Abstract: Systems and methods are provided for a new type of quality of service (QoS) primitive at a network device that has better performance than traditional QoS primitives. The QoS primitive may comprise a token bucket with active queue management (TBAQM). Particularly, the TBAQM may receive a data packet that is processed by the token bucket; adjust tokens associated with the token bucket, where the tokens are added based on a configured rate and subtracted in association with processing the data packet; determine a number of tokens associated with the token bucket, comprising: when the token bucket has zero tokens, initiating a first action with the data packet, and when the token bucket has more than zero tokens, determining a marking probability based on the number of tokens and initiating a second action based on the marking probability.

Abstract: A method may include identifying paths from a user equipment (UE) device to an anchor station, determining that a first path corresponds to a direct wireless link to the anchor station and determining, in response to determining that the first path corresponds to a direct wireless link, a signal quality and a congestion associated with the direct wireless link. The method may also include selecting, in response to determining that the signal quality satisfies a signal quality threshold and the congestion satisfies a congestion threshold, the first path for the UE device to use when communicating with the anchor station. The method may further include identifying, in response to determining that the signal quality does not satisfy the signal quality threshold or the congestion does not satisfy the throughput threshold, another path for the UE device to use when communicating with the anchor station.

Abstract: A data processing method includes sending, by a network interface card of a first device, a request packet to a second device. The request packet is used to request to read data in a destination storage area of the second device. The network interface card receives a response packet that is sent by the second device in response to the request packet. The response packet includes the data. The network interface card initiates, based on the response packet, direct memory access to a storage address to write the data into a memory area to which the storage address points. The first data does not need to be cached in a memory of the network interface card. Bandwidth resource usage and storage space usage of the memory of the network interface card can be reduced.

Abstract: In one example aspect, a method of transmitting packets wirelessly is provided. The method comprises, for each packet, requesting to transmit the packet, waiting for a respective random or pseudorandom time period before transmitting the packet, and transmitting the packet containing a respective data portion, wherein a position of the respective data portion in the packet is selected such that a time interval between transmission of respective data portions in adjacent packets is a constant time interval.

Abstract: According to some embodiments, a method for early data transmission (EDT) performed by a wireless device comprises: assembling a random access message 3 that includes uplink data for random access EDT; transmitting the random access message 3 to a network node; receiving a random access message 4 from the network node; determining whether the random access message 4 includes a successful integrity check indicating that the network node successfully received the uplink data in random access message 3; and upon determining the random access message 4 includes a successful integrity check, discarding transmission protocol information corresponding to the uplink data in random access message 3.

Abstract: A first system (11) is configured to transmit an interest message, e.g. to a router (21). The interest message specifies criteria identifying data units from an area of interest, e.g. an intersection, which are to be aggregated and comprises at least one parameter specifying how the data units are requested to be aggregated. A second system (1) is configured to receive the interest message from a sender, e.g. a router (21), determine whether the system will return an aggregation of data units matching the criteria, and return a data message comprising an aggregation of data units matching the criteria to the sender (21) if the processing means have determined that the system will return an aggregation of data units matching the criteria. The data units are aggregated in the data message in dependence on how the data units were requested to be aggregated.

Abstract: Embodiments of this application provide a gateway handover method, a gateway reselection method, and a communications apparatus. The method includes: A source gateway determines to perform gateway handover on a terminal device; determines a target gateway that is to be used to serve the terminal device; and hands over the terminal device from the source gateway to the target gateway. According to the gateway handover method, the gateway reselection method, and the communications apparatus provided in the embodiments of this application, in a non-3GPP network architecture, when gateway handover needs to be performed on the terminal device, the source gateway of the terminal device or the terminal device may hand over the terminal device from the source gateway of the terminal device to the target gateway, to implement gateway handover in the non-3GPP network architecture.

Abstract: Techniques are provided for intrusion detection on a computer system. In an example, a computer host device is configured to access data storage of the computer system via a communications network. It can be determined that the computer host device is behaving anomalously because a first current access by the computer host device to the data storage deviates from a second expected access by the computer host device to the data storage by more than a predefined amount. Then, in response to determining that the computer host device is behaving anomalously, the computer system can mitigate against the computer host device behaving anomalously.

