Abstract: Network equipment is configured for use in one of multiple different core network domains of a wireless communication system. The network equipment is configured to receive a message that has been, or is to be, transmitted between the different core network domains. The network equipment is also configured to apply inter-domain security protection to, or remove inter-domain security protection from, one or more portions of the content of a field in the message according to a protection policy. The protection policy includes information indicating to which one or more portions of the content inter-domain security protection is to be applied or removed. The network equipment is also configured to forward the message, with inter-domain security protection applied or removed to the one or more portions, towards a destination of the message.

Abstract: Disclosed herein are an intelligent scheduling apparatus and method. The intelligent scheduling apparatus includes one or more processors, and an execution memory for storing at least program that is executed by the one or more processors, wherein the at least one program is configured to, in a hybrid cloud environment including a cloud, an edge system, and a near-edge system, configure schedulers for scheduling tasks of the cloud, the edge system, and the near-edge systems, store data, requested by a client, in a work queue by controlling the schedulers based on a scheduler policy and process the tasks based on data stored in the work queue, and collect history data resulting from processing of the tasks depending on the scheduler policy, and train the scheduler policy based on the history data.

Abstract: Systems, methods, and computer-readable media are presented herein for providing lower level physical-layer gateway functionalities and upper-level application functionalities; a system designed with flexible configurations in order to support a wide range of connected applications. The system can include a processor that executes machine instructions to perform operations. The operations can comprise: receiving, from a first device, a first packet representing first data formatted in a first protocol language; transforming the first data to second data formatted in a second protocol language; and transmitting a second packet representing the second data to a second device.

Abstract: A method for managing a control flow by a server including: receiving a control flow generation request data packet from the terminal; transmitting a control flow communication code to the terminal; and receiving the result of executing the control flow communication code from the terminal, wherein if the result of executing the control flow communication code is normal, the server generates the control flow with the terminal, and if the execution result value is abnormal, or the execution result is not received from the terminal within a predetermined time, the server blocks the generation of the control flow with the terminal.

Abstract: This application provides a forwarding path determining method and an apparatus. In determining a forwarding path, a second network device sends a routing update message to a first network device, where the routing update message carries a first identifier list, the first identifier list includes a binding segment identifier, and the first identifier list indicates a first forwarding path that is from the second network device to a third network device. By using the method, a second forwarding path from the first network device to the third network device is determined. According to the method provided in this application, when there is no controller or controllers cannot communicate with each other, routing advertisement of the binding end identifier is implemented, to determine a forwarding path. This helps simplify a packet forwarding control process.

Abstract: A computer-implemented method, medium, and system for multi-network/domain service discovery in a container orchestration platform are disclosed. In one computer-implemented method, a pool of servers with a plurality of network interface controllers (NICs) is created in a load balancer and by an operator in a worker node of a container orchestration platform, where each of the plurality of NICs is defined by a corresponding network attachment definition (NAD) object of a plurality of NAD objects. A virtual service object is generated using an annotation corresponding to the plurality of NAD objects. The virtual service object is associated to the pool of servers with the plurality of NICs. An internet protocol (IP) address of the virtual service object is transmitted to the container orchestration platform to update a status of a service object in the container orchestration platform using the IP address.

Abstract: A method performed by a computing device for implementing a dynamic outbound firewall. The method includes creating a localhost virtual private network (VPN) service, intercepting, using the localhost VPN service, outbound network traffic originated by the computing device, and responsive to detecting a first domain name service (DNS) query in the intercepted outbound network traffic, converting the DNS query to a first secure DNS query and sending the first secure DNS query to a trusted external DNS recursive resolver using a secure DNS protocol, receiving a first secure DNS response that includes a first DNS resolution result, adding an entry for the first DNS resolution result to a cache, and dropping a first outbound packet detected in the intercepted outbound network traffic based on a determination that the destination of the first outbound packet does not match an entry in the cache.

Abstract: Provided are a remote control method and apparatus, an electronic device and a medium, which relate to the field of communications and in particular, to the fields of smart home, smart life, Internet of things and cloud service. The specific implementation is as follows: acquiring a remote control instruction from a first smart device, wherein the remote control instruction is generated according to a control operation on a second remote controller and transmitted to the first smart device through a second smart device, and the first smart device is connected to a first remote controller; and controlling a control object of the first remote controller according to the remote control instruction.

