Abstract: A communication network (1) comprising an optical transport domain network (2) having optical transport nodes connected to each other via physical optical links, packet switched networks (3) each having a boundary router (4) connected to an optical transport node of said optical transport domain network (2) via an access link (5); and a network management apparatus (6) adapted to perform an automatic bandwidth management of said communication network (1), wherein said network management apparatus (6) is adapted to activate or deactivate virtual links (VL), tributary ports and cross-connections between virtual and access links in the optical transport domain (2) in response to data traffic statistics of data transmitted on said access links (5).

Abstract: A remote node system with an amplitude modulation (AM) star architecture is formed between a remote node and a plurality of field nodes split from the remote CCAP node. In embodiments, an R-CCAP node can be combined with amplitude modulation (AM) optics in a star architecture for building low power nodes, supporting set top box (STB) out of band (OOB) signals, and increasing system bandwidth (BW). The remote node can be implemented in media content delivery networks, such as a hybrid fiber-coax HFC network or evolving radio frequency over glass (RFoG) networks.

Abstract: A method and system is described for delivering data streams in a network comprising devices connected to the network via adapters and wherein at least some of the devices are programmed to indicate priority of a data stream using priority parameter values of respective priority parameter types. One device in the network operates as a controller and the accompanying controller adapter is configured to perform priority enforcement on data streams according to all priority parameter types used within the datastreams in the network. A controller is also described and the controller can be a gateway configured to allow data streams into and out of the network. The method, system and controller find particular application in networks based on shared network segments, for example power line communication or networks based on coaxial cable.

Abstract: A communication network structure, in particular data communication network structure, includes a plurality of autonomous communication networks. Each autonomous communication network has at least one network node. The node is connected to a common gateway. The common gateway is designed to selectively connect at least two of the nodes in order to provide intercommunication ability between the related communication networks. A method of interconnecting autonomous communication networks includes: selecting networks or network nodes to be interconnected from a list of available networks or network nodes or selecting a preset configuration of inter-node connections; activating an interconnection between the selected networks or network nodes by creating an access-list using the IP-addresses defined for each node; and applying the access-list on a router element provided in said gateway, thus connecting the nodes/networks to each other.

Abstract: The subject matter described herein includes methods, systems, and computer-readable media for realm-based routing of Diameter request messages. One method includes maintaining device watchdog peg counters for Diameter peers. The method further includes receiving a Diameter request message for which realm-based routing is indicated. The method further includes using at least a destination realm to identify a plurality of candidate Diameter peers to which the Diameter request message could be routed. The method further includes sampling the device watchdog peg counters for the candidate Diameter peers. The method further includes selecting at least one of the candidate Diameter peers to which the message could be routed using the device watchdog peg counters. The method further includes routing the Diameter request message to one of the candidate Diameter peers based on results of the selecting.

Abstract: Provided is a communication control device including: an acquisition unit configured to acquire quality-related information regarding quality of a backhaul line to be used for providing control-related information regarding control in a control scheme of radio communication to a communication node to which the control scheme is applied; and a control unit configured to control the application of the control scheme to the communication node based on the quality-related information.

Abstract: A Data Center Bridged (DCB) Information Handling System (IHS) network include a plurality of switch IHSs that are connected together to provide the IHS network, and a management IHS coupled to each of the plurality of switch IHSs through a management network. The management IHS is configured to identify a plurality of data traffic flows and, for each identified data traffic flow, to determine a flow path through the IHS network. The flow paths include at least some of the plurality of switch IHSs, and the management IHS provides configuration information to each of the switch IHSs included in a flow path such that a quality of service (QoS) is provided for the data traffic flow along that flow path through the DCB IHS network according to the configuration information. Thus, the systems and methods utilize flow based networking to configure and manage DCB IHS networks.

Abstract: A system and method can support a scalable packet forwarding mechanism in a middleware machine environment. The middleware machine environment can comprise one or more network switch instances, wherein each network switch instance is associated with one or more external ports that are adapted to receive data packets from an external network. Furthermore, the middleware machine environment can comprise a plurality of packet dispatching components, each of which is responsible for forwarding a data packet to a virtual machine on a host server that operates to process the data packet. Additionally, a link aggregation component can combine multiple external ports into a logical port, and wherein the bandwidth of the logical port is linearly scaled accordingly to a total number of the multiple external ports.

