Abstract: In one example, a semiconductor die includes a plurality of agents and a fabric coupled to at least some of the plurality of agents. The fabric may include at least one router to provide communication between two or more of the plurality of agents, the at least one router coupled to a first agent of the plurality of agents, where the first agent is to send a first message to the at least one router, the first message comprising a first header including a first source identifier, and the at least one router is to validate that the first source identifier is associated with the first agent and if so to direct the first message towards a destination agent, and otherwise to prevent the first message from being directed towards the destination agent. Other embodiments are described and claimed.

Abstract: A bus monitoring system, a method and an apparatus, wherein the system comprises: a bus node; a bus monitoring module configured to monitor a first bus where the bus monitoring module is located to generate monitoring information; an information storage module configured to acquire the monitoring information from the bus monitoring module through a second bus; the first bus being configured to connect a master device and a slave device of the bus node; the second bus being configured to connect the information storage module and the bus monitoring module, wherein the second bus is independent from the first bus. By means of the present disclosure, the technical problem that bus monitoring information cannot be acquired when bus exception occurs in the related art is solved.

Abstract: The disclosed systems and methods provide weighted cost multipath for packet processing devices. A method includes receiving a network packet for routing through one of a number of paths of a network switch device. The method also includes selecting, via a first function applied to the network packet, a record from a plurality of records corresponding to the number of paths, wherein each of the plurality of records includes a threshold, a first routing index, and a second routing index. The method also includes determining, via a second function applied to the network packet, a routing value within a predefined range of values. The method also includes choosing, from the selected record, the first routing index or the second routing index based on whether the routing value meets the threshold of the selected record. The method also includes routing the network packet based on the chosen routing index.

Abstract: A processing device is configured to obtain an input-output operation that corresponds to a first metadata page and to identify a corresponding binary tree. The binary tree comprises a plurality of nodes each comprising a delta corresponding to a metadata page. The processing device is further configured to perform a read traversal process corresponding to the first metadata page which comprises traversing the binary tree based at least in part on the first metadata page while the binary tree is locked by a node insertion process corresponding to a second metadata page. The node insertion process comprises inserting a first node corresponding to the second metadata page into the binary tree. The read traversal process further comprises locating a second node of the binary tree that corresponds to the first metadata page and obtaining a first delta that corresponds to the first metadata page from the second node.

Abstract: According to one embodiment, a control device includes one or more processors. The one or more processors receive a message. The one or more processors determine whether the received message has been replicated and transmitted. The one or more processors instruct recording of difference information between a message before replication and the received message when it is determined that the received message has been replicated and transmitted.

Abstract: For a network including multiple computers acting as tunnel endpoints in a network, some embodiments provide a method for processing data messages in parallel using multiple processors (e.g., cores) of each computer. Each computer in some embodiments has a set of interfaces configured as tunnel endpoints connecting to multiple tunnels. In some embodiments, the multiple processors encrypt data messages according to a set of encryption parameters or multiple sets of encryption parameters that specify an encryption policy for data messages requiring encryption, an encryption algorithm, an encryption key, a destination network address, and an encryption-parameter-set identifier.

Abstract: Various example embodiments for supporting packet forwarding in communication networks are described. Various example embodiments for supporting packet forwarding in communication networks may be configured to support packet forwarding in label switched packet networks. Various example embodiments for supporting packet forwarding in label switched packet networks may utilize a variable-sized label value field to encode label values within a header of a label switched packet. Various example embodiments for supporting packet forwarding in label switched packet networks may utilize a variable-sized label value field to encode label values within a label stack in a header of a label switched packet. Various example embodiments for supporting packet forwarding in label switched packet networks may encode a label value within a label stack in a header of a label switched packet using a variable-sized label value field having a size that is based on the label value.

Abstract: Described embodiments provide systems and methods for cross protocol association using internet addresses for metadata association. An association between IPv4 addresses and IPv6 addresses can determined and used to bridge metadata from collection context in a first protocol into usage for a second protocol. A server can monitor a plurality of handshake exchanges to generate the association between IPv4 addresses and IPv6 addresses for a device or group of devices. The handshake exchange can include an IPv4 address, an IPv6 address, or both an IPv4 address and an IPv6 address for a respective device. The handshake exchanges can include a unique identifier corresponding to the respective device. The server can use the association to generate a mapping linking a range of IPv4 addresses to a range of IPv6 addresses corresponding to the same device. The mapping can be used to associate metadata to devices within the same ranges.

