Techniques for using global virtual network instance (VNI) labels in a multi-domain network to route network data with a multi-tenant network overlay are described herein. A routing device provisioned in a network domain of the multi-domain network may register with a service discovery system of the network domain for use of network configuration data to establish routes through the multi-domain network with network nodes. Each network domain of the multi-domain network may include an application programming interface (API) server for processing API requests to make changes to configurations of a network domain. A border gateway protocol (BGP) large community may be utilized to encode global VNI labels, network addresses, local next hop nodes, and/or additional network information and sent to routing devices provisioned in separate network domains. A service chain may be signaled by global VNI labels to route network traffic through various services prior to reaching a destination endpoint.

Methods and systems for path selection involving remote access protocols and/or user behavior are described herein. A request, from a first computing device, for content hosted on a second computing device may be received. Based on network state metrics, remote access protocol metrics, and/or user experience metrics, a path of a plurality of paths between the first computing device and the second computing device may be selected. The path need not be the most direct path between the first computing device and the second computing device, and may comprise remote access to a computing device on an intermediary server. Based on user behavior analysis performed with respect to user input data, a path may be re-selected, and/or the network state metrics, remote access protocol metrics, and/or user experience metrics may be weighted.

A system includes a first and at least one second processing circuit, a configuration engine, and a switch. The configuration engine stores a virtual link configuration for a plurality of virtual links, which indicates a priority and a predetermined network pathway for communicating data packets from the first processing circuit to the at least one second processing circuit. The configuration engine automatically assigns priority to a first virtual link of the plurality of virtual links based on at least one of latency or jitter. The switch receives a first data packet from the first processing circuit. A first virtual link identifier is extracted from the first data packet. A first priority and a first predetermined network pathway corresponding to the first virtual link identifier from the virtual link configuration are retrieved. The first data packet is transmitted along the first predetermined network pathway based on the first priority.

Techniques are described for generating and using an extended Bi-directional Forwarding Detection (BFD) control packet in a network. The extended BFD control packet includes a control message that includes a BFD session information, an identifier associated with the device sending the BFD control packet, and a payload part. The extended BFD control packet may be used to perform packet loss and/or packet delay related measurements.

A computing system implementing an application service can determine, from a network dataset, that a network latency for a common network service provider crosses an upper latency threshold. Based on this determination, the system can determine a subset of the computing devices that utilize the common network service provider, and transmit a set of configuration signals to the subset of computing devices. The set of configuration signals can modify a set of default application configurations of a designated application to compensate for the network latency.

Systems and methods for network optimization using end user telemetry are disclosed. In one embodiment, a method for optimizing incoming communication routing may include: (1) establishing, by a data center computer program executed by a data center computer processor, a data connection with an end user electronic device, the data connection using a first data communication route; (2) collecting, by the data center computer program, a metric for the data connection; (3) determining, by the data center computer program, that the metric is outside of an acceptable range; (4) determining, by the data center computer program, that a cause for the metric being outside of the acceptable range is external to the data center; and (5) re-routing, by the data center computer program, the data connection to a second data communication route.

A method of communicating a packet between a first node and a second node, the packet comprising a data payload and a portion of information preceding the data payload. The method comprises: (i) first, identifying a quality of a channel between the first node and the second node; (ii) second, in response to the quality of the channel, selecting a manner of communication of the information preceding the data payload; (iii) third, encoding the selected manner of communication in the portion of information preceding data payload; and (iv) fourth, transmitting the packet from the first node to the second node.

Provided is an incident effect range estimation device which estimates the range of the effect of an incident and shortens incident handling time. This incident effect range estimation device is provided with an incident origin log acquisition unit which acquires log information for the incident-originating device which is related to the occurrence of the incident, a communication destination log acquisition unit which acquires, on the basis of the log information for the incident-originating device, log information for a communication destination device which is the communication destination of the incident-originating device, and an effect range estimation unit which estimates the range of the effect of the incident on the basis of the communication destination device. The range of the effect of the incident can thereby be estimated automatically, and thus incident handling time can be shortened significantly.

There is set forth herein obtaining data traffic monitoring data, the data traffic monitoring data being in dependence on monitoring of traffic received by a container of a protected computing environment; obtaining data traffic monitoring data, the data traffic monitoring data being in dependence on monitoring of traffic received by a processing resource of a computing environment; obtaining a state of the processing resource and provisioning a utility processing resource to include the state of the processing resource; and configuring the computing environment to route data traffic to the utility processing resource.

Methods and systems are provided for performing lossy dropping and ECN marking in a flow-based network. The system can maintain state information of individual packet flows, which can be set up or released dynamically based on injected data. Each flow can be provided with a flow-specific input queue upon arriving at a switch. Packets of a respective flow are acknowledged after reaching the egress point of the network, and the acknowledgement packets are sent back to the ingress point of the flow along the same data path. As a result, each switch can obtain state information of each flow and perform per-flow packet dropping and ECN marking.