Abstract: A novel method for performing replication of messages in a network that bridges one or more physical networks to an overlay logical network is provided. A physical gateway provides bridging between network nodes of a physical network and virtual machines in the overlay logical network by serving as an endpoint of the overlay logical network. The physical gateway does not replicate messages from the bridged physical network to destination endpoints in the overlay logical network directly, but instead tunnels the message-to-be-replicated to a designated tunnel endpoint in the overlay logical network. The designated tunnel endpoint in turn replicates the message that was tunneled to it to other endpoints in the overlay logical network.

Abstract: An object of the present disclosure is to make it possible to measure an IP flow corresponding to time-varying, high-speed traffic. The present disclosure is a device that monitors traffic in a network, the device comprising a memory that records, for each flow in the network, metadata and flow information to be used in measurement, wherein a traffic state is forecasted using a packet flowing in the network; and a recording area for the metadata and the flow information in the memory is set based on the forecasted traffic state.

Abstract: Systems, methods, and computer-readable media for requesting a cellular IP address by initiating a call with a modem, establishing data packet network connectivity with the cellular IP address, assigning the cellular IP address to a virtual L2-bridge interface, wherein the virtual L2-bridge interface includes a MAC address, mapping a MAC address of a virtual machine with the MAC address of the virtual L2-bridge interface, detecting a change in the cellular IP address, and updating the virtual L2-bridge interface with a different cellular IP address while maintaining the data packet network connectivity.

Abstract: Systems and methods for using InfiniBand routing algorithms for Ethernet fabrics in a high performance computing environment. The method can provide, at a computer comprising one or more microprocessors, a plurality of switches, a plurality of hosts, a topology provider (TP) module, a routing engine (RE) module, and a switch initializer (SI) module. The method can perform a discovery sweep, by the TP, of the plurality of hosts and the plurality of switches and assigns an address to each of the plurality of hosts and the plurality of switches. The method can calculate, by the routing engine, a routing map, based upon a routing scheme, for the plurality of hosts and the plurality of switches, the routing map comprising a plurality of forwarding tables. The method can configure, each of the plurality of switches with a forwarding table of the plurality of forwarding tables calculated by the routing engine.

Abstract: Methods and systems are provided for processing a received packet based on associated state information. A packet processor of a network device receives a packet from a network. The received packet is classified as belonging to at least one respective identified flow from among a plurality of identified flows. For a respective received packet that belongs to an identified flow a current state value for the identified flow is ascertained based on a state table. The current state value is assigned to the respective received packet based on the current state value using the state table for the identified flow. A packet processing operation is subsequently performed on the respective received packet based in part on the state value of the identified flow to which the respective packet belongs.

Abstract: Systems, methods, and computer-readable media relate to providing a network management service. A system is configured to request first network information from a first component of a network using a public IP address for the first component, wherein the first network information includes private IP addresses for a second component in the network and translate, based on a mapping information for a private IP address space to a public IP address space, the private IP address for a second component to a public IP address for the second component. The system is further configured to request second network information from the second component using the public IP address and provide a network management service for the network based on the second network information.

Abstract: Methods and systems of segmenting computing devices in a wireless network having an access point broadcasting in a single domain are described. In an exemplary method, a request to join the wireless network is received from a computing device. The request is associated with an identifier. When the identifier is not associated with a virtual network within the wireless network, a virtual network is configured within the wireless network and the identifier is associated thereto and the computing device is assigned thereto. When the identifier is associated with an existing virtual network within the wireless network, the computing device is assigned to the existing virtual network.

Abstract: A network device may receive policy data identifying a first segment routing (SR) policy and a second SR policy. The first SR policy may be associated with a first path through a network and a first next hop, and the second SR policy may be associated with a second path through the network and a second next hop. The network device may advertise, to another device, reachability associated with the first next hop and the second next hop, and may receive, from the other device, a packet with a header. The network device may determine, from the header, data identifying the first next hop or the second next hop, without performing a lookup, and may cause the packet to be routed to a destination address, via the first path or the second path, based on the policy data associated with the first next hop or the second next hop.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for receiving a packet from a client, the packet having header information including a destination Internet Protocol (IP) address, a destination port, a source IP address, and a source port, and wherein the source IP address and source port are associated with the client; selecting a destination virtual machine based on the destination port; modifying the packet by replacing the destination IP address in the header information with an IP address of the selected destination virtual machine; and sending the modified packet to the destination virtual machine.

