Abstract: An apparatus receives an upper layer packet that includes data from a source device, a virtual private network (VPN) identification, a destination address, and a destination option type. The apparatus authenticates the upper layer packet by comparing the VPN identification of the received upper layer packet to a customer VPN identification. The apparatus determines whether the apparatus recognizes the destination option type of the upper layer packet. The apparatus discards the upper layer packet on a condition that the apparatus does not recognize the destination option type. The apparatus decapsulates the upper layer packet into a lower layer packet and transmits the decapsulated packet to a destination on a condition that the apparatus recognizes the destination option type.

Abstract: The invention is directed to a computer-implemented system and method for transmitting data from a first node to a second node of a source-selected path routing network. In said system and method according to the present invention, a first data packet is received at the first node, wherein said data packet was sent from a source node according to next-hop routing. Subsequently, at least part of the data contained in the data packet is transmitted from the first node to the second node according to source-selected path routing. Finally, the data received at the second node is transmitted to a destination node according to next-hop routing.

Abstract: A network system comprising a first network element and a second network element. The first network element is programmed to provide the step of first, communicating to the second network element a plurality of configuration parameter sets. Each configuration parameter set corresponds to a respective frame fragment and comprises a parameter value that differs in value from the parameter value in another configuration parameter set in the plurality of configuration parameter sets. The first network element also is programmed to provide the step of second, communicating a frame, to the second network element, in a plurality of frame fragments, wherein each frame fragment in the plurality of frame fragments is communicated according to a respective parameter value in the plurality of configuration parameter sets.

Abstract: A network device (e.g., an evolved Node B (eNB), user equipment (UE) or the like) can operate to reduce an interruption time during a fallback operation resulting from a communication link blockage condition (e.g., a human blockage or other natural/physical wireless blockage). The network device includes a network convergence protocol (NCP) layer that enables communication between other network devices of different radio access technologies (RATs) in a heterogeneous network.

Abstract: The techniques describe example network systems for adaptively determining whether to perform ingress replication or assisted replication of a multicast flow based on classification of the multicast flow. For example, a provider edge (PE) device of a plurality of PE devices participating in an EVPN comprises one or more processors operably coupled to a memory, wherein the one or more processors are configured to: receive a multicast traffic flow, determine a classification of the multicast traffic flow, and perform, based at least in part on the classification of the multicast traffic flow, one of: ingress replication of the multicast traffic flow or assisted replication of the multicast traffic flow.

Abstract: Introduced herein is a routing technique that, for example, routes a transaction to a destination port over a network that supports link aggregation and multi-port connection. In one embodiment, two tables that can be searched based on the target and supplemental routing IDs of the transaction are utilized to route the transaction to the proper port of the destination endpoint. In an embodiment, the first table provides a list of available ports at each hop/route point that can route the transaction to the destination endpoint, and the second table provides a supplemental routing ID that can select a specific group of ports from the first table that can correctly route the transaction to the proper port.

Abstract: A vehicle includes a controller, programmed to, send a vehicle status report reflecting current status of the vehicle to a server; responsive to receiving a connection message from the server indicative of a predicted data transaction, wirelessly connect to a fleet vehicle using the connection message; and transmit a data block defined in the connection message to the fleet vehicle.

Abstract: Systems and devices can include a first port of a first device coupled to a second port of a second device across a multi-lane link. The first port can augment a data block with error correcting code by distributing error correcting code evenly across each lane of the data block, wherein each lane of the data block includes a same number of error correcting code. The first port can transmit the data block with the per-lane error correcting code to the second port across the multi-lane link. The second port can determine error correcting code based on the error correcting code bits received in the data block, and perform error correction on the symbols of the data block based on the error correcting code received.

Abstract: A method for enabling traffic acceleration in a mobile telecommunication network. The method includes the steps of receiving, at a Radio Network Node, a reply message from a content delivery provider located outside the mobile telecommunication network; intercepting the reply message; extracting a token from the reply message; comparing the token with a stored token in the Radio Network Node; replacing in the reply message, an Internet protocol IP address of a content delivery provider server with a preset IP address corresponding to an acceleration edge server in the mobile network, when there is a match between the token and the stored token; and sending from the Radio Network Node the modified reply message to a mobile terminal.

