Abstract: Provided is that detection of a start byte of an access unit of media data can be performed fast and easily from a layer of a transmission packet. A transmission stream is transmitted in which a transmission packet is contiguously arranged having a multiplexed transport packet including the media data in an upper layer. Identification information is inserted for identifying whether or not a start byte of an access unit of the media data exists in the transmission packet, into the header of the transmission packet.

Abstract: An intelligent network address translation system and methods for intelligent network address translation. In one embodiment, a network packet is received from a host device, and a stored record associated with the host device is identified. The stored record includes information relating to connection parameters associated with the host device. Using the stored record, a processor determines whether the network packet should be assigned a dedicated address. If so, then the network packet is transmitted using communication parameters including a dedicated IP address. If the packet should not be assigned a dedicated address, then the packet is transmitted using connection parameters including a default public IP address and a port number.

Abstract: Systems and methods presented herein provide for a software defined network (SDN) controller in a cable television system that virtualizes network elements in the cable television system to provide content delivery and data services through the virtualized network elements. In one embodiment, the SDN controller is operable in a cloud computing environment to balance data traffic through the virtualized network elements. For example, the SDN controller may abstract Layer 2 Control Protocol (L2CP) frame processing of the network elements into the cloud computing environment to relieve the network elements from the burdens of Ethernet frame processing. In this regard, the SDN controller comprises a L2CP decision module that determines how L2CP should be processed for the network elements in the cable television system.

Abstract: A signaling attack prevention method and apparatus, where the method includes receiving a general packet radio service (GPRS) Tunneling Protocol (GTP-C) message from a serving gateway (SGW), determining whether the GTP-C message is received from an eighth data interface (S8), determining whether a first characteristic parameter of the GTP-C message is valid when the GTP-C message is received from the S8 interface, where the first characteristic parameter includes at least one of an international mobile subscriber identity (IMSI) of a user, or an identifier of a message source end of the GTP-C message, and discarding the GTP-C message or returning, to the SGW, a GTP-C response message carrying an error code cause value when the first characteristic parameter of the GTP-C message is invalid.

Abstract: A system and method for management of communications for components in a global accelerator system is provided. The global accelerator system includes client devices communicating with a global access point via a public network to access various endpoints that can host services. In turn, a global access point communicates to various endpoints, which are organized into different data centers, via a private network. To facilitate exchanges on behalf of different client devices, the global access points can characterize groupings of endpoints into subgroups or braids. Individual braid communications can be encapsulated and are routed at the data center by a networking equipment using 5-tuple information in packets. The components within individual braids can broadcast or multi-cast state information via management messages to ensure failover or mitigate duplicative processing.

Abstract: Techniques are disclosed for scalable virtualization of tenants and subtenants on a virtualized computing infrastructure. In one example, a first controller for the virtualized computing infrastructure configures underlay network segments in the virtualized computing infrastructure by configuring respective Virtual Extensible Local Area Network (VXLAN) segments of a plurality of VXLAN segments of a VXLAN in a switch fabric comprising network switches. Each VXLAN segment provides underlay network connectivity among a different subset of host computing devices of the virtualized computing infrastructure to enable orchestration of multiple tenants in the VXLAN. A second controller for a first subset of the host computing devices has underlay network connectivity through operation of a first VXLAN segment. The second controller configures overlay networks in the first subset of the host computing devices to enable orchestration of multiple subtenants in the first subset of the host computing devices.

Abstract: A CT imaging system for imaging an object is provided. The CT imaging system includes a stationary component, a rotating component configured to rotate with respect to the stationary component, a first conductive line coupled to the stationary component, and a second conductive line coupled to the rotating component, wherein the first and second conductive lines are positioned proximate one another such that inductive crosstalk between the first and second conductive lines provides a contactless communication channel for communicating data between the stationary component and the rotating component.

Abstract: Aspects of the present invention provide an approach for improving communications between a software-defined networking (SDN) controller and a hardware gateway in a SDN. In an embodiment, a SDN proxy gateway is installed. The SDN proxy gateway communicates with the SDN controller on behalf of the hardware gateway. To accomplish this, the SDN proxy gateway processes a communication sent from the SDN controller to the hardware gateway. This communication includes a request from a computing node to establish a network communication channel. The SDN proxy gateway translates these instructions (e.g., the logical network and endpoint information), which are in the native format of the SDN controller, into a standardized hardware gateway protocol. The translated information that the hardware gateway can use to establish the network connection is then pushed to the hardware gateway by the proxy gateway.