Abstract: A safe system is able to execute remote maintenance reliably with respect to a process execution unit for executing a safety control in accordance with a safety program. This safety system includes: a process execution unit for executing a safety control in accordance with a safety program; a communication unit that is directly connected to the process execution unit and mediates external access to a safety program held in the process execution unit; and a support device that is connected via a network to the communication unit and, in accordance with a user operation, executes maintenance, including an addition or a change, with respect to the safety program. The support device and the communication unit identify each other by means of information that has been exchanged in advance, and exchange data required for maintenance.

Abstract: In one embodiment, a system for managing a virtualization environment includes a set of host machines, each of which includes a hypervisor, virtual machines, and a virtual machine controller, one or more virtual disks comprising a plurality of storage devices, the one or more virtual disks being accessible by the virtual machine controllers, where the virtual machine controllers conduct I/O transactions with the virtual disks, and a deployment system configured to receive a request to deploy a virtualized file server on a plurality of host machines, where the request is associated with deployment parameters, select a deployment image for the host machines based on the deployment parameters, and provide the deployment image to each host machine via the virtual disk. The virtual machine controller located on the host machine stores at least a portion of the deployment image on a storage device associated with the host machine.

Abstract: A method controls a modification of an adjustable device. A system establishes a circle of trust for a plurality of devices, where at least one of the plurality of devices is an adjustment control device for adjusting an adjustable device. Operations of the adjustment control device are controlled via a blockchain, where the blockchain must approve the adjustment control device before an adjustment of the adjustable device is performed by the adjustment control device. The system receives an approval from the blockchain for the adjustment control device to adjust the adjustable device, and the adjustment control device adjusts the adjustable device in response to receiving the approval from the blockchain.

Abstract: A method, system and apparatus are disclosed. According to one or more embodiments, a detection node in communication with a network function virtualization, NFV, system operating a NFV stack that is logically separable into a plurality of levels including a first level and a second level is provided. The detection node includes processing circuitry configured to: translate an executed first level event sequence to at least one translated second level event sequence, and compare the at least one translated second level event sequence to an executed second level event sequence to at least in part detect inconsistencies between the at least one translated second level event sequence and the executed second level event sequence where the executed second level event sequence and the executed first level event sequence being part of a multi-level sequence flow.

Abstract: A system and method for dynamically creating distributed, self-adjusting and optimizing core network with machine learning is disclosed. The method includes receiving a request to access one or more services and establishing a secure real time communication session with one or more client devices and a set of service layers based on the received request. The method further includes determining one or more service parameters based on the received request and sending one or more handshake messages to each of the set of service layers. Further, the method includes determining one or more environmental parameters and determining best possible service layer capable of processing the received request by using a trained service based ML model. The method includes processing the request at the determined best possible service layer and terminating or transferring the secure real time communication session after the request is processed.

Abstract: Disclosed herein are methods, systems, and processes for centralized containerized deployment of network traffic sensors to network sensor hosts for deep packet inspection (DPI) that supports various other cybersecurity operations. A network sensor package containing a pre-configured network sensor container is received by a network sensor host from a network sensor deployment server. Installation of the network sensor package on the network sensor host causes execution of the network sensor container that further causes deployment of an on-premise network sensor along with a network sensor management system, a DPI system, and an intrusion detection/prevention (IDS/IPS) system. The configurable on-premise network sensor is deployed on multiple operating system distributions of the network sensor host and generates actionable network metadata using DPI techniques for optimized log search and management and improved intrusion detection and response (IDR) operations.

Abstract: Techniques for automating traffic optimizations for egress traffic of an application orchestration system that is being sent over a network to a remote service. In examples, the techniques may include receiving, at a controller of the network, an egress traffic definition associated with egress traffic of an application hosted on the application orchestration system, the egress traffic definition indicating that the egress traffic is to be sent to the remote service. Based at least in part on the egress traffic definition, the controller may determine a networking path through the network or outside of the network that is optimized for sending the egress traffic to the remote service. The controller may also cause the egress traffic to be sent to the remote service via the optimized networking path.

Abstract: Disclosed are various approaches for generating a management token corresponding to a client device. The management token can include one or more device policies that can be installed or enforce on a client device. This can allow a device that might not be enrolled as a managed device to be taken into a facility and comply with the security policies of the facility.

