The present disclosure is related to devices, systems, and methods for a cloud scheduler. An example method can include receiving a schedule associated with an automation task to be performed in a virtualized environment via a REST API, wherein the task is associated with a target, associating the schedule with a partition, storing the schedule in a cache store responsive to determining that the schedule is to be invoked within a threshold time period, and receiving the schedule from the cache store and invoking the target responsive to the schedule becoming overdue.
G06F 9/48 - Lancement de programmes Commutation de programmes, p. ex. par interruption
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
Some embodiments provide a method for configuring a network to bridge data messages between a logical overlay network layer 2 (L2) segment and a physical L2 segment. The method identifies each host computer in the network on which at least one logical network endpoint connected to the logical overlay network L2 segment executes. For each identified host computer, the method configures a forwarding element executing on the identified host computer to bridge (i) data messages sent from the logical network endpoints executing on the identified host computer to network endpoints connected to the physical L2 segment and (ii) data messages sent from network endpoints connected to the physical L2 segment, executing on the identified host computer and on other host computers in the network, to the logical network endpoints executing on the identified host computer.
Some embodiments provide a novel method for defining a set of policies for a set of applications executing on a host computer of a software-defined network (SDN). The method configures, on a physical network interface card (PNIC) connected to the host computer, a network adapter to create a logical port that connects an interface of the host computer to a virtual distributed switch (VDS) executing on the PNIC. The method defines the set of policies based on the logical port for the VDS to apply to data message flows sent from the set of applications on the host computer to one or more other host computers of the SDN.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
4.
METHODS, APPARATUS, AND ARTICLES OF MANUFACTURE FOR DETECTION AND RECONCILIATION OF CONFIGURATION DRIFT
Systems, apparatus, articles of manufacture, and methods are disclosed for detection and reconciliation of configuration drift. An example apparatus includes example programmable circuitry to identify a resource associated with a request to reconcile an updated configuration with the resource, the resource to be identified based on a first identifier of the resource included with the request. Additionally, the example programmable circuitry is to identify a finite state machine corresponding to the updated configuration based on a second identifier of the updated configuration included with the request. The example programmable circuitry is also to initiate the finite state machine corresponding to the updated configuration to reconcile the updated configuration with the resource.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
5.
METHODS AND APPARATUS TO IMPLEMENT POST-PROVISIONING TASKS
Methods and apparatus to implement post-provisioning tasks are disclosed. An example apparatus comprising memory, instructions, and programmable circuitry to be programmed by the instructions to obtain metadata associated with a post-provisioning task, the post-provisioning task to modify a plugin, the plugin to provide a capability to a cloud resource of a computing platform provider, the metadata represented in accordance with a first file format, transform the metadata from the first file format to a second file format, the second file format compatible with the plugin, and register the post-provisioning task in a deployment environment provided by the computing platform provider.
Example apparatus disclosed includes at least one memory, machine readable instructions, and programmable circuitry to at least one of instantiate or execute the machine readable instructions to generate a local state for a first resource, the first resource obtained from a cloud service model associated with a registered cloud account, the first resource including a first identifier; identify a second resource from the cloud service model, the second resource including a second identifier; and catalog the second resource when the second identifier is different from the first identifier.
Systems, apparatus, articles of manufacture, and methods are disclosed to analyze resource dependencies, the apparatus comprising: interface circuitry; machine readable instructions; and programmable circuitry to at least one of instantiate or execute the machine readable instructions to: generate a self-contained dependency descriptor property based on a dependency between a first cloud resource and a second cloud resource; receive a resource allocation request, the resource allocation request indicative of a first cloud resource account type, the resource allocation request not specific to a cloud provider; based on the self-contained dependency descriptor property, determine a second cloud resource account type to satisfy the resource allocation request; determine the cloud provider based on a property associated with a first resource type and a second resource type; and determine a cloud resource based on the cloud provider, the cloud resource to be allocated in response to the resource allocation request.
A method of issuing one or more commands for a management appliance of a software-defined data center (SDDC) to perform an operation, includes the steps of: retrieving the operation to be performed by the management appliance; transmitting a request to the management appliance for a first token, wherein the first token is associated with permissions for issuing commands to the management appliance, and wherein the request for the first token includes a second token that is associated with the initiator of the operation and that has a longer time-to-live period than the first token has; and upon receiving the first token from the management appliance, transmitting the first token and a command to the management appliance, wherein the command is for the management appliance to execute at least one task of the operation.
Certificate management as-a-service for software-defined datacenters is described herein. One method includes receiving an indication of an expiry of a first certificate of a virtual appliance in a virtualized environment via a certificate management agent of a gateway device in communication with the appliance, and performing a certificate replacement process responsive to determining that the expiry of the first certificate exceeds a threshold, wherein the certificate generation process includes sending a request to the appliance via an agent associated with the appliance, receiving, from the appliance, a certificate signing request (CSR), sending the CSR to an external certificate authority, receiving a second certificate from the certificate authority, and replacing the first certificate with the second certificate.
H04L 9/32 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité comprenant des moyens pour vérifier l'identité ou l'autorisation d'un utilisateur du système
10.
PROVISIONING CLOUD-AGNOSTIC RESOURCE INSTANCES BY SHARING CLOUD RESOURCES
provisioning cloud-agnostic resource instances by sharing cloud resources is described herein. One example method includes creating a blueprint using a development platform, wherein the blueprint includes a definition of a resource, and wherein provisioning the resource includes provisioning a first cloud resource and a second cloud resource provided by a cloud provider, provisioning a first instance of the resource of the blueprint by provisioning a first instance of the first cloud resource and a first instance of the second cloud resource, and provisioning a second instance of the resource of the blueprint, wherein provisioning the second instance of the resource includes provisioning a second instance of the first cloud resource and sharing the first instance of the second cloud resource.
An example method of hypervisor lifecycle management in a virtualized computing system having a cluster of hosts includes: obtaining, by a lifecycle manager (LCM) agent executing in a host of the hosts, a desired state document, the desired state document defining a desired state of software in the host, the software including a hypervisor; comparing selection criteria in the desired state document against hardware information obtained from a hardware platform of the host to select an image of a plurality of images defined in the desired state document; and applying, by LCM agent, the selected image to the host.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
12.
ASYNCHRONOUS MECHANISM FOR PROCESSING SYNCHRONOUS OPERATION FLOWS
An asynchronous mechanism for processing synchronous operation flows is described herein. One example method includes receiving a request from an orchestrator engine to determine a state of a cloud resource of a cloud automation platform, propagating the request to the cloud automation platform, caching a task identifier received from the cloud automation platform responsive to the request, receiving data indicative of the state of the cloud resource from the cloud automation platform wherein the data is associated with the task identifier, and providing the data to the orchestrator engine.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
System and computer-implemented method for processing operation requests in a computing environment uses an intent for an operation request received at a service instance that is submitted to an intent valet platform to process the operation request. The intent is queued in an intent table of intents and then retrieved for processing. The requested operation for the retrieved intent is delegated to the service for execution from the intent valet platform. When a completion signal from the service is received at the intent valet platform, the intent is marked as being in a terminal state.
Cloning a cloud-agnostic deployment is described herein. One example method includes receiving modifications to an existing deployment created using a blueprint in a virtualized environment, and performing a deployment clone operation responsive to receiving a request to clone the deployment. The deployment clone operation can include creating an image associated with a virtual computing instance (VCI) of the deployment, creating a snapshot associated with a disk of the deployment, generating a clone blueprint based on the image and the snapshot, and deploying the clone blueprint in the virtualized environment.
An example method of hypervisor lifecycle management in a virtualized computing system having a cluster of hosts includes: obtaining, by a lifecycle manager (LCM) agent executing in a host of the hosts, a desired state document, the desired state document defining a desired state of software in the host, the software including a hypervisor, the desired state including a plurality of images; comparing selection criteria in a software policy of the desired state document against hardware information obtained from a hardware platform of the host to select an image of the plurality of images defined in the desired state document; and applying, by LCM agent, the selected image to the host.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
16.
