Abstract: A method for transmitting data via a serial communication bus where the data are transmitted with an adapted transmission frame. The adapted transmission frame includes at least one arbitration field and a data field, with the arbitration field being used to control the bus access in accordance with the Carrier Sense Multiple Access with Collision Resolution method by prioritization of messages with the aid of an identifier. For the arbitration phase, a low bit rate is set; and an increased bit rate is set for the transmission of the data in the data field. A start field is provided in the transmission frame. The data are packaged as an Ethernet transmission frame, which is inserted into the data field of the adapted transmission frame. The arbitration field and the start field replace a preamble and a Start Frame Delimiter of the Ethernet transmission frame.

Abstract: Some embodiments provide a method for a network management and control system that manages a virtual infrastructure deployed across a set of datacenters. Based on input from a top-level user of the virtual infrastructure, the method deploys a first logical network within the virtual infrastructure and defines one or more second-level users of the virtual infrastructure. The method receives input from a second-level user of the virtual infrastructure to define a second logical network and connect the second logical network to the first logical network. The first and second logical networks use a same data model and the second-level users are restricted from viewing configuration of the first logical network.

Abstract: Some embodiments provide a method for a set of central controllers that manages forwarding elements operating in a plurality of datacenters. The method receives a configuration for a bridge between (i) a logical L2 network that spans at least two datacenters and (ii) a physical L2 network. The configuration specifies a particular one of the datacenters for implementation of the bridge. The method identifies multiple managed forwarding elements that implement the logical L2 network and are operating in the particular datacenter. The method selects one of the identified managed forwarding elements to implement the bridge. The method distributes bridge configuration data to the selected managed forwarding element.

Abstract: A method operates a field bus system, wherein the field bus system has: a gateway, which has a network connection for a network of a specified type and a fieldbus connection for a fieldbus, and a number of fieldbus nodes, wherein the fieldbus nodes are coupled to each other and to the gateway via the fieldbus for the purpose of data exchange. Addressing takes place in the network of the specified type by network addresses, wherein the network addresses have a first part which designates a destination address, and a second part which designates a port of the destination address. The method comprises the steps of: creating a bus configuration, wherein the bus configuration assigns a destination address to a port, and performing a network address translation using the gateway based on the bus configuration created.

Abstract: Within a communication system having redundant routers, datagrams are forwarded from source communication devices to target communication devices via routers based on routing information stored in routing tables of the routers, wherein for each communication terminal, a virtual router is configured as a default gateway, to which virtual router a group of a plurality of routers is assigned, where routers from the same group assigned to a virtual router select from among themselves a router operated as the active default gateway, the routers not operated as the active default gateway are operated as reserve gateways, and where the active default gateway in question transmits, only upon a request for stored address assignments that is received from a reserve gateway, all stored address assignments to a requesting reserve gateway in bundled form.

Abstract: Systems and methods for dynamically establishing network overlay tunnels between edges within different groups of a network architecture are provided. According to an embodiment, a Software-Defined Wide Area Network (SDWAN) controller associated with a private network, receives a request to initiate a dynamic Virtual Private Network (VPN) link for a network session between a source edge and a destination edge. The SDWAN controller determines configuration information for each of the source edge and the destination edge, which includes VPN and SDWAN configuration information determined based on pre-configured rules managed by the SDWAN controller for generating the dynamic VPN link between the source edge and the destination edge. The SDWAN controller directs the source edge and the destination edge to set up a VPN overlay tunnel in accordance with the determined configuration information by pushing the determined configuration information to each of the source edge and the destination edge.

Abstract: A network node may receive a packet having an inner internet protocol (IP) header and an outer IP header. The inner IP header may be encrypted. A loose source routing (LSR) field of the outer IP header may identify a recipient address. The network node may determine, based on the recipient address identified in the LSR field, a tunnel endpoint associated with a receiving network node. The network node may update the outer IP header of the packet to obtain an updated packet with an updated outer IP header. A source address of the updated outer IP header may be updated to a tunnel endpoint associated with the network node, and the destination address of the updated outer IP header may be updated to a tunnel endpoint associated with the receiving network node. The network node may route the updated packet according to the updated outer IP header.

