Abstract: A system provides cryptographic means for securing the transmission of health data from devices of varying processing power and over various network protocols. The system is configured to transmit and receive packets to and from a remote patient monitoring device over multiple types of communication sessions. The system authenticates at least some of the data packet payloads and headers using multiple message authentication codes. The system can, for one type of communication session, the simulate or intercept acknowledgement packets generated for use with another type of communication session.

Abstract: A method and apparatus for partitioning memory bandwidth of a system determines state combinations of techniques for partitioning the memory bandwidth of the system based on at least one application program executed on cores of the system, determines candidate state combinations corresponding to characteristics of the application program, among the state combinations, by profiling the application program based on the state combinations, selects a final state combination for the application program by exploring a state space of the system corresponding to the candidate state combinations, and partitions the memory bandwidth of the system based on the final state combination.

Abstract: A user datagram protocol (UDP) is a well-known protocol for transferring data between two nodes of a network. When data is too large to fit within a single UDP packet that can be transmitted between the two nodes, the data needs to be segmented and transmitted with multiple packets and reassembled on the receiving node. Techniques are disclosed herein, for example, for offloading such segmentation, transmission, and reassembly from the central processing units (CPUs) of the nodes. Such offloading is performed efficiently, for example, by repurposing legacy protocol fields used in UDP transmission such as the internet protocol (IP) identification (ID), time to live (TTL), type of service (TOS), and/or EtherType fields to encode information needed for efficient segmentation, out of order reception, and reassembly.

Abstract: Techniques in advanced deep learning provide improvements in one or more of accuracy, performance, and energy efficiency. An array of processing elements performs flow-based computations on wavelets of data. Each processing element has a compute element and a routing element. Each router enables communication via wavelets with at least nearest neighbors in a 2D mesh. Routing is controlled by virtual channel specifiers in each wavelet and routing configuration information in each router. Execution of an activate instruction or completion of a fabric vector operation activates one of the virtual channels. A virtual channel is selected from a pool comprising previously activated virtual channels and virtual channels associated with previously received wavelets. A task corresponding to the selected virtual channel is activated by executing instructions corresponding to the selected virtual channel.

Abstract: The present disclosure relates to systems and methods of implementing rate limiting in a representational state transfer (REST) application programming interface (API) system. A method of operating an instance of a REST API server, includes: receiving a REST API request that matches a rate limit rule associated with the instance of the REST API server; preparing a REST API response that includes rate limiting response headers. The method includes determining whether a rate limit violation exists that corresponds to the rate limit rule and, when it does, adding an error message to the REST API response. Otherwise, the REST API request is fulfilled and corresponding data is added to the REST API response. The method includes sending the REST API response including the rate limiting response headers and either the error message or the corresponding data.

Abstract: Methods and systems for supporting efficient load balancing among a plurality of switches and a plurality of end nodes arranged in a tree topology in a network environment. The methods and systems can sort the plurality of end nodes, wherein the plurality of end nodes are sorted in a decreasing order of a receive weight. The method and system may further route, in the decreasing order of receive weights, the plurality of end nodes, wherein the routing comprises selecting at least one down-going port and at least one up-going port. Further, the method and system can increase an accumulated downward weight on each selected down-going port by the receive weight of the routed end node, and increase an accumulated upward weight on each selected up-going port by the receive weight of the routed end node.

Abstract: The embodiments relate to a method and a routing device. The method comprises introducing a logical hierarchy by defining a plurality of transit layers wherein to each transit layer a transit layer address is assigned and a transit router and wherein each transit router has a unique network address; the layers are organized in a descending order of subnet masks; for each interface between a router and said transit routers, defining, in a routing table of said router, a static route based on the transit layer address and the subnet mask of the transit router interfacing with the router; and if a connection that carries traffic between the router and any of the transit routers fails, selecting a static route in said routing table as a redundant route for carrying said traffic towards its destination.

Abstract: Disclosed herein are methods, systems, and apparatus, including computer programs encoded on computer storage media, for processing blockchain data under a trusted execution environment (TEE). One of the methods includes receiving, by a blockchain node, a request to execute one or more software instructions in a TEE executing on the blockchain node; determining, by a virtual machine in the TEE, data associated with one or more blockchain accounts to execute the one or more software instructions based on the request; traversing, by the virtual machine, a global state of a blockchain stored in the TEE to locate the data; and executing, by the virtual machine, the one or more software instructions based on the data.

