Abstract: Generally described, one or more aspects of the present application relate to scaling a cluster of compute capacity used to execute containerized applications or tasks. For example, a waiting area can be maintained, in which tasks that are requested to be executed in a cluster but are not able to be accommodated in the cluster due to the cluster not having sufficient compute capacity usable to execute such tasks are stored. The scaling of the cluster can be performed based on the characteristics of the tasks in the waiting area, such that the cost associated with adding too much compute capacity to the cluster can be reduced, while also reducing the time it takes to reach the desired level of compute capacity that can accommodate all of the requested tasks.

Abstract: Various embodiments provide for the creation and validation of resource templates that may be used to provision or launch resources or resource instances. In various embodiments, a user can use values for various resource instance parameters to create a resource template, and can request validation of that template. A validation service can perform multiple validations, including independent validation of all template parameters, as well as validations of cross-parameter dependencies. If any errors are detected that cause the template to be invalid, information for those errors can be returned to the user such that the user can make the appropriate changes to enable the template to be valid. Templates can be re-validated at future times, such as at launch time or for use with a new service, to ensure the template remains valid under those circumstances.

Abstract: In a method of Local Peer to Peer Direct Connection in NAT and overlay network. A request is received from a first peer at a relay gateway to establish a direct connection with a second peer. The first peer and the second peer are located behind a NAT firewall. An authentication request is relayed from the first peer at the relay gateway. The authentication request is forwarded from the relay gateway to the second peer. Upon performing authentication at the second peer, an authentication response is received at the relay gateway. The authentication response is received from the relay gateway at the first peer. An internal route propagation is performed from the second peer to the first peer via the relay gateway. A Local Peer to Peer Direct Connection is established between the first peer and the second peer for packet flow through the direct connection.

Abstract: Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a private domain name system (DNS) receives a DNS lookup request from a computing system of a plurality of computing systems associated with a private communication group, and forwards the DNS lookup request to a public DNS. The private DNS further receives a public address associated with the DNS lookup request from the public DNS, translates the public address to a private address, and transfers the private address to the requesting computing system.

Abstract: Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a communication service identifies a communication request from an application on the computing system to transfer data to a second application on a second computing system. In response to the communication request, the communication service identifies a communication group of a plurality of communication groups associated with the application and the second application. Once the communication group is identified, the communication service identifies a communication quality of service based on the identified communication group, and transfers the data associated with the communication request to the second computing system in accordance with the communication quality of service.

Abstract: In a method of Local Peer to Peer Direct Connection in NAT and overlay network. A request is received from a first peer at a relay gateway to establish a direct connection with a second peer. The first peer and the second peer are located behind a NAT firewall. An authentication request is relayed from the first peer at the relay gateway. The authentication request is forwarded from the relay gateway to the second peer. Upon performing authentication at the second peer, an authentication response is received at the relay gateway. The authentication response is received from the relay gateway at the first peer. An internal route propagation is performed from the second peer to the first peer via the relay gateway. A Local Peer to Peer Direct Connection is established between the first peer and the second peer for packet flow through the direct connection.

Abstract: Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a communication service identifies a communication request for a first application on a first computing system to transfer data to a second application on a second computing system. In response to the request, the communication service generates a packet, wherein the packet includes an encrypted portion for the data and private addressing associated with the first and second applications, and an unencrypted portion for group identifier information and public addressing information. Once the packet is generated, the packet is transferred to the second computing system.

Abstract: Described herein are systems, methods, and software to enhance gateway security for multiple communication groups. In one implementation, a method of operating a gateway service includes identifying a data packet received from a first computing system, wherein the data packet comprises a first destination port value. The method further includes, identifying a group identifier within the data packet, wherein the group identifier associated with a communication group of the plurality of communication groups, translating the first destination port value to a second destination port value based on the group identifier, and forwarding the data packet with the translated second destination port value.

Abstract: Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a private domain name system (DNS) receives a DNS lookup request from a computing system of a plurality of computing systems associated with a private communication group, and forwards the DNS lookup request to a public DNS. The private DNS further receives a public address associated with the DNS lookup request from the public DNS, translates the public address to a private address, and transfers the private address to the requesting computing system.

Abstract: Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a communication service identifies a communication request from an application on the computing system to transfer data to a second application on a second computing system. In response to the communication request, the communication service identifies a communication group of a plurality of communication groups associated with the application and the second application. Once the communication group is identified, the communication service identifies a communication quality of service based on the identified communication group, and transfers the data associated with the communication request to the second computing system in accordance with the communication quality of service.