Abstract: An example system includes first servers deployed in a public cloud computing infrastructure and second servers deployed external to the public cloud computing infrastructure connected to the first servers via a layer 3 network. The first servers include first virtual routers to implement one or more virtual networks and first virtual execution elements. The first virtual execution elements execute a network controller that includes a plurality of microservices. A network device manages network routing for the second servers. The network controller is configured to exchange routing information with the network device. The network controller is configured to configure, based on the routing information, the first virtual routers to configure a virtual network of the one or more virtual networks for packetized communications among the first virtual execution elements executing on the first servers in the public cloud computing infrastructure and the second servers.

Abstract: A gas inspection management system includes: an inspection information database that stores inspection results and information on links to inspection images for objects of inspection; an access condition receiver that receives an input of an access request and an input of condition specification from a manager; a hardware processor that: selects part or all of the objects from the inspection information database, based on the access request, acquires information on the inspection results and the information on the links for the selected objects, and generates a display image including the information on the inspection results and the information on the links for the selected objects; and a display that displays the display image.

Abstract: An intersection determination is made regarding whether or not a traffic route included in map information intersects a boundary between areas on a basis of the traffic route and an area shape between areas that are adjacent in the map information, the intersection determination being made for each pair of adjacent areas. On a basis of a weight determined for the boundary in a case where the intersection determination is made that no intersection exists, a movement cost graph expressing a movement cost for each area that accounts for the weight is constructed. A corrected shortest distance between areas is calculated on a basis of the movement cost graph. A human mobility between areas is estimated for each timestep, the timestep being the length of a predetermined time interval, according to a predetermined function for estimating the human mobility between areas on a basis of the corrected shortest distance between areas and a population of each of the areas at different predetermined times.

Abstract: Some embodiments provide a system for implementing a logical network that includes a set of end machines, a first logical middlebox, and a second logical middlebox connected by a set of logical forwarding elements. The system includes a set of nodes. Each of several nodes includes (i) a virtual machine for implementing an end machine of the logical network, (ii) a managed switching element for implementing the set of logical forwarding elements of the logical network, and (iii) a middlebox element for implementing the first logical middlebox of the logical network. The system includes a physical middlebox appliance for implementing the second logical middlebox.

Abstract: The present disclosure relates to techniques for collection and processing of data over a network, and in particular to in providing generalized analysis for preserving privacy of data sources. In some embodiments, a system receives a request for analytical data made by a requester, wherein the request includes: information for identifying one or more data source devices to be queried for input data, a type of data processing to be performed on the input data for generating the analytical data, and a data type for the analytical data. In response to receiving the request, the system causes the one or more data source devices to be queried for the input data. The system causes a response that includes the analytical data to be sent to the requester. Other embodiments are described throughout the present disclosure.

Abstract: The vehicular control device for displaying on the vehicular display includes: a physical processor that operates a plurality of operating systems in parallel on the virtualization software; a trigger detection unit for detecting the activation trigger; and an allocation unit. When detecting the activation trigger to activate the first operating system that executes the priority application and the second operating system as the other operating system, the allocation unit temporarily allocates the first operating system to the virtual processor cores with the allocation amount more that the predetermined allocation amount of the virtual processor cores after the activation is completed.

Abstract: Example methods and systems for health check as a service are described. One example may involve a computer system receiving a request to perform a health check for a network environment that includes a set of multiple flows. The computer system may select a subset that includes (a) a first flow between a first pair of endpoints and (b) a second flow between a second pair of endpoints. The health check may be initiated for the first flow and the second flow by generating and sending (a) a first instruction to cause injection of a first health check packet, and (b) a second instruction to cause injection of a second health check packet. The computer system may determine health status information associated with the subset based on (a) first observation information triggered by the first health check packet, and (b) second observation information triggered by the second health check packet.

Abstract: Techniques are disclosed for processing data packets and implementing policies in a software defined network (SDN) of a virtual computing environment. A plurality of servers are communicatively coupled to network interfaces of one of a skinny NIC or a smart NIC. The skinny NIC is configured to provide network interfaces for virtual machines hosted on a corresponding server. The smart NIC is configured to enable virtual machine communications within a virtual network in accordance with associated policies.