Abstract: Techniques are described for prioritized establishment of communication sessions. In one example, a network device parses a configuration file that defines a plurality of communication sessions of a routing protocol and includes priority values assigned to the communication sessions. The network device creates two or more lists of communication sessions for two or more of the priority values based on the configuration file, wherein each list of the two or more lists is created for a particular priority value of the priority values and defines one or more communication sessions of the plurality of communication sessions that are assigned the particular priority value. The network device then establishes the one or more communication sessions included in each list of the two or more lists according to an ordering based on the priority values associated with the two or more lists.

Abstract: In one embodiment, a method includes identifying, by a packet analyzer, one or more silence packets within a network and initiating, by the packet analyzer, a replacement of the one or more silence packets with one or more performance silence packets. The one or more performance silence packets are transmitted between a first node of the network and a second node of the network during a silence period. The method further includes receiving, by the packet analyzer, information associated with the one or more performance silence packets; and analyzing, by the packet analyzer, a connection between the first node of the network and the second node of the network using the information associated with the one or more performance silence packets.

Abstract: In one implementation, a wireless security system premises gateway component includes a first local area wireless communication component adapted to communicate wirelessly with plural wireless security system sensors distributed at a premises; a second local area wireless communication component adapted to communicate wirelessly with a general purpose mobile communications device; a communications interface component adapted to communicate with a wide area communications network that is located remotely of the premises; a security system controller component adapted to communicate with the general purpose mobile communications device to provide state information regarding the security system and to provide control inputs to the security system; and a single gateway housing configured and sized to house the first local area wireless communication component, the second local area wireless communication component, the communications interface component, and the security system controller.

Abstract: Various embodiments disclose a computer-implemented method for transmitting data between node devices in a mesh network comprising receiving, by a first node device within the mesh network that supports a first set of communication modes, a first information element that specifies a second set of communication modes supported by a second node device within the mesh network, determining, based on the first information element, a common set of communication modes that includes at least a default mode and a first mode, where each communication mode included in the common set of communication modes is supported by both the first node device and the second node device, selecting, from the common set of communication modes, the first mode as a first preferred communication mode for data transmissions between the first node device and the second node device, and configuring a communication link between the first node device and the second node device according to the first mode.

Abstract: A system and method is provided to track users across applications and devices, and to distinguish similar or different users among a number of commonly-used devices. Accordingly, systems and methods are provided for analyzing user device information to determine different users among a number of devices. In particular, user's behavior when using the devices is observed, and responsive to that observed behavior, is the determined whether a particular users are distinguishable from other users. For instance, it may be useful to distinguish between users that operate the same devices or exist within a similar network (e.g., a home network, a workplace network, etc.) for various purposes. For instance, it may be useful to distinguish between users for displaying advertising to these users, performing some other operation with respect to a subset of the users.

Abstract: Apparatus and methods are disclosed for bridging communications between a private network and a public network. A mapping that associates a first set of IP addresses of endpoints in the private network with a second set of IP addresses of endpoints in the public network is provided which enables communications between the private network and public network for network-address-translation (NAT). In response to a data packet having a first IP address of the first set of IP addresses, the data packet is used to determine whether the local line should be accessed. In response to an indication that the local line should be accessed, the identifier among the second set of IP addresses may be used to activate bridging (e.g., ATB) circuit and redirect a call associated with the data packet by passing the data packet through the ATB circuit.

Abstract: In general, techniques are described for organizing execution of distributed operating systems for network devices. A device comprising hardware computing nodes may be configured to perform the techniques. The hardware computing nodes may execute a protocol by which to discover a topology of the plurality of hardware computing nodes, and determine, based on the topology, a subset of the plurality of hardware computing nodes to manage execution of a distributed operating system. The determined subset of the plurality of hardware computing nodes may execute a communication bus by which to synchronize operating system state information between the subset of the plurality of hardware computing nodes. The hardware computing nodes may further execute, based on the operating system state information, the distributed operating system to provide an execution environment in which one or more applications execute.

Abstract: A portable electronic device includes a baseband integrated circuit configured to generate communication data and control signals. The portable electronic device also includes an optical path configured to be coupled to the baseband integrated circuit to transmit the data signals from the baseband integrated circuit. The portable electronic device additionally includes a radiohead configured to be coupled to the optical path to receive the data signals transmitted along the optical path from the baseband integrated circuit.