Abstract: The present invention relates to systems and methods for detecting anomalies in computer network traffic with fewer false positives and without the need for time-consuming and unreliable historical baselines. Upon detection, traffic anomalies can be processed to determine valuable network insights, including health of interfaces, devices and network services, as well as to provide timely alerts in the event of attack.

Abstract: A communication unit and discoverable unit communicate according to a protocol in which unit addresses are not of a predetermined length. The communication unit sends a discovery request to the discoverable unit. The discoverable unit receives the discovery request and generates a discovery response. The discovery response comprises an address field of length unknown to the communication unit, populated with an address of the discoverable unit. The discovery response also comprises a flag following the address field. The discoverable unit sends the discovery response to the communication unit. The communication unit receives the discovery response and determines the address field length by counting the number of bits prior to the flag.

Abstract: A system and method for dynamically switching from a first internet protocol to a second internet protocol for providing service to a user equipment, is disclosed. More particularly, the embodiments may disclose a method for dynamically switching from the first internet protocol to the second internet protocol, comprises steps of: generating a first positive response in an event the service is capable of being provided using the second internet protocol; generating a second positive response in an event the user equipment is capable of receiving the service using the second internet protocol; generating a third positive response in an event a real-time location of the user equipment is within a coverage area; and dynamically switching from the first internet protocol to the second internet protocol based on at least one of the first positive response, the second positive response and the third positive response.

Abstract: A computer implemented method comprises receiving an ethernet frame on an access port of a source switch in a switch fabric, the ethernet frame comprising a source media access control (SMAC) address and a destination media access control (DMAC) address, in response to a determination that the destination media access control address is not programmed into a media access control table of the source switch sending a destination lookup failure (DLF) message to a control plane associated with the switch, the destination lookup failure (DLF) message indicating that the destination media access control address received with the frame is not programmed into a media access control table of the source switch, and in response to a determination that the destination media access control address is programmed into a media access control table of at least one switch of the plurality of additional switches in the switch fabric, initiating a sequenced path setup on the source switch.

Abstract: Technical solutions are described for reading HTTP responses in separate processes being executed by a client computing device. An example method includes sending an HTTP request from an application program executed by a first process, the HTTP request being sent for receipt by a server. The method further includes storing application identification associated with the HTTP request, and terminating the first process. The method further includes, in response to receiving a HTTP reply from the server, determining that the HTTP reply is corresponding to the HTTP request based on the application identification, and passing the HTTP reply to the application program.

Abstract: Described embodiments provide systems and methods for pushing session information to a newly joined node in a cluster of nodes. In the cluster, each node may maintain a session table of existing sessions. One or more nodes may detect a new node has joined the cluster. Each node, responsive to the detection, may apply a hash function on a tuple of each session of the existing sessions in the session table of the node to determine whether one or more existing sessions are identified to be owned by the new node as a result of the hash function. Each node, responsive to identifying that one or more sessions are to be owned by the new node, may push corresponding session information to the new node. The new node may become configured to receive a packet corresponding to the one or more sessions and to process the packet.

Abstract: A system, method and computer program utilize a distance associative hashing algorithmic means to provide a highly efficient means to rapidly address a large database. The indexing means can be readily subdivided into a plurality of independently-addressable segments where each such segment can address a portion of related data of the database where the subdivided indexes of said portions reside entirely in the main memory of each of a multiplicity of server means. The resulting cluster of server means, each hosting an addressable sector of a larger database of searchable audio or video information, provides a significant improvement in the latency and scalability of an Automatic Content Recognition system, among other uses.

Abstract: A method for detecting Quality of Service degradation in a network flow includes collecting time series data representing statistical information pertaining to a network flow registered with a network flow monitoring service. The time series data is collected from at least two network elements on a path of the network flow configured to report the time series data. The method further includes indicating Quality of Service degradation in the network flow based on a similarity of the time series data to expected time series data being below a specified similarity threshold, and triggering at least one action to address the similarity being below the specified similarity threshold.