Abstract: The subject technology requests information regarding an instance identifier of a compute service manager instance to a particular job. The subject technology retrieves information related to a set of instances of compute service managers in a set of virtual warehouses. The subject technology filters the information to determine a set of candidates from the set of instances of compute service managers. The subject technology sorts the set of candidates based at least in part on a workload. The subject technology selects a candidate compute service manager to issue a query restart by randomly selecting an execution node.

Abstract: A device may receive, from a first device, a port control protocol (PCP) request that includes a customer side translator (CLAT) prefix and one or more private internet protocol version X (IPvX) addresses. The PCP request may be received via an internet protocol version Y (IPvY) network. The device may store the CLAT prefix and the one or more private IPvX addresses using a data structure. The device may receive a packet that includes a private IPvX of the one or more private IPvX addresses and a private IPvY address that includes the CLAT prefix and a second instance of the private IPvX address. The device may use an application layer gateway (ALG). The device may translate the private IPvX address to a public IPvX address using the CLAT prefix. The device may provide the packet that includes the public IPvX address to a second device that supports IPvX.

Abstract: The present disclosure generally relates to user interfaces for managing a local network using an electronic device, where the electronic device is connected to a router and a plurality of external devices, including a first set of one or more external devices and a second set of one or more external devices, on the local network. The user interfaces enable a user to apply the same network access policy to the first set of one or more external devices and the second set of one or more external devices or to apply different network access policies to the first set of one or more external devices and the second set of one or more external devices, respectively.

Abstract: Some embodiments use proxies on host devices to capture broadcast DHCP traffic in a network. Each host in some embodiments executes one or more virtual machines (VMs). In some embodiments, a proxy operates on each host between each VM and the underlying network. For instance, in some embodiments, a VM's proxy operates between the VM and a physical forwarding element executing on the VM's host. To suppress DHCP broadcast, the proxy for a particular VM monitors the VM's traffic to detect and intercept a DHCP discover message. When the proxy receives a DHCP discover message, the proxy retrieves DHCP configuration data that was previously stored on the host for the VM. In some embodiments, the DHCP configuration data is stored on the host for the VM during the installation of the VM in response to an administrator's request or as part of an installation script that installs the VM.

Abstract: Systems and methods may be provided to monitor media content on a monitored media device, including multimedia content, to determine whether the content is appropriate for the monitored device or devices, and to take action to remove, filter or otherwise block inappropriate content. The content monitored may include, for example, content such as audio content, video content, images, and text.

Abstract: An information processing apparatus includes a processor configured to acquire information regarding multiple transient states of a network including multiple nodes when the network undergoes clustering in which the multiple nodes are classified into multiple clusters. The multiple transient states each represent a transient state of the network on a way to a final result of the clustering. The processor is also configured to determine a common node by using the information regarding the acquired multiple transient states. The common node is used in the clustering in the multiple transient states.

Abstract: Methods and systems for establishing communications between an initiating device and another device selected from multiple potential devices are described herein. In some embodiments, a communications between the initiating device and a recipient device may be initiated after a device is selected as the recipient device. The second device may be one of a series of devices associated with a user account that is selected based on any one of a combination of various factors, such as presence information, wakeword count, user preferences, etc.

Abstract: A system and method is disclosed to transform Over-The-Top (OTT) call log data collected by telecommunications network operators into a peer-to-peer log in order to determine more accurate information. In this method the IP addresses in the call log records are compared to a list of known mediator server IP addresses and the records in the log that contain mediator server IP addresses are removed from the log to create a peer-to-peer log containing only those records that contain peer IP addresses. The data in the peer-to-peer log can then be categorized with confidence to determine network performance information as well as, for example, the percentage of traffic to a particular country. Conclusions may then be inferred regarding the removed data records based upon the data found in the peer-to-peer log.

Abstract: A method of creating containers in a physical host that includes a managed forwarding element (MFE) configured to forward packets to and from a set of data compute nodes (DCNs) hosted by the physical host. The method creates a container DCN in the host. The container DCN includes a virtual network interface card (VNIC) configured to exchange packets with the MFE. The method creates a plurality of containers in the container DCN. The method, for each container in the container DCN, creates a corresponding port on the MFE. The method sends packets addressed to each of the plurality of containers from the corresponding MFE port to the VNIC of the container DCN.