AUTOMATED CELL SITE PROVISIONING IN 5G RADIO-ACCESS NETWORKS
In an example, a method for provisioning a cell site in a 5G RAN may include receiving a plurality of steps involved in provisioning the cell site for the 5G RAN. In an example, provisioning the cell site may include provisioning of a physical infrastructure layer, a container orchestration platform on the physical infrastructure layer, and a containerized network function (CNF) instance associated with the 5G RAN in the container orchestration platform. Further, the method may include converting the plurality of steps into a dependency graph of tasks. The dependency graph may represent workflows and relationships between the tasks. Furthermore, based on feeding the dependency graph as an input to an orchestrator, the method may include provisioning the cell site by executing the tasks in an order according to the dependency graph.
An example method for managing a cell site in a 5G RAN may include determining a physical infrastructure layer, a container orchestration platform on the physical infrastructure layer, and a CNF instance associated with the 5G RAN in the container orchestration platform based on a site identifier associated with the cell site. Based on the physical infrastructure layer, the container orchestration platform, and the CNF instance, the method may include building a logical site resource map representing topological information of the cell site. Further, the method may include monitoring and/or managing the cell site using the logical site resource map.
H04L 41/122 - Découverte ou gestion des topologies de réseau des topologies virtualisées, p. ex. les réseaux définis par logiciel [SDN] ou la virtualisation de la fonction réseau [NFV]
Some embodiments of the invention provide a method of performing end-user monitoring. At a health monitor that executes on a first host computer along with a client machine and a load balancer, to monitor health of a set of two or more servers that are candidate servers for processing packets from the client machine, the method exchanges health monitoring messages with each server in the set of servers to assess health of the servers in the set. At the health monitor, the method provides health data expressing health of the servers to the load balancer to use in determining how to distribute packets from the client machine between the servers in the set of servers.
H04L 67/1008 - Sélection du serveur pour la répartition de charge basée sur les paramètres des serveurs, p. ex. la mémoire disponible ou la charge de travail
H04L 67/1017 - Sélection du serveur pour la répartition de charge basée sur un mécanisme à tour de rôle
19.
System and Method for Autoscaling Flexible Cloud Namespace Instances in a Cloud Computing Environment
System and method for scaling flexible cloud namespaces (FCNs) in a software-defined data center (SDDC) uses resource utilizations in resource capacity profiles of the FCNs in the SDDC, which are compared with resource utilization thresholds set for the resource capacity profiles. Based on these comparisons, resource capacities in the resource capacity profiles of the FCNs are scaled.
Systems, apparatus, articles of manufacture, and methods are disclosed for converting enforcement policy information into provisioning template information by instantiating or executing machine-readable instructions to determine a type of a first placeholder of a provisioning template with a plurality of placeholders, copy enforcement policy data corresponding to the determined type of the first placeholder, fill the first placeholder of the provisioning template with the copied enforcement policy data, and save the provisioning template.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
21.
METHODS AND APPARATUS TO MANAGE INFRASTRUCTURE AS CODE IMPLEMENTATIONS
Methods and apparatus to manage infrastructure as code (IaC) implementations are disclosed, A disclosed example system to manage a shared computing resource includes programmable circuitry; and machine readable instructions to cause the programmable circuitry to: determine an IaC type associated with a request corresponding to the shared computing resource; select a template from a plurality of IaC templates based on the IaC type; and service the request based on the template.
H04L 67/60 - Ordonnancement ou organisation du service des demandes d'application, p. ex. demandes de transmission de données d'application en utilisant l'analyse et l'optimisation des ressources réseau requises
22.
METHODS AND APPARATUS TO ISOLATE STATE MANAGEMENT IN INFRASTRUCTURE AS CODE ENVIRONMENTS
Systems, apparatus, articles of manufacture, and methods are disclosed to isolate state management in infrastructure as code environments. Disclosed is an apparatus comprising monitor a security infrastructure to determine a first state of the security infrastructure, the security infrastructure to control a function based on the first state, the function defined by an operating protocol; determine that the security infrastructure has transitioned to a second state, the second state associated with an alteration to the security infrastructure; determine whether the alteration of the security infrastructure associated with the second state is undesired, wherein the alteration being undesired corresponds to the function of the security infrastructure deviating from the operating protocol; and modify the security infrastructure by replacing the second state with a third state to counteract the deviation from the operating protocol corresponding to the second state.
G06F 21/57 - Certification ou préservation de plates-formes informatiques fiables, p. ex. démarrages ou arrêts sécurisés, suivis de version, contrôles de logiciel système, mises à jour sécurisées ou évaluation de vulnérabilité
23.
METHODS AND APPARATUS TO DETERMINE TEMPLATES FOR USE WITH CLOUD ACCOUNTS
An example apparatus comprises memory, first instructions, and programmable circuitry to be programmed by the first instructions to associate a first portion of metadata with a first category, the metadata corresponding to a cloud resource of a cloud account, associate a second portion of the metadata with a second category, and determine a template based on the first portion being greater than the second portion, the template associated with the first category, the template including second instructions to define a target state to be enforced on the cloud account.
Described herein are a system and method for forming a container image. The system and method include obtaining a first layer of a plurality of layers of the container image. The contents of the first layer are stored in a directory such that a first disk image layer file is mounted to the directory. A second layer of the plurality of layers is obtained, and the contents of the second layer are stored in the directory so that the first disk image layer includes contents of the first layer and the second layer. The first disk image layer is saved and is mountable and includes files of the container image.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
G06F 16/13 - Structures d’accès aux fichiers, p. ex. indices distribués
Some embodiments provide a novel method for forwarding data messages between first and second host computers. To send, to a first machine of the first host, a second flow from a second machine of the second host in response to a first flow from the first machine, the method identifies from a set of tunnel endpoints (TEPs) of the first host a TEP that is a source TEP of the first flow. The method uses the identified TEP to identify one non-uniform memory access (NUMA) node of a set of NUMA nodes of the first host as the NUMA node associated with the first flow. The method selects, from a subset of TEPs of the first host that is associated with the identified NUMA node, one TEP as a destination TEP of the second flow. The method sends the second flow to the selected TEP of the first host.
Some embodiments provide a novel method for forwarding data messages between first and second host computers. To send, to a first machine executing on the first host computer, a flow from a second machine executing on the second host computer, the method identifies a destination network address of the flow. The method uses the identified destination network address to identify a particular tunnel endpoint group (TEPG) including a particular set of one or more tunnel endpoints (TEPs) associated with a particular non-uniform memory access (NUMA) node of a set of NUMA nodes of the first host computer. The particular NUMA node executes the first machine. The method selects, from the particular TEPG, a particular TEP as a destination TEP of the flow. The method sends the flow to the particular TEP of the particular NUMA node of the first host computer to send the flow to the first machine.
Some embodiments of the invention provide a method of using routing tables of GSLB DNS servers to perform path selection in response to DNS requests from client devices. At a first GSLB DNS server that operates in a first region and that maintains a first routing table, the method receives, from a client device, a DNS request for accessing a set of resources provided by a first server in the first region and a second server in a second region. The method determines, based on the first routing table and a second routing table associated with the second region, that a first path from the client device to the first server is shorter than a second path from the client device to the second server, and provides a network address associated with the first path to the client device for reaching the first server to access the set of resources.
H04L 45/122 - Évaluation de la route la plus courte en minimisant les distances, p. ex. en sélectionnant une route avec un nombre minimal de sauts
H04L 45/00 - Routage ou recherche de routes de paquets dans les réseaux de commutation de données
H04L 45/02 - Mise à jour ou découverte de topologie
H04L 61/4511 - Répertoires de réseauCorrespondance nom-adresse en utilisant des répertoires normalisésRépertoires de réseauCorrespondance nom-adresse en utilisant des protocoles normalisés d'accès aux répertoires en utilisant le système de noms de domaine [DNS]
28.
METHODS AND SYSTEMS FOR PERFORMING APPLICATION DIAGNOSTICS VIA DISTRIBUTED TRACING WITH ENHANCED OBSERVABILITY
Methods and systems are directed to performing application diagnostics via distributed tracing with enhanced observability. Methods are executed by an operations manager that collects spans of microservices of a distributed application executing in a cloud infrastructure. The operations manager forms traces from the spans for each request for services from the application. The operations manager reduces the dimensionality of the traces by generating a behavioral map of points in a two-dimensional space, each point represents one of the traces. The behavior map is displayed in a graphical user interface having functionalities that enables a user to investigate properties of the traces by trace type and duration and investigate of erroneous traces or clusters of traces and determine which optimization tasks to execute.