Abstract: A controller and method for state-transition-based processing of objects following a state-structured process flow with plural process states. For each process state, one or more tasks are selected to process a transition of a selected object from one process state to a subsequent process state. State parameters of the object are captured. The current process state of the object is determined based on the captured state parameters. The tasks are generated for a specific process state in dependence on assigned task parameters of a process task. Operating tags are expendably assigned to a process task by an assigner unit or assignee unit, the operating tags including dynamically alterable operating parameters adding operational constraints to processing the process task. The state-structured process flow is dynamically generated and processed by triggering defined threshold and/or trigger values and/or steering the processing of the process tasks based on the operating parameters of the operating-tags.

Abstract: A method of exchanging a series of communication primitives during one or more communication sessions between two or more communication units is provided. In one embodiment, the method includes providing a first communication primitive including at least a first destination ID identifying at least a first communication unit as a receiver of the first communication primitive. The method also includes providing first data in the first communication primitive that reflects a first return destination ID identifying at least a second communication unit as a sender of the first communication primitive. Further, using the first data, a second destination ID is determined that is included in a second communication primitive sent from the first communication unit to the second communication unit.

Abstract: A wireless communication system implements independent wireless connections for a data communication service. Multiple wireless communication devices establish the independent wireless connections with multiple wireless access points, and responsively monitor the independent wireless connections. The wireless communication devices receive a request for the data communication service for a User Equipment (UE), and responsively assign the UE to one or more of the independent wireless connections. The wireless communication devices detect a data communication loss on the assigned independent wireless connection(s), and responsively select one or more of the unassigned independent wireless connections and assign the UE to the selected unassigned independent wireless connections.

Abstract: Systems and methods are disclosed for packet deduplication for network packet monitoring in virtual processing environments. Tap agents are installed and run with respect to network applications operating with virtual processing environments. These tap agents capture packet traffic associated within these network applications, and deduplication rules are applied so that duplicate packet capture is avoided at the tap agents themselves. In particular, deduplication rules are applied to tap agents where two network applications for which packets are being captured are talking to each other so that one of the tap agents is set to the designated agent for packet capture. Without this designation, packets captured at by the two associated packet agents would represent the same packet flow from both ends thereby leading to duplicate packet capture.

Abstract: Techniques for providing enrollment services for various types of electronic devices in a communication network is disclosed. The electronic devices may include devices associated with a user and headless devices not associated with any user. In certain embodiments, a device enrollment system is disclosed that controls the authentication and enrollment of both user devices and headless devices within a communication network. The device enrollment system detects a particular device within a communication, identifies a type of enrollment policy to be applied to the device based on a type of the device, applies a set of enrollment rules to the device in accordance with the enrollment policy and enrolls the device if the device satisfies one or more criteria specified by the enrollment rules.

Abstract: Embodiments of the present disclosure enable monitoring network traffic on multiple Virtual Device Context (VDC) elements of a switch using a single NAM module. To that end, if a monitored network element supports contexts (i.e. VDC elements), a NAM module could be configured to seamlessly drive the move of the data port interfaces (at the managed device) from one context to the other. After the move of the data ports that support SPAN destination traffic flow to the target VDC is complete, these SPAN destination ports may be configured to be able to receive SPAN data traffic.

Abstract: A method, apparatus and computer program product manage a plurality of VPN tunnels between a first cloud and a second cloud in a hybrid cloud environment. A method in a first VPN agent manages a first VPN tunnel in a plurality of VPN tunnels between a first cloud and a second cloud in a hybrid cloud environment. The VPN agent receives a request from a VPN manager. The request includes a first set of requirements for the first VPN tunnel in the plurality of VPN tunnels. The VPN agent creates the first VPN tunnel according to the first set of requirements. The VPN agent tunes the first VPN tunnel according to a second set of requirements. The tuning of the first VPN tunnel can include merging the first VPN tunnel with a second VPN tunnel, or splitting the first VPN tunnel into a first and second VPN tunnel.

Abstract: Implementations relate to authentication of end devices in networks. In some implementations, a method includes receiving identity information at an edge configuration device from an end device via a connection, where the identity information identifies the end device or one or more users associated with the end device. A request is sent from the edge configuration device to an access control server connected to the network in response to receiving the identity information, where the request requests authentication for the end device. Authentication is received at the edge configuration device from the access control server for the end device to connect to a network connected to the edge configuration device.