Abstract: A novel method for fully utilizing the multicast or broadcast capability of a physical network is provided. The method identifies segments of the network within which broadcast traffic, multicast traffic, or traffic to unknown recipients (BUM traffic) is allowed or enabled. The identified segment encompasses parts of the network that the BUM traffic is able reach while excluding parts of the network nodes that the BUM traffic is unable to reach. Each identified segment includes network nodes that are interconnected by physical network hardware that supports BUM traffic. The method identifies multiple BUM traffic segments in a given network that each supports its own BUM traffic. The different BUM traffic segments are interconnected by physical network hardware that does not support BUM network traffic. Each identified segment is assigned an identifier that uniquely distinguishes the identified segment from other identified segments.

Abstract: According to one or more embodiments, a computer implemented method includes receiving, by an operating system of a computer server, a request to execute an instance of a computer application. The method further includes deploying a virtual container for the instance of the computer application, the virtual container is allocated a dynamic virtual interne protocol address (DVIPA). The method further includes instantiating an application instance of the computer application in the virtual container. The method further includes, based on a determination that the computer application is a non-native application for the operating system, creating for the virtual container, a virtual network interface card (NIC) that translates network communication between the application instance and a physical NIC of the computer server.

Abstract: Embodiments herein describe an upgrade system that provides suggestions for upgrades using a confidence metric. In one embodiment, the upgrade system tracks network elements in multiple network fabrics to determine whether an upgrade performed on a first network element was successful. The upgrade system can generate one or more vectors that store various data about the network elements such as enabled features, telemetry data, control plane faults, system settings, locations of the network elements in a fabric, and the like. By evaluating these vectors, the upgrade system can derive a reliability confidence metric regarding the upgrade. If the reliability confidence metric exceeds a threshold, this indicates the upgrade was successful. The upgrade system can then compare vectors for different network elements to determine whether to apply the same upgrade to similar network elements.

Abstract: A generalized distributed framework is provided for parallel search and retrieval of unstructured and structured patient data across zones with hierarchical ranking. In various embodiments, patient data is ingested from a plurality of data sources. A plurality of data models is populated based on the ingested patient data, each data model comprising an abstract data type. The plurality of data models is stored in an index. A search request is processed against the index, the search request comprising one or more attribute of the abstract data type.

Abstract: Systems and methods for preemptive adjustments of connections in a server connection pool are provided. In example embodiments, a number of quality of service engines analyze server connection pool metrics data to generate instructions to increase or decrease the number of connections in a connection pool, preemptively, before shortages or surpluses of connections occur. Corrective engines can analyze performance of the quality of service engines and can, when necessary, instruct the quality of service engines to modify their prediction mechanisms.

Abstract: The technologies described herein are generally directed toward establishing a domain of authority for routing table updates from a routing device. For instance, operations can comprise facilitating receiving, from a second routing device via a network, a route update for the routing table of the first routing device, wherein the route update is associated with a first network route. An additional operation can evaluate a value of the route update, resulting in an evaluated value of the route update. Further an operation can include updating, by the graphics processing unit, a first entry of the routing table based on the route update and the evaluated value of the route update, wherein evaluating the value of route updates, comprising the evaluating the value, and updating entries of the routing table, comprising the updating the first entry, are comprised in an updating process.

Abstract: A system includes programmable systolic cryptographic modules for security processing of packets from a data source. A first programmable input/output interface routes each incoming packet to one of the systolic cryptographic modules for encryption processing. A second programmable input/output interface routes the encrypted packets from the one systolic cryptographic module to a common data storage. In one embodiment, the first programmable input/output interface is coupled to an interchangeable physical interface that receives the incoming packets from the data source. In another embodiment, each cryptographic module includes a programmable systolic packet input engine, a programmable cryptographic engine, and a programmable systolic packet output engine, each configured as a systolic array (e.g., using FPGAs) for data processing.

Abstract: A method and system of failure detection in a computer network, including pre-programming a number of processors of a multi-processor networked system coupled with remote systems via a network, each of the processors configured to run a BFD module. One processor may be assigned to be an active BFD server to establish sessions between the multi-processor networked system and the remote systems to detect link faults between the multi-processor networked system and the remote systems. Other processors may be assigned as dormant BFD clients. If a link or a processor running the active BFD server fails, one of the dormant BFD clients is selected to become an active BFD server. The BFD server may be dynamically replaced with a dormant client based on predetermined criteria without failure of the BFD server.

