Abstract: Aspects of the subject disclosure provide methods for avoiding a packet bounce event in a virtual port channel (VPC). A method of the technology can include steps for detecting a link failure event (e.g., between a first network device and a destination node), and receiving a data packet addressed to the destination node. In some implementations, the method can additionally include steps for rewriting encapsulation information of the first data packet. Systems and computer-readable media are also provided.

Abstract: A fiber-to-coax optical network unit for converting one or more Gigabit or Ethernet Passive Optical Network (GPON or EPON) fibers to one or more coaxial cable lines to connect a subscriber's premises to a Community Access Television (CATV) system.

Abstract: A method and arrangement for the coordinated, distributed, and linearly ordered collection and publication of event streams (i.e. time series data) includes features that harden it against internal errors, network partitions, data loss/corruption, and adversaries who wish to tamper with or interrupt its operation. Two modes of operation are described, one in which events are processed in aggregate (batching), and another in which updates occur continuously across the system.

Abstract: Techniques are disclosed relating to a split communications fabric topology. In some embodiments, an apparatus includes a communications fabric structure with multiple fabric units. The fabric units may be configured to arbitrate among control packets of different messages. In some embodiments, a processing element is configured to generate a message that includes a control packet and one or more data packets. In some embodiments, the processing element is configured to transmit the control packet to a destination processing element (e.g., a memory controller) via the communications fabric structure and transmit the data packets to a data buffer. In some embodiments, the destination processing element is configured to retrieve the data packets from the data buffer in response to receiving the control packet via the hierarchical fabric structure. In these embodiments, bypassing the fabric structure for data packets may reduce power consumption.

Abstract: Certain embodiments presented herein relate to load balancing of data transmissions among a plurality of paths between endpoints (EPs) coupled to virtual switches. In particular, between the virtual switches there may be a number of physical paths for the data to be communicated between the EPs. Each path may have a different congestion level. Certain embodiments relate to selecting a path of the plurality of paths between EPs to communicate data between the EPs based on the congestion levels associated with each of the plurality of paths. In certain embodiments, a virtual switch determines a congestion level of each of the plurality of paths, selects a path of the plurality of paths based on the determined congestion level, and sets source port information of network packets to correspond to the selected path so that the network packets are communicated along the selected path.

Abstract: A cloud broker gateway interfaces with an enterprise network and one or more public cloud networks, including a first public cloud and a second public cloud. The cloud broker gateway receives a request for one or more computing resources from a tenant associated with the enterprise network, and directs the request to the first public cloud based on a brokerage policy for the tenant. The cloud broker gateway receives a response indicating the first public cloud cannot provide the one or more computing resources, and redirects the request to the second public cloud based on the brokerage policy for the tenant. The cloud broker gateway also establishes a hybrid cloud that provides access to the one or more computing resources between the second public cloud and the enterprise network.

Abstract: Some embodiments provide a non-transitory machine readable medium of a first middlebox element of several middlebox elements to implement a middlebox instance in a distributed manner in several hosts. The non-transitory machine readable medium stores a set of instructions for receiving (1) configuration data for configuring the middlebox instance to implement a middlebox in a logical network and (2) a particular identifier associated with the middlebox in the logical network. The non-transitory machine readable medium stores a set of instructions for generating (1) a set of rules to process packets for the middlebox in the logical network and (2) an internal identifier associated with the set of rules. The non-transitory machine readable medium stores a set of instructions for associating the particular identifier with the internal identifier for later processing of packets having the particular identifier.

Abstract: To reduce performance losses and costs associated with serializing parallel communications when communicating with other computing devices over a local area network (“LAN”) or a wide area network (“WAN”), bus virtualization is provided to maintain parallelization for inter machine communications over a network. Control lines and data lines associated with a parallel bus communication can be received by a network adapter, and instead of serializing the communications, the network adapter can map each of the control and data lines to respective virtual local area networks (“VLAN”). Multiple VLANs can exist together on a LAN or WAN while logically segmented, allowing the respective VLANs to facilitate communications for the control and data lines over the network.

