An example computing system includes: a hardware platform having a central processing unit (CPU), a memory, a first network interface controller (NIC) coupled to a first network, and a second NIC coupled to a second network; software executing on the hardware platform, the software including a hypervisor and a virtual machine (VM) managed by the hypervisor, the software including first software executing in the VM and configured to send a packet to a device, the software including a virtual switch executing in the hypervisor; wherein the virtual switch is configured to receive the packet from the first software, insert a sequence number in the packet, duplicate the packet into a first packet and a second packet, send the first packet to the device over the first network through the first NIC, and send the second packet to the device over the second network through the second NIC.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
Cloning a cloud-agnostic deployment is described herein. One example method includes receiving modifications to an existing deployment created using a blueprint in a virtualized environment, and performing a deployment clone operation responsive to receiving a request to clone the deployment. The deployment clone operation can include creating an image associated with a virtual computing instance (VCI) of the deployment, creating a snapshot associated with a disk of the deployment, generating a clone blueprint based on the image and the snapshot, and deploying the clone blueprint in the virtualized environment.
This disclosure is directed to methods and system for intelligent roaming of user equipment (“UE”) of a home network onto a visited network. The methods and systems monitor performance of voice and data services for UEs in coverage areas of edge cell sites of the home network. The methods and systems determine which UEs in the coverage areas of the edge cell sites to roam on the visited network based on decreases in voice and data services. The UEs in the coverage areas selected for roaming are pushed to roam on the visited network by sending a signal that instructs selected UEs to switch into roaming mode while the UEs are still in the coverage areas of the edge cell sites.
Described herein are systems, methods, and software to enhance network traffic management. In one implementation, a first host identifies a packet to be transferred from a first virtual machine on the first host to a second virtual machine on a second host. In response to identifying the packet, the first host identifies a source logical port for the first virtual machine, and transferring a communication to the second host, wherein the communication encapsulates the data packet and the source logical port. Once the packet is received by the second host, the second host may use the source logical port to determine a forwarding action for the packet.
Some embodiments provide a novel method for dynamically processing data message flows using different non-uniform memory access (NUMA) nodes of a processing system. Each NUMA node includes a memory and processors that can access data other memories of other NUMA nodes. A load balancing application associated with a first NUMA node receives flows destined for an endpoint application. The flows are assigned to the first NUMA node to be forwarded to the endpoint application. The load balancing application monitors a central processing (CPU) usage of the first NUMA node to determine whether the CPU usage of the first NUMA node exceeds a particular threshold. When the CPU usage of the first NUMA node exceeds the particular threshold, the load balancing application reassigns at least a subset of the flows to the second NUMA node for processing.
Policies are defined for a container cluster that is configured by a first software defined network (SDN) controller cluster. A second SDN controller cluster for defining service policies that are not defined by the first SDN controller cluster receives, from a set of one or more adapters deployed in the container cluster for the second SDN controller cluster, resource identifiers for several resources of the container cluster. The second SDN controller cluster uses the resource identifiers to define a set of service policies. Then, the second SDN controller cluster distributes the set of service policies to a set of network elements to enforce the set of service policies on data messages associated with machines deployed in the container cluster configured by the first SDN controller cluster.
H04L 41/0895 - Configuration de réseaux ou d’éléments virtualisés, p. ex. fonction réseau virtualisée ou des éléments du protocole OpenFlow
H04L 41/0894 - Gestion de la configuration du réseau basée sur des règles
H04L 41/122 - Découverte ou gestion des topologies de réseau des topologies virtualisées, p. ex. les réseaux définis par logiciel [SDN] ou la virtualisation de la fonction réseau [NFV]
7.
GENERATING INSTALLATION IMAGES BASED UPON DPU-SPECIFIC CAPABILITIES
Disclosed are various embodiments provisioning a data processing unit in a host machine. There can be multiple data processing units within the host machine with varying hardware or software requirements for an installation image that can be utilized to provision the device. Multiple installation images can be generated for different data processing units having varying requirements in a heterogeneous environment.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
Example methods and systems for health-aware overlay packet forwarding are described. In one example, a first computer system may monitor multiple paths between a first tunnel endpoint (TEP) group and a second TEP group. The first computer system may update health information to indicate that at least a first path is healthy, and a second path is unhealthy. In response to detecting an egress packet that is associated with a packet flow, the first computer system may map the egress packet to the first path instead of the second path based on the health information. The first computer system may generate and forward an encapsulated packet along the first path towards the second computer system, wherein the encapsulated packet includes the egress packet and an outer header that is addressed from a first TEP to a second TEP associated with the first path.
An example computer includes: a hardware platform including a memory, a central processing unit (CPU) having a first cache for the memory, and a storage device, the storage device configured to store a second cache for a remote storage system accessible by the computer over a network; first software executing on the hardware platform and configured to maintain metadata in the memory for the second cache, the metadata including a table having rows, each of the rows controlling multiple entries in the second cache, each of the rows having a first size, the first size less than or equal to a second size of entries in the first cache; and second software executing on the hardware platform and configured to issue a read or write transaction for an object managed by the remote storage system.
A computer system is configured to schedule tasks to be performed by a plurality of accelerators including a first accelerator and a second accelerator, by performing the steps of: receiving a plurality of tasks; determining, for each of the tasks, a time period during which the first accelerator would be expected to consume maximum power while performing the task; determining, for each of the tasks, a time period during which the second accelerator would be expected to consume maximum power while performing the task; scheduling the tasks across the first and second accelerators according to the determined time periods of maximum power consumption, wherein based on the scheduling, there is no overlap between time periods for maximum power consumption in the first accelerator and time periods for maximum power consumption in the second accelerator; and instructing the first and second accelerators to perform the tasks according to the scheduling.
An example computer includes: a hardware platform having a central processing unit (CPU), a memory, and a hardware clock; a hypervisor executing on the CPU and managing the hardware platform; a first virtual machine (VM) supported by the hypervisor and having a passthrough connection to the hardware clock; first guest software executing in the first VM, the first guest software including a first system clock synchronized by communication with the hardware clock via the passthrough connection; a second VM supported by the hypervisor; and second guest software executing in the second VM, the second guest software including a second system clock synchronized with the first system clock via a first portion of the memory shared between the first VM and the second VM, the first portion of the memory coordinated by the hypervisor.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
G06F 1/12 - Synchronisation des différents signaux d'horloge
Some embodiments provide a method of performing load balancing on client traffic sent to a cluster of servers that are associated with a common network address (e.g., for a VIP address associated with a service provided by the cluster of servers). The method assigns a cluster of two or more transparent load balancers to the common network address associated with the server cluster. The method configures at least two of these transparent load balancers as active transparent load balancers that concurrently (1) receive data message flows sent by clients directed to the common network address, (2) select one of the servers for each flow, and (3) forward each flow to the server selected for the flow without modifying a source network address (e.g., IP network address) of the flow.
This disclosure relates generally to creating and managing cloud infrastructure, and more specifically, integrating one or more cloud infrastructure tools for building cloud infrastructures. An example method includes, receiving a request to deploy a cloud infrastructure on a cloud service provider based on a cloud template of the cloud management platform; transmitting configuration instructions to a container orchestration platform for execution on one or more containers running on the container orchestration platform, the configuration instructions directing the one or more containers to deploy the cloud infrastructure; receiving a deployment state of the cloud infrastructure on the cloud service provider from the container orchestration platform following execution of the configuration instructions; and reporting a status of the cloud infrastructure based on the deployment state.
A deployment system provides the ability to deploy a multi-node distributed application, such as a cloud computing platform application that has a plurality of interconnected nodes performing specialized jobs. The deployment system may update a currently running cloud computing platform application according to a deployment manifest and a versioned release bundle that includes jobs and application packages. The deployment system determines changes to the currently running cloud computing platform application and distributes changes to each job to deployment agents executing on VMs. The deployment agents apply the updated jobs to their respective VMs (e.g., launching applications), thereby deploying an updated version of cloud computing platform application.
G06F 8/658 - Mises à jour par incrémentMises à jour différentielles
G06F 8/71 - Gestion de versions Gestion de configuration
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
H04L 41/0806 - Réglages de configuration pour la configuration initiale ou l’approvisionnement, p. ex. prêt à l’emploi [plug-and-play]
H04L 47/70 - Contrôle d'admissionAllocation des ressources
H04L 67/00 - Dispositions ou protocoles de réseau pour la prise en charge de services ou d'applications réseau
H04L 67/10 - Protocoles dans lesquels une application est distribuée parmi les nœuds du réseau
Some embodiments provide a method for implementing a logical router of a logical network at a first Pod executing on a first node of a Kubernetes cluster to implement data message forwarding for the logical router. The method receives a data message for processing by the logical router. The method determines that the data message requires layer 7 (L7) service processing at the logical router. The method selects a second Pod from multiple Pods that perform L7 service for the logical router. Each of the Pods executes on a different node of the cluster. The method forwards the data message to the second Pod via a layer 2 (L2) construct that connects the first and second Pods.