Some embodiments provide a method for performing secure frame capture for an application executing on a data compute node. At the application, the method receives and parses a frame for a particular L7 protocol. The method identifies an action to perform within the application based on the parsed frame. Based on secure frame capture being enabled for the application, the method writes information regarding the frame to a capture file stored at the DCN. The information regarding the frame omits (i) any L2-L4 information and (ii) any payload data carried by the frame.
Some embodiments of the invention provide a method for performing packet tracing in a RAN. The method receives a trace request that includes a tracing specification for performing a trace operation for a subset of messages exchanged between a base station component and a RAN application via a RIC that operates as an interface between the base station component and the RAN application, the trace operation for collecting state data associated with the RIC. Based on the tracing specification, the method performs the trace operation for the subset of messages. The method receives a set of trace information that was collected during the trace operation and that includes state data associated with the RIC. The method processes the set of trace information to generate multiple sets of state data associated with the RIC for use in responding to queries for state data associated with the RIC.
The current document is directed to distributed-computer-systems and, in particular, to management of distributed applications and cloud infrastructure using artificial-life agents. The artificial-life agents are organized into a population, the size of which is stabilized as individual artificial-life agents predict system-control parameters, receive rewards based on the predictions, thrive and propagate as they learn to provide better predictions while adapting to a constantly changing environment, and expire when they fail to provide useful predictions over periods of time. The predictions output by individual artificial-life agents are used to provide consensus predictions by the artificial-life-agent population to a cloud-infrastructure-management or distributed-application-management controller.
H04L 41/16 - Dispositions pour la maintenance, l’administration ou la gestion des réseaux de commutation de données, p. ex. des réseaux de commutation de paquets en utilisant l'apprentissage automatique ou l'intelligence artificielle
G06N 3/006 - Vie artificielle, c.-à-d. agencements informatiques simulant la vie fondés sur des formes de vie individuelles ou collectives simulées et virtuelles, p. ex. simulations sociales ou optimisation par essaims particulaires [PSO]
H04L 67/10 - Protocoles dans lesquels une application est distribuée parmi les nœuds du réseau
32.
DETERMINATION OF ACTIVE AND STANDBY SMART NICS THROUGH DATAPATH
Some embodiments provide a method for a first smart NIC of multiple smart NICs of a host computer. Each of the smart NICs executes a smart NIC operating system that performs networking operations for a set of data compute machines executing on the host computer. When the first smart NIC identifies itself as an active smart NIC for the host computer, the first smart NIC sends a first message through a datapath to a second smart NIC to verify whether the second smart NIC identifies as an active smart NIC or a standby smart NIC. If the second smart NIC sends a reply second message to the first smart NIC through the datapath, the first smart NIC (i) determines that the second smart NIC identifies as a standby smart NIC and (ii) operates to process data traffic sent to and from the host computer as the active smart NIC.
G06F 13/12 - Commande par programme pour dispositifs périphériques utilisant des matériels indépendants du processeur central, p. ex. canal ou processeur périphérique
33.
LIFECYCLE MANAGEMENT OF AUTONOMOUS CLUSTERS IN A VIRTUAL COMPUTING ENVIRONMENT
Systems, apparatus, articles of manufacture, and methods are disclosed to detect an installation script, the installation script including a second version of software in system storage of a first cluster of a plurality of clusters, a first version of the software installed in the first cluster, and after execution of the first version of the software by a first cluster control plane (CCP) pod is stopped, start execution of a second CCP pod, the second CCP pod instantiated with the second version of the software; and interface circuitry to direct an application programming interface (API) operation request received at the first cluster to the second CCP pod without directing the API operation request to the first CCP pod.
Methods and apparatus to manage cloud computing resources are disclosed. An example apparatus includes network interface circuitry; computer readable instructions; and programmable circuitry to instantiate: allocation candidate circuitry to determine allocation candidates for a first allocation resource and a second allocation resource, respectively; iteration circuitry to generate a first candidate set based on the first allocation candidate and the second allocation candidate; filter circuitry to determine whether the allocation candidates are incompatible; skipping circuitry to determine to skip, after a determination that the allocation candidates are incompatible, a second candidate set based on the incompatibility between the allocation candidates present in the second candidate set; and the filter circuitry to determine whether allocation candidates of a third candidate set are compatible, the allocation candidate circuitry to, after the third candidate set is determined as compatible, cause assignment of the third candidate set.
An example method of managing tenant networks in a data center includes: obtaining, by tenant network topology discovery software executing in the data center, inventory data for a tenant network deployed in the data center from a network manager, the tenant network comprising a software-defined network managed by the network manager; generating, by the tenant network topology discovery software, a tenant network model based on the inventory data, the tenant network model including objects representing components of the tenant network and relationships between the components; storing, by the tenant network topology discovery software, the tenant network model in a database; and updating, by the tenant network topology discovery software, the tenant network model in response to monitoring the tenant network.
H04L 41/12 - Découverte ou gestion des topologies de réseau
H04L 41/0604 - Gestion des fautes, des événements, des alarmes ou des notifications en utilisant du filtrage, p. ex. la réduction de l’information en utilisant la priorité, les types d’éléments, la position ou le temps
H04L 41/082 - Réglages de configuration caractérisés par les conditions déclenchant un changement de paramètres la condition étant des mises à jour ou des mises à niveau des fonctionnalités réseau
36.
Dynamic Resource Placement in Multi-Cloud Environments
The disclosure provides a method for deploying resources in a multi-cloud environment. The method includes receiving, by a dynamic resource placement system, a request to generate a resource placement configuration for one or more resources to be deployed in a multi-cloud environment; obtaining, by the dynamic resource placement system, a custom resource placement logic; obtaining, by the dynamic resource placement system, a cloud context comprising details of available cloud environments in the multi-cloud environment; generating, by the dynamic resource placement system and based on analyzing the cloud context using the custom resource placement logic, a resource placement configuration specifying one or more target cloud environments for deploying the one or more resources; and providing, by the dynamic resource placement system, the resource placement configuration to a cloud infrastructure management platform for deploying the one or more resources.
H04L 47/762 - Contrôle d'admissionAllocation des ressources en utilisant l'allocation dynamique des ressources, p. ex. renégociation en cours d'appel sur requête de l'utilisateur ou sur requête du réseau en réponse à des changements dans les conditions du réseau déclenchée par le réseau
H04L 47/78 - Architectures d'allocation des ressources
37.
METHODS AND APPARATUS TO CONFIGURE VIRTUAL MACHINES
Methods and apparatus to configure virtual machines (VMs) are disclosed. Am example system to manage a plurality of virtual machines of a shared computing resource, the system includes interface circuitry, programmable circuitry, and machine readable instructions to cause the programmable circuitry to at least one of scan or monitor the plurality of virtual machines, determine whether a master application corresponding to the virtual machines has accepted a minion application corresponding to a first one of the virtual machines, and in response to the determination that the master application has not accepted the minion application, cause the master application to accept the minion application.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
Systems, apparatus, articles of manufacture, and methods are disclosed for association of cloud accounts by instantiating or executing machine-readable instructions to in response to a linking request, associate a first cloud account and a second cloud account, where the association causes changes made to the first cloud account to be propagated to the second cloud account, store the association in a database, monitor a configuration of the first cloud account, and after a change in the configuration information of the first cloud account, apply the configuration information corresponding to the first cloud account to the second cloud account.
A method for network address management is provided. Embodiments include determining a creation of a namespace associated with a cluster of computing devices, wherein a subset of computing resources of the cluster of computing devices is allocated to the namespace. Embodiments include assigning, to the namespace, a network address pool comprising a plurality of network addresses in a subnet, wherein the assigning causes the plurality of network addresses to be reserved exclusively for the namespace. Embodiments include receiving an indication that a pod is added to the namespace. Embodiments include, in response to the receiving of the indication, assigning a network address from the network address pool to the pod.
