Abstract: The method includes receiving data characterizing a first segregator code, a first aggregator code and a plurality of configuration parameters associated with a data transmission system. The data transmission system is configured to receive operation data characterizing an operation of an industrial system and transmit a portion of the operation data to a first analytical model. The method also includes modifying the first segregator code and the first aggregator code based on one or more configuration parameters of the plurality of configuration parameters. The method further includes deploying the first segregator code and the first aggregator code in the data transmission system. The first segregator code is configured to provide a first portion of the operation data to the first analytical model via a first data transmission route that includes the first segregator code and the first aggregator code.

Abstract: A micro kernel scheduling method and apparatus are disclosed in embodiments of this disclosure. The method is applied to a software platform and includes: receiving a scheduling instruction for a current micro kernel; and switching the current micro kernel to a target micro kernel. In some embodiments, a micro kernel is switched directly according to a scheduling instruction, and this is completed without any thread of the software platform, which solves the problems in the conventional system of high micro kernel switching cost and poor real-time performance caused by one-to-one correspondence between micro kernels and threads of the software platform.

Abstract: A method for updating software in one or more servers in a managed system includes bootstrapping of shared secrets to secure communication, using an object store with publicly accessible URLs as a mailbox system between a patch agent locally at the managed system and a patch management server located remotely. The object store provides for indirect and asynchronous communication, allowing the patch management server to manage the updates, whereas the patch agent executes the updates. The patch management server keeps track of update results, and when an update is unsuccessful it performs and supports a remediation process. Both the patch agent and the patch management server keep full logs of the update results to allow for auditing.

Abstract: A set of virtual machines is deployed on a hypervisor. At each virtual machine, one or more local scans is performed to generate a set of computing resource consumption data. In response to receiving a set of hypervisor resource consumption data, a stability factor is generated. Based on the set of resource consumption data, the set of hypervisor resource consumption data, and the stability factor, a determination is made that a default consumption metric exceeds a threshold. In response to the determination, a custom consumption metric is generated, based on at least the set of computing resource consumption data. A user is notified of the custom consumption metric.

Abstract: Data protection operations including replication operations are disclosed. Virtual machines, applications, and/or application data are replicated according to at least one strategy. The replication strategy can improve performance of the recovery operation.

Abstract: Techniques are described for enabling model-driven server migration workflows in a cloud provider network. Cloud provider networks often provide various types of tools and services that enable users to migrate computing resources (e.g., servers, databases, applications, etc.) from users' on-premises computing environments to a cloud provider network. A model-driven server migration service as described herein comprises a plurality of modular migration components including, e.g., a snapshot validation component, a snapshot conversion component, an injection component, etc. The model-driven server migration service enables users to customize server migration workflows using server migration templates containing descriptive configurations for some or all of the provided migration components.

Abstract: In an embodiment, described herein is a system and method for creating a suggested task set to meet a target value. A cloud server, in response to receiving a request specifying a target value, retrieves completed task sets from a database. Each completed task set includes a same set of task categories. The cloud server derives a number of ratios from the retrieved completed task sets, including a composition ratio and a conversion rate for each task category, and an addition ratio for the number of completed task sets. Based on the derived ratios and the specified target value, the cloud server constructs the suggested task set, and displays in real-time the suggested task set together with current values for the task categories. The cloud server alerts users of a discrepancy between a current value and the corresponding suggested value for a task category when the discrepancy reaches a predetermined level.

Abstract: Techniques are provided for managing quality of service (QoS) policies in a virtual storage environment. A data storage system receives a request from a host system to connect to a target virtual volume in a storage array of the data storage system, and determines a protocol endpoint which has an assigned QoS policy which corresponds to a QoS policy of the target virtual volume. The data storage system binds the target virtual volume to the protocol endpoint which is determined to have an assigned QoS policy which corresponds to the QoS policy of the target virtual volume, and sends a unique identifier of the protocol endpoint, which is bound to the target virtual volume, to the host system. The data storage system utilizes the protocol endpoint, which is bound to the target virtual volume, to handle data access requests received from the host system for accessing the target virtual volume.

Abstract: A virtual machine management method and apparatus, a device, and a readable storage medium. The virtual machine management method is applied to a private cloud, and comprises: acquiring a SELinux label, the SELinux label comprising five elements: User, Role, Type, Sensitivity, and Category (S101); setting elements other than Category in the SELinux label as default values (S102); assigning different values to Category according to a preset Category variable combination so as to obtain multiple non-duplicate label groups (S103); and configuring each label group to a virtual machine in the private cloud, so that virtual machines configured with the same label group communicate with each other, and virtual machines configured with different label groups are isolated from each other (S104).

Abstract: An electronic control unit is configured to perform: allocating CPU resources to provide a plurality of virtual machines under a management by a hypervisor; monitoring an abnormality that occurs in one specific virtual machine by another virtual machine different from the specific virtual machine; outputting a stop request that requests stop of the allocation of the CPU resources to the specific virtual machine in a case that the abnormality is detected; and stopping allocation of the CPU resources to the specific virtual machine, by the hypervisor, in response to the stop request. The electronic control unit further comprises a DMA controller. The DMA controller transfers data transmitted to the specific virtual machine to a common memory which is common among a plurality of virtual machines.

