Abstract: The invention is that of systems and methods for controllerless and distributed network connections to servers on a network by remote clients seeking their services. The invention comprises a central database where servers within a server group identified by a group name may post unique identifiers (UIDs) for retrieval and reposting by group clients configured with the group name, which may query the central database for server connection information such as uptime, downtime, and congestion in order to select a server for a preferential connection based on an overall posture as determined by the group client. In some embodiments, one server of the group is a “dummy server” that may aggregate and selectively transmit server information from other servers in the group, or other devices, and post it to the central database. The methods described herein eliminate a separate controller and thereby a single point of failure (SPOF).

Abstract: A proxy server receives a first request from a first user to access a resource hosted by a cloud-based server. The proxy server inserts a first tenant control header into the first request specifying a tenant identifier. The tenant identifier indicates a tenant permitted to access the resource. The proxy server then transmits the first request with the inserted first tenant control header to the cloud-based server. In response to receiving a first response indicating a rejection of the first request with the inserted first tenant control header, the proxy server transmits the first request again to the cloud-based server but without the first tenant control header. The proxy server then logs the first request as an access request using a non-permitted tenant identifier.

Abstract: The invention is that of systems and methods for controllerless and distributed network connections to servers on a network by remote clients seeking their services. The invention comprises a central database where servers within a server group identified by a group name may post unique identifiers (UIDs) for retrieval by group clients configured with the group name, which may query the central database for server connection information such as uptime, downtime, and congestion in order to select a server for a preferential connection based on an overall availability profile as determined by the group client. In some embodiments, one server of the group is a “dummy server” that may aggregate and selectively transmit server information from other servers in the group, or other devices, and posts it to the central database for client access. The methods described herein eliminate a separate controller and thereby a single point of failure (SPOF).

Abstract: A processor chip includes a logic circuit. The logic circuit is configured to be coupled to an electronic device. A configuration of the logic circuit corresponds to a plurality of candidate configurations. The configuration of the logic circuit is switched among the candidate configurations, and the electronic device associates with the processor chip to implement a function corresponding to the configuration of the logic circuit. When the configuration of the logic circuit is a first configuration and the electronic device executes a first driver program, the function is a first network-connection function. When the configuration of the logic circuit is a second configuration and the electronic device executes a second driver program, the function is a second network-connection function different from the first network-connection function.

Abstract: Systems and methods provide a first group of computation modules configured to provide back-end compute resources for a first type of computation module by back-end compute resources. Systems and methods provide a second group of computation modules that are configured to provide back-end compute resources for a second type of computation module wherein the first and second type of computation modules are of different types. In some examples, methods and systems identify the type of computation module needed by each of a plurality of queries associated with different types of client applications based on computation module type data associated with each query and route each of the plurality of queries to an appropriate computation module within the first or second computation modules based on the computation module type data.

Abstract: A data storage method and apparatus, and a storage system are provided. The method is applied to a storage system. The storage system includes at least one first memory and a second memory. The at least one first memory includes a plurality of storage areas. Garbage collection is performed based on each of the plurality of storage areas. In the method, a time length between the earliest expiration time and the latest expiration time in expiration time of valid data stored in a target storage area is limited to be less than or equal to a preset time length, so that the expiration time of the valid data stored in the target storage area is comparatively centralized.

Abstract: The present application discloses a network communication method and apparatus. The method includes: receiving and parsing a packet so as to acquire a destination host Internet Protocol address; performing a single query on a route-neighbor table according to the destination host Internet Protocol address so as to acquire a physical address and a route type of a next hop route; and sending the packet according to the physical address and the route type. The present application simplifies an entire three-layer encapsulation processing process, and reduces occupancy of resources.

Abstract: A routing structure is defined for provider edge (PE) routers that will create the ability to recompute best paths based on application criteria. The routing structure may include the use of a network controller which is connected with the internet to receive requests from applications to trigger path re-computation. The controller will peer with PEs to send re-computation information used by the PE to construct an application-aware BGP table and forwarding instance. The PE also defines a new BGP and packet filter to replicate specific BGP paths into the application-aware table. The application-aware BGP and forwarding instance is unique to the requesting application. Thus, each request with a different source/destination combination obtains a discrete table providing separation. When a packet enters the PE from customer edge (CE) or core interface the packet traverses a packet filter that when matched against source/destination is redirected to the appropriate application-aware forwarding table.