An example method for encrypting clusters during deployment may include retrieving, from a blueprint, resource information required to deploy a cluster including a host computing system and a virtual cluster manager node to manage the host computing system. The resource information may include host information and disk information required to deploy the virtual cluster manager node, and encryption information associated with a key provider. Based on the host information and the disk information, a clustered datastore may be created on the host computing system. Further, the virtual cluster manager node may be deployed on the clustered datastore. Based on the encryption information associated with the key provider, the virtual cluster manager node and associated disks may be encrypted. Upon encrypting the virtual cluster manager node, a cluster may be created and the host computing system may be added to the cluster.
H04L 67/1097 - Protocoles dans lesquels une application est distribuée parmi les nœuds du réseau pour le stockage distribué de données dans des réseaux, p. ex. dispositions de transport pour le système de fichiers réseau [NFS], réseaux de stockage [SAN] ou stockage en réseau [NAS]
A method of managing a virtual machine (VM) image for deployment of the VM across a plurality of software-defined data centers (SDDCs) includes the steps of: separately uploading parts of the VM image to a cloud storage, forming a complete image of the VM from the separately uploaded parts of the VM image, and downloading from the cloud storage the complete VM image to each of the SDDCs in which the VM is to be deployed.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
42.
MECHANISM TO ALLOW FOR MONITORING OF DISCONNECTED COMPONENTS IN CONTAINER ORCHESTRATION SYSTEMS
The disclosure provides a method for monitoring a disconnected component in a container orchestration system. The method generally includes obtaining, by an abstraction layer, monitoring data associated with the component while the component is connected to a network, wherein the abstraction layer comprises at least one proxy component acting as a proxy for the component in the container orchestration system; intercepting, by the abstraction layer, a query intended for the component, wherein the query originated from one or more monitoring agents configured to continuously monitor at least the component; and responding to the query based on the monitoring data obtained by the abstraction layer for the component.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
43.
RAN APPLICATION FOR INTERFERENCE DETECTION AND CLASSIFICATION
Some embodiments of the invention provide a method for a PIM (passive intermodulation interference) detection RAN (radio access network) application deployed across one or more RICs (RAN intelligent controllers) for detecting PIM in a RAN including multiple RAN base stations for servicing multiple users located across multiple regions, each region including at least one RAN base station. The method is performed for a particular region serviced by a particular RAN base station. The method detects (1) high uplink noise for the particular region and (2) antenna imbalance for the particular region. Based on said detection, the method determines whether high KPI (key performance indicator) impact is detected for the particular region. When high KPI impact is detected for the particular region, the method generates a PIM alert to notify an operator of the particular RAN base station that services the particular region that PIM is detected for the particular region.
H04B 7/08 - Systèmes de diversitéSystèmes à plusieurs antennes, c.-à-d. émission ou réception utilisant plusieurs antennes utilisant plusieurs antennes indépendantes espacées à la station de réception
H04B 17/382 - SurveillanceTests de canaux de propagation pour l’attribution de ressources, le contrôle d’accès ou le transfert
44.
SECURING CONNECTIONS BETWEEN A NETWORKING AND SECURITY CONTROLLER AND DISTRIBUTED AGENTS IN A CONTAINER-BASED CLUSTER
The disclosure provides a method for authenticating a network agent deployed in a networking environment. The method generally includes receiving, by a network controller in the networking environment, a name of an external node where the network agent is running and a token associated with the external node; in response to receiving the name of the external node, obtaining, by the network controller, a secret associated with the token; parsing, by the network controller, the secret to determine an expected external node name corresponding to the token; comparing the expected external node name with the received external node name; and trusting the network agent when the expected external node name and the received external node name match.
The disclosure provides an approach for gateway optimization. Embodiments include receiving, at a first gateway associated with a first tenant within a data center, a packet directed to a first public network address of an endpoint associated with a second tenant within the data center. Embodiments include performing, by the first gateway, network address translation (NAT) to translate the first public network address to a private network address of the endpoint. Embodiments include forwarding, by the first gateway, the packet to an edge gateway of the data center. Embodiments include forwarding, by the edge gateway, the packet to a second gateway associated with the second tenant within the data center without sending the packet to a public interface of the edge gateway. Embodiments include forwarding, by the second gateway, the packet to the endpoint.
One or more embodiments provide a method for data storage. For example, the method may include adding a second virtual disk to the VM, the second virtual disk backed by a second virtual disk file. The method may also include creating one or more volumes configured to store container data of the one or more containers, the one or more volumes using storage from the second virtual disk and not the first virtual disk. The method may furthermore include mounting the one or more volumes in the one or more containers. The method may in addition include backing up the second virtual disk file independent from the first virtual disk file to create a copy of the second virtual disk file.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
G06F 11/14 - Détection ou correction d'erreur dans les données par redondance dans les opérations, p. ex. en utilisant différentes séquences d'opérations aboutissant au même résultat
47.
Centralized Monitoring of Containerized Workloads in a Multi-Tenant, Multi-Cloud Environment
The disclosure provides a method for monitoring tenant workloads in a multi-cloud environment. The method generally includes determining a first new workload for a first tenant is deployed on a first data plane associated with a first cloud platform in the multi-cloud environment; configuring a monitoring stack on a second data plane associated with a second cloud platform in the multi-cloud environment to collect first metrics data for the first new workload; and creating a network policy allow list including a source internet protocol (IP) address associated with the monitoring stack, wherein the network policy allow list is to be used by an ingress controller deployed on the first data plane to control ingress traffic to the first new workload, including at least ingress traffic from the monitoring stack intended for the first new workload.
H04L 43/08 - Surveillance ou test en fonction de métriques spécifiques, p. ex. la qualité du service [QoS], la consommation d’énergie ou les paramètres environnementaux
H04L 41/0894 - Gestion de la configuration du réseau basée sur des règles
48.
METHODS AND SYSTEMS THAT AUTOMATICALLY GENERATE PARAMETERIZED CLOUD-INFRASTRUCTURE TEMPLATES
The current document is directed to an infrastructure-as-code (“IaC”) cloud-infrastructure-management service or system that automatically generates parameterized cloud-infrastructure templates that represent cloud-based infrastructure, including virtual networks, virtual machines, load balancers, and connection topologies. The IaC cloud-infrastructure manager automatically transforms cloud-infrastructure-specification-and-configuration files into a set of parameterized cloud-infrastructure-specification-and-configuration files and a parameters file that together comprise a parameterized cloud-infrastructure template.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
49.
EFFICIENT UNMAP HANDLING USING SYNCHRONIZED REDUNDANT COMPONENTS OF DATA OBJECTS
Components of a distributed data object are synchronized using streamlined tracking metadata. A target component of the distributed data object is detected as it becomes available and stale. A source component that is up-to-date and that mirrors the address space of the detected target component is identified. A set of mapped address ranges and a set of unmapped address ranges of the identified source component are obtained. A mapped address range of the target component that corresponds with an unmapped address range of the source component is identified. The identified mapped address range of the target component is then synchronized with the corresponding unmapped address range of the source component. Thus, unmapped address ranges are synchronized without using tracking metadata of the source component.
In some embodiments, a method receives a set of packets for a flow and determines a set of features for the flow from the set of packets. A classification of an elephant flow or a mice flow is selected based on the set of features. The classification is selected before assigning the flow to a network resource in a plurality of network resources. The method assigns the flow to a network resource in the plurality of network resources based on the classification for the flow and a set of classifications for flows currently assigned to the plurality of network resources. Then, the method sends the set of packets for the flow using the assigned network resource.
H04L 47/2441 - Trafic caractérisé par des attributs spécifiques, p. ex. la priorité ou QoS en s'appuyant sur la classification des flux, p. ex. en utilisant des services intégrés [IntServ]
H04L 47/2483 - Trafic caractérisé par des attributs spécifiques, p. ex. la priorité ou QoS en impliquant l’identification des flux individuels
51.
SITE RELIABILITY ENGINEERING AS A SERVICE (SREAAS) FOR SOFTWARE PRODUCTS
Site reliability engineering (SRE) may be provided as a service to software products, such as an on-premises software product residing at a first computing environment. A SRE service site may be hosted at a second computing environment that is remote and separate from the first computing environment. A SRE agent resides at the first computing environment to monitor the software product, and provides information, such as metric data or log information pertaining to the software product, to the SRE service site. A SRE service of the SRE service site performs analysis of the information to identify an issue with the software product, diagnosis to determine a cause of the issue, and identifies a remediation that may be applied by the SRE agent to address the issue.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
52.
