Abstract: A distributed computing system is provided, including a source computing device implementing a source hypervisor executing a virtual machine, a source-side router coupled to the source hypervisor, a destination computing device implementing a destination hypervisor, and a destination-side router coupled to the destination hypervisor. The source hypervisor is connected to the destination hypervisor through a network. During a migration of the virtual machine from the source hypervisor to the destination hypervisor, the source-side router duplicates packets ingressing into the source-side router. The duplicated packets include a first set of packets and a second set of packets, where the first set of packets is routed to the virtual machine through the source hypervisor on the network, and the second set of packets is routed to the virtual machine through the destination hypervisor on the network.

Abstract: This disclosure provides for a compute-aware routing method and apparatus. The method include: a compute-aware router that receives compute-aware routing information of at least one computing container. The compute-aware routing information includes a computing code or a computing metric. The compute-aware router determines a routing information base (RIB) based on the compute-aware routing information. The RIB includes either a function identifier (FID) of a function that can be provided by the computing container or an Internet Protocol (IP) address prefix of the computing container in which the function is located and either the computing code or the computing metric. The function includes any one of a software-defined computing program, function program, service software, or microservice that is deployed in the computing container.

Abstract: Systems and methods for prioritizing multicast streams in an Internet Group Management Protocol (IGMP) network are provided. According to one implementation, a process, which may be executed by a router, is configured, in response to a reboot scenario, to query a plurality of hosts regarding membership in a plurality of IGMP multicast streams according to predefined priority levels. The process is further configured to receive membership reports from the plurality of hosts. Also, the process is configured to request a server to restart the IGMP multicast streams according to the predefined priority levels.

Abstract: Some embodiments of the invention provide novel methods for providing transparent services for multicast data messages traversing a network edge device operating at a boundary between two networks. The method analyzes data messages received at the network edge device to determine whether they require a service provided at the boundary and whether they are unicast or multicast (including broadcast). The method modifies a multicast destination media access control (MAC) address of a multicast data message requiring a service to be a unicast destination MAC address and provides, without processing by a standard routing function, the modified data message directly to an interface associated with a service node that provides the particular service required by the data message. The method receives the serviced data message, restores the multicast destination MAC address, and forwards the serviced data message to a set of destinations associated with the multicast destination address.

Abstract: According to some embodiments, an Ethernet Virtual Private Network (EVPN) includes a first router configured as an Internet Group Management Protocol (IGMP) version 3 querier and a second router configured as an IGMP version 2 querier. The second router is configured to receive a Selective Multicast Ethernet (SMET) route message generated by the first router. The SMET route message includes an IGMP version 3 join request from a receiver, and the IGMP version 3 join request includes an address of a multicast source device. The second router is further configured to convert the IGMP version 3 join request of the SMET route message to an IGMP version 2 join request. The second router is further configured to send multicast traffic from the multicast source device to the receiver via the first router.

Abstract: Techniques for using global virtual network instance (VNI) labels in a multi-domain network to route network data with a multi-tenant network overlay are described herein. A routing device provisioned in a network domain of the multi-domain network may register with a service discovery system of the network domain for use of network configuration data to establish routes through the multi-domain network with network nodes. Each network domain of the multi-domain network may include an application programming interface (API) server for processing API requests to make changes to configurations of a network domain. A border gateway protocol (BGP) large community may be utilized to encode global VNI labels, network addresses, local next hop nodes, and/or additional network information and sent to routing devices provisioned in separate network domains. A service chain may be signaled by global VNI labels to route network traffic through various services prior to reaching a destination endpoint.

Abstract: Disclosed herein are embodiments of systems, methods, and products comprising a computing device, which provides Efficient Data-In-Transit Protection Techniques for Handheld Devices (EDITH) to protect data-in-transit. An end user device (EUD) may generate a multicast data packet. The EDITH module of the EUD encapsulates the data packet in a GRE packet and directs the GRE packet to a unicast destination address of an EDITH Multicast Router included in an infrastructure. The EDITH module on the EUD double compresses and double encrypts the GRE packet. The EDITH module on the infrastructure decrypts and decompresses the double compressed and double encrypted GRE packet to recreate the GRE packet. The EDITH module on the infrastructure decapsulates the GRE packet to derive the original multicast data packet, and distributes the original multicast data packet to the multiple group member based on the multicast destination address included in the original multicast data packet.