Abstract: A system and a method are disclosed for receiving, from a source of a plurality of candidate sources, a payload comprising content and metadata. The system selects a destination to which to route the payload based on the source and the content, and generates an entry at the destination based on the content. The system inputs the metadata into a classification engine, and receives, as output from the classification engine, one or more classifications for the payload. The system applies a metadata tag to the entry, the metadata tag indicating the one or more classifications. The system receives a search request from a client device specifying at least one of the one or more classifications, and, in response to receiving the search request, provides the entry to the client device based on a matching classification.

Abstract: The method is applied to an SDN network, where the SDN network includes one target computing apparatus and a plurality of openflow switches. The target computing apparatus communicates with the plurality of openflow switches. The method includes: receiving, by the target computing apparatus, a first bridge protocol data unit (BPDU) packet sent by a first openflow switch, where the first BPDU packet carries a device identifier and a port identifier; generating, by the target computing apparatus, a feedback packet based on the first BPDU packet, where the feedback packet includes spanning tree protocol information of a conventional switching device, and carries the port identifier; and sending, by the target computing apparatus, the feedback packet to the first openflow switch based on the device identifier.

Abstract: A packet is received at a device configured to provide a service function within a network service chain. A network overlay and/or segmentation identifier is extracted from a header of the packet. The service function is applied to the packet according to policies specific to a network overlay and/or segmentation identified in the network overlay and/or segmentation identifier.

Abstract: Disclosed is a data processing method and a corresponding device. The method is applicable to a first edge device of a virtual extensible local area network, and comprises: receiving a target message, and determining a target network tag and a target destination address of the target message; determining a target outbound interface corresponding to the target message based on a result of matching the target network tag and the target destination address with a locally stored correspondence relationship of a network tag, a destination address and an outbound interface; sending the target message through the target outbound interface. In an example, a message is forwarded by matching a destination address and a network tag, avoiding forwarding a message as long as the destination address is hit and solving the problem that VMs with the same MAC address but belonging to different VLANs cannot gain access to one VXLAN.

Abstract: This application discloses a flow entry generating method and apparatus. The method includes: receiving a service path establishment request, where the service path establishment request includes a constraint, a source device, and a target device; finding, in a data transmission network according to a cross-layer information model, a service path that meets the constraint and is from the source device to the target device, where the cross-layer information model is a model that describes, at a same layer, an overall topology relationship between an IP layer and an optical layer; and generating a respective corresponding flow entry for each forwarding device in the service path, and sending the flow entry to a corresponding forwarding device. This application can greatly reduce time complexity of computing the service path, and improve efficiency of computing the service path, thereby improving efficiency of generating a flow entry.

Abstract: An example communication system in a cellular network comprises: a processing system comprising a controller and remote units, with the remote units being configured to communicate with the controller and to communicate with mobile devices within a communication cell of the cellular network. At least part of the processing system is configured to perform operations comprising: estimating signal strength experienced by all or some of the mobile devices; identifying, based at least on the signal strength, one or more of the mobile devices that can be scheduled for communication with one or more of the remote units in the communication cell on a same airlink resource; and scheduling the communication.

Abstract: A method is provided in one example embodiment and may include receiving a packet by a forwarder in an Information-Centric Networking (ICN) network; determining Bit Index Explicit Replication (BIER) information associated with the packet; and forwarding the packet based, at least in part, on the BIER information associated with the packet. The packet can be an interest packet or a data packet received by the forwarder in the ICN network.

Abstract: A network switch holds a routing table and a network topology table so that when a link failure is detected at the network switch, the network switch may independently reroute a packet intended for that failed link using the network topology table. This processing can be performed in the data plane at a speed that can eliminate dropped packets. Intercommunication with a central controller is not required and intercommunication with other network switches may be accomplished through data plane communication by embedding the link failure information in the affected packet.

Abstract: One function of a communications network, or of nodes in such a network, is to gather data that is useful in assessing network performance, and quantifying metrics of node and/or network performance. Various embodiments disclosed herein improve the ability of nodes and networks to gather such data, and quantify metrics of node and/or network performance by selectively marking existing network traffic, and in preferred embodiments without having to dilute network traffic by generating and transmitting dummy data packets.