Abstract: Described herein are systems, methods, and software to enhance gateway security for multiple communication groups. In one implementation, a method of operating a gateway service includes identifying a data packet received from a first computing system, wherein the data packet comprises a first destination port value. The method further includes, identifying a group identifier within the data packet, wherein the group identifier associated with a communication group of the plurality of communication groups, translating the first destination port value to a second destination port value based on the group identifier, and forwarding the data packet with the translated second destination port value.

Abstract: Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a communication service identifies a communication request for a first application on a first computing system to transfer data to a second application on a second computing system. In response to the request, the communication service generates a packet, wherein the packet includes an encrypted portion for the data and private addressing associated with the first and second applications, and an unencrypted portion for group identifier information and public addressing information. Once the packet is generated, the packet is transferred to the second computing system.

Abstract: A system and a method for removing and consolidating the spent fuel rods of a fuel assembly is disclosed herein. The system comprises a pushing assembly having a push rod for pushing a selected fuel rod out of a fuel assembly, a fuel assembly positioner including an elevator for conveniently positioning a fuel assembly within the spent fuel pool of a nuclear facility, a rod catching grid for preventing the pushed-out fuel rods from falling to the bottom of the pool and a transition cannister for funneling the rods into a consolidated arrangement within a storage cannister. In operation, the push rod is positioned over and engaged against the upper end of a fuel rod to be removed from the assembly. Thus engaged, the push rod is inserted through the cells in the grids of the fuel assembly that surround the selected fuel rod, thereby pushing it out of the fuel assembly. Thus the grid cells are used as an alignment means for the push rod during the rod-pushing operation.

Abstract: A system and a method for removing and consolidating the spent fuel rods of a fuel assembly is disclosed herein. The sytem comprises a pushing assembly having a push rod for pushing a selected fuel rod out of a fuel assembly, a fuel assembly positioner including an elevator for conveniently positioning a fuel assembly within the spent fuel pool of a nuclear facility, a rod catching grid for preventing the pushed-out fuel rods from falling to the bottom of the pool and a transition cannister for funneling the rods into a consolidated arrangement within a storage cannister. In operation, the push rod is positioned over and engaged against the upper end of a fuel rod to be removed from the assembly. Thus engaged, the push rod is inserted through the cells in the grids of the fuel assembly that surround the selected fuel rod, thereby pushing it out of the fuel assembly. Thus the grid cells are used as an alignment means for the push rod during the rod-pushing operation.

Abstract: A system for remotely repairing nuclear fuel rod assemblies is disclosed herein. Generally, the system comprises a rod handler for gripping, lifting, lowering and ungripping a selected fuel rod, a work station for securing the nuclear fuel rod assembly to be repaired into a desired location, and a positioner device for laterally positioning the rod handler over a selected rod in the fuel assembly secured within the work station. The rod handler includes a contractable collet for gripping and ungripping a desired fuel rod, and a rod sensor concentrically disposed within the collet for sensing when a rod is in a grippable position. The positioner includes a movable carriage which is slidably mounted onto a frame assembly by means of a pair of rail and bearing mechanisms. The system also includes a microcomputer for controlling the manner in which the positioner positions the rod handler, as well as gripping, lifting, lowering and ungripping motions of the handler itself.

Abstract: A fuel rod-loading fixture for expediting the loading of fuel rods in an empty skeleton of a fuel rod assembly is disclosed herein. The fuel rod-loading fixture generally comprises a square array of non-radioactive "dummy" rods which are all connected at their top ends to a top guide plate. When the rods of the fixture are lowered through the rod-receiving apertures of the grids in the fuel assembly skeleton, they effectively obstruct every other set of mutually aligned, rod-receiving apertures in the grids of the skeleton. The top guide plate includes a plurality of apertures which will automatically register with the remaining sets of mutually aligned apertures in the grids, in order that fuel rods may be inserted through the top guide plate and into the remaining sets of apertures in the grids.

Abstract: The fuel assembly skeleton compaction system provides a means for remotely dismantling an irradiated nuclear fuel assembly skeleton once the nuclear fuel rods have been removed therefrom while the skeleton remains submerged in a coolant. The system comprises a feed chamber for holding the spent fuel assembly skeleton and for feeding a spent fuel assembly skeleton into a shear chamber which is arranged near the feed chamber. The shear chamber contains a shearing device for shearing the skeleton into small pieces and for moving the pieces of the skeleton into a compaction chamber which is located adjacent to the shear chamber. The compaction chamber contains a compaction cylinder for compacting the pieces of the skeleton introduced thereinto. A storage canister is located below the compaction chamber such that when the slide of the compaction chamber is opened, the compacted pieces of the skeleton may be pushed into the storage canister.