Abstract: In a method for measurement of a round-trip performance in a packet-switched communication network, a measurement device cooperating with the communication network generates a flow of test packets formatted according to the network protocol supported by the network and comprising the address of the measurement device as destination address. The test packets are then transmitted within a tunnel set up in the network and the measurement device generates one or more transmission parameters. At the end of the tunnel, the test packets are extracted therefrom and sent back to the measurement device by the forwarding function of the network protocol supported by the network. Upon receipt of the test packets, it generates one or more reception parameters, which are then combined with the transmission parameters to provide the round-trip performance measurement.

Abstract: Techniques are described for generating transaction data for a transaction, the transaction data generated with varying fidelity levels based on various constraints. In response to a transaction request from a client, a contract engine may perform service call(s) that instruct network service(s) to generate transaction data. The service call(s) may include constraint(s) on the generation of the transaction data, such as a time limit or a requested fidelity. The network service(s) may generate the transaction data at a particular fidelity based on the time limit, requested fidelity, or other criteria such as current load on the network service(s). The transaction data may be communicated to the contract engine with a fidelity indicator. Lower fidelity transaction data may be sent to the client to enable a low latency user experience. The lower fidelity transaction data may subsequently be replaced with higher fidelity transaction data generated with higher latency.

Abstract: A 5G or pre-5G communication system is provided to support higher data transmission rates after 4G communication systems such as LTE. To support communication of a terminal that dually accesses a first radio access technology (RAT) communication system and a second RAT communication system, a session generation request message for transmitting traffic is received from a terminal. A target communication system that is to generate a data path with respect to the traffic from the first RAT communication system and the second RAT communication system is determined, the data path for the target communication system is configured, and information about the configured data path is transmitted to the terminal.

Abstract: Disclosed herein are systems, methods, and apparatuses where a controller can automatically manage a physical infrastructure of a computer system based on a plurality of system rules, a system state for the computer system, and a plurality of templates. Techniques for automatically adding resources such as computer, storage, and/or networking resources to the computer system are described. Also described are techniques for automatically deploying applications and services on such resources. These techniques provide a scalable computer system that can serve as a turnkey scalable private cloud.

Abstract: According to certain embodiments, a router comprises one or more processors and one or more computer-readable non-transitory storage media. The one or more computer-readable non-transitory storage media comprise instructions that, when executed by the one or more processors, cause one or more components of the router to perform operations comprising determining an occurrence of one or more network events associated with a multicast service, generating route exchange information associated with the multicast service locally by the router based on the one or more network events, and using the route exchange information locally to configure the router.

Abstract: A method, apparatus and product for automatic hypothesis generation using geospatial data. A labeled dataset and an auxiliary dataset are obtained. Instances comprise geospatial attributes. Hypothesis generation is performed automatically based on the labeled dataset. For each labeled instance, one or more auxiliary instances are selected from the auxiliary dataset based on a geospatial relation between the geospatial attribute of the labeled instance and the geospatial attribute of the auxiliary instance. Based on the selected auxiliary instances, one or more new attributes are computed and added to the labeled instance.

Abstract: Methods and apparatuses are provided for access control barring. The method is applied to a terminal in a connected state or an inactive state. The method includes: starting a designated timer for access control barring; receiving a Radio Resource Control (RRC) connection release message sent by a base station when the designated timer has not reached a designated stop time; and determining based on the RRC connection release message that an Access Stratum (AS) of the terminal remains in a congested state.

Abstract: This application provides a peer relationship management method and apparatus, a device, and a storage medium, and belongs to the field of network technologies. In this application, when a peer relationship between a first routing device and a second routing device is interrupted, routing entries received from the second routing device are not deleted. Services may be still processed, within a time range from a time at which the peer relationship is interrupted to a time at which the peer relationship is reestablished, by using the routing entries received from the second routing device.