CONNECTION ESTABLISHMENT USING SHARED CERTIFICATE IN GLOBAL SERVER LOAD BALANCING (GSLB) ENVIRONMENT
Example methods and systems for connection establishment in a global server load balancer (GSLB) environment are described. In one example, a computer system may establish a first connection with a first entity and a second connection with the second entity. The first connection may be established based on first parameter information that includes a shared certificate and a first identifier (ID). The second connection may be established based on second parameter information that includes the shared certificate and a second ID. The shared certificate may be shared by multiple entities that include the first entity and a second entity. In response to receiving a first request, a first response may be generated and sent towards the first entity via the first connection. In response to receiving a second request, a second response may be generated and sent towards the second entity via the second connection.
H04L 61/4511 - Répertoires de réseauCorrespondance nom-adresse en utilisant des répertoires normalisésRépertoires de réseauCorrespondance nom-adresse en utilisant des protocoles normalisés d'accès aux répertoires en utilisant le système de noms de domaine [DNS]
53.
DYNAMIC SITE SELECTION IN GLOBAL SERVER LOAD BALANCING (GSLB) ENVIRONMENT
Example methods and systems for dynamic site selection in a global server load balancer (GSLB) environment are described. In one example, a computer system may obtain first health information from a first entity and second health information from a second entity. The first health information may be generated based on multiple first traffic flows between (a) multiple first client devices and (b) a first pool of backend servers. The second health information may be generated based on multiple second traffic flows between (a) multiple second client devices and (b) a second pool of backend servers. In response to receiving a request to access the service, the computer may select a selected site based on the first health information and/or second health information. A response may be generated and sent to cause a third client device to access the service by directing a third traffic flow towards the selected site.
Some embodiments provide a novel method for emulating a local storage for a host computer comprising a network interface card (NIC). On the NIC, a storage emulator program is deployed to emulate a local virtual volume (vVol) storage, from several external storages accessed through the NIC, for a set of processes executing on the host computer. The several external storages include at least one external storage that is not a native vVol storage. An interface of a bus is configured on the NIC to connect the NIC to the host computer to provide the emulated local vVol storage for the set of processes.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
55.
OPTIMIZING A NIC THAT EMULATES A LOCAL NVME STORAGE DEVICE FOR PROCESSES OF A HOST COMPUTER
Some embodiments provide a novel method for configuring a network interface card (NIC) that is connected to a host computer and that emulates a local non-volatile memory express (NVMe) storage device, using external storages, for a set of processes executing on the host. The method configures, on the NIC's operating system (OS), a storage emulator program to present the external storages to the host processes as the local NVMe storage device. The method configures, on the NIC's OS, a disk device to exchange NVMe requests and responses between the host processes and the external storages by exchanging the NVMe requests and responses (1) with a virtual NVMe (vNVMe) controller of the NIC through a storage stack of the OS, or (2) directly with the vNVMe controller such that the disk device bypasses the storage stack. Exchanging NVMe requests and responses directly with the vNVMe controller optimizes the NIC's performance.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
56.
SYSTEM AND METHOD FOR ANALYZING RESOURCE ELASTICITY PROFILES OF COMPUTING ENVIRONMENTS
A system and computer-implemented method for analyzing software-defined data centers (SDDCs) uses resource utilization metrics for an SDDC to determine a plurality of scale-in and scale-out events in the SDDC for a period of time using a particular combination of resource scale-in and scale-out thresholds defined and to compute a total cost of the SDDC during the period of time based on a changing number of hosts being used in the SDDC due to the plurality of scale-in and scale-out events in the SDDC during the period of time. Parameters of a resource manager in the SDDC are set according to the particular combination of resource scale-in and scale-out thresholds in response to user input.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
57.
Methods and Systems that Generate Random Numbers Based on Nondeterministic Phenomena that are Computationally Initiated and Computationally Accessed Within a Computer System
The current document is directed to methods and systems that generate sequences of random numbers. Unlike many currently available random-number generators that continuously measures a physical apparatus or other signal source, the currently disclosed methods and systems employ nondeterministic phenomena that are computationally initiated and computationally accessed within a computer system. The nondeterministic phenomena are often a produced by multiple simultaneously executing, asynchronous threads or other computational entities, with the unpredictability arising from multiple different types and sources of nondeterministic behavior within the computer system. Unlike pseudorandom-number generators, statistics and metrics computed from sequences of random numbers produced by the currently disclosed random-number generators have values close to those expected for a random-selection process. Unlike random numbers that depend on specialized circuitry or single signal sources, the currently disclosed random-number generators used standard components and significant redundancy and robustness to single-point failures.
G06F 7/58 - Générateurs de nombres aléatoires ou pseudo-aléatoires
58.
METHODS AND SYSTEMS THAT AUTOMATICALLY GENERATE SCHEMA FOR CLOUD-INFRASTRUCTURE-SPECIFICATION-AND-CONFIGURATION FILES THAT ARE USED FOR AUTOCOMPLETION AND VALIDATION
The current document is directed to an IaC cloud-infrastructure-management service or system that automatically generates schema for cloud-infrastructure-specification-and-configuration files used by integrated development environments (“IDEs”), associated with the IaC cloud-infrastructure-management service or system, for autocompletion and validation. The IaC cloud-infrastructure management service or system accesses cloud-provider plug-ins to collect information and then encodes collected information regarding resource types, resource-type-associated functions and function arguments, cloud-infrastructure-specification-and-configuration data-file syntax, and other relevant information into cloud-infrastructure-specification-and-configuration data-file schemas. The schemas are input to integrated IDEs to control autocompletion and cloud-infrastructure-specification-and-configuration data-file validation.
Described herein are systems, methods, and software to manage the assignment of hosts to host clusters and the assignment of virtual endpoints to the host clusters. In one implementation, a management service identifies a host to be added to a computing environment and identifies physical resources available on the host. The management service further determines a host cluster for the host from a plurality of host clusters in the computing environment based on the physical resources available on the host and assign the host to the host cluster.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
60.
REINFORCEMENT LEARNING-BASED DYNAMIC AGGREGATION FOR DISTRIBUTED AND FEDERATED LEARNING
A framework for implementing reinforcement learning (RL)-based dynamic aggregation for distributed learning (DL) and federated learning (FL) is provided. In one set of embodiments, the framework includes an RL agent that interacts with the parameter server and clients of a DL/FL system and periodically receives two inputs from the system while the system is executing a training run: a “state” comprising information regarding the current runtime properties of the system and a “reward” comprising information pertaining to one or more training metrics to be optimized. In response to these inputs, the RL agent generates an “action” comprising information for modifying the parameter server's aggregation function in a manner that maximizes future cumulative rewards expected from the DL/FL system based on the state.
Some embodiments of the invention provide, for a RAN (radio access network), a method of rapidly upgrading multiple machines distributed across multiple cell sites, each particular machine of the multiple machines executing one or more base station applications. The method downloads a second boot disk for each of the multiple machines at each of the multiple cell sites, the second boot disk including an upgraded version of a first boot disk currently used by each of the multiple machines. For each particular machine, the method (1) powers off the particular machine, (2) creates a copy of data stored by a data disk of the particular machine to preserve data stored currently on the data disk, (3) replaces the first boot disk of the particular machine with the second boot disk that is the upgraded version of the first boot disk, and (4) powers on the particular machine.
Some embodiments provide a novel method for configuring edge routers in a first network. The method configures on a first compute node of the first network (1) a first higher-level edge router and (2) a set of lower-level edge routers. Each lower-level edge router is configured for a different set of subnetworks defined in the first network and is connected to an external second network through the first higher-level edge router. The method detects a condition that requires a particular lower-level edge router for a particular subnetwork to be moved to another compute node. The method configures the particular lower-level edge router to operate on a second compute node below a second higher-level edge router operating on the second compute node to connect the particular lower-level edge router to the external second network.
