Abstract: Systems and methods disclosed herein optimize radio metrics between nodes within a mesh network by waking up nodes not actively connected to a mesh network. A mesh network system includes a computing device configured to determine that a radio metric between a first node and a second node in a mesh network is above a predetermined threshold, identify a third node operating in sleep mode, when the radio metric is above the predetermined threshold, and cause the third node to wake and connect to the mesh network, the third node is configured to relay communication between the first node and the second node.

Abstract: A method and system is described that performs dynamic slice management for unmanned aerial vehicles (UAVs). Flight path information associated with a flight path of a UAV is used to determine a predicted optimal application and a predicted optimal network slice for use by the UAV at a location along the flight path. Information associated with the predicted optimal application and the predicted optimal network slice is transmitted to the UAV for use by the UAV at the location. The available network slices to the UAV may be updated based on the determined predicted optimal slice. The UAV may adjust its usage of applications and/or slices based on the information it receives associated with the predicted optimal application and the predicted optimal network slice.

Abstract: Aspects of the present disclosure include implementing fabric availability and synchronization (FAS) agents within a fabric network. In one example, a first FAS agent executing on a first network device may receive, from a second network device, a command to modify a configuration of a second network device. The first FAS may upgrade the configuration of the first network device based on the command from a current configuration to a new configuration. The first FAS agent increment a state identifier associated with the configuration of the first network device to a new state identifier associated with the new configuration. The first FAS agent may then transmit a control packet that includes the new state identifier. A second FAS agent executing on the second network device may receive the control packet and execute the command to update the configuration of the second network device to the new configuration.

Abstract: To receive data in data field of a PHY Protocol Data Unit (PPDU), wherein the data field includes mid-ambles, a number of mid-ambles and a number of data symbols included in the data field is determined. The number of mid-ambles is determined according to information in an HE-SIG-A field of the PPDU, information in an L-SIG field of the PPDU, and one or more predetermined values prescribed by a standard. The number of data symbols may be determined using the number of the mid-ambles, and the data received according to the number of mid-ambles and the number of data symbols.

Abstract: An automatic driving simulation task scheduling method and apparatus, a computer device, and a readable storage medium. The method includes: constructing a network flow block diagram on the basis of the number of cluster racks, the number of nodes, and the number of processes, and coding information of the network flow block diagram (S01); setting information of a task to be simulated, and performing shortest path computation on a simulation task flow by means of the network flow block diagram (S02); and updating the state of a scheduling system in real time according to a fair policy and a preemptive scheduling policy, and executing scheduling on the basis of the state of the scheduling system (S03).

Abstract: Techniques for managing connections in a mesh network are described. In an example, a device sends, to a plurality of devices of the mesh network, one or more messages requesting an action to be performed by a first device of the mesh network. The device determines, based at least in part on data about the mesh network, that the first device is to be reached via a second device of the mesh network. The second device being a single hop away from the device. The device establishes a peer-to-peer connection with the second device and receives, over the peer-to-peer connection, a response of the first device to the message.

Abstract: This disclosure describes techniques for improving speed of network convergence after node failure. In one example, a method includes storing, by SDN controller, an underlay routing table having routes for an underlay network of a data center and an overlay routing table having a set of routes for a virtual network of an overlay network for the data center, wherein the underlay network includes physical network switches, gateway routers, and a set of virtual routers executing on respective compute nodes of the data center; installing, within the underlay routing table, a route to a destination address assigned to a particular one of the virtual routers as an indicator of a reachability status to the particular virtual router in the underlay network. The SDN controller controls, based on presence or absence of the route within the underlay routing table, advertisement of the routes for the virtual network of the overlay network.

Abstract: A controller device manages a plurality of network devices. The controller device includes one or more processing units configured to receive an upgrade request; obtain a redundancy model indicating network device redundancies or service redundancies; determine, based on the upgrade request and the redundancy model, an update graph having nodes each representing one of the network devices or one of the services, the update graph also having at least one edge that connects two of the nodes and that indicates the network redundancy or the service redundancy; determine, based on the update graph including the at least one edge, an update schedule for performing an update of software for the network devices that ensures availability for the first network device or second network device or availability for the service; and update the software of each of the network devices according to the update schedule.