Abstract: Methods and systems for caching and delivering data contents among peer nodes in a decentralized data delivery edge network are disclosed. The network comprises peer-to-peer (P2P) connections implemented on top of a content delivery network (CDN) having CDN servers that provide data resources to network nodes. Such a hybrid network comprises viewer peer nodes, edge cacher peer nodes, tracker servers, and a payment service module. An edge cacher peer node sends its client statistics to a tracker server, wherein the client statistics comprises a cacher location and a performance specification. In return, the tracker server provides caching instructions according to which the edge cacher peer node downloads fragments of a data file from a CDN server, for later transmission to other viewer peer nodes within the decentralized data delivery edge network.

Abstract: A method, system, and computer program product for initiating actions among devices are described. A relative position of at least one device to at least one other device is determined, and one or more rules specifying at least one action to initiate based at least in part on the relative position of the at least one device to the at least one other device are obtained. The one or more rules can differ based on the relative position of the devices. The at least one action is initiated using a processor of the at least one device.

Abstract: A camera detects devices, such as other cameras, smart devices, and access points, with which the camera may communicate. The camera may alternate between operating as a wireless station and a wireless access point. The camera may connect to and receive credentials from a device for another device to which it is not connected. In one embodiment, the camera is configured to operate as a wireless access point, and is configured to receive credentials from a smart device operating as a wireless station. The camera may then transfer the credentials to additional cameras, each configured to operate as wireless stations. The camera and additional cameras may connect to a smart device directly or indirectly (for instance, through an access point), and the smart device may change the camera mode of the cameras. The initial modes of the cameras may be preserved and restored by the smart device upon disconnection.

Abstract: An example controller may include processing circuitry and memory including instructions that when executed by the processing circuitry cause the processing circuitry to circuitry cause the processing circuitry to receive a dynamic host configuration protocol (DHCP) configuration from a management server; determine, based on the DHCP configuration, a network device communicatively coupled to the controller, identify an action to be performed by the network device to accommodate the DHCP configuration; and transmit a message to the determined network device indicating the DHCP configuration and the determined action, wherein the network device performs the determined action in response to the receipt of the message.

Abstract: A packet sending method includes obtaining, by a client device, an Internet Protocol (IP) anycast address of the anycast server cluster and an IP unicast address of the target server, generating, by the client device, an IP detection packet, where the IP detection packet is used to detect whether the target server is reachable based on the IP anycast address, and the IP detection packet includes the IP anycast address and the IP unicast address of the target server, and instructs the target server to replace the IP unicast address of the target server with the IP anycast address, and sending, by the client device, the IP detection packet to the target server.

Abstract: In an approach to managing transmission frequency for a plurality of edge devices of an interconnected distributed network, one or more computer processors determine a maximum writing frequency, MWF, for the interconnected distributed network; iteratively process values of data flow writing frequency, DFWF, for a plurality of edge devices of an interconnected distributed network in accordance with an optimization algorithm based on the MWF to identify a convergence in the values of DFWF, wherein each iteration of processing values comprises, at each edge device in the plurality of edge devices, determine a value of DFWF based on an associated utility function of the respective edge device, wherein the utility function is a measure of utility of the device as a function of DFWF; responsive to identifying convergence, determine the converged values of DFWF to be optimal values of DFWF for the plurality of edge devices.

Abstract: A SDN orchestration method includes: obtaining a first request for creating a first logical switch; creating a control plane instance of the first logical switch, and sending first configuration information to instruct the first forwarding device to configure the data plane instance of the first logical switch; obtaining a second request for connecting the first logical switch to a first logical router; sending second configuration information to instruct the first forwarding device to configure a first port of the data plane instance of the first logical switch to be communicatively connected to a second port of a data plane instance of the first logical router on the second forwarding device configured with the data plane instance of the first logical router; and sending third configuration information to instruct the second forwarding device to configure the second port to be communicatively connected to the first port.

Abstract: An apparatus including a storage medium and a controller is provided. The storage medium stores a mapping of stream Identifiers (IDs) to Virtual Local Area Network (VLAN) tags. The controller is coupled to the storage medium and configured to route a packet for a Time-Sensitive Networking (TSN) network according to the mapping. The routing of the packet includes replacing a VLAN tag in the packet according to the stream ID of the packet and the mapping, so as to maintain the real-time deterministic behavior of delivering data streams in the TSN network.

