Abstract: A system and method for providing secure access to an organization's internal directory service from external hosted services. The system includes a remote directory service configured to accept directory service queries from an application running on hosted services. The remote directory service passes the queries to a directory service proxy server inside a firewall of the organization via a secure rendezvous service. The directory service proxy server passes the queries to the internal directory service inside said firewall. Request responses from the internal directory service pass through the directory service proxy server to the remote directory service through said firewall via the secure rendezvous service. The remote directory servicer returns the response to the requesting application.

Abstract: A processing device includes an internal transmitter to receive packets and to forward those packets across a link to an external receiver external to the processing device. The internal transmitter is to receive a portion of a packet and to begin transmitting the portion across the link to the external receiver before the entire overall packet, of which the portion is a part, is received and validated. For a packet determined to have an error, the internal transmitter does not resend the overall packet across the link even if a message is received from the external receiver to resend the overall packet.

Abstract: A telecommunications edge cloud (TEC) element deployed between a client and a packet network includes a TEC hardware layer including storage resources, networking resources, and computing resources, wherein the computing resources include a plurality of processors. A TEC operating system (TECOS) is coupled to the TEC hardware layer and configured to control and manage the storage resources, the networking resources, and the computing resources, wherein the TECOS is executed by one of the processors, a TEC application layer coupled to the TECOS, wherein the TEC application layer is configured to process a request from the client using the TECOS, wherein the computing resources are configured to provide a service to the client when the request is a service request, and wherein at least one of the networking resources and the storage resources is configured to provide data to the client when the request comprises a data request.

Abstract: Some embodiments provide a method for a first network controller that manages a set of logical forwarding elements implemented in several managed forwarding elements. The method receives a request to trace a specified packet having a particular source on a logical forwarding element. The method generates the packet according to the packet specification. The generated packet includes an indicator that the packet is for a trace operation. The method sends the packet to a second network controller that manages a managed forwarding element associated with the particular source. The method receives a first set of messages regarding operations performed on the packet from a set of network controllers that receives a second set of messages regarding operations performed on the packet from a set of managed forwarding elements that process the packet.

Abstract: A method for establishing a tunnel between VTEPs includes receiving at an SDN controller a tunnel creation request to establish a VxLAN tunnel from a first VTEP to a second VTEP, determining a VxLAN tunnel of network nodes coupling the first VTEP to the second VTEP, assigning a SvcPI to the VxLAN tunnel, and sending a tunnel initiation command to the first VTEP, the tunnel initiation command causing the first VTEP to convert an Ethernet frame to a path-ID frame by adding an NSH encapsulation header and to forward the path-ID frame to the next network node in the VxLAN tunnel.

Abstract: Example methods are provided for a source virtual tunnel endpoint (VTEP) to perform congestion-aware load balancing in a data center network. The method may comprise the source VTEP learning congestion state information associated with multiple paths provided by respective multiple intermediate switches connecting the source VTEP with a destination VTEP. The method may also comprise the source VTEP receiving second packets that are sent by a source endpoint and destined for a destination endpoint; and selecting a particular path from multiple paths based on the congestion state information. The method may further comprise the source VTEP generating encapsulated second packets by encapsulating each of the second packets with header information that includes a set of tuples associated with the particular path; and sending the encapsulated second packets to the destination endpoint.

Abstract: Systems and methods for communications network failure detection and remediation. Exemplary methods include: receiving first communications using a network from a first client, the first communications including an identifier for a user of the first client and a security credential of the user; authenticating the first user using the identifier and the security credential; creating, responsive to the authenticating, a registration for the first client in a registration database, the registration including an address for the first client, the registration being used to route second communications from a second client to the first client; establishing, responsive to the authenticating, a connection to the first client; detecting the connection has failed; and removing, responsive to the detecting, the registration from the registration database.

Abstract: Methods, apparatuses, and systems for collecting and validating web traffic data, including receiving preprocessed log data representing an activity of a device interacting with a data service; validating the preprocessed log data in accordance with a predetermined format, the format comprising a field indicative of a predetermined data type and a field indicative of a predetermined validation condition associated with the predetermined data type; and generating metadata associated with validated preprocessed log data.