An example apparatus includes a hardware platform having arithmetic circuits and a memory, the memory configured to store, at a first precision, first compressed parameters of a machine learning (ML) model; a network interface controller; and a controller, supported by the hardware platform, configured to: decompress, from the memory through an increase in precision to a second precision, the first compressed parameters to obtain decompressed parameters; control the arithmetic circuits to train, using arithmetic operations, the ML model and update the decompressed parameters; compress, using quantization and reduction in precision to the first precision, the decompressed parameters as updated to obtain second compressed parameters; send, using the network interface controller, the second compressed parameters over a network to a server; and update the first compressed parameters in the memory in response to data received, through the network interface controller, from the server over the network.
A computer system including a first computer and a second computer, wherein the first computer is configured to access data stored in a memory system remotely from the first and second computers, by performing the steps of: determining a first key associated with first data that is stored in the memory system; determining, based on the first key, to transmit to the second computer, a request for a first reference to the first data, and then transmitting the request for the first reference to the second computer; receiving the first reference from the second computer, which the second computer determines by using the first key to locate a first key-reference pair in the memory system and then reading the first reference therefrom; and reading the first data directly from the memory system using the first reference received from the second computer to locate a memory address of the first data.
Example methods and systems for congestion control in a distributed training environment are described. In one example, a computer system may obtain model information associated with a model that is being trained by multiple worker nodes. Based on the model information, the computer system may generate a first payload portion that is non-trimmable, and a second payload portion that is trimmable. The computer system may generate a trimmable payload information that includes the first payload portion and the second payload portion. The trimmable payload information may be forwarded towards a destination. In response to determination that congestion control is required, an intermediate network device may generate and forward trimmed payload information towards the destination. The trimmed payload information may include the first payload portion but excludes at least some of the second payload portion.
A computer is configured to execute network file system (NFS) client software, and issue NFS commands to an NFS server along with checksums that are used by the NFS server to verify the integrity of remote procedure call (RPC) packets that include the NFS commands, by performing the steps of: computing a first checksum of a first RPC packet by applying a checksum algorithm to the first RPC packet, wherein the first RPC packet includes a first NFS packet, the first NFS packet including an NFS command to be performed by the NFS server; inserting the first checksum into the first RPC packet; creating a first transmission control protocol (TCP) packet that includes the first RPC packet having the first checksum inserted therein; and transmitting the first TCP packet to the NFS server over a network using a network interface controller (NIC).
H04L 1/00 - Dispositions pour détecter ou empêcher les erreurs dans l'information reçue
H04L 67/1097 - Protocoles dans lesquels une application est distribuée parmi les nœuds du réseau pour le stockage distribué de données dans des réseaux, p. ex. dispositions de transport pour le système de fichiers réseau [NFS], réseaux de stockage [SAN] ou stockage en réseau [NAS]
System and method for creating and managing trusted execution environments (TEEs) using different underlying hardware TEE mechanisms use a virtual secure enclave device which runs in a virtualized environment in a computer system. The device enables an enclave command transmitted to the virtual secure enclave device to be retrieved and parsed to extract an enclave operation to be executed. A TEE backend module is used to interact with a particular hardware TEE mechanism among those available in the computer system. The module ensures the enclave operation for the software process is executed by the particular hardware TEE mechanism, or the TEE scheme based on a particular hardware TEE mechanism.
G06F 21/53 - Contrôle des utilisateurs, des programmes ou des dispositifs de préservation de l’intégrité des plates-formes, p. ex. des processeurs, des micrologiciels ou des systèmes d’exploitation au stade de l’exécution du programme, p. ex. intégrité de la pile, débordement de tampon ou prévention d'effacement involontaire de données par exécution dans un environnement restreint, p. ex. "boîte à sable" ou machine virtuelle sécurisée
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
Some embodiments provide a novel method for forwarding data messages between first and second host computers. To send, to a first machine executing on the first host computer, a flow from a second machine executing on the second host computer, the method identifies a destination network address of the flow. The method uses the identified destination network address to identify a particular tunnel endpoint group (TEPG) including a particular set of one or more tunnel endpoints (TEPs) associated with a particular non-uniform memory access (NUMA) node of a set of NUMA nodes of the first host computer. The particular NUMA node executes the first machine. The method selects, from the particular TEPG, a particular TEP as a destination TEP of the flow. The method sends the flow to the particular TEP of the particular NUMA node of the first host computer to send the flow to the first machine.
Some embodiments provide a method for transmitting data at a network interface controller (NIC) of a computer that operates as a server. The computer includes multiple storage devices. The method receives a request from a client device for a particular file. The method translates the particular file into a memory location corresponding to a particular one of the storage devices at the computer. The method transmits the requested file from the particular storage location to the client device.
Processor-to-processor communication is provided by using a non-cache-coherent disaggregated memory. The communication between a first processor and a second processor uses a pipe with three circular buffers (rings): a first ring at a first memory of a first computer that includes the first processor, a second ring at a second memory of a second computer that includes the second processor, and a third (shared) ring at the disaggregated memory that is shared by the first and second processors. The first processor uses the pipe to write a descriptor (containing the data and an ownership value) to the shared ring, and the second processor performs a polling process to determine if the ownership value corresponds to the second processor so that the second processor can act on (e.g., copy and modify) the data in the descriptor.
An example method of installing a first software installation bundle (SIB) in a hypervisor of a computer includes: receiving, by the hypervisor, the first SIB, the first SIB having a first digital signature created using a first public-private key pair and a first certificate created using the first public-private key pair; receiving, by the hypervisor, a second SIB, the second SIB having a payload being the first certificate, the second SIB having a second digital signature created using a second public-private key pair and a second certificate created using the second public-private key pair; installing, by the hypervisor, the second SIB by verifying the second digital signature and adding the first certificate to a key store of the hypervisor; and installing, by the hypervisor, the first SIB by verifying trust of the first certificate in the key store and verifying the first digital signature.
G06F 21/57 - Certification ou préservation de plates-formes informatiques fiables, p. ex. démarrages ou arrêts sécurisés, suivis de version, contrôles de logiciel système, mises à jour sécurisées ou évaluation de vulnérabilité
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
H04L 9/00 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité
H04L 9/32 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité comprenant des moyens pour vérifier l'identité ou l'autorisation d'un utilisateur du système
25.
DATA PLANE ISOLATION FOR VIRTUAL MACHINE (VM) MOBILITY OPERATIONS
Techniques for implementing data plane isolation for VM mobility operations are provided. In one set of embodiments, these techniques include creating a virtual network path between a source host system and a destination host system participating in a VM mobility operation, which allows the host systems to exchange data for carrying out the operation without exposing their physical IP addresses to each other and without requiring the use of intermediate proxies. In certain embodiments, the virtual network path can be dynamically established upon initiation of the VM mobility operation and dynamically rolled back upon operation completion, thereby reducing the overhead of virtual path management.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
26.
Protocol Switching and Secure Sockets Layer (SSL) Cross-Wiring to Enable Inter-Network Resource Connectivity
Aspects of protocol switching and cross-wiring to enable inter-network connectivity are described. For example, a transporter system including a transporter server and a transporter client can securely connect applications to resources in differing networked environments (e.g., clouds and/or data centers). The transporter client may establish data channels as secure socket layer (SSL) connections (e.g., Secure Websockets (WSS)) between a resource in one networked environment and a transporter server that is in communication via a proxy channel with an initiator device in another networked environment. Upon completing the build of a data path between the initiator device and the resource, the handling protocol of the data channels that are established as SSL connections can be modified to a basic socket-level channel (e.g., transmission control protocol, user datagram protocol, etc.) to permit socket-level data stream communications without restrictions.
An example device includes: a first system configured to implement a model having first parameters, generate gradients for the first parameters in response to training the model on first data sets, and compress the gradients based on second parameters; and circuits in the first system, the circuits including a network interface controller. The first system is further configured to receive updates to the second parameters from a second system through the network interface controller coupled to a network, send the gradients as compressed to a third system through the network interface controller, and apply the updates to the second parameters to adjust resource consumption of at least one of the circuits.
Some embodiments provide a method for a data message processing device that includes multiple network interfaces associated with at least two different non-uniform memory access (NUMA) nodes. The method receives a data message at a first network interface associated with a particular one of the NUMA nodes. Based on processing of the data message, the method identifies multiple equivalent output options for the data message. Each of the output options is associated with a respective one of the NUMA nodes. The method selects an equivalent output option for the data message that is associated with the particular NUMA node.
