Abstract: A method for measuring reputation of paths visiting nodes in a communication network and including, for each node visited by a current path of the network: a) assigning a security score for the node; b) estimating a first trust index based on: a cumulative on the current path of the successive scores of the nodes visited by the current path; and a number of nodes visited by the current path, the estimation of the first trust index providing a reputation measurement for the current path.

Abstract: Systems, methods, and machine-readable media are provided to facilitate adaptive security and cooperative multi-system operations in conformance with dynamic protocols. An implementation of the protocol that includes parameter constraints mapped to the defined event may be generated, defining an operation flow in response to detection of a defined event at a remote system and transforming the protocol into an executable process that applies to at least one remote system. References to metadata specifications may be transmitted that include specifications of interface elements and cause interface configuring in accordance with the specifications. Upon determination that responses satisfy the parameter constraints, access to a resource may be controlled in accordance with the protocol, or, upon determination that the responses fail to satisfy the parameter constraints, an alert may be transmitted that is indicative of at least one of the references and/or additional references to second metadata specifications.

Abstract: Multi-Path approach to data migration between nodes in distributed data storage systems is rendered by creating multiple connections between application cores across interfaces on both an initiator node and a target node and load balancing whole messages and RDMA operations over the various pathways routed via the same or different network fabric types. The Multi-Path approach adapts to applications which are core-affine and those which are not. The balancing of whole messages/RDMA operations is performed by a send/receive API command specifying the target node for the whole message (and optionally a core number in the case of a core-affine target). The Multi-Path approach adapts dynamically to network errors by excluding faulty pathways, as needed, and shifting traffic to remaining healthy pathways with background recovery of pathways running periodically for self-healing. The Multi-Path also adapts dynamically to the load by diverting traffic from slow pathways and favoring pathways with normal load.

Abstract: In one example, a system can receive information about a data structure including a set of data entries. The system can generate a proxy data table including a set of columns. The system can use a data access layer to generate a mapping from the data entries to the columns. The system can receive an input to cause an operation to be performed on the data structure by performing the operation on the data structure. Generating a result can involve issuing read commands to the data access layer to perform the operation on the data structure such that the data access layer obtains the associated data entries and provides them as responses to the read commands by performing a translation between the data entries and the columns based on the mapping. The system can then output the result of the operation.

Abstract: Systems, methods and computer program products for controlling access to an organization's data in a multitenant environment are provided. An organization hierarchy is defined at a multitenant platform, the organization hierarchy comprising an organization and a plurality of sites owned by the organization, each of the plurality of sites representing a data isolation boundary for the organization's data. The sites are associated with subscriptions to applications of the multitenant platform. The organization can designate user partitions within the sites, each user partition designating a corresponding set of site users and a corresponding authentication service. The multitenant platform enables access to each subscription of a site only if a site user is authenticated by the authentication service designated in the user partition corresponding to the site user.

Abstract: One embodiment of the invention is directed to a method comprising, receiving an authentication request message for a transaction. The method further comprises determining that detailed device information is required to authenticate the transaction and generating a message including an identifier and a request for the detailed device information. The method further comprises retrieving the detailed device information from a remote server computer using the identifier and modifying the authentication request message to include the detailed device information. The method further comprises sending the modified authentication request message to an access control server computer. The method further comprises receiving an authentication response message from the access control server computer including a verification value for the transaction, where the verification value is generated based on a result of a risk analysis performed using the detailed device information.

Abstract: A computerized method for avoiding cross-region communications when utilizing a cloud overlay network is described. The method involves an operation of deploying one or more spoke gateways within at least a first region and a second region of a first virtual private cloud network. Thereafter, a region and a virtual private cloud network associated with a source and a destination of a communication are determined. Upon determining that the destination of the communication resides within a second virtual private cloud network, which is different than the first virtual private cloud network, the routing of the communication between the source and the destination is controlled by one or more spoke gateways solely residing within the region in which the source.

Abstract: Distributed network address discovery in non-uniform node networks can be performed. Regarding a client request for a service, network management component (NMC) can determine a network address space associated with a client based on a network identifier associated with the client or a node identifier. NMC can determine a group of candidate nodes (CN group) from a group of nodes based on network addresses associated with nodes of the node group and the network address space. NMC can determine a group of available candidate nodes (ACN group), from the CN group, available and able to process the request and perform the service based on operational statuses associated with the nodes of the CN group or services associated with those nodes. From the ACN group, NMC can determine a ranked list of network addresses associated with available nodes that can process the request based on defined service performance criteria.