Abstract: An apparatus, system and method for call notifications to active communication devices are provided. At an apparatus comprising a processor and a communication interface, a call for a first device is received via the communication interface. When it is determined that a second device is active, a notification of the call is transmitted to the second device.

Abstract: Apparatus, systems, and/or methods may include a peripheral component interconnect express (PCIe) link to directly couple a slot with a network fabric. The slot may be defined by a surface and/or may accommodate a hardware module. A rack unit implementation may be utilized, such as a one rack unit (1U) implementation, a four rack unit (4U) implementation, and so on. The network fabric may be utilized when hardware modules communicate across the PCIe link, may be bypassed when hardware modules communicate across an additional PCIe link, and so on. The PCIe link may include a direct connect point-to-point PCIe link, a dual star PCIe link, and so on. In addition, the PCIe link may be utilized in a rack-scale architecture.

Abstract: A method in a network device coupled with a packet data network (PDN) gateway of a mobile operator is described. The method includes transmitting configuration information to a low powered device gateway coupled with a plurality of low powered devices based on a received configuration request, wherein the low powered device gateway does not include a Subscriber Identity Module (SIM). The method further includes communicating with an AAA server to authenticate a selection of the plurality of low powered devices and establishing a GPRS Tunnel Protocol (GTP) tunnel with the PDN gateway. The method further includes receiving from the low powered device gateway collected data from the selection of the plurality of low powered devices and sending to the PDN gateway the collected data.

Abstract: A computer readable medium storing instructions with functionality for: receiving a first request, from a first client device in a particular IP subnet, to identify a MAC address that corresponds to a particular IP address in the particular IP subnet; transmitting a first response to the first client device that identifies a first MAC address, of a first network device in the particular IP subnet, as the MAC address that corresponds to the particular IP address; receiving a second request, from a second client device in the particular IP subnet, to identify the MAC address that corresponds to the particular IP address; transmitting a second response to the second client device that identifies a second MAC address, of a second network device in the particular IP subnet, as the MAC address that corresponds to the particular IP address, the second MAC address being different than the first MAC address.

Abstract: Described herein is a method for accessing a digital network. For example, the method may include receiving a message from a network access device at a first Internet service provider, and sending at least a portion of the received message through a network to an access service provider. The method may also include receiving the portion of the message at the access service provider, and sending network access data, based at least partially in response to receiving the portion of the message at the access service provider, to the network access device. The network access data may include log-in information and an identified Internet service provider. A communication may be received at the identified Internet service provider that originated from the network access device based at least partially on the network access data obtained from said access service provider. A temporarily assigned network address may be assigned to the network access device.

Abstract: Methods and apparatus for providing protected content to subscribers of a managed (e.g., MSO) network via a content source accessible via an internetwork such as the Internet. In one embodiment, a user accesses a programmer website, and requests content. The programmer determines whether the requesting user is permitted to access the content, and what rights or restrictions are associated with the user. This includes authenticating the user as a subscriber of the MSO, and determining the subscriber's subscription level. In another embodiment, a user's account with the MSO and programmer may be federated, thus a given user will have MSO-specific information regarding its identity (such as login information, GUID, etc.) and/or information regarding subscription level and service details, stored at the programmer. Messages received from the MSO representing permission for the user to access content may also be stored at the programmer site for later reference.

Abstract: Aspects of the present disclosure relate to introduction of a physical switch port and logical switch port to the virtualization layer. A virtual network interface card (VNIC) can be associated with a physical switch port that routes traffic to logical switch ports based on a transmit function. The logical switch ports each are associated with a filtering protocol and route traffic to a physical switch port based on a receive function associated with that logical switch port. The logical switch ports can be associated with container running on the virtual machine (VM) connected to the VNIC. Thus, a single VNIC can be shared by multiple containers running different filtering protocols. A single logical port can also route traffic to multiple physical switch ports, each associated with a different VNIC. Thus, a same filtering protocol can be shared by multiple VNICs.

