Abstract: This application provides a clock frequency determining method and a clock frequency determining apparatus. The method includes: An access network device receives a combined optical signal from a radio over fiber RoF device, where the combined optical signal is obtained by coupling an optical signal of a first frequency and an optical signal of a second frequency; the access network device converts the combined optical signal into an electrical signal; and the access network device sets a local clock frequency based on a signal frequency of the electrical signal and a first preset rule, where the signal frequency of the electrical signal is equal to an absolute value of a frequency difference between the first frequency and the second frequency.

Abstract: Some embodiments provide an automated method for defining externally routable Pods within a Kubernetes cluster. In some embodiments, the Pod operates in a guest cluster has its own VPC (virtual private cloud) network in a datacenter with several other guest clusters that have their own VPC networks and their own set of managers. In some embodiments, a Pod within a GC can be made externally routable so that it can be directly addressable from an external client outside of the Pod's network by using two new Kubernetes CRDs (custom resource definitions), which are an IPPool CRD and a RouteSet CRD. Examples of such external clients include VMs or Pods in another GC or a supervisor cluster connected to the particular GC through a gateway, or from a machine outside of the network of all of the GCs or SC.

Abstract: A laboratory zebrafish autism behavioral model apparatus is provided. The laboratory zebrafish autism behavioral model apparatus comprises a model body, wherein the model body is divided into a plurality of experimental units, and each of the experimental units has a cuboid structure with completely identical shapes; a free swimming area, a stimulus area, and a normal non-stimulus area are formed on each of the experimental units; the stimulus area and the normal non-stimulus area are located on two sides of the free swimming area, respectively, and the free swimming area, the stimulus area, and the normal non-stimulus area are interconnected via mesh openings. The zebrafish autism behavioral model apparatus facilitates further exploration of autism etiology, effectively resolving interference between the stimulus area and the zebrafish's innate thigmotactic behavior, reducing experimental errors, saving time, and minimizing instrument wear and costs.

Abstract: A system and method for capturing resource usage information in a network for namespaces in which pods operate are described herein. A data structure specifies a topology that includes a gateway and routing addresses in a network whose usage is to be captured. The data structure is provided to an API of a master node controlling the pods. A controller in the master node enforces the data structure and reports results back to the API.

Abstract: A traction apparatus, comprising a clip portion (2) and a traction portion (1), the traction portion containing a closed traction structure (11); the closed traction structure being made from an elastic material; the clip portion comprising a main clip body (23, 25) and a clip arm (24, 26); the main clip body being capable of passing through a biopsy channel (4) of an endoscope (3), the clip arm being capable of clip the closed traction structure. Also disclosed is a traction ring used for the traction apparatus, the traction ring being a single closed traction structure or being formed by connecting several closed traction structures, the traction ring being made from an elastic material.

Abstract: A method for creating overlay networking constructs to establish network connectivity between virtual routers and remote physical gateways is provided. An orchestrator receives a mapping between tenant network identifiers for multiple tenant networks and overlay network identifiers for multiple overlay networks. The orchestrator attaches a virtual router to a parent logical port of an overlay logical switch for connectivity between a physical gateway and the multiple tenant networks. The orchestrator creates multiple child logical ports that are sub-interfaces of the parent logical port. Each child logical port is uniquely identified by a tenant network identifier. The orchestrator connects multiple child logical switches to the multiple child logical ports according to the received mapping. Each child logical switch is uniquely identified by an overlay network identifier.

Abstract: Described herein are systems, methods, and software to manage multicast communications for containers in a computing network. In one example, a first node is configured to monitor for registration packets from pods on the first node to join a multicast group. The first node further identifies a registration packet from a first pod of the pods, wherein the registration packet indicates a multicast IP address, and configures one or more forwarding rules in a virtual switch to direct packets with the multicast IP address as a destination IP address to a virtual interface for the first pod. Once configured, the first node is further configured to receive a packet with the multicast IP address as the destination and direct the packet based on the one or more or more forwarding rules.

Abstract: A system and method for capturing resource usage information in a network for namespaces in which pods operate are described herein. A data structure specifies a topology that includes a gateway and routing addresses in a network whose usage is to be captured. The data structure is provided to an API of a master node controlling the pods. A controller in the master node enforces the data structure and reports results back to the API.

Abstract: Some embodiments of the invention provide a method for performing data traffic monitoring for a system that includes a set of heterogeneous networks that includes at least an overlay first network layer that is built on top of an underlay second network layer. The method is performed at a federation controller for the system. The method directs (1) a first set of components in the overlay first network layer to perform a first trace operation to trace a packet exchanged between two machines and passing through network components defined in the overlay first network layer and underlay second network layer and (2) a second set of components in the underlay second network layer to perform a second trace operation to trace the packet. The method receives, from the first and second sets of components, first and second sets of trace data collected during the first and second trace operations. The collected trace data includes correlation data for correlating the first and second sets of data.

Abstract: Some embodiments provide a novel method for processing control plane messages regarding migration of a particular machine from a first host computer managed by a first central control plane (CCP) server to a second host computer. At the first CCP server, the method receives a first data message from the first host computer notifying that the particular machine has been removed from the first host computer. The method determines whether a second data message from a second host computer notifying that the particular machine has been added to the second host computer has been received and processed in order to process the first data message. When it is determined that the second data message has been received and processed, the method processes the first data message.

Abstract: Disclosed herein is a system and method for controlling network traffic among namespaces in which various entities, such as virtual machines, pod virtual machines, and a container orchestration system, such as Kubernetes, reside and operate. The entities have access to a network that includes one or more firewalls. The traffic that is permitted to flow over the network among and between the namespaces is defined by a security policy definition. The security policy definition is posted to a master node in a supervisor cluster that supports and provisions the namespaces. The master node invokes a network manager to generate a set of firewall rules and program the one or more firewalls in the network to enforce the rules.

