A data center security system and method are provided that leverage server systems on a chip (SOCs) and/or server fabrics. In more detail, server interconnect fabrics may be leveraged and extended to dramatically improve security within a data center.

Methods, apparatus and data structures are provided for managing multicast IP flows. According to one embodiment, a router identifies active multicast IP sessions. A data structure is maintained by the router that contains information regarding the active multicast IP sessions and includes multiple pairs of a source field and a group field ({S, G} pairs), a first pointer associated with each of the {S,G} pairs and a set of slots. Each of the {S, G} pairs defines an active multicast IP session. The source field defines a source of a multicast transmission of the multicast IP session and the group field defines a group corresponding to the multicast IP session. The first pointer points to a dynamically allocated set of outbound interface (OIF) blocks. Each slot has stored therein a second pointer to a transmit control block (TCB) data structure that services users participating in the multicast IP session.

A distributed multilayered network routing architecture comprises multiple layers including a controller layer comprising a controller, a control plane layer comprising one or more control plane subsystems, and a data plane layer comprising one or more data plane subsystems. A controller may be coupled to one or more control plane subsystems. A control plane subsystem may in turn be coupled to one or more data plane subsystems, which may include one or more software data plane subsystems and/or hardware data plane subsystems. In certain embodiments, the locations of the various subsystems of a distributed router can be distributed among various devices in the network.

Methods, systems, and computer readable media for peer aware load distribution are disclosed. According to one method, the method includes steps occurring at a DSR comprising a plurality of message processors. The method also includes receiving Diameter messages associated with two or more Diameter sessions, wherein each of the two or more Diameter sessions is associated with a first peer group and assigning, using the first peer group and a peer aware load distribution algorithm, the two or more Diameter sessions to two or more message processors of the plurality of message processors, wherein the peer aware load distribution algorithm distributes Diameter sessions associated with the first peer group among the two or more message processors for avoiding a single point of failure.

The present disclosure is directed to extracting features from a NoC for machine learning construction. Example implementations include a method for generating a Network on Chip (NoC), wherein the method can extract at least one feature from a NoC specification to derive at least one of: grid features, traffic features and topological features associated with the NoC. The method can perform a process on the at least one of the grid features, the traffic features and the topological features associated with the NoC to determine at least one of an evaluation of at least one mapping strategy selected from a plurality of mapping strategies of the NoC based on a quality metric, and the selection of the at least one mapping strategy is based on the quality metric. The method can further perform generate the NoC based on the process.

The embodiments described herein provide a data transmission system comprising a plurality of video routers, a supervisory system for transmitting one or more router configuration signals to one or more video routers, and a control communication network for coupling the plurality of video routers and the supervisory system. Each router in the system comprises a backplane including a plurality of backplane connections, at least one line card and at least one fabric card. Each line card comprises a plurality of input ports and output ports where each input and output port is coupled to a respective external signal through the backplane. Each line card further comprises a line card cross-point switch having a plurality of input switch terminals and a plurality of output switch terminals. Each fabric card comprises a fabric card cross-point switch having a plurality of input switch terminal and a plurality of output switch terminals. Furthermore, each line card and each fabric card comprises a card controller where the card controller selectively couples one or more input switch terminals of a cross-point switch to the output switch terminals of that cross-point switch. The cross-point switches being manipulated by the card controller may belong to one or more different cards within the same video router.

Techniques are described for enhancements to Protocol Independent Multicast (PIM) to enable a last hop router (LHR) to perform source discovery and directly build or join a source tree. According to the techniques of this disclosure, an LHR may be configured to receive a request to obtain multicast traffic corresponding to one or more multicast groups. The LHR may be configured to generate a source discovery join message including a request to join one or more multicast groups identified in the source discovery message and one or more source discovery flags. At least one of the one or more source discovery flags may indicate that the last hop router is interested in obtaining source information relating to at least one of the one or more multicast groups. The LHR may be configured to send, to a rendezvous point (RP) router in the network, the source discovery join message.

The disclosure describes a data enqueuing method. The method may include: receiving a to-be-enqueued data packet, dividing the data packet into several slices to obtain slice information of the slices, and marking a tail slice of the data packet with a tail slice identifier; enqueuing corresponding slice information according to an order of the slices in the data packet, and in a process of enqueuing the corresponding slice information, if a slice is marked with the tail slice identifier, determining that the slice is the tail slice of the data packet, and generating a first-type node; and determining whether a target queue is empty, and if the target queue is empty, writing slice information of the tail slice into the target queue, and updating a head pointer of a queue head list according to the first-type node.

Generally discussed herein are systems, devices, and methods for routing interests and/or content in an information centric network. A router can include a memory and routing circuitry coupled to the memory, the routing circuitry configured to receive a packet, receive one or more attributes including at least one of (1) a network attribute, (2) a platform attribute, and (3) a content attribute, determine which neighbor node is to receive the packet next based on the received one or more attributes, and forward the packet to the determined neighbor node.

A system and method are provided for network proxying. The network proxying may occur in a node of a fabric or across nodes in the fabric. In the network proxying, the node has a processor with a low power mode and the system remaps, by a management processor of the node, a port identifier for a processor that is in a low power mode to the management processor. The management processor then processes a plurality of packets that contain the port identifier for the processor that is in the low power mode to maintain a network presence of the node.