A source host computer including a central processing unit (CPU), an accelerator, and memory, is configured to migrate a virtual machine (VM) that uses the accelerator to a destination host computer, by performing the steps of: requesting a driver of the accelerator to save first state information associated with the VM in a first migration buffer of the memory that is accessible to both the CPU and the accelerator, wherein the accelerator then performs a direct memory access (DMA) operation to save the first state information in the first migration buffer; extracting, using the CPU, the first state information from the first migration buffer; and transmitting the extracted first state information to the destination host computer.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
G06F 9/48 - Lancement de programmes Commutation de programmes, p. ex. par interruption
30.
TRANSITIONING HOSTS TO DESIRED STATE-BASED MANAGEMENT
A management computer is configured to manage a desired state for hypervisors of a plurality of host computers, by performing the steps of: retrieving from each of the host computers, a plurality of binary files of a hypervisor executing on the host computer; for the hypervisor of each of the host computers, identifying installed software from the retrieved plurality of binary files, including: (1) a version of a base software image of the hypervisor, and (2) one or more of: a driver of the hypervisor, firmware of the hypervisor, and a software component for a software solution of the hypervisor; and in response to a selection of the identified installed software for the hypervisor of a first host computer: generating a desired state document including the selected installed software; and determining, for each of the host computers, a compliance status of the host computer with the generated desired state document.
A host computer is configured to issue one or more unmap commands to a file system of a storage device, the file system being shared by a plurality of host computers including the host computer, by performing the steps of: acquiring unmap privilege information from the storage device, the unmap privilege information indicating whether or not an unmap privilege is available to the host computer; in response to determining that the unmap privilege is available, transmitting a request to update an unmap privilege file stored in the storage device to indicate that the host computer has the unmap privilege; and then issuing to the file system, the one or more unmap commands to deallocate storage space from one or more files of the file system.
Techniques for migrating a workload between two container clusters (i.e., source and destination container clusters) that use different processor architectures are provided. In one set of embodiments, these techniques involve implementing a migration container cluster that (1) creates a backup of the workload from the source container cluster, where the backup includes metadata regarding one or more objects or resources of the workload, and (2) restores the backup on the destination container cluster, where the restoring causes a worker node of the destination container cluster to automatically retrieve, from an image repository, a container image for the workload that is specific to the second processor architecture and deploy the container image as a running container on the worker node.
G06F 9/50 - Allocation de ressources, p. ex. de l'unité centrale de traitement [UCT]
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
Systems and methods for exchanging network information between member clusters include configuring a gateway pool of a member cluster, the gateway pool comprising a plurality of gateway nodes, the member cluster comprising the plurality of gateway nodes and one or more nodes, configuring a gateway node of the plurality of gateway nodes as an active gateway node for the member cluster, writing member cluster information to a storage, the member cluster information indicating address information of the gateway node, reading second member cluster information from the storage, the second member cluster information indicating address information of a gateway node of a second member cluster, establishing a tunnel between the gateway node and the second gateway node based on the second member cluster information, and communicating network traffic from at least one node of the member cluster to at least one node of the second member cluster via the tunnel.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
34.
PARSING LOGICAL NETWORK DEFINITION FOR DIFFERENT SITES
Some embodiments provide a method for distributing a service rule that is to be enforced across a first set of sites and that is defined by reference to a group identifier that identifies a group of machines. The method distributes the service rule to each site in the first set of sites. The method identifies at least one site in the first set of sites that is not in a second set of sites that has already received a definition of the group. The method distributes the group definition to each identified site in the first set of sites that has not already received the definition of the group.
G06F 11/34 - Enregistrement ou évaluation statistique de l'activité du calculateur, p. ex. des interruptions ou des opérations d'entrée–sortie
G06F 16/25 - Systèmes d’intégration ou d’interfaçage impliquant les systèmes de gestion de bases de données
G06F 16/27 - Réplication, distribution ou synchronisation de données entre bases de données ou dans un système de bases de données distribuéesArchitectures de systèmes de bases de données distribuées à cet effet
H04L 41/0893 - Affectation de groupes logiques aux éléments de réseau
H04L 41/0894 - Gestion de la configuration du réseau basée sur des règles
H04L 41/0895 - Configuration de réseaux ou d’éléments virtualisés, p. ex. fonction réseau virtualisée ou des éléments du protocole OpenFlow
H04L 41/122 - Découverte ou gestion des topologies de réseau des topologies virtualisées, p. ex. les réseaux définis par logiciel [SDN] ou la virtualisation de la fonction réseau [NFV]
H04L 41/22 - Dispositions pour la maintenance, l’administration ou la gestion des réseaux de commutation de données, p. ex. des réseaux de commutation de paquets comprenant des interfaces utilisateur graphiques spécialement adaptées [GUI]
H04L 41/40 - Dispositions pour la maintenance, l’administration ou la gestion des réseaux de commutation de données, p. ex. des réseaux de commutation de paquets en utilisant la virtualisation des fonctions réseau ou ressources, p. ex. entités SDN ou NFV
H04L 43/0811 - Surveillance ou test en fonction de métriques spécifiques, p. ex. la qualité du service [QoS], la consommation d’énergie ou les paramètres environnementaux en vérifiant la disponibilité en vérifiant la connectivité
H04L 61/103 - Correspondance entre adresses de types différents à travers les couches réseau, p. ex. résolution d’adresse de la couche réseau dans la couche physique ou protocole de résolution d'adresse [ARP]
H04L 67/1095 - Réplication ou mise en miroir des données, p. ex. l’ordonnancement ou le transport pour la synchronisation des données entre les nœuds du réseau
Some embodiments provide a method of forwarding data messages to a machine that executes on a host computer and has an associated virtual network interface controller (VNIC) also executing on the host computer. The method retrieves data messages from a queue associated with the VNIC and stores these data messages in a first set of buffer data stores associated with the VNIC. When the first buffer set reaches a threshold congestion level, the method stores data messages subsequently retrieved from the VNIC queue in a second set of buffer data stores associated with the VNIC. In some embodiments, a set of one or more processes executing on the machine retrieves the data messages stored in the buffer sets for processing by these processes or other processes.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
36.
FAILOVER MIGRATION FOR VIRTUAL NETWORK INTERFACE CONTROLLERS BETWEEN DATA PROCESSING UNITS
A method of migrating states of virtual network interface controllers (vNICs) of virtual computing instances between data processing units (DPUs), includes the steps of: in response to detecting a failure in a first DPU, transmitting a request to the first DPU for a state of a first vNIC of a first virtual computing instance, wherein the state of the first vNIC includes memory locations at which network packets of the first vNIC are to be stored by one of the first vNIC and a first virtual function (VF) of the first DPU for further processing by the other; and transmitting the state of the first vNIC, received from the first DPU in response to the request, to a second DPU, and instructing a second VF of the second DPU to store and process network packets of the first vNIC based on the state of the first vNIC.
G06F 11/20 - Détection ou correction d'erreur dans une donnée par redondance dans le matériel en utilisant un masquage actif du défaut, p. ex. en déconnectant les éléments défaillants ou en insérant des éléments de rechange
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
37.
Migration Precheck Workflow for Hyper-Converged Infrastructure in Hybrid Cloud Deployment
A method of migrating an executing virtual machine (VM) from a source host computer to a destination host computer, includes the steps of: issuing a first instruction to the source host computer to instantiate a dummy VM having a plurality of network configurations that match a corresponding plurality of network configurations of a target VM; issuing second instructions to the source and destination host computers to migrate the dummy VM from the source host computer to the destination host computer; determining that the dummy VM that has been migrated to the destination host computer is able to communicate with the target VM; and in response to determining that the migrated dummy VM is able to communicate with the target VM, issuing third instructions to the source and destination host computers to migrate the target VM from the source host computer to the destination host computer.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
38.
LIFECYCLE AND RECOVERY FOR VIRTUALIZED DPU MANAGEMENT OPERATING SYSTEMS
Disclosed are various examples of lifecycle and recovery management for virtualized data processing unit (DPU) management operating systems. A DPU device executes a DPU management hypervisor that communicates with a management service over a network. The DPU management hypervisor virtualizes DPU hardware resources and passes control of the virtualized DPU hardware resources to a DPU management operating system (OS) virtual machine (VM). The DPU management hypervisor maintains control of a management network interface card (NIC) of the DPU device.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
39.
Elastic external storage for diskless hosts in a cloud
An example method of managing external storage for a software-defined data center (SDDC) executing in a cloud is described. The method includes receiving, at a storage manager from the SDDC, requests to consume capacity of the external storage, the external storage allocated for the SDDC according to a cloud subscription; determining, by the storage manager based on a batch of the requests in combination, an amount by which to expand a current capacity of the external storage to a target capacity comprising a sum of an expanded capacity and the current capacity; executing, by the storage manager in cooperation with a storage server of the external storage, a first activity to obtain the target capacity of the external storage; and sending, from the storage manager to the SDDC, at least one identifier that enables software executing in the SDDC to use the expanded capacity for the batch of requests.
