Charter Communications Operating, LLC

Micah W Labbee

Ethan J Wright

Matthew James Wright

Tyson Vinson

Chris Turner

Wystan Schmidt

Jason Page

Routing network traffic using router-terminated virtual private network (VPN) client sessions is disclosed herein. In one embodiment, a router computing device receives an indication of an association between a client computing device and VPN configuration data for a VPN, the indication comprising an identifier of the client computing device and the VPN configuration data. The router computing device binds a VPN client session instantiated by the router computing device to a network interface and implements a firewall rule to route network traffic to and from the client computing device via the network interface. The router computing device establishes a connection with the VPN using the VPN client session and the VPN configuration data. Finally, the router computing device receives network traffic for the client computing device and routes the network traffic via the network interface.

Routing network traffic using router-terminated virtual private network (VPN) client sessions

Various embodiments describe methods, systems, and devices for deploying an application associated with a user-selected container on a home-network router. Exemplary implementations may include receiving, at the home-network router from a remote server, container acquisition data including configuration information and rules for downloading the user-selected container. Also, initiating, by the home-network router, operation of application logic of the user-selected container in response to downloading the user-selected container from a remote container registry. Further, updating, by the home-network router, a reverse proxy maintained in the home-network router through application logic, wherein the reverse proxy is configured to forward requests from operation of the user-selected container to one or more remote servers; transmitting, from the home-network router to a remote computing device, a notification that the application associated with the user-selected container is deployed.

Deploying applications on home-network router

A VPN tunnel interface is instantiated within a router based on a tunnel network namespace. One or more virtual peers corresponding to the VPN tunnel interface and one or more virtual ethernet interfaces corresponding to the one or more virtual peers are instantiated. The tunnel network namespace is configured to route, based on a source address, network traffic from a specified client device to a specified virtual peer of the one or more virtual peers via the VPN tunnel interface. A connection is established between a client device and a VPN process of the router and a traffic flow is transported to and from the client device through a VPN tunnel via the VPN tunnel interface, the one or more virtual peers, and the one or more virtual ethernet interfaces.

Hardware address consistency management

A first router obtains a first network address of a first local area network (LAN) implemented by a second router and a first subnet mask associated with the first LAN. The first router causes the establishment of a secure communications channel with the second router. The first router determines that a computing device seeks to join the first LAN. The first router obtains an internet protocol (IP) address that has a same network address as the first network address and sends, to the computing device, the IP address and the first subnet mask for use by the computing device.

Extending a local area network securely

Obtaining location metadata for network devices using augmented reality (AR) is disclosed herein. In one embodiment, an AR computing device receives first user inputs indicating boundary points of a device region, and determines first spatial coordinates for each boundary point. The AR computing device next receives a second user input that indicates a network device within the device region, and determines second spatial coordinates for the network device. The AR computing device may also correlate the network device with a known connected network device. The AR computing device then transmits, to a server computing device, first metadata that includes the first spatial coordinates and an identifier of the device region, and second metadata that includes the second spatial coordinates and an identifier of the indicated network device. In some embodiments, the metadata may be employed, e.g., to generate a floorplan visualization and/or a signal strength map of the device region.

Obtaining location metadata for network devices using augmented reality

Event-driven Internet of Things (IoT) abstraction using rules is disclosed herein. In one embodiment, a network computing device that provides an IoT management (IoTM) service is communicatively coupled to an IoT device. The IoTM service receives multiple rules, each of which comprises an event identifier that identifies an event that the IoT device is capable of emitting, and an action identifier that identifies an action to be performed by the IoTM service (e.g., a command to be issued to the IoT device or an operation to be performed by the IoTM service). Upon receiving a first event emitted by the IoT device, the IoTM service identifies a first rule of the plurality of rules based on a first event identifier of the first rule that matches the first event. The IoTM service then executes a first action, wherein a first action identifier of the first rule identifies the first action.

Event-driven internet of things (IoT) abstraction using rules

Disclosed herein are methods and apparatus for continuous integration testing of network access devices. A testing platform includes a virtual environmental library and a processor. The processor executes a test code, where the test code in cooperation with the virtual environmental library generates a virtual environment for testing a network access device loaded with a device code, the virtual environment includes virtual clients, a virtual service provider, and emulates communication interfaces and network message behavior for the virtual clients and the virtual service provider as perceived by the network access device, exercises the device code and the network access device by instructing the virtual clients and the virtual service provider to engage the network access device to perform defined activities, captures events in response to performance of the defined activities, evaluates the captured events against expected events, and outputs results including the captured events and pass/fail determinations.

Growing community of inventors

Aurora, CO, United States of America

Micah W Labbee