Abstract: Methods and apparatuses are provided for access control barring. The method is applied to a terminal in a connected state or an inactive state. The method includes: starting a designated timer for access control barring; receiving a Radio Resource Control (RRC) connection release message sent by a base station when the designated timer has not reached a designated stop time; and determining based on the RRC connection release message that an Access Stratum (AS) of the terminal remains in a congested state.

Abstract: This application provides a peer relationship management method and apparatus, a device, and a storage medium, and belongs to the field of network technologies. In this application, when a peer relationship between a first routing device and a second routing device is interrupted, routing entries received from the second routing device are not deleted. Services may be still processed, within a time range from a time at which the peer relationship is interrupted to a time at which the peer relationship is reestablished, by using the routing entries received from the second routing device.

Abstract: Techniques for using traceroute with tunnels and cloud-based systems for determining measures of network performance are presented. Systems and methods provide adaptive probing of a service path in a network, wherein the service path includes a plurality of legs. The systems and methods include, for one or more legs of the plurality of legs, sending a number of probes using one of a plurality of protocols; responsive to receiving a response from the number of probes, determining the one of the plurality of protocols is successful and storing this protocol the one or more legs; and, responsive to failure to receive the response, sending a number of probes using another one of the plurality of protocols and continuing until a successful protocol is determined or all of the plurality of protocols fail.

Abstract: Candidates for selection in a weighted arbitration system are assigned priority weights and random weights. The winning candidate is determined using a tree of selectors such as a comparators. At each stage of the tree, the candidate having the greatest priority weight is selected to pass to the next stage. If multiple candidates are tied for the greatest priority weight, the candidate having the greatest random weight is selected to pass to the next stage.

Abstract: Techniques and architecture are described that utilize switchport protected flags to provide switchport protected functionality across network devices, e.g., switches, routers, etc., in fabric networks. For example, a first port of a first network device of a fabric network receives a packet from a first host destined for a second host. The second host is onboarded to the fabric network via a second port of a second network device. It is determined (i) if a first protected flag associated with the first port of the first network device is set as true and (ii) if a second protected flag associated with the second host is set as true. Based at least in part on (i) the first protected flag associated with the first port being set as true and (ii) the second protected flag being set as true, the first network device drops the packet.

Abstract: Techniques for mitigating BGP blackholes and hijackings are disclosed herein. The techniques include methods for determining, by a victim autonomous system (AS), that a first AS is associated with a first BGP route that includes the victim AS as the destination or as an AS along the first BGP route to the destination and sending a message to a second AS directing the second AS to refrain from using the first AS to propagate data to the victim AS. The message can include a set of one or more AS numbers to avoid in refraining from using to propagate data to the victim AS, a timestamp, an expiration interval, a signature of the victim AS, and an identifier identifying a certificate to be used to verify the signature. Systems and computer-readable media are also provided.

Abstract: A method includes accessing a first intelligence feed including a plurality of cybersecurity incidents. A second intelligence feed is generated including a plurality of technical indicators defined on one or more virtual private network internet point of presence (“VPN internet PoP”) that connects a plurality of VPN tunnels to an internet. The first and second intelligence feeds are compared, a particular incident is determined, and a time frame of the particular incident is determined. Use of a particular VPN internet PoP by a plurality of sources including a plurality of clients is monitored to determine a plurality of time-based behaviors. The plurality of time-based behaviors are compared to the particular incident and to the time frame to determine a match. A particular source is blocked at the particular VPN internet PoP based on the determination of the match.

Abstract: A computing device including a memory and a processor is provided. The processor is configured to receive, from a device configured to communicate data generated by at least one sensor disposed in a location being monitored, a request to establish a bi-directional connection between the device and a computing environment; identify a structure of data storing a uniform resource locator (URL) and a set of identifiers, the set of identifiers being representative of a group of connections with the computing environment; and respond, to the device, with a response specifying the URL, thereby enabling the device to establish the bi-directional connection.

Abstract: A method performed by a network controller for providing network reliability. The method includes employing an Interior Gateway Protocol (IGP) proxy configured to communicate controller information about the network controller to the one or more network elements using IGP (Link-State Advertisement (LSA) or Link State Protocol Data Unit (LSP)) with a Controllers TLV. The method uses the controller information for proper election of a primary controller in the event of a network failure.