G06F 3/00 - Dispositions d'entrée pour le transfert de données destinées à être traitées sous une forme maniable par le calculateurDispositions de sortie pour le transfert de données de l'unité de traitement à l'unité de sortie, p. ex. dispositions d'interface
G06F 3/06 - Entrée numérique à partir de, ou sortie numérique vers des supports d'enregistrement
40.
CELL SITES MONITORING AND/OR MANAGEMENT IN 5G RADIO-ACCESS NETWORKS
An example method for managing a cell site in a 5G RAN may include determining a physical infrastructure layer, a container orchestration platform on the physical infrastructure layer, and a CNF instance associated with the 5G RAN in the container orchestration platform based on a site identifier associated with the cell site. Based on the physical infrastructure layer, the container orchestration platform, and the CNF instance, the method may include building a logical site resource map representing topological information of the cell site. Further, the method may include monitoring and/or managing the cell site using the logical site resource map.
H04L 41/122 - Découverte ou gestion des topologies de réseau des topologies virtualisées, p. ex. les réseaux définis par logiciel [SDN] ou la virtualisation de la fonction réseau [NFV]
41.
HARDWARE ACCELERATION TECHNIQUES USING FLOW SELECTION
In some embodiments, a method receives a packet for a flow associated with a workload. Based on an indicator for the flow, the method determines whether the flow corresponds to one of an elephant flow or a mice flow. Only when the flow is determined to correspond to an elephant flow, the method enables a hardware acceleration operation on the packet. The hardware acceleration operation may include hardware operation offload, receive side scaling, and workload migration.
H04L 69/16 - Implémentation ou adaptation du protocole Internet [IP], du protocole de contrôle de transmission [TCP] ou du protocole datagramme utilisateur [UDP]
H04L 69/22 - Analyse syntaxique ou évaluation d’en-têtes
42.
GENERATING NETWORK FLOW PROFILES FOR COMPUTING ENTITIES
A method for creating a flow profile is provided. The method identifies a first plurality of flow measurements, each of which corresponding to one of a plurality of flows exchanged between a computing entity and a service during a first time period. The method, for each of a first plurality of buckets each of which has a pair of lower and upper bounds, increments a counter of the corresponding bucket for each of the plurality of flow measurements that falls within the pair of bounds of that bucket. The method generates a second plurality of buckets by merging and splitting at least some of the first plurality of buckets, identifies a second plurality of flow measurements for the computing entity during a second time period, and distributes these measurements into the second plurality of buckets. The method generate the flow profile by aggregating the first and second pluralities of buckets.
H04L 43/065 - Génération de rapports liés aux appareils du réseau
H04L 43/026 - Capture des données de surveillance en utilisant l’identification du flux
H04L 43/04 - Traitement des données de surveillance capturées, p. ex. pour la génération de fichiers journaux
H04L 43/062 - Génération de rapports liés au trafic du réseau
H04L 43/0876 - Utilisation du réseau, p. ex. volume de charge ou niveau de congestion
H04L 43/20 - Dispositions pour la surveillance ou le test de réseaux de commutation de données le système de surveillance ou les éléments surveillés étant des entités virtualisées, abstraites ou définies par logiciel, p. ex. SDN ou NFV
43.
REMOTE EXECUTIONS OF HETEROGENEOUS INFRASTRUCTURE AS CODE RUNTIMES IN A CLOUD ENVIRONMENT
An example method of managing infrastructure in a cloud includes: receiving, at a remote worker from a cloud automation service, a task to be executed for managing the infrastructure, the remote worker executing in a customer environment that includes the infrastructure, the remote worker having a runtime, the cloud automation service executing external to the customer environment; retrieving, using first credentials obtained by the runtime from the customer environment, source code from a version control system executing in the customer environment; and executing, by the runtime, the source code to manage the infrastructure in the customer environment according to the task.
The present disclosure provides an approach for scaling the number of VNFs in a data center without scaling the number of control sessions between VNFs and a data center gateway. The approach includes opening a session between a VNF and a route server, rather than between the VNF and the gateway, when the VNF needs to send its connectivity information to the gateway. The VNF sends its connectivity information to the route server, and the route server forwards the connectivity information to the gateway. The gateway receives connectivity information of a plurality of VNFs in the data center from the route server rather than from each of the VNFs individually. The connectivity information is then used to send packets, by the gateway to a VNF, for processing. The packets are sent using three layers of networking: an underlay physical network, an overlay logical network, and a second overlay logical network.
An example method of offloading a compute task to an accelerator by an application executing in a host cluster includes: sending, by an application executing in an initiator host, the compute task to a virtual accelerator in the initiator host, the virtual accelerator paired with a hardware accelerator in a target host of the host cluster; forwarding, by the virtual accelerator, the compute task to the hardware accelerator in the target host over a network; and receiving, at the application via the virtual accelerator, a result of the compute task from the hardware accelerator over the network.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
G06F 12/1045 - Traduction d'adresses utilisant des moyens de traduction d’adresse associatifs ou pseudo-associatifs, p. ex. un répertoire de pages actives [TLB] associée à une mémoire cache de données
An example method of handling traffic for an existing connection of a virtual machine (VM) migrated from a source site to a destination site includes: receiving, at an edge server of the destination site, the traffic, the traffic being associated with a network flow; determining, by the edge server of the destination site, that a stateful service of the edge server does not have state for the network flow; sending, by the edge server of the destination site, a threshold number of packets of the traffic to a plurality of sites; receiving, at the edge server of the destination site, an acknowledgement from the source site that the source site has the state for the network flow; and creating, by the edge server of the destination site, a flow mapping to send the traffic associated with the network flow to the source site.
A computing environment can include a host system that maintains a guest system, and a hardware component configured to implement artificial intelligence (“AI”) methods of processing and analyzing date. The guest system can provide a virtual computing environment that receives a request to implement an AI application, and utilize a framework and a guest library to convert data from the AI application into an intermediate representation (“IR”). The host system can receive the IR with a virtual device (“VD”), and utilize an IR backend to translate the IR into hardware operations for the hardware component. Translated hardware operations can be provided to, and carried out by, the hardware component to provide an implementation of the AI application. Results of the hardware operations can be transmitted from the VD of the host system to a VD driver of the guest system, virtualizing the hardware component relative to the guest system.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
G06N 5/02 - Représentation de la connaissanceReprésentation symbolique
Some embodiments provide a two-tier DNS (Domain Name System) service for processing DNS requests. In some embodiments, the two-tier DNS service deploys first and second tiers of service machines, with the second-tier having several groups of service machines each of which is configured to resolve DNS requests for a different set of domain names than the other second-tier group(s). Each service machine in the first-tier is configured to identify the second-tier group responsible for each particular DNS request that the service machine receives for each particular domain name, and to forward the particular DNS request to the second-tier group that it identifies for the particular DNS request. The first-tier DNS service in some embodiments has only one group of service machines. Each first or second service machine group in some embodiments can have one or more service machines, and can be scaled up or down to add or remove service machines to the group (e.g., through an active/active layer 3 scaleout with BGP). In some embodiments, two different second-tier service groups can process DNS requests for two or more different FQDNs (fully qualified domain names) that are part of the same domain, and/or for two or more different FQDNs that are part of different domains.
H04L 61/4511 - Répertoires de réseauCorrespondance nom-adresse en utilisant des répertoires normalisésRépertoires de réseauCorrespondance nom-adresse en utilisant des protocoles normalisés d'accès aux répertoires en utilisant le système de noms de domaine [DNS]
H04L 67/1004 - Sélection du serveur pour la répartition de charge
49.
PROVISIONING NETWORK SERVICES IN A SOFTWARE DEFINED DATA CENTER
A novel method for dynamic network service allocation that maps generic services into specific configurations of service resources in a network is provided. An application that is assigned to be performed by computing resources in the network is associated with a set of generic services, and the method maps the set of generic services to the service resources based on the assignment of the application to the computing resources. The mapping of generic services is further based on a level of service that is chosen for the application, where the set of generic services are mapped to different sets of network resources according to different levels of services.
H04L 47/70 - Contrôle d'admissionAllocation des ressources
G06F 9/50 - Allocation de ressources, p. ex. de l'unité centrale de traitement [UCT]
H04L 41/50 - Gestion des services réseau, p. ex. en assurant une bonne réalisation du service conformément aux accords
H04L 41/5041 - Gestion des services réseau, p. ex. en assurant une bonne réalisation du service conformément aux accords caractérisée par la relation temporelle entre la création et le déploiement d’un service
H04L 41/5051 - Service à la demande, p. ex. définition et déploiement des services en temps réel
50.