Abstract: A link aggregated FCoE system includes a target device, a first FCF device coupled to the target device and a LAG, and a second FCF device coupled to the LAG and to the first FCF device by an ICL. The first and second FCF devices are each associated with a common FCF MAC address. The first FCF device receives, through the LAG, first FCoE data traffic directed to the common FCF MAC address and including a target device destination identifier and, in response, forwards the first FCoE data traffic to the target. The second FCF device receives, through the LAG, second FCoE data traffic directed to the common FCF MAC address and including the target device destination identifier and, in response, forwards the second FCoE data traffic to the first FCF device so that the first FCF device may forward the second FCoE data traffic to the target device.

Abstract: A method of transferring data between local and remote computing systems includes the step of transferring data between the local and remote computing systems via a local buffer in the local computing system and a series of steps carried out during transferring of data from the local to the remote computing system. The steps include receiving a statistic from the remote computing system, computing an average transfer rate of the data transfer between the local and remote computing systems based on the statistic, determining whether or not a throttle condition is in effect based on the computed average transfer rate, and upon determining that the throttle condition is in effect, throttling the transferring of data into the local buffer.

Abstract: Some embodiments provide a method for a particular forwarding element (FE) in a network of FEs. The method receives a packet at the particular FE. The packet includes a packet header that includes, for each of multiple FEs along a path from a source of the packet to a destination of the packet, (i) an identifier for the FE and (ii) a set of one or more actions for the FE to perform on the packet. The method parses the packet header to identify the set of actions for the particular FE. The method performs the identified set of actions.

Abstract: A device determines whether an application, utilized by a user device and associated with a network, is a low latency application or a best effort application. The device designates a first network device or a second network device as a designated network device to be an IP anchor point for the application based on a set of rules. The first network device is designated as the designated network device when the application is the low latency application, or the second network device is designated as the designated network device when the application is the best effort application. The device provides, to the user device, information informing the user device that the designated network device is to be the IP anchor point for the application, and provides, to the network, information instructing the network to utilize the designated network device as the IP anchor point for the application.

Abstract: According to examples, an apparatus may include a processor and a memory on which is stored machine readable instructions executable by the processor to access network activity data collected over a time period associated with a plurality of network entities, in which each of the network entities is assigned a distinct internet protocol (IP) address including a network prefix set of bits and a network entity identifier set of bits. The instructions may also cause the processor to generate representations of the network activity data corresponding to the respective network entities and display the generated representations of the network activity data corresponding to the respective network entities on an IP address block map according to the network entity identifier set of bits of the respective network entities.

Abstract: Systems and method for defining sub-bands are provided. Each sub-band has a respective sub-carrier spacing, and at least one sub-band portion. Each sub-band portion has a channelization configuration including a resource block size configuration and a sub-band portion bandwidth. The sub-bands are allocated based on a sub-band configuration framework that includes a preconfigured set of possible sub-carrier spacings, a preconfigured set of possible resource block sizes, and a preconfigured set of possible sub-band portion bandwidths. In some embodiments, to improve bandwidth utilization, the channelization configuration for a given sub-band configures a plurality of resource blocks having a first number of sub-carriers and an additional resource block having a number of sub-carriers other than the first number.

Abstract: A base station includes a memory holding information on P terminals in connecting to the base station, where P is an integer of 3 or more, a determination unit that determines L terminals to transmit a reference symbol used for measurement of channel state information indicating a state of a propagation path to the base station from among the P terminals based on the information on the P terminals, at every data transmission cycle, where L is an integer satisfying 2?L<P, a selector that selects M terminals capable of spatial multiplexing communication in the data transmission cycle based on a measurement result of the channel state information based on reception of the reference symbol transmitted from L terminals, where M is an integer satisfying 2?M?L, and receives respective pieces of data transmitted from the M terminals via a plurality of antennas.

Abstract: Device, system, and method of Voice over Internet Protocol (VoIP) communications, and particularly of Real Time Protocol (RTP) communication. In order to improve quality-of-service or quality-of-experience for a group of VoIP calls that are served by a VoIP router, each VoIP transmitter implements and adds a pseudo-random waiting-period prior to transmitting each outgoing RTP packet, or otherwise re-orders or mixes or shuffles the order of channels of RTP packets that are buffered or queued for transmission. Accordingly, no particular VoIP channel suffers from repeated drops of its RTP packets at the VoIP router. Additionally, VoIP network analyzers operate to measure the overall VoIP network overuse, or the average RTP packet loss rate of multiple VoIP channels, based on measuring RTP packet loss rate of a single VoIP channel which enforces a random pre-transmission waiting-period.