Abstract: Mobile agents can be deployed to mobile devices within specific regions of interest to achieve specific goals in respect of events occurring in the region of interest. In order to ensure that the agent can persist within the region of interest until the agent goals are achieved, the agent is configured to locate other devices within the region of interest and to propagate itself, by moving or copying itself, to those other devices. The region of interest may be a mobile and/or dynamic region of interest defined by, for example, a proximity to one or more mobile wireless access points or by an overlapping peer-to-peer communication range of a plurality of mobile devices that are configured to support the agent.

Abstract: A method comprises receiving a network of a plurality of nodes and a plurality of edges, each of the nodes of the plurality of nodes comprising members representative of at least one subset of initial data points, selecting a subset of the data points based on each node of the plurality of nodes, for each selected data point of the set of selected data points, determining a predetermined number of other data points that are closest in distance to that particular selected data point, grouping the selected data points into a plurality of groups based, at least in part, on the predetermined number of other data points of the set of selected data points that are closest in distance, each group of the plurality of groups including a different subset of data points, and providing a list of selected data points and the plurality of groups.

Abstract: Described is a system and method that includes executing, by a processing device, a data risk mitigation service (DRMS), to monitor, for each node of a plurality of nodes in a mesh network, at least one of metadata indicating a health state of a node or a call for help from the node. The method includes determining, by the DRMS, whether the node is in an unstable state in view of the metadata or the call for help from the node. The method includes in response to determining that the node is in the unstable state, rerouting incoming data of the node and evacuating data stored in the node.

Abstract: A method and system for a VPN setup in which one of the peers' outgoing traffic is dynamically rerouted to exit VPN servers based on infrastructure or user requirements without losing the initial connection state or leaking unencrypted network traffic is described. One exemplary embodiment describes a method for a client to change their routing to multiple server locations. Another exemplary embodiment describes a method for the entry VPN servers to reroute traffic based on strategic traffic analysis.

Abstract: Provided in the present disclosure are a data processing method and apparatus, and an electronic device, the method includes: determining a plurality of candidate data pieces, where the candidate data pieces are provided from corresponding data sources; and determining a target data piece based on priorities of the data sources corresponding to the plurality of candidate data pieces in a current cycle, wherein a same data source has different priorities in different processing cycles, and priority sequence numbers of a same data source in different processing cycles satisfy a nonlinear relationship.

Abstract: In one embodiment, a method includes determining, by a router, a common prefix pool from a transport interface associated with a transport virtual private network (VPN). The method also includes identifying, by the router, a prefix associated with a service VPN and generating, by the router, an IPv6-to-IPv6 Network Address Translation (NAT66) prefix translation using the common prefix pool and the prefix. The NAT66 prefix translation includes a predetermined prefix length. The method further includes automatically installing, by the router, the NAT66 prefix translation into a translation table.

Abstract: The embodiments of the disclosure relate to a data transmission method, a terminal device and a Core Network (CN) device. The method includes that: a terminal device determines a target access type for uplink data in multiple different access types; the terminal device determines a target-type CN corresponding to the target access type according to a correspondence between an access type and a CN type; and the terminal device sends the uplink data by use of at least one data flow corresponding to the target-type CN. According to the data transmission method, terminal device and CN device of the embodiments of the disclosure, transmission efficiency may be improved.

Abstract: Selecting a communication route between a first and a second node device of a mesh electrical supply network using powerline and/or radio-frequency communications is described. A route cost is obtained for each possible communication route. A communication route of the lowest route cost is selected. For a given route, the route cost is the sum of the link costs between successive node devices on the route, the link cost between two successive node devices is a weighted sum between a maximum value from a link cost in a forward direction and a link cost in a backward direction and a ratio between a number of active routes and a maximum number of active routes. A link cost in a given direction depends on the cost of the link, in the given direction, calculated for each frequency band of frequency bands used by the two successive node devices for communicating.

Abstract: This application discloses a route processing method and a network device. The network device obtains a route prefix and autonomous system information associated with the obtained route prefix, where the associated autonomous system information includes to-be-verified autonomous system information. The network device verifies whether there is a match item in a route origin information base, where the match item includes the obtained route prefix and the to-be-verified autonomous system information; and determines, based on a verification result, whether to send the obtained route prefix. The network device verifies the autonomous system information associated with the to-be-sent route prefix before sending the route prefix. This reduces a possibility that the network device sends route information carrying incorrect autonomous system information, and reduces a possibility of causing an abnormal network flow direction.

Abstract: A network edge computing method includes receiving, by an edge data node, a service request at least processed by network edge computation scheduling; and routing, according to a service port involved in the service request, the service request to a container of the edge data node, to be processed by the container.