Abstract: A switch fabric has a plurality of leaf switches, each leaf switch having a local tenant identifier (LTID) table, a local forwarding information base (LFIB) table, and a forwarding engine coupled to the LTID table and LFIB table. Each leaf switch has downlink ports operative on VLAN packets such as those generated by Container/Virtual machines (CVM), each leaf switch also having a reconfigurable uplink port for transmission and reception of VxLAN packets formed from VLAN packets which have a destination address which is not local to a particular leaf switch. The uplink ports are coupled to the leaf ports of one or more spine switches, each spine switch having a Global Forward Information Base (GFIB) table slice coupled to a VxLAN forwarder which receives VxLAN packets, de-encapsulates them and uses the GFIB table slice to form new VxLAN packets transmitted to a different leaf port.

Abstract: Technology is disclosed for bridging clouds of computing devices for compute and data storage. The technology can receive a virtual routing table (VRT), wherein the VRT indicates an association with a virtual local area network (VLAN) and defines neighbors for each route wherein at least one neighbor is defined for each of the two different cloud service providers, wherein the route definition creates a private transitive network between the neighbors; receive from a first node a first message destined for a second node; determine that the first message employs the route specified by the VRT; forward the first message to the second node; receive from a third node a second message destined for the second node; determine that the second message does not employ the route specified by the VRT; and fail to forward the second message to the second node.

Abstract: A system and method for implementing and management virtual networks is disclosed. A method includes receiving a network packet arriving at a first network interface of a first node of an underlying network, communicating at least the packet and an identifier of the first network interface to a decision engine, determining how the packet should be processed based on a simulation by the decision engine of a traversal of a virtual network topology including a plurality of virtual network devices, wherein the decision engine communicates with a shared database accessible from the underlying network that stores the virtual network topology and virtual device configurations for the plurality of virtual network devices; and processing the packet based upon the simulation.

Abstract: One embodiment of the present invention provides a system for automatic configuration of a computing device in a content-centric network (CCN). During operation, the system sends, by the computing device on at least one of the computing device's faces, an interest in configuration information. The interest has a predetermined name prefix. The system then receives a content object in response to the interest. The content object includes at least a default name prefix, to which the computing device can send other interests. The system further configures the computing device based on the received content object.

Abstract: Techniques are disclosed for implementing direct memory access in a virtualized computing environment. A new mapping of interfaces between RNIC Consumer and RDMA Transport is defined, which enables efficient retry, a zombie detection mechanism, and identification and handling of invalid requests without bringing down the RDMA connection. Techniques are disclosed for out of order placement and delivery of ULP Requests without constraining the RNIC Consumer to the ordered networking behavior, if it is not required for the ULP (e.g., storage). This allows efficient deployment of an RDMA accelerated storage workload in a lossy network configuration, and reduction in latency jitter.

Abstract: A method performed in a scheduler entity is provided for adapting load on a fronthaul network in a radio access network comprising a central baseband unit and a remote radio unit. The central baseband unit and the remote radio unit are interconnected by the fronthaul network over which baseband signal information is exchanged. The method comprises obtaining information related to capacity of the fronthaul network, and adapting, based on the obtained information, air interface performance for at least one type of conveyed baseband signal information such as to enable adapting of load on the fronthaul network. A scheduler entity, method in a fronthaul module, computer programs and computer program products are also provided.

Abstract: Upgrading packet processing rules in a network device with a replacement set of rules includes generating an edit sequence that represents edit operations to transform an already-installed old set of rules into the replacement rules. The edit sequence is used to identify a subsequence of rules that is common to both the old rules and the replacement rules. A merged list is generated by a combination of the old rules, the replacement rules, and the common subsequence of rules. The merged list is downloaded to the network device, overwriting the old rules in bottom-up fashion allowing packet processing to continue concurrently using the old rules.

Abstract: An ARP table management system maps destination addresses to next hop addresses using ARP entry and egress tables and, when the ARP egress table is full, performs those mappings in double-entries in the ARP entry table. When a second destination address is identified that is associated with a first next hop address mapped to a first destination address in a first double-entry in the ARP entry table, a second next hop address is identified in the ARP egress table that is mapped to only one third destination address in the ARP entry table. The third destination address is then mapped to the second next hop address in a second double-entry in the ARP entry table, and each of the first destination address and the second destination address in respective ARP entry rows in the ARP entry table are mapped to the first next hop address in the ARP egress table.

