Abstract: In one aspect, a first device may include at least one processor and storage accessible to the at least one processor. The storage may include instructions executable by the at least one processor to identify a context associated with the first device and identify a first group of applications associated with the context. While the context is ongoing, the instructions may be executable to allow the first group of applications to communicate with one or more other devices besides the first device and to disallow a second group of applications from communicating with one or more other devices besides the first device.

Abstract: It is made possible to realize bidirectional communication safely on the cloud side, and on-premises side in a job execution system. It is checked whether or not there is an agent with the same logical name at time of agent registration. In a case that there is the same logical name, transfer performance required of each agent is checked, and communication is performed by rewriting a logical name during transfer by using an existing logical name for an agent required of the highest transfer performance, and using a logical name which is a new unique alias for the other agent.

Abstract: The described technology relates to a software application architecture allowing for creation of a web application that has multiple Single Page Applications (SPAs) within the application. The software application architecture includes components that are common to each page of the web application while also having components that are dynamically loaded to cater to specific respective pages within the application. The dynamically loadable components can be identified based on an identifier in a path being browsed using a web browser application. The described application architecture may be used in the context of AngularJS, as well as other SPA technologies and non-SPA technologies.

Abstract: Embodiments of the present invention provide a system for using quantum optimization to provide a real time network server load or capacity management system for dynamic update and resource allocation and outage prevention. Load management information is received from a plurality of information technology infrastructure devices (e.g., servers, network devices, storage systems, and end user devices) that make up an overall system network environment. When at least a portion of that load management information is too burdensome for a conventional computer apparatus, the information is formatted for quantum optimization and transmitted to a quantum optimizer. The quantum optimizer analyzes the data and responds with an optimized load leveling or load balancing process for distributing traffic across the information technology infrastructure devices. This optimized load leveling process is then implemented across the appropriate devices.

Abstract: In general, techniques are described for a hierarchical, distributed DHCP system for managing IP address assignment among distributed networks of computing devices. For example, a system may include a central DHCP server configured to manage a plurality of distributed DHCP servers, each distributed DHCP server configured to perform DHCP using IP addresses allocated from a common prefix for a tenant associated with computing devices managed by multiple DHCP servers. The central DHCP server allocates IP addresses to the distributed DHCP servers, e.g., on an on-demand basis from the common pool and may handle concurrent requests for IP addresses from distributed DHCP servers. Each of the distributed DHCP servers may store records for IP addresses and media access control (MAC) addresses for computing devices managed by that distributed DHCP server, and the DHCP servers may send these records to the central DHCP server to facilitate IP assignment coherency.

Abstract: In an approach to efficient concurrent TLS data streams, a parent connection is established by performing a normal TLS handshake. A concurrent mode of operation is negotiated, where one or more child connections are established without using the TLS handshake. The one or more child connections are associated to the parent connection. Child application traffic secrets are derived for each child connection of the one or more child connections from application traffic secrets of the parent.

Abstract: A communication system for a micro-frontend architecture can include a first message handler associated with a requestor of data and a second message handler associated with a requestee. The requestor can be a wrapper application or a micro-frontend, and the requestee can the other of the wrapper application or the micro-frontend. In response to receiving a data request from the requestor, the first message handler can transmit a request message via a communication channel to the second message handler, where the request message includes a unique identifier assigned to the request. Thereafter, the first message handler can receive a response message from the second message handler via the communication channel, where the response message includes the data and the unique identifier. Based on the unique identifier in the response message, the first message handler can provide the data to the requestor in a response to the request.

Abstract: A resource provisioning service allows users to provision multiple, different network resources in an atomic manner and with a single call to a resource provisioning service. In some instances, the multiple, different network resources comprise individual types of resources that form a portion of one or more cloud-computing platforms. For instance, one or more entities may host and operate a cloud-computing platform that includes different types of network resources, such a storage service, a load balancing service, a compute service, a security service, or any other similar or different type of network-accessible service.

Abstract: Examples relate to verifying network elements. In one example, a computing device may: receive, from a client device, a request for attestation of a back-end network, the request including back-end configuration requirements; obtain, from a network controller that controls the back-end network, a controller configuration that specifies each network element included in the back-end network; provide each network element included in the back-end network with a request for attestation of a network element configuration of the network element; receive, from each network element, response data that specifies the network element configuration of the network element; verify that the response data received from each network element meets the back-end configuration requirements included in the request for attestation of the back-end network; and provide the client device with data verifying that the back-end network meets the back-end configuration requirements.

Abstract: A mid-tier messaging system receives a request to initiate a communication session via a first messaging channel that includes a first messaging interface of a first messaging application provided at a user device and a first message provider of a plurality of message providers. The mid-tier messaging system establishes a first session that is mapped to the communication session. The mid-tier messaging system establishes the communication, using the first session, between the first messaging interface and the first message provider. The mid-tier messaging system provides, through the first session, first message communications between the first message provider and the first messaging interface. The mid-tier messaging system seamlessly switches to a second message provider service when the first message provider service cannot service an intent of the first communication session.