Abstract: Media content is paired with context-relevant supplemental content, and the media and supplemental content are provided to a user. A media stream containing the media content may be received from a source system, and context information about the media content is determined from information about the media stream. The supplemental content may be selected based on the determined context information. This may enable a business model in which third parties can register advertising or other supplemental content and specify the criteria that cause it to be combined with the media content.

Abstract: A communication system includes a first node to forward a received packet according to a path identifier included in an additional header, which corresponds to a forwarding path of the received packet, a second node placed in an edge of network, configured of the first node, and to process the received packet according to a packet processing rule, and a controller to send, to the second node, the packet handling rule which indicates to add the additional header to the received packet, wherein the second node requests the packet processing rule to the controller when the packet processing rule for the received packet is not set in the second node.

Abstract: The present technology includes a reception apparatus, including reception circuitry and processing circuitry. The reception circuitry is configured to receive a broadcast wave of digital broadcasting using an IP (Internet Protocol) transmission system. The processing circuitry is configured to perform filtering processing on a packet by using filtering information provided in a header of the packet. The packet is transmitted via the broadcast wave and carries low layer signaling (LLS) information in a payload of the packet.

Abstract: Methods and apparatus for supporting active link status during LAN interface reset and reconfigurations. Under one aspect, during normal operations traffic is transmitted over an Ethernet link coupling a first link partner to a second link partner. In response to a network interface re-configuration event, transmission of traffic over the Ethernet link is paused while keeping the Physical layer (PHY) of the Ethernet link active. The configuration of the first link partner is updated while the transmission of traffic is paused and the PHY of the Ethernet link is active. Upon completion of the configuration update, the link partners resume transmission of traffic over the Ethernet link. Additional schemes are provided that support re-configuration of network interfaces that support link and per priority flow control.

Abstract: A method includes: continuously receiving a first upstream data packet and a second upstream data packet that are sent by an upstream node; copying the first upstream data packet, converting, based on an established connection mapping table, a first packet in two packets obtained through copying, sending a first downstream data packet obtained through conversion to a downstream node or a user terminal, and performing control management on a second packet obtained by copying the first upstream data packet; and copying the second upstream data packet, converting, based on the connection mapping table, a first packet in two packets obtained through copying, sending a second downstream data packet obtained through conversion to the downstream node or the user terminal, and performing control management on a second packet obtained by copying the second upstream data packet.

Abstract: A ring node N belonging to a resilient MPLS ring (RMR) provisions and/or configures clockwise (CW) and anti-clockwise (AC) paths on the RMR by: (a) configuring two ring node segment identifiers (Ring-SIDs) on the ring node, wherein a first of the two Ring-SIDs (CW-Ring-SID) is to reach N in a clockwise direction on the ring and a second of the two Ring-SIDs (AC-Ring-SID) is to reach N in an anti-clockwise direction on the ring, and wherein the CW-Ring-SID and AC-Ring-SID are unique within a source packet routing in networking (SPRING) domain including the ring; (b) generating a message including the ring node's CW-Ring-SID and AC-Ring-SID; and (c) advertising the message, via an interior gateway protocol, for receipt by other ring nodes belonging to the ring such that (1) a clockwise multipoint-to-point path (CWP) is defined such that every other one of the ring nodes belonging to the ring can be an ingress for the CWP and such that only the node is an egress for the CWP, and (2) an anti-clockwise multipoint-

Abstract: A remote technical support system includes an edge device that operates as a highly secured conduit for a technician to view, access, and control a target device via a secure protocol over a connection medium between the edge device and the target device. The edge device's architecture allows it to selectively present numerous peripheral devices to the target device. The architectural components of the edge device can be controlled by a technician through a secure connection with a trusted server which allows authorized to access the edge device. The edge device also relays technician commands to and obtains diagnostic information from the target device and communicates feedback to the technician over the secure connection. The commands may be relayed to the target via the one or more selectively connected USB peripherals.

Abstract: A method for implementing a residential gateway service function, and a server are disclosed. The method may include: receiving, by a server, a data packet forwarded by a residential gateway (RGW) or a network side; identifying, by the server, a service type of the data packet according to information carried in the data packet; and providing, by the server, based on the service type of the data packet, a virtual residential gateway service for a user terminal connected to the RGW.

Abstract: Example methods are provided for a first host to maintain data-plane connectivity with a second host via a third host in a virtualized computing environment. The method may comprise identifying an intermediate host, being the third host, having data-plane connectivity with both the first host and the second host. The method may also comprise: in response to detecting, from a first virtualized computing instance supported by the first host, an egress packet that includes an inner header addressed to a second virtualized computing instance supported by the second host, generating an encapsulated packet by encapsulating the egress packet with an outer header that is addressed from the first host to the third host instead of the second host; and sending the encapsulated packet to the third host for subsequent forwarding to the second host.