Abstract: A firewall is described that is integrated in an input stage of a packet processing pipeline so that it recognizes and has access to internal information regarding the different services, such as conduit, intranet, Internet, local vs WAN, applications, and security zones, of a communication network, such as an adaptive private network (APN). The integrated firewall is able to dynamically access the service type, respond to the service type, and adjust the service type based on conditions in the network. Since application awareness and security functions are integrated, customers can set security policies on software applications. The integrated firewall also provides automatic detection of applications, classifies applications based on domain names, steers traffic to services according to software applications, reports on software applications in passthrough traffic, and provides analysis of traffic that does not match a software application so that a user can investigate and define custom applications.

Abstract: A Network Address Translation (NAT) method, apparatus and device are provided. Based on the method, a target IP address and its reference port are obtained from a NAT resource pool, wherein the reference port is a port in a consecutive port range of the target IP address; a first five-tuple corresponding to a packet is generated based on the target IP address, the reference port and an original five-tuple of the packet, and a second five-tuple is obtained by masking first-class bits of two classes of ports of the first five-tuple respectively; a target five-tuple is determined in a plurality of consecutive hash buckets of a hash table based on a hash result of the second five-tuple; and the target five-tuple and the original five-tuple are recorded in the hash table and a corresponding result table, and the packet is NAT-processed based on the target five-tuple.

Abstract: Examples relate to organizing and storing network communications. In one example, a programmable hardware processor may: receive a first set of network packets; identify, for each network packet included in the first set, a network flow, each network flow including at least one related packet; store each network packet included in a subset of the first set in a first data storage device; for each network packet included in the subset, organize the network packet according to the network flow identified for the network packet; identify, from the network flows, a set of network flows that each have at least one characteristic of interest; and store, in a second data storage device, each network packet included in each network flow of the set of network flows.

Abstract: A method is executed by a network device implementing a control-client to configure a session- sender to perform a test to determine whether differentiated services code point (DSCP) and explicit congestion notification (ECN) are modified in a single test session in a forward direction and a reverse direction between the session-sender and a session-reflector. Multiple DSCP and ECN are tested using the single test session. The method includes receiving a server greeting message from a server including characteristics of the session-reflector, determining whether the session-reflector supports use of multiple DSCP in the single test session, setting a set-up- response message to indicate DSCP and ECN testing, and determining whether the session- reflector supports DSCP and ECN monitoring.

Abstract: This application provides a pseudo wire load sharing method and apparatus, applied to a scenario in which a first provider edge PE device is separately connected to at least one second PE device by using at least two PWs. The method comprises receiving, by the first PE device, a data flow from a customer edge CE device, and forwarding the data flow to a PW trunk interface, where the PW trunk interface is associated with at least two active PWs; and performing, by the first PE device, load sharing processing on the data flow, and forwarding the data flow by using the at least two active PWs. This is beneficial to transmission of large data traffic by using the PW.

Abstract: A method of analyzing protocol message sequence communicated over a network, involves receiving one or more protocol messages associated with a real-time communication session between a first network node and a second network node in the network. A set of packet attributes corresponding to the one or more protocol messages associated with the real-time communication session may be extracted. Each one of the set of packet attributes may be compared with a plurality of baseline attributes. At least one error condition in at least one protocol message received from the first network node may be determined based on the comparison. A corrective measure on the first network node may be performed based on the at least one error condition in the at least one protocol message received from the first network node.

Abstract: A computer system receives digital content for communication to a user. Digital fingerprints are calculated from the digital content. The fingerprints are compared to identify redundant digital content. Digital identifications associated with the digital fingerprints are communicated to a user device to determine whether the digital content exists in local storage.

Abstract: Some embodiments provide a method for a network forwarding integrated circuit (IC). The method receives packet data with an instruction to copy a portion of the packet data to a temporary storage of the network forwarding IC. The portion is larger than a maximum entry size of the temporary storage. The method generates a header for each of multiple packet data sections for storage in entries of the temporary storage, with each packet data section including a sub-portion of the packet data portion. The method sends the packet data sections with the generated headers to the temporary storage for storage in multiple separate temporary storage entries.

Abstract: By deploying a user-side translator at the access point of the user terminal with a first-type Internet, deploying a plurality of core translators between multiple uplink lines of the first-type Internet and a second-type Internet, and allowing the user to select a corresponding core translator to process message according to the usage state of the uplink line, the traffic scheduling and processing method, the user-side translator, the core translator and the traffic scheduling system provided by the embodiments of the present application allow the user to dynamically adjust the use of uplink lines. The solution is capable of achieving the function of software-defined wide area network SD-WAN with the first-type Internet protocol/second-type Internet protocol translation technology, which is of great significance for reducing the network running cost and improving the network performance experience of the user.

