Abstract: Techniques are described for enabling a content delivery network (CDN) service of a cloud provider network to place content distributions across points of presence (PoPs) within a common geographic area in a manner that makes efficient use of the resources provided by the PoPs. A Domain Name System (DNS) service obtains log data reflecting requests to access distributions at various PoPs. The DNS service uses the log data to periodically generate characterization data for the distributions (e.g., in terms of requests per second, bytes transferred per second, and cache width usage). The DNS service uses the generated characterization data to assign particular distributions to particular PoPs of each PoP group such that the distributions are distributed across the PoPs according to the characterization data. The DNS service uses the assignments to generate routing data used by the DNS service to resolve DNS queries for particular distributions to particular PoPs of PoP groups.

Abstract: A server for sharing sensor measurements comprising one or more processors, which alone or in combination are configured to facilitate performing: receiving friend information from business to consumer (B2C) entity servers; receiving sensor information from a user device for gaining access to the sensor measurements; receiving a request for the sensor measurements from a friend device; determining whether the friend device is authorized to receive the sensor measurements based on the friend information; and sending, to the friend device, the sensor measurements in response to the friend device being authorized to receive the sensor measurements.

Abstract: A method is disclosed, comprising: in a general packet radio services (GPRS) tunneling protocol (GTP) message to update a GTP tunnel with a traffic flow template (TFT), sending a first opcode in a header of a TFT message; sending a second opcode in a packet filter field of the TFT message; interpreting the first opcode to initiate at least two of creation, deletion, and updating of traffic flow templates (TFTs); and interpreting the second opcode to identify an existing packet filter for adding, replacing, and deleting a packet filter.

Abstract: A recursive DNS nameserver system and related domain name resolution techniques are disclosed. The DNS nameservers utilize a local cache having previously retrieved domain name resolution to avoid recursive resolution processes and the attendant DNS requests. If a matching record is found with a valid (not expired) TTL field, the nameserver returns the cached domain name information to the client. If the TTL for the record in the cache has expired and the nameserver is unable to resolve the domain name information using DNS requests to authoritative servers, the recursive DNS nameserver returns to the cache and accesses the resource record having an expired TTL. The nameserver generates a DNS response to the client device that includes the domain name information from the cached resource record. In various embodiments, subscriber information is utilized to resolve the requested domain name information in accordance with user-defined preferences.

Abstract: A method of caching web content, performed by a network node such as a caching proxy, is disclosed. The method comprises receiving, from a client, a Domain Name System (DNS) resolution request comprising a hostname. The DNS resolution request is forwarded to a DNS server. A DNS resolution response comprising an Internet Protocol (IP) address corresponding to the hostname is received from the DNS server. The DNS resolution response is forwarded to the client. The method further comprises determining if the DNS resolution request relates to a web session, and if so, retrieving an index page from a web server associated with the received IP address, and caching the retrieved index page. Thereby, a subsequent initial Hyper Text Transfer Protocol (HTTP) request from the client for that index page can be accelerated.

Abstract: Webpages are optimizing through the use of experiments that compare the responses of viewers that are either presented with the original webpage or a variant thereof. One or more variants are first defined through the use of a browser-based editor application that initially examines the webpage for a snippet of code. The snippet can be added to the webpage, if missing, and the webpage returned to the editor application. Changes made to the webpage to define a variant are saved in variation code. When the webpage is later requested by multiple viewers, in each instance the viewer receives the webpage with the snippet, the snippet instructs the browser to download a file, and the instructions of the file determine whether the viewer will see the variant or the original webpage. Tracking viewer responses to the webpage and the variant allow a statistical basis for comparison to be developed.

Abstract: Access is controlled to managed resources in a stateless web server architecture including a stateless web server computing platform; a resource locator map portion of the stateless web server computing platform providing a unique resource locator code representing each managed resource in a stateless web server architecture, wherein the managed resource is assigned to a plurality of application program components; a set of servlet filters disposed in a portion of the stateless web server computing platform, each servlet filter associated with one of the application program components; a resource locator matcher portion of the stateless web server computing platform, responsive to a user request to a unique resource locator, matching a pattern in the user request to one or more of the application program components using a corresponding servlet filter; and a request dispatcher portion of the stateless web server computing platform sending the user request to the matched application program component, wherein

Abstract: The subject matter of this specification can be implemented in, among other things, a method that includes storing, in a collaboration platform, a first geographic location and a first time of a first authentication request for an account at the collaboration platform responsive to successful authentication of the first authentication request. The method includes receiving a second authentication request for the account at the collaboration platform. The method includes identifying a second geographic location and a second time of the second authentication request. The method includes providing access to the account responsive to a determination that a difference in time between the first time and the second time is large enough that a user of the account is able to travel a difference in distance between the first geographic location and the second geographic location within the difference in time.

