At&t Intellectual Property I, L.p.

At+t Corp.

Servicenow, Inc.

Purdue Research Foundation

Princeton University

Carsten Lund

Nicholas G Duffield

Alexandre Gerber

Subhabrata Bapi Sen

Mikkel Thorup

Edith Cohen

Frederick True

Han Q Nguyen

Lee Breslau

Ashley Flavel

Cheng Ee

Oliver Spatscheck

Yin Sheng Zhang

Haim Kaplan

Sumeet Singh

Nicholas F Reingold

Amogh Dhamdhere

Jacobus Erasmus Van Der Merwe

Albert Gordon Greenberg

Arthur L Zaifman

Jennifer Lynn Rexford

David Lee Applegate

Anja Feldmann

Changhoon Kim

Jeffrey Erman

Michael J Satterlee

Dan Pei

Steven D Phillips

Ajay Todimala

Adam Hersh

Sanjay Rao

Yu-Wei Sung

MohammadTaghi Hajiaghayi

A user-defined virtual private cloud computing network is provided that includes a user interface for selecting a plurality of network connectivity features for designing the user-defined virtual private cloud computing network. The virtual private cloud computing network includes tangible storage elements and tangible computing elements selected from a cloud computing network service provider using the user interface, using the user interface each network. The tangible storage elements and tangible computing elements are connected in accordance with network element configuration statements that instantiate actions particular to defined network connectivity features in accordance with defined usage rules. The virtual provide cloud computing network is configured and implemented in accordance with the selected network connectivity features using the tangible storage elements and tangible computing elements.

Network connectivity wizard to support automated creation of customized configurations for virtual private cloud computing networks

A user is provided an interface for selecting network connectivity features for designing a virtual private cloud computing network. Each network connectivity feature has an attribute for connecting tangible storage elements and tangible computing elements in the virtual private cloud computing network. Each network connectivity feature is translatable into a network element configuration statement that instantiates an action particular to the network connectivity feature. Usage rules are defined specifying how the network connectivity features can be used. Selected network connectivity features are accepted from the user. The virtual private cloud computing network is configured in accordance with the selected network connectivity features using the tangible storage elements and tangible computing elements in the virtual private cloud computing network. The virtual private cloud computing network is implemented in accordance with the selected network connectivity features using the tangible storage elements and tangible computing elements in the virtual private cloud computing network.

A method of assigning a server to a client system includes determining an ingress point of the client system and identifying possible egress points for the client system. The method further includes selecting the server from a plurality of servers to reduce network cost and delivery time.

Topology aware content delivery network

A method of managing a network application includes identifying a network path for the network application, obtaining network performance measurements along the network path, obtaining application performance information for the network application, and extracting infrastructure specific information for the infrastructure supporting the network application. The method further includes correlating the application performance information, network performance measurements, and the infrastructure specific information to identify a performance issue affecting the network application, and modifying the application behavior, the network behavior, or any combination thereof in response to the performance issue.

Network aware application management

A cloud computing network is implemented by defining a plurality of network connectivity features for designing a virtual private cloud computing network within the cloud computing network. Each network connectivity feature has user-definable attributes and each network connectivity feature is translatable into a set of network element configuration statements that instantiate an action particular to the network connectivity feature. Usage rules specifying how the features can be used are defined for the cloud computing network. Selected features from the plurality of network connectivity features are accepted and assembled into a template for configuring the virtual private cloud computing network. The template for configuring the virtual private cloud computing network is validated against the usage rules. The virtual private cloud computing network is implemented in accordance with the validated template for configuring the virtual private cloud computing network.

A system and method to use network flow records to generate information about changes in network routing and to understand the impact of these changes on network traffic. The inferences made can be determinative, if sufficient information is available. If sufficient information is not available to make determinative inferences, inferences may be made that narrow the range of possible changes that may have occurred to network traffic and the underlying network.

System and method for determination of routing information in a network

Methods and apparatus to model end-to-end class of service policies in operational networks are disclosed. An example method to generate a class of service model is described, including electronically generating a ruleset based on the class of service configuration associated with a router, electronically generating a flat representation of the ruleset, electronically generating a class of service model by composing the flat representation into a composed ruleset, and storing the class of service model in a computer-readable memory.

Methods and apparatus to model end-to-end class of service policies in networks

Methods and apparatus to dynamically control access from VPNs to shared resources are disclosed. A disclosed example route reflector comprises a memory to implement a database, a user interface module to receive a request to permit access for a VPN to a shared resource, a BGP engine to process BGP advertisements, a network interface to receive a first BGP advertisement from a PE router associated with the VPN that includes a first RT associated with the VPN, and a shared resource access controller to update the database based on the request, to query the database to determine whether the VPN has access to the shared resource in response to the first BGP advertisement, and to direct the BGP engine to form a second BGP advertisement based on the first BGP advertisement that includes a second RT associated with the shared resource when the VPN has access to the shared resource.

Methods and apparatus to dynamically control access from virtual private networks to network-based shared resources

A method of implementing a cloud computing network includes defining, for a cloud computing network including tangible network storage elements and tangible network computing elements, a library of network connectivity building blocks for designing a virtual private cloud computing network within the cloud computing network. Each building block has user-definable attributes and each building block is translatable into a set of network element configuration statements that instantiate an action particular to the building block. Usage rules specifying how the building blocks can be used are defined for the cloud computing network. Dynamically-selected building blocks from the library are accepted and assembled into a configuration template. The configuration template is validated against the usage rules. The virtual private cloud computing network is implemented in accordance with the validated configuration template.

An efficient streaming method and apparatus for detecting hierarchical heavy hitters from massive data streams is disclosed. In one embodiment, the method enables near real time detection of anomaly behavior in networks.

Methods and apparatus for detection of hierarchical heavy hitters

A method for producing a summary A of data points in an unaggregated data stream wherein the data points are in the form of weighted keys (a, w) where a is a key and w is a weight, and the summary is a sample of k keys a with adjusted weights w. A first reservoir L includes keys having adjusted weights which are additions of weights of individual data points of included keys and a second reservoir T includes keys having adjusted weights which are each equal to a threshold value &#x3c4; whose value is adjusted based upon tests of new data points arriving in the data stream. The summary combines the keys and adjusted weights of the first reservoir L with the keys and adjusted weights of the second reservoir T to form the sample representing the data stream upon which further analysis may be performed. The method proceeds by first merging new data points in the stream into the reservoir L until the reservoir contains k different keys and thereafter applying a series of tests to new arriving data points to determine what keys and weights are to be added to or removed the reservoirs L and T to provide a summary with a variance that approaches the minimum possible for aggregated data sets. The method is composable, can be applied to high speed data streams such as those found on the Internet, and can be implemented efficiently.

Method for summarizing data in unaggregated data streams

Statistical methods are used to observe packet flow arrival processes and to infer routing changes from those observations. Packet flow arrivals are monitored using NetFlow or another packet flow monitoring arrangement. Packet flow arrivals are quantified by counting arrivals per unit time, or by measuring an inter-arrival time between flows. When a change in packet flow arrivals is determined to be statistically significant, a change in network routing protocol is reported.

Growing community of inventors

Berkeley Heights, NJ, United States of America

Carsten Lund