Abstract: In a distributed control system, when the determination that an error has occurred is made as a result of comparison of correct connection information retained in a storage unit and connection information of an actually connected control object device or terminal communication device by a comparison unit, a central computation device outputs a display signal of an abnormal part to a display device, and the display device displays the abnormal part on the basis of the display signal. A distributed control system and an automatic analysis device provided with the same, and an automatic analysis system are thereby provided, whereby an erroneous connections or defects can be more easily and reliably detected than in the prior art, even when a plurality of control boards are distributedly arranged in the same device.

Abstract: Systems and methods described herein provide a co-managed configuration service. A network device stores parameters for the co-managed configuration service. The parameters identify exposed services for an enterprise network that uses devices from a network service provider. The network device receives, via a customer portal, a vendor-agnostic change request for the enterprise network. The change request includes a user role and a change request name for one of the exposed services. The network device authenticates the change request based on the user role and the change request name and retrieves vendor director information for an SDN device implementing the configuration change. The network device invokes, in response to the change request, the configuration change for the enterprise network based on the vendor director information.

Abstract: A telecommunication network associated with a wireless telecommunication provider can be configured to switch between New Radio (NR) Dual Connectivity (DC) and NR Carrier Aggregation (CA) in 5G cellular networks. According to examples, a UE is not limited to using a single mode (e.g., either NR CA or NR DC) that is initially selected for use by the UE. For example, a UE can be reconfigured during a session to switch from NR DC to NR CA when the UE moves toward mid-cell and/or a cell edge. In other examples, the UE can be reconfigured to switch from NR CA to NR DC when the UE moves closer to the cell. To determine when to switch, one or more network conditions (e.g., UE RF conditions) can be monitored. In some examples, a gNB can monitor power headroom reports (PHRs) received from the UE to determine when to switch.

Abstract: A network device may receive a request for a service from an endpoint device located in a first region, and may determine whether destination addresses are identified for the service and the first region. The network device may determine whether the service and the first region are identified in a lookup table, and may receive performance metrics associated with multiple paths in the first region to the destination addresses, based on the service and the first region not being identified in the lookup table. The network device may generate a performance metrics matrix based on the performance metrics, and may identify a best destination and a best path for the service in the first region based on the performance metrics matrix, and may cause, for the endpoint device, a connection to the service to be established via the best destination and the best path for the first region.

Abstract: This disclosure describes methods and systems to externally manage network-to-network interconnect configuration data in conjunction with a centralized database subsystem. An example of the methods includes receiving and storing, in the centralized database subsystem, data indicative of user intent to interconnect at least a first network and a second network. The example method further includes, based at least in part on the data indicative of user intent, determining and storing, in the centralized database subsystem, a network intent that corresponds to the user intent. The example method further includes providing data indicative of the network intent from the centralized database subsystem to a first data plane adaptor, associated with the first network, and a second data plane adaptor, associated with the second network.

Abstract: A method includes receiving a request to set up a computing cluster comprising at least one node, the request comprising a selection of a node graphical user interface element that represents at least one virtual machine associated with at least one of at least one cloud service provider and at least one on-premise computing device, dynamically generating a configuration file comprising configuration language to set up the computing cluster comprising the at least one node, parsing the configuration file to convert the configuration file into at least one application programming interface (API) request and sending the at least one API request to the least one of the at least one cloud service provider and the at least one on-premise computing device to set up the computing cluster, and receiving real-time deployment information.

Abstract: The present invention relates to a method of transmitting a buffer status report (BSR) by an Integrated Access and Backhaul (IAB) node in a wireless communication system. In particular, the method includes the steps of: generating the BSR; and transmitting the BSR to the network, wherein the BSR includes data volume of the IAB node determined by considering data volume of at least one RLC (Radio Link Control) layer entity of the IAB node and data volume of an adaptation layer of the IAB node.

Abstract: A packet processing method, including a network node of an access network receiving a first packet sent by a user terminal, where the first packet is used to request an Internet Protocol (IP) address from a Dynamic Host Configuration Protocol (DHCP) server and the network node obtains a second packet, where the second packet includes the first packet, information about a port, and a Media Access Control (MAC) address of the user terminal, the port is a port through which the network node receives the first packet, and the second packet is a packet except a DHCP packet. Additionally, the network node sends the second packet to a controller.

