Abstract: Various examples are directed to systems and methods for network virtualization for web applications. For example, a WAN controller may receive from a backend query processor, a first tenant user query table that describes a first set of query types for a first user. The first set of query types may comprises a first query type having a first computational weight and a second query type having a second computational weight less than the first computational weight. The WAN controller may determine that a first network path to a web application data center is less congested that a second network path to the web application data center. The WAN controller may send a first flow entry to a first network appliance on the first network path instructing the first network appliance on the first network path to send packets associated with queries of the first set of query types to a second network appliance on the first network path.

Abstract: A method includes monitoring a user login to a computer network, receiving a media access control (MAC) address associated with a logged-in user, comparing the MAC address to a table that associates the MAC address with one or more queries to which the user has access, wherein the table comprises information associated with other users who are currently logged-in to the computer network, determining whether the user and at least one of the other currently logged-in users have common access to one or more queries, identifying the user and the at least one of the other currently logged-in users determined to have common access to one or more queries as conflicting users, and restricting write or modify queries through the network for the conflicting users.

Abstract: Methods and system are disclosed that manage access to a logical object in software defined networks. In one aspect, managing access to the logical objects may include determining whether to retain or release a lock object on a corresponding logical object in the software defined network. The software defined network may receive multiple requests to access applications or logical objects. In response, a front-end engine may be instantiated. The front-end engine may communicate with a back-end engine to determine an availability of TCP communication ports, lock objects, etc., to access the requested logical objects. A network monitoring engine working in cooperation with the front-end engine and the back-end engine may receive the above information on the TCP communication ports, the lock objects, etc., and may determine whether to retain a lock object on a corresponding logical object or to release the lock object and the corresponding logical object.

Abstract: A method includes monitoring a user login to a computer network, receiving a media access control (MAC) address associated with a logged-in user, comparing the MAC address to a table that associates the MAC address with one or more queries to which the user has access, wherein the table comprises information associated with other users who are currently logged-in to the computer network, determining whether the user and at least one of the other currently logged-in users have common access to one or more queries, identifying the user and the at least one of the other currently logged-in users determined to have common access to one or more queries as conflicting users, and restricting write or modify queries through the network for the conflicting users.

Abstract: Methods and system are disclosed that optimize an allocation of virtual machines or instances of virtual machines or computing resources. In one aspect, a software defined network includes a front-end query classifier to monitor user traffic (e.g. requests or queries for executing operations) generated from multiple virtual machines (e.g., tenants). The monitored queries may be classified into multiple levels or categories (e.g., L1, L2, L3, etc.) by a back-end query classifier. The classified queries are clustered by a query-clustering engine based on a time stamp information associated with the queries. A virtual machine optimizer may optimize an allocation of virtual machines based on a computation that includes a combination of density of clustered queries and weights assigned to the queries.

Abstract: Methods and system are disclosed that manage access to a logical object in software defined networks. In one aspect, managing access to the logical objects may include determining whether to retain or release a lock object on a corresponding logical object in the software defined network. The software defined network may receive multiple requests to access applications or logical objects. In response, a front-end engine may be instantiated. The front-end engine may communicate with a back-end engine to determine an availability of TCP communication ports, lock objects, etc., to access the requested logical objects. A network monitoring engine working in cooperation with the front-end engine and the back-end engine may receive the above information on the TCP communication ports, the lock objects, etc., and may determine whether to retain a lock object on a corresponding logical object or to release the lock object and the corresponding logical object.

Abstract: Methods and system are disclosed that optimize an allocation of virtual machines or instances of virtual machines or computing resources. In one aspect, a software defined network includes a front-end query classifier to monitor user traffic (e.g. requests or queries for executing operations) generated from multiple virtual machines (e.g., tenants). The monitored queries may be classified into multiple levels or categories (e.g., L1, L2. L3, etc.) by a back-end query classifier. The classified queries are clustered by a query-clustering engine based on a time stamp information associated with the queries. A virtual machine optimizer may optimize an allocation of virtual machines based on a computation that includes a combination of density of clustered queries and weights assigned to the queries.

Abstract: Various examples are directed to systems and methods for network virtualization for web applications. For example, a WAN controller may receive from a backend query processor, a first tenant user query table that describes a first set of query types for a first user. The first set of query types may comprises a first query type having a first computational weight and a second query type having a second computational weight less than the first computational weight. The WAN controller may determine that a first network path to a web application data center is less congested that a second network path to the web application data center. The WAN controller may send a first flow entry to a first network appliance on the first network path instructing the first network appliance on the first network path to send packets associated with queries of the first set of query types to a second network appliance on the first network path.