Abstract: A networking adaptor and method of transferring data are depicted and described herein. One example of the networking adaptor is provided with a host interface and a network interface. The network interface may include a transmit portion and a receive portion. The transmit portion may include a first set of data paths and the receive portion may include a second set of data paths. Both the first set of data paths and second set of data paths are configurable to be aggregated or de-aggregated to support a single port operation that represents a combined bandwidth of the data paths in the first set of data paths or the second set of data paths.

Abstract: This invention discloses a novel system and method and system for sharing a data item among a plurality of computers connected in an arbitrary network topology. In the preferred embodiment, each of the plurality of computers has a local copy of the data item, but can only edit the copy by obtaining a token from the current token owner, thereby becoming a new current token owner. When the token owner makes a change to the data item, the change is broadcast to the other computers, along with the identity of the new current token owner. Routing of token requests and broadcasts is accomplished by means of each computer calculating a routing table based on information it receives from those computers to which it is directly connected on the network.

Abstract: A Fibre Channel Forwarder (FCF) routing system includes an FCF device that is coupled to a Fibre Channel (FC) networking device through a first FCF device port, coupled to a source device through a second FCF device port, and coupled to a first destination device through a third FCF device port. The FCF device receives first traffic from the source device at the second FCF device port. Using a first FCF device routing table, the FCF device determines that a destination device identifier included in the first traffic corresponds with the first destination device. In response determining the destination device identifier included in the first traffic corresponds with the first destination device, the FCF device routes the first traffic through the third FCF device port to the first destination device without forwarding the first traffic through the first FCF device port to the FC networking device.

Abstract: A system for providing sensor data analysis to a plurality of users is disclosed. The system includes comprising an interface for receiving sensor data from a plurality of sensors distributed over a plurality of localities, a locality being associated with one or more sensors; a data storage configured to store said sensor data in association with a plurality of nodes, one node being associated to one locality, and sensor data from one specific sensor being associated to the corresponding node, and to store for each node a relationship to itself and to all its sub-nodes as part of a hierarchical structure of said nodes; and a processing entity configured to run one or more instances for each of a plurality of users, each instance accessing said data storage for analyzing the sensor data in response to a user request.

Abstract: In one embodiment, a non-transitory computer-readable media is provided for storing instructions, that when executed by one or more processors of a topology node, cause the topology node to: identify a first sequence of identifiers for data routing in a label switching network from a first node in the label switching network; identify a second sequence of identifiers for data routing in the label switching network from a second node in the label switching network; identify a policy for use in constraining data routing from the first node to a third node; include the first sequence of identifiers and the second sequence of identifiers in a third sequence of identifiers that reflects the policy such that data routing is constrained from the first node to the third node via a plurality of network paths that each include at least one node in the label switching network; and provide path information that identifies the third sequence of identifiers, for constraining data routing, according to the policy, to the th

Abstract: An information processing apparatus includes a plurality of virtual machines each having a function of sending an address request for communication data to an outside, and sending communication data to a destination address received as a response to the address request. The apparatus further includes a communication debugger that logs first communication data between the virtual machine and another virtual machine. Upon receiving an address request from the virtual machine, the communication debugger sends an address of the communication debugger as the destination address, to the virtual machine, and logs the communication data sent from the virtual machine.

Abstract: Centrality measure ranking for a multiple network is provided by a method that includes obtaining a representation of a multiplex network including layers and nodes representing communicating entities. The method determines a node centrality measure for each node of the nodes. This includes determining intra-layer and inter-layer centrality measures. The method determines a respective centrality measure for each communicating entity as a function of node centrality measures for nodes representing the communicating entity across the layers of the multiplex network. The method also ranks the communicating entities by their centrality measures.