Abstract: Methods, apparatus, and systems, for transporting data units comprising multiple pieces of transaction data over high-speed interconnects. A flow control unit, called a KTI (Keizer Technology Interface) Flit, is implemented in a coherent multi-layer protocol supporting coherent memory transactions. The KTI Flit has a basic format that supports use of configurable fields to implement KTI Flits with specific formats that may be used for corresponding transactions. In one aspect, the KTI Flit may be formatted as multiple slots used to support transfer of multiple respective pieces of transaction data in a single Flit. The KTI Flit can also be configured to support various types of transactions and multiple KTI Flits may be combined into packets to support transfer of data such as cache line transfers.

Abstract: Techniques for integrating a honey network with a target network environment (e.g., an enterprise network) to counter IP and peer-checking evasion techniques are disclosed. In some embodiments, a system for integrating a honey network with a target network environment includes a device profile data store that includes a plurality of attributes of each of a plurality of devices in the target network environment; a virtual clone manager executed on a processor that instantiates a virtual clone of one or more devices in the target network environment based on one or more attributes for a target device in the device profile data store; and a honey network policy that is configured to route an external network communication from the virtual clone for the target device in the honey network to an external device through the target network environment.

Abstract: Systems and methods are provided for a computer-implemented method of implementing an on-demand computing network environment. A network specification is received from a user. Resources from one or more resource providers are provisioned. The on-demand computing network is configured, where configuring comprises assigning a first provisioned resource as a hub device and assigning one or more second provisioned resources as rim devices, where rim devices are configured to communicate with one another only via the hub device.

Abstract: A SAS (Serial Attached SCSI or Serial Attached Small Computer System Interface) switch includes a master SAS expander and a multitude of slave expanders connected to the master SAS expander. Each slave expander has a distinct SAS address. The slave expanders are not directly connected to one another and communicate through the master expander. The SAS switch has a pair of SAS wide ports each having a multitude of SAS links each associated with one of the slave expanders. The slave expanders are configured to route SAS traffic in accordance with routing tables established by the master SAS expander. The master SAS expander is not directly connected to either of the SAS wide ports.

Abstract: A multitenant network scheme system includes a system includes a memory, a physical processor in communication with the memory, an isolated guest on a host, a virtual switch, and a network interface controller. The isolated guest includes a virtual network interface controller (vNIC). The virtual switch includes a plurality ports, which include a northbound port, a communication port, and a southbound port. The northbound port is connected to a network having a respective network name. Additionally, the northbound port is associated with a virtual local area network (VLAN). The communication port is connected to the vNIC of the isolated guest and is associated with the VLAN. The network interface controller is connected to the southbound port.

Abstract: A network analysis module may obtain information including but not limited to network traffic and topology information for a network environment including multiple separate networks and physical connections between the networks. The module generates a network topology model including but not limited to extreme-case failure or break information according to the network topology information, and applies the historical network traffic information to the network topology model to predict future expected normal traffic load and extreme-case traffic load for each route over the physical connections between the networks. Output may include one or more reports for each route, each report indicating the historical and predicted traffic levels for both normal and extreme-case scenarios of a respective route.

Abstract: A system and method of providing a reliable and efficient multicast data transfer mechanism in a communication network. The mechanism includes a plurality of computer nodes and one or more data system managers wherein each of computer nodes and each of data system managers are connected through the said communication network. The method generally comprises the steps of setting up of an association among one or more computer nodes as senders and one or more computer nodes as receivers using a combination of unicast and multicast protocols and transmitting one or more packets of data through the said multicast protocol by one or more senders to one or more receivers. The receivers may collaborate among themselves to ensure delivery of said one or more packets of data reliably to the collaborating receivers.

Abstract: Enhancing performance in a multicasting system. Flow rates in a multicasting system are monitored as system characteristics change. The multicasting system is operated based on a first mapping between data flows and multicasting groups. Data is disseminated by way of the mapping to subscribers to one or more of the data flows. The flow rate thresholds of satisfied flows are decreased to minimize the difference between the flow rate thresholds and respective target transmission rates of the satisfied flows, as the system's feasible data transmission workload is maintained with respect to subscriber reception rate capacities. The flow rate thresholds of unsatisfied flows are increased to minimize the difference between the flow rate threshold and respective target transmission rates for the unsatisfied flows and to limit occurrences of data transmission delays or losses, as the system's feasible data transmission workload is maintained with respect to subscriber reception rate capacities.