Abstract: The present disclosure provides a method of distributing flow on a 4G network, which is applied to a distribution device. The method includes: monitoring a GTPv2 signalling packet communicated between a mobile management entity (MME) and a serving gateway (SGW); obtaining a data plane tunnel identifier and a user phone number, which are carried in the monitored GTPv2 signalling packet and indicate a same user equipment (UE), and establishing association relationship between the data plane tunnel identifier and the user phone number; obtaining a target data plane tunnel identifier carried in a received data packet; and determining a target user phone number associated with the target data plane tunnel identifier based on the association relationship, and distributing the data packet based on the target user phone number.

Abstract: Aspects of the present disclosure disclose provide systems and methods for performing session maturity modeling and tracking to aid in the identification of network traffic that should and/or should not be subjected to DOS mitigation mechanisms. More specifically, based on a maturity status of identification information associated with a communication, a communication may bypass high traffic mitigation mechanisms such as packet rate and connection rate limitations.

Abstract: A network element includes multiple ports and forwarding circuitry. The ports are configured to serve as network interfaces for exchanging packets with a communication network. The forwarding circuitry is configured to receive a multicast packet that is to be forwarded via a plurality of the ports over a plurality of paths through the communication network to a plurality of destinations, to identify a path having a highest latency among the multiple paths over which the multicast packet is to be forwarded, to forward the multicast packet to one or more of the paths other than the identified path, using a normal scheduling process having a first forwarding latency, and to forward the multicast packet to at least the identified path, using an accelerated scheduling process having a second forwarding latency, smaller than the first forwarding latency.

Abstract: [Problem] To achieve a voice communication system which communicates between two networks that use partially overlapping address spaces. [Solution] According to the present invention, first and second networks are connected to one another by means of a gateway device provided with: a first protocol stack which manages transmission and reception addresses of communication packets in the first network; a second protocol stack which manages transmission and reception addresses of communication packets in the second network; and a call control unit which, upon reception of a communication packet from either network, determines the transfer destination network and transfer destination address of the packet on the basis of call destination information included in the packet.

Abstract: A method for performing data-compression management in a storage server may include: receiving data from a host device; performing entropy detection on a plurality of sets of partial data to generate entropy detection values of the plurality of sets of partial data, respectively; classifying the plurality of sets of partial data according to the entropy detection values of the plurality of sets of partial data, respectively, to perform data compression on at least one portion of the plurality of sets of partial data through a plurality of data compression modules, respectively, wherein the plurality of data compression modules correspond to different compression capabilities, respectively; and storing the plurality of sets of partial data into at least one storage device of the storage server and recording address mapping information of the plurality of sets of partial data, respectively. An associated apparatus is also provided.

Abstract: Systems, methods, and devices of the various embodiments may enable distributed prefix signing by publishing a public key in a Domain Name System (DNS) text record, using a private origination key to generate a signature for a new prefix announcement, including the signature in a transitive Border Gateway Protocol (BGP) attribute of the new prefix announcement, and sending the new prefix announcement to peer components. The peer components may query an address and routing parameter area (ARPA) record to obtain nameserver information for an entity associated with the received prefix announcement in response to determining that the received prefix announcement includes a transitive BGP attribute that includes the signature, retrieve a public key from a Domain Name System (DNS) text record, and determine whether the signature included in the transitive BGP attribute of the received prefix announcement is valid based on the public key retrieved from the DNS text record.

Abstract: The disclosure herein describes a method and a system for message based communication and failure recovery for FPGA middleware framework. A combination of FPGA and middleware framework provides a high throughput, low latency messaging and can reduce development time as most of the components can be re-used. Further the message based communication architecture built on a FPGA framework performs middleware activities that would enable reliable communication using TCP/UDP between different platforms regardless of their deployment. The proposed FPGA middleware framework provides for reliable communication of UDP based on TCP as well as failure recovery with minimum latency during a failover of an active FPGA framework during its operation, by using a passive FPGA in real-time and dynamic synchronization with the active FPGA.

