Abstract: Domain name system (DNS) configuration during virtual private network (VPN) connection includes transmitting, to a VPN entry server, from a client device, via a VPN tunnel between the VPN entry server and the client device, a first request for first content, wherein the first request identifies a first external source for the first content, and wherein a first DNS server is configured as an operative DNS server for the VPN tunnel, and receiving, by the client device, from the VPN entry server, via the VPN tunnel, the first content, wherein the VPN entry server obtained the first content from the first VPN system exit server identified by the VPN entry server using a second DNS server as the operative DNS server for the VPN tunnel, and the first VPN system exit server obtained the first content from the first external source.

Abstract: Domain name system (DNS) configuration during virtual private network (VPN) connection includes establishing a VPN tunnel between a client device and a VPN system entry server, which includes configuring a first DNS server as an operative DNS server for the VPN tunnel, and obtaining first content by transmitting to the VPN entry server, a first request that identifies a first external source for the first content, receiving from the VPN entry server a DNS configuration message indicating a second DNS server, configuring the second DNS server as the operative DNS server, and receiving from the VPN entry server, via the VPN tunnel, the first content, wherein the VPN entry server obtained the first content from the first VPN system exit server identified by the VPN entry server using the second DNS server, and the first VPN system exit server obtained the first content from the first external source.

Abstract: This disclosure provides systems, methods, and devices for network management. In a first aspect, a method of transmitting delay-sensitive data with multi-link operation includes receiving, at a first device, first data for transmission to a second device; packaging, by the first device, the first data for transmission to the second device in a first set of packets; packaging, by the first device, the first data for transmission to the second device in a second set of packets; transmitting, by the first device, at least a portion of the first set of packets on a first shared resource; and transmitting, by the second device, at least a portion of the second set of packets on a second shared resource. Other aspects and features are also claimed and described.

Abstract: A packet transmission method, device, and system for network technologies are disclosed. A first network device receives, by using a first VPLS instance a packet to be sent to a user-side device connected to the second network device. The first network device forwards, based on an association relationship between the first VPLS instance and the first VPWS instance, the packet to a second VPWS instance in the second network device by using the first VPWS instance. A VPLS instance is associated with a VPWS instance in the first network device. A packet that is received by using the VPLS instance and that is to be sent to a user-side device can be forwarded by using the associated VPWS instance, so that pressure to learn a MAC address for packet transmission is reduced, and forwarding performance of the system is ensured.

Abstract: A method for execution by a storage network, the method begins by determining a failure rate of storage nodes of an active storage pool, establishing a number of standby storage nodes based on the determined failure rate, identifying resource identifiers for the failed storage node, selecting an available standby storage node, facilitating populating the selected available standby storage node with data slices associated with the failed storage node, utilizing the selected available standby storage node, facilitating population of a replacement storage node with the data slices from the selected available standby storage node and facilitating processing of further receive data access requests for data associated with the associated resource identifiers by utilizing the replacement storage node.

Abstract: A method including receiving, at a first VPN server during an established VPN connection, a first data request and a second data request from a user device; transmitting, by the first VPN server during the established VPN connection, the first data request to a second VPN server and the second data request to a third VPN server; receiving, by the first VPN server from the second VPN server during the established VPN connection, first data associated with the first data request; and receiving, by the first VPN server from the third VPN server during the established VPN connection, second data associated with the second data request, the second exit IP address being different from the first exit IP address. Various other aspects are contemplated.

Abstract: Examples described herein relate to the selection of virtual private network profiles. A device obtains VPN metrics associated with a plurality of VPN server nodes and monitors device usage metrics. The device is configured with a first VPN profile, which indicates that a first VPN tunnel connection is associated with a first VPN server node from the plurality of VPN server nodes. The device determines a latency associated with each of the plurality of VPN server nodes based on the VPN metrics and the device usage metrics. A second VPN server node associated with a least latency among the plurality of VPN server nodes is selected. A second VPN tunnel connection associated with the second VPN server node is determined based on the device usage metrics. A second VPN profile indicating that the second VPN tunnel connection is associated with the second VPN server node is displayed as a recommendation to a user.

Abstract: Systems and methods for isolating applications associated with multiple tenants within a computing platform receive a request from a client associated with a tenant for running an application on a computing platform. Hosts connected to the platform are associated with a network address and configured to run applications associated with multiple tenants. A host is identified based at least in part on the request. One or more broadcast domain(s) including the identified hosts are generated. The broadcast domains are isolated in the network at a data link layer. A unique tenant identification number corresponding to the tenant is assigned to the broadcast domains. In response to launching the application on the host: the unique tenant identification number is assigned to the launched application and is added to the network address of the host; and the network address of the host is sent to the client associated with the tenant.

Abstract: An application configuration tool and associated method for supporting deployment of an application on a server that has a set of configurations available for applications deployed on the server. The method attempts to match every configuration required by the application to a configuration available on the server. In case of multiple candidates that match, one is selected. When there is no match an error message is generated. The method is iterated to inspect each selected configuration to identify any references contained in the selected configuration that themselves need further configurations. The iteration of inspecting and the matching to follow the references is continued until all such references are exhausted either by matching or failure to match and consequent error message generation. Finally, a configuration report is output specifying the selected configurations and, to the extent that not all required configurations have been matched to available configurations, the error messages.