Abstract: The present disclosure relates to a firmware updating method using a low-power wireless network, and more specifically, to a firmware updating method using a low-power wireless network, which is designed to upgrade a firmware installed on a terminal installed in a vehicle, such as a navigation system, by using a low-power wireless network.

Abstract: When containers run in a guest operating system of a virtual machine running on the host computer system, the containers communicate with each other via ports of each container and a network. The ports of each container stay constant, but the virtual machine in which they run may change its IP address on the network when it is power-cycled. To avoid losing connection to the ports of the containers, a record table that associates static identifiers, such as MAC addresses, of the virtual machine with the container ports is maintained. The static identifiers of the virtual machines do not change and provide a way of identifying the virtual machine on which the virtual container was running before it was powered off. When the virtual machine is powered on, the linkage between the container port and the network can be re-established using the record table.

Abstract: Systems and techniques are described for virtual machine communication and migration. A described technique includes operating server systems that are configured to run virtual machines and providing a virtual network for Internet Protocol (IP) based communications to the virtual machines. The virtual machines can be assigned network addresses, such as IP addresses, on the virtual network. Providing the virtual network can include using separate IP tunnels to effect delivery of IP packets on the virtual network to the virtual machines, respectively. The technique includes migrating a virtual machine running on a first server system to a second server system. The migrated virtual machine can maintain its assigned IP address. The technique includes updating a tunnel endpoint destination associated with the assigned IP address of the migrated virtual machine. The updated tunnel endpoint destination can be based on a network address associated with the second server system.

Abstract: Systems, methods, and other embodiments associated with performing maintenance of a hardware node and relocating (live migrating) virtual machine (VM) instances in a multi-tenant, hyper scale, public Cloud service are described. In one embodiment, the method includes finding a suitable hardware node for hosting one or more VM instances from a hardware node selected for maintenance, preparing it for hosting VMs, and moving (live migrating) all virtual machines from the hardware node to the hosting hardware node.

Abstract: The present approach provides a method for safety-critical systems to reduce the required long V development and certification process, into a process that is up to 80% shorter, as well as safer. The present approach creates a pre-certified system, with both pre-certified hardware and pre-certified software. The pre-certified system may be configured to implement a safety-critical software compilation, that contains variables, operations, and template instantiations defining the safety-critical system. This approach eliminates the process below the high-level requirements for the safety-critical software through prior action. To support the configuration, the present approach implements three kinds of components: variables, operators, and templates that provide input, output and abstracted concepts. A configuration defines a set of variables, operations and template instantiations. A tool is used that takes high-level requirements written in a computer readable format into the configuration.

Abstract: A multi-layer database sizing stack may generate prescriptive tier requisition tokens for controlling requisition of database-compute resources at database-compute tiers. The input layer of the database sizing stack may obtain historical data. The threading layer may be used to flag occurrences of single threading application execution. The change layer may be used to determine potential for a step based on compute utilization type data and assert flags indicating the potential. The step layer may determine if potential steps may be taken based on operation-rate type data and flush type data. The requisition layer may generate a tier requisition token based on the provisional requisition tokens generated at other layers and/or finalization directives obtained at the requisition layer.

Abstract: A pipeline can be constructed for implementing a software-stack resolution process. For example, a system can receive a request from a client device for a recommended software-stack for a target software item. The system can also receive pipeline configuration data specifying configurable pipeline units to be included in the pipeline. The pipeline can include a search process for identifying and analyzing a group of software-stack candidates associated with the target software item. The system can construct the pipeline using the configurable pipeline units based on the pipeline configuration data. One or more of the configurable pipeline units can be arranged in the pipeline to guide the search process by adjusting one or more parameters of the search process. The system can then execute the pipeline and transmit a response to the client device indicating a recommended software-stack for the target software item.

Abstract: According to a disclosed embodiment, data analysis is secured with a microservice architecture and data anonymization in a multitenant application. Tenant data is received by a first microservice in a multitenant application. The tenant data is isolated from other tenant data in the first microservice and stored separately from other tenant data in a tenant database. The tenant data is anonymized in the first microservice and thereafter provided to a second microservice. The second microservice stores the anonymized tenant data in an analytics database. The second microservice, upon request, analyzes anonymized tenant data from a plurality of tenants from the analytics database and provides an analytics result to the first microservice.

Abstract: A client device includes resource caches, and a processor coupled to the resource caches. The processor receives resources from different resource feeds, and caches user interfaces (UI) of the resources from the different resource feeds, with at least one resource feed having a resource cache separate from the resource cache of the other resource feeds. Statuses of the resource feeds are determined, with at least one status indicating availability of the at least one resource feed having the separate resource cache. UI elements from the separate resource cache are retrieved for display in response to the at least one resource feed associated with the separate resource cache not being available.

Abstract: A system is provided that enables efficient traffic forwarding in a hypervisor. During operation, the hypervisor determines that a packet is from a first virtual machine (VM) running on the hypervisor and destined to a second VM running on a remote hypervisor. The hypervisor then includes a virtual local area network (VLAN) identifier of a transit VLAN (TVLAN) in a layer-2 header of the packet. The TVLAN is dedicated for inter-VM traffic associated with a distributed virtual routing (DVR) instance operating on the hypervisor and the remote hypervisor. Subsequently, the hypervisor sets a first media access control (MAC) address of the hypervisor as a source MAC address and a second MAC address of the remote hypervisor as a destination MAC address in the layer-2 header. The hypervisor then determines an egress port for the packet based on the second MAC address.