Abstract: Generating function placement recommendations and deploying functions in a manner that accounts for sustainability concerns. Function placements decisions are made that account for sustainability values. When a resource request is received, sustainability values are identified. The resources needed to fulfill the resource request are identified based on the sustainability values and available resources. The identified resources are potential placements for deploying the functions. A specific placement is selected, and the function is deployed to the corresponding resources.

Abstract: Recompiling code based on sustainability. Code is recompiled in a manner that accounts for sustainability values. When a deployment request is received, sustainability values are identified. The resources needed to fulfill the deployment request are identified based on the sustainability values and available resources. Once the resources that are likely to best meet the sustainability values are identified, the code is recompiled accordingly.

Abstract: Generating compilation methods using sustainability. Code is compiled in a manner that accounts for sustainability values. When a compilation request is received, sustainability values are identified. The resources needed to fulfill the compilation request are identified based on the sustainability values and available resources. Once the resources that are likely to best meet the sustainability values, the compilation request is performed using those resources.

Abstract: One example method includes at an infrastructure computing system, receiving a request for infrastructure resources from a user of the infrastructure computing system. Sustainability values for at least one entity are accessed. Based on the accessed sustainability values for the at least one entity, one or more sets of resources are identified that can satisfy the request for infrastructure resources. At least one set of resources from the one or more sets of resources are deployed in the infrastructure computing system to satisfy the request for infrastructure resources.

Abstract: Systems and methods are provided for implementing virtual data management services. For example, a method for providing virtual data management services in a computing system comprising a cluster of server nodes, includes receiving a request for a data management service, provisioning one or more server nodes within the cluster of server nodes to execute the requested data management service, configuring one or more instances of virtual data services from a plurality of available virtual data service templates to implement the requested data management service, and executing the configured instances of virtual data services on the one or more provisioned server nodes to perform the requested data management service.

Abstract: Distributed nodes are implemented using virtualization infrastructure of at least one processing platform. The processing platform is implemented using at least one processing device comprising a processor coupled to a memory. The distributed nodes collectively provide at least a portion of a distributed contextual analytics framework comprising analytics functions deployed at respective ones of the nodes. For example, the distributed nodes illustratively comprise multiple local nodes and at least one central node, with the distributed contextual analytics framework comprising local analytics functions deployed at respective ones of the local nodes and a central analytics function deployed at the central node.

Abstract: A request for network access is received from a client device at a network entry device of a network infrastructure. The network infrastructure determines a physical location of the client device and determines authorization of the client device based on the physical location. The approach can include providing the physical location along with other user credentials to an authorizing device. The method can also include determining a level of service based on the physical location. Communication for the approach can make use of the IEEE 802.1X protocol.

Abstract: A system that associates physical locations with network-linked devices in a network to which such devices are connected. This system employs a variety of techniques for establishing device location. The system configuration can vary and can include any type of data network, including LANs, MANs, Wide Area Networks (WANs), Personal Area Networks (PANs), and Home Networks. The system provides location information for particular devices to the network devices and management, and may be used in any of a variety of ways to improve configuration accuracy, control, and security. The location information may also be used to control or secure a device itself.

Abstract: A method for location discovery in a data network includes receiving, at a first device, connection information from a neighboring network device and determining a physical location of the first device based on the connection information. The method can include receiving, at the first device, the physical location transmitted from the neighboring network device. The method can further include associating a level of trust with the physical location based on the neighboring network device. The first device be one of a variety of devices, such as a router, a switch, a network entry device, a firewall device, or a gateway.

Abstract: One or more trusted network devices within a data network infrastructure determine a physical location of a client device requesting access to the data network infrastructure. A trusted physical location is generated and associated with the client device. The approach can include determining whether a candidate network device is a trusted network device based on a likelihood that the candidate network device can be modified to provide false physical location data. The approach also can include determining a response for an access request by the client and controlling network resources provided to the client based on the trusted physical location.

Abstract: A method for location discovery in a data network includes receiving, at a first device, connection information from a neighboring network device and determining a physical location of the first device based on the connection information. The method can include receiving, at the first device, the physical location transmitted from the neighboring network device. The method can further include associating a level of trust with the physical location based on the neighboring network device. The first device be one of a variety of devices, such as a router, a switch, a network entry device, a firewall device, or a gateway.

Abstract: A method for location discovery in a data network includes receiving, at a first device, connection information from a neighboring network device and determining a physical location of the first device based on the connection information. The method can include receiving, at the first device, the physical location transmitted from the neighboring network device. The method can further include associating a level of trust with the physical location based on the neighboring network device. The first device be one of a variety of devices, such as a router, a switch, a network entry device, a firewall device, or a gateway.

Abstract: A computer-implemented method and computer program product for providing data that includes location-based access control information concerning a data relay device located within a network infrastructure. The data relay device is loaded with one or more features, such that the one or more features loaded are dependent, at least in part, upon the location-based access control information.

Abstract: Data is provided with location-based access control information. Access to the data at a physical location is then limited according to the location-based access control information. A physical location of a device accessing the data can be determined, and the limiting of the access is then according to the determined physical location. The data can be provided in encrypted form, and limiting access to the data includes enabling decryption of the data according to the physical location.

Abstract: The present invention provides method and systems for dynamically mirroring network traffic. The mirroring of network traffic may comprise data that may be considered of particular interest. The network traffic may be mirrored by a mirror service portal from a mirror sender, referred to as a mirror source, to a mirror receiver, referred to as a mirror destination, locally or remotely over various network segments, such as private and public networks and the Internet. The network traffic may be mirrored to locations not involved in the network communications being mirrored. The present invention provides various techniques for dynamically mirroring data contained in the network traffic from a mirror source to a mirror destination.

Abstract: A method of dynamically launching a monitor includes monitoring network operations, occurring within a device network, to determine the occurrence of one or more trigger events. One or more event-specific monitor processes are dynamically deployed in response to the occurrence of the one or more trigger events.

Abstract: Systems and methods are provided for preserving the privacy of data contained in mirrored network traffic. The mirrored network traffic may comprise data that may be considered confidential, privileged, private, or otherwise sensitive data. For example, the data payload of a frame of mirrored network traffic may include private Voice over IP (VoIP) communications between users on one or more networks. The present invention provides various techniques for securing the privacy of data contained in the mirrored network traffic. Using the techniques of the present invention, network traffic comprising confidential, privileged, private, or otherwise sensitive data may be mirrored in such a manner as to provide for the privacy of such data over at least a portion if not all of the mirrored communications between the mirror source point and the mirror destination point.

Abstract: A method includes establishing a network connection between an endpoint device and a network device within a data network. An announcement message is encoded to include at least one connection criteria. The announcement message is transmitted to the network device.

Abstract: A method includes receiving, on a first network device, an announcement message from an endpoint device connected to the first network device via a network connection. The announcement message, which includes at least one connection criteria, is transmitted to one or more downstream network devices.

Abstract: A system that associates physical locations with network-linked devices in a network to which such devices are connected. This system employs a variety of techniques for establishing device location. The system configuration can vary and can include any type of data network, including LANs, MANs, Wide Area Networks (WANs), Personal Area Networks (PANs), and Home Networks. The system provides location information for particular devices to the network devices and management, and may be used in any of a variety of ways to improve configuration accuracy, control, and security. The location information may also be used to control or secure a device itself.