Abstract: A system for dynamically activating a virtual network is provided. During operation, the system can operate a switch as a tunnel endpoint of a tunnel in conjunction with a remote switch. The tunnel can facilitate a virtual private network (VPN) spanning the switch and the remote switch. The system can maintain an inactive state for a virtual local area network (VLAN) and a corresponding tunnel network identifier identifying the VLAN for the tunnel. If a notification indicating the activation of the VLAN at a downstream switch is received by the switch, the system can activate the VLAN at the switch. The system can then activate the tunnel network identifier in a routing process of the VPN, thereby enabling sharing of a media access control (MAC) address associated with the VLAN via the tunnel.

Abstract: A system and method for managing a population of devices and in particular, software updates and version control of applications across the population includes permitting a first device to receive an update from a publisher and generating an update manifest that is propagated to other devices in the population. Applications within a population of devices are selectively disabled and enabled to prevent multiple update versions of the same application across the population.

Abstract: An automated operating system networking configuration system includes a server computing device with an operating system that is included in a trust domain, and a management controller device included in the trust domain and coupled to the server computing device via a management channel. The management controller device identifies an operating system networking configuration for the operating system and transmits an instruction via the management channel to the server computing device to perform operating system networking configuration operations using the operating system networking configuration. A management service in the operating system receives the instruction from the management controller device via the management channel and, in response to receiving the instruction while being in the trust domain with the management controller device, automatically retrieves the operating system networking configuration.

Abstract: A method including receiving, at a first VPN server during an established VPN connection, a first data request and a second data request from a user device; transmitting, by the first VPN server during the established VPN connection, the first data request and the second data request to a second VPN server; and receiving, by the first VPN server from the second VPN server during the established VPN connection, first data associated with the first data request and second data associated with the second data request, the first data being retrieved by the second VPN server using a first exit IP address associated with the second VPN server and the second data being retrieved by the second VPN server using a second exit IP address associated with the second VPN server, the second exit IP address being different from the first exit IP address. Various other aspects are contemplated.

Abstract: A method including determining, by a virtual private network (VPN) server providing VPN services to one or more user devices, an average threshold level associated with an aggregate amount of VPN data communicated with a host device during a reference period; determining, by the VPN server, an observed average aggregate amount of VPN data communicated with the host device during an operation period; comparing, by the VPN server, the observed average aggregate amount with the average threshold level; and selectively adjusting, by the VPN server, an amount of VPN data communicated with the host device during the operation period based at least in part on a result of comparing the observed average aggregate amount with the average threshold level. Various other aspects are contemplated.

Abstract: A method including configuring a VPN server to determine aggregate amounts of VPN data communicated with a host device during sample durations of time within a reference period; configuring the VPN server to determine difference amounts indicating differences in the aggregate amounts of VPN data communicated with the host device during successive sample durations of time; configuring the VPN server to determine average aggregate amounts of VPN data communicated with the host device based at least in part on averaging the difference amounts; configuring the VPN server to determine a largest average aggregate amount as an average threshold level; and configuring the VPN server to selectively adjust an amount of VPN data communicated with the host device based at least in part on a result of comparing the average threshold level with an observed average aggregate amount of VPN data communicated with the host device. Various other aspects are contemplated.

Abstract: Exemplary embodiments relate to techniques for improving the speed and rendering quality of an image (e.g., a JPEG), particularly in an end-to-end encrypted environment. The image may be analyzed on the sending-client side and the image data may be broken into a thumbnail and a full-quality image, where the full-quality image data relies on the thumbnail data to render a high-quality image. The image is uploaded to a blob store, and a message is sent to the receiving client with image information. At the recipient side, the JPEG image data is retrieved from the blob store and the thumbnail is first rendered. Subsequently, as the remainder of the image data is received at the receiving client, the image is updated. Consequently, images are rendered faster, and the thumbnail can be automatically downloaded so that a user can determine if they wish to download the full image.

Abstract: Aspects of the present disclosure involve a system comprising a computer-readable storage medium storing a program and method for setting a shared ringtone for calls between users. The program and method provide for receiving, from a first device associated with a first user, selection of a ringtone for use with the first device and a second device associated with a second user, the first user and the second user corresponding to contacts in a messaging application; and saving, in response to the receiving, a ringtone setting that is shared by the first user and the second user, the ringtone setting indicating to use the ringtone for a call between the first device and the second device.

Abstract: Broadly speaking, embodiments of the present technique provide methods, apparatuses and systems for operating a server in communication with a network-attachable electronic device, comprising: storing, in storage accessible by the server, a device registration and a registration lifetime value for the device; receiving at least one message from the device; analysing the message to derive a confidence modifier associated with a message type associated with that message; applying the derived confidence modifier to a calculation of a confidence score for the device; and responsive to the calculation, determining whether a stored registration lifetime value for the device is to be adjusted based upon the confidence score.

Abstract: Techniques are disclosed for capturing network traffic in a computing environment comprising a plurality of computing devices. A data capture definition defines a network element of interest and data traffic that is to be captured for the network element. The network element to selectively identifies the data packets to be captured. The identified packets are encapsulated within a VXLAN session and sent to a storage service.

Abstract: A method for configuring at least one OPC UA PubSub subscriber in an in particular industrial network, in which a) a virtual address space is provided for the at least one subscriber on a configuration module that is separate from the at least one subscriber, b) a configuration for the at least one subscriber is performed and/or a configuration already existing for the at least one subscriber is changed in the virtual address space of the at least one subscriber, c) the configuration module converts the configuration and/or configuration change into at least one PubSub message, d) the at least one PubSub message is transmitted to the at least one subscriber, and e) the at least one subscriber is configured according to the at least one PubSub message. In addition, the invention relates to an automation system, a computer program and a computer-readable medium.