Abstract: The present invention is directed to data communication systems and techniques thereof. In a specific embodiment, the present invention provides a network connector that includes an interface for connecting to a host. The interface includes a circuit for utilizing two data paths for the host. The circuit is configured to transform the host address to different addresses based on the data path being used. There are other embodiments as well.

Abstract: Examples are disclosed for systems and methods for supporting transmission of audio streams (e.g., streams of audio data or audio information) for different audio signals to different end-point devices. In one embodiment, a method comprises forming, with a Bluetooth® Classic or BR/EDR based master circuitry, a piconet with a plurality of Bluetooth® Classic or BR/EDR based slave circuitries through a respectively corresponding plurality of point-to-point wireless connections; and generating, from the master circuitry, a plurality of streams of packets respectively corresponding to the plurality of point-to-point wireless connections, wherein the plurality of streams of packets respectively correspond to a plurality of distinct transport identifiers; wherein the plurality of streams of packets carry audio data for different audio channels; and wherein the plurality of streams of packets are for BR/EDR transmission in compliance with revision 2.0 of the Bluetooth® core specification.

Abstract: Leaf nodes of a tree structure, also having a root node and intermediate nodes, communicate with endpoints via access networks and store mappings from permanent virtual IP (VIP) addresses for the endpoints to physical IP (PIP) addresses for the endpoints on the access networks. The root node and intermediate nodes store pointers for the endpoints' leaf nodes and associated access networks. When a connection setup request (CSR) for a destination endpoint is received from a corresponding node, the receiving leaf node passes the CSR up through the tree structure to a lowest common ancestor (LCA) node for the receiving leaf node and one or more destination leaf nodes associated with the destination endpoint. The LCA node uses its pointers to pass the CSR down towards the one or more destination leaf nodes, which use the corresponding VIP-to-PIP mappings to forward the CSR to the destination endpoint.

Abstract: A method and apparatus perform a first hash operation on a first key wherein the first hash operation is biased to map the first key and associated value to a set of frequently-accessed buckets in a hash table. An entry for the first key and associated value is stored in the set of frequently-accessed buckets. A second hash operation is performed on a second key wherein the second hash operation is biased to map the second key and associated value to a set of less frequently-accessed buckets in the hash table. An entry for the second key and associated value is stored in the set of less frequently-accessed buckets. The method and apparatus perform a hash table look up of the requested key in the set of frequently-accessed buckets, if the requested key is not found, then a hash table lookup is performed in the set of less frequently-accessed buckets.

Abstract: A method, computer program product, and computer system for splitting, by a computing device, a plurality of physical Ethernet ports into at least two logical devices, wherein the at least two logical devices may have different media access control (MAC) addresses. A first device of the at least two logical devices may be used in an independent mode. A second device of the at least two logical devices may be used as a slave interface. A selective bypass schema may be executed for traffic on the plurality of physical Ethernet ports.

Abstract: Routing of a traffic in a fabric network may be provided. A first traffic may be received at a first node. It may be determined that the first traffic is coming from a provider virtual network. In response to determining that the first traffic is coming from the provider virtual network, it may be determined that a first subnet associated with the first traffic is associated with a subscriber virtual network. In response to determining that the first subnet associated with the first traffic is associated with the subscriber virtual network, a first virtual network associated with the first traffic may be changed to the subscriber virtual network. A lookup for the first traffic may be changed to a first virtual routing and forwarding of the subscriber virtual network.

Abstract: A method includes determining a network connection path that passes through m reference network devices, where m?1, and the m reference network devices are located in a network domain and are coupled to a device outside the network domain, determining a device configuration requirement of a first network connection service for each of n reference network devices that the network connection path passes through, where m?n?1, and determining that the network connection path is one of paths of the first network connection service when the device configuration meets the device configuration requirement.

Abstract: An ROP attack protection apparatus constituted of: a first region of memory having stored therein a protection function, the first region of memory set as executable; and a second region of memory having stored thereon a plurality of operation functions, the second region of memory set as non-executable, wherein the protection function is arranged to: responsive to a call to one of the plurality of operation functions and further responsive to at least one predetermined rule, allow execution of the called operation function; and after receiving a return from the executed operation function, set the executed operation function as non-executable.