Abstract: Echo or traceroute functionality is supported in a path spanning multiple autonomous systems (ASes) having segment routing (SR) enabled, the path including an ingress node and an egress node, by: (a) obtaining a return label stack to reach the ingress node from either (A) the egress node, or (B) a transit node in the path; (b) obtaining a label stack to reach, from the ingress node, either (A) the egress node, or (B) the transit node; (c) generating a request message including the return label stack; and (d) sending the request message towards either (A) the egress node, or (B) the transit node using the label stack.

Abstract: In various examples, an extensible network traffic engineering platform monitors network traffic and application performance to dynamically update network ingress and egress communication paths for increasing performance of the application—such as a cloud gaming application, a cloud virtual reality (VR) application, and/or another high performance application types. Pluggable, distributed, application-centric network monitors, policy engines, and network configurators are implemented at the edge to detect degraded network and application performance and dynamically update network routing to account for the same.

Abstract: Systems and methods for sloppy routing are provided. A client transmits a DNS query corresponding to a requested resource to a content delivery network (CDN) service provider. In some embodiments, the CDN service provider processes the DNS query to determine whether a threshold content delivery bandwidth has been exceeded by data links at cache servers. In other embodiments, additionally or alternatively, the CDN service provider determines whether a content provider has exceeded a threshold network usage that indicates a price at which the CDN service provider to provide content on behalf of the content provider. Using both or either of these thresholds, the CDN service provider can further process the DNS query by providing an alternative resource identifier or a cache IP address, both associated with an alternative POP. In some embodiments, the CDN service provider determines a routing mode for the response to the DNS query.

Abstract: In one embodiment, a service chain data packet is instrumented as it is communicated among network nodes in a network providing service-level and/or networking operations visibility. The service chain data packet includes a particular header identifying a service group defining one or more service functions, and is a data packet and not a probe packet. A network node adds networking and/or service-layer operations data to the particular service chain data packet, such as, but not limited to, in the particular header. Such networking operations data includes a performance metric or attribute related to the transport of the particular service chain packet in the network. Such service-layer operations data includes a performance metric or attribute related to the service-level processing of the particular service chain data packet in the network.

Abstract: A system and method that provides inter-application relevance management for resources being brokered by an application virtualization platform. A described platform includes a memory configured to store a set of relevance rules for applications hosted by the application virtualization platform, wherein each relevance rule specifies a relevance setting between a first application and a second application. Also included is a processor coupled to the memory and configured to broker resources for the application virtualization platform to avoid conflict between the applications.

Abstract: Aspects of the present application relate to mobile communication devices having active device components and passive device components and, more particularly, to operation of the passive device components to form a backscatter signal from a received forward signal. Forming the backscatter signal may include generating the backscatter signal from the received forward signal without decoding a plurality of sub-signals in the received forward signal, the backscatter signal being a time-domain function of a contiguous subset of the time-domain plurality of sub-signals in the received forward signal. Upon receipt of the backscatter signal, a reception point may obtain information about the mobile communication device that contains the passive device components. Such information may relate to timing, position and identity.

Abstract: A migration manager (MM) identifies a source group of compute instances (at a first partition of a provider network) to be migrated to an isolated virtual network (IVN) implemented in a second partition. The MM triggers the establishment within the IVN of an equivalence group of instances corresponding to the source group instances. Connectivity between the equivalence group and a first load balancer which was being used for the source group in the first partition is maintained by modifying one or more configuration settings. After a replacement load balancer is established within the IVN, the first load balancer is decommissioned.

Abstract: Packets are routed in a data network comprising a wireless mesh network and a controller providing IPv6 management traffic to nodes of the wireless network. A monitor function and a route table manager are used to generate a route table relating IPv6 addresses to each of the nodes via a respective one of a plurality of POP nodes, by accessing a pre-configured topology file, determining the reachability of each of the plurality of POP nodes from the controller by periodically sending test messages from the monitor function to each POP and detecting acknowledgement of the test messages. If a POP node is not reachable, the route table is updated to relate the IPv6 subnet of the POP that is not reachable to the address of a POP node that is reachable. A Layer 2 network is used to direct the IPv6 management traffic according to the amended route table.