Abstract: A memory system is disclosed, which relates to technology for implementing data communication between memory devices. The memory system includes a plurality of memory devices and a memory controller. The memory devices allow a data packet composed of data and header information to be directly communicated between the memory devices. The memory controller transmits the data packet to a source memory device from among the plurality of memory devices, and receives the data packet from a last memory device from among the plurality of memory devices. Each of the memory devices hashes the header information such that the data is accessed, using a result of the hash, in address regions located at different positions.

Abstract: The disclosure provides an approach for load balancing packets within a data center. The approach leverages dynamically collected and up-to-date health information on each virtual computing instance located within the data center. In one embodiment, health monitoring modules, located within hypervisors of each host computer, collect health statistics on local virtual computing instances. Each health monitoring module shares its locally collected health statistics with every other health monitoring module. Each health monitoring module provides the shared health statistics, on all virtual computing instances within the data center, to a local load balancing module located within the hypervisor of each host computer. Each load balancing module uses health statistics of all virtual computing instances to load balance packets within the data center.

Abstract: There is provided a method for network address translation. The method is performed by a gateway. The method comprises acquiring an in-packet Bloom Filter (iBF) representation of a node. The method comprises embedding an indication of the iBF representation in an IP address, thereby enabling translation of the iBF representation of the node to an IP address of the node. There is also presented a gateway configured to perform such a method and a computer program comprising computer program code which, when run on a processing unit of the gateway, causes the processing unit to perform such a method.

Abstract: A method is provided in one example embodiment and includes creating a segment organization, which includes a configuration profile. The method also includes attaching the configuration profile to a server in the segment organization. The method further includes sending the attached configuration profile to a database in a physical network.

Abstract: Database revalidation may be provided by parallelized execution of distance-based groups. A change to a first data object of the plurality of data objects is received. The first data object has a plurality of dependent data objects in the plurality of data objects. A maximum dependency distance for the respective dependent data objects in the plurality of dependent data objects is calculated. The respective dependent data objects in the plurality of dependent data objects are grouped into one or more groups based on their respective maximum dependency distance. A given group of the one or more groups represents a given maximum dependency distance. The one or more groups are executed on in order from smallest to largest of their respective representations of maximum dependency distance. Executing on the one or more groups includes revalidating the data objects of a respective group in parallel.

Abstract: In a network including a controllable device, a method for sending a network management method to the controllable device including asserting a network management command directed to the controllable device and in response to the network management command generating and sending over the network a first number of WOL packets having a predetermined relationship to one another, followed by generating and sending over the network a second number of WOL packets, a predetermined relationship between the second number of WOL packets defining the network management command.

Abstract: An access control and device for enhancing the extendibility of access control mechanisms, thereby further facilitating the extendibility of access control methods and types for the diversified development of terminal types and service types. The access control method comprises: a user equipment (UE) determines an access control group set including access control target information; the UE determines the access control parameter corresponding to the access control group set; the UE performs access control according to the access control parameter.

Abstract: A wireless network may include a server, a network, a network access device and a plurality of nodes configured to communicate wirelessly. Messages may be communicated through the network wirelessly in an uncoordinated manner. Some nodes may be assigned a first priority indicating that the node has a higher priority than other nodes assigned a second priority. During a certain time period or window, referred to as a “quality of service window,” nodes assigned the first priority may continue transmitting in the uncoordinated manner, while nodes associated with the second priority may wait to transmit their messages until after the expiration of the quality of service window. Thus, during the quality of service window, there should be less congestion since nodes assigned the second priority remain quiet, thereby increasing the likelihood that messages transmitted by the nodes assigned the first priority will be successfully communicated.

Abstract: A method of transmitting a broadcast signal, includes generating at least one first link layer packet including data packets that include broadcast data in a link layer that is a layer between a physical layer and a network layer, generating at least one second link layer packet including link layer signaling information in the link layer and transmitting the broadcast signal including the at least one first link layer packet and the at least one second link layer packet in the physical layer, wherein a header of the at least one first link layer packet includes packet type information for indicating a packet type of the data packets before being included in the at least first link layer packet, wherein the data packets are Transport Stream (TS) packets or Internet Protocol (IP) packets, and wherein the TS packets are header compressed TS packets or header uncompressed TS packets.

