Abstract: Systems and methods of policy shaping for an aggregated network include (A) receiving a first request to deliver first content to a first device being transported by a vehicle; (B) receiving a second request to deliver second content to a second device being transported by the vehicle; (C) determining (i) a first communication protocol corresponding to the first request and (ii) a second communication protocol corresponding to the second request; (D) determining (i) a first count corresponding to the first content and (ii) a second count corresponding to the second content; and (E) applying (i) a first policy, based on the first communication protocol and the first count, to a first forward data stream including the first content and (ii) a second policy, based on the second communication protocol and the second count, to a second forward data stream including the second content.

Abstract: An infrastructure device associated with a first device and a second device in a mesh network, the first device being connected to a LAN, the infrastructure device configured to: configure the first device to receive, from the second device, an initiation network packet to be transmitted by the first device to a first LAN device connected to the LAN, the initiation network packet indicating a first subnet IP address as a destination address; configure the first device to compare the first subnet IP address with a stored subnet IP address that is stored in the memory in correlation with the second device; and configure the first device to selectively transmit the initiation network packet to the first LAN device based on a result of comparing the first subnet IP address with the stored subnet IP address is disclosed. Various other aspects are contemplated.

Abstract: A first device in a mesh network and connected to a LAN being configured to: receive, from the second device, a first network packet to be transmitted by the first device to a first LAN device connected to the LAN, the first network packet indicating a first subnet IP address as a first destination address; select to transmit the first network packet to the first LAN device; receive, from the second device, a second network packet to be transmitted by the first device to a second LAN device connected to the LAN, the second network packet indicating a second subnet IP address as a second destination address; and select to refrain from transmitting the second network packet to the second LAN device based at least in part on the second packet indicating the second subnet IP address as the second destination address is disclosed. Various other aspects are contemplated.

Abstract: The present disclosure relates to systems and methods for egress handling for networks with Public Internet Protocol (IP) address. The disclosure includes identifying if a public Internet Protocol (IP) is used on a private network; performing a traceroute to an originating point of a tunnel; responsive to no reply to the traceroute, making a location call to an end node, wherein the end node identifies the origin of the location call, the identity of the origin being an egress IP; and responsive to a reply to the traceroute, using the IP to show the origin of the tunnel. The disclosure further includes, responsive to no tunnel being present, providing a continuous network path from a client to a destination.

Abstract: An example method can include tracking, by a network device, a plurality of attributes associated with a plurality of unique client device identifiers stored in a tracking table; deriving, by the network device, a training data set based on the plurality of attributes; and generating, by the network device, a plurality of clusters by inputting the derived training data set to an unsupervised machine learning mechanism. The example method can include receiving, by the network device, a labeling of the plurality of unique client device identifiers in the tracking table based at least on the plurality of clusters; generating, by the network device, a plurality of classifiers by inputting the labelled tracking table to a supervised machine learning mechanism; and classifying, by the network device, a new unique client device identifier in the tracking table based at least on the plurality of classifiers.

Abstract: Automated topology-discovery processes, wherein topology-related information is exchanged among the nodes of a network using data-plane headers of transmitted packets, and without relying on conventional control-plane topology-discovery protocols. For such “control-plane-less” topology discovery, a discovery-enabling Topology Discovery Header (TDH) may be encoded as an extension of the data-plane header. Such TDH can be used, e.g., to carry various types of pertinent information typically relied-upon by the relevant network entities for topology-discovery purposes. In some embodiments, topology discovery is fully migrated from the control plane to the data plane and is substantially integrated into the corresponding Packet Switching Technology. Due to this migration, some features of some conventional control protocols may not be critically needed in the corresponding communication networks.

Abstract: Some embodiments provide a method for identifying security threats to a datacenter. From multiple host computers in the datacenter, the method receives attribute sets for multiple flows. Each respective attribute set for a respective flow includes at least (i) a source identifier for the respective flow and (ii) an indicator as to whether the respective flow is indicative of the source of the respective flow being a security threat. For each of multiple source identifiers, the method aggregates the received attribute sets to generate an aggregate attribute set for the source identifier that includes a combined measurement of security threat indicators. For a particular source identifier, the method adjusts a security threat likelihood score for the source corresponding to the particular source identifier based on the combined measurement of security threat indicators for the source identifier.