Abstract: Techniques are disclosed relating to a split communications fabric topology. In some embodiments, an apparatus includes a communications fabric structure with multiple fabric units. The fabric units may be configured to arbitrate among control packets of different messages. In some embodiments, a processing element is configured to generate a message that includes a control packet and one or more data packets. In some embodiments, the processing element is configured to transmit the control packet to a destination processing element (e.g., a memory controller) via the communications fabric structure and transmit the data packets to a data buffer. In some embodiments, the destination processing element is configured to retrieve the data packets from the data buffer in response to receiving the control packet via the hierarchical fabric structure. In these embodiments, bypassing the fabric structure for data packets may reduce power consumption.

Abstract: The invention includes a method and apparatus for distributing flooding labels within a Multiprotocol Label Switching (MPLS) infrastructure supporting Border Gateway Protocol (BGP) Media Access Control (MAC) Virtual Private Networking (VPN).

Abstract: Aspects of the present disclosure relates to methods, computer readable mediums, and NoC architectures/systems/constructions that can automatically mark and configure some channel of a NoC as store-and-forward channels, and other channels of the NoC as cut-through channels, and can further resize the buffers/channels based on the given NoC specification and associated traffic profile. An aspect of the present disclosure relates to a method for configuring a first set of plurality of channels of a NoC as store-and-forward channels, and configuring a second set of plurality of channels of the NoC as cut-through channels based on the determination of idle cycles in a given NoC specification and associated traffic profile.

Abstract: Methods and systems are described for causing orthogonal frequency division multiplexing (OFDM) transmission of various portions of data via various nodes. For example, a first portion of the data may be transmitted, via a first node and using OFDM, to at least a second node. It may be determined that a second portion of the data is to be routed via a different node (such as a third node) for transmission. The second portion of the data may be transmitted, via the third node and using OFDM, to at least the second node.

Abstract: Techniques for multi-path routing of packets to a destination node based on multiple routing tables of a router device. In an embodiment, a router device includes port groups which each correspond to a different respective network path to the same destination node. In another embodiment, each routing engine of multiple routing engines in a router device routes packets to the destination node based on a different respective one of multiple routing tables. The routing tables may include respective entry sets which, at least with respect to routing packets to the destination node, dedicate each routing engine to a respective one of the port groups.

Abstract: One embodiment of the present invention provides a computing system. The computing system includes processing circuitry, one or more ports, a persistent storage module, and a management module. The persistent storage module stores a plurality of persistent storage instances associated with a plurality of switch groups. A respective persistent storage instance stores configuration information associated with a switch group in a data structure. The management module identifies at least two switch groups, which are associated with a logical network, from the plurality of switch groups and configures a respective virtual network representing the logical network in a respective identified switch group. The management module also maintains a mapping between a respective virtual network and the logical network.

Abstract: A method begins by a dispersed storage (DS) processing module determining memory space utilization state of logical storage nodes of a dispersed storage network DSN. When a logical storage node is in an over-utilized memory space utilization state and another logical storage node is in an under-utilized memory space utilization state, the method continues with the DS processing module selecting the other logical storage node to produce a selected logical storage node and reassigning a portion of a DSN address range assigned to the selected logical storage node to a logical storage node that is in an average memory space utilization state to create an address free logical storage node. The method continues with the DS processing module reassigning address blocks assigned to the logical storage node that is in the over-utilized memory space utilization state to the address free logical storage node.

Abstract: A tunnel management device includes: a central processing unit configured to manage a tunnel that establishes a virtual network to be overlaid on a IP network; and a memory coupled to the central processing unit, wherein the central processing unit: extracts a second tunnel in the virtual network that uses a second route in the IP network where a number of times a portion of a first route in the IP network is used by a first tunnel in the virtual network is used is minimized.

Abstract: A system, such as a System-on-Chip includes an interface component or PLUG which generates transactions over an IP block, such as an interconnect serving one or more clients via virtual channels. The client or clients are mapped onto the virtual channels via client/virtual channel mappings. The virtual channels are provided as a first set of virtual channels in the interface component which cooperate with a second set of virtual channels in the IP block. First and second client/virtual channel mappings for the first set of virtual channels and the second set of virtual channels are provided. The first and second client/virtual channel mappings are separately programmable and mutually decoupled from one another.