Abstract: Embodiments of the present invention are directed to generating augmented process models for use in process analytics. In one embodiment, a process model, search indicators, composite attributes, and relationship indicators are received. The process model defines a process and includes a plurality of components of the process. Search indicators indicate a search that, when executed, provides data related to the corresponding component. Composite attributes indicate data to be captured by machine data searches associated with the corresponding component. Relationship indicators indicate relationships between components of the process. An augmented process model is generated based on the process model, the search indicators, the composite attributes, and the relationship indicators, wherein the augmented process model is used to manage process instances associated with the process.

Abstract: A system to analyze and improve network traffic latency in networks including at least one IP Anycast network, based on first derivative graphs generated from directed acyclic graphs generated at periodic intervals for end user devices and network servers. The first derivative graphs are reduced to a best-performance path and applied to make application-specific data routing changes in the network.

Abstract: A serial transmission fan control device comprises a master controller, a first fan controller, and a second controller. The master controller generates a serial control data, wherein the serial control data comprises a plurality of packets concatenated in an order and each of the plurality of packets comprises a control parameter set of a fan. The first fan controller electrically connects to the master controller, receives the serial control data, extracts a packet from the plurality of packets of the serial control data, and sends a first downlink serial data, wherein the first downlink data comprises all of the plurality of packets of the serial control data except for the extracted packet. The second fan controller electrically connects to the first fan controller, receives the first downlink serial data, and extracts a packet from the packets of the first downlink serial data.

Abstract: Memory management in communication networks is disclosed. The method includes generating a memory allocation trigger for an event based on an event type and estimating a memory size required by the event based on the event type of a user service and at least one configuration parameter. The event type includes a new user service request, a modified user service request, or a network event. The method includes allocating a memory section to the event based on the estimated memory size for the event of the user service and availability of memory blocks in a memory pool, the memory section comprises at least one memory block. The method includes verifying performance of the communication network. Verifying further includes receiving performance feedback for the communication network in response to allocating the memory section for the user service and modifying at least one of the set of configuration parameters.

Abstract: A method distributes data in a communication system which has a group of metering units arranged in each case to measure the consumption of a delivered supply medium, and a data collector. Each metering unit has a communication module, a frequency reference device, and a processor to operate the metering unit on the basis of the data. The metering units and the data collector are arranged in a communication network, wherein the data are transmitted by the data collector via the communication system within a session, common to the group of metering unit. A synchronization sequence common to the metering units is transmitted within the common session and the synchronization sequence is dimensioned in such a way that the frequency reference device of each metering unit in the group of metering units is synchronized with the transmitted synchronization sequence within a session.

Abstract: An interface between a vehicle control system and a communication system is provided. The interface comprises an input configured to receive data from at least one of the vehicle control system and the communication system. The interface comprises a conversion layer configured to translate the received data into a format that is comprehensible to the other of the vehicle control system and the communication system. The interface also comprises an output configured to output the translated data to the other of the vehicle control system and the communication system. This enables both the vehicle control system and communication system to understand the other while still retaining their individual autonomy.

Abstract: Methods and devices for providing routing path and transit delay time data to a device running traceroute on an IP network comprising routing tunnels are described herein. In examples, a tunnel entrance device may copy a hop limit value associated with a traceroute probe into a hop limit field of a tunneled IP header. In other examples, the tunnel entrance device may perform address spoofing to generate an error message with a source address corresponding to an intermediate device disposed within a routing tunnel. In this way, a device executing traceroute may be able to receive network addresses corresponding to intermediate devices in a routing tunnel in order to perform network diagnostics, construct routing tables, determine more efficient routing paths, and so on.

Abstract: Aspects of the subject disclosure may include, for example, different groups of network devices mounted on utility poles. The different groups of network devices can be arranged along different paths. A communication path for transmitting wireless signals can alternate between the different groups of network devices. Other embodiments are disclosed.

Abstract: Systems, methods, and computer-readable storage media for measuring one-way delay in multi-access networks (MAMS) are provided. Other embodiments may be described and/or claimed.

Abstract: In one embodiment, an input/output port includes a stateful transmit port having: a history storage to store a value corresponding to a transmit on change field of a prior data packet; a comparator to compare a transmit on change field of the data packet to the value stored in the history storage; and a selection circuit to output the data packet without the transmit on change field when the transmit on change field of the data packet matches the value. Other embodiments are described and claimed.

