← Back
Home › Systems › Networking and edge

enterprise-wlan

controller- or cloud-managed enterprise Wi-Fi with RF management, roaming and 802.1X

Cisco Catalyst/Meraki, HPE Aruba Networking, Juniper Mist

SystemTechniques · 8Primitives · 28 enterprise-wlan Config distributiondistributed · medium: A control plane pushes versioned resource changes over long-lived streams; each node validates, ACKs or NACKs and keeps its last good copy, so a bad change stops at a canary.›Graph coloringgraphs · medium: Greedy/DSatur colouring for conflict-free assignment such as radio channelsActive queue managementnetworking · medium: RED, CoDel and PIE: drop or ECN-mark early to keep switch and router queues shortEap 8021x authenticationsecurity · medium: 802.1X port access: supplicant, authenticator and RADIUS server run EAP methods (EAP-TLS, PEAP) and derive per-session keysLink adaptationsignal-processing · medium: Choose modulation and coding from channel quality with outer-loop BLER controlWatch notificationsdistributed · medium: A store numbers every write; clients list at revision R, then watch from R+1 and receive an ordered change stream with no gap, no duplicate, and a resume point.›Channel estimationsignal-processing · medium: Pilot-based LS/MMSE channel estimation and interpolation across time and frequencyDeep packet inspectionnetworking · low: Classify flows by payload/SNI/protocol signatures for application-aware policyPacket encapsulationnetworking · low: IP-in-IP, GRE, GUE, VXLAN and Geneve tunnelling headers and MTU effectsAEAD (AES-GCM, ChaCha20-Poly1305)security · low: Authenticated encryption that encrypts and detects tampering in one call; the only kind of symmetric encryption you should use.›Password-authenticated key exchange…security · low: Both sides blind a Diffie-Hellman message with a password-derived group element, so an attacker gets one guess per run and nothing to brute-force offline.›Rogue ap detectionsecurity · low: Classify observed access points as authorised, neighbour or rogue by SSID/BSSID lists and correlation with wired-side MAC sightingsAirtime fairnesssignal-processing · low: Wi-Fi scheduling by airtime instead of packets so slow clients do not starve fast onesBeamformingsignal-processing · low: Phased-array weights that steer radio energy toward a receiver; per-client steering vectorsClient steeringsignal-processing · low: Band and AP steering plus fast roaming (802.11k/v/r) to move clients to the best radioDelta encodingcompression · low: Store differences between consecutive values instead of the values, turning sorted IDs, timestamps and counters into small numbers that pack into few bits.›Message sequence numbersdistributed · low: A per-stream counter on every message lets the receiver detect loss, duplicates and reordering, ack cheaply and resume after reconnect with "send from N".›Grpc protocolnetworking · low: GRPC framing over HTTP/2: unary and streaming RPCs, deadlines, statusd-ary heapdata-structures · low: Array heap with d children per node (d = 4 typical): half the binary heap's depth, siblings in one cache line, faster priority queues.›BFS and DFSgraphs · low: The two basic graph traversals; BFS gives hop distances and levels, DFS gives discovery/finish order for cycles, components and topological order.›Fair queuingnetworking · low: Deficit round robin / weighted fair queuing to share capacity among tenants or flowsPacket header parsingnetworking · low: Parse graph state machines for Ethernet, IP, TCP and UDP headers in hardware and softwarePRNGs (PCG, xoshiro)numerics · low: Small, fast, statistically strong non-cryptographic generators: PCG32 and xoshiro256**, with seeding, parallel streams and unbiased ranges.›+ 1 more techniques+ 12 more primitives

Similar systems

Share the most building blocks with this one.

wifi-mesh 50 %sd-wan 18 %