Abstract: A set of elements, such as, for example, a path, a directory list, a playlist, and a listing of information associated with a file or a song, may be truncated so that a partial set may be generated and displayed. The truncation may be performed in an intelligent manner to produce a meaningful truncated portion. Such a partial set may be beneficial when the space allotted for display of the set is small to begin with or is reduced. In one implementation, a display size of a set is compared with a size of a display area. A data element is selected based on the comparison, and a display space size is determined for the selected data element. A truncated, yet meaningful, portion is determined for the selected data element, the portion fitting within the display space size.

Abstract: A first request, to access a web site associated with a domain name, is obtained at a gateway router interposed between a local area network and an internet service provider's infrastructure, from a host on the local area network. The gateway router has Domain Name Service (DNS) resolver capability. The first request is received while the gateway router has upstream connectivity to the internet service provider's infrastructure via IPv6 but not via IPv4. Further steps include sending, from the gateway router, the first request; obtaining, at the gateway router, an indication that an IPv4 address will imminently be required for the gateway router; and, responsive to obtaining the indication, sending, from the gateway router, into the internet service provider's infrastructure, a second request, for an IPv4 address for the gateway router.

Abstract: A system includes a server to assign a namespace to Internet of Things (IoT) devices, with the IoT devices being at different locations, and with each IoT device having a universal unique identifier (UUID) associated therewith. The server assigns at least one sub-namespace to each IoT device based on its location, and maps the UUID associated with each IoT device to both the namespace and the at least one sub-namespace assigned thereto. A device cooperates with the server to generate commands for controlling the IoT devices based on the namespaces and the at least one sub-namespaces mapped to the respective UUIDs.

Abstract: Techniques for DNS-based endpoint discovery involving provider substrate extension resources are described. A client seeking to access a resource may utilize a DNS resolver located within a provider substrate extension of a provider network. The DNS resolver may be dynamically configured by a coordinator service located within the provider network to resolve a domain to an endpoint that may provide the lowest latency of access for clients close to the provider substrate extension.

Abstract: According to certain aspects, an information management cell can include at least one secondary storage computing device configured to conduct primary data generated by at least one client computing device to a secondary storage device(s) as part of secondary copy operations, wherein the secondary storage computing device normally operates to conduct primary data to the secondary storage device(s) for storage as a secondary copy in a first secondary copy file format, at the direction of a main storage manager; and can include a failover storage manager configured to activate in response to loss of connectivity between the cell and the main storage manager, and instruct a secondary copy application to perform a secondary copy operation in which the primary data generated by the at least one client computing device is stored as a secondary copy in a second secondary copy file format different than the first secondary copy file format.

Abstract: A technique includes hosting an Internet Storage Name Service (iSNS) server on a network switch to provide access to a plurality of subnets; and configuring the iSNS server to be an active server for a first subnet of a plurality of subnets and to be a backup server for a second subnet of the plurality of subnets.

Abstract: Techniques for implementing a single-addressable virtual topology element (VTE) in a virtual topology. A VTE in a virtual topology may be distributed as multiple instantiated elements in a physical topology. However, the multiple instantiated elements are addressable as a single entity. Obtaining information associated with the VTE includes obtaining and aggregating information from each of the instantiated elements. Applying an overall configuration to the VTE includes determining a respective configuration for each instantiated element based on the overall configuration, and applying the respective configuration to each instantiated element.

Abstract: A method for optical restoration in an optical network is provided. A network controller obtains, from one or more optical nodes of an optical network, at least one failure notification indicating a failure of a primary path between a first node and a second node. The network controller forwards to a first set of optical nodes, data-plane parameters for optical components of the first set of optical nodes. The first set of optical nodes include the first node, the second node, and one or more intermediate nodes, and forms a restoration path for the primary path. The data-plane parameters for the optical components are forwarded in parallel to the first set of optical nodes of the restoration path so as to activate the restoration path in parallel. The network controller switches traffic from the primary path to the restoration path.