Abstract: Systems and methods for remotely resetting networked devices is disclosed. The system can comprise a primary network connection and a secondary network connection to provide communications redundancy. The system can also include physical connections between networked devices to enable devices to be reset regardless of the type of error. The method can include monitoring one or more parameters of a device to determine what type of error is occurring and what action to take. The system can enable a first computer (or other electronic device) to restart applications, adapters, and services on a second computer (or other electronic device). The system can also enable the first computer to reset or restart the second computer. The system can enable networked computers to monitor and restore operation to other computers on the same network without human intervention.

Abstract: In one embodiment, load balancing criteria and an indication of a plurality of network nodes is received. A plurality of forwarding entries are created based on the load balancing criteria and the indication of the plurality of nodes. A content addressable memory of a network element is programmed with the plurality of forwarding entries. The network element selectively load balances network traffic by applying the plurality of forwarding entries to the network traffic, wherein network traffic meeting the load balancing criteria is load balanced among the plurality of network nodes.

Abstract: A content delivery network (CDN) includes a plurality of CDN components including at least one CDN rendezvous mechanism and at least one control core. The CDN components are controlled by control core data from the at least one control core. Some CDN components obtain CDN resources including control core data from at least some other CDN components. The CDN components use the CDN rendezvous mechanism to select one or more CDN components from which to obtain CDN resources.

Abstract: Systems and methods are disclosed for dynamic routing of electronic transactions while maintaining token compatibility. One method comprises receiving a request message from a merchant system and determining a final destination payment processor based on a routing directive. Upon determining the final destination payment processor, the request message may be updated by updating a message destination to the final destination payment processor and replacing an initial token with a token that is compatible with the final destination payment processor. The updated request message may then be transmitted to a downstream entity for further processing.

Abstract: There is provided a technique to enable a specific IC chip to reliably activate the other IC chips. An information processing apparatus has first to third IC chips and, after loading an activation program for the third IC chip from a first storage unit connected to the first IC chip into a third storage unit connected to the third IC chip, accesses a register and activates the third control unit.

Abstract: In a system, a load balancer transmits, to a selected content origin node, a first content request based on a first request for first requested content received from a client node, the selected content origin node transmits, to the load balancer, a first response to the first content request, wherein the selected content origin node has the first requested content, and the load balancer transmits, to the client node, a first redirect message identifying the selected content origin node as having the first requested content without transmitting the first requested content to the client node. In some implementations, the selected content origin node transmits the first redirect message as the first response. In other implementations, the first response from the selected content origin node contains the first requested content, and the load balancer converts the first response into the first redirect message.

Abstract: The present disclosure generally relates to user interfaces for managing a local network using an electronic device, where the electronic device is connected to a router and a plurality of external devices, including a first set of one or more external devices and a second set of one or more external devices, on the local network. The user interfaces enable a user to apply the same network access policy to the first set of one or more external devices and the second set of one or more external devices or to apply different network access policies to the first set of one or more external devices and the second set of one or more external devices, respectively.

Abstract: A computing device including: more than two Universal Serial Bus (USB) ports configured to be connected respectively to more than two mobile devices simultaneously; at least one processor coupled to the USB ports; and a memory storing instructions configured to instruct the at least one processor to reprogram, through the more than two USB ports, the more than two mobile devices simultaneously.

Abstract: A device and method for communicating between networked devices that define a path having a plurality of device positions includes designating a source device for a communication stream wherein the source device has a first port to communicate in a first direction of the path and a second port to communicate in a second direction in the path with devices networked to the source device. A port is selected from one of the first port or the second port of the source device for defining a direction of the communication stream from the source device. A hop count is provided indicating a relative location of a destination device for the communication stream, the hop count being an integer number of network device positions from the source device to the destination device along the path from the selected port.