AUTOMATED METHODS AND SYSTEMS THAT PROVIDE RESOURCE RECOMMENDATIONS FOR VIRTUAL MACHINES
The current document is directed to methods and systems that generate recommendations for resource specifications used in virtual-machine-hosting requests. When distributed applications are submitted to distributed-computer-system-based hosting platforms for hosting, the hosting requestor generally specifies the computational resources that will need to be provisioned for each virtual machine included in a set of virtual machines that correspond to the distributed application, such as the processor bandwidth, memory size, local and remote networking bandwidths, and data-storage capacity needed for supporting execution of each virtual machine. In many cases, the hosting platform reserves the specified computational resources and accordingly charges for them. However, in many cases, the specified computational resources significantly exceed the computational resources actually needed for hosting the distributed application. The currently disclosed methods and systems employ machine learning to provide accurate estimates of the computational resources for the VMs of a distributed application.
A system for optimizing network traffic management is provided. The system includes a plurality of data processing units (DPUs), each assigned an identifier and configured to process network traffic for associated virtual network interface cards (vNICs). The system also includes a vNIC placement handler configured to receive media access control (MAC) address information from the plurality of DPUs and execute a relocation of at least two vNICs to be directly associated with one of the plurality of DPUs without through an inter-DPU physical network based on mapping the MAC address information to the identifier. The system further includes a communication framework integrated with the vNIC placement handler to enable transmission of MAC address information from the plurality of DPUs to the vNIC placement handler and offload network traffic from the vNICs to corresponding one or more of the plurality of DPUs.
Some embodiments of the invention provide novel methods for facilitating a distributed SNAT (dSNAT) middlebox service operation for a first network at a host computer in the first network on which the dSNAT middlebox service operation is performed and a gateway device between the first network and a second network. The novel methods enable dSNAT that provides stateful SNAT at multiple host computers, thus avoiding the bottleneck problem associated with providing stateful SNAT at gateways and also significantly reduces the need to redirect packets received at the wrong host by using a capacity of off-the-shelf gateway devices to perform 1Pv6 encapsulation for 1Pv4 packets and assigning locally unique 1Pv6 addresses to each host executing a dSNAT middlebox service instance that are used by the gateway device.
A method for handling system calls during execution of an application over a plurality of nodes, each including processor and memory, and an application monitor and a runtime executed in the processor thereof, includes: establishing first threads in the runtime of a first node and establishing second threads in the runtime of a second node; determining by the application monitor of the first node, in response to a system call made by a first thread, that executing the system call involves resources present on the second node; sending by the application monitor of the first node, the system call and arguments of the system call to the second node for execution thereat; receiving by the application monitor of the first node, results of the system call from the second node; and returning by the application monitor of the first node, the results of the system call to the first thread.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
G06F 9/50 - Allocation de ressources, p. ex. de l'unité centrale de traitement [UCT]
G06F 9/52 - Synchronisation de programmesExclusion mutuelle, p. ex. au moyen de sémaphores
The disclosure herein describes deduplicating data chunks using chunk objects. A batch of data chunks is obtained from an original data object and a hash value is calculated for each data chunk. A first duplicate data chunk is identified using the hash value and a hash map. A chunk logical block address (LBA) of a chunk object is assigned to the duplicate data chunk. Payload data of the duplicate data chunk is migrated from the original data object to the chunk object, and a chunk map is updated to map the chunk LBA to a physical sector address (PSA) of the migrated payload data on the chunk object. A hash entry is updated to map to the chunk object and the chunk LBA. An address map of the original data object is updated to map an LBA of the duplicate data chunk to the chunk object and the chunk LBA.
Example methods and systems for virtual tunnel endpoint (VTEP) mapping for overlay networking are described. One example may involve a computer system monitoring multiple VTEPs that are configured for overlay networking. In response to detecting a state transition associated with a first VTEP from a healthy state to an unhealthy state, the computer system may identify mapping information that associates a virtualized computing instance with the first VTEP in the unhealthy state; and update the mapping information to associate the virtualized computing instance with a second VTEP in the healthy state. In response to detecting an egress packet from the virtualized computing instance to a destination, an encapsulated packet may be generated and sent towards the destination based on the updated mapping information. The encapsulated packet may include the egress packet and an outer header identifying the second VTEP to be a source VTEP.
In one set of embodiments, a computer system can receive a request to provision a virtual machine (VM) in a host cluster, where the VM is associated with a virtual graphics processing unit (GPU) profile indicating a desired or required framebuffer memory size of a virtual GPU of the VM. In response, the computer system can execute an algorithm that identifies, from among a plurality of physical GPUs installed in the host cluster, a physical GPU on which the VM may be placed, where the identified physical GPU has sufficient free framebuffer memory to accommodate the desired or required framebuffer memory size, and where the algorithm allows multiple VMs associated with different virtual GPU profiles to be placed on a single physical GPU in the plurality of physical GPUs. The computer system can then place the VM on the identified physical GPU.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
G06T 1/20 - Architectures de processeursConfiguration de processeurs p. ex. configuration en pipeline
A method for containerized workload scheduling can include monitoring network traffic between a first containerized workload deployed on a node in a virtual computing environment to determine affinities between the first containerized workload and other containerized workloads in the virtual computing environment. The method can further include scheduling, based, at least in part, on the determined affinities between the first containerized workload and the other containerized workloads, execution of a second containerized workload on the node on which the first containerized workload is deployed.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
H04L 41/0897 - Capacité à monter en charge au moyen de ressources horizontales ou verticales, ou au moyen d’entités de migration, p. ex. au moyen de ressources ou d’entités virtuelles
H04L 43/0876 - Utilisation du réseau, p. ex. volume de charge ou niveau de congestion
The current document is directed to an improved notification system for distributed applications. The new and improved notification system provides a notification-customization interface and a notification dashboard, accessible to users of the notification system through commonly available web browsers. The customization interface allows users to specify the types of notifications which the user desires, to specify the information to be included in the notifications, to specify the user devices to which notifications are to be transmitted, and to specify time ranges and/or relative times for notification transmission. The notification dashboard provides a dashboard interface for receiving, storing, and accessing stored notifications accessible to Internet-connected devices. In described implementations, the notification system employs an ontology to provide a common language for notification specification.
Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (I) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
H04L 41/0806 - Réglages de configuration pour la configuration initiale ou l’approvisionnement, p. ex. prêt à l’emploi [plug-and-play]
H04L 41/0816 - Réglages de configuration caractérisés par les conditions déclenchant un changement de paramètres la condition étant une adaptation, p. ex. en réponse aux événements dans le réseau
H04L 41/0893 - Affectation de groupes logiques aux éléments de réseau
H04L 41/0895 - Configuration de réseaux ou d’éléments virtualisés, p. ex. fonction réseau virtualisée ou des éléments du protocole OpenFlow
H04L 41/40 - Dispositions pour la maintenance, l’administration ou la gestion des réseaux de commutation de données, p. ex. des réseaux de commutation de paquets en utilisant la virtualisation des fonctions réseau ou ressources, p. ex. entités SDN ou NFV
H04L 41/5003 - Gestion des accords de niveau de service [SLA]Interaction entre l'accord de niveau de service et la qualité de service [QoS]
H04L 41/5054 - Déploiement automatique des services déclenchés par le gestionnaire de service, p. ex. la mise en œuvre du service par configuration automatique des composants réseau
H04L 45/00 - Routage ou recherche de routes de paquets dans les réseaux de commutation de données
H04L 45/302 - Détermination de la route basée sur la qualité de service [QoS] demandée
H04L 45/586 - Association de routeurs de routeurs virtuels
H04L 45/745 - Recherche de table d'adressesFiltrage d'adresses
H04L 47/125 - Prévention de la congestionRécupération de la congestion en équilibrant la charge, p. ex. par ingénierie de trafic
H04L 47/17 - Interaction entre les nœuds intermédiaires, p. ex. nœud après nœud.
H04L 47/19 - Commande de fluxCommande de la congestion au niveau des couches au-dessus de la couche réseau
H04L 47/2425 - Trafic caractérisé par des attributs spécifiques, p. ex. la priorité ou QoS pour la prise en charge de spécifications de services, p. ex. SLA
H04L 49/25 - Routage ou recherche de route dans une matrice de commutation
H04L 61/2592 - Traduction d'adresses de protocole Internet [IP] en utilisant la tunnelisation ou l'encapsulation
H04L 67/10 - Protocoles dans lesquels une application est distribuée parmi les nœuds du réseau
H04L 67/1001 - Protocoles dans lesquels une application est distribuée parmi les nœuds du réseau pour accéder à un serveur parmi une pluralité de serveurs répliqués
H04L 67/101 - Sélection du serveur pour la répartition de charge basée sur les conditions du réseau
H04L 67/51 - Découverte ou gestion de ceux-ci, p. ex. protocole de localisation de service [SLP] ou services du Web
H04L 67/56 - Approvisionnement des services mandataires
H04L 67/563 - Redirection de flux de réseau de données
H04L 67/60 - Ordonnancement ou organisation du service des demandes d'application, p. ex. demandes de transmission de données d'application en utilisant l'analyse et l'optimisation des ressources réseau requises
H04L 69/321 - Protocoles de communication inter-couches ou définitions d'unité de données de service [SDU]Interfaces entre les couches
H04L 69/324 - Protocoles de communication intra-couche entre entités paires ou définitions d'unité de données de protocole [PDU] dans la couche liaison de données [couche OSI 2], p. ex. HDLC
H04L 69/325 - Protocoles de communication intra-couche entre entités paires ou définitions d'unité de données de protocole [PDU] dans la couche réseau [couche OSI 3], p. ex. X.25
H04L 101/622 - Adresses de couche 2, p. ex. adresses de contrôle d'accès au support [MAC]
60.