Abstract: The present disclosure describes methods, system, and devices for selecting a radio bearer mode for multicast broadcast services (MBS). The method includes informing a radio access network (RAN) that a user equipment (UE) is receiving/interested to receive or no longer receiving/interested to receive multicast broadcast service (MBS) services via a cast mode. The method includes sending, by the UE, MBS interest information to the RAN, the MBS interest information comprising a list of MBS services of interest.

Abstract: Techniques are disclosed for coordinating state information between devices in a network of devices. In one example, a first user device can obtain event information identifying an event (e.g., triggering of an alarm) associated with another user device and state information identifying a state of the other device. The first user device can report the state and event information to devices in the network. Observers corresponding to each user device can identify the occurrence of the event corresponding to the event information for each user device. An action (e.g., output an audio chime) can be performed by each device with an observer that identifies the occurrence of the event corresponding to the event information for each user device.

Abstract: Methods and devices for propagating transactions in a network of nodes, each node having one or more connections to other nodes. The method includes receiving a plurality of incoming transactions over a time period; combining the plurality of incoming transactions using network coding to generate a composite message; sending the composite message to one or more nodes in the network; and determining an adjusted time period based on an equilibrium constant parameter and a count of transactions in the plurality of incoming transactions received over the time period.

Abstract: This application provides a packet sending method. The method includes: receiving, by a first network device, a data packet, and encapsulating the data packet to obtain a first packet, where the first packet includes an IPv6 header, a bit index explicit replication BIER header, and the data packet, and some bits of a source IPv6 address field in the IPv6 header include identification information of a first tenant; and sending, by the first network device, the first packet to a second network device, where the identification information of the first tenant is used by the second network device to determine to send the data packet to an interface, corresponding to the first tenant, of the second network device.

Abstract: Among four secure computation nodes holding first to third shares of data in a secret-shared form, first and second secure computation nodes are selected as resharing nodes, and third and fourth secure computation nodes are selected as receiving nodes. The first and second secure computation nodes perform a mini-shuffle for resharing the shares they each hold by using a permutation that third and fourth receiving nodes do not know. Next, the third and fourth secure computation nodes perform a mini-shuffle for resharing the shares they each hold by using a permutation that first and second receiving nodes do not know.

Abstract: Systems and methods for enhanced device discovery to support multiple clients and high data bandwidth are disclosed herein. An example method includes a method for discovering networked devices on a network having a client application executing on a client device communicatively coupled to the networked devices, the method comprising: transmitting a first inquiry over the network; receiving a first list of devices corresponding to the first inquiry; transmitting a second inquiry over the network; receiving a second list of devices corresponding to the second inquiry; aggregating the first list and the second list to form an aggregate list, the aggregate list including a list of networked devices of interest; and, for at least one of the networked devices of interest, establishing a publisher/subscriber relationship between the at least one of the networked devices and the client application.

Abstract: A method is performed at a router on a multicast configured to forward a multicast flow. The method comprises: in response to receiving, from a controller connected to the multicast path or the multicast path, an enable command to enable statistics tracing for the multicast flow, determining whether the router has sufficient resources to perform statistics tracing; and when the router has the sufficient resources: responsive to the enable command, enabling statistics tracing to collect statistics for the multicast flow; generating a first request to include the enable command and the statistics; and forwarding the first request towards the controller.