Abstract: A method includes setting, using at least one processor of an electronic device that includes multiple subscriber identity module (SIM) cards, a maximum Network Address Translation (NAT) interval to be a maximum value among NAT keep-alive intervals associated with the multiple SIM cards. The method also includes triggering, using the at least one processor, a partial call setup from a first SIM card of the multiple SIM cards to a second SIM card of the multiple SIM cards. The method further includes determining, using the at least one processor, whether the electronic device receives the partial call setup. In addition, the method includes, in response to determining that the electronic device receives the partial call setup, setting, using the at least one processor, the NAT keep-alive interval for each of the multiple SIM cards to be equal to the maximum NAT interval.

Abstract: A data migration method and an apparatus are applied to a scenario in which a user plane gateway communicating with a terminal is changed from a source user plane gateway to a target user plane gateway. The target user plane gateway receives an address of the terminal from a control plane gateway, obtains an Ethernet data packet based on the address of the terminal, and sends the Ethernet data packet to an Ethernet interface, so that a switch obtains the Ethernet data packet through the Ethernet interface, and updates a MAC address table based on the Ethernet data packet.

Abstract: There are provided systems and methods for automatic data pull requests using a secure communication link between online resources. An account may be used to electronically process transactions by a user, which may include use of a digital wallet that may store payment instruments used for transaction processing. The user may access an online platform for a service provider that provides a service to the user and bills the user for the service. The online platform may provide transaction processing services for the user's bills. The user may request a secure communication link be established between the service provider's billing platform and the user's digital wallet so that when billing data is available on the billing platform, the data may be pulled by the digital wallet from the platform and loaded to the user's digital wallet for processing.

Abstract: A relay device for relaying a frame between communication lines includes: a classification acquisition unit for acquiring at least one classification item group having classification items and representing a classification condition for classifying a received frame to perform a predetermined process; a condition generation unit for generating at least one condition item group having condition items and representing a filtering rule for the frame based on the classification item group; and an execution unit for performing the process on the received frame based on the filtering rule. The classification acquisition unit acquires the classification item group in which a numerical number of the classification items is less than a numerical number of the condition items.

Abstract: Various aspects of the present disclosure generally relate to wireless communication. In some aspects, a wireless communication device may determine a type of a packet for header compression or decompression, wherein the type of the packet includes at least one of an Ethernet-only packet type or an Ethernet packet with Internet Protocol (IP) payload type. The wireless communication device may perform Ethernet header compression or decompression on the packet. The wireless communication device may selectively perform IP header compression or decompression on the packet based at least in part on the type of the packet. Numerous other aspects are provided.

Abstract: Systems and methods for determining the state of a virtual router instance. An example method comprises: monitoring, by a processing device of a host computer system, a network interface associated with an instance of a virtual router; responsive to determining that a certain IP address has been assigned to the network interface, identifying a state of the instance of the virtual router as a master state; and transmitting a message identifying the state of the instance of the virtual router.

Abstract: Some embodiments provide a method of identifying packet latency in a software defined datacenter (SDDC) that includes a network and multiple host computers executing multiple machines. At a first host computer, the method identifies and stores (i) multiple time values associated with several packet processing operations performed on a particular packet sent by a first machine executing on the first host computer, and (ii) a time value associated with packet transmission through the SDDC network from the first host computer to a second host computer that is a destination of the particular packet. The method provides the stored time values to a set of one or more controllers to process to identify multiple latencies experienced by multiple packets processed in the SDDC.

Abstract: An autonomous system border router (ASBR) provided in a domain in which routers share an anycast address, may perform a method comprising: (a) receiving, from an exterior Border Gateway Protocol (eBGP) peer, first reachability information for a first prefix, the first reachability information including a first next hop (NH) address; (b) communicating first link state information about the first prefix to another router in the domain, the first link state information associating the first prefix with the anycast address; (c) receiving, from an eBGP peer, second reachability information for a second prefix, the second reachability information including a second next hop (NH) address; and (d) communicating second link state information about the second prefix to the other router in the domain, the second link state information associating the second prefix with the anycast address. This effectively reduces the number of next hops related to a prefix learned by two or more ASBRs (e.g.

Abstract: A computer system having an address system of a first predetermined width in which each address of the first predetermined width in the address system includes a first portion identifying an object and a second portion identifying an offset relative to the object, where a static identifier for the first portion is predetermined to identify an address space having a second predetermined width that is smaller than the first predetermined width, or a space of kernel objects.

