Inphi Corporation

Cisco Technology, Inc.

Netapp, Inc.

Marvell Asia Pte., Ltd.

Hari Shankar

Radhakrishnan L Nagarajan

Todd Rope

Jianxin Wang

Sudeep Bhoja

Chao Xu

Tom Peter Edward Broekaert

Daryl Odnert

Masaki Kato

Prashanth Patil

Kayuri Hasmukh Patel

Yang Fu

Niranjan Koduri

Jayaraman R Iyer

Flemming Andreasen

Nancy Cam-Winget

Subharthi Paul

Venkatesh Narsipur Gautam

Saman Taghavi Zargar

Hua Li

Rashmi Garg

Ariel Nachum

Huadong Liu

Haiyan Luo

Vincent E Parla

Harihara Kadayam

Andrew E Ossipov

Jerome Tollet

Manju Radhakrishnan

Jon Langemak

William Mark Townsley

Ariel Leonardo Vera Villarroel

Jin Teng

Constantinos Kleopa

Jeffery Rodd Daviss

Benoit Ganne

Nathan Skrzypczak

Eui Sun Ahn

Gerald N A Selvam

Trevor Highland

Techniques for a hub node to, provisioned in a network site of a hub and spoke overlay network, to receive a network advertisement from the spoke, decode network routing requirements from a border gateway protocol (BGP) large community associated with the network advertisement, and store the network routing requirements in association with a route associated with the spoke. The routing requirements may indicate one or more service(s) to be applied to the packet, a trust level associated with the spoke, and/or a trust zone associated with the spoke. The hub node may receive a packet from the spoke to be transmitted to destination spoke. The hub node may then route the packet to the destination spoke, drop the packet, or send the packet to a service node configured to apply the one or more services to the packet based on the routing requirements.

Marking spoke links for network segregation and service chaining in hub and spoke overlay networks

Techniques for a hub node, provisioned in a site of a hub and spoke overlay network, to receive, store, and/or forward network routing information associated with a spoke, and send packets directly to spoke(s) that are remote from the hub node. A first hub node may receive a network advertisement including a border gateway protocol (BGP) large community string from a first spoke local to the first hub node. The first hub node may send the BGP large community string to a second hub node remote from the first hub node. The second hub node may decode network routing information from the BGP large community string and store the network routing information locally. The second hub node may send a packet from a second spoke local to the second hub node directly to the first spoke without the data packet being routed via the first hub node.

Asymmetric hub and spoke overlay network

In one embodiment, a network security device is configured to monitor data traffic between a first device and a second device. The network security device may be configured to intercept a first initial message of a first encrypted handshaking procedure for a first secure communication session between the first device and the second device, the first initial message specifying a hostname that has been encrypted using first key information associated with the network security device, decrypt at least a portion of the first initial message using the first key information to determine the hostname, re-encrypt the hostname using second key information associated with the second device, and send, to the second device, a second initial message of a second encrypted handshaking procedure for a second secure communication session between the network security device and the second device, the second initial message specifying the hostname re-encrypted using the second key information.

Managing encrypted server-name-indication (ESNI) at proxy devices

Techniques are presented herein for engagement and disengagement of Transport Layer Security proxy services with encrypted handshaking. In one embodiment, a first initial message of a first encrypted handshaking procedure for a first secure communication session between a first device and a second device is intercepted at a proxy device. The first initial message includes first key exchange information for encrypting the first encrypted handshaking procedure. A copy of the first initial message is stored at the proxy device. A second initial message of a second encrypted handshaking procedure for a second secure communication session between the proxy device and the second device is sent from the proxy device to the second device. The second initial message includes second key exchange information for encrypting the second encrypted handshaking procedure. The proxy device determines, based on the second encrypted handshaking procedure, whether to remain engaged or to disengage.

Engagement and disengagement of transport layer security proxy services with encrypted handshaking

The present invention is directed to communication systems and methods. In a specific embodiment, the present invention provides an optical receiver that receives a data stream from an optical transmitter. The optical receiver determines a histogram contour parameter using the data stream and inserts the histogram contour parameter into a back-channel data segment, which is then transmitted to the optical transmitter. The optical transmitter changes its data transmission setting based on the histogram contour parameter. There are other embodiments as well.

Histogram based optimization for optical modulation

In one example embodiment, a network management device generates a first script defining a first function for detecting a first customizable network event in a sequence of customizable network events indicative of a security threat to a network. The network management device activates the first script at a first network device in the network so as to cause the first network device to execute the first function for detecting the first customizable network event, and obtains, from the first network device, one or more indications that the first network device has detected the first customizable network event. Based on the one or more indications, the network management device determines whether to activate a second script defining a second function for detecting a second customizable network event in the sequence at a second network device in the network capable of detecting the second customizable network event.

Hierarchical activation of scripts for detecting a security threat to a network using a programmable data plane

The present invention relates to telecommunication techniques and integrated circuit (IC) devices. More specifically, embodiments of the present invention provide an off-quadrature modulation system. Once an off-quadrature modulation position is determined, a ratio between DC power transfer amplitude and dither tone amplitude for a modulator is as a control loop target to stabilize off-quadrature modulation. DC power transfer amplitude is obtained by measuring and sampling the output of an optical modulator. Dither tone amplitude is obtained by measuring and sampling the modulator output and performing calculation using the optical modulator output values and corresponding dither tone values. There are other embodiments as well.

Off quadrature mach-zehnder modulator biasing

In one embodiment, a centralized controller maintains a plurality of hierarchical behavioral modules of a behavioral model, and distributes initial behavioral modules to data plane entities to cause them to apply the initial behavioral modules to data plane traffic. The centralized controller may then receive data from a particular data plane entity based on its having applied the initial behavioral modules to its data plane traffic. The centralized controller then distributes subsequent behavioral modules to the particular data plane entity to cause it to apply the subsequent behavioral modules to the data plane traffic, the subsequent behavioral modules selected based on the previously received data from the particular data plane entity. The centralized controller may then iteratively receive data from the particular data plane entity and distribute subsequently selected behavioral modules until an attack determination is made on the data plane traffic of the particular data plane entity.

Hierarchical activation of behavioral modules on a data plane for behavioral analytics

The present invention is directed to data communication system and methods. More specifically, various embodiments of the present invention provide a communication interface that is configured to transfer data at high bandwidth using PAM format(s) over optical communication networks. A feedback mechanism is provided for adjusting the transmission power levels. There are other embodiments as well.

Method and system for transmitter optimization of an optical PAM serdes based on receiver feedback

Growing community of inventors

Westlake Village, CA, United States of America

Hari Shankar