Abstract: This disclosure relates to offloading processing intensive tasks in communication protocol specific operations off the device, e.g. to another network node connected to the device via a network. Such tasks may for example include flow control, segmentation/desegmentation, and/or error control. As part of error control, protocols of the transport protocol layer of the OSI protocol stack may include checksum calculation to ensure reliability of the (payload) data. The calculation of checksums may be processing intensive. For this reason, example client nodes that realize the offloading of processing intensive tasks in communication protocol specific operations to another network node may not utilize any transport layer protocol at all, but rely on flow control and error control implemented in most modern data link layer protocols (Layer 2 of the OSI protocol stack). Accordingly, the processing intensive tasks can be “shifted” from the client device to another device.

Abstract: A Power over Ethernet (PoE) adaptive powering system includes a powered device that identifies a first operating mode in which the powered device is currently operating, determines a first power amount that is required to enable the first operating mode in which the powered device is currently operating, and transmits a first power amount request message that requests the first power amount via a power/data connection. The adaptive PoE powering system also includes a powering device that is connected to the powered device via the power/data connection, and that receives the first power amount request message via the power/data connection, and transmits the first power amount via the power/data connection to the powered device.

Abstract: Systems and methods provide solutions for reliable data transfer in a mobile communication network. A user equipment (UE) may indicate to the mobile communication network a capability of the UE to support a reliable data service protocol. The UE may process non-access stratum (NAS) messages, for both mobile originated (MO) data transfer and mobile terminated (MT) data transfer, using the reliable data service protocol to determine whether protocol data units (PDUs) of the NAS messages require no acknowledgement, require acknowledgment, or include an acknowledgement, and to detect and eliminate duplicate PDUs received at the UE in the NAS messages.

Abstract: Disclosed are systems, methods, and computer-readable media for assuring tenant forwarding in a network environment. Network assurance can be determined in layer 1, layer 2 and layer 3 of the networked environment including, internal-internal (e.g., inter-fabric) forwarding and internal-external (e.g., outside the fabric) forwarding in the networked environment. The network assurance can be performed using logical configurations, software configurations and/or hardware configurations.

Abstract: Virtual networks located in different regions of cloud provider are peered using unique regional identifiers for the virtual networks. The regional identifiers and other information are pushed down a network management stack to implement the peering.

Abstract: A consumer sends to a producer Interests to request data packets of a data stream that are generated at a production rate. Each data packet includes a name of the data stream, a segment of data, and a current segment number that identifies the data packet in the data stream and that increments as the data packets are generated. The Interests include the name and segment numbers of segments requested by the Interests. The consumer synchronizes the segment numbers with the current segment numbers and a rate for sending the Interests to the production rate. The consumer sends to the producer the Interests at the rate and with the segment numbers as synchronized, in order to minimize a delay time between when the data packets are generated and when the data packets are received at the consumer. The consumer receives from the producer data packets satisfying the Interests.

Abstract: In one embodiment, a first server computing is configured to send, to a network component, a request to subscribe to a multicast group. In addition, the first server computing device may receive a message sent from a second server computing device to the multicast group. The first server computing device may determine, from the message, an internet protocol (IP) address and port number associated with the second server computing device. In addition, the first server computing device may determine that the first server computing device has not previously received information associated with the second server computing device. The first server computing device may cause a connection to be established between the first server computing device and the second server computing device, the connection for enabling the first server computing device to determine whether the second server computing device offers storage for the first server computing device.

Abstract: Operating a node cluster system with a plurality of nodes in a network, wherein the cluster system appears to be a single node with only one specific network address to its network environment. Providing a shared socket database for linking network connection port identifications of a common set of network connection port identifications to the individual nodes, assigning a master function to one of the nodes, sending incoming traffic to all nodes of the cluster system wherein each node verifies its responsibility for this traffic individually, exclusive assignment of a network connection port to the responsible node for the duration of a connection of the corresponding application process by means of the corresponding network connection port identification and the link established by the shared socket database and processing of the traffic by the responsible node or otherwise by the node having the master function.

Abstract: Systems and methods provide solutions for reliable data transfer in a mobile communication network. A user equipment (UE) may indicate to the mobile communication network a capability of the UE to support a reliable data service protocol. The UE may process non-access stratum (NAS) messages, for both mobile originated (MO) data transfer and mobile terminated (MT) data transfer, using the reliable data service protocol to determine whether protocol data units (PDUs) of the NAS messages require no acknowledgement, require acknowledgment, or include an acknowledgement, and to detect and eliminate duplicate PDUs received at the UE in the NAS messages.