Abstract: This disclosure describes systems, devices, methods and computer readable media for enhanced network communication for use in higher performance applications including storage, high performance computing (HPC) and Ethernet-based fabric interconnects. In some embodiments, a network controller may include a transmitter circuit configured to transmit packets on a plurality of virtual lanes (VLs), the VLs associated with a defined VL priority and an allocated share of network bandwidth. The network controller may also include a bandwidth monitor module configured to measure bandwidth consumed by the packets and an arbiter module configured to adjust the VL priority based on a comparison of the measured bandwidth to the allocated share of network bandwidth. The transmitter circuit may be further configured to transmit the packets based on the adjusted VL priority.

Abstract: An application and network analytics platform can capture comprehensive telemetry from servers and network devices operating within a network. The platform can discover flows running through the network, applications generating the flows, servers hosting the applications, computing resources provisioned and consumed by the applications, and network topology, among other insights. The platform can generate various models relating one set of application and network performance metrics to another. For example, the platform can model application latency as a function of computing resources provisioned to and/or actually used by the application, its host's total resources, and/or the distance of its host relative to other elements of the network. The platform can change the model by moving, removing, or adding elements to predict how the change affects application and network performance. In some situations, the platform can automatically act on predictions to improve application and network performance.

Abstract: The invention provides communication method and apparatus based on NFC, and in particular, to communication method and apparatus based on NFC in a security element (SE), a communication method based on NFC in a smart terminal, a security element and a smart terminal. The invention proposes a new way of connection with the NFC device so that the TEE applications can have NFC ability.

Abstract: Technologies for routing an outbound telecommunication from an enterprise telecommunications device to a destination telecommunications device in a contact identification system are disclosed. The system determines the classification of a dialed address using a number plan that may be created by a user from a plurality of predetermined match types. Once the classification of the dialed address is determined, the system routes the outbound telecommunication on a routing path chosen for that classification of telecommunication. Additional embodiments are described herein.

Abstract: Systems and methods are disclosed herein that allow a radio access node to command a wireless device to clear parts of a soft buffer for a Hybrid Automatic Repeat Request (HARQ) process. In some embodiments, a method for a wireless device in a wireless communications system comprises receiving control information comprising information pertaining to whether the wireless device should partially clear a soft buffer for a HARQ process, deciding whether to partially clear the soft buffer for the HARQ process based on the information comprised in the control information, and partially clearing the soft buffer for the HARQ process upon deciding to partially clear the soft buffer for the HARQ process. In this manner, corrupted soft information can be cleared from the soft buffer while retaining uncorrupted soft information in the soft buffer.

Abstract: A method, an apparatus and a system for controlling routing information advertising are provided, which relate to the field of communications and are used for reducing the configuration complexity and reinforcing the operability. The method includes: receiving, by a control device, first routing information sent by a first forwarding device; wherein the first routing information includes an identifier of the first forwarding device; determining a first routing path according to the identifier of the first forwarding device, an identifier of a second forwarding device and a routing path group; and determining an advertising range of second routing information for the second forwarding device according to the first routing path; for enabling the second forwarding device to advertise the second routing information according to the advertising range of the second routing information.

Abstract: The present disclosure relates to a communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. A method of a proxy device in a communication system of the present disclosure includes identifying a packet loss rate on a wireless connection between a terminal and a server, determining whether the packet loss rate is greater than a predetermined threshold value, and proxying, if the packet loss rate is greater than the threshold value, the connection between the terminal and the server.

Abstract: A method is provided for dynamic discovery of service functions in an IP network including at least one PDP, responsible for taking decisions relative to the structuring of a service based on a set of service functions, called SF functions, and for notifying other nodes of the IP network of these decisions, and at least one SF node, associated with at least one SF function hosted at the SF node or accessible via the SF node. The method includes: the PDP node receives an announcement message sent by the SF node, the announcement message indicating at least one identifier and the location of the SF function associated with this SF node; and the PDP node updates a list of SF functions on the basis of information taken from the announcement message. The method can be applied to value added services, for example in an OSPF network.