Abstract: In some embodiments, there is provided triggering a chat bot session to make a change to a master data entity at a master data store; determining an identity of the master data entity and the master data store associated with the chat bot session by at least extracting context information from an application and/or a user interface; generating, based on the identity of the master data entity and the master data store, a change command to make the change to the master data entity; and sending a change request including the change command to make the change to the master data entity at the master data store. Related systems, methods, and articles of manufacture are also disclosed.

Abstract: Embodiments of the present invention relate to apparatuses, systems, methods and computer program products for security analysis and validation during construction and deployment of dynamic network components. Specifically, the system is typically structured for identifying and remediating defects in a first resource program code being built at an internal network layer of the first distributed network, in real-time, and validating the first resource program code at both a lower deployment environment and a higher deployment environment. In some aspects, the system, in response to the successful first validation of the first resource program code, stores the first resource program code at an artifactory system. In response to a successful second validation, the system then typically allows deployment of the first resource program code to the lower deployment environment.

Abstract: In one embodiment, a system for managing a virtualization environment includes host machines implementing a virtualization environment, a plurality of clusters of the host machines, a virtualized file server (VFS) comprising a plurality of file server virtual machines (FSVMs), and a VFS cluster manager (CM) configured to distribute storage items among the clusters and receive cluster storage statistics for one or more shares of the VFS. The CM is further configured to, in response to a request from a first FSVM to identify a storage location for a storage item, identify a cluster at which the storage item is to be located based on the cluster storage statistics, identify a second FSVM at which the storage item is to be located based on compute usage statistics of one or more FSVMs in the identified cluster, and send an address of the second FSVM to the first FSVM.

Abstract: In an approach, a processor obtains a configuration file of a distributed file system federation, the configuration file comprising a list of a plurality of subclusters within the distributed file system federation and migration trigger factors for the plurality of subclusters. A processor determines a list of one or more source subclusters and a list of to-be-migrated directories in the one or more source subclusters based on a scanning result of the plurality of subclusters and the migration trigger factors in the configuration file. A processor generates a migration plan to migrate the to-be-migrated directories from the one or more source subclusters to one or more target subclusters in the distributed file system federation.

Abstract: A system and a method are provided for facilitating an account protection check for the security of sets of credentials. The system and method allow a service provider to automatically lock a credential set of at least one user account if fraudulent activity is detected. A third-party server of a service provider requests a token from the system before the authentication process. User metadata is analyzed to detect potentially fraudulent activity from the user account. If the credential set is in a locked status or unlocked status, at least one remote server of the system respectively relays an invalidation token or a validation token to the third-party server. If the invalidation token is relayed to the third-party server, the service provider does not go through the authentication process. If the validation token is relayed to the third-party server, the service provider proceeds with the authentication process as standard procedure.

Abstract: According to one or more embodiments of the disclosure, a service identifies a packet sent by a first device in a network to a second device as being of a particular protocol. The service identifies a control command within the packet for the second device, based in part on the particular protocol identified for the packet. The service determines, based on the control command within the packet, a quality of service policy for the packet. The service causes the quality of service policy to be applied to the packet along a path in the network via which the packet is sent from the first device to the second device.

Abstract: In one or more embodiments, one or more systems, one or more methods, and/or one or more processes may determine a temperature value within a chassis of an information handling system (IHS); may determine an ambient temperature value outside the chassis based at least on the temperature value within the chassis; may provide the ambient temperature value outside the chassis to a process executing on the IHS; may determine a threshold temperature value associated with at least one processor of the IHS based at least on the ambient temperature value outside the chassis and based at least on a target skin temperature value of the IHS; and may configure the at least one processor based at least on the threshold temperature value associated with the at least one processor.

Abstract: A computing system can receive a request for the service from a client device of a user. In response to receiving the request, the system can generate a unique identifier for the request to facilitate a rendezvous between the user and a service provider.

Abstract: Each of the processing devices stores an event vector, which is updated when certain events (e.g. memory errors, overtemperature events) occur on the device. Different elements of the vector correspond to different types of events. When an event of a given type occurs on one device, the update to the event vector on that device is propagated to other devices in the system. Those other devices, in response, update the corresponding element in their own event vector to indicate that an event of that given type has occurred in the system. In this way, events are aggregated between the different devices using the event vector. The event vector is considered to be a global event vector, since its elements indicate whether certain events have occurred across the entire system, and the vector is consistent across the system.