Abstract: A method of operating a network visibility node is disclosed. In certain embodiments, the network visibility node has a plurality of network ports through which to communicate data with a plurality of network hosts and has a plurality of tool ports through which to communicate data with a plurality of network tools. The network visibility node accesses a port group map associated with a plurality of tool port groups of the network visibility node, where each of the tool port groups includes one or more tool ports of the network visibility node, and where the port group map contains a separate tool alias for each tool port group of the plurality of tool port groups. Each tool alias can correspond to a different type of network traffic. The network visibility node uses the port group map to ascertain a tool port group through which to communicate the plurality of packets with a particular network tool.

Abstract: The present invention relates to Power-over-Ethernet (PoE) systems. The invention proposes to use a classification event to communicate from the PD (121) to the PSE (110, 910). A sensor (310, 410, 510a, 510b) may determine a sensor value, shut down the PoE connection, and reconnect so that the power up cycle with the PSE (110, 910) will start. The sensor (310, 410, 510a, 510b) provides a PoE resistance related to a class 0, 3 where the class relates to the sensor value (e.g., class 0=presence detected; class 1=no presence detected). This procedure may be repeated (e.g. continuously, every minute or whenever the sensor value changes such that the PSE (110, 910) needs to be informed) and if needed multiple cycles can be used to increase the length of the message communicated.

Abstract: A computer-implemented system includes the following. A remote terminal unit (RTU) is configured to receive alarm information and communicate alarm event information to a control center. An optical master unit (OMU) is configured to receive alarm information from sensors at remote locations. A circuit board is configured to serve as a middle device between the RTU and the OMU. A circuit board includes a microcontroller that communicates with the OMU and processes replies from the OMU to confirm the existence of and identify the type of an alarm at a particular remote location. The circuit board also includes multiple output relays connected to the RTU and corresponding to remote alarms, each output relay associated with a particular sensor at a remote location. The computer-implemented system also includes an input relay for communicating with the OMU.

Abstract: A network host such as a caching device is disclosed that greatly increases the speed with which a server reads and writes data for clients. The host may include a specialized network interface that not only processes TCP but also parses received network file system headers, identifying those headers within the TCP data stream, separating them from any corresponding network file system data, and providing them separately from that data to the network file system of the host for processing as a batch, all without any interrupt to the host. Similarly, the network file system of the host may communicate directly with the network interface by writing network file system headers directly to a register of the network interface to transmit data.

Abstract: A network attack defense policy sending method and apparatus are presented. The method includes receiving attack information which includes a target Internet Protocol (IP) address, and the attack information is used to indicate that a network attack packet whose destination address is the target IP address exists in a first network; determining that the network attack packet enters the first network through a first edge network device, where the first edge network device is an edge device in the first network; sending a defense policy to the first edge network device, where the defense policy is used to instruct the first edge network device to process, according to the defense policy, a packet whose destination address is the target IP address. By means of this application, network resources occupied by a network attack packet can be reduced, and an effect of defending against the network attack packet can be improved.

Abstract: A storage device includes a nonvolatile memory and a controller. The controller includes a job manager circuit and a processor. The job manager circuit manages a first-type job associated with the nonvolatile memory, and the processor processes a second-type job associated with the nonvolatile memory. The job manager circuit manages the first-type job without intervention of the processor. The processor provides a management command to the job manager circuit in response to a notification received from the job manager circuit, such that the second-type job is processed.

Abstract: A system that facilitates processing of data packets in an Internet Protocol (IP) network environment, which includes a computer device having an Internet Protocol version 6 (IPv6) extensions application, and wherein the IPv6 extensions application performs the following steps: setting an IPv6 extension header policy for the computer device; retrieving an original IPv6 packet from a network stack on the computer device, the original IPv6 packet having an extension header or destination option; determining if a designated route in the extension header or destination option is in accordance with the IPv6 extension header policy for the computer device; and if the designated route is in accordance with the IPv6 extension header policy, modifying the extension header or destination option for the computer device to generate a modified IPv6 packet, and sending the modified IPv6 packet on the IPv6 network.

