H04L45/34

System and methods to filter out noisy application signatures to improve precision of first packet classification
11582158 · 2023-02-14 ·

The systems and methods discussed herein provide for classifying CDN connections to the originating application on the first packet. In some implementations, the system identifies application connections established within a predetermined time period prior to the CDN connection and increments a value associated with these connections. The system classifies the CDN connection as corresponding to the application connection with the highest associated value, allowing routing of network traffic to take advantage of QoS benefits and reduce the need for deep packet inspection.

MPLS extension headers for in-network services

Described herein are methods and devices (e.g., routers) that add in-network services to a multiprotocol label switching (MPLS) network. A method can include a router of the MPLS network receiving a packet and modifying the packet by adding one or more MPLS extension headers, adding a header of the extension header(s), and adding an indication within an MPLS label stack that one or more MPLS extension headers have been added to the packet. The method can also include the router forwarding the packet as modified to another router of the MPLS network. In certain embodiments, an extension header label (EHL) within a label value field of a label stack entry indicates that one or more MPLS extension headers have been added to the packet. In other embodiments, a forward equivalent class (FEC) indicates that one or more MPLS extension headers follow the MPLS label stack.

A WIRELESS CONTROL SYSTEM BASED ON A HYBRID NETWORK
20230039921 · 2023-02-09 ·

To improve the efficiency and reliability of communication, such as for control commands distribution and data collection, in a large and high density wireless control system (100), each one of a plurality of nodes in the system is assigned one out of three roles, a router node (200), a non-router node (300), or a data collector node (400). A node (200, 300, 400) in the wireless control system (100) is capable to operate according to at least one of two communication protocols. A first communication protocol is capable to support mesh or tree network with multi-hop routing, while a second communication protocol is capable to support a star network with point-to-point connection. The router nodes build up a sparse multi-hop network to guarantee the connectivity of the large-scale network. Around each router node within one-hop direct link, a local star network is built up with at least one non-router node and at least one data collector node.

COMPRESSING SEGMENT IDENTIFIERS FOR SEGMENT ROUTING
20230040043 · 2023-02-09 ·

A method implemented by a first node in a segment routing (SR) network domain includes receiving, from a second node of another network domain, a packet configured to pass through the SR network domain in accordance with segment identifiers (SIDs). The method also includes obtaining compressed SIDs corresponding to some of the SIDs. The method includes generating a segment routing header (SRH) having a list of segments. The method further includes adding the SRH to the packet and forwarding the packet with the SRH to a third node in the SR network domain.

IN-SITU FLOW DETECTION-BASED PACKET PROCESSING METHOD AND APPARATUS
20230045227 · 2023-02-09 ·

Embodiments of this application describe an in-situ flow detection-based packet processing method. After receiving a first packet encapsulated by using a first bearer protocol, a first node may obtain, based on the first packet, a second packet encapsulated by using a second bearer protocol. A first packet header of the first packet includes first in-situ flow detection information, and a packet header of the second packet also includes the first in-situ flow detection information. It can be learned that, when re-encapsulating the first packet by using the second bearer protocol, the first node does not remove the first in-situ flow detection information, but adds the first in-situ flow detection information to the packet encapsulated by using the second bearer protocol. Therefore, even if the first bearer protocol and the second bearer protocol are deployed in a detection domain, the first in-situ flow detection information is not removed due to re-encapsulation of the packet, and may be transmitted across the entire detection domain.

System and method of using a global discovery service to enable routing of packets from a source container to a destination container

Systems, methods, and computer-readable storage media are provided to populate databases with routing data for containers to eliminate the need for continuously accessing a global discovery service. An example method includes initiating, from a source container operating on a first machine in a first rack, a communication with a destination container operating on a second machine on a second rack, wherein a local database on the first machine does not know an address of the destination container. The method includes accessing a global discovery service to provide the address of the destination container, populating the local database on the first machine with the address of the destination container and routing a packet from the source container to the destination container according to the address of the destination container.

Method, device, and system for obtaining SRv6 tunnel information

A method for obtaining segment routing over Internet Protocol version 6 data plane (SRv6) tunnel information of Internet Protocol version 6 segment routing, including sending, by a first network device, a request packet to a second network device, where the request packet is used to request to detect reachability of an SRv6 tunnel and obtain SRv6 tunnel information of the second network device, and the second network device is a network device on the SRv6 tunnel, receiving, by the first network device, a response packet from the second network device, where the response packet includes the SRv6 tunnel information of the second network device, and obtaining, by the first network device, the SRv6 tunnel information of the second network device based on the response packet.

Scalable and programmable mechanism for targeted in-situ OAM implementation in segment routing networks

The present technology provides a system and method for implementing targeted collection of in-situ Operation, Administration and Maintenance data from select nodes in a Segment Routing Domain. The selection is programmable and is implemented by setting an iOAM bit in the function arguments field of a Segment Identifier. In this way only the nodes associated with local Segment Identifiers (Function field of a Segment Identifier) with an iOAM argument bit are directed to generate iOAM data. The iOAM data generated by target nodes may be stored in TLV field of the segment routing header. The Segment Routing packet is then decapsulated at a Segment Routing egress node and the Header information with the collected iOAM data is sent to a controller entity for further processing, analysis and/or monitoring.

Apparatus, systems, and methods for optical channel management

An apparatus includes a reconfigurable optical add/drop multiplexer (ROADM) having an input port to receive a first optical signal from a second device. The ROADM also includes a first wavelength selective switch (WSS), in optical communication with the input port, to convert the first optical signal into a second optical signal, a loopback, in optical communication with the first WSS, to transmit the second optical signal, and a second WSS, in optical communication with the loopback, to convert the second optical signal to a third optical signal and direct the third optical signal back to the second device via the input port.

REAL-TIME MESSAGING METHOD AND APPARATUS

A system and method for the late-biding of time-based media in real-time. With late binding, the sender may create time-based media before or at the same time an active delivery route to the recipient is discovered. As soon as the route becomes available, the media is transmitted. The existing DNS and email infrastructure is possibly used for route discovery, while any real-time transmission protocol may be used for the actual delivery of the media. “Progressive” emails may also be used for the real-time delivery of time-based media.