Abstract: A method of propagating data packets in a network of nodes is disclosed. The method, implemented at one of the nodes, includes: collecting a set of first data packets during a first time period, the set including at least one data packet received from one or more first nodes in the network; obtaining a plurality of encoded data packets, each one of the plurality of encoded data packets being generated by combining two or more first data packets of the set using network coding; determining a mapping of the plurality of encoded data packets and the first data packets of the set to one or more neighbouring nodes connected to the node; and transmitting the plurality of encoded data packets and the first data packets of the set to the one or more neighbouring nodes according to the determined mapping.

Abstract: The present disclosure relates to securing workloads of a network by identifying compromised elements in communication with the network and preventing their access to network resources. In one aspect, a method includes monitoring network traffic at network elements of a network; detecting a compromised element in communication with one or more of the network elements, the compromised element being associated with at least one network threat; and based on a defined network policy, applying one of a number of different access prevention schemes to the compromised element to prevent access to the network by the compromised element.

Abstract: In embodiments of systems and methods for managing acknowledgement packets in an uplink data packet stream including secure or encrypted data packets, a computing device may identify uplink acknowledgement (UL ACK) packets within the uplink data packet stream, and may accelerate processing of the identified UL ACK packets. In some embodiments, UL ACK packets may be identified based on whether packet lengths of packets meet a packet length threshold or meet a packet length range. In some embodiments, UL ACK packets may be identified based on information for identifying such packets receiving via a cross-layer application program interface (API). In some embodiments, UL ACK packets based whether packets include a specified differentiated services field codepoint (DSCP) in a packet header portion that is not encrypted.

Abstract: In cloud computing, for various reasons such as load-balancing, hotspot elimination, server consolidation, energy and cost savings, and system maintenance, there is a need to migrate a virtual sub-network of virtual entities from a source network of servers to a destination set of servers. Existing migration methods are limited to the migration of VM memory and controller states, where network entities are migrated individually. Embodiments of this disclosure include systems and methods for the stateful live migration of a multi-layer network, while maintaining live state convergence and consistency, and preventing network connection losses, packet disordering and packet drops.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided that improve data packet exchange between a UE in an inactive mode and a network. In certain configurations, the apparatus may receive, from a user equipment (UE) in an active mode, a first packet including a first identifier associated with an anchor base station, a second identifier associated with a UE context, and a payload. The apparatus may identify the anchor base station based at least in part on one or more of the first identifier associated with the anchor base station or the second identifier associated with the UE context. The apparatus may transmit a second packet to the anchor base station. The second packet may include at least a portion of the first packet.

Abstract: Systems and methods are provided for congestion notification in network communications, including multi-protocol label switching (MPLS) network communications. In one or more implementations, an MPLS node that receives a data packet and detects congestion may generate a cloned copy of the data packet, add congestion information, such as a congestion notification label and a congestion notification header, into the data packet, and forward the cloned copy with the congestion notification label and the congestion notification header to a next MPLS node. The next MLPS node may, responsive to receiving the cloned copy with the congestion information, provide one packet with the congestion information to a subsequent node, and another packet with the congestion information to the node from which the cloned copy was received.

Abstract: Residual data is obtained based on first and second representations of an image at a first level of quality. The second representation is based on a representation of the image at a second, lower level of quality. The residual data is useable by a decoder to reconstruct the first representation using the second representation. A configuration message comprising a header part and a payload part is generated and output for processing by the decoder. The payload part comprises obtained configuration data relating to processing of the residual data. The header part comprises: (i) a message type parameter specifying a configuration message type and indicating a given payload format of the payload part, a format size of a payload part having said payload format is predetermined or can be determined from the content of the payload part, and (ii) a payload size parameter specifying the actual size of the payload part.

Abstract: Techniques for using application network requirements and/or telemetry information from a first networking technology to enhance operation of a second networking technology and optimize wide area network traffic are described herein. The techniques may include establishing a communication network for use by applications of a scalable application service platform, the communication network including a first networking technology and a second networking technology. In this way, a request to establish a connection for use by an application may be received by the first networking technology. The request may include an indication of a threshold service level of the connection. In response to the request, the first networking technology may determine whether the second networking technology is capable of hosting the connection.

Abstract: A method may include orienting a set of solar power units in a first position in which rows of solar power units are shaded by adjacent rows of solar power units; and monitoring energy generated by the set of solar power units over a window of time, that includes from when the set of solar power units are oriented in the first position until a sun angle corresponds to none of the rows being shaded by the adjacent rows. The method may include identifying a knee in energy generation during the first window of time, where the knee indicates a transition from higher to lower rates of change of energy generation at a given solar angle. The method may include plotting a trajectory of future orientation positions over time of the set of solar power units that include an orientation and time corresponding to the given solar angle.