Abstract: The disclosed technology relates to a method for managing a multimedia session between a calling terminal and at least one called terminal. In one aspect, the multimedia session comprises a pre-call setup phase and a call phase. According to the disclosed technology, the method comprises, during the pre-call setup phase, a reception of an INVITE message generated by a calling terminal. The INVITE message comprises a description field describing the multimedia session and containing information relating to a set of media streams. A response is generated to the INVITE message, wherein the response comprises a header containing at least one media type and at least one first call parameter applicable to at least one media stream of the media type, among the set of media streams.

Abstract: Automated virtual premised server installation and services configuration are provided. Aspects provide a system, method, and computer readable storage device that enable aspects of a virtual premised server-on-demand (VPSoD) service to provide a technical improvement to premised server installation, support, and operation. The VPSoD service provides the capability of a consumer to subscribe to one or more premised server servers, and those servers and associated services are automatically installed on a remote virtual instance of a premised server and automatically configured with minimal user input. A secure communication tunnel is configured between the consumer's local network and the virtual premised server for enabling services installed on the virtual premised server to communicate on the local network and behave as if the virtual premised server is connect into the network.

Abstract: Stream delivery within a content delivery network (CDN) includes recording the stream using a recording tier, and playing the stream using a player tier. Recording begins when the stream is received in a source format. The stream is then converted into an intermediate format (IF), which comprises a stream manifest, one or more fragment indexes (FI), and a set of IF fragments. A player process begins when a requesting client is associated with a CDN HTTP proxy. In response to receipt at the proxy of a request for the stream, the HTTP proxy retrieves (either from the archive or the data store) the stream manifest and at least one fragment index. Using the fragment index, the IF fragments are retrieved to the HTTP proxy, converted to a target format, and then served in response to the client request. Preferably, fragments are accessed, cached and served by the proxy via HTTP.

Abstract: Example virtual appliances disclosed herein include processor circuitry to accept a resource definition of a custom resource to be executed in a cloud computing environment. Disclosed example virtual appliances also include a lifecycle manager to manage a lifecycle of the custom resource based on a state machine. Disclosed example virtual appliances further include a database to: (i) query the lifecycle manager for a set of operations available to execute in a current lifecycle state of the custom resource; (ii) update a catalog item for the custom resource to present the set of operations available to execute in the current lifecycle state of the custom resource, the catalog item created based on the resource definition of the custom resource; and (iii) in response to selection of a first operation in the set of operations, send a message to cause the processor circuitry to execute the first operation.

Abstract: A registration apparatus stores priority which is set for each of a plurality of payment apparatuses. If a condition to update the priority is established, the registration apparatus updates the priority, based on data indicating a state of each payment apparatus. The registration apparatus transmits accounting data and data on the priority, to a payment apparatus having a top priority. A payment apparatus pays a transaction by transmitting a permission response to the registration apparatus, when receiving the accounting data and the priority data in a state where the payment of the transaction is possible. The payment apparatus transfers the accounting data and the priority data to another payment apparatus having a lower priority than the payment apparatus, based on the priority data, when the accounting data and the priority data are received in a state where the payment of the transaction is not possible.

Abstract: This application discloses a data processing method and apparatus, and a switching device. The data processing method includes: obtaining a destination address of a data packet received by an input port; determining an available output port based on the destination address; determining a busy degree of the available output port, when there is no non-busy available output port in the available output port, determining a quantity of footprint queues on the available output port, and selecting an available output port with a largest quantity of footprint queues as a target output port; determining a busy degree of a queue on the target output port, and when there is no non-busy queue on the target output port, selecting a footprint queue on the target output port as a target output queue. In the foregoing manners, a network resource is properly used, and network blocking can be effectively alleviated.

Abstract: Some embodiments provide a method for a first network controller executing at a first site of multiple sites spanned by a logical network. Network controllers execute at each site. The method generates logical network state data for the first site based on (i) data received from computing devices that implement the logical network at the first site and (ii) logical network configuration data from a network manager at the first site. The method provides the logical network state data for the first site to a second network controller executing at a second site. The method provides logical network state data received from the second site to the computing devices that implement the logical network at the first site.

Abstract: Techniques for configuring shared routing tables for network devices are provided. In some embodiments, a shared routing context is configured to include common routes across several local routing contexts. When a first packet is received at a first local routing context that is to be routed using one of the common routes, NAT operations may be performed on the first packet and then the shared routing context is used to process the first packet. Similarly, when a second packet is received at a second local routing context that is to be routed using the same common route, NAT operations may be performed on the second packet and then the shared routing context is used to process the second packet.

