Abstract: In some examples, a system receives a request from a client device to access a web resource through a zero trust network environment, wherein the web resource is external to the zero trust network environment, the request including a first uniform resource locator (URL), and the web resource including a second URL; fetching the web resource based on the first URL; generating an alternate resource, the alternate resource including an alternate URL replacing the second URL; and providing the alternate resource to the client device.

Abstract: Embodiments described herein are generally directed to use of a chatbot to identify a customer-specified product support issue and provide appropriate troubleshooting guidance. According to an example, free text input describing an issue associated with a product line of a vendor is received from a user via a chatbot. A vector representation of the issue is created by tokenizing and vectorizing the free text input using a word association model corresponding to the product line. It is determined whether the issue matches at least one category within multiple issue categories for the product line by performing similarity scoring between the vector representation and multiple vectors created based on top words per issue category of the multiple issue categories. Responsive to an affirmative determination, an automated, interactive, conversational troubleshooting dialog is initiated with the user via the chatbot and guided based on a decision tree for the at least one category.

Abstract: Systems and methods are provided for optimally allocating resources used to perform multiple tasks/jobs, e.g., machine learning training jobs. The possible resource configurations or candidates that can be used to perform such jobs are generated. A first batch of training jobs can be randomly selected and run using one of the possible resource configuration candidates. Subsequent batches of training jobs may be performed using other resource configuration candidates that have been selected using an optimization process, e.g., Bayesian optimization. Upon reaching a stopping criterion, the resource configuration resulting in a desired optimization metric, e.g., fastest job completion time can be selected and used to execute the remaining training jobs.

Abstract: Example implementations relate to virtual persistent volumes. In an example, a virtual persistent volume storage class is presented to a container orchestrator that includes parameters describing an associated virtual storage policy. In response to a provisioning request that identifies the virtual persistent volume storage class, a virtual persistent volume is created by determining a mapping of the parameters of the virtual persistent volume storage class to parameters of available storage classes so that the parameters of the virtual persistent volume storage class are fulfilled. At least one volume is provisioned to constitute the virtual persistent volume, according to the mapping.

Abstract: Examples described herein relate to a security management system to secure a container ecosystem. In some examples, the security management system may protect one or more entities such as container management applications, container images, containers, and/or executable applications within the containers. The security management system may make use of digital cryptography to generate digital signatures corresponding to one or more of these entities and verify them during the execution so that any compromised entities can be blocked from execution and the container ecosystem may be safeguarded from any malicious network attacks.

Abstract: Example implementations relate to an integrated circuit (IC) package, an electronic device having the IC package, and a method of assembling the IC package to a printed circuit board (PCB) of the electronic device. The IC package includes a substrate, a chip, and an electromagnetic shield. The chip is coupled to the substrate. The electromagnetic shield is coupled to the substrate such that the chip is enclosed between the substrate and the electromagnetic shield. The electromagnetic shield includes a ferromagnetic material. Further, the electromagnetic shield protrudes beyond the substrate and is electrically grounded to the PCB to prevent an electromagnetic interference (EMI) noise from radiating through the IC package.

Abstract: Methods and systems are provided to facilitate network egress fairness between applications. At an egress port of a network, an arbitrator can provide fairness-based traffic shaping to data associated with applications. The desired fairness-based traffic shaping can be provided based on bandwidth, traffic classes, or other parameters. Consequently, the egress link's bandwidth can be allocated with fairness among the applications.

Abstract: Dynamic adaptive reconfiguration of a computing system includes receiving a request to remove a first node in a plurality of physical nodes. An operating system is executing collectively across the plurality of physical nodes, and an application is running on the operating system. It further includes in response to the request, and while the application is running, evacuating virtualized resources associated with the first node to one or more other nodes in the plurality of physical nodes. It further includes subsequent to the evacuation of the virtualized resources, removing the first node from the plurality of physical nodes.

Abstract: Examples relate to a system comprising a cluster of worker nodes communicatively connected to a control plane. The control plane includes a first control switch and a second control switch. The control switches are configured with a virtual IP address. The IP address is associated with a control switch operating in an active mode. The control switches communicate with a cluster of worker nodes via the virtual IP address. A single instance of a key-value database is deployed on one of the first control switch and the second control switch that is operating in active mode, and the first control switch and the second control switch are functionally coupled by a distributed block system for data synchronization.

Abstract: A device and corresponding method are provided to provide accurate estimates of how long it will take to install updates to compute nodes in a large-scale computer deployment. a duration prediction model is trained using historical data from previous updates to compute nodes. The features selected to train the duration prediction model are update features including update component type, update component size, update component duration and compute node features including operating system, BMC type/version, UEFI type/version, and generation for each of the compute nodes updated. The historical data for the features is accessed from a metadata store.

Abstract: Example implementations relate to deduplication operations in a storage system. An example includes generating a housekeeping work map to delete a backup item stored in a deduplication storage system; selecting a first work entry of the housekeeping work map, where the first work entry identifies a first container index and a first manifest; in response to a selection of the first work entry, loading the first container index into the memory, the first container index comprising a back-reference data structure; identifying, in the back-reference data structure, a back-reference entry indexed to the first manifest; determining, using the back-reference entry indexed to the first manifest, a first set of data units included in the first manifest and that are indexed in the first container index; and decrementing, in the first container index, a set of reference counts for the determined first set of data units.