IMPLEMENTING DEFINED SERVICE POLICIES IN A THIRD-PARTY CONTAINER CLUSTER
Some embodiments provide a method of implementing service rules for a container cluster that is configured by a first SDN controller cluster. The method registers for event notification from an application programming interface (API) server to receive notification regarding events associated with resources deployed in the container cluster. The method forwards to a second SDN controller cluster resource identifiers collected through the registration for resources of the container cluster. The second SDN controller cluster defines service policies that are not defined by the first SDN controller cluster. The method receives, from the second SDN controller cluster, service policies defined by the second SDN controller cluster based on the resource identifiers. The method distributes service rules defined based on the service policies to network elements in the container cluster to enforce on data messages associated with machines deployed in the container cluster configured by the first SDN controller cluster.
H04L 41/122 - Découverte ou gestion des topologies de réseau des topologies virtualisées, p. ex. les réseaux définis par logiciel [SDN] ou la virtualisation de la fonction réseau [NFV]
H04L 41/0894 - Gestion de la configuration du réseau basée sur des règles
61.
MEMORY-AWARE REQUEST PLACEMENT FOR VIRTUAL GPU ENABLED SYSTEMS
Disclosed are aspects of memory-aware placement in systems that include graphics processing units (GPUs) that are virtual GPU (vGPU) enabled. In some examples, graphics processing units (GPU) are identified in a computing environment. Graphics processing requests are received. A graphics processing request includes a GPU memory requirement. The graphics processing requests are processed using a graphics processing request placement model that minimizes a number of utilized GPUs that are utilized to accommodate the requests. Virtual GPUs (vGPUs) are created to accommodate the graphics processing requests according to the graphics processing request placement model. The utilized GPUs divide their GPU memories to provide a subset of the plurality of vGPUs.
G06F 9/50 - Allocation de ressources, p. ex. de l'unité centrale de traitement [UCT]
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
62.
RECREATING A SOFTWARE IMAGE FROM A HOST IN A VIRTUALIZED COMPUTING SYSTEM
An example method of hypervisor lifecycle management in a virtualized computing system having a cluster of hosts includes: receiving, from a user at a lifecycle manager executing in the virtualized computing system, identification of a seed host; obtaining, by the lifecycle manager, a software specification from the seed host, the software specification describing a running image of the hypervisor executing on the seed host; generating, by the lifecycle manager, a software image from metadata and payloads stored on the seed host; setting, by the lifecycle manager, a host desired state for the cluster based on the software specification; and storing, by the lifecycle manager, the software image in a software depot in association with the host desired state.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
Some embodiments provide a method for configuring an edge computing device to implement a logical router belonging to a logical network. The method configures a datapath executing on the edge computing device to use a first routing table associated with the logical router for processing data messages routed to the logical router. The method configures a routing protocol application executing on the edge computing device to (i) use the first routing table for exchanging routes with a network external to the logical network and (ii) use a second routing table for exchanging routes with other edge computing devices that implement the logical router.
H04L 45/50 - Routage ou recherche de routes de paquets dans les réseaux de commutation de données utilisant l'échange d'étiquettes, p. ex. des commutateurs d'étiquette multi protocole [MPLS]
H04L 45/586 - Association de routeurs de routeurs virtuels
H04L 49/25 - Routage ou recherche de route dans une matrice de commutation
H04L 49/65 - Reconfiguration des commutateurs de paquets rapides
H04L 61/2592 - Traduction d'adresses de protocole Internet [IP] en utilisant la tunnelisation ou l'encapsulation
H04L 61/5007 - Adresses de protocole Internet [IP]
H04L 67/289 - Traitement intermédiaire fonctionnellement situé à proximité de l'application consommatrice de données, p. ex. dans la même machine, dans le même domicile ou dans le même sous-réseau
H04L 101/622 - Adresses de couche 2, p. ex. adresses de contrôle d'accès au support [MAC]
Some embodiments provide a method for configuring a gateway router of a virtual datacenter. The method is performed at a network management component of a virtual datacenter that is defined in a public cloud and comprises a set of network management components and a set of network endpoints connected by a logical network managed by the network management components of the virtual datacenter. The method receives a set of network addresses of the network endpoints. The method aggregates at least a subset of the network addresses into a single subnet address that encompasses all of the aggregated network addresses. The method provides an aggregated route for the subset of network addresses to a gateway router that connects the virtual datacenter to a public cloud underlay network in order for the router to route data messages directed to the network endpoints to the logical network of the virtual datacenter.
Some embodiments provide a method for a first smart NIC of multiple smart NICs of a host computer. Each of the smart NICs executes a smart NIC operating system that performs virtual networking operations for a set of data compute machines executing on the host computer. The method receives a data message sent by one of the data compute machines executing on the host computer. The method performs virtual networking operations on the data message to determine that the data message is to be transmitted from a port of a second smart NIC of the multiple smart NICs. The method passes the data message to the second smart NIC via a private communication channel connecting the plurality of smart NICs.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
Disclosed are various examples of provisioning a data processing unit (DPU) management operating system (OS). A management hypervisor installer executed on a host device launches or causes a server component to provide a management operating system (OS) installer image at a particular URI accessible over a network internal to the host device. A baseboard management controller (BMC) transfers the DPU management OS installer image to the DPU device. A volatile memory based virtual disk is created using the DPU management OS installer image. The DPU device is booted to a DPU management OS installer on the volatile memory based virtual disk. The DPU management OS installer installs a DPU management operating system to a nonvolatile memory of the DPU device on reboot of the DPU device.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
H04L 67/1097 - Protocoles dans lesquels une application est distribuée parmi les nœuds du réseau pour le stockage distribué de données dans des réseaux, p. ex. dispositions de transport pour le système de fichiers réseau [NFS], réseaux de stockage [SAN] ou stockage en réseau [NAS]
67.
METHODS AND APPARATUS TO IMPLEMENT POST-PROVISIONING TASKS
Methods and apparatus to implement post-provisioning tasks are disclosed. An example apparatus comprising memory, instructions, and programmable circuitry to be programmed by the instructions to obtain metadata associated with a post-provisioning task, the post-provisioning task to modify a plugin, the plugin to provide a capability to a cloud resource of a computing platform provider, the metadata represented in accordance with a first file format, transform the metadata from the first file format to a second file format, the second file format compatible with the plugin, and register the post-provisioning task in a deployment environment provided by the computing platform provider.
Systems, apparatus, articles of manufacture, and methods are disclosed to analyze resource dependencies, the apparatus comprising: interface circuitry; machine readable instructions; and programmable circuitry to at least one of instantiate or execute the machine readable instructions to: generate a self-contained dependency descriptor property based on a dependency between a first cloud resource and a second cloud resource; receive a resource allocation request, the resource allocation request indicative of a first cloud resource account type, the resource allocation request not specific to a cloud provider; based on the self-contained dependency descriptor property, determine a second cloud resource account type to satisfy the resource allocation request; determine the cloud provider based on a property associated with a first resource type and a second resource type; and determine a cloud resource based on the cloud provider, the cloud resource to be allocated in response to the resource allocation request.
Example apparatus disclosed includes at least one memory, machine readable instructions, and programmable circuitry to at least one of instantiate or execute the machine readable instructions to generate a local state for a first resource, the first resource obtained from a cloud service model associated with a registered cloud account, the first resource including a first identifier; identify a second resource from the cloud service model, the second resource including a second identifier; and catalog the second resource when the second identifier is different from the first identifier.
A computer system comprises a machine-learning (ML) system at which alerts are received from endpoints, wherein the ML system is configured to: upon receiving a first alert and a second alert, apply an ML model to the first and second alerts; based at least in part on the first alert being determined to belong to a first cluster of the ML system, classify the first alert into one of a plurality of alert groups, wherein alerts classified into a first alert group of the alert groups are assigned a higher priority for security risk evaluation than alerts classified into a second alert group of the alert groups; and based on the second alert being determined to not belong to any cluster of the ML system, analyze a chain of events that triggered the second alert to determine whether there is suspicious activity associated with the second alert.
An example method of identifying resources deployed in clouds in a computing system includes: receiving, at an asset scanner executing in a data center, billing artifacts from the clouds, the billing artifacts relating resources deployed in the clouds with identification and usage information; transforming, by the asset scanner, the billing artifacts into transformed billing artifacts, each transformed billing artifact having entries that relate one of the resources to a selected portion of the identification and usage information; generating, by the asset scanner, a plurality of jobs to process the resources; and processing, by the asset scanner, the plurality of jobs to update a database that relates the resources and the selected portion of the identification and usage information.