Abstract: A system includes a power sourcing equipment (PSE) unit. The PSE unit includes a plurality of network ports. The PSE unit also includes a PSE board coupled to the plurality of network ports and configured to provide power to a plurality of powered devices (PDs) external to the PSE unit via respective network ports. The PSE unit also includes a sensing circuit configured to determine a power consumption parameter for the PSE board. The PSE unit also includes a controller configured to change a power state for at least one of the plurality of network ports based at least in part on the power consumption parameter.

Abstract: In one embodiment, load balancing criteria and an indication of a plurality of network nodes is received. A plurality of forwarding entries are created based on the load balancing criteria and the indication of the plurality of nodes. A content addressable memory of a network element is programmed with the plurality of forwarding entries. The network element selectively load balances network traffic by applying the plurality of forwarding entries to the network traffic, wherein network traffic meeting the load balancing criteria is load balanced among the plurality of network nodes.

Abstract: A method, a device, and a non-transitory computer-readable storage medium are described in which a traffic flow control service is provided. The traffic flow control service provides that a wireless station of a wireless access network stores radio coverage information relating to communication links established with end devices. During various network procedures that establish or migrate a traffic flow session with an end device, the wireless station receives a profile from a policy control device. The profile includes radio coverage information and traffic flow parameters and values that correlate to the radio coverage information. The wireless station compares the stored radio coverage information with the radio coverage information in the profile, and selects the best match. The wireless station uses the traffic flow parameters and values to enforce a traffic flow relating to the end device.

Abstract: To provide a trusted, secure, and immutable record of transactions within a process plant, techniques are described for utilizing a distributed ledger in process control systems. The distributed ledger may be maintained by nodes which receive transactions broadcasted from field devices, controllers, operator workstations, or other devices operating within the process plant. The transactions may include process plant data, such as process parameter data, product parameter data, configuration data, user interaction data, maintenance data, commissioning data, plant network data, and product tracking data. The distributed ledgers may also be utilized to execute smart contracts to allow machines such as field devices to transact by themselves without human intervention. In this manner, recorded process parameter values and product parameter values may be retrieved to verify the quality of products.

Abstract: The method of some embodiments synchronizes NAT records between an active gateway and a standby gateway. The active gateway encodes a NAT record that includes at least an external source IP address. The encoded NAT record does not include the external source IP address but does include an identifier that uniquely specifies the external source IP address. The active gateway sends the encoded NAT record to the standby gateway.

Abstract: Examples disclosed herein relate to a method comprising receiving a bidirectional forwarding detection (BFD) packet originating from a first network device, wherein the first linked network device and a second linked network device are part of a link aggregation group running a BFD session. The method may include transmitting, from the first linked network device, a BFD synchronization packet to the second linked network device and receiving, at the second linked network device, the BFD synchronization packet, wherein a time-to-live (TTL) value of the BFD synchronization packet is lower than a BFD TTL supported by the BFD session. The method may also include determining that the BFD synchronization packet is a BFD single-hop packet coming from a VLANs using the active forwarding mode and determining not to discard the BFD synchronization packet.

Abstract: Forwarding of network data received in a switch includes identifying forwarding information from mapping tables stored in the switch. The mapping tables can be indexed using information in the received network data identify the forwarding information, including using at least an identifier of the ingress port of the switch on which the network data was received.

Abstract: A device may receive, from a provider edge device, a packet to be provided to one or more other provider edge devices. Some of the one or more other provider edge devices may be multi-homed with a same customer edge device as the provider edge device. The device may configure a source IP address of the packet based on a capability of an assisted replicator device after receiving the packet. The capability may relate to whether the assisted replicator device is capable of retaining the source IP address of the packet as received from the provider edge device. The device may provide the packet to at least some provider edge devices, of the one or more other provider edge devices, after configuring the source IP address of the packet.

Abstract: A control device that controls a transfer device, includes a memory and a processor coupled to the memory and configured to evaluate, for each of a plurality of processing rules to be used to process a packet in the transfer device, a processing load caused upon identification of a packet matching the processing rule, based on the type of an application requirement identifying the packet to which the processing rule is applied, generate, as a table to be used by the transfer device, a rule table storing the plurality of processing rules in order from the lowest processing load to the highest processing load, and transmit, to the transfer device, a control packet to request the transfer device to set the rule table.