Abstract: A control node and/or a storage processing node maybe configured to modify a control path between a control node and storage processing node to include at least a portion of a data fabric and another processing node. Control communications may be sent over the data fabric by encapsulating control information that is configured in accordance with a first technology of the control fabric within communications configured in accordance with a second technology of the data fabric. Control switching logic may include logic to switch to a modified control path that includes at least a portion of a data fabric: in response to a failure of the control path; to load balance management activity; and/or improve QoS of management activity.

Abstract: The invention provides a technology for suppressing a delay in communication between a plurality of cores that perform parallel processing. In the invention, an ECU 302 of a vehicle control system 2 includes a plurality of cores 401 and a shared memory 405. When transmitting data in the inter-core communication, a transmission side core 401-1 writes a counter value updated according to the data and a writing order to a buffer unit 901 which is determined by a counter value managed for each communication system, which is stored in each of the plurality of buffer units 901 provided in the shared memory 405. When receiving data in the inter-core communication, a reception side core 401-2 reads data from the buffer unit 901 in which the latest data for each communication system is stored, which is determined by the counter value stored in each of the plurality of buffer units 901.

Abstract: A packet of data is obtained at one device of a network. A path from the one device to a next device of the network is determined, as well as at least one toll value for the path from the one device to the next device. Based on the at least one toll value for the path from the one device to the next device, a routing toll is adjusted. The routing toll is stored in a frame used in routing the packet of data in the network.

Abstract: Embodiments disclosed herein describe systems and methods to generate statuses of higher level integrated logical clusters from one or more output files generated by the clusterwares of a plurality of lower level physical clusters. The systems and methods provide an interactive dashboard graphical user interface (GUI) rendering the statuses of the higher level logical clusters. In response to a drill down selection by the system administrator, the systems and methods may render resource level statuses of the plurality of resources forming the higher level logical cluster. Therefore, by using a single dashboard, a system administrator can seamlessly transition between statuses at different level of abstractions for multiple resources distributed across multiple geographically diverse datacenters. Furthermore, the dashboard allows the system administrator to perform failover operations.

Abstract: A data center fabric includes a plurality of Field Programmable Gate Arrays (FPGAs), each FPGA interconnected by a plurality of links with other FPGAs, a plurality of servers in a data center, and physical network functions associated with the data center, wherein the plurality of FPGAs form a virtual fabric for switching between the FPGAs, the plurality of servers, and the physical network functions, and wherein the virtual fabric is arranged in a compound graph and a flat network with each FPGA being a node and a diameter of the compound graph and the flat network is indicative of a maximum number of hops for a packet through the virtual fabric.

Abstract: Various examples are disclosed for transitioning usage forecasting in a computing environment. Usage of computing resources of a computing environment are forecasted using a first forecasting data model and usage measurements obtained from the computing resources. A use of the first forecasting data model in forecasting the usage is transitioned to a second forecasting data model without incurring downtime in the computing environment. After the transition, the usage of the computing resources of the computing environment is forecasted using the second forecasting data model and the usage measurements obtained from the computing resources. The second forecasting data model exponentially decays the usage measurements based on a respective time period at which the usage measurements were obtained.

Abstract: A cluster system has nodes connected by a first network, including a master node, a first node performing an IO request with respect to a first volume of a storage device capable of including a plurality of volumes through a second network, and a second node taking over processing of the first node at the time of a failure of the first node. When a failure of the first network occurs in the first node, the master node transmits a connection release instruction through the second network. When the connection release instruction is received, the storage device releases the connection between the first node and the first volume, and updates connection state management information for managing such a connection state. The first node acquires the connection state to be managed through the second network, and executes post-processing relevant to the first volume that is associated with the connection release instruction.

Abstract: Systems for high-performance distributed computing. The systems include techniques for managing data and metadata across multiple nodes. A method embodiment commences by storing data at a node using a first storage mechanism that is local to the node. A first set of metadata is configured to identify a storage location for the stored data. The first set of metadata is stored using the same first storage mechanism that is local to the node. For accessing the first set of metadata, a second set of metadata is configured to identify a storage location for the first set of metadata. The second set of metadata is stored using a second storage mechanism that comprises a distributed metadata storage facility that stores metadata across multiple storage locations having at least one of the multiple storage locations that is not local to the node that stores data and metadata using the first storage mechanism.