Abstract: A device, system, and method are provided for controlling a fixture, such as a lighting fixture. The device includes a fixture communication interface for transmitting data to a fixture using a first communication protocol, such as DMX, and an application communication interface for wirelessly receiving information using a second communication protocol, such as Bluetooth. The device further comprises a processor for converting the information received at the application communication interface from the second communication protocol to the first communication protocol. The first communication protocol requires more data than can be transmitted using the Bluetooth protocol, and converting the information may include adding default data or restored data to data being transmitted to the fixture.

Abstract: A system and method for provisioning network elements, such as but not limited to the type of network elements used in cable television system to facilitate subscriber access to services. The provisioning may be accomplished without communications between multiple provisioning servers. This allows the provisioning to be conducted in a stateless manner.

Abstract: Systems and methods for table-based load balancing implemented by bonded network interfaces. An example method may comprise: receiving, by a bonded interface of a computer system, a data link layer frame; identifying a network interface controller (NIC) of the bonded interface associated, by a load balancing table, with a source Media Access Control (MAC) address of the data link layer frame, wherein the load balancing table comprises a plurality of load balancing entries, each load balancing entry mapping a source MAC address to an identifier of a NIC comprised by the bonded interface; and transmitting the data link layer frame via the identified NIC.

Abstract: A traffic amount measuring unit measures the traffic amount of frames received in each of cycles, and outputs the measured traffic amount for each cycle. A plurality of frequency counters are provided so as to correspond to a plurality of ranges, and retain frequencies of each of the plurality of ranges, respectively. A frequency counter updating unit determines in which of the plurality of ranges the traffic amount output for each cycle is included, and updates the frequency of the frequency counter corresponding to the range obtained by the determination result.

Abstract: Systems, methods, architectures, mechanisms or apparatus for routing packets between source and destination endpoints associated with different autonomous systems without requiring public advertising of the addresses of the source and destination endpoints to other autonomous systems (ASN).

Abstract: Systems and methods for L2 Ethernet resilient hand-off include an access network configured between a first end point and a second end point, a first communication path and a second communication path for data flow between the first end point and the second end point, wherein the first communication path is active and the second communication path is inactive, and if a fault is detected in the first communication path, logic configured to activate the second communication path and perform a resilient hand-off of the data flow from the first communication path to the second communication path.

Abstract: A method of combining a 5G communication system for supporting a data rate higher than that of a beyond 4G system with IoT technology, and a system thereof, are provided. The method by a mobility management (MM) function entity includes receiving a message including session information for a terminal in an idle mode, transmitting a paging message for the terminal based on the message, receiving a service request message for the terminal from a base station, transmitting an interface configuration request message including the session information to the base station based on the session information, receiving an interface configuration response message from the base station, and transmitting information for configuring an interface between a user plane gateway (UP GW) corresponding to the session information and the base station.

Abstract: Apparatus and methods are disclosed for client-based control of revising caller identifications (IDs) for communications between a private network and a public network. An apparatus including a telecommunications-providing server and processing circuit that communicates client-specific sets of data over an interface protocol. The telecommunications-providing server revises a caller ID for a VoIP call based on the client-specific sets of data, an identifier that corresponds to a requesting endpoint, and a geographic region determined from the call request. Further, the telecommunications-providing server causes control data to be sent to activate an analog-telephone bridging circuit and redirect the VoIP call by obtaining a dial tone and passes at least a subset of the data packet through the analog-telephone bridging circuit for connecting over the local line. The subset of the data packet includes the revised caller ID which is a local number identified by the determined geographic region.

Abstract: Novel tools and techniques provide for implementing community wireless communications service. In some embodiments, a network gateway device might receive, from a user device via a customer gateway device, a first request for wireless access to a network. If it determines that the user device is unassociated with the customer associated with customer gateway, the network gateway might send a second request with an identifier of the user device to a WiFi server, which might generate and send a login user interface (“UI”) to the user device. The user might send a response including a unique identifier, which the WiFi server might include in an access request to an authentication server. If authenticated by the authentication server, the WiFi server might send a care-of address (“COA”) request to the network gateway, which assigns the COA to the user device and provides the user device with wireless access to the network.

Abstract: Methods, systems, and devices are described for transmitting and storing routing path information and routing topology information using a single protocol. In particular embodiments, routing path information for an exterior gateway protocol (“EGP”) network such as a border gateway protocol (“BGP”) network is transmitted throughout an interior gateway protocol (“IGP”) network using IGP messages such as open-shortest-path-first (“OSPF”) or intermediate state to intermediates state (“IS-IS”) messages. The IGP networks may transmit and store the BGP information using type length values (TLVs). As a result, network areas running an IGP may maintain BGP information throughout the network area without the overhead of an iBGP mesh and related message-passing.