Abstract: A device may receive first information associated with a set of security rules. The first information may identify a set of security actions a device is to implement when the set of security rules applies to traffic. The device may determine a manner in which the set of security rules is to apply using the first information. The device may determine whether the manner in which the set of security rules is to apply and an intent of a network security policy or a manner in which a set of previously defined security rules is to apply match to determine whether the set of security rules conflicts with the network security policy or whether the set of security rules and the set of previously defined security rules are related. The device may perform an action.

Abstract: Methods, systems, and computer programs for generating cryptographic function parameters are described. In some examples, source code that defines seed information and a pseudorandom function is accessed. A parameter for a cryptographic function by operation of one or more data processors is generated. The parameter is generated from the seed information and the pseudorandom function. The parameter has a larger size in memory than the source code that defines the seed information and the pseudorandom function.

Abstract: Method and apparatus for per-agent control and quality of service of shared resources in a chip multiprocessor platform is described herein. One embodiment of a system includes: a plurality of core and non-core requestors of shared resources, the shared resources to be provided by one or more resource providers, each of the plurality of core and non-core requestors to be associated with a resource-monitoring tag and a resource-control tag; a mapping table to store the resource monitoring and control tags associated with each non-core requestor; and a tagging circuitry to receive a resource request sent from a non-core requestor to a resource provider, the tagging circuitry to responsively modify the resource request to include the resource-monitoring and resource-control tags associated with the non-core requestor in accordance to the mapping table and send the modified resource request to the resource provider.

Abstract: Aspects of the subject matter described in this disclosure can be implemented in electronic medical devices, wireless gateway devices, and remote database systems in a network environment where wireless connections are made between at least an electronic device and a wireless gateway device, and between the wireless gateway device or an access point and a remote database system. The electronic medical device, the wireless gateway device, or the remote database system may be configured to identify a data communication loss based on at least a mismatch of a confirmation acknowledgement attribute between two or more nodes in the network environment. Upon identifying the data communication loss, a notification can be provided to an entity such as a user so that data communication can be restored.

Abstract: In accordance with various implementations, a method is performed at a data plane node with one or more processors, non-transitory memory, and a control interface between a network function module associated with the data plane node and a switch associated with the data plane node. The method includes determining whether an offload capability is available for a data flow received at an ingress network interface of the data plane node. The method also includes determining whether the data flow satisfies offload criteria in response to determining that the offload capability is available. The method includes bypassing the network function module associated with the data plane node and providing the data flow to at least one of the switch associated with the data plane node or an egress network interface associated with the data plane node in response to determining the offload capability is available and the offload criteria is satisfied.

Abstract: Methods, systems, and computer programs are presented for distributing Ethernet packets at a Field Programmable Gate Array (FPGA). One programmable integrated circuit includes: an iNOC comprising iNOC rows and iNOC columns; a set of clusters coupled to the iNOC, each cluster comprising a vertical network access point (NAP) for iNOC column communications, a horizontal NAP for iNOC row communications, a valid signal, and programmable logic, where the vertical NAP is connected to the horizontal NAP when the valid signal is activated; and an Ethernet controller coupled to the iNOC, the Ethernet controller configurable to send Ethernet-packet segments to the vertical NAPs.

Abstract: A method, a computer program product and a computer system are provided. Attribute value information contains at least a minimum value representing a smallest value of a first attribute and a maximum value representing a largest value of the first attribute, thereby defining a first range of values of the first attribute. A received query against a data table requests one or more values of at least the first attribute that are covered by the first range of values. The attribute value information may be used for selecting a data block of the data table as a candidate potentially including at least part of the requested one or more values and scanning the data block. In response to determining that the data block does not include the one or more requested values, the attribute value information may be updated accordingly.

Abstract: Systems and techniques are described for ensuring that policies are consistently applied to traffic across an overlay network. An application identifier associated with a forward traffic flow and a corresponding reverse traffic flow can be determined by a device that routes packets of both the forward traffic flow and the corresponding reverse traffic flow. Next, an overlay header can be added to each packet in the forward traffic flow and to each packet in the corresponding reverse traffic flow, wherein the overlay header comprises the application identifier, a policy identifier, and a policy action. Each device in the overlay network can then apply the policy action specified in the overlay header of each packet that it routes.