Abstract: An infrastructure device configured to: configure a first device to receive, from a second device, a first network packet to be transmitted by the first device to a first LAN device, the first network packet indicating a first subnet IP address as a destination address; configure the first device to select to transmit the first network packet to the first LAN device; configure the first device to receive, from the second device, a second network packet to be transmitted by the first device to a second LAN device, the second network packet indicating a second subnet IP address as a destination address; and configure the first device to select to refrain from transmitting the second network packet to the second LAN device based at least in part on the second packet indicating the second subnet IP address as the destination address is disclosed. Various other aspects are contemplated.

Abstract: A first meshnet device in a mesh network, the first meshnet device configured to: determine a first range of first subnet IP addresses associated with a first LAN and a second range of second subnet IP addresses associated with a second LAN; determine a conflict that a first subnet IP address assigned to a first LAN device in the first LAN matches a second subnet IP address assigned to a second LAN device in the second LAN; map an association between an alternate IP address and the first subnet IP address; transmit, to a second meshnet device, the association between the alternate IP address and the first subnet IP address; and receive, from the second meshnet device, an initiation network packet to be transmitted to the first LAN device, the initiation network packet indicating the alternate IP address as a destination address is disclosed. Various other aspects are contemplated.

Abstract: Various example embodiments for supporting multicast are presented. Various example embodiments for supporting multicast are configured to support multicast, on a multicast tree for a multicast group, based on use of penultimate hop popping (PHP) on the multicast tree. Various example embodiments for supporting multicast are configured to support multicast, on a multicast tree for a multicast group, based on use of PHP on the multicast tree where the multicast tree is Point-to-Multipoint (P2MP) Multiprotocol Label Switching (MPLS) tree that is formed based on a TREE-SID multicast solution (although it will be appreciated that PHP may be applied on other types of multicast trees (e.g., other than P2MP MPLS multicast trees), on multicast trees formed based on other multicast solutions (e.g., other than TREE-SID), or the like, as well as various combinations thereof).

Abstract: Some embodiments provide a method for identifying security threats to a datacenter. From multiple host computers in the datacenter, the method receives data indicating port usage for a particular time period for each of multiple destination data compute nodes (DCNs) executing on the host computers. For each DCN of a set of the destination DCNs, identifies whether the port usage for the particular time period deviates from a historical baseline port usage for the DCN. When the port usage for a particular DCN deviates from the historical baseline for the particular DCN, the method identifies the particular DCN as a target of a security threat.

Abstract: In general, this disclosure describes a service peering exchange for creating and managing service-to-service paths among applications. For example, a service peering exchange with network connectivity with multiple networks may receive application programming interface (API) data describing APIs for services provided, e.g., by enterprises or cloud service providers (CSPs) and accessible via the networks using service requests. Such services may include, for example, data storage, eCommerce, billing, marketing, customer relationship management (CRM), social media, digital media, financial, weather, search, and other services accessible using machine-to-machine communication over a network. An administrator or customer of the service peering exchange may configure policies that are applied by the service peering exchange to orchestrate service-to-service paths among different services accessible via the different networks.

Abstract: Systems and methods for routing traffic through a network along Label-Switched Paths (LSPs) that may extend across multiple autonomous systems include performing Internet Protocol (IP) routing lookups as a packet is transmitted along the LSP. In one implementation, a packet having a predetermined value (which may be inserted by an upstream network device) is received at a network device after travelling along a first segment of an LSP. In response to identifying the predetermined label value of the packet, the network device may perform an IP routing lookup using IP routing information included in the packet to identify a next hop for the packet. The network device may then update a label of the packet such that the packet is routed along a second segment of the LSP and transmit the communication packet to the next hop.

Abstract: Technologies for power-aware scheduling include a computing device that receives network packets. The computing device classifies the network packets by priority level and then assigns each network packet to a performance group bin. The packets are assigned based on priority level and other performance criteria. The computing device schedules the network packets assigned to each performance group for processing by a processing engine such as a processor core. Network packets assigned to performance groups having a high priority level are scheduled for processing by processing engines with a high performance level. The computing device may select performance levels for processing engines based on processing workload of the network packets. The computing device may control the performance level of the processing engines, for example by controlling the frequency of processor cores. The processing workload may include packet encryption. Other embodiments are described and claimed.