Abstract: One embodiment of the present invention provides a switch. The switch includes a switch group module, a persistent storage module, and a distributed configuration management module. The switch group module maintains a membership in a switch group. The switch group includes a plurality of switches and operates as a single switch. The persistent storage module stores configuration information associated with the switch group in a table, which includes one or more columns for attribute values of the configuration information, in a local persistent storage. The distributed configuration management module verifies whether the configuration information is eligible for a distributed commit to the switch group. If the configuration information is eligible for the distributed commit, the distributed configuration management module commits the configuration information to the persistent storage and switch modules of the switch.

Abstract: A connected directed graphical representation of a process model that includes a plurality of process nodes and interconnections between the process nodes of the process model is displayed. A user selection of a subset of the process nodes of the displayed connected directed graphical representation of the process model is received. A process scope definition represented as at least one begin-end node pair is computed. The at least one begin-end node pair is usable to identify all selected nodes and interconnection path links that are reachable in a traversal from a begin node to an end node of each of the at least one begin-end node pair of the received user selection of the subset of the process nodes. The computed process scope definition is stored.

Abstract: A connected directed graphical representation of a process model that includes a plurality of process nodes and interconnections between the process nodes of the process model is displayed. A user selection of a subset of the process nodes of the displayed connected directed graphical representation of the process model is received. A process scope definition represented as at least one begin-end node pair is computed. The at least one begin-end node pair is usable to identify all selected nodes and interconnection path links that are reachable in a traversal from a begin node to an end node of each of the at least one begin-end node pair of the received user selection of the subset of the process nodes. The computed process scope definition is stored.

Abstract: A gateway provides duplex-directional, multimedia ad hoc mesh networking, peer-to-peer direct communications, power optimization, dynamic configuration, and data management, while operating within various devices and network topologies. A multitasking virtual machine monitor for mobile networked devices, that is capable of functional expandability and portability to various operating environments, interoperability with a variety of operating systems, the Gateway Control System (GCS) performs functional capabilities in both a local and a networked topology using local and remote hardware and software. Software within the GCS is partitioned into sequentially, autonomous code, referred to herein as “modules,” each module being configured to communicate with hardware and other gateway modules. Collectively, all gateway modules are referred to herein as the gateway stack (GS). Each member of the GS can be turned on or off, downloaded from a remote site, and dynamically configured.

Abstract: The present invention relates to a method for confirming the delivery of a data packet in a mesh network by sending an acknowledgement (ACK) to an ingress mesh point (IMP). A mesh network comprises a plurality of mesh points that are wirelessly linked together. A data packet sent by a station (STA) is received by an IMP. A MAC frame is generated for transmission of the data packet and the frame is forwarded to an egress mesh point (EMP) in order to provide a service by the mesh network. The MAC frame includes a field comprising an IMP address and an EMP address. When the EMP, (or optionally an intermediate mesh point), receives a data packet successfully, the EMP or the intermediate mesh point sends an ACK to the IMP or preceding mesh point.

Abstract: Methods and apparatus to allocate bandwidth between subscribers of a communications network are disclosed. An example method to allocate bandwidth between subscribers of a communications network includes projecting that a first network data usage of a first subscriber of the network service provider will exceed a first data allotment for a first network access account of the first subscriber within a time period. The example method also includes identifying a second subscriber of the network service provider who is included in a subscriber group with the first subscriber and projected to have a second network data usage that is below a second data allotment for a second account of the second subscriber within that time period. The example method also includes requesting assent from the second subscriber to transfer a portion of the second data allotment to the first subscriber.

Abstract: Methods and systems are described for causing orthogonal frequency division multiplexing (OFDM) transmission of various portions of data via various nodes. For example, a first portion of the data may be transmitted, via a first node and using OFDM, to at least a second node. Based on one or more observed capacities associated with one or more nodes (such as the first node and/or another node), it may be determined that a second portion of the data is to be routed via a different node (such as a third node) for transmission. The second portion of the data may be transmitted, via the third node and using OFDM, to at least the second node.