An example method may include executing, using an integration plugin installed on a first cloud-based automation platform running in a first management node, a schedule job to obtain an API response from a second management node executing a second cloud-based automation platform. The API response may include a custom form schema of a first form associated with the second cloud-based automation platform in a first defined data format. Further, the method may include parsing the custom form schema to determine form fields and dependency of the form fields. Furthermore, the method may include translating the custom form schema into a second defined data format supported by the first cloud-based automation platform based on the parsed custom form schema. Further, the method may include persisting the translated custom form schema in a database associated with the first cloud-based automation platform.
System and computer-implemented method for updating applications running in a distributed computing system uses an update agent associated with an existing application to make a request for update information regarding the existing application to a service to receive a response that includes a target version of the existing application and an update window of time, which is based on information contained in the request for update information. A deployment of the target version of the existing application within the update window of time is coordinated by the update agent when the target version is newer than a current version of the existing application.
Automated computer-implemented methods and systems for troubleshooting and resolving problems with objects of a cloud infrastructure are described herein. In response to detecting abnormal behavior of an object running in the cloud infrastructure based on a key performance indicator (“KPI”) of the object, a graphical user interface (“GUI”) is displayed to enable a user to select KPIs of components of the object. For each of the components, a separate rule learning engine is deployed to generate rules for detecting a problem with the component based on the KPI of the object and the KPIs of the component. The rules are subsequently used to detect a runtime problem with the object and display in the GUI remedial measures for resolving the problem. Remedial measures are automatically executed to resolve the problem with the object via the GUI.
Described herein are systems, methods, and software to manage applications, databases, data centers, and personnel during mergers and acquisitions. In one implementation, a management service migrates one or more applications from one or more data centers associated with a first company to one or more data centers associated with a second acquiring company. The management service further monitors resource usage associated with the one or more applications and determines a configuration for deploying the one or more applications based on the resource usage. The configuration defines at least execution locations in a set of data centers for the second company.
One example method to perform storage capacity planning in a hyper-converged infrastructure (HCI) environment is disclosed. The method includes obtaining historical storage capacity usage data of a set of virtual storage area network (vSAN) clusters, processing the historical storage capacity usage data to generate processed historical storage capacity usage data, training a machine learning model with the processed historical storage capacity usage data to generate a first trained machine learning model, and in response to a first vSAN cluster being newly deployed in the HCI environment, dispatching the first trained machine learning model to the first vSAN cluster.
Example methods and systems for implementing an process-aware identity firewall are described. In one example, a computer system may detect a request for a virtualized computing instance to access a resource. The computer system may obtain (a) identity information identifying a user or a user device associated with the virtualized computing instance and (b) process information associated with a process that initiates the request to access the resource. The computer system may map the identity information, the network event information and the process information to an identity firewall rule that includes at least (a) a first parameter that is mappable to the identity information, (b) a second parameter that is mappable to the network event information and (c) a third parameter that is mappable to the process information. The identity firewall rule may be applied to allow or block the request to access the resource.
An example method for provisioning data volume for a virtual compute instance may include receiving a request to provision a data volume for a virtual compute instance. The request may specify a size of the data volume, a type of the data volume, and a first input/output operations per second (IOPS) value for the data volume. Further, the method may include determining a recommended IOPS value for the data volume by applying a logic to the specified size, the specified type, and the first IOPS value. Furthermore, the method may include provisioning the data volume for the virtual compute instance with the specified size, the specified type, and the recommended IOPS value.
Systems, apparatus, articles of manufacture, and methods are disclosed to generate and manage logical workload domain clusters in a computing environment. An example apparatus includes interface circuitry, machine readable instructions, and programmable circuitry to at least one of instantiate or execute the machine readable instructions to determine that a first resource usage of a first cluster in a first workload domain satisfies a threshold indicative of an upper limit of resource usage in the first cluster, identify a second cluster in a second workload domain having an availability based on a second resource usage represented resource usage data, the second workload domain logically grouped with the first workload domain based on a criterion, and reallocate a host from the second cluster to the first cluster.
Some embodiments provide a method for controlling flow processing by an edge cluster including a first edge machine set operating in a first location set of a public cloud and a second edge machine set operating in a second location set of the public cloud. A controller set configures first and second managed forwarding element (MFE) sets operating in the first and second location sets respectively, with first and second forwarding rule sets to respectively forward first and second flows sets to the first and second edge machine sets for performing services. The first forwarding rule set specifies a first network address set for the first edge machine set, and the second forwarding rule set specifies a second network address set for the second edge machine set. The controller set monitors each edge machine to determine whether it is available to perform the services.
Some embodiments provide a method for using a first SDN controller as a Network Controller as a Service (NCaaS). The first SDN controller receives a first set of network attributes regarding network elements in a first container cluster configured by a second SDN controller, and a second set of network attributes regarding network elements in a second container cluster configured by a third SDN controller. These container clusters do not have a controller for defining particular network policies. Based on the sets of network attributes, the first SDN controller defines the particular network policies to control forwarding data messages between the first and second container clusters. The first SDN controller distributes at least a subset of the particular network policies to the first container cluster in order for network elements at the first container cluster to enforce on data messages exchanged between the first and second container clusters.
H04L 41/122 - Découverte ou gestion des topologies de réseau des topologies virtualisées, p. ex. les réseaux définis par logiciel [SDN] ou la virtualisation de la fonction réseau [NFV]
H04L 41/0894 - Gestion de la configuration du réseau basée sur des règles
Some embodiments of the invention provide a method for providing a functions as a service (FaaS). The method is performed at a FaaS framework executing in a first cloud. The method receives a first API (Application Programming Interface) call invoking a particular function that is stored by for the FaaS framework. The method selects, from multiple cloud providers, a particular cloud provider for executing the particular function. The method sends executable code for the particular function in a format compatible with the selected particular cloud provider to the particular cloud provider to use to instantiate and execute the particular function.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
Some embodiments of the invention provide a method of implementing a FaaS (functions as a service) framework executing in a first cloud for multiple applications operating on multiple machines in the first cloud. The method provides to the FaaS framework (1) multiple sets of credentials for accessing of multiple cloud providers and (2) a set of selection rules for selecting cloud providers from the multiple cloud providers to execute multiple functions for the multiple programs. For each particular function in the multiple functions, the method configures the FaaS framework to use the set of selection rules to select a particular cloud provider from the multiple cloud providers to execute the particular function, and configures the FaaS framework to use a particular set of credentials associated with the selected particular cloud provider from the multiple sets of credentials to forward the particular function to the selected particular cloud provider for execution.
Some embodiments of the invention provide a WAN optimization method for optimizing traffic flows through a WAN connecting multiple sites each having at least one router. The method is performed in a kernel space of a first router at a first site. From a second router at a second site, the method receives, in an optimized data stream originating from a source device at the second site and destined to a destination device at the first site, a file including compressed segments not yet stored in a database of the first router. The method copies the compressed segments to a shared memory used with a decompression program operating in the first router's user space. For each compressed segment, the method receives, from the decompression program, a decompressed segment obtained by decompressing the compressed segment, and stores the decompressed segment in a kernel space memory for use in processing the file.
H04L 45/00 - Routage ou recherche de routes de paquets dans les réseaux de commutation de données
H04L 45/76 - Routage dans des topologies définies par logiciel, p. ex. l’acheminement entre des machines virtuelles
H04L 67/1097 - Protocoles dans lesquels une application est distribuée parmi les nœuds du réseau pour le stockage distribué de données dans des réseaux, p. ex. dispositions de transport pour le système de fichiers réseau [NFS], réseaux de stockage [SAN] ou stockage en réseau [NAS]
76.
METHODS AND SYSTEMS FOR OPTIMIZING AND PROVISIONING VIRTUAL DATA STORAGE
This disclosure is directed to automated computer-implemented methods and systems for optimizing and provisioning virtual data storage of virtual machines in a data center. The methods and systems attach virtual disks to virtual machines on the same datastore of the VMs. The methods and systems adjust storage space of the VDs based on storage space available to the VDs, and retains data stored in the VDs in response to receiving a request to delete the VM and the VD identifies as persistent.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
77.