Abstract: A method including receiving, by a first device in communication with a second device in a mesh network, a communication from the second device over a meshnet connection between the first device and the second device; configuring, by the first device, firewall settings associated with the first user device, the firewall settings indicating an access policy associated with processing communications received from the second device; and selectively transmitting, by the first device, the communication to an external device outside the mesh network based at least in part on the access policy. Various other aspects are contemplated.

Abstract: A virtual network comprising virtual machines executing at a computing environment is implemented. A software defined networking (SDN) appliance is configured to provide a connection to computing resources via a virtual network of a virtual computing environment. The SDN appliance includes a network interface card that are operable to interact with multiple field-programmable gate array (FPGA) devices are configured to be a hardware acceleration device for processing data traffic, and the FPGA device is configured to ingress a packet to a dataflow on one port and egress the packet from a different port associated with a different dataflow.

Abstract: Systems, methods, and computer-readable media for detecting and reporting anomalies in a network environment for providing network assurance. In some embodiments, a system can determine confidence scores for at least one value of parameters of a network environment defining network events occurring in the network environment. The confidences scores can indicate a frequency that the defined network events have a specific event state. The confidence scores can be monitored to detect an anomaly in the network environment. In response to detecting the anomaly in the network environment, the system can determine a relevant network state of the network environment. The relevant network state of the network environment and the anomaly in the network environment can be presented to a user.

Abstract: A system and method that provides for integrated data entry and workflow capabilities through one or more computing devices provided to personnel who work at various stations throughout a facility. Automated identification, record updates, workflow management, and alerts are facilitated through the computing devices, which include a headset that includes one or more input devices such as a microphone, a speaker, a camera, and/or a visual display device.

Abstract: Techniques are described for optimizing multipaths of a segment routing-enabled network. For example, a computing device is configured to: for each link in a network layer of a multi-layer network, compute a usage (metric) of the link by all paths of a first plurality of multipaths provisioned in the network layer to compute a total usage by the first plurality of multipaths, the first plurality of multipaths having been computed and placed to a model of the network layer in a first order; compute a second plurality of multipaths, wherein the second plurality of multipaths are computed and placed, to the model of the network layer, in a second, different order; and in response to determining that the total usage by the second plurality of multipaths is less than the total usage by the first plurality of multipaths, provision the second plurality of multipaths in the network layer.

Abstract: A microcontroller attachment for use with a microcontroller. The microcontroller attachment includes a first network interface controller (NIC) configured to communicate with a first dynamic host configuration protocol (DHCP) server to receive a first DHCP address and configured to establish a virtual private network (VPN) connection for a computing device to communicate with a remote server, the first NIC configured to be communicatively coupled to the computing device. The microcontroller attachment further includes a second NIC configured to receive a second DHCP address from a second DHCP server running on the microcontroller and send the second DHCP address to the computing device.

Abstract: In general, in one aspect, embodiments relate to a method for managing network devices in a network. The method includes making, by a network device, a determination that there are no established sessions between the network device and any of a plurality of network devices, wherein the network comprises the network device and the plurality of network devices, and in response to the determination, disabling, by the network device, an interface associated with a link between the network device and a second network device, wherein the second network device is external to the network.

Abstract: Systems, methods and computer program products for controlling access to an organization's data in a multitenant environment are provided. An organization hierarchy is defined at a multitenant platform, the organization hierarchy comprising an organization and a plurality of sites owned by the organization, each of the plurality of sites representing a data isolation boundary for the organization's data. The sites are associated with subscriptions to applications of the multitenant platform. The organization can designate user partitions within the sites, each user partition designating a corresponding set of site users and a corresponding authentication service. the multitenant platform enables access to each subscription of a site only if a site user is authenticated by the authentication service designated in the user partition corresponding to the site user.

Abstract: An ordering management system for a property includes: a location module configured to determine locations of mobile devices that are located within boundaries of the property; a selection module configured to, in response to receipt of an order from a first mobile device for delivery of one or more items to a location of the first mobile device within the boundaries of the property: select one vendor at the property to supply the item(s) of the order; determine a group of the mobile devices based on the location of the first mobile device; and select a second mobile device from the group; a device communication module configured to selectively transmit, to the second mobile device, the location of the selected one vendor and the location of the first mobile device; and a vendor communication module configured to selectively transmit the order to the selected one vendor.