Abstract: Systems and methods are for domain name system (DNS) resolutions in heterogeneous network environments including a virtual private cloud (VPC). An administrator of a virtual private cloud (VPC) specifies rules identifying sources for resolving DNS resolution requests. The rules may include routing a request to a source outside the VPC such as to an on-premises DNS resolver through an outbound IP endpoint.

Abstract: Apparatus and method by which Internet Protocol (IP) traffic can be transferred (i.e. handoff) between two different terminals operating according to two different technology standards in two different systems with two different IP addresses. For example, a session handoff can be made between a terminal in Wireless Local Area Network (WLAN) a terminal in a 3GPP UMTS or between a terminal in CDMA2000 and a terminal in a 3GPP UMTS. These terminals can be either physically separate entities or logical entities that are encapsulated within a common enclosure.

Abstract: System and method of network packet switching using a table representation of a trie data structure to identify a timestamp (TS) range (or time range) for a received packet based on the packet timestamp (TS). The trie data structure is programmed with a plurality of predetermined time ranges. Each node in the trie data structure corresponds to a TS prefix and is associated with a corresponding predetermined time range. A search engine in the network switch can use the packet TS as a key to traverse the trie data structure and thereby matching the packet TS to a predetermined time range according to a Longest Prefix Match (LPM) process. Provided with the TS ranges of the incoming packets, various applications and logic engines in the network switch can accordingly process the packets, such as determining a new destination IP address and performing channel switch accordingly.

Abstract: The present disclosure relates to methods and arrangements in a private address resolving node of a personal area network deploying Bluetooth low energy, BLE and in particular to methods and arrangements for proactively resolving periodically updated private addresses. When performed in a private address resolving node of a personal area network deploying Bluetooth low energy, BLE, a method comprises resolving a periodically updated private address of a private address generating node connected to the private address resolving node. The private address is used in addressing messages from the private address resolving node to the private address generating nodes.

Abstract: Some embodiments provide a method for providing dynamic host configuration protocol (DHCP) services to different data compute nodes (e.g., virtual machines) that belong to different logical networks (e.g., for different tenants in a datacenter). In some embodiments, the method inserts a logical network identifier (LNI) value to each DHCP packet and forwards the packet to a DHCP server module for processing the DHCP request. Based on the LNI value, the DHCP server of some embodiments identifies the logical network from which the DHCP packet is received. The DHCP server then provides the requested DHCP service (e.g., assigning an IP address to a data compute node that has originated the DHCP packet, assigning a domain name, etc.) according to a DHCP service configuration for the identified logical network.

Abstract: A communication system comprising a server and a plurality of clients constrained so that in order to communicate with each other by means of the system they must communicate via the server, the server having access to a set of stored communication rules defining permitted and/or non-permitted communications between the clients and the server being configured to, on receiving a message from a first client designating as recipients a second client and a third client, the first client matching a first set of characteristics stored in the communication rules and the second client and the third client being clients who are not permitted to directly communicate according to the communication rules, alter the communication rules to permit the second and third clients to directly communicate.

Abstract: The present disclosure relates to a pre-5th-Generation (5G) or 5G communication system to be provided for supporting higher data rates Beyond 4th-Generation (4G) communication system such as long term evolution (LTE). A method of operation of an electronic device includes generating streaming data, determining a traffic pattern of the streaming data based on an encoding setting parameter, a data transmission speed and a data generation speed of the streaming data, and transmitting the streaming data based on the traffic pattern.

Abstract: A method and system for authenticating answers to Domain Name System (DNS) queries originating from recursive DNS servers provided. A verification component provides a versification that a DNS query originated from the recursive DNS server. An authoritative DNS server receives the query via a network, such as the Internet, provides an answer to the query to an authentication component. The authentication component then provides an authentication such as a digital signature, which confirms that the received answer was provided by the authoritative DNS server, and then communicates the answer and the authentication to the verification component via the network. The verification component then verifies that the authentication corresponds to the receive answer and sends the answer to the recursive DNS server. When the verification component receives an answer in the absence of a corresponding authentication the verification component drops the answer.