Abstract: A method may include obtaining packet handling rules from at least one firewall in a network and at least one routing table in the network, and translating the packet handling rules to canonical data structures based on priority of rules at a given routing table or a given firewall. Each canonical data structure may represent a subset of packets affected by one or more corresponding packet handling rules such that each packet handling rule is covered by at least one canonical data structure. The method may also include generating a graph representation of the firewalls and the nodes corresponding to the routing tables in the network. The method may additionally include labeling vertices and edges in the graph representation based on the packet handling rules. The method may also include, using the graph representation, verifying one or more network properties to identify any network issues.

Abstract: A process capable of automatically establishing a secure overlay network (“SON”) across different clouds is disclosed. The process, in one aspect, receives a first request from a first node in a first cloud for establishing a SON. After receiving a second request for connecting to the SON from a second node in a second cloud, a first connection is established connecting between the first node and the second node utilizing a network security protocol such as Internet Protocol Security (“IPSec”). After receiving a third request for connecting to the SON from a third node in a third cloud, a second connection is used to connect between the first node and the third node. A third connection is used to connect between the second node and the third node. Each subsequent request for connecting to the SON from a new node results in new connections between the new node and each existing node in the SON forming a full-mesh.

Abstract: A digital radio receiver (7) is arranged to receive and process data frames, each data frame comprising (i) a plurality of identical synchronization sequences; (ii) identification data different from the synchronization sequences; and (iii) convolution-encoded message data. An initial-synchronization section of the receiver (7) uses the plurality of synchronization sequences in a received data frame to perform a frequency-synchronization or symbol-timing-synchronization operation. A frame-synchronization section determines frame-synchronization information by correlating at least a part of the received identification data against reference identification data stored in a memory. A convolution-decoding section uses the frame-synchronization information to decode the message data.

Abstract: A method, system and a network element for routing at least one data stream in a telecommunications network, the network having at least one transmitting node providing at least one data stream, at least one receiving node receiving the at least one data stream, and zero or more processing nodes, and at least one link connecting said nodes. All nodes communicate their capabilities to a system database on a database server which receives at least one request with at least one condition for sending at least one data stream between two nodes. For or each request, a measure is calculated for at least one route between said two nodes, and instructions are provided to use only the at least one route having measures compliant with the at least one condition in the request. An optimal route can be determined using at least one heuristic rule or linear programming.

Abstract: Some embodiments establish for an entity a virtual network over several public clouds of several public cloud providers and/or in several regions. In some embodiments, the virtual network is an overlay network that spans across several public clouds to interconnect one or more private networks (e.g., networks within branches, divisions, departments of the entity or their associated datacenters), mobile users, and SaaS (Software as a Service) provider machines, and other web applications of the entity. The virtual network in some embodiments can be configured to optimize the routing of the entity's data messages to their destinations for best end-to-end performance, reliability and security, while trying to minimize the routing of this traffic through the Internet. Also, the virtual network in some embodiments can be configured to optimize the layer 4 processing of the data message flows passing through the network.

Abstract: Some embodiments provide a method for managing multiple queues of a network interface card (NIC) of a host computer that executes a data compute node (DCN). The method defines first, second, and third subsets of the queues. The first subset of queues is associated with a first feature for processing data messages received by the NIC, the second subset of queues is associated with a second feature, and the third subset is associated with both features. The method receives a request from the DCN to process data messages addressed to the DCN using both the first and second features. The method configures the NIC to direct data messages received for the DCN to a queue that is selected from the third subset of queues.

Abstract: Communication of a node is maintained in a switchless network via point-to-point connections of a plurality of nodes having a plurality of ports. Address Resolution Protocol (ARP) announces are performed, via a virtual network device of the node, periodically or in response to an occurrence of a change in the node, for communications among the plurality of nodes in the switchless network.

Abstract: In some variations, first and second rule sets may be received by a network protection device. The first and second rule sets may be preprocessed. The network protection device may be configured to process packets in accordance with the first rule set. Packets may be received by the network protection device. A first portion of the packets may be processed in accordance with the first rule set. The network protection device may be reconfigured to process packets in accordance with the second rule set. A second portion of the packets may be processed in accordance with the second rule set.