Abstract: Some embodiments of the invention provide a method for performing data traffic monitoring for a system that includes a set of heterogeneous networks that includes at least an overlay first network layer that is built on top of an underlay second network layer. The method is performed at a federation controller for the system. The method directs (1) a first set of components in the overlay first network layer to perform a first trace operation to trace a packet exchanged between two machines and passing through network components defined in the overlay first network layer and underlay second network layer and (2) a second set of components in the underlay second network layer to perform a second trace operation to trace the packet. The method receives, from the first and second sets of components, first and second sets of trace data collected during the first and second trace operations. The collected trace data includes correlation data for correlating the first and second sets of data.

Abstract: A method for network address management is provided. Embodiments include determining a creation of a namespace associated with a cluster of computing devices, wherein a subset of computing resources of the cluster of computing devices is allocated to the namespace. Embodiments include assigning, to the namespace, a network address pool comprising a plurality of network addresses in a subnet, wherein the assigning causes the plurality of network addresses to be reserved exclusively for the namespace. Embodiments include receiving an indication that a pod is added to the namespace. Embodiments include, in response to the receiving of the indication, assigning a network address from the network address pool to the pod.

Abstract: The disclosure provides an approach for cross-cluster service resource discovery. A method includes obtaining, at a common store in a first node cluster in a cluster set information about a service resource of a second node cluster. The method includes creating a multi-cluster object associated with the service resource, wherein the multi-cluster object provides an association between the service resource and one or more endpoints on the second node cluster. The method includes storing the multi-cluster object in the common store, wherein the multi-cluster object is accessible in the common store by any of the plurality of node clusters in the cluster set to access the service resource on any of the one or more endpoints on the second node cluster.

Abstract: Some embodiments of the invention provide a novel network architecture for deploying guest clusters (GCs) including workload machines for a tenant (or other entity) within an availability zone. The novel network architecture includes a virtual private cloud (VPC) deployed in the availability zone (AZ) that includes a centralized routing element that provides access to a gateway routing element of the AZ. In some embodiments, the centralized routing element provides a set of services for packets traversing a boundary of the VPC. The services, in some embodiments, include load balancing, firewall, quality of service (QoS) and may be stateful or stateless. Guest clusters are deployed within the VPC and use the centralized routing element of the VPC to access the gateway routing element of the AZ.

Abstract: The present invention discloses a method for constructing and optimizing a molecular structure model of lignite, comprising: collecting and processing a lignite sample, analyzing a lignite experimental sample, calculating the number of carbon atoms in lignite and the number of carbon atoms in other parameters, obtaining the sizes of aromatic clusters, and determining the composition features and number of aromatic structural units in lignite; calculating the total number of carbon atoms and the number of aliphatic carbon atoms in lignite; obtaining the categories and number of oxygen-containing functional groups in lignite based on the contents of aromatic hydrocarbon, aliphatic hydrocarbon and various oxygen-containing functional groups, and designing the structural forms of nitrogen and sulfur; constructing a molecular structure model of lignite.

Abstract: Systems, apparatus, articles of manufacture, and methods are disclosed to manage a deployment of virtual machines in a cluster by, in a first host of a plurality of hosts, monitor, with first control plane services, an availability of second control plane services at a second host of the plurality of hosts, wherein the first control plane services and the second control plane services support implementation of application programming interface (API) requests in association with managing a cluster, after a determination that the second control plane services at the second host is not available, assign the first control plane services at the first host to operate in place of the second control plane services at the second host, and in the first host, assign, via the first control plane services at the first host, resources of one or more hosts in the cluster to support the API request.

Abstract: Some embodiments provide a local network controller that manages a first managed forwarding element (MFE) operating to forward traffic on a host machine for several logical networks and configures the first MFE to forward traffic for a set of containers operating within a container virtual machine (VM) that connects to the first MFE. The local network controller receives, from a centralized network controller, logical network configuration information for a logical network to which the set of containers logically connect. The local network controller receives, from the container VM, a mapping of a tag value used by a second MFE operating on the container VM to a logical forwarding element of the logical network to which the set of containers connect. The local network controller configures the first MFE to apply the logical network configuration information to data messages received from the container VM that are tagged with the tag value.

Abstract: Some embodiments provide a novel secure method for suppressing address discovery messaging. In some embodiments, the method receives an address discovery record that provides a network address associated with a machine connected to a network. The method then identifies a set of one or more rules for evaluating the received address discovery record to determine whether the address discovery record or its provided network address should be distributed to one or more hosts and/or devices associated with the network. The method then processes the set of rules to determine whether the received address discovery record violates a rule in the set of rules so as to prevent the distribution of its provided network address. When the address discovery record violates a rule, the method discards it in some embodiments.

Abstract: In an embodiment, a computer-implemented method for dynamically exchanging runtime state data between datacenters with a gateway using a controller bridge is disclosed. In an embodiment, the method comprises: receiving one or more first runtime state data from one or more logical sharding central control planes (“CCPs”) controlling one or more logical sharding hosts; receiving one or more second runtime state data from a gateway that is controlled by a CCP that also controls one or more physical sharding hosts; aggregating to aggregated runtime state data, the one or more first runtime state data received from the one or more logical sharding CCPs and the one or more second runtime state data received from the gateway; determining updated runtime state data based on the aggregated runtime state data, the one or more first runtime state data, and the one or more second runtime state data; and transmitting the updated runtime state data to at least one of the one or more logical sharding CCPs and the gateway.