Abstract: An apparatus is provided, comprising: a volatile memory; a non-volatile memory; a first electronic circuit that is configured to operate as a wireless access point, the first electronic circuit including a wireless controller for accessing a wireless network; and a second electronic circuit that is operatively coupled to the first electronic circuit, the second electronic circuit including at least one processor configured to execute: (i) a first virtual machine that includes a wireless network authentication server, and (ii) a second virtual machine that includes a virtual private network (VPN) server, wherein the wireless network authentication server is configured to authenticate devices that attempt to join the wireless network; wherein the VPN server is arranged to encrypt data that is received at the apparatus to produce encrypted data, and forward the encrypted data to the wireless controller for transmission over the wireless network.

Abstract: A network device may assign, to a port of a plurality of ports on the network device, a precision timing protocol (PTP) port priority for PTP communications between the network device and another network device. The network device and the other network device may be communicatively connected via a plurality of links in a link aggregation group (LAG). Each port, of the plurality of ports, may be associated with a respective link, of the plurality of links, in the LAG. The network device may generate a link layer discovery protocol (LLDP) frame that includes information identifying the PTP port priority assigned to the port. The network device may transmit the LLDP frame to the other network device to identify, to the other network device, the PTP port priority.

Abstract: Techniques are disclosed for locally printing a print job generated by a remote web services platform. It may be that a local computer and an application of the remote web services platform that generates the print job lack a bidirectional communications link (like a VPN connection). A printer service on the web services platform presents itself as a printer to an application on the web services platform. The printer service receives a print job from the application and transmits it to a client-side print service. The client print service then sends the print job to a local printer.

Abstract: A method of utilizing a list of predictive paths by a map-server. The method includes receiving the list of predictive paths, storing the list of predictive paths in a memory, receiving, from a first network element, a request for a location of a user device, the request related to transmitting a packet to the user device, and transmitting, to the first network element, a plurality of user locations based on the list of predictive paths, the plurality of user locations identifying where a second user device will transmit the packet when the packet is received by the second user device.

Abstract: Systems, apparatuses, and methods for controlling bandwidth through shared transaction limits are described. An apparatus includes at least a plurality of agents, a plurality of transaction-limit (T-Limit) nodes, a T-Limit manager, and one or more endpoints. The T-Limit manager creates a plurality of credits for the plurality of agents to send transactions to a given endpoint. Then, the T-Limit manager partitions the credits into N+1 portions for N agents, wherein the extra N+1 portion is a shared pool for use by agents when they run out of their private credits. The T-Limit manager assigns a separate private portion of the N portions to the N agents for use by only the corresponding agent. When an agent runs out of private credits, the agent's T-Limit node sends a request to the T-Limit manager for credits from the shared pool.

Abstract: A device may identify a plurality of first values associated with network traffic of a label-switched path of a plurality of label-switched paths. The device may determine an adjustment policy based on the plurality of first values. The adjustment policy may include one or more factors associated with a plurality of second values. The plurality of second values may be determined based on the plurality of first values. The device may implement the adjustment policy in association with the label-switched path. A bandwidth reservation of the label-switched path may be adjusted based on the adjustment policy. The adjustment policy may be implemented for fewer than all of the plurality of label-switched paths.

Abstract: A request may be received to relocate source data within a distributed database system arranged in a hierarchy composed of a plurality of levels. The plurality of levels may include a local level that includes a plurality of pods, which may be end points in the hierarchy. The data may be stored at a source pod. The request may identify a designated level in the hierarchy at which to relocate the source data. A target pod within the distributed database system may be selected. The source pod and the target pod may be located remotely from one another. The data may be replicated to the target pod via a local change bus in communication with the source pod. The local change bus may capture changes made to data stored in the source pod and transmit the captured changes to the target pod via the hierarchy.

Abstract: The present application includes operations related to routing communications. In some embodiments, the operations may include receiving, from a third-party communication address, an incoming communication directed toward a general communication address associated with a communication system. The operations may also include routing the incoming communication to a specific communication address associated with the communication system instead of to the general communication address based on a previous outgoing communication being from the specific communication address and being directed toward the third-party communication address.

Abstract: A system for storing and extracting elements according to their priority takes into account not only the priorities of the elements but also three additional parameters, namely, a priority resolution p? and two priority limits pmin and pmax. By allowing an ordering error if the difference in the priorities of elements are within the priority resolution, an improvement in performance is achieved.

Abstract: A system and method is described for protecting applications against malicious URL links by identifying a final destination. The system and method also includes enabling a user process to directly connect to the final destination, bypassing the original URL altogether; thereby bypassing the hacker's ability to use that URL to programmatically send the application to a malicious site.