Abstract: A network interface controller (NIC) capable of performing message passing interface (MPI) list matching is provided. The NIC can include a host interface, a network interface, and a hardware list-processing engine (LPE). The host interface can couple the NIC to a host device. The network interface can couple the NIC to a network. During operation, the LPE can receive a match request and perform MPI list matching based on the received match request.

Abstract: The present disclosure provides a network packet transmission device and a network packet transmission method thereof. The network packet transmission method includes: receiving a network packet, wherein the network packet has at least one packet attribute; determining at least one destination VID for the network packet according to the at least one packet attribute; determining a transmission speed corresponding to the at least one destination VID based on at least one LAN speed table; and transmitting the network packet to a VLAN corresponding to the at least one destination VID according to the transmission speed.

Abstract: Various embodiments of the present application set forth a computer-implemented method that includes receiving, by a trusted tunnel bridge and from a first application executing in a first network, a first encrypted data packet, where the first encrypted data packet includes an encrypted portion of data, and a destination device identifier (DDI). The method further includes determining, by the trusted tunnel bridge, a particular device in a second network and associated with the DDI included in the first encrypted data packet. The method further includes sending, by the trusted tunnel bridge directly to the particular device, the first encrypted data packet.

Abstract: This disclosure describes techniques for diagnosing a presence or malfunction of a network node. In an example method, a first network node receives an indication of a diagnostic transmission originating from a second network node. The second network node further receives a forwarded transmission corresponding to the diagnostic transmission. The first network node diagnoses at least one of a presence or a malfunction of an intermediary node between the first network node and the second network node based on at least one of the indications of the diagnostic transmission or the forwarded transmission.

Abstract: A distributed resource may be mapped into a virtual network, where the resource is distributed across a large number of nodes that are uniquely addressable within the distributed resource service's address space. The resource can be represented using a relatively small number of private VIP addresses within the virtual network, while still enabling access to all of the nodes that are uniquely addressable within the address space of the distributed resource service. A resource map may be created that relates the distributed resource service's address space to the virtual network's address space. The resource map may be used by a gateway that facilitates access to a distributed resource by clients. The resource map may also be used to translate packets that are sent from clients within a virtual network into the distributed resource service's address space.

Abstract: This application provides a traffic classification method and apparatus. The method includes: determining, based on distribution characteristics of concerned bits of a plurality of rules in a first rule set, an effective bit corresponding to the first rule set; determining a hash key value of each rule based on a value of the effective bit of each rule in the first rule set, and storing each rule in the first rule set in at least one of S storage units based on the hash key value, where the first rule set is any one of N rule sets, the N rule sets are stored in the S storage units; and when traffic classification is performed, searching for a corresponding rule in each of the S storage units based on a hash key value of a search key.

Abstract: A method for transporting a Multi-Transport Network Context Identifier (MTNC-ID) over a Segment Routing Version 6 (SRV6) enabled data plane for fifth generation (5G) transport. The method includes setting an indicator in a flags field of a SRV6 header of a data packet that an MTNC-ID type-length-value (TLV) is included in a TLV field of the SRV6 header. The MTNC-ID TLV for the MTNC-ID is inserted in the TLV field of the SRV6 header of the data packet. The data packet with the SRV6 header containing the MTNC-ID is transmitted over the SRV6 enabled data plane to a next node along a forwarding path corresponding to the MTNC-ID.

Abstract: A method for packet transmission in a network includes receiving, by a first node, a second segment identifier sent by the third node, receiving, by the first node, a packet sent by the second node through the first path, determining, by the first node, that a next-hop node of the first node on the first path is faulty, and in response to the determining, by the first node, that a next-hop node of the first node on the first path is faulty, adding, by the first node, the second segment identifier to the packet, and sending the packet to the third node through a second path, where the second path is established by the first node based on the second segment identifier.

Abstract: Metadata indicating that a virtual traffic hub enabling connectivity between a plurality of isolated networks has been established is stored. A determination is made that a first entry of a first isolated network attached to the hub is to be represented in a second routing table of a second isolated network attached to the hub, e.g., to enable network packets originating at resources of the second isolated network to be transmitted via the hub to the first isolated network. A new entry corresponding to the first entry is included in the second routing table.