Abstract: In one aspect, a computerized method includes the step of providing process monitor in a Gateway. The method includes the step of, with the process monitor, launching a Gateway. Daemon (GWD). The GWD runs a GWD process that implements a Network Address Translation (NAT) process. The NAT process includes receiving a set of data packets from one or more Edge devices and forwarding the set of data packets to a public Internet. The method includes the step of receiving another set of data packets from the public Internet and forwarding the other set of data packets to the one or more Edge devices. The method includes the step of launching a Network Address Translation daemon (NATD). The method includes the step of detecting that the GWD process is interrupted; moving the NAT process to the NATD.

Abstract: A packet processing method, including receiving a first packet from a first switch, where the first packet belongs to a service flow that flows from a first device to a second device, determining a service chain through which the service flow passes, determining a forwarding path of the service flow according to the service chain through which the service flow passes, modifying the first packet to obtain a second packet, where the second packet belongs to the service flow, and a valid payload of the second packet includes a valid payload of the first packet and forwarding path indication information, generating a first flow table according to the forwarding path of the service flow, controlling a communications interface to send the first flow table to the first switch, and sending the second packet to the first switch.

Abstract: A method for performing power saving control in memory device, the associated memory device and memory controller thereof, and the associated electronic device are provided, where the method is applicable to the memory controller, and the memory device includes the memory controller and a non-volatile (NV) memory. The method may include: during transmitting to a host device, sending end of burst (EOB)-related symbols to the host device, in order to notify the host device of EOB; controlling a physical layer (PHY) circuit to turn off a clock source within the PHY circuit, in order to save power, wherein the PHY circuit is positioned in a transmission interface circuit within the memory controller, and the transmission interface circuit is arranged to perform communications with the host device for the memory device; and when receiving a trigger signal from the host device, utilizing the PHY circuit to turn on the clock source.

Abstract: A method to be carried out by an interface element (IE, 510) between a VNF pool (508) and a control entity (520) is disclosed. The VNF pool (508) comprises a plurality of VNF instances (502) including at least a first and second instances. The control entity (520) is configured to control the VNF instances (502) of the pool (508). The method enables the IE (510) to assist in replicating a state of the first VNF instance on the second VNF instance. The method includes steps of obtaining a control message provided from the control entity (520) to the first VNF instance (502), providing the obtained control message at least to the first and to the second VNF instances (502), and providing an acknowledgement of the control message to the control entity (520) when the interface element (510) has an acknowledgement, either explicit or implicit, of both the control message provided to the first VNF instance (502) and the control message provided to the second VNF instance (502).

Abstract: The invention relates to methods, a wireless communication device and a network node for enabling establishment of at least one Packet Data Network (PDN) connection between a wireless communication device and a communication network. In a first aspect of the invention, a method performed by a wireless communication device of enabling establishment of at least one Packet Data Network (PDN) connection—with a communication network is provided. The method comprises submitting, to a node of the communication network, a request to establish the PDN connection, the request being configured to comprise an indication that the request pertains to establishing a PDN connection for transporting Information Centric Networking (ICN) data.

Abstract: Distributed machine learning systems and other distributed computing systems are improved by embedding compute logic at the network switch level to perform collective actions, such as reduction operations, on gradients or other data processed by the nodes of the system. The switch is configured to recognize data units that carry data associated with a collective action that needs to be performed by the distributed system, referred to herein as “compute data,” and process that data using a compute subsystem within the switch. The compute subsystem includes a compute engine that is configured to perform various operations on the compute data, such as “reduction” operations, and forward the results back to the compute nodes. The reduction operations may include, for instance, summation, averaging, bitwise operations, and so forth. In this manner, the network switch may take over some or all of the processing of the distributed system during the collective phase.

Abstract: A network system that includes a first set of network hosts in a first domain and a second set of network hosts in a second domain. Within each of the domains, the system includes several edge switching elements (SEs) that each couple to the network hosts and forward network data to and from the set of network hosts. Within the first domain, the system includes (i) an interior SE that couples to a particular edge SE in order to receive network data for forwarding from the edge SE when the edge SE does not recognize a destination location of the network data and (ii) an interconnection SE that couples to the interior SE, the edge SE, and the second domain through an external network. When the edge SE receives network data with a destination address in the second domain, it forwards the network data directly to the interconnection SE.