Abstract: A request to establish a tunnel over a layer three network connection may be received by a proxy device. The tunnel may then be established by the proxy device. Device information and wireless network information from a mobile device may be received over the tunnel. Responsive to receipt of the device information and the wireless network information, source and destination addresses may be assigned to the mobile device. The source and destination addresses may correspond to the device information and the wireless network information. Internet protocol (IP) packets may be received, via the tunnel, from the mobile device. Layer two frames may be generated utilizing the assigned source and destination addresses. The layer two frames may encapsulate each of the IP packets. The layer two frames may be transmitted to a layer two service function chain (SFC) infrastructure.

Abstract: Computer systems and methods for verifying a route taken by a communication are disclosed. In one implementation, a device for verifying a route taken by a communication may include one or more processors configured to obtain a communication transmitted by a source entity. The communication may include data and digital signatures, and each of the digital signatures may be generated based on at least the data. Further, the digital signatures may include a digital signature associated with the source entity, and a set of digital signatures associated with at least a subset of intermediate entities on a route taken by the communication. The one or more processors may be further configured to verify the digital signatures included in the communication, verify whether the entities associated with the digital signatures form an expected route for the communication, and process the data.

Abstract: Biometric authentication, decentralized learning frameworks, and adaptive security protocols and services for a network of distributed terminals are described. In some embodiments, the terminals may be hardware terminals, kiosks, or clients. In some embodiments, a security analysis may be performed, and security scores may be determined, for visitors requesting operations at terminals. Security scores may be determined by a vendor, in communication with the operator terminals, based on aggregation of a plurality of factors, wherein each factor may be weighted. The factors may incorporate operator settings or preferences. In one embodiment, the factors include one or more facial recognition factors. The one or more facial recognition factors may be used for biometric authentication. The vendor may use the security scores to determine user privileges or permissions for the operations. The vendor may deliver instructions or messages to the terminals based on the determinations.

Abstract: Example systems, apparatus, and methods receive audio information including a plurality of frames from a source device, wherein each frame of the plurality of frames includes one or more audio samples and a time stamp indicating when to play the one or more audio samples of the respective frame. In an example, the time stamp is updated for each of the plurality of frames using a time differential value determined between clock information received from the source device and clock information associated with the device. The updated time stamp is stored for each of the plurality of frames, and the audio information is output based on the plurality of frames and associated updated time stamps. A number of samples per frame to be output is adjusted based on a comparison between the updated time stamp for the frame and a predicted time value for play back of the frame.

Abstract: A method and a router device for managing memory for network overlay routes with fallback route support prioritization may be provided. A network overlay route as a candidate network overlay route may be obtained at a router for storage in a memory. The memory may store a plurality of network overlay routes for forwarding user plane traffic in a network. An assessment for storage of the candidate network overlay route based on a priority level indicator of the candidate network overlay route may be performed. The priority level indicator may be indicative of a fallback route support level of the candidate network overlay route in the router. Based on the assessment, at least one of the following may be performed: adding the candidate network overlay route to the memory and refraining from adding the candidate network overlay route to the memory.

Abstract: An embodiment method includes: a first service atom receives a second packet sent by a central switching device, where a first service packet is encapsulated in the second packet and the second packet further includes a first service path identifier. The first service atom performs first service processing according to information in the first service packet, to obtain a first processing result. The first service atom queries a first path switching entry according to the first processing result and the first service path identifier. The first service atom sends a third packet to the central switching device, where a source device identifier of the third packet is a device identifier of the first service atom, a second service packet is encapsulated in the third packet, and the third packet includes the second service path identifier.

Abstract: A method to provide network connectivity to a virtual machine hosted on a server computer system includes detecting a change in a configuration of a software-defined network to which the server computer system provides access; issuing a network configuration update (NCU) for consumption by the virtual machine, the NCU including a data structure reflecting the change in the configuration; and providing a link-state notification (LSN) to a virtual network interface card of the virtual machine pursuant to the change in the configuration, the LSN including data indicating a state of network connectivity of the virtual machine. Receipt of the LSN triggers a dynamic host-configuration protocol (DHCP) handshake by the virtual machine; the NCU is received by the virtual machine pursuant to the DHCP handshake.