Abstract: Various example embodiments for supporting data center management are presented herein. Various example embodiments for supporting data center management may be configured to support fabric service management for a data center fabric including a set of servers and a fabric network configured to support communications of the servers. Various example embodiments for supporting fabric service management within a data center may be configured to support a capability for configuring a fabric network of the data center fabric of the data center based on merging and unmerging of underlay and overlay configurations. Various example embodiments for supporting fabric service management within a data center may be configured to support a capability for debugging a fabric network of the data center fabric of the data center based on use of probes.

Abstract: The disclosure describes a mesh network including a first device and a second device, which acts as an exit device with respect to the first device such that communication between the first device and an external device, outside the mesh network, is communicated via the second device. The first device receives access information utilized by the second device to access a DNS server in a LAN that includes the second device, and transmits a meshnet query packet that includes a DNS query for domain information associated with the external device. The first device receives, based on transmitting the meshnet query packet, the domain information associated with the external device, and transmits a meshnet initiation packet that includes a network communication for communicating with the external device, the network communication including the domain information. Various other aspects are contemplated.

Abstract: All-in-one network architecture management system develops, deploys, and maintains a network architecture, based on the specific needs of client inputs and client requirements. The network architecture management system comprises a user interface to receive initial requirements from clients, and monitors the deployed architecture to ensure that the configurations continue to meet the client's needs as throughput scales. The network architecture management system establishes a communication channel with a plurality of network services to maintain compliance, identify architecture gaps, and update architecture designs for scaling.

Abstract: A robotic program of an industrial robot is simulated. Inputs on a robotic program of a robot are received. The robotic program of the robot is represented with a neutral representation modeled with a neutral language. Specific code portions of the robotic program in the neutral representation are mapped with corresponding specific code portions of a native representation modeled with a native language of the at least one robot. The robot program in simulated in one of the neutral representation and the native representation. Corresponding code portions of the neutral representation and of the native representation of the robotic program are synchronized via the mapping.

Abstract: Various examples herein described are directed to methods, apparatuses, and computer program products for implementing unified data control policies in a distributed and product-oriented computing platform that includes a plurality of distributed data service clusters and a centralized policy information repository. In some examples, the distributed data service cluster is associated with a distributed policy decision object and one or more distributed policy enforcement objects. In some examples, the distributed policy decision object generates control policy evaluation responses in response to control policy evaluation requests. Additional example embodiments provide, such as but not limited to, example methods for generating policy information objects.

Abstract: A system and a method are provided for facilitating an account protection check for the security of sets of credentials. The system and method enable the use of an access control mechanism to regulate the changes to the lock status of the sets of credentials. A third-party server of a service provider requests a token from the system before the authentication process. The access control mechanism also approves or denies the request before the authentication process. If the credential set is in a locked status or unlocked status, at least one remote server of the system respectively relays an invalidation token or a validation token to the third-party server. If the invalidation token is relayed to the third-party server, the service provider does not go through the authentication process. If the validation token is relayed to the third-party server, the service provider proceeds with the authentication process as standard procedure.

Abstract: The present disclosure relates to systems, methods, and computer readable media for receiving and processing a request to deploy network functions across one or more deployment areas of a telecommunications network. Systems described herein process a request by applying a hierarchical configuration model including a hierarchy of configuration management instructions that can be applied to a request that complies with a format of the hierarchical configuration model. Features described herein facilitate deployment of unique configuration instructions across multiple network functions and across multiple deployment areas based on a single request and without further user interaction with respect to each of multiple network functions.

Abstract: Techniques for steering overlay network traffic along specific paths through an underlay network. The techniques may include determining a path through an underlay network that is optimized for sending a packet from a first node of an overlay network to a second node of the overlay network. The techniques may also include determining a destination address for sending the packet along the path from the first node to the second node, the destination address including a micro segment identifier (uSID) corresponding with an underlay node that is disposed along the path through the underlay network and trailing bits representing a portion of an address that corresponds with the second node. The techniques may also include causing the packet to be modified to include the destination address such that the packet is sent from the first node to the second node along the path.

Abstract: A system and a method are provided for facilitating an account protection check through blockchain. The system and the method allow a service provider to utilize blockchain technology to validate the access request to various accounts. A public key and a private key are generated and recorded by a blockchain ledger that are used to access the accounts. A third-party server of a service provider requests a token from the system before the authentication process. If the credential set is in a locked status or unlocked status, at least one remote server of the system respectively relays an invalidation token or a validation token to the third-party server. If the invalidation token is relayed to the third-party server, the service provider does not go through the authentication process. If the validation token is relayed to the third-party server, the service provider proceeds with the authentication process as standard procedure.