Abstract: Implementations are described herein for commissioning a distributed control node (DCN) to a process automation network. In various implementations, one or more messages transmitted on the process automation network by the DCN announcing that the DCN has joined the process automation network may be detected. Based on the one or more messages, one or more operational technology (OT) capabilities of the DCN may be determined. Based on the one or more OT capabilities, the DCN may be commissioned to the process automation network, e.g., by configuring the DCN to cooperate with one or more other process automation nodes on the process automation network to implement an at least partially automated process.

Abstract: A technique for accelerating dynamic content delivery in a content delivery network. In some embodiments of the invention, responsive to a request that is sent by a client and that is for dynamic content, a client-proxy hosted in a datacenter of a CDN sends the request to a “forwarder-proxy” hosted in another datacenter of the same CDN. The forwarder-proxy, responsive to the request for dynamic content, forwards the request to an origin server and does not cache the dynamic content. The datacenter selected for the forwarder-proxy is one that is “close” to the origin server in terms of round-trip time (RTT) to improve network performance for requests for dynamic content.

Abstract: The disclosed technology is generally directed to communications in an IoT environment. In one example of the technology, a plurality of module twins that respectively correspond to a plurality of modules of edge applications on a plurality of edge devices are stored. The plurality of module twins individually include metadata associated with the corresponding module of the plurality of modules. At least one module of the plurality of modules to be modified by adding a declarative rule is determined, such that the declarative rule causes determining whether an event has been triggered based on a particular event having been determined to have occurred, and, in response to the triggering of the event, communicating the triggering of the event to at least one declarative target. The determined at least one module of the plurality of modules is caused to be modified by adding the declarative rule.

Abstract: A wireless peripheral mode is provided by a host system that communicates to a WiFi infrastructure and, utilizing the same WiFi RF subsystem, also communicates to peripherals. The host system may employ additional RF channels for communicating with high bandwidth peripherals, such as display devices, where high levels of QoS may be managed locally. The host system may be a conventional desktop computer system, a notebook computer system, a multi-media access point, a cell phone, a game machine, a portable game machine, a Personal Digital Assistant (PDA), a smart phone or any other type of device that benefits from accessing both a WiFi infrastructure and local peripherals.

Abstract: Systems and methods are disclosed for providing visual network programming for network management automation. One exemplary method may include providing a GUI for automating network management tasks and receiving a plurality of graphical icons. Each graphical icon may be associated with one or more operations or functions. The method may also include associating the plurality of graphical icons with a device table for defining a device queue by storing information of at least one network device in the computer network and a device data table for storing information to be retrieved from the at least one network device defined in the device queue. The method may also include generating a network application based on the plurality of graphical icons and associated device table and device data table.

Abstract: One embodiment of the present disclosure sets forth a technique for analyzing network vulnerabilities. The technique includes determining an address for each target device included in a plurality of target devices; for each target device, assigning a port scanning task to an associated port scanning service, the port scanning task being associated with the target device via the address of the target device; for each port scanning task, receiving a port scanning result from the port scanning service assigned to the port scanning task, the port scanning result including a list of open ports for the target device associated with the port scanning task; for each open port included in each port scanning result, assigning a vulnerability scanning task to an associated vulnerability service; receiving a vulnerability scanning result for each vulnerability scanning task; and generating a report based on the port scanning results or the vulnerability scanning results.

Abstract: A proximity-based services server performs a method for facilitating restricted proximity discovery of a user of an application. The method includes obtaining authorization to access a first user's resources for a first application. The method also includes communicating a list of associates from the first user's resources and receiving an indication of a set of associates selected from the list of associates. Each associate in the set is permitted to discover the first user. The method further includes receiving a request for a proximity-based services code and allocating a first proximity-based services code to the first user for the first application. Additionally, the method includes announcing, to a set of other proximity-based services servers, existence of the first proximity-based services code allocated to the first user for the first application.

Abstract: Disclosed herein is a processor to process streaming data. The processor includes a TCP client circuit and a TCP server circuit. A fanout circuit is communicatively coupled to the TCP client circuit and the TCP server circuit. The fanout circuit receives data from the TCP client circuit, determines a rate at which to transmit the received market data, and instructs the TCP server circuit to send the received data at the determined rate.

Abstract: Methods and apparatus are provided for Service Level Agreement managements in distributed cloud environments. A method comprises monitoring enforcements of Service Level Agreements for services provided to a plurality of tenants by a cloud provider; detecting a possible Service Level Agreement violation for a service provided to one tenant of the plurality of tenants, wherein the possible Service Level Agreement violation is related to performance or security requirements; and automatically mitigating the possible Service Level Agreement violation with cooperation with at least one of a cloud manager and a security management system of the cloud provider. The possible Service Level Agreement violation can involve a possible confliction between performance requirements and security requirements, and mitigating the possible Service Level Agreement violation comprises resolving the possible confiction for self-healing. Methods for an automatic Service Level Agreement update is also provided.

Abstract: Methods of generating websites using any combination of remotely and locally stored content are contemplated. Content is procured by a user on a client computer, and a request to add that content to a source folder is sent to a server. The server adds the content to the source folder, where it is made available for website creation. When a client requests creation of a website using the contents of a source folder, the server then generates that website. In some embodiments, the website can be generated according to a user-selected theme or a default theme.