Abstract: In one embodiment, a Segment Routing network node provides efficiencies in processing and communicating Internet Protocol packets in a network. This Segment Routing node typically advertises (e.g., using Border Gateway Protocol) its Segment Routing processing capabilities, such as Penultimate Segment Pop (PSP) and/or Ultimate Segment Pop (USP) of a Segment Routing Header (including in the context of a packet that has multiple Segment Routing Headers). Subsequently, an Internet Protocol Segment Routing packet having multiple Segment Routing Headers is received. The packet is processed according to a Segment Routing function, with is processing including removing a first one of the Segment Routing Headers and forwarding the resultant Segment Routing packet. The value of the Segments Left field in the first Segment Routing Header identifies to perform PSP when the value is one, to perform USP when the value is zero, or to perform other processing.

Abstract: Example methods and systems to perform flow cache information update(s) for packet processing are described. In one example, a network element may configure flow cache information specifying a set of actions based on a sequence of stages that is executable during slow-path packet processing. The network element may configure dependency information specifying execution dependence or independence among the set of actions during fast-path packet processing. In response to detecting a configuration change associated with stage(s) from the sequence of stages, the network element may identify first action(s) affected by the configuration change and second action(s) not affected by the configuration change. This way, a granular update may be performed to the flow cache information by updating the at least one first action, but not the at least one second action.

Abstract: In some examples, high-speed hardware-based traffic analyzer integration with speed test control application may include receiving, from a speed test control application, speed test control instructions and data connection instructions to perform an upload and download high-speed test associated with network traffic for a network. The speed test control instructions and the data connection instructions may be forwarded to a speed test control server. A hardware-based traffic analyzer may perform, based on the speed test control instructions and the data connection instructions, the high-speed test associated with the network traffic for the network.

Abstract: In association with a virtual area, a first network connection is established with a first network node present in the virtual area and a second network connection is established with a second network node present in the virtual area. Based on stream routing instructions, a stream router is created between the first network node and the second network node. The stream router includes a directed graph of processing elements operable to receive network data, process the received network data, and output the processed network data. On the first network connection, an input data stream derived from output data generated by the first network node is received in association with the virtual area. The input data stream is processed through the stream router to produce an output data stream. On the second network connection, the output data stream is sent to the second network node.

Abstract: One embodiment of the invention is directed to a computer-implemented method comprising, receiving a first request that includes a token associated with a first computing device to utilize a shared resource implemented by a federated network of computing devices. The method further comprises identifying that the first computing device is an unknown entity based in part on the token and one or more signature used to sign the token. The method further comprises transmitting, to a trust management system, a second request to authenticate the first computing device using the token. The method further comprises, receiving an authentication message that verifies the first computing device within an open trust network. The authentication message may be generated in response to the trust management system communicating with a plurality of registrar computers in the open trust network about the signatures associated with the token.

Abstract: A network device includes a memory and a processor. The processor implements at least one classifier to provide classification for tunneled IPinIP traffic based on classification parameters provided by Internet Protocol Version 6 (IPv6) classification encoding, Internet Protocol Version 4 (IPv4) classification encoding, and Transport Control Protocol/User Datagram Protocol (TCP/UDP) classification encodings, wherein one of the IPv6 classification encoding and the IPv4 classification encoding is provided by extension information to provide extended classification capabilities. The processor uses the at least one classifier to compare the classification parameters provided by the IPv6 classification encoding, the IPv4 classification encoding, and the TCP/UDP classification encodings to fields in an IPv6 header, an IPv4 header, and a TCP/UDP header of the IPinIP packet. Based on the comparison, the processor maps the IPinIP packet to a service flow identified by the classification parameters.

Abstract: A peripheral device may implement storage virtualization for non-volatile storage devices connected to the peripheral device. A host system connected to the peripheral device may host one or multiple virtual machines. The peripheral device may implement different virtual interfaces for the virtual machines or the host system that present a storage partition at a non-volatile storage device to the virtual machine or host system for storage. Access requests from the virtual machines or host system are directed to the respective virtual interface at the peripheral device. The peripheral device may perform data encryption or decryption, or may perform throttling of access requests. The peripheral device may generate and send physical access requests to perform the access requests received via the virtual interfaces to the non-volatile storage devices. Completion of the access requests may be indicated to the virtual machines via the virtual interfaces.