Abstract: Apparatuses, systems and methods for routing requests and responses targeting a shared resource. A queue in a communication fabric is located in a path between the requesters and a shared resource. In some embodiments, the shared resource is a shared address translation cache stored in an endpoint. The physical channel between the queue and the shared resource supports multiple virtual channels. The queue assigns at least one entry to each virtual channel of a group of virtual channels where the group includes a virtual channel for each address translation request type from a single requester of the multiple requesters. When the at least one entry for a given requester is de-allocated, the queue allocates this entry only with requests from the assigned virtual channel even if the empty entry is the only available entry of the queue.

Abstract: A lighting fixture includes a solid-state light source, communications circuitry, a memory, and processing circuitry. The memory stores common security credentials, wherein the common security credentials are pre-installed during a factory calibration process. The processing circuitry is coupled to the solid-state light source, the communications circuitry, and the memory. The processing circuitry is configured to cause the solid-state light source to provide a desired light output. Further, the processing circuitry is configured to join a common network using the common security credentials, wherein only devices with the common security credentials are permitted to join the network.

Abstract: Systems and methods for performing User Plane (UP) path selection or reselection over a communications network with a 3rd party entity, and for notifying network entities of UP changes in a communications network, are disclosed. The method includes: receiving an application program interface based request for UP path selection from the 3rd party entity; performing a validation and authorization procedure with the request; transmitting a UP path selection configuration request to a Control Plane Function that maintains configuration data; obtaining a reference number confirming the UP path selection configuration request; and installing the UP path selection according to the reference number.

Abstract: A network device serving as a local VXLAN) Tunnel Endpoint (VTEP) includes a communication interface, a first processor and a packet processor. The communication interface communicates between the local VTEP and remote VTEPs, each VTEP has a respective VXLAN Identifier (VNI). The first processor imports a Downstream-VNI (D-VNI) to be used in forwarding packets from the local VTEP to a remote VTEP, creates a unique egress Routing Interface (RIF) that is translatable into the imported D-VNI, and associates the unique egress RIF with one or more route entries in the local VTEP. The packet processor receives a packet destined to the remote VTEP, looks up the packet in the route entries in the local VTEP to retrieve the unique egress RIF, translates the unique egress RIF into the imported D-VNI, encapsulates the packet with the imported D-VNI, and forwards the encapsulated packet in accordance with the unique egress RIF.

Abstract: This disclosure relates generally to method and system for secure IoT device onboarding using a blockchain network. Internet of Things (IoT) device onboarding is a challenging problem as it needs to be securely connected to its actual final owner, with minimal manual intervention. Onboarding provides provisioning the IoT devices with credentials for accessing a network resource and assigning appropriate permissions. The present disclosure establishes a mutual authentication between at least one IoT device from the one or more IoT devices and a TIMS. Further, based on the verified authentication the TIMS enables the device to identify its current owner using a blockchain network. Further, the IoT device authenticating parameter is computed for authentication of the TIMS with at least one IoT device from the one or more IoT devices.

Abstract: Aspects of the present disclosure involve systems, methods, computer program products, and the like, for providing multiple egress points from a telecommunications network for a client of the network. In particular, the process and system allows for multiple provider edges of the network to utilize a route reflector server to provide a border gateway protocol (BGP) route to other provider edges in the network. Further, the multiple provider edges may each announce similar interior gateway protocol (IGP) routes through the network such that a provider edge receiving a packet intended for the customer network may select from the multiple IGP routes to provide the intended packet to the customer network. In this manner, the receiving provider edge may load balance among the various connections of the customer network to the telecommunications network.

Abstract: The disclosure relates to recovering from a failure in a network. A flooding topology, represented by links between nodes in the network, is computed. Alternative connections for the links and the nodes on the flooding topology are also computed. A change in the flooding topology is detected, where the change indicates the failure in the network and results in a split of the flooding topology. A link state message is flooded to each of the nodes in a remaining part of the flooding topology and to the alternative connections, such that the link state message identifies the failure in the network. The failure in the network is resolved by connecting the split flooding topology using the remaining part of the flooding topology and the alternative connections as identified in the link state message.

Abstract: A network node (N1) for handling IGP flooding topology (FT) inconsistency by obtaining a new FT and setting a FT flag field (FT field) in a data packet (DP) to indicate whether a link between N1 and a second node (N2) is on the new FT. N1 transmits the DP to N2. N1 receives a second DP from N2 that includes the FT field set by N2 to indicate whether the link between the network node and N2 is on the new FT as determined by N2. N1 sets a FT inconsistency field in a link state packet to indicate an inconsistency in the new FT when the FT field set by N2 and the FT field set by N1 are different for a given time. N1 distributes the LS to at least one node in the network.