Abstract: Social media and data sharing controls may be provided. Upon receiving a request to transmit an element of data to a recipient, a determination may be made as to whether the recipient is appropriate to receive the element of data. In response to determining that the recipient is appropriate to receive the element of data, the element of data may be transmitted. In response to determining that the recipient is not appropriate to receive the element of data, at least one remedial action may be performed.

Abstract: A domain name resolution method includes: obtaining a domain name resolution request packet; caching the obtained domain name resolution request packet to a first cache area; modifying, in the first cache area, header data included in the cached domain name resolution request packet, to obtain header data of a domain name resolution reply packet corresponding to the cached domain name resolution request packet; extracting a requested record type and a domain name to be resolved in the cached domain name resolution request packet; searching a second cache area for pre-cached reply data that corresponds to the extracted domain name and that belongs to the extracted record type; and combining the pre-cached reply data with the domain name resolution request packet obtained through modification, to obtain a domain name resolution reply packet.

Abstract: Methods and systems for extracting targeted data for real-time reporting are discussed. In an example, a system can include a data store, a server, and a denormalized database. The data store can maintain data created by an application. The server can be communicatively coupled to the data store. The server can include a data extraction module and a data compression module. The data extraction module can extract a subset of the data stored in the data store according to an extraction scheme. The data compression module can compress the extracted subset of the data into a set of aggregated key value pairs. The denormalized database can store the aggregated key value pairs.

Abstract: Apparatuses, systems, methods, and program products are disclosed for improved storage performance based on data placement. An identifier module generates a plurality of unique identifiers. Each of the unique identifiers is associated with a storage node of a storage cluster. A rank module ranks each of the plurality of unique identifiers in response to a received data item. The ranking of a unique identifier is based on one or more characteristics associated with the received data item. A storage module selects a unique identifier of the plurality of unique identifiers with a best ranking and stores the data item on a storage node associated with the selected unique identifier.

Abstract: An enforcement mechanism on an operating system instance enforces a segmentation policy on a container. A configuration generation module executing in a host namespace of the operating system instance receives management instructions from a segmentation server for enforcing the segmentation policy on a container. The configuration generation module executes in the host namespace to configure a traffic control and monitoring module in a container namespace associated with the container. The traffic control and monitoring module in the container namespace controls and monitors communications to and from the container in accordance with its configuration. By executing a configuration generation module in the host namespace to configure traffic control and monitoring module in the container namespace, the enforcement mechanism beneficially enables robust and lightweight enforcement in a manner that is agnostic to different containerization protocols.

Abstract: Generating an improved/more accurate geolocation database is provided. Given a dataset of reverse DNS hostnames for IP addresses, ground truth information, and a hierarchical geographical database, a machine learning classifier can be trained to extract and disambiguate location information from the reverse DNS hostnames of IP addresses and to apply machine learning algorithms to determine location candidates and to select a most probable candidate for a reverse DNS hostname based on a confidence score. The classifier can be used to generate an accurate geolocation database, or to provide accurate geolocation information as a service.

Abstract: An apparatus for addressing a plurality of Internet of Things (IoT) devices includes storage to store instructions and a processor. The processor is to execute the stored instructions to initialize an IoT device alias addressing space, to assign an alias address to each of a plurality of the IoT devices, where the alias addresses are time-limited, and to handle packet transactions using the assigned alias addresses.

Abstract: The present application discloses an environment isolation method. First, a pre-configured full address in a routing address pool in a Remote Procedure Call (RPC) client terminal is automatically refreshed according to a preset cycle. The RPC client terminal stops automatic refresh in the routing address pool after receiving an environment isolation instruction sent by an environment isolation device, and replaces a current address in the routing address pool with a combined address. When subsequently receiving a service call request sent by a user, the RPC client terminal generates a valid target address based on the combined address in the routing address pool, sends the service call request to an RPC server terminal corresponding to the target address, and returns to the user a service processing result returned by the RPC server terminal.