Abstract: According to an embodiment, a node of a communication system includes a memory and one or more processors coupled to the memory. The one or more processors are configured to: determine, when receiving a packet including path information that indicates a parent-child relationship of transfer nodes included on a network topology from a source node to a destination node, whether at least one of its own node and a neighboring node is included in the path information as the transfer node; specify a distance between the own node and the destination node when at least one of the own node and the neighboring node is included in the path information; and transmit a confirmation response for the packet to the wireless multi-hop network after a waiting time corresponding to the distance, and transfer the packet when a confirmation response is not received from the neighboring node during the waiting time.

Abstract: Embodiments are directed to managing communication over one or more networks. An underlay network that couples a source gateway and a target gateway using underlay protocols may be provided such that the target gateway includes two or more port groups that may each be associated with a separate target node. An overlay network may be provided on the underlay network based on policy information such that the source gateway and the target gateway may each be assigned separate gateway identifiers (GIDs) that are associated with the overlay network. In response to the source gateway authorizing a source node to employ the overlay network to communicate one or more encrypted payloads to a target node, the one or more encrypted payloads may be provided to the target node based on the overlay network and the policy information.

Abstract: Systems and methods for reducing bandwidth loss in IPv6 packet switching networks. A network appliance is configured to sample IPv6 packets and mirror sampled packets to a working memory or memory structure, such as a queue. A transport layer payload is extracted from each sampled packet and a transport layer checksum validation operation is performed. Upon detecting an error, the network appliance updates a dropped packet rate or other metric.

Abstract: Methods, systems, computer-readable media, and apparatuses may provide password encryption for hybrid cloud services. A workspace cloud connector internally residing with an entity may intercept user credentials associated with an internal application being transmitted to an external cloud service. The workspace cloud connector may generate an encryption key and encrypt the user credentials via a reversible encryption methodology. The workspace cloud connector may encrypt the encryption key using an irreversible encryption methodology (e.g., use a hashing function to produce a first hash). The workspace cloud connector may transmit the encrypted user credentials and the first hash to a virtual delivery agent via a first path (e.g., via the external cloud service). In response, the workspace cloud connector may receive an address of the virtual delivery agent and, using the address, may send the encryption key to the virtual delivery agent via a second path different from the first path.

Abstract: A plurality of virtual internet protocol addresses for a first single network interface card of a node of a storage cluster are provided to a client. A separate connection is established between the client and the node for each of the plurality of virtual internet protocol addresses. The separate connections are utilized together in parallel to transfer data between the client and the node.

Abstract: Disclosed are various embodiments for a multi-tenant authentication framework. In one embodiment, a particular user class to which a client device belongs is determined based at least in part on location-identifying information of the client device, and the client device is authenticated for access to a network resource using a particular authentication service corresponding to the particular user class.

Abstract: Aspects of the subject disclosure may include, for example, a method of apportioning, by a processing system including a processor, a viewable area of a display screen into a main area and an application area; downloading, by the processing system, media content; displaying, by the processing system, the media content within the main area of the display screen; extracting, by the processing system, metadata from the media content; and providing, by the processing system, the metadata to an application, wherein the application: downloads information associated with the metadata provided in the media content, applies a bitrate limit to the downloading of the information to prevent interference with the downloading of the media content, generates display content based on the information, and sends the display content for displaying within the application area of the display screen concurrently with the media content being displayed in the main area of the display screen. Other embodiments are disclosed.

Abstract: A system includes a first memory device including a non-volatile memory device, a second memory device and a processing device, operatively coupled with the first memory device and the second memory device, to perform operations including configuring a system in accordance with a configuration designating an interface standard for exposing a storage element implemented on the first memory device to a first protocol of the interface standard and a persistent memory region (PMR) implemented on the second memory device to a second protocol of the interface standard, and performing at least one system operation based on the configuration.