Abstract: Described is a system for selecting measurement nodes in a distributed physical system of agents. In operation, the distributed physical system is represented as a multi-layer network having a communication layer and an agent layer. The communication layer represents the amount of collective communication activities between any pair of areas and the agent layer represents movement of agents within the distributed physical system such that the communication layer and agent layer collectively generate network dynamics. The network dynamics are modeled as hybrid partial differential equations (PDEs) with measurable interconnected states in the communication layer. Notably, placement of a minimum set of measurement nodes is determined within the distributed physical system to provide full-state observability of the distributed physical system. The system can then track the full system state and apply compensation to one or more agents in the distributed physical system based on tracking the full system state.

Abstract: A traffic controller device for distributing or otherwise controlling the distribution of routing information may be included in a telecommunications network. The traffic controller may receive routing tables from a plurality of network devices, such as one or more provider edge devices of the network. The traffic controller, upon receiving the routing information from the provider edge devices, may generate a routing table associated with each device providing the routing information. The traffic controller may also provide updates to one or more of the networking devices associated with the controller. The traffic controller may alter or update, at the traffic controller, the routing table associated with the target provider edge device based on the network policy. The routing information in the routing table for that device and maintained by the traffic controller may be updated with a new route or new local preferred parameter value.

Abstract: Technologies for flow rule aware exact match cache compression include multiple computing devices in communication over a network. A computing device reads a network packet from a network port and extracts one or more key fields from the packet to generate a lookup key. The key fields are identified by a key field specification of an exact match flow cache. The computing device may dynamically configure the key field specification based on an active flow rule set. The computing device may compress the key field specification to match a union of non-wildcard fields of the active flow rule set. The computing device may expand the key field specification in response to insertion of a new flow rule. The computing device looks up the lookup key in the exact match flow cache and, if a match is found, applies the corresponding action. Other embodiments are described and claimed.

Abstract: Deduplication functionality is provided for a key-value solid-state drive (KVSSD) that includes a storage space and a controller. The storage space contains first and second containers. The first container includes a first virtual space and stores a key and at least one dedup key associated with the key. Each dedup key corresponds to a block of user data, and each block includes a predetermined size. The second container includes a second virtual space and stores each dedup key, the block of user data associated with the dedup key and metadata associated with the block of user data. The controller determines whether a block of user data received by the KVSSD is a duplicate block of data stored in the second container by determining whether a dedup key for the received block of user data matches a stored dedup key in the first container.

Abstract: A computer-implemented method for transferring a reserve to a target host, according to one embodiment, includes granting to a source system, by a control unit, a reserve for a volume of a storage device. A push reserve command is received from the source system. The push reserve command specifies: a transfer of the reserve to a target system, parameter data identifying the target system, and path information specifying the source system. The reserve is transferred only to the target system in response to release of the reserve by the source system.

Abstract: A DNS resolution request for a hostname of a CDN is received. An edge server of the CDN may be identified, which may be associated with a subnet. The subnet is used to generate a response IP address, where the remaining bits of the response IP address may be used to store requestor information (e.g., a requestor IP address). When a client computing device uses the response IP address to access the edge server, requestor information is extracted and associated with client computing device information (e.g., an IP address and/or location, etc.) in an association record. Association records may be used to determine predicted characteristics for devices served by a requestor. When the authoritative DNS server resolves a request from the requestor, such predicted characteristics may be used rather than relying solely on information about a requestor. Thus, an edge server proximate to the predicted location may be returned instead.

Abstract: An apparatus is provided for transmitting multimedia content. The apparatus includes a communication interface and a controller coupled to the communication interface. The controller is configured to identify a packet including a packet header and a packet payload. The packet payload includes an access unit including media data related to the multimedia content and information related to the access unit. The controller is also configured to identify control information for delivery and consumption of the multimedia content, and transmit the identified packet and the identified control information. The information related to the access unit includes information on a sequence number of the access unit.

Abstract: Example methods and systems are provided for location-aware service request handling. The method may comprise: generating and sending location information associated with virtualized computing instance to a service node or a management entity for transmission to the service node. The location information may identify logical element(s) to which the virtualized computing instance is connected. The method may further comprise: in response to detecting, from the virtualized computing instance, a service request for a service from the service node, generating a modified service request by modifying the service request to include the location information associated with the virtualized computing instance; and sending the modified service request towards the service node.

