit end, buffering the second data packet to a high-priority queue when the second data packet is not sent by the transmit end during the first RTT, and forwarding the second data packet in the high-priority queue before the first data packet in the low-priority queue.

Abstract: Enhanced packet redirect capabilities are disclosed herein for draining traffic to a server. In an implementation, a server in an infrastructure service receives a packet from a stateless load balancer. The packet may comprise a request for content. A user space program on the server determines whether a connection identified in the packet belongs to the server. If the connection belongs to the server, the user space program handles the request for the content. If not, the server forwards the packet to a secondary server in the infrastructure service. The secondary server, to which the connection may belong, can then handle the request.

Abstract: The present disclosure relates to the field of communication technologies, in particular to a shared bandwidth speed-limiting method, device, and storage medium. The method for customer premise equipment comprises: adding a token into a token bucket of the customer premise equipment based on an initial bandwidth rate; and sending a statistical information report to a central controller every preset time interval, wherein the statistical information report represents a report reflecting a surplus or deficiency condition of tokens in the token bucket, and is configured to instruct the central controller to reallocate tokens of the customer premise equipment by a central token bucket.

Abstract: A payment application isolation method and apparatus, and a terminal are provided. In the payment application isolation method, a payment application that is selected by a user and that is to be added to an isolation area is obtained; and if the to-be-added payment application has an attribute of being addable to a first isolation area, the to-be-added payment application is added to the first isolation area; or if the to-be-added payment application has an attribute of being addable to a second isolation area, the to-be-added payment application is added to the second isolation area. A payment application added to the first isolation area has an attribute of being invocable by a trusted application installed outside the first isolation area, and a payment application added to the second isolation area has an attribute of being completely isolated from an application installed outside the second isolation area.

Abstract: Systems and methods of routing are provided. In the system, one or more processors determine that a packet is to be transmitted to a destination. In one or more aspects of the system, the one or more processors select a next port to be used for transmitting the packet by selecting a set of ports among a plurality of ports based on a static weight configuration associated with each port. The next port may be selected from the set of ports based on a number of hops required to reach the destination from each port and based on an estimated latency from each port to the destination. The one or more processors may then route the packet through the selected next port.

Abstract: A power over fiber system includes a power sourcing equipment, a powered device, optical fiber cables, optical switches, a detector and a control device. The power sourcing equipment includes a semiconductor laser that oscillates with electric power, thereby outputting feed light. The powered device includes a photoelectric conversion element that converts the feed light into electric power. The optical fiber cables transmit the feed light. The optical switches selectively connect the optical fiber cables. The optical fiber cables and the optical switches can form at least two transmission routes of the feed light. The detector detects a poor transmission point on a transmission route among the transmission routes of the feed light. The control device controls the optical switches so as to form another transmission route among the transmission routes of the feed light in accordance with the poor transmission point, the transmission route bypassing the poor transmission point.

Abstract: A buffered switch system, data loss and latency management system, and methods of use are presented. The disclosure provides, generally, a buffered switch system for end to end data congestion and traffic drop prevention. More specifically, and without limitation, the various aspects and embodiments of the invention relates to the management of buffered switch. More specifically, and without limitation, the various aspects and embodiments of the invention relates to the management of buffered switch to prevent the balancing act of buffer sizing, latency, and traffic drop.

Abstract: Methods, systems, and apparatus for monitoring and controlling electronic devices using wired and wireless protocols are disclosed. The systems and apparatus may monitor their environment for signals from electronic devices. The systems and apparatus may take and disambiguate the signals that are received from the devices in their environment to identify the devices and associate control signals with the devices. The systems and apparatus may use communication means to send control signals to the identified electronic devices. Multiple apparatuses or systems may be connected together into networks, including mesh networks, to make for a more robust architecture.

Abstract: The present disclosure provides a packet tracing mechanism will be described that provides packet tracing information to a mobile network controller. In one aspect, a method includes receiving a data packet sent from a source node to a destination node; determining if the data packet is to be updated with packet tracing information; and upon determining that the data packet is to be updated, updating the packet tracing information of the data packet to include identification of the network device and an ingress timestamp of the data packet at the network device for a corresponding network controller to determining network routing policies.

Abstract: An improved autonegotiation approach includes determining that a negotiated rate between a first network device and a second network device exceeds data transfer capacity over a network path downstream of the second network device. In response, a configuration message is generated and transmitted to the first network device. When received by the first network device, the configuration message causes the first network device to limit data transfer between the first network device and the second network device to no more than the downstream data transfer capacity.

Abstract: A method and system of configuring a stack of switches includes configuring a switch with mapping information based on a user input flow mapping that defines destination port(s) (local destination port(s) and/or remote destination port(s)) for a flow to exit the stack. The mapping information includes any local destination port(s) via which the flow can exit the stack from the switch and an outbound stack port for each of any remote destination port(s) via which the flow can be transmitted from the switch to a downstream switch. The method further includes creating a decapsulation entry having a flow ID for the flow, wherein the flow ID is assigned to the flow and is unique across the stack, and configuring the switch with access to a decapsulation algorithm configured to use the flow ID via the decapsulation entry to decapsulate encapsulated network traffic of the flow received from an upstream switch.

Abstract: An information processing apparatus includes a predictor configured to predict a throughput of a network, to generate a first predicted value indicative of the predicted throughput, an acquirer configured to acquire, from a server apparatus connected to the network, a second predicted value indicative of a throughput of the network predicted by the server apparatus, a selector configured to select a predicted value with higher prediction accuracy from among the first predicted value and the second predicted value X2, and a requester configured to request a distribution apparatus to transmit a video with a quality based on the predicted value selected by the selector 125.