Abstract: Techniques for using traceroute with tunnels and cloud-based systems for determining measures of network performance are presented. Systems and methods provide adaptive probing of a service path in a network, wherein the service path includes a plurality of legs. The systems and methods include, for one or more legs of the plurality of legs, sending a number of probes using one of a plurality of protocols; responsive to receiving a response from the number of probes, determining the one of the plurality of protocols is successful and storing this protocol the one or more legs; and, responsive to failure to receive the response, sending a number of probes using another one of the plurality of protocols and continuing until a successful protocol is determined or all of the plurality of protocols fail.

Abstract: Candidates for selection in a weighted arbitration system are assigned priority weights and random weights. The winning candidate is determined using a tree of selectors such as a comparators. At each stage of the tree, the candidate having the greatest priority weight is selected to pass to the next stage. If multiple candidates are tied for the greatest priority weight, the candidate having the greatest random weight is selected to pass to the next stage.

Abstract: Techniques and architecture are described that utilize switchport protected flags to provide switchport protected functionality across network devices, e.g., switches, routers, etc., in fabric networks. For example, a first port of a first network device of a fabric network receives a packet from a first host destined for a second host. The second host is onboarded to the fabric network via a second port of a second network device. It is determined (i) if a first protected flag associated with the first port of the first network device is set as true and (ii) if a second protected flag associated with the second host is set as true. Based at least in part on (i) the first protected flag associated with the first port being set as true and (ii) the second protected flag being set as true, the first network device drops the packet.

Abstract: Techniques for mitigating BGP blackholes and hijackings are disclosed herein. The techniques include methods for determining, by a victim autonomous system (AS), that a first AS is associated with a first BGP route that includes the victim AS as the destination or as an AS along the first BGP route to the destination and sending a message to a second AS directing the second AS to refrain from using the first AS to propagate data to the victim AS. The message can include a set of one or more AS numbers to avoid in refraining from using to propagate data to the victim AS, a timestamp, an expiration interval, a signature of the victim AS, and an identifier identifying a certificate to be used to verify the signature. Systems and computer-readable media are also provided.

Abstract: A method includes accessing a first intelligence feed including a plurality of cybersecurity incidents. A second intelligence feed is generated including a plurality of technical indicators defined on one or more virtual private network internet point of presence (“VPN internet PoP”) that connects a plurality of VPN tunnels to an internet. The first and second intelligence feeds are compared, a particular incident is determined, and a time frame of the particular incident is determined. Use of a particular VPN internet PoP by a plurality of sources including a plurality of clients is monitored to determine a plurality of time-based behaviors. The plurality of time-based behaviors are compared to the particular incident and to the time frame to determine a match. A particular source is blocked at the particular VPN internet PoP based on the determination of the match.

Abstract: A method performed by a network controller for providing network reliability. The method includes employing an Interior Gateway Protocol (IGP) proxy configured to communicate controller information about the network controller to the one or more network elements using IGP (Link-State Advertisement (LSA) or Link State Protocol Data Unit (LSP)) with a Controllers TLV. The method uses the controller information for proper election of a primary controller in the event of a network failure.

Abstract: A computing device including a memory and a processor is provided. The processor is configured to receive, from a device configured to communicate data generated by at least one sensor disposed in a location being monitored, a request to establish a bi-directional connection between the device and a computing environment; identify a structure of data storing a uniform resource locator (URL) and a set of identifiers, the set of identifiers being representative of a group of connections with the computing environment; and respond, to the device, with a response specifying the URL, thereby enabling the device to establish the bi-directional connection.

Abstract: In various examples, an extensible network traffic engineering platform monitors network traffic and application performance to dynamically update network ingress and egress communication paths for increasing performance of the application—such as a cloud gaming application, a cloud virtual reality (VR) application, and/or another high performance application types. Pluggable, distributed, application-centric network monitors, policy engines, and network configurators are implemented at the edge to detect degraded network and application performance and dynamically update network routing to account for the same.

Abstract: Echo or traceroute functionality is supported in a path spanning multiple autonomous systems (ASes) having segment routing (SR) enabled, the path including an ingress node and an egress node, by: (a) obtaining a return label stack to reach the ingress node from either (A) the egress node, or (B) a transit node in the path; (b) obtaining a label stack to reach, from the ingress node, either (A) the egress node, or (B) the transit node; (c) generating a request message including the return label stack; and (d) sending the request message towards either (A) the egress node, or (B) the transit node using the label stack.