Abstract: A request arrival rate is obtained at a given computing node in a computing network comprising a plurality of distributed computing nodes. A topology of the computing network is determined at the given computing node so as to identify neighboring computing nodes with respect to the given computing node. A probability is computed at the given computing node based on the obtained request arrival rate and the detected network topology. The computed probability is used to select a decision from a set of decision candidates in response to a request received at the given computing node in a given time slot. The selected decision is a decision with a top average reward attributed thereto across the given computing node and the neighboring computing nodes determined based on information shared by the neighboring computing node with the given computing node.

Abstract: A network edge device may be placed at a location to participate in a VLAN using a specific VLAN ID without expressly programming the network edge device to use that specific VLAN ID. The network edge device is connected to a network to receive ingressing frames from the network and to send egressing frames to the network. The network edge device copies a specific VLAN ID from an ingressing VLAN message into memory and subsequently reads the specific VLAN ID from the memory for use in tagging frames egressing from the network edge device with the specific VLAN ID so that the egressing frames are VLAN conformant. The network edge device may communicate with non-edge devices at the same location as the network edge device.

Abstract: Methods and systems for detecting a malicious actor on a network. In some embodiments the system may gather data regarding one or more authentic hostnames on a network, and generate a pseudo hostname based on the gathered data. The system may then issue a network discovery request for the pseudo hostname. Based on a response to the network discovery request, the system may execute one or more remedial actions.

Abstract: A data transport system includes nodes configured to communicate with local devices via independent native protocols and to store a metadata schema that defines a data interface for process variables. The data transport system includes a computing system programmed to communicate with an application and the nodes using a media independent messaging service that is layered over respective communication protocols associated with the application and the nodes. The computing system receives, from the nodes, metadata corresponding to the data interface and dynamically render a web application programming interface (API) that allows users of the application to access the process variables.

Abstract: A wireless local network and method integrating the locating and the seamless roaming of mobile nodes. The network includes a server constituting the core of the network, fixed access points providing the low-level protocol, fixed anchors providing the locating function and nodes comprising sensors and actuators according to the end purpose of the network. The fixed anchors determine a distance measurement with the nodes by time of flight of radio waves, with the nodes behaving as an active radio deflector.

Abstract: The present disclosure generally includes a projective modeling and simulation system which produces an Outcome Model which reflects the projection of a structured assertion across the elements composing a Reference Data Model, where the projected contention is embodied within a structured Assertion Model and an optionally associated but similarly structured Apportionment sub-Model where the Outcome Model unifies the subject matter of the Reference Data Model with the Assertion-Apportionment Model pair.

Abstract: When an attack is detected, a controller samples an attack-target addressed DNS reply, received by a border router, from each of the border routers. Then, the controller adds the transmission-source IP address of the sampled DNS reply to the black list of the border router. Furthermore, upon reception of any of a target-addressed DNS reply and a target-addressed UDP subsequent fragment from the IP address that is described in the black list, the controller gives a command to the border router to discard the packet. Furthermore, the controller specifies the setting, for each of the border routers, that DNS replies to a DNS request from the target are excluded from discarding.

Abstract: Signals may be forwarded to a variety of ports for transmission. The signals may be modulated for transmission. The forwarding of signals to ports may be accomplished by forwarding the signals to one or more signal modulators using a processing unit. The mapping of signals to ports may change responsive to a triggering event.

Abstract: A method for implementing a convergence layer. Data is received on a first communication medium by a first transceiver. Data is transmitted on the first communication medium by the first transceiver. A signal is received. Causing, through the convergence layer, by a control logic in response to the signal, the data received and transmitted on the first communication medium as part of a communication session to be received and transmitted instead by a second transceiver on a second communication medium, wherein the convergence layer is configured to conceal from a routing layer at least one of: information related to the first signal, and information related to the data being received and transmitted on the second communication medium.

Abstract: A method of transmitting includes categorizing a transmission between the first device and a second device as one of a plurality of transmission types, and selecting an air interface from a plurality of air interface candidates in accordance with the transmission as categorized. The method also includes sending the transmission to the second device using the selected air interface.

Abstract: In one embodiment, a method includes receiving a first identifier and a private key after a network device has been included in a data center switch fabric control plane, authenticating the network device based on the private key, sending a second identifier to the network device, and sending a control signal to the network device based on the second identifier. The first identifier is associated with the network device and unique within a segment of the data center switch fabric control plane. The second identifier is unique within the segment of the data center switch fabric control plane.