Abstract: Techniques for facilitating connectivity to vPLCs created in a CSP-provided infrastructure in a region. Within the CSP-provided infrastructure in a region, when the destination of a packet is determined to be an endpoint associated with a particular vPLC, the packet is tagged with information related to the particular vPLC. The vPLC-related information for the particular vPLC can include, for example, a vPLC identifier identifying the particular vPLC, an identifier identifying a customer associated with the endpoint, a virtual cloud network identifier identifying a virtual cloud network (VCN) belonging to the particular vPLC and where the endpoint is part of the VCN, and other vPLC-related information. The packet is then routed or communicated within the CSP-provided infrastructure in a region along with the tagged vPLC-related information. The vPLC-related information is used as part of the connectivity and for routing of packets within the CSP-provided infrastructure in a region.

Abstract: Novel techniques are disclosed for providing vPLC-specific metadata service including customized vPLC-specific metadata. In certain embodiments, each vPLC may generate a customized metadata using its corresponding vPLC-specific customization instructions. In some embodiments, a vPLC-specific metadata service may be performed using pre-generated customized vPLC-specific metadata, on-the-fly customized metadata, pre-generated CSP-format metadata, or combinations thereof.

Abstract: Techniques are described herein for applying access controls to logical secure elements (LSEs) running on the same secure element hardware platform. Embodiments include a firmware component that determines whether a message targeting an LSE is authorized to trigger an operation. For example, the firmware component may verify a signature of the received message using a public key, shared secret, or other access control key. Additionally or alternatively, access control policies may be defined to constrain the load of the LSEs on the SE platform hardware and/or to prioritize LSE access. For example, the access control policies may define usage thresholds, such as maximum threshold memory and/or processor utilization rates. As another example, the access controls may restrict the active time for an LSE to a threshold duration. If access constraints are violated or the message cannot be verified, then the firmware component may delay or deny the operation.

Abstract: Systems and techniques for budget-based management of a cloud infrastructure are disclosed. A system monitors a cloud infrastructure for one or more trigger-action conditions associated with the cloud infrastructure. When a trigger-action condition is detected, the system determines a cloud infrastructure modification action that corresponds to the detected trigger condition. The system may apply the cloud infrastructure modification action to the cloud infrastructure. A cloud infrastructure modification action may modify one or more the workstation resources such that a rate of budget consumption is changed, for example, by pausing a resource, deleting a resource, resuming a paused resource, or changing from one resource to a different resource.

Abstract: Techniques for presenting a graphical user interface (GUI) for configuring a cloud service workstation are disclosed. The system presents a GUI that presents a plurality of possible workstation configurations and the costs associated with each respective workstation configuration, prior to creation of a workstation. The GUI updates the cost associated with a workstation configuration responsive to receiving a selection to modify the workstation configuration from a user. The user may request a different configuration based on a single user input, without specifying which resources to modify. The GUI may recommend a workstation configuration based on one or more user inputs such as a budget, an application service domain, a duration, or a processing power requirement.

Abstract: Techniques are disclosed herein for objective function optimization in target based hyperparameter tuning. In one aspect, a computer-implemented method is provided that includes initializing a machine learning algorithm with a set of hyperparameter values and obtaining a hyperparameter objective function that comprises a domain score for each domain that is calculated based on a number of instances within an evaluation dataset that are correctly or incorrectly predicted by the machine learning algorithm during a given trial. For each trial of a hyperparameter tuning process: training the machine learning algorithm to generate a machine learning model, running the machine learning model in different domains using the set of hyperparameter values, evaluating the machine learning model for each domain, and once the machine learning model has reached convergence, outputting at least one machine learning model.

Abstract: Techniques are disclosed for deploying a computing resource (e.g., a service) in response to user input. A computer-implemented method can include operations of receiving (e.g., by a gateway computer of a cloud-computing environment) a request comprising an identifier for a computing component of the cloud-computing environment. The computing device receiving the request may determine whether the identifier exists in a routing table that is accessible to the computing device. If so, the request may be forwarded to the computing component. If not, the device may transmit an error code (e.g., to the user device that initiated the request) indicating the computing component is unavailable and a bootstrap request to a deployment orchestrator that is configured to deploy the requested computing component. Once deployed, the computing component may be added to a routing table such that subsequent requests can be properly routed to and processed by the computing component.

Abstract: Aspects of the present disclosure include implementing fabric availability and synchronization (FAS) agents within a fabric network. In one example, a first FAS agent executing on a first network device may receive, from a second network device, a command to modify a configuration of a second network device. The first FAS may upgrade the configuration of the first network device based on the command from a current configuration to a new configuration. The first FAS agent increment a state identifier associated with the configuration of the first network device to a new state identifier associated with the new configuration. The first FAS agent may then transmit a control packet that includes the new state identifier. A second FAS agent executing on the second network device may receive the control packet and execute the command to update the configuration of the second network device to the new configuration.

Abstract: Techniques discussed herein relate to providing in-memory workflow management at an edge device (e.g., a computing device distinct from and operating remotely with respect to a data center). The edge device can operate as a computing node in a computing cluster of edge devices and implement a hosting environment (e.g., a distributed data plane). A work request can be obtained by an in-memory workflow manager of the edge device. The work request may include an intended state of a data plane resource (e.g., a computing cluster, a virtual machine, etc.). The in-memory workflow manager can determine the work request has not commenced and initialize an in-memory execution thread to execute orchestration tasks to configure a data plane of the computing cluster according to the intended state. Current state data corresponding to the configured data plane may be provided to the user device and eventually displayed.