Abstract: Embodiments of a User Equipment (UE) arranged for transmitting packets in a cellular network are disclosed herein. The UE can generate a first packet having a first packet classification information and a second packet having a second packet classification information. The first packet classification information can be associated with a different quality of service (QoS) requirement than the second packet classification information. The UE, using a packet filter, can determine, based on the first packet classification information, a first traffic flow from a plurality of traffic flows in a traffic flow template (TFT) for transmitting the first packet. Additionally, the UE can determine, based on the second packet classification information, a second traffic flow from the plurality of traffic flows for transmitting the second packet. Subsequently, the UE send the first packet to the first traffic flow and the second packet to the second traffic flow.

Abstract: A method applicable to a commonest application scenario, the method includes: an AR receives a first packet sent in a unicast manner by a CGN. The first packet includes information for indicating Restart announce, the first packet's source address is the CGN's address, and the first packet's destination address is the AR's address; AR changes the first packet's destination address to an address of a CPE connected to the AR, to obtain a second packet, where the AR and the CPE are connected by using a Layer 2 network, and the CPE's address is a multicast address; and the AR sends the second packet. The method is used for quickly informing, after the CGN restarts or undergoes an active/standby switchover, the CPE that an exception occurs, for example, the CGN restarts or undergoes an active/standby switchover, so that a CGN has relatively small load when recreating NAT mapping.

Abstract: Embodiments described herein provide enhanced computer- and network-based systems and methods for providing data security with respect to computing services, such as a digital transaction service (DTS). Example embodiments further provide a discovery service that enables nodes that are included in, or otherwise communicatively coupled to, the DTS to actively or passively “discover” roles and keys associated with the nodes. These node roles are associated with the various services provided by the DTS.

Abstract: Novel tools and techniques might provide for implementing extension of customer local area networks (“LANs”) and/or implementing isolated service overlays over a network. In some embodiments, a network service point that is located external to a demarcation point at each of a plurality of customer premises might establish a connection between a service provider network and a customer LAN, which has already been established within a customer premises. The system subsequently extends the customer LAN, via this connection, to span between the network service point and the customer premises. Alternatively, or additionally, the system might establish two or more isolated service overlays across the customer LAN between the network service point and the customer premises, each of the two or more isolated service overlays having network traffic that is isolated from network traffic transmitted along another of the two or more isolated service overlays.

Abstract: A plurality of control apparatuses each stores, in a memory, relay device identification information for identifying one or more relay devices of a plurality of relay devices available for selection by the control apparatus, and selects, in response to connection of a first communication terminal to the control apparatus, one of the one or more relay devices having the relay device identification information stored in the memory as a first relay device to be connected to the first communication terminal to relay content data for the first communication terminal under control of the control apparatus.

Abstract: The present invention discloses how a small cell accesses a local network via the LIPA technique and discloses a data transmission path and data transmission protection of a local service. A method for network traffic routing for a user equipment of a wireless communication system is disclosed. The method comprises connecting to a small cell of the wireless communication system, transmitting an user identity information to the small cell, receiving an authentication result of an authentication procedure from the small cell, and obtaining a local service via the small cell and a local network connecting to the small cell without going through a core network connecting to the small cell when the authentication result indicates that the user equipment passes the authentication procedure.

Abstract: A remote access method and device are provided. The method includes acquiring, by a local area network terminal, information about accessible content on at least one online device in the local area network; aggregating, by the local area network terminal, the information about the accessible content on the at least one online device; and sending, by the local area network terminal, the aggregated information about the accessible content on the at least one online device to a remote client, so that the remote client presents the information about the accessible content on the at least one online device.

Abstract: A method and system for analyzing devices on a network are provided. The method includes: receiving at least one packet from a Customer Premises Equipment (CPE); determining identity metadata associated with the at least one packet; and analyzing the at least one packet to determine a device associated with the at least one packet. The system for analyzing devices on a network includes: a packet processor configured to receive at least one packet from a CPE; a subscriber/session identity module configured to determine identity metadata with the at least one packet; and a device tracker module configured to analyze the at least one packet to determine a device associated with the at least one packet.