Abstract: A non-transitory computer-readable recording medium stores therein a program that causes a computer to execute a process, the process comprising: acquiring update information of forwarding tables and event logs for respective relay devices at predetermined intervals; performing consistency determination of determining consistency of the forwarding tables when update completion of the forwarding tables have been confirmed for all of the relay devices; when a first relay device is determined to have a problem in consistency, associating the problem with an event log, among the event logs of the first relay device, corresponding to a time when update information of a first forwarding table of the first relay device is acquired; and outputting information including the first relay device and the event log associated with the problem.

Abstract: An apparatus for receiving a broadcast signal, includes a receiver configured to receive the broadcast signal, a parser configured to parse signaling information for a service scan included in the broadcast signal, a link layer processor configured to process a link layer packet included in the broadcast signal, and an audio/video (A/V) processor configured to present broadcast contents based on the signaling information for the service scan and the link layer packet.

Abstract: Methods of scheduling resources, distributed access gateway devices and machine-readable storage devices are provided in examples of the present disclosure. In one aspect, a first service board on a distributed access gateway device creates a first software user entry corresponding to a first user on a data plane, determines whether there is an idle hardware resource on the first service board, obtains a slot ID of a second service board comprising an idle hardware resource on the data plane when determining that there is no idle hardware resource on the first service board, and sends the first software user entry to the second service board according to the slot ID of the second service board on the data plane such that the second service board creates a first hardware user entry corresponding to the first user on a data plane of the second service board.

Abstract: A system and method for intercepting intra-network traffic for smart appliance behavior analysis. A network traffic hub is configured to intercept network traffic between a switch and a router. A smart appliance sends a message to the router, such as a DHCP request when the smart appliance joins the network. The router sends a response to the smart appliance. The network traffic hub intercepts and modifies the response to instruct the smart appliance to send all future intra-network traffic through the network traffic hub and the router. In some embodiments, the network traffic hub alters a network mask in the response message to instruct the smart appliance to send traffic through the network traffic hub. The network traffic hub then extracts data from the network traffic and uses that data for behavior analysis of smart appliances.

Abstract: A node in a Segment Routing network includes a plurality of ports and a switching fabric between the plurality of ports, wherein, for an Ethernet Virtual Private Network (EVPN)-Virtual Private Local Area Network Service (VPLS), a port is configured to transmit a packet with a plurality of Segment Identifiers (SID) including a destination SID that identifies a destination node of the packet, a service SID that identifies an EVPN Instance (EVI), and a source SID that identifies one of the node and an Ethernet Segment (ES) that includes the node. The port can be further configured to receive a second packet with a second plurality of SIDs, and learn a Media Access Control (MAC) address based on a second service SID and a second source SID, of the second packet.

Abstract: A network security device has a local area network (LAN) interface and a wide area network (WAN) interface, with a capability to route packets of a network connection along a fast path that bypasses a network stack of an operating system of the network security device. A packet of a network connection that is received at the LAN interface is routed to a virtual network interface. A packet inspector reads the packet from the virtual network interface, inspects the packet, and writes the packet back to the virtual network interface after inspection. The packet is routed from the virtual network interface to the WAN interface, and exits the WAN interface towards the destination network address of the packet. After inspecting one or more packets of the network connection, subsequently received packets of the network connection are routed along the fast path.

Abstract: A network switch using a search engine to generate chained table lookup requests. After the search engine executes a first lookup, the next-pass logic in the search engine uses the first lookup result and information in the master key to generate a second lookup key as well as other parts of a second lookup request. A next-pass crossbar routes the second lookup request to a target memory, and the search logic executes the second lookup. The first lookup request may originate from a processing engine coupled to the search engine. The first and the second lookup results, if any, can then be returned back to the processing engine for further processing or decision making. The chain of lookups can be configured by software by specifying various operational parameters of the processing engines and the next-pass logic, including specifying a key construction mode for the second lookup.

Abstract: An indication is received that a first online platform has undergone/is undergoing a first electronic attack made by one or more actors engaged in online malicious actions with the first online platform. Responsive to the indication of the first electronic attack, one or more vulnerability characteristics of the first online platform are determined, where the vulnerability characteristics are associated with the first electronic attack. A plurality of other online platforms are analyzed to identify a second online platform that shares at least one of the vulnerability characteristics with the first online platform. Based on the determining and/or the analyzing, the second online platform is predicted to be a potential target for a second electronic attack having an attack vector in common with the first electronic attack that corresponds to the shared vulnerability characteristics. An action is performed to mitigate potential damage of the second electronic attack.