Abstract: Provided is a database archiving method for creating index information. According to the exemplary embodiment of the present invention, a database archiving method for creating index information includes selecting at least one record group including a plurality of records from an original table in which data is archived, based on information on a field value; storing group compression data compressed to be created for every record group and a stored key value uniquely assigned to every group compression data, with respect to each of at least one record group, in a compression table; storing the field value and the stored key value corresponding to each of at least one record group, in a group index table; and deleting a plurality of records included in at least one selected record group from the original table.

Abstract: Systems and methods are provided for synchronizing execution of program code for an integrated circuit device having multiple concurrently operating execution engines, where the operation of one execution engine may be dependent on the operation of another execution engine. Data or resource dependencies may be accommodated with a Set instruction to cause a first execution engine to set a register value and a Wait instruction to cause a second execution engine to wait for a condition associate with the register value. Concurrently operation of the execution engines may thus be synchronized.

Abstract: Systems, methods, and computer-readable media for enabling container networking are disclosed. In one aspect, a method includes receiving a request from a first network container on a source server to establish a data session with a second network container on a destination server; determining a destination switch of the destination server based on the request; identifying a communication tunnel between the source server and the destination server; generating a data stream to be embedded in the pre-established communication tunnel, wherein a communication protocol associated with the request is different from a communication protocol used by the data stream; receiving a data packet to be sent to the destination container; mapping the data packet to the data stream; and sending the data packet to the destination server via the data stream over the communication tunnel.

Abstract: Many computing systems process data organized in a matrix format. For example, artificial neural networks (ANNs) perform numerous computations on data organized into matrices using conventional matrix arithmetic operations. One such operation, which is commonly performed, is the transpose operation. Additionally, many such systems need to process many matrices and/or matrices that are large in size. For sparse matrices that hold few significant values and many values that can be ignored, transmitting and processing all the values in such matrices is wasteful. Thus, techniques are introduced for storing a sparse matrix in a compressed format that allows for a matrix transpose operation to be performed on the compressed matrix without having to first decompress the compressed matrix. By utilizing the introduced techniques, more matrix operations can be performed than conventional systems.

Abstract: A reservation request is received for a data transport session. The reservation request contains a requested class of communication service through the asynchronous network. The state of the network along the route is then preferably determined and at least one end-to-end route through the network is obtained. The route is based on the requested class of communication service and the state of the network. The data transport session is then controlled, such that data is forced to travel along at least one route through the asynchronous network. This is preferably done by controlling multiple data controllers dispersed along the at least one route by mapping specific data protocols to specific routes, or mapping specific data protocols to specific ports in each data controller. If a state of the asynchronous network indicates that the route cannot transport data in conformity to the class of communication service, then the route is changed to a backup route through the network.

Abstract: Interference cancellation in a receiver can be used to improve bandwidth efficiency. The transmission of bursts from different terminals scheduled at separate time intervals can overlap partially such that time used for information transmission is optimized. For example, a receiver includes a signal processor including instructions executable to select first data including a first burst and a successive second burst from a transmission. The signal processor demodulates and decodes information from the first burst. The signal processor further generates a remodulated first burst based on recoded and remodulated information and generates second data by subtracting the remodulated first burst from the first data. The signal processor synchronizes with a stored symbol pattern in the second burst; and demodulates and decodes the information from the second burst. With such arrangement, the performance of each link is not affected by the partially overlapping burst.

Abstract: Various embodiments of systems and methods to route a plurality of messages are described herein. Initially a plurality of messages are received from a plurality of service providers. Next the plurality of messages are analyzed to determine a first message, from the plurality of messages, corresponding to a first message type and a second message, from the plurality of messages, corresponding to a second message type. Based on the determined first message type and the second message type, the first message is routed to a first route point and the second message is routed to a second route point.

Abstract: Various systems and processes may be used to manage Internet Protocol (IP) addresses that are dynamically assigned. In particular implementations, systems and processes for managing IP addresses that are dynamically assigned may include the ability to determine whether an identifier for a web service has been received from a customer having one or more virtual machines in a service provider network, the web service being accessible by the customer's virtual machines over an external communication network. The systems and processes may also include the ability to determine a number of IP addresses for the web service, identify virtual machines of the customer that are allowed to communicate with the web service, generate one or more IP address lists for the identified virtual machines, and update security tables for the identified virtual machines with the IP address lists at server computers hosting the identified virtual machines.

Abstract: The present invention provides a method and apparatus to route data packets across a torus or higher radix topology that has low latency, increased throughput and traffic distribution to avoid hot spots development.