Abstract: Systems and methods for capturing and distributing a live audio stream of a live event in real-time to a plurality of mobile computing devices are described. The system comprises at least one memory configured to store computer-executable instructions and processing device(s) coupled to the at least one memory and at least one audio input device configured to receive the live audio stream. Upon receipt of the live audio stream, the processing device(s) generate, in real-time, a plurality of discrete audio data packets from the live audio stream, and transmit that respective discrete audio data packet over a first network for receipt by the mobile computing devices. In respect of each one of the discrete audio data packets, a copy of the discrete audio data packet is transmitted for receipt by each one of the mobile computing devices prior to transmitting another one of the discrete audio data packets.

Abstract: Among four secure computation nodes, one secure computation node is selected as a receiving node. Two of three remaining secure computation nodes among the four secure computation nodes are operated as resharing nodes, and a remaining secure computation node is operated as a verifying node. The resharing node(s) performs a mini-shuffle for resharing share(s) held therein by using a permutation that the receiving node does not know and transmits a result(s) of the mini-shuffle to the receiving node. The verifying node computes data to verify the result(s) of the mini-shuffle performed by the resharing node(s) by using a permutation that the receiving node does not know and transmits the data to the receiving node. Shuffling of shares is achieved by repeatedly performing a round as described above so that each of the four secure computation nodes is selected as the receiving node at least once.

Abstract: Examples described herein relate to configuring a target network interface to recognize packets that are to be written directly from the network interface to multiple memory destinations. A packet can include an identifier that a portion of the packet is to be written to multiple memory devices at specific addresses. The packet is validated to determine if the target network interface is permitted to directly copy the portion of the packet to memory of the target. The target network interface can perform a direct copy to multiple memory locations of a portion of the packet.

Abstract: A device of a service coordinating entity includes communications circuitry to communicate with a plurality of access networks via a corresponding plurality of network function virtualization (NFV) instances, processing circuitry, and a memory device. The processing circuitry is to perform operations to monitor stored performance metrics for the plurality of NFV instances. Each of the NFV instances is instantiated by a corresponding scheduler of a plurality of schedulers on a virtualization infrastructure of the service coordinating entity. A plurality of stored threshold metrics is retrieved, indicating a desired level for each of the plurality of performance metrics. A threshold condition is detected for at least one of the performance metrics for an NF V instance of the plurality of NFV instances, based on the retrieved plurality of threshold metrics. A hardware resource used by the NFV instance to communicate with an access network is adjusted based on the detected threshold condition.

Abstract: Systems, methods, and computer-readable media for identifying bogon addresses. A system can obtain an indication of address spaces in a network. The indication can be based on route advertisements transmitted by routers associated with the network. The system can receive a report generated by a capturing agent deployed on a host. The report can identify a flow captured by the capturing agent at the host. The system can identify a network address associated with the flow and, based on the indication of address spaces, the system can determine whether the network address is within the address spaces in the network. When the network address is not within the address spaces in the network, the system can determine that the network address is a bogon address. When the network address is within the address spaces in the network, the system can determine that the network address is not a bogon address.

Abstract: A method for facilitating communications between client devices in geographically separated networks is described. First, message monitoring is conducted by each of a plurality of virtual appliances within a local network to detect a message of a first message type. Responsive to failing to locate a Media Access Control (MAC) address of a destination for the message within a prescribed table by a default gateway, one of the plurality of virtual appliances is selected for handling a forwarding of the message to a plurality of remote networks, and the message via the selected virtual appliance is forwarded to a plurality of gateways associated with a plurality of remote networks. Responsive to locating the MAC address of the destination within the table, the virtual appliance previously handling communications with the destination to forward the message to the destination.

Abstract: In accordance with one example embodiment, a system configured for programming a network layer multicast address entry in a routing table of an ingress line card module is disclosed. The network layer multicast address entry includes a network layer address associated with at least one egress line card. The system is further configured for programming a data link layer multicast routing address entry in a routing table of a fabric card module in which the data link layer multicast routing address entry corresponds to the network layer multicast address entry.