Abstract: In one embodiment, a service chain data packet is instrumented as it is communicated among network nodes in a network providing service-level and/or networking operations visibility. The service chain data packet includes a particular header identifying a service group defining one or more service functions, and is a data packet and not a probe packet. A network node adds networking and/or service-layer operations data to the particular service chain data packet, such as, but not limited to, in the particular header. Such networking operations data includes a performance metric or attribute related to the transport of the particular service chain packet in the network. Such service-layer operations data includes a performance metric or attribute related to the service-level processing of the particular service chain data packet in the network.

Abstract: Systems and methods for sloppy routing are provided. A client transmits a DNS query corresponding to a requested resource to a content delivery network (CDN) service provider. In some embodiments, the CDN service provider processes the DNS query to determine whether a threshold content delivery bandwidth has been exceeded by data links at cache servers. In other embodiments, additionally or alternatively, the CDN service provider determines whether a content provider has exceeded a threshold network usage that indicates a price at which the CDN service provider to provide content on behalf of the content provider. Using both or either of these thresholds, the CDN service provider can further process the DNS query by providing an alternative resource identifier or a cache IP address, both associated with an alternative POP. In some embodiments, the CDN service provider determines a routing mode for the response to the DNS query.

Abstract: Aspects of the present application relate to mobile communication devices having active device components and passive device components and, more particularly, to operation of the passive device components to form a backscatter signal from a received forward signal. Forming the backscatter signal may include generating the backscatter signal from the received forward signal without decoding a plurality of sub-signals in the received forward signal, the backscatter signal being a time-domain function of a contiguous subset of the time-domain plurality of sub-signals in the received forward signal. Upon receipt of the backscatter signal, a reception point may obtain information about the mobile communication device that contains the passive device components. Such information may relate to timing, position and identity.

Abstract: A migration manager (MM) identifies a source group of compute instances (at a first partition of a provider network) to be migrated to an isolated virtual network (IVN) implemented in a second partition. The MM triggers the establishment within the IVN of an equivalence group of instances corresponding to the source group instances. Connectivity between the equivalence group and a first load balancer which was being used for the source group in the first partition is maintained by modifying one or more configuration settings. After a replacement load balancer is established within the IVN, the first load balancer is decommissioned.

Abstract: A system and method that provides inter-application relevance management for resources being brokered by an application virtualization platform. A described platform includes a memory configured to store a set of relevance rules for applications hosted by the application virtualization platform, wherein each relevance rule specifies a relevance setting between a first application and a second application. Also included is a processor coupled to the memory and configured to broker resources for the application virtualization platform to avoid conflict between the applications.

Abstract: Packets are routed in a data network comprising a wireless mesh network and a controller providing IPv6 management traffic to nodes of the wireless network. A monitor function and a route table manager are used to generate a route table relating IPv6 addresses to each of the nodes via a respective one of a plurality of POP nodes, by accessing a pre-configured topology file, determining the reachability of each of the plurality of POP nodes from the controller by periodically sending test messages from the monitor function to each POP and detecting acknowledgement of the test messages. If a POP node is not reachable, the route table is updated to relate the IPv6 subnet of the POP that is not reachable to the address of a POP node that is reachable. A Layer 2 network is used to direct the IPv6 management traffic according to the amended route table.

Abstract: Systems and methods for remotely resetting networked devices is disclosed. The system can comprise a primary network connection and a secondary network connection to provide communications redundancy. The system can also include physical connections between networked devices to enable devices to be reset regardless of the type of error. The method can include monitoring one or more parameters of a device to determine what type of error is occurring and what action to take. The system can enable a first computer (or other electronic device) to restart applications, adapters, and services on a second computer (or other electronic device). The system can also enable the first computer to reset or restart the second computer. The system can enable networked computers to monitor and restore operation to other computers on the same network without human intervention.

Abstract: In one embodiment, load balancing criteria and an indication of a plurality of network nodes is received. A plurality of forwarding entries are created based on the load balancing criteria and the indication of the plurality of nodes. A content addressable memory of a network element is programmed with the plurality of forwarding entries. The network element selectively load balances network traffic by applying the plurality of forwarding entries to the network traffic, wherein network traffic meeting the load balancing criteria is load balanced among the plurality of network nodes.