Abstract: A transmission device that performs multiple-input multiple-output (MIMO) transmission of transmit data using a plurality of fundamental bands. The transmission device includes an error correction coding unit, a mapping unit, and a MIMO coding unit. The error correction coding unit, for each data block of predefined length, performs error correction coding and thereby generates an error correction coded frame. The mapping unit maps each predefined number of bits in the error correction coded frame to a corresponding symbol and thereby generates an error correction coded block. The MIMO coding unit performs MIMO coding with respect to the error correction coded block. Components of data included in the error correction coded block are allocated to at least two of the fundamental bands and transmitted.

Abstract: In some embodiments, a network management module is operatively coupled to a set of edge devices that are coupled to a set of peripheral processing devices. The network management module can receive a signal associated with a broadcast protocol from an edge device from the set of edge devices in response to that edge device being operatively coupled to a switch fabric. The network management module can provision that edge device in response to receiving the signal. The network management module can define multiple network control entities at the set of edge devices such that each network control entity from the multiple network control entities can provide forwarding-state information associated with at least one peripheral processing device from the set of peripheral processing devices to at least one remaining network control entity from the multiple network control entities using a selective protocol.

Abstract: An information processing system includes a plurality of switches connected to each other in a form of a full mesh and a plurality of information processing apparatuses respectively connected to any one of the plurality of switches. A first information processing apparatus of the plurality of information processing apparatuses includes a processor. The processor is configured to generate a second identifier by calculating an exclusive OR of a first identifier and a first number corresponding to a communication phase. The first identifier identifies a first switch connected to the first information processing apparatus. The first number is included in a set of linearly independent numbers allocated to the first information processing apparatus. The processor is configured to perform communication with a second information processing apparatus of the plurality of information processing apparatuses. The second information processing apparatus is connected to a second switch having the second identifier.

Abstract: A method, apparatus, computer-readable medium, and/or system may comprise a computing device comprising a processor and memory storing computer-executable instructions that, when executed by the processor, cause the computing device to generate a first secure session connection between a computing device and a first server associated with a first routing network. The computing device may receive, from the first server and via the first secure session connection, a plurality of pieces of data associated with the first routing network. The computing device may generate a second secure session connection between the computing device and a second server associated with a second routing network. The computing device may receive, from the second server and via the second secure session connection, a plurality of pieces of data associated with the second routing network.

Abstract: Items within a data set can be redistributed to different partitions of a distributed data store according to modified hash values. A redistribution event may, in some embodiments, trigger the redistribution of a data set. Modified hash values for items in the data set may be generated according to a secondary hashing scheme to be used for identifying the location of a new partition to store the item instead of hash values based on current key values that identify a current partition that stores the item. Access can be provided to items based on the modified hash values to determine the new partition that stores the item after redistribution.

Abstract: A system and method is described for protecting applications against malicious URL links by identifying a final destination. The system and method also includes enabling a user process to directly connect to the final destination, bypassing the original URL altogether; thereby bypassing the hacker's ability to use that URL to programmatically send the application to a malicious site.

Abstract: Methods and systems for managing a flighted software feature. One embodiment provides a system for disabling a flighted software feature enabled for selected users in a computing environment. The system includes a memory storing instructions and an electronic processor coupled to the memory. The electronic processor configured to execute the instructions to determine a set of related service requests submitted by a plurality of users in the computing environment, and, for each of the plurality of users, query a server servicing the user for a list of flighted software features enabled for the user during a predetermined time period. The electronic processor is also configured to determine, based on the list of flighted software features enabled for each of the plurality of users during the predetermined time period, a common flighted software feature, and automatically disable the common flighted software feature for at least one of the plurality of users.

Abstract: A backscatter modulator for providing low power wireless communications. The disclosed modulator provides phase control for discriminating backscatter from the antenna versus other objects. In addition, the disclosed backscatter modulator provides amplitude modulation so that the technique can provide a non-constant envelope which can provide an intentional imbalance to manipulate super-position to provide envelope control of the reflected signal, while still maintaining the frequency translation properties. The disclosed backscatter modulator thus allows compatibility with QAM, OFDM and other non-constant envelope modulation schemes to be backscattered, while still supporting the frequency translation behavior.