Abstract: A method and system method for code testing in a video streaming network. A first broadcast stream including a first program containing video content is received by an ingest server of a live cluster of servers, wherein the live cluster of servers is deployed for providing streaming media programs to multiple user devices. The first broadcast stream is provided to one or more user devices. A copy of the first broadcast stream is provided to a device under test configured to test new code installed at the device under test via a processing of the first broadcast stream by the new code installed at the device under test. The device under test is a generic computer. Error performance of the device under test is monitored with respect to the installed new code's processing of the first broadcast stream.

Abstract: Techniques for reduction and acceleration of a deterministic finite automaton (DFA) are disclosed. In some embodiments, a system, process, and/or computer program product for reduction and acceleration of a DFA includes receiving an input value; performing a reduced deterministic finite automaton lookup using a lookup key, wherein the lookup key comprises a current state and the input value; and determining a next state based on the lookup key.

Abstract: A system and method for training a student employ a simulation station that displays output to the student and receives input. The computer system has a rules engine operating on it and computer accessible data storage storing (i) learning object data including learning objects configured to provide interaction with the student at the simulation system and (ii) rule data defining a plurality of rules accessed by the rules engine. The rules data includes, for each rule, respective (a) if-portion data defining a condition of data and (b) then-portion data defining an action to be performed at the simulation station. The rules engine causes the computer system to perform the action when the condition of data is present in the data storage. For at least some of the rules, the action comprises output of one of the learning objects so as to interact with the student. The system may be networked with middleware and adapters that map data received over the network to rules engine memory.

Abstract: Multi-VRF universal device Internet Protocol (IP) address for fabric edge devices may be provided. This address may be used to send and receive packets in a connectivity message for all VRFs on a fabric edge device. First, a request packet may be created by a first network device in response to receiving a connectivity message. The request packet may have a source address corresponding to an address of the first network device and a destination address corresponding to an address of a first client device. Next, the first network device may encapsulate the request packet. The first network device may then forward the encapsulated request packet to a second network device associated with the first client device.

Abstract: Disclosed are systems, methods, and computer-readable media for assuring tenant forwarding in a network environment. Network assurance can be determined in layer 1, layer 2 and layer 3 of the networked environment including, internal-internal (e.g., inter-fabric) forwarding and internal-external (e.g., outside the fabric) forwarding in the networked environment. The network assurance can be performed using logical configurations, software configurations and/or hardware configurations.

Abstract: To facilitate increasing power and resource efficiency of a mobile device, in the mobile device, with regard to periodic or one-time data transfers, a communication management component can analyze information comprising data transfer parameter information, including jitter information, associated with each application of a subset of applications used by the device and can desirably schedule and/or bundle data transfers associated with the applications to reduce the number of separate data bursts to transfer that data to thereby reduce use of wireless resources and power consumption by the device. A push notification system can receive respective jitter information associated with each application from the mobile device, and the push notification system can desirably schedule and/or bundle push notifications to reduce the number of separate data bursts sent to the device to reduce use of wireless resources and power consumption by the device.

Abstract: A method for providing IP address translation services includes receiving, at a network node, a data packet from a wireless device. The data packet includes a target IP address associated with a destination device. The network node translates the target IP address into a synthetic IP address that contains the target IP address. A modified data packet is generated by replacing the target IP address in the data packet with the synthetic IP address. The network node transmits the modified data packet to the destination device.

Abstract: Method for individualized data routing in a network, the method comprising the steps of initiating, on a user terminal, an enrolment process for registering a user of the user terminal for individualized data routing services, generating during the enrolment process, at a routing client application, a personal routing template, the template including at least individual routing parameters and user authentication information, prompting, on the user terminal by the routing client application, authentication of the user, selecting, on the user terminal by the routing client application, a personal routing template based on the user authentication information stored in the template, encapsulating, by the routing client application on the user terminal, a data package to be routed based on the information stored in the personal routing template by associating the individual routing parameters to the data package; and transmitting, by the routing client application, the encapsulated data package to a core network.