Abstract: Provided are a method for obtaining a route selection policy, a method for performing a route selection policy rule, an apparatus, a device and a computer-readable storage medium therefor. The method includes: generating a route selection policy rule for a terminal; transmitting an application function response to an application function network element after generation of the route selection policy rule for the terminal; and providing, to the terminal, the route selection policy rule, wherein the route selection policy rule includes at least one of a valid time or a valid location, the valid time representing a time at which the route selection policy rule is applicable, and the valid location representing a geographical location at which the route selection policy rule is applicable.

Abstract: An information handling system may include at least one processor; and a memory; wherein the information handling system is configured to manage a network that includes a first virtual link trunking (VLT) node, a second VLT node, and a plurality of devices that are communicatively coupled to the first VLT node via a first set of links and to the second VLT node via a second set of links, wherein the managing includes: detecting that the first VLT node has malfunctioned; detecting that the first VLT node has recovered; and after the first VLT node has recovered, preventing traffic over the first set of links until determining that all information needed to forward the traffic has been synced between the first VLT node and the second VLT node.

Abstract: A method for optimized server picking in a virtual private network (VPN) environment, the method receiving, from a user device, a preference of the user device with respect to a VPN server for establishing a VPN connection; receiving user device information associated with the user device; determining, based at least in part on the preference and the user device information, a subset of a plurality of VPN servers; and determining, from the subset of a plurality of VPN servers, a VPN server as an optimal VPN server for establishing the VPN connection. Various other aspects are contemplated.

Abstract: A method of managing traffic flow through a multi-node network, the multi-node network interlinking a first mobile network and a second mobile network, the method including, when a subscriber user equipment entity that has as a home network the first mobile network and that is operating in the second mobile network attempts to establish a connection to a correspondent user equipment entity: communicating a connection request message from the second network to the first network over a first route via a set of nodes of the multi-node network; at least one of the nodes of the set: identifying a candidate alternative route between nodes of the multi-node network for at least part of a connection between the subscriber user equipment entity and the correspondent user equipment entity; and transmitting an indication of the candidate alternative route to a controller; and the controller selecting, in accordance with predetermined criteria, one of the first route and the at least one candidate alternative route and c

Abstract: Techniques for load balancing encrypted traffic based on security parameter index (SPI) values of packet headers and sets of 5-tuple values of the packet headers are described herein. Additionally, techniques for including quality of service (QoS)-type information in SPI value fields of packet headers are also described herein. The QoS-type information may indicate a particular traffic class according to which the packet is to be handled. Further, techniques for pre-configuring a backend host such that encrypted traffic may be migrated to the backend host from another backend host without causing temporary service disruptions are also described herein.

Abstract: A method for streaming and nonstreaming media transfer between devices includes receiving, by a server, a request message for a handoff of content from a first device displaying the content to a second device. The method further includes generating a handoff protocol for the handoff in response to the handoff request message. The method further includes transmitting, to one of the first device and the second device, a first notification message that includes a plurality of handoff parameters, based on the handoff protocol, that identifies an algorithm for the handoff of the content. The content is displayed with the second device after the handoff is complete.

Abstract: In some aspects, a channel hopping sequence for communication on a mesh network is generated. The hopping sequence may include multiple channels assigned to respective positions in the hopping sequence. In some cases, a first channel is assigned to a first position such that the first channel may transmit communications in a first transmission mode, such as a low-bandwidth transmission mode. In addition, an additional channels adjacent to the first channel is also assigned to the first position such that the combination of the first channel and additional channel may transmit communications in a second transmission mode, such as a high-bandwidth transmission mode. In some cases, a whitelist is determined based on the assigned channels. The whitelist may indicate channels that do not conflict with the assigned channels during transmission of a communication. In addition, channels may be assigned to the hopping sequence based on the whitelist.

Abstract: A system and method for multi-channel communications that includes receiving an initiating communication triggering establishment of a conversation associated with a set of participant endpoints, wherein the set of participant endpoints comprises of participant endpoints from at least two distinct communication channels; configuring a set of intermediary endpoints for communications between at least a subset of the set of participant endpoints on different communication channels; and for each communication of the conversation, transmitting communications to a receiving set of participant endpoints through the configured intermediary endpoint.