Abstract: Methods and systems for improving the robustness of wireless communications. The methods and systems provided transmit data packets over a first isochronous stream and transmit one or more supplemental data packets over the same time intervals. The one or more supplemental data packets are used to re-create and/or enhance at least a portion of one or more data packets of the plurality of data packets that have already been sent. Alternatively, the one or more supplemental data packets are used to create and/or enhance at least a portion of one or more data packets of the plurality of data packets that will be received during the next isochronous intervals. The methods and system described herein allow for increased robustness by allowing for better retransmission with correctly received packets and the methods set forth herein work with any Bluetooth broadcaster sink without modification.

Abstract: A data transmission method for to a data center including a first site and a second site is disclosed. According to the data transmission method, after obtaining a first data packet sent by a virtual machine at the first site, a switch at the first site identifies a service type of the first data packet, and determines routing information of the first data packet based on the service type of the first data packet; and after determining the routing information, the switch sends the first data packet based on the routing information, where the routing information is used to indicate a bearer link for transmitting the first data packet, and a link through which the first data packet is transmitted to the second site is the bearer link. In this way, the first data packet may be transmitted through a link that corresponds to the service type of the first data packet.

Abstract: In one embodiment, a method by an apparatus of a Border Gateway Protocol (BGP) network includes accessing an attestation token for the apparatus. The method further includes encoding the attestation token in a BGP signaling message. The method further includes sending the BGP signaling message with the encoded attestation token to a second apparatus of the BGP network.

Abstract: Nodes within a network are configured to adapt to changing path states, due to congestion, node failures, and/or other factors. A node may selectively convey path information and/or other state information to another node by annotating the information into packets it receives from the other node. A node may selectively reflect these annotated packets back to the other node, or other nodes that subsequently receive these annotated packets may reflect them. A weighted cost multipathing selection technique is improved by dynamically adjusting weights of paths in response to feedback indicating the current state of the network topology, such as collected through these reflected packets. In an embodiment, certain packets that would have been dropped may instead be transformed into “special visibility” packets that may be stored and/or sent for analysis. In an embodiment, insight into the performance of a network device is enhanced through the use of programmable visibility engines.

Abstract: Systems and techniques are provided for obscured routing. A computing device may send stacks of identifiers to neighbor computing devices in a network. Each stack of identifiers may include a unique identifier for the neighbor computing device to which it is sent. The computing device may send a notification identifying a destination computing device to the neighbor computing devices. The computing device may receive stacks of identifiers from the neighbor computing devices. The received stacks of identifiers may include completed routes to the destination computing device. Each completed route may be specified by unique identifiers added to the stack of identifiers by computing devices in the network. A unique identifier in each stack of identifiers may not be resolvable to an address by the computing device. The computing device may send a message a neighbor computing device based on a unique identifier in a chosen stack of identifiers.

Abstract: A vehicle includes at least one output device; an input device configured to receive at least one in-vehicle input from a user; a communication device configured to receive an operation authentication message including an operation request message, an encryption key, and priority setting information from an external server; and a controller configured to generate a new operation request signal corresponding to the operation request message when the encryption key is identical to an encryption key of the vehicle stored in advance, determine priority between the new operation request signal and at least one existing operation request signal corresponding to the at least one in-vehicle input based on the priority setting information, and control an output device corresponding to a target operation to perform the target operation based on the priority.

Abstract: In some examples, a system arranges data in a plurality of nodes in a tree structure, where a given node of the plurality of nodes is associated with a probabilistic data structure that provides a probabilistic indication of whether data is present in the given node. The system determines, for reads of the given node, a false positive measure of false positives indicated by the probabilistic data structure, and prioritizes a compaction of the given node based on the determined false positive measure.

Abstract: Various example embodiments for supporting scalability of label switched paths (LSPs) in a label switching network are presented herein. Various example embodiments for supporting scalability of LSPs in a label switching network may be configured to support scalability of LSPs in a Multiprotocol Label Switching (MPLS) network. Various example embodiments for supporting scalability of LSPs in an MPLS network may be configured to support scalability of LSPs of various FEC types. Various example embodiments for supporting scalability of LSPs in an MPLS network may be configured to support scalability of Prefix FEC based LSPs spanning across multiple routing domains. Various example embodiments for supporting scalability of LSPs in an MPLS network may be configured to support scalability of LSPs for various FEC types that enable aggregation of ranges of FECs by aggregate FECs.