Systems, apparatus, articles of manufacture, and methods are disclosed for detection and reconciliation of configuration drift. An example apparatus includes example programmable circuitry to identify a resource associated with a request to reconcile an updated configuration with the resource, the resource to be identified based on a first identifier of the resource included with the request. Additionally, the example programmable circuitry is to identify a finite state machine corresponding to the updated configuration based on a second identifier of the updated configuration included with the request. The example programmable circuitry is also to initiate the finite state machine corresponding to the updated configuration to reconcile the updated configuration with the resource.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
73.
DISTRIBUTED BRIDGING BETWEEN PHYSICAL AND OVERLAY NETWORK SEGMENTS
Some embodiments provide a method for configuring a network to bridge data messages between a logical overlay network layer 2 (L2) segment and a physical L2 segment. The method identifies each host computer in the network on which at least one logical network endpoint connected to the logical overlay network L2 segment executes. For each identified host computer, the method configures a forwarding element executing on the identified host computer to bridge (i) data messages sent from the logical network endpoints executing on the identified host computer to network endpoints connected to the physical L2 segment and (ii) data messages sent from network endpoints connected to the physical L2 segment, executing on the identified host computer and on other host computers in the network, to the logical network endpoints executing on the identified host computer.
The present disclosure is related to devices, systems, and methods for a cloud scheduler. An example method can include receiving a schedule associated with an automation task to be performed in a virtualized environment via a REST API, wherein the task is associated with a target, associating the schedule with a partition, storing the schedule in a cache store responsive to determining that the schedule is to be invoked within a threshold time period, and receiving the schedule from the cache store and invoking the target responsive to the schedule becoming overdue.
G06F 9/48 - Lancement de programmes Commutation de programmes, p. ex. par interruption
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
Managing cloud snapshots in a development platform is described herein. One example method includes creating a snapshot of a virtual computing instance (VCI), provided by a cloud provider, using a development platform, receiving a request to revert to the snapshot, and performing a revert operation responsive to receiving the request. The revert operation can include creating a new boot disk on the cloud provider to replace a current boot disk in the development platform, creating a new data disk to replace a current data disk associated with the VCI, powering off the VCI and detaching the boot disk and the data disk, attaching the new boot disk and the new data disk to the VCI, powering on the VCI, and deleting the detached boot disk and the detached data disk.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
System and computer-implemented method for detecting and reconciling moved workloads for a management component in a computing environment determines workloads that have moved as moved workloads based on received data at the management component. For a first moved workload with an associated workload, workload metadata is swapped with the associated workload and the first moved workload is updated in the management component. For a second moved workload without an associated workload, the second moved workload is preserved as preserved workloads for further processing.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
77.
AUTOMATED REMEDIATION OF RELOCATED WORKLOADS USING WORKLOAD TRACKING MARKERS
System and computer-implemented method for reconciling moved workloads for a management component in a computing environment determines whether an updated workload has a tracking marker that moves with the workload and requires remediation. When the tracking marker is found in an inventory database of the management component, the metadata of the workload is reconciled in the management component.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
78.
METHOD FOR AUTHENTICATING, AUTHORIZING, AND AUDITING LONG-RUNNING AND SCHEDULED OPERATIONS
A method of issuing one or more commands for a management appliance of a software-defined data center (SDDC) to perform an operation, includes the steps of: retrieving the operation to be performed by the management appliance; transmitting a request to the management appliance for a first token, wherein the first token is associated with permissions for issuing commands to the management appliance, and wherein the request for the first token includes a second token that is associated with the initiator of the operation and that has a longer time-to-live period than the first token has; and upon receiving the first token from the management appliance, transmitting the first token and a command to the management appliance, wherein the command is for the management appliance to execute at least one task of the operation.
Certificate management as-a-service for software-defined datacenters is described herein. One method includes receiving an indication of an expiry of a first certificate of a virtual appliance in a virtualized environment via a certificate management agent of a gateway device in communication with the appliance, and performing a certificate replacement process responsive to determining that the expiry of the first certificate exceeds a threshold, wherein the certificate generation process includes sending a request to the appliance via an agent associated with the appliance, receiving, from the appliance, a certificate signing request (CSR), sending the CSR to an external certificate authority, receiving a second certificate from the certificate authority, and replacing the first certificate with the second certificate.
H04L 9/32 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité comprenant des moyens pour vérifier l'identité ou l'autorisation d'un utilisateur du système
80.
Single pane distributed networking and security for bare metal and overlay workloads
Some embodiments provide a novel method for defining a set of policies for a set of applications executing on a host computer of a software-defined network (SDN). The method configures, on a physical network interface card (PNIC) connected to the host computer, a network adapter to create a logical port that connects an interface of the host computer to a virtual distributed switch (VDS) executing on the PNIC. The method defines the set of policies based on the logical port for the VDS to apply to data message flows sent from the set of applications on the host computer to one or more other host computers of the SDN.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
G06F 15/16 - Associations de plusieurs calculateurs numériques comportant chacun au moins une unité arithmétique, une unité programme et un registre, p. ex. pour le traitement simultané de plusieurs programmes
An example method of hypervisor lifecycle management in a virtualized computing system having a cluster of hosts includes: obtaining, by a lifecycle manager (LCM) agent executing in a host of the hosts, a desired state document, the desired state document defining a desired state of software in the host, the software including a hypervisor; comparing selection criteria in the desired state document against hardware information obtained from a hardware platform of the host to select an image of a plurality of images defined in the desired state document; and applying, by LCM agent, the selected image to the host.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
82.
LIFECYCLE MANAGEMENT OF HETEROGENEOUS CLUSTERS IN A VIRTUALIZED COMPUTING SYSTEM
An example method of hypervisor lifecycle management in a virtualized computing system having a cluster of hosts includes: obtaining, by a lifecycle manager (LCM) agent executing in a host of the hosts, a desired state document, the desired state document defining a desired state of software in the host, the software including a hypervisor, the desired state including a plurality of images; comparing selection criteria in a software policy of the desired state document against hardware information obtained from a hardware platform of the host to select an image of the plurality of images defined in the desired state document; and applying, by LCM agent, the selected image to the host.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
System and computer-implemented method for processing operation requests in a computing environment uses an intent for an operation request received at a service instance that is submitted to an intent valet platform to process the operation request. The intent is queued in an intent table of intents and then retrieved for processing. The requested operation for the retrieved intent is delegated to the service for execution from the intent valet platform. When a completion signal from the service is received at the intent valet platform, the intent is marked as being in a terminal state.
Some embodiments provide a method for configuring a network to bridge data messages between a hardware-implemented L2 overlay network segment and a software-implemented L2 overlay network segment. The method identifies a host computer on which a logical network endpoint connected to the software-implemented overlay executes. The hardware-implemented L2 overlay connects at least a first set of network endpoints located in a first physical network zone and connected to a first L2 network segment and a second set of network endpoints located in a second physical network zone and connected to a second L2 network segment. The identified host computer is located in the first physical network zone. The method configures a forwarding element executing on the host computer to bridge data messages between the logical network endpoint and (i) the first set of network endpoints and (ii) the second set of network endpoints.
H04L 45/00 - Routage ou recherche de routes de paquets dans les réseaux de commutation de données
H04L 45/586 - Association de routeurs de routeurs virtuels
H04L 45/655 - Interaction entre les entités de calcul de routes et les entités de transmission, p. ex. pour la détermination de la route ou pour la mise à jour des tables de flux
85.
PROVISIONING CLOUD-AGNOSTIC RESOURCE INSTANCES BY SHARING CLOUD RESOURCES
provisioning cloud-agnostic resource instances by sharing cloud resources is described herein. One example method includes creating a blueprint using a development platform, wherein the blueprint includes a definition of a resource, and wherein provisioning the resource includes provisioning a first cloud resource and a second cloud resource provided by a cloud provider, provisioning a first instance of the resource of the blueprint by provisioning a first instance of the first cloud resource and a first instance of the second cloud resource, and provisioning a second instance of the resource of the blueprint, wherein provisioning the second instance of the resource includes provisioning a second instance of the first cloud resource and sharing the first instance of the second cloud resource.
Cloning a cloud-agnostic deployment is described herein. One example method includes receiving modifications to an existing deployment created using a blueprint in a virtualized environment, and performing a deployment clone operation responsive to receiving a request to clone the deployment. The deployment clone operation can include creating an image associated with a virtual computing instance (VCI) of the deployment, creating a snapshot associated with a disk of the deployment, generating a clone blueprint based on the image and the snapshot, and deploying the clone blueprint in the virtualized environment.