Abstract: Aspects of the disclosure relate to providing cloud computing resources from one or more cloud service providers for a client computing device through a computing platform. The client computing device may benefit from an economy of scale while being able to obtain different types of cloud services over a plurality of cloud providers. The client computing device may request an initial amount of cloud services and subsequently may request cloud services that utilize a requested amount of cloud resources. The requested amount of cloud resources may be apportioned among the plurality of cloud service providers, to provide the requested cloud service. The computing platform may also support a cloud abstraction layer interacting between client computing device and one or more cloud providers so that the client computing device can obtain cloud service in a transparent manner.

Abstract: Disclosed are various embodiments for providing split-tunneled network connectivity on a per-application basis. A request to make a universal datagram protocol (UDP) connection to a remote host specified by an internet protocol (IP) address in the request is received from a network driver. A hostname lookup table is queried to determine a hostname associated with the IP address for the remote host. A policy is identified based on the hostname associated with the IP address for the remote host. Then, the UDP connection is routed based on the policy.

Abstract: An information processing system includes a management apparatus that manages construction of a cluster system including a plurality of information processing apparatuses, the management apparatus being configured to acquire information relating to a configuration of the cluster system, and generate definition information that defines the configuration of the cluster system on the basis of the acquired information, and the plurality of information processing apparatuses each including a memory configured to store templates and association information, each of the templates being a model of a construction program to be used for construction of the cluster system, each of the templates including information that designates an extraction method of information from the definition information, and a processor configured to acquire the definition information, perform generation of the construction program in accordance with the definition information, the plurality of templates, and the association information, and

Abstract: Disclosed herein are a method and system for protecting shared information. The information protection method includes setting shared information to be protected and a sharing counterpart with whom the shared information is to be shared, segmenting the shared information into a plurality of pieces and storing the segmented pieces in the terminals of respective users included in the sharing counterpart, and receiving the segmented pieces from the terminals of the users and restoring the shared information if all of the users included in the sharing counterpart accept the use of the shared information.

Abstract: Techniques of operating a server computer running an application for clients operating in multiple network namespaces involve multiplexing communications streams from clients hosted in different network namespaces into a single communication stream to present the requests to an application as if they originated from a single network namespace. Along these lines, a server computer commences operation by initiating a network namespace driver for each network namespaces and a multiplexing driver to multiplex network namespace communication streams received from the network namespace drivers. When the multiplexing driver receives an application access request from a network namespace driver within a network namespace communication stream, the multiplexing driver provides the request and a network namespace identifier identifying the network namespace driver to a stream head within a multiplexed communication stream that includes requests from other network namespace drivers.

Abstract: In some examples, a method includes acquiring status information of at least one resource of a data center, estimating, based on the status information, whether load on a power supply will exceed a threshold value at a time subsequent a time of the estimating, and in response to estimating that load on the power supply will exceed the threshold value at the time subsequent the time of the estimating, transmitting a command signal to a server rack that is coupled to the power supply to configure equipment of the server rack to operate at a reduced power supply level that is reduced from a power supply level at the time of the estimating and that is based on a service level agreement associated with the server rack.

Abstract: In one embodiment, a method comprises identifying, by a path computation element, essential parent devices from a nonstoring destination oriented directed acyclic graph (DODAG) topology as dominating set members belonging to a dominating set; receiving, by the path computation element, an advertisement message specifying a first dominating set member having reachability to a second dominating set member, the reachability distinct from the nonstoring DODAG topology; and generating, by the path computation element based on the advertisement message, an optimized path for reaching a destination network device in the nonstoring DODAG topology via a selected sequence of dominating set members, the optimized path providing cut-through optimization across the nonstoring DODAG topology.

Abstract: A connection from first terminal CL11, Cl12 to m of relay servers RS1 to RS4 is performed and a connection from second terminal CL21, CL22 to n thereof is performed to relay a communication between the terminals with one of the relay servers connected in common to both of the terminals set to be an active relay server. If a failure occurs in the active relay server, the other relay server connected in common to the first terminal and the second terminal is searched to relay a communication between the terminals with the relay server set to be an alternative relay server at the first terminal and the second terminal. Consequently, a data communication between the terminals is performed through the relay server selected optionally, and furthermore, adjustment for determining the alternative relay server is performed on the terminal side if a failure occurs in an active relay server.