Abstract: An apparatus includes a processor component to: transmit node device identifiers to multiple node devices to define an ordering thereamong; following block exchanges redistributing the subsets among a reduced number of node devices, receive sizes of blocks or sub-blocks of data within each subset from the reduced number of node devices; based on the received sizes, generate map data organized to define an ordering among the blocks stemming from the ordering among the multiple node devices; determine whether the total size of the map data and metadata, together, exceeds a minimum size for data transmissions to storage device(s); and in response to the total size exceeding the minimum size, form the map data and metadata into segment(s) that each fit the minimum size and a maximum size, and transmit the segment(s) at least partially in parallel with other segments of the blocks transmitted by the reduced number of node devices.

Abstract: A method can include command and control of a computer network defense (CND) system using open mission (OMS) constructs. A mission data file (MDF) is processed. A target interface, which is a 1553B bus, is determined from the MDF. A CND capability message that extends an OMS capability message and indicates the target interface is encoded. A CND command message that extends an OMS command message is decoded. The CND command message is validated. The target interface is bound based on validation of the CND command message. A CND command status message is encoded based on validation of the CND command message. The CND command status message extends an OMS command status message.

Abstract: Resource management techniques, such as cache optimization, are employed to organize resources within caches such that the most requested content (e.g., the most popular content) is more readily available. A service provider utilizes content expiration data as indicative of resource popularity. As resources are requested, the resources propagate through a cache server hierarchy associated with the service provider. More frequently requested resources are maintained at edge cache servers based on shorter expiration data that is reset with each repeated request. Less frequently requested resources are maintained at higher levels of a cache server hierarchy based on longer expiration data associated with cache servers higher on the hierarchy.

Abstract: Various methods and apparatus for load balancing traffic via dynamic DNS record time-to-live values (“TTLs”) are described. In at least some embodiments, a DNS layer of a DNS load-balanced system receives performance metrics corresponding to a plurality of server instances. If the DNS layer detects a performance metric imbalance for a server instance, it adjusts the TTL value for the DNS records associated with that instance. For example, the DNS layer can lower the TTL value in the DNS records associated with the server instance. This means that clients that have DNS record associated with this server instance will make more frequent DNS queries, thus resulting in at least some of those clients receiving IP addresses for other server instances. In some embodiments, the DNS layer can implement a load balancing scheme that determines which network address(es) to include in a DNS response based on the received performance metrics.

Abstract: Approaches for multitask learning as question answering include an input layer for encoding a context and a question, a self-attention based transformer including an encoder and a decoder, a first bi-directional long-term short-term memory (biLSTM) for further encoding an output of the encoder, a long-term short-term memory (LSTM) for generating a context-adjusted hidden state from the output of the decoder and a hidden state, an attention network for generating first attention weights based on an output of the first biLSTM and an output of the LSTM, a vocabulary layer for generating a distribution over a vocabulary, a context layer for generating a distribution over the context, and a switch for generating a weighting between the distributions over the vocabulary and the context, generating a composite distribution based on the weighting, and selecting a word of an answer using the composite distribution.

Abstract: Examples are disclosed and described to facilitate resolution of Internet Protocol address conflicts. An example method includes periodically broadcasting, by the playback device over the network, a probe message, detecting, by the playback device, a change in status associated with the connection, based on the detection, obtaining, by the playback device, a new Internet Protocol (IP) address; and based on the detection, including, by the playback device in at least one probe message broadcast subsequent to the detection, an indication for other playback devices on the network to obtain a new IP address.

Abstract: A High Performance Computing (HPC) node comprises a motherboard, a switch comprising eight or more ports integrated on the motherboard, and at least two processors operable to execute an HPC job, with each processor communicably coupled to the integrated switch and integrated on the motherboard.

Abstract: Some embodiments provide a method for connecting a host machine to a management and control system (MCS) logical network. The method of some embodiments receives, at a managed forwarding element of the host machine, data that identifies a bootstrap agent. The method of some such embodiments receives this data once the host machine is booted up. The method connects to the agent to receive configuration data for the MCS logical network from the agent. The method uses the configuration data received from the agent to connect to the MCS logical network. After connecting to the MCS logical network, the method receives the necessary configuration data for at least one additional logical network (e.g., a guest logical network) from a set of control machines that is also connected to the MCS logical network.

Abstract: A method, apparatus, system, and computer readable storage medium provide the ability to identify an internet connected household (ICH). An Internet Protocol (IP) address is received at an Internet entity. Determinations are made regarding whether device activity from the IP address does not exceed a defined activity threshold and whether an IP assignment age for the IP address is greater than a defined threshold age. Based on the determinations, the IP address can be identified as belonging to an ICH or not.