Abstract: A system includes a processor, safety devices including a door-related safety device, and environmental condition detection sensors. The processor is configured to receive environmental condition sensor data from the at least one environmental condition detection sensor. An imminent occurrence of a threat event tis detected that would cause the damage a building. A risk analysis model analyzes threat event related environmental condition sensor data to predict a risk value that the at least one threat event would cause the damage to the at least one building and to generate risk mitigation actions that at least reduces the damage during the actual occurrence of the threat event. Prior to the actual occurrence of the threat event, respective risk mitigation instructions are transmitted to actuators that cause an operational state change of safety devices so as to at least reduce the damage to the building from the threat event.

Abstract: Techniques are disclosed for session-based routing of multipoint Open Systems Interconnection (OSI) Model Layer-2 (L2) frames of an L2 network extended over Layer-3 (L3) networks. In one example, L2 networks connect a source device to an ingress router and receiver devices to egress routers. An L3 network connects the ingress and egress routers. The ingress router receives, from the source device, a multipoint L2 frame destined for the receiver devices. The ingress router forms, for each egress router that is connected to at least one multipoint receiver device, a unicast L3 packet for the L2 frame and forwards the unicast L3 packet to the egress router. Each egress router generates, in response to receiving the unicast L3 packet, the multipoint L2 frame and forwards, to the receiver devices, the multipoint L2 frame.

Abstract: In an embodiment, the present disclosure discloses a method and a module for controlling data transfer in a manufacturing plant. The IoT module is configured to receive a request for a plurality of parameters from a second application from one or more applications. The request is made by a first application from the one or more applications. The IoT module determines status of the requested parameters. The status indicates if the requested parameters are authorized for sharing. Further, the IoT module transfers only the authorized parameters to the first module based on the status. Thus, the present disclosure provides a method and a IoT module for sharing data securely within the manufacturing plant.

Abstract: Techniques are disclosed for session-based routing of multipoint Open Systems Interconnection (OSI) Model Layer-2 (L2) frames of an L2 network extended over Layer-3 (L3) networks. In one example, L2 networks connect a source device to an ingress router and receiver devices to egress routers. An L3 network connects the ingress and egress routers. The ingress router receives, from the source device, a multipoint L2 frame destined for the receiver devices. The ingress router forms, for each egress router that is connected to at least one multipoint receiver device, a unicast L3 packet for the L2 frame and forwards the unicast L3 packet to the egress router. Each egress router generates, in response to receiving the unicast L3 packet, the multipoint L2 frame and forwards, to the receiver devices, the multipoint L2 frame.

Abstract: A cardinality query associated with a specific attribute is received. One or more in-scope attribute cardinality partitions is enforced on session record analytics. Vertical data compression is performed to eliminate a time dimension. Horizontal data compression is performed to eliminate one or more out-of-scope attributes. One or more like in-scope session records is aggregated. Magnitudes of each in-scope attribute of each enforced cardinality partition are summed. The sum is returned as a response to the cardinality query.

Abstract: A device is provided that includes a persistent memory, a microcontroller and a power source configured to generate power in response to energy harvesting. The power is transferred to a power storage of the device such that when the power storage has an amount of power the microcontroller performs processing of a part of a task resulting in state data related to the task stored to the persistent memory in response to a first cycle of energy harvesting. In response to one or more additional cycles of energy harvesting, the device continues performance of the task by retrieving the state data for the part of the task from the persistent memory and resulting in assembly of a payload that comprises an update to software running on the device.

Abstract: Disclosed are a method and apparatus for retrieving and enumerating object metadata in a distributed storage system. The method includes: defining and configuring metadata of objects, and counting the number N of types of the metadata; constructing a metadata retrieval tree according to the metadata and the number N of the types of the metadata, each Mth node being associated with an Mth linked list; configuring objects in the Mth linked lists, the objects conforms to all metadata in metadata arrays in the Mth nodes; and configuring an index based on the metadata, pointing to a specified target node via the metadata retrieval tree according to the index, determining a target linked list according to the target node, and providing enumerated objects by the target linked list.