Abstract: An apparatus comprising: at least one processor; and at least one memory including computer program code; the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus at least to: determine (902) that at least one state of a network slice is to be adjusted in a limited geographical area of at least one network resource; and adjust (904, 906, 908) the at least one state of the network slice in the limited geographical area of the at least one network resource.

Abstract: A system including an array of functional units connected via a two-dimensional mesh network is described. A first functional unit in the array of function units includes a memory device and a processing device, operatively coupled with the memory device, to perform operations including generating a node identifier identifying a second functional unit in the array of functional units, and transmitting, over the two-dimensional mesh network, the node identifier identifying the second functional unit in the array of functional units. The node identifier may include a mesh interface component and a port identifier, and one or more information elements selected from the group consisting of a payload, a target node identifier, a target type identifier, an information type identifier, a linear identifier, and a protocol identifier.

Abstract: A spatial hierarchical model provides spatial context to a plurality of building control assets disposed within a plurality of hierarchical levels of the spatial hierarchical model. A method includes identifying non-compliance events detected by building control assets disposed at and below a particular hierarchical level of the spatial hierarchical model. The non-compliance events detected by building control assets disposed at and below the particular hierarchical level of the spatial hierarchical model over a period of time are aggregated and a healthy building dashboard that includes a representation of the aggregated non-compliance events for each of at least some of the one or more of the healthy building criteria detected by building control assets disposed at and below the particular hierarchical level of the spatial hierarchical model is generated and is displayed on a display.

Abstract: An information processing apparatus includes a processor configured to: transmit pre-process information to a processing apparatus that generates post-process information as a result of processing the pre-process information; and transmit identification information, used to acquire the post-process information, to an apparatus belonging to an apparatus group, satisfying a predetermined condition, among multiple apparatus groups of apparatuses that are enabled to acquire the post-process information and transfer the acquired post-process information to another apparatus.

Abstract: This application discloses a packet processing method and apparatus, and a computer storage medium, and belongs to the field of segment routing technologies. In the method, the network node receives a packet carrying an SRH, where the SRH includes one or more TLV fields and a TLV processing attribute, the TLV processing attribute indicates whether the network node needs to process the TLV fields included in the SRH, and the network node determines, based on the TLV processing attribute, processing of the TLV fields included in the SRH. In this way, any segment endpoint node on a segment routing network may determine the TLV processing attribute by using the SRH, so as to determine whether the TLV fields included in the SRH need to be processed.

Abstract: This document describes techniques, apparatuses, and systems for batch size adjustment using latency-critical event recognition. The techniques described herein enable an electronic device (e.g., security camera) to determine the likelihood of an event of interest (e.g., latency-critical event) occurring in data (e.g., audio and/or video) captured by the electronic device. To make such a determination, the electronic device may switch upload modes to upload the data, using a different batch size to reduce latency, to another device for user access, based on the likelihood of an event of interest occurring in the data. In this way, the techniques, apparatuses, and systems for batch size adjustment using latency-critical event recognition provide an efficient way to provide all-day security monitoring.

Abstract: Systems, methods, and techniques are provided for a fabric addressable memory. A memory access request is received from a host computing device attached via one edge port of one or more interconnect switches, the memory access request directed to a destination segment of a physical fabric memory block that is allocated in local physical memory of the host computing device. The edge port accesses a stored mapping between segments of the physical fabric memory block and one or more destination port identifiers that are each associated with a respective edge port of the fabric addressable memory. The memory access request is routed by the one edge port to a destination edge port based on the stored mapping.

Abstract: A system includes a network of multiple network domains, each network domain includes a software defined network (SDN) controller. Each SDN controller includes a network interface circuitry, a processor and a memory. The network interface circuitry provides a communicative coupling with at least one domain of the multiple network domains. The memory includes instructions that when executed by the processor, performs a network update comprising adding links, subtracting links or reporting a status of links in at least one network domain upon receiving a network update request, and performs sending and receiving the network update request to a second SDN controller, where the network update request is part of real-time publish/subscribe protocol, the sending network update request includes a publish message having a specified topic and a set of QoS attributes, and the receiving a network update request includes subscribing to the specified topic and the set of QoS attributes.