Abstract: Examples herein disclose an extraction of data from a payload field within a domain name system (DNS) packet. The extracted data is classified according to a level of risk associated with the extracted data. Based on the classification, the DNS packet may be determined as malicious.

Abstract: Broadband subscriber switchover may be provided. First, a first gateway device may receive a first failure message from a first ring device. The first gateway device may be designated as an access fault detection agent among a plurality of gateway devices. Next, the first gateway device may receive a second failure message from a second ring device. The second failure message may be received via a second gateway device. The first ring device and the second ring device may be in an open-ring. Then the first gateway device may determine that the first ring device has been cut off from the second gateway device based upon the first failure message and the second failure message. The second gateway device may be a master device for the first ring device. The master device for the first ring device may then be switched from the second gateway device to the first gateway device.

Abstract: Disclosed is an architecture that distributes session control logic across multiple points of a telecommunications network. Also disclosed are techniques and systems using Internet Protocol (IP)-based routing to establish communication sessions. A user equipment (UE) may receive user input to initiate a communication session, derive a destination IP address, generate a session request having at least the destination IP address, and send the session request a server. The server may receive the session request from the UE, replace the destination IP address in the session request with an IP address of an endpoint device to generate a modified session request, and route the modified session request to the endpoint device based at least in part on the IP address of the endpoint device.

Abstract: Controlling asynchronous tasks in a transaction system. A request to start an asynchronous child task is obtained, and a resource status of the system is determined. It is determined whether to suspend a parent task associated with the asynchronous child task or to execute the asynchronous child task based on the determined resource status of the system.

Abstract: In some embodiments, a system is provided, and computer-executable instructions cause the system to: receive, at an edge server of a content delivery network (CDN), a request for a first video and a request for a second video; determine that the first video is not cached and that the second video is cached; request the first video from the origin server and log a cache miss; obtain the first video from the origin server and send responsive to the request; send the second video responsive to the request and log a cache hit; obtain a metric indicative of the volume of cache misses, including for the first and second videos, across edge servers of the CDN; and determine, based on the metric, an amount by which to scale resources implementing the origin.

Abstract: A device may receive, by a kernel of the device and from a loadable kernel module of the device, information that instructs the kernel to invoke a callback function associated with the loadable kernel module based on an execution of a hook of the kernel. The device may receive, by the kernel of the device and from an application of the device, a socket application programming interface (API) call. The socket API call may include control information. The device may execute, by the kernel of the device, the hook based on receiving the socket API call. The device may invoke, by the kernel of the device, the callback function associated with the loadable kernel module based on executing the hook to permit a functionality associated with the callback function to be provided. The kernel may provide the control information, associated with the socket API call, to the callback function as an argument.

Abstract: The disclosed method may include (1) identifying, within a virtual network, a primary virtual network device and a backup virtual network device that is to handle traffic directed to the primary virtual network device following a failure of the primary virtual network device, (2) installing, on the primary virtual network device, a first virtual controller that manages the primary virtual network device, (3) installing, on the backup virtual network device, a second virtual controller that manages the backup virtual network device, (4) directing, by the first virtual controller, the second virtual controller to replicate a state of the primary virtual network device, (5) detecting the failure of the primary virtual network device, and then in response to detecting the failure of the primary virtual network device, (6) directing, by the first virtual controller, the second virtual controller to facilitate handling the traffic directed to the primary virtual network device.

Abstract: The present disclosure relates to a method for estimating a web page download time on a web browser in a user device from a corresponding web server and to a network monitoring device for performing the method.

Abstract: The disclosure belongs to wireless communication technology, and the provided method, device and system of Forward Addressing and Backward Readdressing InterConnect (FABRIC) including, the method of forward addressing and backward readdressing interconnect enables any two devices in the system to establish interconnection channels when data exchange is required, and screens out suitable relay devices among the numerous intermediate devices between the two devices, the transmission of data is controlled within a limited range, and the interconnection channel is not unique, each time of data transmission is likely to pass through different intermediate devices with randomness and redundancy, it can cope with a certain degree of device movements. A plurality of devices can carry out communication between two at the same time without conflict.