Abstract: A content delivery network (CDN) includes a plurality of CDN components including at least one CDN rendezvous mechanism and at least one control core. The CDN components are controlled by control core data from the at least one control core. Some CDN components obtain CDN resources including control core data from at least some other CDN components. The CDN components use the CDN rendezvous mechanism to select one or more CDN components from which to obtain CDN resources.

Abstract: Systems and methods are disclosed for dynamic routing of electronic transactions while maintaining token compatibility. One method comprises receiving a request message from a merchant system and determining a final destination payment processor based on a routing directive. Upon determining the final destination payment processor, the request message may be updated by updating a message destination to the final destination payment processor and replacing an initial token with a token that is compatible with the final destination payment processor. The updated request message may then be transmitted to a downstream entity for further processing.

Abstract: In a system, a load balancer transmits, to a selected content origin node, a first content request based on a first request for first requested content received from a client node, the selected content origin node transmits, to the load balancer, a first response to the first content request, wherein the selected content origin node has the first requested content, and the load balancer transmits, to the client node, a first redirect message identifying the selected content origin node as having the first requested content without transmitting the first requested content to the client node. In some implementations, the selected content origin node transmits the first redirect message as the first response. In other implementations, the first response from the selected content origin node contains the first requested content, and the load balancer converts the first response into the first redirect message.

Abstract: There is provided a technique to enable a specific IC chip to reliably activate the other IC chips. An information processing apparatus has first to third IC chips and, after loading an activation program for the third IC chip from a first storage unit connected to the first IC chip into a third storage unit connected to the third IC chip, accesses a register and activates the third control unit.

Abstract: The present disclosure generally relates to user interfaces for managing a local network using an electronic device, where the electronic device is connected to a router and a plurality of external devices, including a first set of one or more external devices and a second set of one or more external devices, on the local network. The user interfaces enable a user to apply the same network access policy to the first set of one or more external devices and the second set of one or more external devices or to apply different network access policies to the first set of one or more external devices and the second set of one or more external devices, respectively.

Abstract: A computing device including: more than two Universal Serial Bus (USB) ports configured to be connected respectively to more than two mobile devices simultaneously; at least one processor coupled to the USB ports; and a memory storing instructions configured to instruct the at least one processor to reprogram, through the more than two USB ports, the more than two mobile devices simultaneously.

Abstract: A device and method for communicating between networked devices that define a path having a plurality of device positions includes designating a source device for a communication stream wherein the source device has a first port to communicate in a first direction of the path and a second port to communicate in a second direction in the path with devices networked to the source device. A port is selected from one of the first port or the second port of the source device for defining a direction of the communication stream from the source device. A hop count is provided indicating a relative location of a destination device for the communication stream, the hop count being an integer number of network device positions from the source device to the destination device along the path from the selected port.

Abstract: A control node and/or a storage processing node maybe configured to modify a control path between a control node and storage processing node to include at least a portion of a data fabric and another processing node. Control communications may be sent over the data fabric by encapsulating control information that is configured in accordance with a first technology of the control fabric within communications configured in accordance with a second technology of the data fabric. Control switching logic may include logic to switch to a modified control path that includes at least a portion of a data fabric: in response to a failure of the control path; to load balance management activity; and/or improve QoS of management activity.

Abstract: The invention provides a technology for suppressing a delay in communication between a plurality of cores that perform parallel processing. In the invention, an ECU 302 of a vehicle control system 2 includes a plurality of cores 401 and a shared memory 405. When transmitting data in the inter-core communication, a transmission side core 401-1 writes a counter value updated according to the data and a writing order to a buffer unit 901 which is determined by a counter value managed for each communication system, which is stored in each of the plurality of buffer units 901 provided in the shared memory 405. When receiving data in the inter-core communication, a reception side core 401-2 reads data from the buffer unit 901 in which the latest data for each communication system is stored, which is determined by the counter value stored in each of the plurality of buffer units 901.

Abstract: A packet of data is obtained at one device of a network. A path from the one device to a next device of the network is determined, as well as at least one toll value for the path from the one device to the next device. Based on the at least one toll value for the path from the one device to the next device, a routing toll is adjusted. The routing toll is stored in a frame used in routing the packet of data in the network.

