A system enforces administrative domain wide policies specified using labels that describe characteristics of servers or services. A label comprises a label value describing a characteristic of one or more computing devices for a label dimension. The system infers label values for devices using features describing characteristics of the computing devices, for example, hardware characteristics, software characteristics, or connectivity characteristics. The system obtains communication information indicating the destination, source, volume, and duration of network traffic between computing devices. The system identifies providers of services and consumers of services based on the communication information. The system generates rules for regulating communications between computing devices and enforces the rules.

Methods and systems for per-input port, per-control plane network data traffic class control plane policing in a network element are described. In one embodiment, the method comprises receiving control plane network data at an input port of a network element, wherein the control plane network data is data that is processed by the control plane. The method may also include classifying the control plane network data based on characteristics of the control plane network data. Furthermore, the method may include storing the control plane network data in one of a plurality of output queues for the input port based on a class of the control plane network data, and forwarding control plane network data from a selected one of the plurality of output queues to a control plane of the network element.

A policy enforcer device may determine a value of multiple controls included on a control device. The multiple controls may be associated with zones of a facility. The policy enforcer device may determine, based on the values of the plurality of controls, relative amounts of bandwidth to allocate, of a total amount of available bandwidth, to the zones of the facility; and control one or more network devices to provide the determined amounts of bandwidth to the zones of the facility.

Methods, systems and computer readable media for mobile endpoint network interface selection using merged policies.

Methods and systems establish a traffic policy for a personal electronic device based on one or more physical characteristics of the device. In some aspects, a database of traffic policies is maintained. The traffic policies are for accessing a network via a wireless communications link. A network access unit receives a request from a personal electronic device to access the network. The request is analyzed to determine a physical characteristic of the device. A traffic policy is established from the database for the a personal electronic device based, at least in part, on the determined physical characteristic of the device. Transmission of network traffic for the device is then scheduled based at least in part, on the established traffic policy.

A multimedia conferencing service uses accessible-forwarding-plane network elements such as OpenFlow® controllers and OpenFlow®-enabled switches. A conferencing server receives a conference subscription request including a network address of a L2/L3 signaling server, and connects to an accessible-forwarding-plane controller to control an accessible-forwarding-plane switch. Flow tables and group tables are managed to classify traffic with minimum table usage and update frequency. Media channels are established between clients through the OpenFlow®-enabled switches, relieving bottlenecks at the conferencing server.

Provided are a MapReduce apparatus and a MapReduce control apparatus and method. The MapReduce apparatus includes a map calculator configured to perform a map calculation, a combiner configured to aggregate and summarize map calculation results of the map calculator, a rack combiner configured to aggregate and summarize map calculation results of MapReduce apparatuses connected to the same rack switch according to a policy of a MapReduce control apparatus, and a reduce calculator configured to receive the aggregated and summarized results of the combiner or the rack combiner and perform a reduce calculation.

In one embodiment, when an ingress provider edge (PE) device of a computer network domain receives a frame at the ingress PE device destined to a destination media access control (MAC) address, it can determine whether the frame was received on a root or leaf Ethernet ingress segment, and also whether the destination MAC address is located via a root or leaf Ethernet segment. Accordingly, the ingress PE device may either drop or forward the frame based on the ingress Ethernet segment and destination MAC address Ethernet segment being either a root or a leaf, respectively.

Mechanisms are provided for tracing a route taken by a packet in a Software Defined Network (SDN). Each switch in the SDN is assigned a first color label, from a set of color labels, such that such that adjacent switches have different color labels. Rules are installed in each switch to forward a received data packet to the SDN controller in response to a second color label of the received data packet not matching the first color label assigned to the switch. A second color label, from the set of color labels, is assigned to a trace data packet. A route of the trace data packet is traced through the SDN based on the second color label and application of the one or more rules to the trace data packet at each of the switches in the SDN as the trace data packet is received by each of the switches in the SDN.

A software-defined network-based method and system for implementing a content distribution network. An application function, control function, and network entity resource of a CDN are added respectively to an application layer, control layer, and data forwarding layer of an SDN. When a request for a CDN application is received, the SDN application layer generates resource requirement and service scheduling information based on the request, and transmits a reservation request for a resource required by the CDN application to an SDN control layer. The SDN control layer allocates a resource required by the CDN application to combine network load balancing and path policies and to generate a content routing table for data transmission, generating and transmitting L2 and L3 forwarding tables to the SDN data forwarding layer. When it receives content distribution and content delivery requests, the SDN data forwarding layer executes a CDN service-related operation based on the forwarding tables.