Abstract: Embodiments of the present invention disclose a method and an apparatus for maintaining tokens, and relate to the field of communications technologies, so as to solve a problem of a burst excess of data to be transmitted and improve QoS. The method of the present invention includes: obtaining a peak information rate (PIR) of a network node; splitting the PIR into a first rate and a second rate; obtaining, according to the first rate, the first number of added tokens corresponding to a first period, and obtaining, according to the second rate, the second number of added tokens corresponding to a second period; adding tokens according to the first period and the first number of added tokens, and adding tokens according to the second period and the second number of added tokens.

Abstract: Improved systems and methods for delivering CATV content over a fiber optic network from a transmitter.

Abstract: One embodiment of the present invention provides a switch. The switch includes a virtual local area network (VLAN) configuration module. During operation, the VLAN configuration module maps local resources of the switch and/or locally coupled end device information to a global VLAN identifier, wherein the global VLAN is persistent across a fabric switch. The fabric switch is operable to accommodate a plurality of switches and operates as a single logical switch.

Abstract: A distributed load balancer in which a router receives packets from at least one client and routes packet flows to multiple ingress servers. For unknown packet flows, an ingress server cooperates with primary and secondary flow trackers to establish connections to server nodes. For known packet flows, the ingress server sends the packets to target server nodes. The server nodes randomly select egress servers for outgoing packets of the packet flows. The ingress servers, flow trackers, and egress servers are implemented by multiple load balancer nodes in a load balancer node layer. The ingress and egress servers for a given packet flow may be on different load balancer nodes. The load balancer nodes may use a consistent hash function to compute a consistent hash ring for the nodes according to packet flow client/public endpoint pairs so that nodes associated with given packet flows can be located.

Abstract: For a host that executes one or more guest virtual machines (GVMs), some embodiments provide a novel virtualization architecture for utilizing a firewall service virtual machine (SVM) on the host to check the packets sent by and/or received for the GVMs. In some embodiments, the GVMs connect to a software forwarding element (e.g., a software switch) that executes on the host to connect to each other and to other devices operating outside of the host. Instead of connecting the firewall SVM to the host's software forwarding element that connects its GVMs, the virtualization architecture of some embodiments provides an SVM interface (SVMI) through which the firewall SVM can be accessed to check the packets sent by and/or received for the GVMs.

Abstract: According to one exemplary embodiment, a method for load balancing between a virtual component within a virtual environment and a Host Intrusion Prevention System (HIPS) is provided. The method may include receiving a trusted connection table from the HIPS, wherein the trusted connection table contains a plurality of trusted connection information. The method may also include receiving a network packet from a virtual switch, wherein the network packet has a plurality of connection information. The method may then include determining if the plurality of connection information matches the plurality of trusted connection information. The method may further include sending the network packet to a destination based on determining that the plurality of connection information matches the plurality of trusted connection information.

Abstract: A technique for controlling the distribution of content via broadcast bearers and non-broadcast bearers is described. A method embodiment of this technique includes the steps of providing a plurality of content channels, each content channel being associated with at least one of a first bearer type and a second bearer type, maintaining mapping information for the content channels, the mapping information being indicative of the bearer associations between content channels and bearer types, and controlling content distribution in accordance with the associations between content channels and bearer types.

Abstract: Incoming memory access requests are routed in a set of incoming queues, the incoming memory access requests comprise a range of host logical block addresses (LBAs) that correspond to a memory space of a primary memory. The host LBA range is mapped to clusters of secondary memory LBAs, the secondary memory LBAs corresponding to a memory space of a secondary memory. Each incoming memory access request queued in the set of incoming queues is transformed into one or more outgoing memory access requests that include a range of secondary memory LBAs or one or more clusters of secondary memory LBAs. The outgoing memory access requests are routed in a set of outgoing queues. The secondary memory is accessed using the outgoing memory access requests.

Abstract: Methods and apparatus for automated multi-party cloud connectivity provisioning are disclosed. A system includes resources of a provider network, and a connectivity coordinator. The coordinator collects network service offering metadata of a plurality of connectivity providers using a first set of programmatic interfaces. In response to a connectivity query specifying connectivity parameters, the coordinator identifies, using at least a portion of the metadata, a collection of one or more connectivity providers of the plurality of connectivity providers capable of providing connectivity between a client network and a provider network endpoint in accordance with the connectivity parameters. In response to a connectivity establishment request, the coordinator initiates, using another programmatic interface, an activation of a network connection between the client network and a selected provider network endpoint.