Abstract: A packet transmission method, device, and system for network technologies are disclosed. A first network device receives, by using a first VPLS instance a packet to be sent to a user-side device connected to the second network device. The first network device forwards, based on an association relationship between the first VPLS instance and the first VPWS instance, the packet to a second VPWS instance in the second network device by using the first VPWS instance. A VPLS instance is associated with a VPWS instance in the first network device. A packet that is received by using the VPLS instance and that is to be sent to a user-side device can be forwarded by using the associated VPWS instance, so that pressure to learn a MAC address for packet transmission is reduced, and forwarding performance of the system is ensured.

Abstract: Recovering or restarting an execution instance. In response to detecting that a particular execution instance, in which a cable modem termination system (CMTS) software application, an optical line terminal (OLT) software application, and/or broadband network gateway (BNG) software application has failed, restarting the execution instance without adding any downstream service flow classifiers to the instance or configuring any entries of an access control list for the instance. After restarting the execution instance, over time adjusting the configuration of the instance to add one or more downstream service flow classifiers or access control list entries such that the instance can provide additional services, beyond a default service flow, to cable modems or optical network units. Support for voice calls may be initially added to the execution instance upon startup.

Abstract: Systems and methods are disclosed for secure transmission of high-priority computer server event notifications. One method comprises obtaining a new computer server event to report; generating a first notification message pertaining to the computer server event; generating a second notification message pertaining to the computer server event and to the delivery of the first notification message; storing the first notification message; storing the second notification message; and transmitting the first notification message to a partner over a computer network.

Abstract: There is disclosed in one example a method of a work node synchronously load balancing to a multi-node service having an expected maximum of n work nodes, including: provisioning a flow table having m bucket groups, m?1, the bucket groups including n slots each; enumerating a static integer self-identification id0; initializing the flow table with id0 in each slot; performing a discovery iteration, including: discovering a peer device; enumerating a static integer identification idx for the peer device; assigning idx to each slot corresponding to a home position for the peer device; and load balancing slots not assigned to a home position according to a deterministic algorithm; and discovering additional nodes and performing discovery iteration for the additional nodes.

Abstract: A method for processing routes by a network device connected to a network includes: generating a programmable route based on a route programming request associated with a route between the network device and a request origin device; storing the programmable route in a temporary route storage in the network device; and upon receiving a data packet associated with the programmable route, permitting installation of the programmable route in a network device hardware of the network device.

Abstract: A respective VPN routing table for each of a plurality of VPNs can be stored on a client device. The client device can access a first VPN routing table and, using the first VPN routing table, establish a first VPN tunnel to a first VPN. The first VPN can be a first subnetwork assigned a particular network prefix. While the first VPN tunnel is currently active, the client device can access a second VPN routing table and, using the second VPN routing table, establish a second VPN tunnel to the second VPN. The second VPN can be a second subnetwork assigned the same particular network prefix as the first subnetwork. While the first VPN tunnel and the second VPN tunnel are simultaneously active, the client device can communicate data to remote devices in the first VPN and the second VPN using the particular network prefix for both.

Abstract: A voice processing system includes a voice receiver that receives voice spoken by users, a voice recognition unit that recognizes the voice received by the voice receiver, a voice determination unit that determines a state of transmission and reception of the voice between a first base and a second base based on a recognition result of the first voice received from the first base and a recognition result of the second voice received from the second base, and an information presenting unit that presents specific information for resolving an abnormal state of transmission and reception when it is determined by the voice determination unit that the state of transmission and reception is abnormal.

Abstract: A base station identifies received backhaul traffic including IP packets based on whether or not the reception was via a secure tunnel, e.g., an IPsec tunnel. Recovered data, e.g., an IP packet from an IPsec tunnel, is associated with an IPsec identifier having a value indicating that the packet came from an IPsec tunnel. Data, e.g., recovered IP packets, associated with an identifier indicating receipt via an IPsec tunnel are stored in a first transmission buffer, e.g., a high priority transmission buffer, while other recovered IP packets which were not received via an IPsec tunnel are stored in a second transmission buffer corresponding to a lower, e.g., normal, transmission priority. A downlink transmission scheduler, e.g. an MAC or frame scheduler, schedules transmission of frames includes IP packet data from both buffers, with data in the first buffer being given higher priority to reduce latency with regard to the IPsec traffic.