Abstract: A wireless communication method includes receiving, by a first user plane function (UPF) entity, a first message sent by a session management function (SMF) entity, where the first message includes a multicast address of a group and session information of at least one second terminal, and duplicating, by the first UPF entity, received first service data to obtain N copies of first service data, and sending the duplicated first service data to each second terminal based on the multicast address and the session information of the at least one second terminal, where the first service data is data that is from a first terminal and whose destination address is the multicast address, and N is a total quantity of the at least one second terminal.

Abstract: Techniques and mechanisms for a control plane approach for dense topologies that focusses on discovering shared ECMP groups in the control plane independent of per-prefix learning and then learning prefixes via these shared ECMP groups instead of learning prefixes via one next-hop at a time. In dense topologies, this approach helps minimize BGP path scale, corresponding signaling and enables control plane scaling that is an order of magnitude higher than a traditional eBGP control plane. During link and node topology changes, the described control plane approach enables control plane signaling that is prefix independent and an order of magnitude lower. A control plane approach to path-list sharing and prefix independent signaling on link and node topology changes enables prefix independent convergence (PIC) in scenarios that would not be possible otherwise with traditional FIB driven path-list sharing and PIC.

Abstract: The disclosed technology is generally directed to communications in an IoT environment. For example, such technology is usable for IoT data control. In one example of the technology, a declarative data request is received. The declarative data request is a request for data from multiple IoT devices. The declarative data request is translated into a plurality of individual requests. Destination IoT devices associated with the plurality of individual requests are identified. The plurality of individual requests to the destination IoT devices are sent. IoT data is received from the destination IoT devices based on the plurality of individual requests. The declarative data request is responded to based on the received IoT data.

Abstract: A system and method for dynamically optimizing content delivery in a wireless communication network. The method comprises receiving, at a transceiver [208A], a request for delivery of a content from at least one user device [202]. A manifest module [208B] determines one or more first parameters for the at least one user device [202] and compares one or more parameters of the at least one user device [202] with one or more second parameters of the at least one cohort. The manifest module [208B] dynamically identifies (or generates) a virtual manifest associated with the at least one cohort (or the at least one user device [202]) based on the comparison. A segmenter module [208C] automatically extracts a stream of data associated with the virtual manifest. The transceiver [208A] delivers the content to the at least one user device [202] based on the extracted stream of data.

Abstract: Disclosed by the present application is a direct connection communication method, an AMF, an access network functional entity and a terminal.

Abstract: Exemplary methods, apparatuses, and systems maintain network membership information for a host when it is disconnected from a controller. When the host detects a loss of connectivity with the network controller, the host identifies and selects one or more hosts that are members of a control logical network. The control logical network includes hosts configured to run data compute nodes that are members of the overlay network, regardless of whether or not each of the hosts is currently running a data compute node that is a member of the overlay network. The host then sends any broadcast, unknown destination, or multicast (BUM) data packet(s) to the selected one or more hosts.

Abstract: This application provides a communications method and a communications apparatus, to reduce storage resources required by an access network device to store a context of a terminal device. The method includes: The access network device gathers terminal devices that have a same attribute in a group, where a context of each terminal device is divided into two parts: a common context and a dedicated context, the common context is shared by all the terminal devices in the group, and the dedicated context is a context specific to the terminal device. The access network device stores one common context for each group and stores a dedicated context of each terminal device in the group, to maintain the context of each terminal device.

Abstract: Methods, systems, and devices for wireless communications are described in which sidelink communications between devices may be retransmitted using one or more nodes. A first user equipment (UE) may transmit a broadcast, multicast, or groupcast communication to a set of other UEs using sidelink resources. A node may monitor the communications and store the first UE transmission. UEs of the set of other UEs may transmit feedback reports to the node that indicate one or more missing packets of the first UE transmission. The node may retransmit one or more of the stored packets to the set of other UEs based on the feedback reports. In some cases, the sidelink communications may be encoded using a network coding algorithm, and the node may retransmit network coded packets based on the feedback reports, may transmit newly encoded packets based on the feedback reports, or combinations thereof.