Abstract: Disclosed herein are systems, methods, and apparatus for performing a new kind of traceroute. This traceroute is referred to herein as a “reverse” traceroute, as it enables a given network node to determine the path of packets sent to it from another node. Preferably, an encapsulating tunnel between the two nodes is leveraged. Preferably, a given network node (“first node”) performs the reverse traceroute by sending encapsulated inner packets in the tunnel to another network node (“second node”). The second node reflects the inner packets back to the first node. Preferably, the inner packets are configured such that their IP header TTLs expire at intermediate nodes (such as routers), and such that the resulting error messages are reported to the first node. In this way, the first node obtains information about the topology of the network and the path taken by inbound packets.

Abstract: A customer premises device may include a memory configured to store day 0 configuration instructions, a first network interface to couple to an out-of-band orchestration and management path, a second network interface operatively coupled to a customer network, and at least one processor configured to automatically and without user input execute the day 0 configuration instructions. The at least one processor is configured to establish and maintain a secure tunnel connection with a security gateway device via the out-of-band orchestration and management path and to establish a connection with a configuration platform on the provider network via the secure tunnel connection. Orchestration instructions for configuring one or more VNFs are received from the configuration platform via the tunnel connection.

Abstract: A network failure detection method and a network failure detection device are provided. The network failure detection method includes capturing a plurality of packets, analyzing contents of the plurality of packets and determining whether a network failure occurs to generate a determination result according to the contents of the plurality of packets, and outputting an alarm signal to implement an alarm function according to the determination result.

Abstract: A method of controlling a terminal device including receiving a message transmitted from a terminal device, storing the message received in association with identification information and state information of the message in a storage, displaying messages from various terminal devices together with state information thereof on a display, the messages including the first message, accepting an input for the display from a user, determining whether or not an entirety of the message is displayed on the display as a result of a display transition, updating the state information of the message as a read state indicating the message has been read in response to the determining indicating that the entirety of the message is displayed on the display, and transmitting the message, the updated identification information of the message, and the updated state information associated with the message to the terminal device may be provided.

Abstract: A hostname based access configuration system (HNACS) is provided for configuring a host-based firewall to implement firewall policies referencing hostnames. The HNACS defines a hostname based firewall policy (HNFP) referencing a host server using a corresponding hostname instead of an internet protocol (IP) address. The HNACS incorporates the HNFP onto the host-based firewall but renders the HNFP non-implementable on the computing device until a domain name system (DNS) query is generated. If the DNS query includes the hostname in the HNFP, the HNACS determines a mapping between the hostname specified in the DNS query and an IP address corresponding to the hostname (obtained via a DNS response corresponding to the DNS query). Based on the mapping, the HNFP is transformed via an implicit replacement of the hostname in the HNFP with the IP address of the host server, thereby rendering the HNFP executable on the host-based firewall.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, to authenticate mobile traffic. One of the methods includes receiving a first request for a strategy from a client device over a network. The method includes providing a current strategy to the client device, the current strategy including characteristics used to authenticate requests from the client device based on the inclusion of the characteristics in the request. The method includes receiving, from the client device, a second request for access to a processing system. The method includes validating the second request according to one or more strategies, including the current strategy. The method also includes forwarding the second request to the processing system based on the validation.

Abstract: Systems, apparatuses, methods, and computer-readable media, are provided for providing connectivity-based and/or connectivity-considered routing with supplemental wireless connections in driving assistance-related activities. Embodiments may be relevant to multi-access edge computing (MEC) and Automotive Edge Computing Consortium (AECC) technologies. Other embodiments may be described and/or claimed.

Abstract: Described herein include systems, methods, and apparatuses for the scheduling of data over a network (e.g., a wired or wireless network). A scheduler may be configured to receive a portion of packets at a receiving buffer and classify the packets into real time packets or non-real time packets using associated first and second queues. Further, a first re-transmission component may receive the real time packets from the first queue, and a second re-transmission component may receive the non-real time packets from the second queue. The real time packets may be received, by a transmission component, from the first re-transmission component; the transmission component may also receive non-real time packets from the second re-transmission component. The scheduler may then transmit at least one real time packet or non-real time packet to another device over a network using any suitable scheduling algorithm.

Abstract: Apparatus, methods, and systems for tuple space search-based flow classification using cuckoo hash tables and unmasked packet headers are described herein. A device can communicate with one or more hardware switches. The device can include memory to store hash table entries of a hash table. The device can include processing circuitry to perform a hash lookup in the hash table. The lookup can be based on an unmasked key include in a packet header corresponding to a received data packet. The processing circuitry can retrieve an index pointing to a sub-table, the sub-table including a set of rules for handling the data packet. Other embodiments are also described.