Abstract: Systems and methods of detecting network traffic tampering by monitoring the network traffic for network packets that arrive outside of an allowable error band and rejecting those packets for which transit times are outside the control limits due to possible tampering are provided.

Abstract: A method for capturing and outputting digital content is herein disclosed and enabled, the output system includes an information apparatus, a server, and a client device. The information apparatus includes at least a digital camera and a wireless communication module (e.g., IEEE 802.11 or Bluetooth). The server is accessible by the client device over a network. The information apparatus, using the digital camera, captures digital content and transmits, over the Internet and using the wireless communication module, the digital content to the server for storage. The server generates output data from at least part of the digital content stored at the server, and provides the generated output data from the server to the client device that has security or authentication information for accessing the server. The client device outputs or plays at least part of the digital content at an output device associated with the client device.

Abstract: A system for transferring a frame within an Ethernet network of a vehicle. The system includes an Ethernet switch, first and second feature modules and a NAM. The Ethernet switch includes first and second ports connected respectively to the first and second feature modules. The NAM: receives a priority request message from the second feature module; generates a priority response message indicating information for the second feature module to set a priority level of a frame; and transmits the priority response message to the second feature module. The Ethernet switch: receives the frame from the second feature module at the first port, where the frame has a first bit indicative of the priority level and a second bit indicative of a port of the first feature module; and forwards the frame, based on the first and second bits, to a corresponding one of the queues having the priority level and for transmission to the port of the first feature module.

Abstract: A port descriptor version of a port descriptor to be obtained is selected. An indication of the port descriptor version is provided in a command to be preceded before another command used to obtain the port descriptor. The other command uses the port descriptor version to obtain the port descriptor. The port descriptor is obtained, and the port descriptor includes information relating to a port to be used in communication within the computing environment.

Abstract: A port descriptor of a selected port descriptor version is obtained. The selected port descriptor version is one port descriptor version of a plurality of port descriptor versions available for selection. The port descriptor of the selected port descriptor version includes information relating to a port of the computing environment and is configured to include technology information indicating whether the port is part of a multiple lane connector packaging. A determination is made using the port descriptor of one or more operational attributes of the port. Action is taken based on the one or more operational attributes of the port.

Abstract: A flow table management system can include a hardware memory module communicatively coupled to a network interface card. The hardware memory module is configured to store a flow table including a plurality of network flow entries. The network interface card further includes a flow table age cache configured to store a set of recently active network flows and a flow table management module configured to manage a duration for which respective network flow entries in the flow table stored in the hardware memory module remain in the flow table using the flow table age cache. In some implementations, age information about each respective flow in the flow table is stored in the hardware memory module in an age state table that is separate from the flow table.

Abstract: The present invention discloses an external terminal protection device for data flow control and a corresponding protection system. The external terminal protection device includes: an interface control module, used for providing a plurality of data interfaces respectively connected to a protected host and one or more external devices; and a system control module, used for monitoring in real time a data transmission state of each data interface in the interface control module, and controlling the data flow of each data interface. The present invention realizes the functions of performing protocol filtering and auditing on various types of data flow without installing flow monitoring and security protection software on the protected host, and achieves the effects of low-latency network auditing and high-reliability protocol filtering, thereby comprehensively eliminating potential security hazards such as Trojan Horse virus implantation and flow anomaly that may be generated by the interfaces.

Abstract: A fiber optic-based communications network includes: a power insertion device, connected to multiple fiber links from a data source, configured to provide power insertion to a hybrid fiber/power cable connected to at least one fiber link of the multiple fiber links; the hybrid fiber/power cable, connecting the power insertion device to a connection interface device, configured to transmit data and power from the power insertion device to the connection interface device; and the connection interface device, configured to provide an interface for connection to an end device via a power over Ethernet (PoE)-compatible connection and to provide optical to electrical media conversion for data transmitted from the power insertion device to an end device via the hybrid fiber/power cable and the PoE-compatible connection.