Abstract: The present solution provides a network communication method, peers and a network communication system, the method includes establishing communication with a communication room peer, and obtaining a capacity of the communication room peer, and an IP address and a port of communication room; establishing communication with a pilot peer, obtaining an IP address and a port of the pilot peer, sending a capacity of the communication room and a total number of user peers to the pilot peer, so that the pilot peer creates a required number of communication room peers based on the capacity of the communication room and the total number of user peers; and establishing communication with the user peers, sending the IP address and the port of the communication room peer to the user peers, so that the user peers join in the corresponding communication room peer to perform communication.

Abstract: Concepts and technologies are disclosed herein for providing and using a distributed forwarding service. A service request can be received at a computing device and can relate to a distributed forwarding service. The computing device can configure the distributed forwarding service by determining a number of nodes that are to provide the distributed forwarding service and configuring a shared control function to control the nodes. The computing device can trigger instantiation of the distributed forwarding service. Instantiation of the distributed forwarding service can include dedicating a shared incoming switch for the distributed forwarding service, dedicating a shared outgoing switch for the distributed forwarding service, instantiating the nodes, and instantiating the shared control function. The distributed forwarding service can include the shared incoming switch, the shared control function, the nodes, and the shared outgoing switch.

Abstract: A system and method for dynamically implementing a resource budget based at least in part on receiving information that prompts a determination of whether to adjust a maximum amount of resources available for utilization at least in part by data storage operations. As a result of the determination, the system and method produce, based at least in part on the information, a resource budget that reflects an adjustment to the maximum amount of resources available for utilization at least in part by the data storage operations, and implements the resource budget such that performance of the data storage operations is adjusted in accordance with the adjustment to the maximum amount of resources available for utilization.

Abstract: In the context of a client sub-system that requires the use of directory services on behalf of a tenant (such as an overlay tenant), learning an identity of a server node, that can provide such directory services by: (i) sending, by the client sub-system to a first server node, a first directory service request for directory service for a first tenant; (ii) receiving, by the client sub-system, a first acknowledgement from a second server node; and (iii) learning, by the client sub-system, that the second server node can provide directory service for the first tenant based upon the first acknowledgement.

Abstract: A system to collect and store in a special data structure arranged for rapid searching massive amounts of data. Performance metric data is one example. The performance metric data is recorded in time-series measurements, converted into unicode, and arranged into a special data structure having one directory for every day which stores all the metric data collected that day. The data structure at the server where analysis is done has a subdirectory for every resource type. Each subdirectory contains text files of performance metric data values measured for attributes in a group of attributes to which said text file is dedicated. Each attribute has its own section and the performance metric data values are recorded in time series as unicode hex numbers as a comma delimited list. Analysis of the performance metric data is done using regular expressions.

Abstract: Systems and methods are described for link aggregation and dynamic distribution of network traffic in a switching Clos network. In one embodiment of the present invention, a spine switch of a Clos network learns a first mapping of a Media Access Control (MAC) address of a client device to a first port of the spine switch and a second mapping of the MAC of the client device to a second port of the spine switch. The spine switch aggregates the first mapping and the second mapping as a link group for the MAC address of the client device in a MAC address table and distributes network traffic destined for the MAC address of the client device among members of the link group.

Abstract: In one example, resilient software application upgrades in a virtual datacenter is disclosed, in which network flow data is periodically obtained between a plurality of APPVMs and/or containers and deep packet inspection information from firewalls associated with the obtained network flow data in the virtual datacenter. Dependency relationships between the plurality of APPVMs and/or containers are then obtained based on the periodically obtained network flow data, the periodically obtained deep packet inspection information, and a network flow criteria. An upgrade that is about to happen to a software residing in one or more of the plurality of APPVMs and/or containers is determined. One or more of the plurality of APPVMs and/or containers affected by the software upgrade is determined based on the determined dependency relationships. Snapshots of the affected one or more of the plurality of APPVMs and/or containers are then obtained before initiating the software upgrade.

Abstract: System and method for propagating control results in an environment is disclosed. At least one control for compliance is designated for an entity. The entity complies with the at least one control and the result is measured to generate a control result, the control result stored in a data store. The generated control result is selectively designated for propagation in an enterprise management system. The enterprise management system is configured to propagate the designated generated control result to another entity, based on the selective designation. The designation of propagation of control result is based on a relationship between the entity and another entity.