Abstract: Described are programmable IO devices configured to perform operations. These operations comprise: determining a set of range-based elements for a network; sorting the set of range-based elements according to a global order among the range-based elements; generating an interval table from the sorted range-based elements; generating an interval binary search tree from the interval table; propagating data stored in subtrees of interior stages of the interval binary search tree to subtrees of a last stage of the interval binary search tree such that the interior stages do not comprise data; converting the interval binary search tree to a Pensando Tree; compressing multiple levels of the Pensando Tree into cache-lines; and assembling the cache-lines in the memory unit such that each stage can compute an address of a next-cache line to be fetched by a next stage.

Abstract: The present invention relates to testing signals on a coaxial home network that carries a digital video signal. It has direct application to testing Multimedia over Coax Alliance (MoCA) standards-compliant networks and applies to similar networks such as Data Over Cable Service Interface Specification (DOCSIS), Ethernet, and Wi-Fi. An embedded expert system can guide an inexperienced operator through the process of evaluating and resolving problems with a home network with little operator input.

Abstract: A system for configuring a data center includes a fabric management server coupled to a management switch. A provisional Software Defined Networking (SDN) controller executing on the fabric management server can discover physical servers coupled to the management switch, receive network interface configuration information from the physical servers, and use the discovered network interface configuration information to determine a configuration for switches and servers coupled to an IP fabric. The configuration can be migrated to a full functionality SDN controller.

Abstract: Radio channel configuration is described for an access point using a multiprotocol-border gateway protocol (MP-BGP) message. In an example a report is received in a MP-BGP message from each of a plurality of APs at an AP manager. Each report includes a channel quality indicator of other APs as measured by the AP that sent the respective report. The reports are deparsed and aggregated. A transmit power adjustment is determined for a selected AP based on the aggregated reports at the AP manager and a transmit power adjustment command is sent to the selected AP.

Abstract: A method includes: determining a target code block in a code block stream that is in a first rate mode and includes a plurality of code blocks, where the target code block includes a code block of a start type in the first rate mode; modifying information carried in a code block type field of the target code block to target information, where the target information includes information carried in a code block type field of a code block of a start type in a second rate mode; or the target information includes information carried in a code block type field of a code block of a terminate type in a second rate mode; and transmitting a code block stream in the second rate mode to a transport network, where the code block stream in the second rate mode includes a modified target code block.

Abstract: A network interface device comprises a plurality of components configured to process a flow of data one after another. A control component is configured to provide one or more control messages in said flow, said one or more control message being provided to said plurality of components one after another such that a configuration of one or more of said components is changed.

Abstract: Systems and methods for managing a network are disclosed. In certain systems and methods, access to a network such as a wireless network, can be granted or denied based upon a threshold number of devices accessing the network. Moreover, access to a first service available over the network can be granted or denied based upon a threshold number of devices accessing the first service. Various network resource can be allocated to the first service based at least upon the number of device access the first service.

Abstract: An example operation may include a method comprising one or more of creating a VNFC monitor, starting a VNFC monitor, sending VNFCI state change notifications which includes a status of one or more VNFC modules, stopping a VNFC monitor, and destroying a VNFC monitor.

Abstract: An access control system receives a device-specific identifier of a mobile electronic device. A memory device stores the identifier as belonging to a user present in a public zone. An image processing device generates from a camera image produced by a camera a real-time template for facial features of the user present when the user present requests access to an access-restricted zone, and searches user profiles stored in a database for a reference template that matches the real-time template to a specified degree, wherein a user profile is searched only if it is assigned to a present user based on a stored identifier, wherein in the case of a match, the system grants the user access to the access-restricted zone and denies access when there is no match.

Abstract: Aspects of the subject disclosure may include, for example, a method in which a processing system directs video flows to a plurality of user devices located at network cells, and determines a first or second data usage priority for each user device. The system detects congestion at a cell of the network and/or in the video flows. The system also performs a first congestion-aware shaping procedure for video flows in the congested cell directed to user devices of a second priority located at the congested cell, and subsequently performs a second congestion-aware shaping procedure for video flows in the congested cell directed to user devices of the first priority located at the congested cell. Other embodiments are disclosed.