Abstract: A method implemented by a network node in a Bit Index Explicit Replication Traffic/Tree Engineering (BIER-TE) domain is used to avoid duplicate packets. The method includes generating an improved bit index forwarding table (BIFT) containing a forwarding entry for a local area network (LAN)-connected adjacency from the network node to a pseudo node; and a secondary BIFT including a forwarding entry for a forward connected adjacency from the pseudo node to each of the pseudo node's next hop nodes except the network node; sending a packet containing a point to multipoint (P2MP) path with a bit position for the LAN-connected adjacency to the pseudo node according to the forwarding entry for the LAN-connected adjacency in the improved BIFT; and sending the packet to each of the pseudo node's next hop nodes on the P2MP path based on the secondary BIFT.

Abstract: This application provides a BIER packet sending method. The method includes: receiving a BIER packet that is encapsulated using an IPv6 protocol and that is sent by a second forwarding device, where the BIER packet includes an IPv6 basic header and a BIER header, a destination address field in the IPv6 basic header is a first IPv6 address of the first forwarding device; determining, based on an identifier corresponding to a first IPv6 address in a forwarding table, to perform BIER forwarding on the BIER packet, where the identifier is used to indicate that the first IPv6 address is a destination address for BIER forwarding. In the technical solution provided in this application, a node may determine, based on the identifier of the first IPv6 address, to perform BIER forwarding on the BIER packet.

Abstract: System and method provide wireless distributed lighting control systems implementing a secure peer-to-peer, self-organizing and self-healing mesh network of actuators and system inputs. The system and method can be designed specifically for indoor and outdoor lighting where actuators include in-fixture, on-fixture and circuit control modules with ON/OFF and full range dimming capabilities, and system inputs include occupancy/vacancy sensors, daylight sensors and switches. A unique messaging protocol facilitates wireless and wired communication between actuators and system inputs, and provides web-based commissioning and monitoring of the lighting control system using a wireless access point accessible from a local network or Internet which can provide an intuitive and easy to use Graphical User Interface (GUI).

Abstract: A controller assigns variable length addresses to addressable elements that are connected to a network. The variable length addresses are determined based on probabilities that packets are addressed to the corresponding addressable element. The controller transmits, to the addressable elements via the network, a routing table indicating the variable length addresses assigned to the addressable elements. Routers or addressable elements receive the routing table and route one or more packets over the network to an addressable element using variable length addresses included in a header of the one or more packets.

Abstract: In an embodiment, a computer-implemented method for highly-scalable, in-network multicasting of statistics data is disclosed. In an embodiment, a method comprises: receiving, from an underlay controller, a match-and-action table that is indexed using one or more multicast (“MC”) group identifiers and includes one or more special MC headers; detecting a packet carrying statistics data; determining whether the packet includes an MC group identifier; in response to determining that the packet includes the MC group identifier: using the MC group identifier, retrieving a special MC header, of the one or more special MC headers, from the match-and-action table; generating an encapsulated packet by encapsulating the packet with the special MC header; and providing the encapsulated packet to an interface controller for transmitting the encapsulated packet to one or more physical switches.

Abstract: A method for execution by a processor of a host having an external interface for connection to at least one other network element of a packet-based data network, the host storing a routing table and implementing a container connected to a bridge, the container being addressable by an internal address on a bridge network associated with the bridge. The method includes obtaining an indication of a request for the container to join a multicast group. In response to the obtaining, a request is sent via the external interface for the host to join the multicast group. The routing table may be modified so as to make the bridge a next hop for future packets obtained from the external interface and destined for the multicast group. The routing table may also be modified so as to make the external interface a next hop for future packets that are obtained from the bridge, whose source address is the internal address of the container and that are destined for the multicast group.