Abstract: Provided are a data acquisition system and method. The system includes: data acquisition units, to acquire a plurality of pieces of data related to a target object within a data acquisition period; and a controller, communicatively connected to the data acquisition units, to set, according to an ith data acquisition period, a sampling interval time of the ith piece of data, and to set a polling interval time according to a minimum data acquisition period of the data acquisition units. Upon the controller starting to perform polling on the data acquisition units through n_1 polling interval times until a condition is satisfied for the first time, the controller performs first polling, for the ith piece of data, on a data acquisition unit of the data acquisition units for acquiring the ith piece of data.

Abstract: A method for preventing an operation of a car application that causes a quality of service of an operation of a computer system of a vehicle to be reduced below a threshold can include receiving, from a separate source, a value indicative of the quality of service of the operation of the computer system during the operation of the car application in conjunction with the operation of the computer system. The method can include determining an existence of a condition. The condition can be that the value is less than the threshold. The method can include causing, in response to a determination of a lack of the condition, the car application to be in a condition to be operated on the vehicle. The method can include preventing, in response to a determination of the existence of the condition, the car application from being in the condition to be operated.

Abstract: Techniques are described for balancing traffic load for networks configured in multi-rooted tree topologies, in the presence of link failures. Maximum flows (through minimum cuts) are calculated for subgraphs that incorporate effective link capacities on links between source and destination nodes. Effective link capacities may be determined that take into account link failures, as well as sharing of current available link capacities by multiple nodes. Traffic is balanced while simultaneously fully utilizing available link capacities, even available link capacities on partially failed links (e.g., partially failed Link Aggregation Groups (LAGs)).

Abstract: A hardware module comprises at least a first ingress buffer and a second ingress buffer, where the second ingress buffer holds data packets from a plurality of source components. To ensure fairness between one or more sources providing data to the first ingress buffer and the plurality of sources providing data to the second ingress buffer, processing circuitry examines source identifiers in packets held in the second ingress buffer and selects between the buffers so as to arbitrate between the sources. In some embodiments, the examination of the source identifiers provides statistics for a weighted round robin between the ingress buffers. In other embodiments, the source identifier of whichever packet is currently at the head of the second ingress buffer is used to perform a simple round robin between the sources.

Abstract: Disclosed is a method for processing a voice signal applicable to a terminal. The method can include: receiving a first voice signal; sending the first voice signal to a server in response to determining that the first voice signal includes a preset wake-up word; and receiving a second voice signal in response to receiving an acknowledgement result from the server, and responding to an interaction instruction corresponding to the second voice signal in a live streaming room.

Abstract: A system can determine to produce a storage device for a user identity indicative of a user. The system can determine a number of extra disks to include with the storage device as part of the production, the extra disks enabling further storage capacity for the storage device beyond a specified storage capacity, the determining of the number of extra disks being based on data from a group of data, the group of data comprising first cost data representative of a first cost associated with including the second number of extra disks, probability data representative of a probability that the further storage capacity beyond the specified storage capacity will be requested during a defined time period after the production, and second cost data representative of a second cost associated with installing the second number of extra disks after the storage device has been delivered to the user site.

Abstract: Digital or “smart” contracts execute in a blockchain environment. Any entity (whether public or private) may specify a digital contract via a blockchain. Because there may be many digital contracts offered as virtual services, the contract identifier uniquely identifies a particular decision table and/or the digital contract offered by a virtual machine, vendor or supplier. The blockchain is thus not burdened with the programming code that is required to execute the decision table and/or the digital contract. The blockchain need only include or specify the contract identifier (and perhaps one or more contractual parameters), thus greatly simplifying the blockchain and reducing its size (in bytes) and processing requirements.

Abstract: A first communications device including a transmitter, such as a base station or UE, identifies a first packet flow for which end to end packet retransmission is supported. The first communications device assigns said first packet flow to a Hybrid Automatic Repeat Request (HARQ) process which does not require generation of acknowledgements (ACKs) or negative acknowledgements (NAKs) from a device receiving data corresponding to said first packet flow; and transmits data corresponding to said first packet flow to a second communications device. In some embodiments, the HARQ process to which the first packet flow is assigned is a dedicated HARQ suppression process. In some embodiments, the HARQ process to which the first packet flow is assigned is a HARQ process which has been temporarily designated as a HARQ suppression process. HARQ suppression is applied for the first packet flow at a radio link layer and/or MAC layer.

Abstract: A network switch and associated method of operation for establishing a low latency transmission path through the network which bypasses the packet queue and scheduler of the switch fabric. The network switch transmits each of a plurality of data packets to the identified destination egress port over the low latency transmission if the data packet is identified to be transmitted over the low latency transmission path from the ingress port to the destination egress port, and transmits the data packet to the destination egress port through the packet queue and scheduler if the data packet is not identified to be transmitted over the low latency transmission path from the ingress port to the destination egress ports.

Abstract: Methods and network equipment in a core network for intercepting protected communication between core network (CN) network functions (NFs). A method performed by network equipment in a core network may include establishing a first connection with a first NF for which the network equipment serves as a proxy and establishing, on behalf of the first NF, a second connection that is towards a second NF and that is secure. The method may also include selectively forwarding communication between the first and second NFs over the first and second connections, including transmitting and/or receiving the communication on behalf of the first NF over the second connection. The method may further include intercepting the communication that the network equipment selectively forwards between the first and second NFs.