Abstract: A method and apparatus for dynamic integration of a covert namespace are provided. A Software-Defined Networking (SDN) controller is configured to send a request for workload transfer to an endpoint where the endpoint is connected to a virtual switch. The SDN controller determines that a connection between the endpoint and the virtual switch is secure based on a tenant-specific policy associated with the endpoint. A first covert namespace is configured to be connected between the endpoint and the virtual switch to communicate to the endpoint and the virtual switch directly. The operations of the virtual switch are executed using the first covert namespace according to the tenant-specific policy. A workload is caused to be transmitted to the endpoint through the first covert namespace.

Abstract: Generating and enforcing tenant-specific policies within a container includes, applying a first policy for a specific operational parameter when a software package that is running within a container and that is utilized by a plurality of tenants is leveraged by a first tenant of the plurality of tenants. A second policy is applied for the specific operational parameter when the software package is leveraged by a second tenant of the plurality of tenants.

Abstract: Techniques for monitoring packet loss in communications using stochastic streaming algorithms are provided. In an embodiment, a server computer receives data identifying a plurality of data packet drop events from an electronic digital network element. The server computer creates and stores in computer memory a plurality of frequency tables which track packet loss for a plurality of items, each frequency table corresponding to an attribute of a monitored attribute type and a snapshot time. The server computer identifies, for each frequency table, one or more items of the plurality of items that are associated with a frequency of packet loss higher than the remaining items of the plurality of items.

Abstract: A method and apparatus for dynamic integration of a covert namespace are provided. A Software-Defined Networking (SDN) controller is configured to send a request for workload transfer to an endpoint where the endpoint is connected to a virtual switch. The SDN controller determines that a connection between the endpoint and the virtual switch is secure based on a tenant-specific policy associated with the endpoint. A first covert namespace is configured to be connected between the endpoint and the virtual switch to communicate to the endpoint and the virtual switch directly. The operations of the virtual switch are executed using the first covert namespace according to the tenant-specific policy. A workload is caused to be transmitted to the endpoint through the first covert namespace.

Abstract: Generating and enforcing tenant-specific policies within a container includes, applying a first policy for a specific operational parameter when a software package that is running within a container and that is utilized by a plurality of tenants is leveraged by a first tenant of the plurality of tenants. A second policy is applied for the specific operational parameter when the software package is leveraged by a second tenant of the plurality of tenants.