Abstract: A telecommunications addressing system/method allowing selection of a telephone instrument device (TID) using arbitrary identifiers is disclosed. The system/method allows a source TID (STD) to select a target TID (TTD) by the use of a Target Telephone Identifier (TTI) data string rather than a traditional numeric telephone identification (NTI). This TTI is then indexed within a TTI/NTI mapping server (TMS) that functions as a hierarchical repository of TTI/NTI mappings. STD/TTD communication is established by first performing a lookup of the STD-selected TTI within the TMS to identify the NTI of the TTD. Once the NTI of the STD has been identified by the TMS, communication between the STD and TTD is established using the NTI via the normal public switched telephone network (PSTN). TMS TTI lookup may be performed via STD TID web application and/or via PSTN infrastructure interface.

Abstract: Technologies are provided for determining sources of network packet loss in a network environment. The sources of packet loss can be determined by sending probe packets between devices in different areas in which the areas are connected via the Internet. From the probe packets, IP path information can be obtained. The IP path information can be annotated in order to identify nodes along forward and return paths between the areas. Packet loss can be assigned to the nodes using the annotated IP path information. Using the packet loss assigned to the nodes, epicenters of packet loss can be identified and corrective action can be taken.

Abstract: In an example, there is disclosed a network apparatus, comprising: one or more logic elements, including at least one hardware logic element, to provide a network manager engine to: provide a switched fabric management function; communicatively couple to at least one network switch, the network switch configured to provide optional native hardware-based load balancing; monitor one or more load balancing factors; and at least partly responsive to the one or more load balancing factors, configure native hardware-based load balancing on the at least one network switch.

Abstract: Aspects of the subject disclosure may include, for example, a method for providing redundancy in a video data stream. For every data frame of a plurality of data frames of video content, the method includes dividing the data frame into a plurality of data segments and copying a plurality of each of the plurality of data segments to the plurality of data frames in a data stream to provide redundancy for the data frame within the plurality of data frames in the data stream. The plurality of each of the plurality of data segments is distributed across the plurality of data frames to provide generate a plurality of redundancy-enhanced data frames that provide the redundancy over a protection interval associated with a network path. The method includes transmitting a data stream comprising the plurality of redundancy-enhanced data frames to a receiver via the network path. Other embodiments are disclosed.

Abstract: A path detection method in a virtual extensible local area network (VxLAN), a controller, and a network device, where the controller constructs a detection packet according to a detection request and sends the detection packet to a source network device corresponding to a source VxLAN tunnel endpoint (VTEP). The source network device forwards, level by level, the detection packet to a destination network device corresponding to a destination VTEP, and reports information such as an Internet Protocol (IP) address, an outbound interface number, and an inbound interface number to the controller level by level. Therefore, a real service path may be detected.

Abstract: There are described methods and systems for distributing content in a network, in particular a multicast network. One method includes delivering content from a source to a destination in a content delivery network. A request for an item of content is received and a first multicast stream is identified or established, the first multicast stream comprising a first copy of the content. At least one second multicast stream is also identified or established, the second stream comprising a second copy of the content. The second copy of the content is time-shifted by a time, M, from corresponding portions of the first copy of the content. The content is then delivered to the destination using both the first and the second multicast streams.

Abstract: Particular embodiments described herein provide for an electronic device that can be configured to receive data in a data flow, extract a data visa from the data flow, wherein the data visa is related to the data, and determine a reputation of the data from the data visa. The data visa can include reputation determination information obtained by previous network elements in the data flow. In addition, the electronic device can update the data visa, and communicate the updated data visa and data to a next network element in the data flow.

Abstract: Embodiments are directed to a virtual mobility anchor network element to receive, from a packet gateway (PGW) node, a request for an internet protocol (IP) address for a mobile device, establish an IP address for the mobile device; and provide the IP address to the PGW node in response to the request for the IP address for the mobile device. The virtual mobility anchor network element is configured to receive IP traffic from a network location; determine a target destination for the IP traffic based on a destination IP address, the destination IP address comprising the second IP address; and forward the IP traffic to the PGW node associated with the destination IP address. The virtual mobility anchor network element is also configured to receive IP traffic from the PGW node; determine a target destination for the IP traffic; and route the IP traffic to the target destination.

Abstract: An operation method of a first communication node in a vehicle network, which includes a power sourcing equipment (PSE) for supplying power to a second communication node and a powered device (PD) for obtaining power from the second communication node, includes: operating the first communication node in a first mode based on the PSE that is activated and the PD that is inactivated; receiving a first signal requesting power supply from the second communication node; and supplying power to the second communication node in response to the first signal.