Abstract: Aspects of the disclosure provide systems and methods for establishing one or more Distributed Gateways located close to a location of a UE to facilitate faster packet delivery to the UE during transitions. Such transitions can include the UE transitioning its state, for example from being idle to connected to the network, but also includes operations in which the serving AP(s) for the UE changes. The method includes establishing at least two virtual network function (VNF) components (VFNCs) of a distributed gateway (D-GW), each VNFC associated with an access point (AP). Each VNFC buffers packets directed to the wireless device. The method further includes selecting at least one AP for serving the wireless device, and forwarding the buffered packets from the VNFC associated with the selected APs to the selected APs for forwarding to the wireless device. Packets buffered at the VNFCs of non-selected APs are discarded.

Abstract: A user equipment (UE) communication method, a device, and a communications system are provided. A first UE sends a notification message to a cellular network access device, wherein the notification message indicates that the first UE requests to be a beacon device. The first UE receives, from the cellular network access device, a message indicating that the first UE is the beacon device. The first UE sends detection signal, wherein the detection signal is for a second UE to detect the detection signal.

Abstract: Methods and systems for performing load balancing and session persistence in IP (e.g., IPv6) networks are described herein. Some aspects relate to a destination options extension header that may be used to store load balancing session persistence option (LBSPO) data, including a client identifier and a server identifier for each of a client and a server. A load balancer for a server farm can perform session persistence and load balancing based on the LBSPO information. The server can include its own address in the LBSPO data when responding to an initial request from a client. The client device may then address subsequent packets to the server selected for that session, thereby bypassing the load balancer after the session is established, thereby freeing the load balancer to handle other requests. The LBSPO information may remain unchanged for the duration of the session.

Abstract: In one embodiment, a method includes determining a location of a system responsive to location information received from at least one of a location sensor and a wireless device of the system, associating the location with a key present in the system to generate an authenticated location of the system, and determining whether the authenticated location is within a geofence boundary indicated in a location portion of a launch control policy (LCP) that provides a geographic-specific policy. Other embodiments are described and claimed.

Abstract: A method of translating network attributes of packets in a multi-tenant environment, and an appliance and a program product implementing the method. The method comprises the following steps: receiving a packet from a multi-tenant environment; referring to the information of tenants, translating a selected network attribute of the packet into a unique identity representing the packet in the multi-tenant environment; and forwarding the translated packet including the unique identity.

Abstract: Communication between callers and call center agents may be optimized. A request message may be transmitted to an application services module to connect with an agent associated with the selection. A contact number of a proxy server may be received from the application service module. The contact number may be utilized to connect with the agent via the proxy server.

Abstract: A method of congestion control (500) in a communications network is provided. The method comprises detecting congestion (501, 502) for data packets being transmitted along a data path between a sender and a receiver of the communications network, wherein the receiver accesses the communications network via a Radio Access Network (RAN), interrupting transmission (503, 505, 506) of data packets to the receiver during an idle period, and transmitting an indication (504) pertaining to the interruption of transmission to the RAN. Thereby, the RAN may use opportunities for switching to a lower radio state directly, or shortly after, the onset of the idle period, rather than triggered by an inactivity timer. In that way, utilization of air interface resources is improved and power consumption on the UE side is reduced. Further, a corresponding computer program, a corresponding computer program product, and a network node for congestion control in a communications network, are provided.

Abstract: File selection techniques that can handle overlapping module contexts provide flexible and reversible backup, restore, migration, deployment and synchronization operations. Both remote (administrative) control and local (user) control of the file selection are provided. Application and configuration specific templates are provided to a user from the remote administrator for further customization by selecting or de-selecting configurations, applications and/or individual files or configuration entries. The templates may be controlled geographically by the IP address or identity associated with the user. A user's interaction with the customization is saved and the order of changes is maintained, so that when the templates are updated, the user's customizations can be re-applied. The administrator may override user settings based on rules, which may also be geographically determined. The file selection may also be altered based on media type and location, e.g., local backup vs. server backup.

Abstract: The present invention relates to a method of and apparatus for configuring a link in a label switching communication network. The method implemented in a network node comprises determining formation of a communication link between the network node and another network node and sending link formation information to a link manager. The method further comprises receiving link configuration information for the communication link from the link manager and configuring the communication link in response to the received link configuration information.