Abstract: Embodiments include systems and methods for managing a network of nodes with delta processing. A network with a plurality of connected nodes can be stored, the nodes representing entities of the network. One or more deltas to the network that indicate updates to the connections among the plurality of nodes can be received. The deltas can be added to a queue. The connections between the nodes of the network can be updated using a delta from the queue. The network can be processed after updating the connections between the nodes to generate a vector for a given node. One or more paths for the given node can be identified based on the generated vector.

Abstract: Techniques for generating supplemental information based on runbook operation results are disclosed. A system generates and displays supplemental information for a runbook execution interface based on one of a system component associated with an executable operation of a runbook, and a set of runbook operation results corresponding to the executable operation. The system receives a user input to execute an operation defined by a runbook presented to remediate an event. The system generates supplemental information for the runbook execution interface based on the results of the operation executed by the user. The system identifies characteristics associated with the runbook operation results and identifies sources for additional information. Source may include performance data from the same component over a different period of time, performance data of a similar component, and performance data of topologically-connected components.

Abstract: A blockchain architecture allows blocks to store both public and private data. The public data may be accessible to any node in the blockchain network, while the private data may be accessible only to nodes specified in an access list, which may be provided when a record is added to the blockchain. When a new record is received, any private fields in the record may be identified and encrypted by a receiving node. The key may then be encrypted and sent with the protected record to other nodes in the access list. These nodes can access the encryption key, decrypt the private fields, and provide a consensus decision to a receiving node. After consensus, the protected record may be added to the blockchain, where the public fields may be freely accessed by any node, and the private fields remain accessible only to nodes in the access list.

Abstract: A method, a non-transitory computer readable medium, and an apparatus are provided for switching between a synchronous data entry processing and an asynchronous data entry processing for processing input into a data entry field of the GUI based on a latency threshold for validation and a latency threshold for conversion; and for determining which input from a series of inputs entered into the data field during the asynchronous data entry processing based on a criteria.

Abstract: According to one embodiment, a computer-implemented method for dynamically providing a tool bar in a user interface is provided. The method includes determining at least one action that is commonly performed based on data displayed on a current page of a graphical user interface of a communications device, creating a tool bar comprising at least one icon representing the at least one action, associating the tool bar with the current page of the graphical user interface, and providing the tool bar to the communications device for display on the current page of the graphical user interface.

Abstract: A method of efficiently extracting large data sets from a database may include receiving a first result set from a first query executed on one or more data sources. The one or more data sources may use a first schema when the first query was executed. The method may also include receiving a second result set from a second query executed on the one or more data sources. The one or more data sources may use a second schema when the second query was executed. The method may further include generating a view that combines the first result set and the second result set. The view may resolve differences between the first schema and the second schema.

Abstract: A target set of texts, for training and/or evaluating a text classification model, is augmented using insertions into a base text within the original target set. In an embodiment, an expanded text, including the base text and an insertion word, must satisfy one or more inclusion criteria in order to be added to the target set. The inclusion criteria may require that the expanded text constitutes a successful attack on the classification model, the expanded text has a satisfactory perplexity score, and/or the expanded text is verified as being valid. In an embodiment, if a number of expanded texts added into the target set is below a threshold number, insertions are made into an expanded text (which was generated based on the base text). Inclusion criteria are evaluated against the doubly-expanded text to determine whether to add the doubly-expanded text to the target set.

Abstract: A system and method for use with a cloud computing environment, for determining a cloud score associated with a resource configuration, limits, or shape, for example that of a virtual machine or host provided within the environment. The described approach provides a set of infrastructure workloads, for use in assessing a cloud infrastructure and resources provided thereby, so that a full spectrum of aspects of the cloud infrastructure can be covered by workload testing. The workloads can be used to generate metrics associated with resource usage. The system can then consider one or more metrics that are associated with performance of a particular resource configuration or shape, for example that of a virtual machine or (e.g., bare metal) host hosted by a cloud provider, and determine a score that is indicative of the relative performance of that configuration or shape for a particular workload configuration.

Abstract: Systems and methods for multicast send duplication instead of replication in a high performance computing environment. A method can provide a plurality of switches, a plurality of hosts, the plurality of hosts being interconnected via the plurality of switches, wherein a host of the plurality of hosts comprises a multicast sender node, the sender node comprising a system image generation module and a current message sequence module. The method can organize the plurality of switches into two rails, the two or more rails providing redundant connectivity between the plurality of hosts. The method can send two or more duplicate multicast packets on different rails. Upon a receiving node receiving at least two versions of the same multicast packet, only one will be delivered to the communication stack/clients above the layer that handles the encapsulation header.

Abstract: Techniques are described for improving the efficiency of dialog processing by prompting and processing user feedback substantially in real time. A dialog system receives speech input from a user and processes a first portion of the speech input to determine an initial discerned intent. The dialog system causes display of a visual indication of the initial discerned intent. The visual indication of the discerned intent is used to guide the dialog so that the user can correct or confirm the initial discerned intent in a natural fashion. If the initial discerned intent is inaccurate, the user can provide feedback correcting the dialog system, and the dialog system processes a second portion of the speech input to determine a modified discerned intent. Thus, the dialog system can use the feedback to correct misunderstandings on the fly.

Abstract: Systems and methods are provided for supporting efficient reconfiguration of an interconnection network having a pre-existing routing. An exemplary method can provide a plurality of switches, a plurality of end nodes, and one or more subnet managers, including a master subnet manager. The method can calculate, via the master subnet manager, a first set of one or more leaf-switch to leaf-switch multipaths. The method can store this first set of one or more leaf-switch to leaf-switch multipaths at a metabase. The method can detect a reconfiguration triggering event, and call a new routing for the interconnection network. Finally, the method can reconfigure the network according to the new routing for the interconnection network.