Abstract: A layered convergence topology structure for a plurality of sensors is established based on a sensing range and a position relationship of at least one sensor from the sensors. A plurality of pieces of first sensed information, respectively captured through each sensor of the sensors, are divided into at least two first groups based on the layered convergence topology structure. Each piece of first sensed information in respective first group of the at least two first groups is converged to obtain at least two pieces of first converged information. The at least two pieces of first converged information are determined as at least two pieces of second sensed information for convergence to obtain second converged information. When a piece number of the second converged information is one, the second converged information is determined as target converged information.

Abstract: A method in a first virtual private network (VPN) server associated with clustering a plurality of VPN servers in a clustered network, the method including receiving, from a VPN service provider (VSP) control infrastructure, VPN data associated with a user device having an established VPN connection with the clustered network; and communicating, utilizing key information, the VPN data with the user device during the established VPN connection. Various other aspects are contemplated.

Abstract: The disclosure relates to a communication method and a system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). The disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as a smart home, a smart building, a smart city, a smart car, a connected car, healthcare, digital education, a smart retail, security and safety services. A method for a user equipment (UE) in a network is provided. The method includes determining one or more of a mode of the UE, a type of data required, and a service requested, and setting a UE behavior for initiating a NAS procedure based on one or more of the mode of the UE, the type of data required, and the service requested.

Abstract: The present invention is directed to methods and apparatus for managing downlink channels and/or bandwidth in wireless systems. An exemplary method wireless communications method embodiments includes the steps of: monitoring, by a wireless base station, a downlink channel utilization rate of data transmissions from the wireless base station to a first customer premises equipment (CPE) device on a downlink shared channel to detect a first condition; and upon detecting, by the wireless base station, that the first condition exists, switching from operating in a first wireless base station mode of operation to operating in a second wireless base station mode of operation, said switching from operating in a first mode of operation to operating in a second mode of operation including switching from using a downlink control channel for transmitting downlink control information to the first CPE device to using the downlink control channel for transmitting user data.

Abstract: Techniques are described for cognitive defined network management (CDNM) that seek to perform real-time collection and analysis of raw network data from across a disaggregated wireless network and to dynamically orchestrate network management functions substantially in real time, accordingly. For example, a multi-modal artificial intelligence (AI) engine is trained to normalize the heterogeneous raw network data into homogeneous so-called “golden record data.” A repository of historical golden records can be maintained for generating data models for use in training AI network management applications. An orchestrator can operate to directing execution of pre-developed network management workflows based on results obtained from querying the trained AI network management applications with newly received (real-time) golden records.

Abstract: Techniques for stateless address auto-configuration with support for multiple, different subnets are disclosed. In one embodiment, a method is disclosed comprising receiving, by a network device, a router solicitation (RS) message from a network node, generating, by the network device, a router advertisement (RA) message for use in determining the network node's network address, the RA message including a network address prefix and subnetting information, the subnetting information comprising a subnet address, a subnet address length and a subnet option type, and transmitting, by the network device, the RA message to the network node.

Abstract: Systems, methods, and computer-readable media for reducing distributed storage operation latency using segment routing. In some examples, a method can involve receiving, from a client, a message identifying an intent to store or retrieve data on a distributed storage environment, and sending to the client a segment routing (SR) list identifying storage node candidates for storing or retrieving the data. The method can involve steering a data request from the client through a path defined by the SR list based on a segment routing header (SRH) associated with the request, the SRH being configured to steer the request through the path until a storage node from the storage node candidates accepts the request. The method can further involve sending, to the client device, a response indicating that the storage node has accepted the request and storing or retrieving the data at the storage node that accepted the request.

Abstract: The present invention provides a method for controlling a connection between an ONU and an OLT, wherein the method includes the steps of: (a) downloading an OMCI message from the OLT; (b) enabling an OMCI management program to process the OMCI message to try to generate a plurality of models; (c) if the plurality of models are not successfully generated by using the OMCI management program to process the OMCI message, modifying the OMCI management program to generate a modified OMCI management program when the ONU is not connected with the OLT; and (d) using the modified OMCI management program to process the OMCI message to try to generate the plurality of models.