SECURITY-POLICY BASED VIRTUAL MACHINE MIGRATION OR CLONING
In an example, a method may include maintaining a virtual machine (VM) object storing a security policy of a VM running on a first host computing system. Further, the method may include attaching the VM object to the VM. In response to detecting a trigger event, the method may include identifying a second host computing system that is in compliance with the security policy in the VM object. Furthermore, the method may include executing a management operation to migrate or clone the VM along with the attached VM object from the first host computing system to the second host computing system.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
A framework for detecting malware, and in particular for identifying the malware families to which detected malware samples belong, is provided. In one set of embodiments, the framework receives known malware samples, builds execution chains for the samples, and clusters the execution chains using a similarity metric, resulting in execution chain clusters that correspond to malware families. The framework then uses the clusters to detect whether an unknown sample is malicious, and more specifically whether the unknown sample is part of a malware family represented by one of the clusters.
G06F 21/56 - Détection ou gestion de programmes malveillants, p. ex. dispositions anti-virus
G06F 21/52 - Contrôle des utilisateurs, des programmes ou des dispositifs de préservation de l’intégrité des plates-formes, p. ex. des processeurs, des micrologiciels ou des systèmes d’exploitation au stade de l’exécution du programme, p. ex. intégrité de la pile, débordement de tampon ou prévention d'effacement involontaire de données
Computer-implemented techniques for efficiently building exponential histograms are provided. In certain embodiments, these techniques can insert a sample into an exponential histogram with n bins in constant (i.e., O(1)) time, rather than O(n) time. Accordingly, these techniques can scale well for large values of n (which allows for a high level of histogram detail/granularity) and can avoid sample skew when building an exponential histogram of software process runtimes or other software metrics.
G06F 5/01 - Procédés ou dispositions pour la conversion de données, sans modification de l'ordre ou du contenu des données maniées pour le décalage, p. ex. la justification, le changement d'échelle, la normalisation
80.
CONFIGURING PNIC TO PERFORM FLOW PROCESSING OFFLOAD USING VIRTUAL PORT IDENTIFIERS
Some embodiments of the invention provide a method for configuring a physical network card or physical network controller (pNIC) to provide flow processing offload (FPO) for a host computer connected to the pNIC. The host computers host a set of compute nodes in a virtual network. The set of compute nodes are each associated with a set of interfaces that are each assigned a locally-unique virtual port identifier (VPID) by a flow processing and action generator. The pNIC includes a set of interfaces that are assigned physical port identifiers (PPIDs) by the pNIC. The method includes providing the pNIC with a set of mappings between VPIDs and PPIDs. The method also includes sending updates to the mappings as compute nodes migrate, connect to different interfaces of the pNIC, are assigned different VPIDs, etc.
H04L 49/109 - Éléments de commutation de paquets caractérisés par la construction de la matrice de commutation intégrés sur micropuce, p. ex. interrupteurs sur puce
Some embodiments of the invention provide a method for providing functions as a service (FaaS). At a FaaS framework executing in a first cloud, the method receives a first API (Application Programming Interface) call invoking a first function that is defined by the framework. At the FaaS framework, the method generates, from the first API call, a second API call that directs a set of machines in a second cloud to invoke a second function that performs a desired operation of the first function in the second cloud. At the FaaS framework, the method forwards the second API call to the second cloud for the set of machines to instantiate the second function after receiving the second API call, to use the second function to perform the desired operation, and to discard the second function after performing the desired operation.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
Some embodiments of the invention provide a WAN optimization method for optimizing traffic flows through a WAN that connects multiple sites each having at least one router. The method is performed at a first router at a first site. From a second router at a second site, the method receives a file, that includes a set of segment identifiers corresponding to a set of segments stored by the first router, in an optimized first data stream originating from a source device at the second site and destined to a destination device at the first site. For each segment identifier in the set, the method attempts to retrieve a corresponding segment from a kernel memory of the first router. When the corresponding segment is not stored in the kernel memory, the method performs an operation to DMA the segment into the kernel memory from a disk storage of the first router.
Some embodiments of the invention provide a WAN optimization method for optimizing traffic flows through a WAN. The method is performed in a kernel space of a first router at a first site. From a second router at a second site, the method receives, in an optimized data stream from a second site source device to a first site destination device, a file including compressed segments not yet stored by the first router, and copies the compressed segments to a memory shared with a decompression program in the first router's user space. For each compressed segment, the method receives a notification that a decompressed segment obtained by decompressing the compressed segment has been written to a disk storage of the first router, the notification including a block address for the decompressed segment, and updates a cache of the first router with an entry mapping the decompressed segment to the block address.
G06F 15/16 - Associations de plusieurs calculateurs numériques comportant chacun au moins une unité arithmétique, une unité programme et un registre, p. ex. pour le traitement simultané de plusieurs programmes
H04L 47/12 - Prévention de la congestionRécupération de la congestion
H04L 47/43 - Assemblage ou désassemblage de paquets, p. ex. par segmentation et réassemblage [SAR]
84.
CARDINALITY-BASED INDEX CACHING OF TIME SERIES DATA
In a computer-implemented method for cardinality-based index caching of time series data, a cardinality of an index of a time series data monitoring system is determined. The cardinality of the index is compared to a cardinality threshold. Responsive to determining that the cardinality of the index exceeds the cardinality threshold, the index is cached in a local memory cache of a query node of the times series data monitoring system. Responsive to determining that the cardinality of the index does not exceed the cardinality threshold, the index is cached in a distributed memory cache of the times series data monitoring system.
Automated computer-implemented methods and systems for automated detection and termination of idle objects executing in a cloud infrastructure. The methods and systems learn rules from previous instances in which the object was terminated based on log messages associated with the previous instances. The rules are used to perform real time detection of idle instances of the object and, in response, terminate the object.
Some embodiments provide a novel method for deploying an edge device as a cluster of pods. The method receives a set of criteria for deploying the edge device. The method uses the set of criteria to deploy the edge device as a set of one or more pods executing on a set of one or more nodes. The method implements, on the set of pods, a set of one or more services to perform on data message flows. At least two pods deployed for the edge cluster perform different service operations of different service types such that the different service types are able to be scaled independently.
The disclosure herein describes converting a disk cluster to a different format. A format conversion instruction associated with a disk cluster is received. A first subgroup of disks of the disk cluster that are the emptiest disks of the disk cluster are identified and all data is evacuated from the first subgroup of disks to other disks of the disk cluster. The first subgroup of disks is reformatted based on the received format conversion instruction. A group of data objects stored in the disk cluster is converted based on the format conversion instruction and the converted group of data objects are written to the reformatted first subgroup of disks. The process iterates through the disks of the disk cluster to reformat all disks and convert all data objects based on the received format conversion instruction. The process reduces the write operations required to convert the format of the disk cluster.
A method of upgrading a cluster of hosts, where the hosts are running at least one workload designated as critical, includes the steps of: adding a host that has been upgraded to the cluster of hosts, selecting one of the hosts for upgrade, determining whether any of the workloads running in the selected host are designated as critical, migrating all of the workloads from the selected host that are designated as critical to the added host, and migrating each of the workloads from the selected host that are not designated as critical to a selected one of the hosts of the cluster.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
Some embodiments of the invention provide a method for implementing an edge device that handles data traffic between a logical network and an external network. The method monitors resource usage of a node pool that includes multiple nodes that each executes a respective set of pods. Each of the pods is for performing a respective set of data message processing operations for at least one of multiple logical routers. The method determines that a particular node in the node pool has insufficient resources for the particular node's respective set of pods to adequately perform their respective sets of data message processing operations. Based on the determination, the method automatically provides additional resources to the node pool by instantiating at least one additional node in the node pool.
H04L 41/0816 - Réglages de configuration caractérisés par les conditions déclenchant un changement de paramètres la condition étant une adaptation, p. ex. en réponse aux événements dans le réseau
90.
MULTI-NETWORK/DOMAIN SERVICE DISCOVERY IN A CONTAINER ORCHESTRATION PLATFORM
A computer-implemented method, medium, and system for multi-network/domain service discovery in a container orchestration platform are disclosed. In one computer-implemented method, a pool of servers with a plurality of network interface controllers (NICs) is created in a load balancer and by an operator in a worker node of a container orchestration platform, where each of the plurality of NICs is defined by a corresponding network attachment definition (NAD) object of a plurality of NAD objects. A virtual service object is generated using an annotation corresponding to the plurality of NAD objects. The virtual service object is associated to the pool of servers with the plurality of NICs. An internet protocol (IP) address of the virtual service object is transmitted to the container orchestration platform to update a status of a service object in the container orchestration platform using the IP address.