Abstract: Aspects of the present invention provide an approach for providing network intrusion detection and prevention service (NIDPS) capabilities to a microservice in a networked computing environment. In an embodiment, a set of rules for accessing the microservice is retrieved. A NIDPS microservice is created within the environment of the microservice fabric that supports the microservice using the set of rules. The NIDPS microservice is established as a proxy communications destination for communications to the microservice such that communications that are intended for the microservice are instead rerouted to the NIDPS microservice. These communications are filtered by the NIDPS microservice according to the set of rules (e.g., to remove any communications that are determined to be threats).

Abstract: Problems associated with providing a large Clos network having at least one top of fabric (ToF) node, a plurality of internal nodes, and a plurality of leaf nodes may be solved by: (a) providing L2 tunnels between each of the leaf nodes of the Clos and one or more of the at least one ToF node to ensure a non-partitioned IGP L2 backbone, and (b) identifying the L2 tunnels as non-forwarding adjacencies in link state topology information stored in ToF node(s) and leaf node(s) such that the L2 tunnels are not used for forwarding traffic. In some example implementations consistent with the present disclosure, the L2 tunnels are not used to compute routes from the link state topology information. Alternatively, in some other example implementations consistent with the present disclosure, the L2 tunnels are used to compute routes, but such routes are not used, or only used if no routes using only L1 (or L1-down adjacencies) are available.

Abstract: A method for managing Internet Protocol Version 6 (IPv6) addresses in a wireless sensor network is provided that includes storing, on a wireless sensor device in the wireless sensor network, a prefix of an IPv6 address in association with a key, forming an address indicator for the IPv6 address, the address indicator consisting of the key and a node address of the IPv6 address, and storing the address indicator in at least one memory location on the wireless sensor device in lieu of the IPv6 address.

Abstract: A method for discovering an interface session within a wireless communication network is discussed herein. The method includes establishing an Internet Protocol (IP) packet-switched network registration between a first node of a plurality of nodes within the wireless communication network and a second node of the plurality of nodes. The method further includes, requesting, by a third node of the plurality of nodes from a fourth node of the plurality of nodes, service for a call of a mobile device within the wireless communication network. Based upon not having an appropriate interface session established between the first node and the fourth node, the method also includes performing, by the fourth node, an interface session discovery. Based at least in part on the interface session discovery, a dedicated bearer is established at the second node for the call.

Abstract: Facilitating enablement of intelligent service aware access utilizing multiaccess edge computing advanced networks (e.g., 5G, 6G, and beyond) is provided herein. Operations of a method can comprise determining a network service being utilized by a first user equipment device has not been instantiated at a distributed network device and based on the first user equipment device approaching a service range of the distributed network device. The method also can comprise deploying the network service, as a microservice, at the distributed network device prior to the first user equipment device entering the service range of the distributed network device. Further, the method can comprise removing the network service from being deployed at the distributed network device based on a determination that the first user equipment device is no longer within the service range of the distributed network device and a second user equipment device is not utilizing the network service.

Abstract: A provider edge device and a cloud controller are provided. The provider edge device receives route information associated with a virtual private cloud, and sends the route information to the cloud controller. In response to receiving the route information from the provider edge device, the cloud controller distributes the route information to one or more other provider edge devices of the cloud network of the service provider that includes the provider edge device.

Abstract: Systems and methods for implementing content, streaming, and network security inside a chip or inside a computing device are disclosed. In exemplary embodiments, a system comprises a communication chip and a second processor. The communication chip comprises a router and security instructions. The router is configured to intercept untrusted data between a network, and a first router. The second processor is configured to receive the untrusted data from the router, process the untrusted data with the security instructions to produce trusted data, and provide the trusted data to the router.

Abstract: An electronic device includes a processor that executes a guest operating system; a memory having a guest portion that is reserved for storing data and information to be accessed by the guest operating system; and an input-output memory management unit (IOMMU). The IOMMU performs operations for signaling an interrupt to the guest operating system. For these operations, the IOMMU acquires, from an entry in an interrupt remapping table associated with the guest operating system, a location in a virtual advanced programmable interrupt controller (APIC) backing page for the guest operating system in the guest portion of the memory. The IOMMU then writes information about the interrupt to the location in the virtual APIC backing page. The IOMMU next communicates an indication of the interrupt to the guest operating system.