Abstract: A frontend circuit of a time-interleaved ADC is provided. The frontend circuit can include a track-and-hold circuit to sample an analog input signal to the ADC, a sub-ADC circuit to convert the sampled analog input signal to a digital output signal, and a source-follower circuit. An input of the source-follower circuit can be coupled to an output of the track-and-hold circuit, and an output of the source-follower circuit can be coupled to an input of the sub-ADC circuit. The source-follower circuit is to provide buffering between the track-and-hold circuit and the sub-ADC circuit. The circuit further includes a common-mode-adjusting circuit to dynamically adjust common-mode settings of the time-interleaved ADC. While adjusting the common-mode settings, the common-mode-adjusting circuit can adjust, separately, an input common-mode voltage of the track-and-hold circuit and an input common-mode voltage of the sub-ADC circuit based on current Process, Voltage, and Temperature (PVT) conditions.

Abstract: Systems are methods are provided for implementing load balancing of IPsec security associations (SAs) SAs between different heterogeneous cores, for example in a multiple controller systems. The balancing of IPsec SAs are performed using software implementations of IPsec offloading and/or hardware implementations of IPsec offloading. By balancing the processing functions related to orchestration of IPsec SAs between hardware (e.g., IPsec hardware accelerator) and software (e.g., IPsec software accelerator), the methods realize increased optimization, improved user experience, and enhanced product performance in networks using IPsec. For example, an IPsec session is initiated, and it is determined whether a resource limitation for a hardware-based IPsec accelerator has been reached. If the limitation for the hardware-based IPsec accelerator has been reached, processing for the IPsec SA for the initiated IPsec session is offloaded to a software-based IPsec accelerator.

Abstract: End-to-end topology stitching and representation is described. An example includes instructions for receiving, at a server, a set of configuration data for an infrastructure stack, the set of configuration data including configuration data for each of a plurality of domains of the infrastructure stack; parsing the received set of configuration data; stitching together an end-to-end topology for the plurality of domains of the infrastructure stack based at least in part on the parsed set of configuration data; and generating a representation of the end-to-end topology of the infrastructure stack.

Abstract: Systems and methods are provided for prevent network outages and improve communication effectiveness by implementing an automatic discovery method that enables the AP to act dynamically to determine its persona as a WAN AP or LAN AP. Based on the determination, the AP can receive the appropriate configuration settings in a configuration file from the central controller (e.g., Aruba central config service) for its dynamic persona. In some examples, the administrator user may define an AP identifier (e.g., MAC addresses) of the network devices in the corresponding microbranch for authentication and authorization.

Abstract: Systems and methods are provided for managing data transmissions in integrated circuits using a handshake, credit path, and data path. For example, the handshake between transmission and receiving sides can enable information to be passed over a separate path from the data path. Based on a calculated round trip delay, the system can identify the number of top level flops or registers needed in the credit path, which can be the same as the number of top level flops or registers in the data path. The receiving side can calculate the required number of credits per requested virtual channel based on the available queuing resources of the receiving side and the round trip delay of the data path, in order to ensure full bandwidth data streaming on the channel.

Abstract: A network interface controller (NIC) capable of efficient memory access is provided. The NIC can be equipped with an operation logic block, a signaling logic block, and a tracking logic block. The operation logic block can maintain an operation group associated with packets requesting an operation on a memory segment of a host device of the NIC. The signaling logic block can determine whether a packet associated with the operation group has arrived at or departed from the NIC. Furthermore, the tracking logic block can determine that a request for releasing the memory segment has been issued. The tracking logic block can then determine whether at least one packet associated with the operation group is under processing in the NIC. If no packet associated with the operation group is under processing in the NIC, tracking logic block can notify the host device that the memory segment can be released.

Abstract: Techniques are provided for a spare part management and reservation system. Based on a received request from a first client device, stored data is retrieved indicating whether a part is available to a user. A first indication is received from the first client device comprising a request from the user to reserve the part in an inventory. In response to data indicating that the part is available to the user, a contingent reservation of the part by the user is generated and transmitted. A second indication comprising a notification indicating whether the part has been consumed by the user is received from the first client device. In response to the notification indicating that the part has or has not been consumed by the user, a real-time update to the contingent reservation comprising either a confirmed reservation or an indication that the part is available for reservation is generated and transmitted.

Abstract: Systems, methods, and computer-readable media are described for employing a machine learning-based approach such as adaptive Bayesian optimization to learn over time the most optimized assignments of incoming network requests to service function chains (SFCs) created within network slices of a 5G network. An optimized SFC assignment may be an assignment that minimizes an unknown objective function for a given set of incoming network service requests. For example, an optimized SFC assignment may be one that minimizes request response time or one that maximizes throughput for one or more network service requests corresponding to one or more network service types. The optimized SFC for a network request of a given network service type may change over time based on the dynamic nature of network performance. The machine-learning based approaches described herein train a model to dynamically determine optimized SFC assignments based on the dynamically changing network conditions.

Abstract: A process includes coupling a push-pull driver of a first bus device to a plurality of communication lines that are associated with a first bus to allow the first bus device to access the first bus using push-pull signaling. The process includes sharing a set of communication lines with the second bus. The sharing includes coupling an open drain driver of a second bus device to the set of communication lines to allow the second bus device to access the second bus using open drain signaling. The sharing includes using the set of communication lines in first time periods in which the first bus device accesses the first bus and using the set of communication lines in second time periods other than the first time periods in which the second bus device accesses the second bus. The sharing includes isolating a push-pull driver of the first bus device from the set of communication lines responsive to the second time periods.