Abstract: The disclosure relates to a method for selecting a capillary network gateway for a machine device of a capillary network. The capillary network gateway is capable of data exchange between the machine device and a wireless network. The method comprises: acquiring information about a respective message box capability for two or more capillary network gateways of the capillary network; and selecting, for the machine device, the capillary network gateway based on the information about the message box capability. The disclosure also relates to a corresponding node, computer program and computer program product.

Abstract: The present disclosure provide a method for determining a content acquisition path, a method for processing a content request and a corresponding apparatus and system. The method for determining the content acquisition path includes: receiving a request from a user, where the request is used for requesting an original content provider to provide a content, and the request carries a name of the content, a network address of the original content provider and a network address of the user; calculating at least two forwarding paths to the original content provider, and determining a content acquisition path according to link cost on each forwarding path and a cache hit rate of a network node on each forwarding path to the content; and sending the request to a next network node according to the content acquisition path, for enabling the next network node to forward or respond to the request.

Abstract: A data caching method and device, and a resource request response method and device. The data caching method comprise: receiving a resource request for group content belonging to a specific user group, the resource request being sent from a user terminal to an application server by a user; checking if a mapping between the group content and a group caching ID for identifying the user group and a mapping between the user and the group caching ID have been established in the caching server; and returning the group content cached in the caching server to the user terminal in responses to the mapping between the group content and the group caching ID and the mapping between the user and the group caching ID having been established in the caching server.

Abstract: A routing bridge at an edge of a transparent interconnection of lots of links (TRILL) campus, comprises a first access port and a second access port each designated as one of a multi-chassis link aggregation (MC-LAG) designated forward (DF) port and an MC-LAG non-DF port, wherein the first access port is associated with a first pseudo-nickname, and a second access port is associated with a second pseudo-nickname, wherein a frame received via the first access port from a first customer equipment (CE) is replicated to generate a replicated frame, wherein the replicated frame is forwarded via the second access port to a second CE when the first pseudo-nickname and the second pseudo-nickname are the same, and when the first pseudo-nickname and the second pseudo-nickname are different and the second access port has been designated as the MC-LAG DF port.

Abstract: In some examples, a method includes receiving, by a first ingress network device for a network, a source tree join route message from an egress network device for the network, specifying a multicast source and a multicast group, and in response to receiving the source tree join route message, determining, by the ingress network device, whether the multicast source is multi-homed to the network via the first ingress network device and a second ingress network device for the network. The method includes, in response to determining that the multicast source is not multi-homed, forwarding traffic for the multicast source on an inclusive provider tunnel without initiating setup of a selective provider tunnel to the egress network device, and in response to determining that the multicast source is multi-homed, initiating setup of a selective provider tunnel to the egress network device and terminating forwarding multicast traffic on the inclusive provider tunnel.

Abstract: Various embodiments of the present inventions are related to monitoring physical location of a monitored target, but not limited to, use of beacon location information.

Abstract: An optical module adapted to operate in an optical network to perform an optical function therein includes optical components adapted to perform one or more functions associated with the optical module; processing circuitry communicatively coupled to the optical components and adapted to obtain data generated during operation of the one or more functions; and compute resources communicatively coupled to the processing circuitry and adapted to receive an application for local execution on the compute resources in a sandboxed manner, and analyze, by the application, the data to perform one or more functions.

Abstract: A hybrid reconfiguration scheme can allow for fast partial network reconfiguration with different routing algorithms of choice in different subparts of the network. Partial reconfigurations can be orders of magnitude faster than the initial full configuration, thus making it possible to consider performance-driven reconfigurations in lossless networks.

Abstract: The concepts and technologies disclosed herein are directed to network functions virtualization (“NFV”) leveraging unified traffic management and real-world event planning. According to one aspect of the concepts and technologies disclosed herein, a virtual network traffic management system (“VNTMS”) can receive, via a traffic congestion monitor, from a virtual network function (“VNF”), a traffic congestion indicator that includes a traffic congestion state indicative of network traffic congestion experienced by the VNF. The VNTMS can analyze the traffic congestion indicator to determine a traffic management action to be taken to alleviate at least a portion of the network traffic congestion experienced by the VNF, and instruct a traffic congestion action responder to provide the traffic management action to the VNF.