Abstract: A non-transitory computer-readable medium whose contents, when executed by a computing system of an in-home security device, cause the computing system to perform operations to provide security for an in-home network, including receiving home network internet datagrams from a modem at the in-home security device to provide received home network data packets, the received home network internet datagrams being all data packets received by the modem directed to the in-home network from outside, analyzing the received home network internet datagrams using an artificial intelligence service to identify a type of security threat included in the received home network internet datagrams, selecting a security application from among a plurality of security applications included in an in-home network security application suite based on the type of security threat identified in the received home network internet datagrams by the artificial intelligence service to provide a selected security application, using the selecte

Abstract: Embodiments of this application provide a bit-forwarding ingress router, a bit-forwarding router, and an OAM test method, and pertain to the field of multicast networks. A first BFR receives an OAM request packet from a BFIR; the first BFR determines, according to the OAM request packet, that a destination BFR corresponding to the OAM request packet is the first BFR; and the first BFR obtains a first OAM response packet according to an ID of the BFIR, and sends the first OAM response packet to the BFIR. According to the method and the apparatus that are provided in the embodiments of this application, a problem that a BFIR cannot diagnose or handle a transmission fault when the fault occurs during transmission of a multicast packet can be resolved, which helps implement connectivity testing by using an OAM packet and enables testing of multiple BFERs.

Abstract: Embodiments of the present invention are drawn to electronic systems capable of transmitting a group addressed frame that identifies an MLD according to an MLD MAC address. The group addressed frame can include an ARP request, for example, and can be transmitted by an AP MLD responsive to an individually addressed frame transmitted by a non-AP STA MLD associated with the AP MLD. The AP MLD can provide a proxy ARP service for associated non-AP STA MLDs.

Abstract: A system for coordinated management of Internet of Things (IoT) devices to minimize power consumption and network congestion is provided. A mobile device designated as local group management device (LGMD) identifies a group of IoT devices that are configured to access a network. The mobile device receives information regarding an upcoming event involving the group of IoT devices. The mobile device generates usage knowledge specifying the group of IoT devices, a location, and a time associated with the upcoming event. The mobile device receives configuration update data that are generated based on the usage knowledge for scheduling operations of the group IoT devices. The mobile device delivers the configuration update data to the group of IoT devices.

Abstract: The present disclosure is intended to enable efficient content forwarding in an HTTP-based web distribution system while maintaining HTTP, which is unicast. In the present disclosure, a unicast-multicast conversion device and a multicast-unicast conversion device that are connected, by using a multicast communication network, with a network between a content server and a terminal that perform web distribution are provided. The unicast-multicast conversion device and the multicast-unicast conversion device execute, in both multicast and unicast, forwarding of a content group into which a plurality of contents are grouped.

Abstract: Hybrid mode multicast routing may be provided. A switching device may receive a first join. Next, in response to receiving the first join, states for a first protocol mode (e.g., (S, G)) that is source aware and state for a second protocol mode (e.g., (*, G)) that is not source aware may be programed. Then a second join may be sent based on the states associated with the second protocol mode (e.g., (*, G)).

Abstract: A method for creating a secure network is provided. The method comprises establishing an overlay domain to control routing between overlay edge routers based on an underlying transport network, wherein said establishing comprises running an overlay management protocol to exchange information within the overlay domain; in accordance with the overlay management protocol defining service routes that exist exclusively within the overlay domain wherein each overlay route includes information on at least service availability within the overlay domain; and selectively using the service routes to control routing between the overlay edge routers; wherein the said routing is through the underlying transport network in a manner in which said overlay routes is shared with the overlay edge routers but not with the underlying transport network via the overlay management protocol.

Abstract: A method for creating a secure network is provided. The method comprises establishing an overlay domain to control routing between overlay edge routers based on an underlying transport network, wherein said establishing comprises running an overlay management protocol to exchange information within the overlay domain; in accordance with the overlay management protocol defining service routes that exist exclusively within the overlay domain wherein each overlay route includes information on at least service availability within the overlay domain; and selectively using the service routes to control routing between the overlay edge routers; wherein the said routing is through the underlying transport network in a manner in which said overlay routes is shared with the overlay edge routers but not with the underlying transport network via the overlay management protocol.