Abstract: The disclosed computer-implemented method may include (1) receiving, at a network node within a network, a packet from another network node within the network, (2) identifying, within the packet, a label stack that includes a plurality of labels that collectively represent at least a portion of a label-switched path within the network, (3) popping, from the label stack, a label that corresponds to a next hop of the network node, (4) determining, based at least in part on the label, that the next hop has experienced a failure that prevents the packet from reaching a destination via the next hop, (5) identifying a backup path that merges with the label-switched path at a next-to-next hop included in the label-switched path, and then (6) forwarding the packet to the next-to-next hop via the backup path. Various other methods, systems, and apparatuses are also disclosed.

Abstract: In accordance with an embodiment, described herein is a system and method useful in enterprise deployment, for enabling application-to-application communication in an enterprise computer system, for example a middleware machine. The system can include a plurality of application hosts and managed servers which receive requests at an external load balancer, via an Ethernet over InfiniBand (EoIB) network, together with a plurality of web hosts and traffic directors. Each traffic director instance can be associated with a virtual Internet Protocol (VIP) address that is accessible via a high-speed internal InfiniBand (IB) network. Hosted applications within the enterprise computer system can communicate with each other, over the IB network, using a VIP address. Such application-to-application wiring avoids the need to communicate internal application requests via the external load balancer.

Abstract: The invention is about a method in a network node (11; 12; 50) of an Internet Protocol Multimedia System, IMS, for establishing an additional session between a local user equipment, UE (10; 60), which is registered in the IMS, and a remote UE (20) which public identity is unknown to the local UE (10; 60), wherein a first session is established between the local UE (10; 60) and the remote UE (20), comprising the steps of: —storing a relation between the public identity of the remote UE (20) and a further identity which is provided to the local UE (10; 60); —receiving a request for establishing an additional session, comprising the further identity of the remote UE (20); —replacing the further identity of the remote UE (20) with the public identity of the remote UE (20) and forwarding the request towards the remote UE (20). The invention is further about a network node (11; 12; 50) and a UE (10; 60) which are adapted to perform the method.

Abstract: A parallel computer system includes a plurality of network switches that are all connected to each other, and a plurality of nodes each connected to one of the plurality of network switches, where each network switch is connected to two or more nodes of the plurality of nodes. Each node determines a first destination node of data to be transmitted by the each node at a given time so that a first network switch connected to the first destination node is different from a second network switch connected to a second destination node of data transmitted by any node, other than the each node, which is connected to a network switch to which the each node is connected, and transmits data to the determined first destination node.

Abstract: The present invention is related to a system and method for examining a communication stream between two nodes for a protocol of interest. If a protocol of interest is found, the communication stream is diverted to a divert host. If a protocol of interest is not found, the stream passes without diversion. By way of example, the invention is shown to work with TCP and UDP.

Abstract: A storage system includes a plurality of vdisks, with each vdisk containing a plurality of storage segments, and each segment providing a specific class of service (CoS) for storage. Each vdisk stores files with data and meta data distributed among its storage segments. A storage system includes a memory having multiple classes of service. The system includes an interface for storing a file as blocks of data associated with a class of service in the memory. The interface chooses the class of service for a block on a block by block basis for storage. A file system for storing a file. A file system for storing includes a plurality of vdisks. A method for storing a file.

Abstract: A method and system for automatically bypassing a network proxy in the presence of interdependent traffic flows. Messages from a client attempting to establish communication with an origin server are monitored to detect the presence of certain state information. If the origin server is present in one or more bypass lists, the network proxy is bypassed and communication is established between the client and origin sever directly. Otherwise, communication between the client and origin server is established though the network proxy. Messages between at least the origin server and client are monitored in order to identify origin servers for which the network proxy should be bypassed. The bypass lists are automatically updated for such origin servers.

Abstract: A communication apparatus includes a memory that stores data transmitted using a protocol that a transmission source receives a response indicating a reception status of data and transmits or retransmits the data based on the response, a transmitter that transfers the data stored in the memory to a transfer destination, and a controller that inhibits transmission of the response transmitted to the transmission source when a value pertaining to the data transfer to the transfer destination becomes a given range.

Abstract: Communication paths between a management computing device and a managed computing device are determined. The communication paths have different communication modalities. Current situational factors governing a current communication need between the management computing device and the managed computing device are determined. A hierarchy of the communication paths, from a highest priority communication path to a lowest priority communication path, is determined based on the current situational factors. The management request for the current communication need is successively sent, from the management computing device to the managed computing device, using the one of the communication paths starting with the highest communication path and proceeding through the hierarchy until the current communication need has been fulfilled.