Abstract: Methods, apparatus, and systems, for transporting data units comprising multiple pieces of transaction data over high-speed interconnects. A flow control unit, called a KTI (Keizer Technology Interface) Flit, is implemented in a coherent multi-layer protocol supporting coherent memory transactions. The KTI Flit has a basic format that supports use of configurable fields to implement KTI Flits with specific formats that may be used for corresponding transactions. In one aspect, the KTI Flit may be formatted as multiple slots used to support transfer of multiple respective pieces of transaction data in a single Flit. The KTI Flit can also be configured to support various types of transactions and multiple KTI Flits may be combined into packets to support transfer of data such as cache line transfers.

Abstract: A content reproducing method is provided for continuously reproducing content being reproduced by a client device in another client device in a multimedia data providing system including a server for providing content and a plurality of client devices for reproducing the content provided by the server. The method includes reproducing, by a first device, multimedia content being streamed by a content server; and transmitting, by the first device, a first request message for continuously reproducing content being reproduced by the first device in another device and an IDentification (ID) of the first device to another device using local area communication in order to continuously reproduce the content being reproduced by the first device in another device.

Abstract: There is provided a method including generating, by a security application executed in a processing device, an application list including one or more applications which are currently running in the processing device; identifying at least one network address fulfilling predetermined criteria; determining which of the at least one network address fulfilling the predetermined criteria has been connected to by the processing device within a predefined time period; and providing a post-processing entity with the application list and an indication on which of the at least one network address fulfilling the predetermined criteria has been connected to by the processing device within the predefined time period.

Abstract: A network appliance is virtually inserted in a data path within a network. Packet data that matches a criteria is intercepted at a logical point within the data path. The intercepted packet data is forwarded to an application running on the virtually inserted network appliance.

Abstract: A forwarder for use within an internetworking system operating over an ATM backbone is provided. The physical internetworking devices within the system are shared to provide the internetworking functions while servicing two or more distinct and isolated user networks. This is accomplished by logically partitioning the devices into distinct sub-elements which provide all or part of the internetworking functions. These sub-elements are uniquely allocated to independent realms which are then assigned to specific user networks.

Abstract: The method for detecting and managing a synchronization failure of a transparent clock is used in a packet network in order to determine and correct residence time of time-stamped packets within a traversed element of said network. The transparent clock is part of a Master/Slave synchronization path including a plurality of network elements and their associated transparent clocks. The method includes transmitting time-stamped packets from the Master to the Slave through different synchronization paths in order to have the Slave receiving multiple time signals transmitted through different paths, and determining a failure within a transparent clock of a failed/failing synchronization path if the time signal provided by said failed/failing path differs from the time signal provided by the other transmitting path(s).

Abstract: An image processing apparatus comprising: an image processing unit configured to perform image processing; and a control device configured to perform: transmitting the authentication information received by the input unit to the server; receiving a result of user authentication from server, the result indicating a specific user authenticated by the server; requesting individual restriction information for the specific user when the result received, determining whether the requested individual restriction information for the specific user is obtained; restricting the performance of the image processing based on the requested individual restriction information, when the requested individual restriction information is obtained; requesting common restriction information when the requested individual restriction information is not obtained, obtaining the requested common restriction information; and restricting the performance of the image processing based on the obtained common restriction information.

Abstract: Quality of service may be achieved in a network using time-bases queues that are associated with different maximum latency periods. A device may receive a request to allocate resources for a packet flow, the resources being allocated at a number of network devices. The device may select, in response to the request, a set of queues that includes a queue selected at each of the network devices, the selected queue, at each of the network devices, being associated with a maximum latency period. The device may transmit one or more messages, to the network devices, indicating that the selected set of queues are to be used for buffering of the packet flow during packet scheduling.

Abstract: Provided is a game apparatus which stores, in an outbox for individual-transmission data, individual-transmission data the destinations of which are individually specified, and stores, in an outbox for universal-transmission data, universal-transmission data the destinations of which are all terminals. A plurality of pieces of data is stored in the outbox for individual-transmission data, and information regarding the destination thereof and the information regarding the source thereof are added to each piece of data. When the outbox for individual-transmission data is full, all data stored in the outbox is retrieved, and one frame which includes the plurality of pieces of data is generated and transmitted.