Abstract: Certain embodiments disclose a method for use in a first network node. The method comprises establishing a first Stream Control Transmission Protocol (SCTP) association and a second SCTP association for an S1 Application Protocol (S1AP) connection between the first network node and a second network node.

Abstract: A communication device of an industrial automation system and method for configuring the communication device, wherein a communication network address assigned to the communication device is independently generated from at least one prefix communicated via router advertisement messages by at least one router assigned within a subnetwork and from a device-specific interface identifier, where the communication device interrogates at at least one server of a name service system, in accordance with a name resolution protocol, which communication network addresses are assigned to its communication device name, the communication network addresses interrogated at the at least one server of the name service system are checked with regard to correspondence to the prefix, and where the communication device assigns to itself only those communication network addresses interrogated at the server of the name service system which have a correspondence to the prefix communicated by the router.

Abstract: Some embodiments of the invention provide a data-plane forwarding circuit (data plane) that can be configured to identify large data message flows that it processes for forwarding in a network. In this document, large data message flows are referred to as heavy hitter flows. To perform its forwarding operations, the data plane includes several data message processing stages that are configured to process the data tuples associated with the data messages received by the data plane. In some embodiments, parts of the data plane message-processing stages are also configured to implement a heavy hitter detection (HHD) circuit. The operations of the data plane's message processing stages are configured by a control plane of the data plane's forwarding element in some embodiments.

Abstract: Methods and apparatuses relating to a hashing accelerator having a frequency scaled message scheduler data path circuit are described.

Abstract: According to an example embodiment, a technique for operating a virtual private network (VPN) service in a multi-tenant data center is provided, the technique comprising operating, in the data center, a multi-tenant VPN server to relay data packets between a VPN tunnel that connects the multi-tenant VPN server to a remote network of a tenant and an overlay network service that implements the VPN for said tenant within the data center, wherein the data packets between the multi-tenant VPN server and the overlay network service are carried in a virtual local area network, VLAN, assigned for said tenant, and wherein the multi-tenant VPN server stores a multi-tenant forwarding table that stores a mapping between a tenant and a VLAN assigned for the tenant for a plurality of tenants.

Abstract: Examples of techniques for media access control (MAC) address learning are disclosed. In one example implementation according to aspects of the present disclosure, a computer-implemented method may include: receiving, by a processing device, a packet; determining, by the processing device, a packet type of the packet; and responsive to determining that the packet is a MAC learning packet type, updating, by the processing device, a MAC address table based on MAC address information associated with the packet.

Abstract: In one illustrative example, an interface between a user plane function (UPF) instance of a mobile network and a tunnel router endpoint of an enterprise software-defined wide area network (SD-WAN) fabric is provided. The UPF instance may be part of a network slice that is (uniquely) associated with an enterprise of the enterprise SD-WAN. A plurality of mappings between policies associated with different QoS flows via the UPF instance and SD-WAN policies associated with different virtual private networks (VPNs) of the SD-WAN fabric may be maintained. Each VPN of the SD-WAN fabric may be associated with a different underlying transport mechanism that satisfies characteristics of a specific SD-WAN policy. Communications for user equipment (UE) in the mobile network may be facilitated across the SD-WAN fabric based on the policy mappings.

Abstract: The present invention provides apparatuses, methods, computer programs, computer program products and computer-readable media regarding Ultra High-Speed Mobile Network based on Layer-2 Switching. Certain aspects of the present invention include receiving, at a first gateway, a data packet from a first host served by the first gateway destined to a second host served by a second gateway, the data packet having a header comprising a layer 3 destination address of the second host and a broadcast layer 2 destination address, searching, by the first gateway, a flow table stored in the first gateway for an identity of the second gateway associated with the broadcast layer 2 destination address, if the identity is found in the flow table, replacing the broadcast layer 2 destination address with the identity of the second gateway serving the second host, and transmitting the data packet to the second gateway.

Abstract: In an embodiment, a method for a VRF and multi-service insertion on edge gateways is described. In an embodiment, the method comprises: detecting a packet; determining attributes for the packet; based on the attributes, determining whether the attributes match one or more rule attributes of a particular rule in a rule table; in response to determining that the attributes match the one or more rule attributes of a particular rule in the rule table: determining, based on the particular rule, a particular redirection identifier, a particular VRF identifier, a particular next_hop, a particular address pair, and a particular BFD status; based on the particular BFD status, determining whether to redirect the packet; and in response to determining to redirect the packet, redirecting the packet toward a service virtual machine from an interface indicated by one of addresses in the particular address pair.