H04L 67/1014 - Sélection du serveur pour la répartition de charge basée sur le contenu d'une demande
H04L 43/0817 - Surveillance ou test en fonction de métriques spécifiques, p. ex. la qualité du service [QoS], la consommation d’énergie ou les paramètres environnementaux en vérifiant la disponibilité en vérifiant le fonctionnement
H04L 67/1008 - Sélection du serveur pour la répartition de charge basée sur les paramètres des serveurs, p. ex. la mémoire disponible ou la charge de travail
H04L 67/1029 - Protocoles dans lesquels une application est distribuée parmi les nœuds du réseau pour accéder à un serveur parmi une pluralité de serveurs répliqués en utilisant des données liées à l'état des serveurs par un répartiteur de charge
91.
OBJECT GOVERNANCE CONTROLS IN MULTI-TENANT NoSQL DATASTORE
The disclosure provides a techniques for implementing custom tenant governance controls for objects stored in a datastore. A method includes receiving a request from a tenant for enrollment in a governance service with a service provider; creating a tenant control catalog with an object governor registry based on the request for enrollment; receiving, from the tenant, a specification for object governors, wherein the specification comprises at least a name, a condition indicating when to implement one of the object governors, and code of a policy handler that is executed when the one of the object governors is implemented based on satisfaction of the condition; creating the object governors within the object governor registry based on the specification; and causing the code of the policy handler to be executed when the condition of at least one of the object governors is satisfied.
A system manages a log-structured file system (LFS) by: receiving an input/output (I/O) operation for the LFS, the I/O operation prompting a key to be added to a first node of a tree metadata structure, the tree mapping addresses in a first address space to addresses in a second address space; determining that addition of the key to the first node would exceed a maximum number of keys allowed in the first node; adding a second node to the tree based on the determining, the second node containing the key; moving a quantity of keys from the first node to the second node such that a total number of keys resulting in the second node is less than half of the maximum number of keys, minus one, configured to be stored in nodes of the LFS; and writing updates to the tree metadata structure within the LFS.
In one set of embodiments, the techniques of the present disclosure involve leveraging the concept of software enclaves to deploy and run an endpoint detection and response (EDR) security agent for a VM within the VM's associated software enclave, rather than within the VM itself. The enclave security agent can then cooperate with a central EDR manager, as well as with a minimal in-guest helper agent, to detect and remediate malware in the VM. Because the enclave security agent is isolated from and thus inaccessible by potentially malicious guest processes, this solution is significantly more secure than current EDR systems.
G06F 21/56 - Détection ou gestion de programmes malveillants, p. ex. dispositions anti-virus
G06F 21/53 - Contrôle des utilisateurs, des programmes ou des dispositifs de préservation de l’intégrité des plates-formes, p. ex. des processeurs, des micrologiciels ou des systèmes d’exploitation au stade de l’exécution du programme, p. ex. intégrité de la pile, débordement de tampon ou prévention d'effacement involontaire de données par exécution dans un environnement restreint, p. ex. "boîte à sable" ou machine virtuelle sécurisée
94.
DESIRED STATE MANAGEMENT OF HOSTS AND CLUSTERS IN A HYBRID CLOUD
A method of managing desired states for host computers and for clusters of host computers of software-defined data centers (SDDCs), includes the steps of: creating a first desired state file for a first cluster of the clusters and creating a second desired state file for a second cluster of the clusters, and storing the first and second desired state files together, wherein the first and second clusters are in a first SDDC of the SDDCs, and wherein the second desired state file includes desired configurations that are absent from the first desired state file; and transmitting a first instruction to update actual configurations of the first cluster to match corresponding desired configurations from the first desired state file and transmitting a second instruction to update actual configurations of the second cluster to match corresponding desired configurations from the second desired state file.
Some implementations herein relate to data storage. For example, a method may include receiving a first input/output (I/O) operation indicating a first logical block address (LBA) of a single address space, where the single address space corresponds to storage across a first plurality of storage devices. The method may also include determining that a first LBA table of a plurality of LBA tables is associated with the first LBA, where each of the plurality of LBA tables is associated with a different corresponding portion of the single address space. The method may include storing data corresponding to the first I/O operation at a first physical address of a first storage device of a second plurality of storage devices. Additionally, the method may include adding a first entry to the first LBA table, the first entry mapping the first LBA to the first physical address.
Example methods and systems for connectivity service provisioning for a software-defined data center (SDDC) group are described. In one example, a computer system may detect an event that affects a first connectivity service connecting multiple members of the SDDC group. The computer system may obtain first routing information that is applicable in a first SDDC; and second routing information that is applicable in a second SDDC. In response to the event, the computer system may generate and send a first instruction towards the first SDDC and a second instruction towards the second SDDC to cause: (a) the first SDDC and second SDDC to establish a second connectivity service; (b) the first SDDC to update the first routing information to associate a first flow with the second connectivity service; and (c) the second SDDC to update the second routing information to associate a second flow with the second connectivity service.
Various aspects are disclosed for remotely delivering, checking, and applying datacenter management configurations. A gateway service uses a set repository function provided that configures a datacenter management service to use a perimeter layer script repository of the gateway service for synchronization. The gateway service causes the datacenter management service to synchronize a datacenter layer script repository to store a script identified and retrieved from the perimeter layer script repository. The gateway service causes the datacenter management service to execute the script from its datacenter layer script repository.
H04L 41/082 - Réglages de configuration caractérisés par les conditions déclenchant un changement de paramètres la condition étant des mises à jour ou des mises à niveau des fonctionnalités réseau
H04L 41/0273 - Échange ou transport d’informations de gestion de réseau en utilisant l’InternetIntégration de serveurs de gestion du Web dans des éléments de réseauProtocoles basés sur les services du Web en utilisant des services du Web pour la gestion du réseau, p. ex. le protocole d’accès aux objets simples [SOAP]
Some embodiments provide a method for a data message processing device that includes multiple network interfaces associated with at least two different non-uniform memory access (NUMA) nodes. The method receives a data message at a first network interface associated with a particular one of the NUMA nodes. Based on processing of the data message, the method identifies multiple output options for the data message. Each of the output options has an equal forwarding cost and each output option is associated with a respective one of the NUMA nodes. The method selects an output option for the data message that is associated with the particular NUMA node to avoid cross-NUMA node processing of the data message.
Workload-responsive segment cleaning of log structured filesystems (LFSs) is disclosed. When multiple independent LFSs overlap on spanning a set of storage disks (including non-volatile memory express storage), a global segment cleaner (GSC) for each disk coordinates the cleaning rates of the local segment cleaners (LSCs) for each LFS having a presence on that disk. LFSs send usage information to relevant GSCs that select usage thresholds to trigger cleaning and cleaning rates. When capacity fullness (e.g., segments having at least one used block) meets a threshold, segment cleaning is performed at a rate based on capacity fullness and an equilibrium cleaning rate. Cleaning rates speed up when storage is more full, to provide capacity for burst writing events, but slow down when less full, to reduce overhead burden. LFSs clean at the highest rate identified for every GSC's usage threshold an LFS meets.
Workload-responsive distributed segment cleaning of log structured filesystems (LFSs) is disclosed. When multiple independent LFSs overlap on spanning a set of storage disks (including non-volatile memory express storage), a global segment cleaner (GSC) for each disk coordinates the cleaning rates of the local segment cleaners (LSCs) for each LFS having a presence on that disk. LFSs send usage information to relevant GSCs that select usage thresholds to trigger cleaning and cleaning rates. When capacity fullness (e.g., segments having at least one used block) meets a threshold, segment cleaning is performed at a rate based on capacity fullness and an equilibrium cleaning rate. Cleaning rates speed up when storage is more full, to provide capacity for burst writing events, but slow down when less full, to reduce overhead burden. LFSs clean at the highest rate identified for every GSC's usage threshold an LFS meets.