Abstract: A method includes generating a first shortest path tree for traffic routing in a network, the first shortest path tree identifying a corresponding shortest path from the network node to other nodes in the network and generating a second shortest path tree for traffic routing after removing an element from the network. The second shortest path tree identifies a corresponding shortest path from the network node to the other nodes in the network with the element removed. A third shortest path tree is generated, which is a weighted version of the second shortest path tree with a weight value added to any node or link in the network sharing a SRLG value with the element removed from the network. Network traffic is enforced based on a comparison of the third shortest path tree with at least one of the first shortest path tree and the second shortest path tree.

Abstract: This application relates to a fog node scheduling method performed by a computer device, and a storage medium. The method includes: searching for candidate fog nodes storing a resource requested by a fog node scheduling request initiated by a client; performing effectiveness filtration on the candidate fog nodes to obtain effective fog nodes having predefined connectivity with the client; acquiring collected load information of the effective fog nodes; performing scheduling in the effective fog nodes based on the load information to obtain a scheduling result, where the scheduling result includes an identification of a target fog node obtained through scheduling and service flow allocated to the target fog node; and returning the scheduling result to the client so that the client can acquire the resource from the target fog node according to the identification and the service flow.

Abstract: Systems, methods, and apparatuses for providing dynamic, prioritized spectrum utilization management. The system includes at least one monitoring sensor, at least one data analysis engine, at least one application, a semantic engine, a programmable rules and policy editor, a tip and cue server, and/or a control panel. The tip and cue server is operable utilize the environmental awareness from the data processed by the at least one data analysis engine in combination with additional information to create actionable data.

Abstract: Software-defined networking and network function virtualization constructs are leveraged across diverse portions of 5G network infrastructure including radio access network, mobile core, and wide area network to enable a security property to be implemented for a network slice from end-to-end to provide for strong logical and/or physical isolation of slice traffic from other network traffic. One or more network slice controllers are implemented in the 5G network that are interoperable as separate elements, or under centralized control, to enable the underlying diverse network infrastructure to be abstracted and virtualized so that infrastructure properties can be mapped across infrastructure types for the end-to-end slice.

Abstract: The present invention extends to methods, systems, and computer program products for using geofences to restrict vehicle operation. Aspects of the invention include creating dynamic geofences and limiting vehicle movements (e.g., speed, acceleration, steering, etc.) within and in the vicinity of the dynamic geofences to protect pedestrians from physical harm. In general, radio devices track people in an area by counting the number of devices and calculating the number of people based on average number of devices per person. Using count and location data, a geofence is created when population or population density within an area exceeds a threshold. The geofence can be sent to vehicles to restrict vehicle operation, for example, slowing down or stopping the vehicle, within and around the geofence.

Abstract: A mechanism to share cryptographic material across entities that may not have a direct trust relationship between or among each other, or no network connectivity, or some combination thereof, but where participating entities do share a trust relationship (or trusted connection(s)) with a common entity, sometimes referred to herein as a “conduit” entity. This technique enables such entities to leverage their trust relationship with a common “conduit” entity to share cryptographic material between or among themselves.

Abstract: A tool is provided to configure an edge compute environment of a network. The edge compute configuration tool may generate a configuration process for instantiating an edge compute environment at an edge site of a network including configuring one or more of the components of the edge compute environment. The configuration process may be based on seeding data and/or information provided to the edge compute configuration tool via a user interface and/or from one or more databases associated with the network. The configuration process may further include generating automatically executed configuration instructions that communicate with the devices of the edge compute environment to configure operational processes of the devices, provision communication ports, establish one or more network addresses with the devices, etc. In some instances, the edge compute configuration tool may execute one or more micro-services to communicate with and control configuration of the devices of the edge compute environment.

Abstract: A request to establish an encrypted VPN connection between a network external to a provider network connected to the provider network via a dedicated direct physical link and a set of resources of the provider network is received. A new isolated virtual network (IVN) is established to implement an encryption virtual private gateway to be used for the connection. One or more protocol processing engines (PPEs) are instantiated within the IVN, address information of the one or more PPEs is exchanged with the external network and a respective encrypted VPN tunnel is configured between each of the PPEs and the external network. Routing information pertaining to the set of resources is provided to the external network via at least one of the encrypted VPN tunnels, enabling routing of customer data to the set of resources within the provider network from the external network via an encrypted VPN tunnel implemented over a dedicated direct physical link between the external network and the provider network.