Abstract: Embodiments disclosed herein describe systems and methods to generate statuses of higher level integrated logical clusters from one or more output files generated by the clusterwares of a plurality of lower level physical clusters. The systems and methods provide an interactive dashboard graphical user interface (GUI) rendering the statuses of the higher level logical clusters. In response to a drill down selection by the system administrator, the systems and methods may render resource level statuses of the plurality of resources forming the higher level logical cluster. Therefore, by using a single dashboard, a system administrator can seamlessly transition between statuses at different level of abstractions for multiple resources distributed across multiple geographically diverse datacenters. Furthermore, the dashboard allows the system administrator to perform failover operations.

Abstract: Various examples are disclosed for transitioning usage forecasting in a computing environment. Usage of computing resources of a computing environment are forecasted using a first forecasting data model and usage measurements obtained from the computing resources. A use of the first forecasting data model in forecasting the usage is transitioned to a second forecasting data model without incurring downtime in the computing environment. After the transition, the usage of the computing resources of the computing environment is forecasted using the second forecasting data model and the usage measurements obtained from the computing resources. The second forecasting data model exponentially decays the usage measurements based on a respective time period at which the usage measurements were obtained.

Abstract: A data center fabric includes a plurality of Field Programmable Gate Arrays (FPGAs), each FPGA interconnected by a plurality of links with other FPGAs, a plurality of servers in a data center, and physical network functions associated with the data center, wherein the plurality of FPGAs form a virtual fabric for switching between the FPGAs, the plurality of servers, and the physical network functions, and wherein the virtual fabric is arranged in a compound graph and a flat network with each FPGA being a node and a diameter of the compound graph and the flat network is indicative of a maximum number of hops for a packet through the virtual fabric.

Abstract: Systems for high-performance distributed computing. The systems include techniques for managing data and metadata across multiple nodes. A method embodiment commences by storing data at a node using a first storage mechanism that is local to the node. A first set of metadata is configured to identify a storage location for the stored data. The first set of metadata is stored using the same first storage mechanism that is local to the node. For accessing the first set of metadata, a second set of metadata is configured to identify a storage location for the first set of metadata. The second set of metadata is stored using a second storage mechanism that comprises a distributed metadata storage facility that stores metadata across multiple storage locations having at least one of the multiple storage locations that is not local to the node that stores data and metadata using the first storage mechanism.

Abstract: According to an embodiment, a node of a communication system includes a memory and one or more processors coupled to the memory. The one or more processors are configured to: determine, when receiving a packet including path information that indicates a parent-child relationship of transfer nodes included on a network topology from a source node to a destination node, whether at least one of its own node and a neighboring node is included in the path information as the transfer node; specify a distance between the own node and the destination node when at least one of the own node and the neighboring node is included in the path information; and transmit a confirmation response for the packet to the wireless multi-hop network after a waiting time corresponding to the distance, and transfer the packet when a confirmation response is not received from the neighboring node during the waiting time.

Abstract: A cluster system has nodes connected by a first network, including a master node, a first node performing an IO request with respect to a first volume of a storage device capable of including a plurality of volumes through a second network, and a second node taking over processing of the first node at the time of a failure of the first node. When a failure of the first network occurs in the first node, the master node transmits a connection release instruction through the second network. When the connection release instruction is received, the storage device releases the connection between the first node and the first volume, and updates connection state management information for managing such a connection state. The first node acquires the connection state to be managed through the second network, and executes post-processing relevant to the first volume that is associated with the connection release instruction.

Abstract: Embodiments are directed to managing communication over one or more networks. An underlay network that couples a source gateway and a target gateway using underlay protocols may be provided such that the target gateway includes two or more port groups that may each be associated with a separate target node. An overlay network may be provided on the underlay network based on policy information such that the source gateway and the target gateway may each be assigned separate gateway identifiers (GIDs) that are associated with the overlay network. In response to the source gateway authorizing a source node to employ the overlay network to communicate one or more encrypted payloads to a target node, the one or more encrypted payloads may be provided to the target node based on the overlay network and the policy information.