An asynchronous mechanism for processing synchronous operation flows is described herein. One example method includes receiving a request from an orchestrator engine to determine a state of a cloud resource of a cloud automation platform, propagating the request to the cloud automation platform, caching a task identifier received from the cloud automation platform responsive to the request, receiving data indicative of the state of the cloud resource from the cloud automation platform wherein the data is associated with the task identifier, and providing the data to the orchestrator engine.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
88.
AUTOMATED REMEDIATION OF RELOCATED WORKLOADS USING A REMEDIATION QUEUE
System and computer-implemented method for reconciling moved workloads for a management component in a computing environment uses a remediation queue to enqueue a remediation entry for a workload that has moved within the computing environment. The remediation entry for the workload is dequeued from the remediation queue and a remediation service on the remediation entry for the workload is executed to update metadata for the workload in the management component. A processing status of the remediation entry for the workload is stored at the management component.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
Some embodiments of the invention provide a method of performing end-user monitoring. At a health monitor that executes on a first host computer along with a client machine and a load balancer, to monitor health of a set of two or more servers that are candidate servers for processing packets from the client machine, the method exchanges health monitoring messages with each server in the set of servers to assess health of the servers in the set. At the health monitor, the method provides health data expressing health of the servers to the load balancer to use in determining how to distribute packets from the client machine between the servers in the set of servers.
H04L 67/1008 - Sélection du serveur pour la répartition de charge basée sur les paramètres des serveurs, p. ex. la mémoire disponible ou la charge de travail
H04L 67/1017 - Sélection du serveur pour la répartition de charge basée sur un mécanisme à tour de rôle
Some embodiments provide a novel method for forwarding data messages between first and second host computers. To send, to a first machine of the first host, a second flow from a second machine of the second host in response to a first flow from the first machine, the method identifies from a set of tunnel endpoints (TEPs) of the first host a TEP that is a source TEP of the first flow. The method uses the identified TEP to identify one non-uniform memory access (NUMA) node of a set of NUMA nodes of the first host as the NUMA node associated with the first flow. The method selects, from a subset of TEPs of the first host that is associated with the identified NUMA node, one TEP as a destination TEP of the second flow. The method sends the second flow to the selected TEP of the first host.
Some embodiments provide a novel method for forwarding data messages between first and second host computers. To send, to a first machine executing on the first host computer, a flow from a second machine executing on the second host computer, the method identifies a destination network address of the flow. The method uses the identified destination network address to identify a particular tunnel endpoint group (TEPG) including a particular set of one or more tunnel endpoints (TEPs) associated with a particular non-uniform memory access (NUMA) node of a set of NUMA nodes of the first host computer. The particular NUMA node executes the first machine. The method selects, from the particular TEPG, a particular TEP as a destination TEP of the flow. The method sends the flow to the particular TEP of the particular NUMA node of the first host computer to send the flow to the first machine.
Some embodiments of the invention provide a method of using routing tables of GSLB DNS servers to perform path selection in response to DNS requests from client devices. At a first GSLB DNS server that operates in a first region and that maintains a first routing table, the method receives, from a client device, a DNS request for accessing a set of resources provided by a first server in the first region and a second server in a second region. The method determines, based on the first routing table and a second routing table associated with the second region, that a first path from the client device to the first server is shorter than a second path from the client device to the second server, and provides a network address associated with the first path to the client device for reaching the first server to access the set of resources.
H04L 45/122 - Évaluation de la route la plus courte en minimisant les distances, p. ex. en sélectionnant une route avec un nombre minimal de sauts
H04L 45/00 - Routage ou recherche de routes de paquets dans les réseaux de commutation de données
H04L 45/02 - Mise à jour ou découverte de topologie
H04L 61/4511 - Répertoires de réseauCorrespondance nom-adresse en utilisant des répertoires normalisésRépertoires de réseauCorrespondance nom-adresse en utilisant des protocoles normalisés d'accès aux répertoires en utilisant le système de noms de domaine [DNS]
93.
METHODS AND SYSTEMS FOR PERFORMING APPLICATION DIAGNOSTICS VIA DISTRIBUTED TRACING WITH ENHANCED OBSERVABILITY
Methods and systems are directed to performing application diagnostics via distributed tracing with enhanced observability. Methods are executed by an operations manager that collects spans of microservices of a distributed application executing in a cloud infrastructure. The operations manager forms traces from the spans for each request for services from the application. The operations manager reduces the dimensionality of the traces by generating a behavioral map of points in a two-dimensional space, each point represents one of the traces. The behavior map is displayed in a graphical user interface having functionalities that enables a user to investigate properties of the traces by trace type and duration and investigate of erroneous traces or clusters of traces and determine which optimization tasks to execute.
Some embodiments provide a method for performing secure frame capture for an application executing on a data compute node. At the application, the method receives and parses a frame for a particular L7 protocol. The method identifies an action to perform within the application based on the parsed frame. Based on secure frame capture being enabled for the application, the method writes information regarding the frame to a capture file stored at the DCN. The information regarding the frame omits (i) any L2-L4 information and (ii) any payload data carried by the frame.
In an example, a method for provisioning a cell site in a 5G RAN may include receiving a plurality of steps involved in provisioning the cell site for the 5G RAN. In an example, provisioning the cell site may include provisioning of a physical infrastructure layer, a container orchestration platform on the physical infrastructure layer, and a containerized network function (CNF) instance associated with the 5G RAN in the container orchestration platform. Further, the method may include converting the plurality of steps into a dependency graph of tasks. The dependency graph may represent workflows and relationships between the tasks. Furthermore, based on feeding the dependency graph as an input to an orchestrator, the method may include provisioning the cell site by executing the tasks in an order according to the dependency graph.
An example method for managing a cell site in a 5G RAN may include determining a physical infrastructure layer, a container orchestration platform on the physical infrastructure layer, and a CNF instance associated with the 5G RAN in the container orchestration platform based on a site identifier associated with the cell site. Based on the physical infrastructure layer, the container orchestration platform, and the CNF instance, the method may include building a logical site resource map representing topological information of the cell site. Further, the method may include monitoring and/or managing the cell site using the logical site resource map.
G06F 15/173 - Communication entre processeurs utilisant un réseau d'interconnexion, p. ex. matriciel, de réarrangement, pyramidal, en étoile ou ramifié
H04L 41/122 - Découverte ou gestion des topologies de réseau des topologies virtualisées, p. ex. les réseaux définis par logiciel [SDN] ou la virtualisation de la fonction réseau [NFV]
97.
System and Method for Autoscaling Flexible Cloud Namespace Instances in a Cloud Computing Environment
System and method for scaling flexible cloud namespaces (FCNs) in a software-defined data center (SDDC) uses resource utilizations in resource capacity profiles of the FCNs in the SDDC, which are compared with resource utilization thresholds set for the resource capacity profiles. Based on these comparisons, resource capacities in the resource capacity profiles of the FCNs are scaled.
Systems, apparatus, articles of manufacture, and methods are disclosed for converting enforcement policy information into provisioning template information by instantiating or executing machine-readable instructions to determine a type of a first placeholder of a provisioning template with a plurality of placeholders, copy enforcement policy data corresponding to the determined type of the first placeholder, fill the first placeholder of the provisioning template with the copied enforcement policy data, and save the provisioning template.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
99.
METHODS AND APPARATUS TO MANAGE INFRASTRUCTURE AS CODE IMPLEMENTATIONS
Methods and apparatus to manage infrastructure as code (IaC) implementations are disclosed, A disclosed example system to manage a shared computing resource includes programmable circuitry; and machine readable instructions to cause the programmable circuitry to: determine an IaC type associated with a request corresponding to the shared computing resource; select a template from a plurality of IaC templates based on the IaC type; and service the request based on the template.
H04L 67/60 - Ordonnancement ou organisation du service des demandes d'application, p. ex. demandes de transmission de données d'application en utilisant l'analyse et l'optimisation des ressources réseau requises
100.
METHODS AND APPARATUS TO ISOLATE STATE MANAGEMENT IN INFRASTRUCTURE AS CODE ENVIRONMENTS
Systems, apparatus, articles of manufacture, and methods are disclosed to isolate state management in infrastructure as code environments. Disclosed is an apparatus comprising monitor a security infrastructure to determine a first state of the security infrastructure, the security infrastructure to control a function based on the first state, the function defined by an operating protocol; determine that the security infrastructure has transitioned to a second state, the second state associated with an alteration to the security infrastructure; determine whether the alteration of the security infrastructure associated with the second state is undesired, wherein the alteration being undesired corresponds to the function of the security infrastructure deviating from the operating protocol; and modify the security infrastructure by replacing the second state with a third state to counteract the deviation from the operating protocol corresponding to the second state.
G06F 21/57 - Certification ou préservation de plates-formes informatiques fiables, p. ex. démarrages ou arrêts sécurisés, suivis de version, contrôles de logiciel système, mises à jour sécurisées ou évaluation de vulnérabilité