Abstract: A method for implementing load balancing, an apparatus, and a network system, where a controller obtains a port attribute of each port of a first switch in a mesh network, determines, according to the port attribute of each port of the first switch, a virtual routing and forwarding instance corresponding to each port of the first switch, where all user-side ports of the first switch correspond to a first virtual routing and forwarding instance, generates a forwarding table of the first switch according to a topology of the mesh network and the virtual routing and forwarding instance corresponding to each port of the first switch, where a first forwarding entry of the forwarding table includes the first virtual routing and forwarding instance, a destination network segment and at least two forwarding paths corresponding to the destination network segment, and sends the forwarding table to the first switch.

Abstract: Systems and methods are described to enable the load-balanced use of globalized network addresses, addressable throughout a network to access a network-accessible service. A set of global access points are provided, which advertise availability of the globalized network addresses. On receiving a request to access a network-accessible service, a global access point can select an endpoint for the service from among a number of data centers, based on a desired distribution of traffic among the data centers. The access point then forwards the traffic to the selected endpoint. In one embodiment, the access point applies network address translation to enable the traffic to be routed to the endpoint without terminating a connection at the endpoint. The access point may use a variety of techniques to ensure resiliency of the network and knowledge of available endpoints.

Abstract: A method for determining a mapping address of a data stream includes: receiving a newly created current data stream, and recording a configuration identifier and a route identifier of the current data stream; querying, according to source information of the current data stream, a historical data stream that matches the current data stream, where the source information includes at least a source transport protocol, a source address, and a source port, and the historical data stream includes a target mapping address; and comparing the configuration identifier and the route identifier of the current data stream with a configuration identifier and a route identifier of the historical data stream, and determining, according to a comparison result, whether the current data stream continues to use the target mapping address of the historical data stream.

Abstract: A first VXLAN tunnel is established between a gateway device and an aggregation switch which corresponds to a BRAS group including several BRAS network elements. A second VXLAN tunnel is established between the gateway device and each of the BRAS network elements. In an example, when receiving a first VXLAN packet from the aggregation switch through the first VXLAN tunnel, the gateway device may acquire a first user packet by de-encapsulating the first packet and forward an encapsulated first user packet to the BRAS network element through the second VXLAN tunnel by VXLAN encapsulating the first user packet. In turn, the gateway device may receive a second VXLAN packet from the BRAS network element through the second VXLAN tunnel and forward a corresponding encapsulated second user packet to the aggregation switch through the first VXLAN tunnel.

Abstract: Methods, systems, and computer readable media for computing label-switched data communication paths are disclosed. An example method includes receiving, by a path computation element (PCE) implemented on at least one processor, synchronization status information for routing nodes in a label-switched network. The method includes receiving, by the PCE, a request for a label-switched path (LSP) from a client. The method includes determining, by the PCE, a responsive LSP based at least in part on the synchronization status information. The method includes sending, by the PCE, an explicit route object (ERO) for the responsive LSP to the client.

Abstract: In one embodiment, segment routing network processing of packets is performed on segment routing packets to use engineered segment routing reverse reply paths which provide efficiencies in communicating packets in a network. In one embodiment, a source node selects a segment identifier of a destination node, with the segment identifier specifying a function value of a dynamic return path segment routing function in order to invoke this function on the destination node. The source node then sends a segment routing packet to the destination address of this segment identifier. Reacting to receipt of this packet and the function value of the dynamic return path segment routing function in the destination address or current segment identifier of the packet, a receiving node generates a responding segment routing packet including the segment identifiers from the received packet in reverse traversal order.

Abstract: An Auto Configuration Server is coupled via at least one Load Balancer in a broadband network to at least one device, including at least one gateway device, in at least one home network. The Auto configuration Server remotely manages the devices by using the CPE WAN Management Protocol CWMP on top of the Hypertext Transfer Protocol http.

Abstract: A method and system for propagating network traffic flows between end points based on service and priority policies. Specifically, the method and system disclosed herein entail configuring network elements with network-disseminated traffic management policies. Each traffic management policy guides the handling of a network traffic flow between origination and termination end points (i.e., source and destination hosts), which may be defined through data link layer, network layer, and/or transport layer header information, as well as group assignment information, associated with the source and destination hosts.

Abstract: A computer system receives digital content for communication to a user. Digital fingerprints are calculated from the digital content. The fingerprints are compared to identify redundant digital content. Digital identifications associated with the digital fingerprints are communicated to a user device to determine whether the digital content exists in local storage.