Abstract: The disclosure relates to decentralized management of edge nodes operating outside an enterprise network using blockchain technology. A management node may operate within a firewall of the enterprise to manage the edge nodes operating outside the firewall using blockchain technology. The management node may coordinate management by writing change requests to a decentralized ledger. The edge nodes may read the change requests from its local copy of the distributed ledger and implement the change requests. Upon implementation, an edge node may broadcast its status to the blockchain network. The management node may mine the transactions from the edge nodes into the distributed ledger, thereby creating a secure and scalable way to coordinate management and record the current and historical system state. The system also provides the edge nodes with a cryptographically secured, machine-to-machine maintained, single version of truth, enabling them to take globally valid decision based on local data.

Abstract: Systems and methods are provided for a modular switch system that comprises disaggregated components, plugins, and managers that enable flexibility to adjust the dynamic configuration of a switch system. This can create modularity and customizability at different times of the lifecycle of the currently configured switch system.

Abstract: A system for efficient multicast control packet forwarding is provided. During operation, the system can maintain a first tunnel between a first switch and a second switch in an overlay tunnel fabric. The encapsulation of a packet sent via the overlay tunnel fabric is initiated and terminated within the overlay tunnel fabric. The system can maintain a second tunnel between the first switch and a third switch, which can be in an external network that excludes the first and second switches. The switch can distinguish the first and second tunnels as intra-fabric and inter-fabric tunnels, respectively. Upon receiving a multicast control packet via the first tunnel, the system can identify the second tunnel as the inter-fabric tunnel and forward the multicast control packet via the second tunnel. Here, a respective multicast control packet received from the first tunnel can be precluded from being forwarded on intra-fabric tunnels.

Abstract: Systems and methods are provided for implementing a low power and area ternary content addressable memory (TCAM). An example of a TCAM comprises a match line, and a plurality of TCAM cells connected along the match line. Each TCAM cell stores a state of a threshold value. The TCAM cells are configured to pull down a signal over the match line in response to inequality between an input search and the threshold value. The plurality of TCAM cells comprises a number of TCAM cells that is less than the threshold value. The input values can be encoded according to a first encoding scheme and the threshold value can be encoded according to one of a second and a third encoding scheme based on an inequality check mapped to the plurality of TCAM cells.

Abstract: Data-driven intelligent networking systems and methods are provided. The system can accommodate dynamic traffic with fast, effective endpoint congestion detection and control. The system can maintain state information of individual packet flows, which can be set up or released dynamically based on injected data. Each flow can be provided with a flow-specific input queue upon arriving at a switch. Packets of a respective flow can be acknowledged after reaching the egress point of the network, and the acknowledgement packets can be sent back to the ingress point of the flow along the same data path. As a result, each switch can obtain state information of each flow and perform flow control on a per-flow basis.

Abstract: In certain embodiments, a computer-implemented method includes: receiving, from a user interface and at a planar file system manager executing on one or more processors, a planar file system configuration request comprising a plurality of planes and a plurality of plane relationships, wherein the plurality of plane relationships comprise a sub-planar relationship between a plane and a sub-plane and an orthogonal relationship between two separate planes of the plurality of planes; configuring, by the planar file system manager, a storage environment to include a planar file system based on the planar file system configuration request; receiving, from the user interface, a plane operation request to perform an operation on a plane of the planar file system, wherein the plane operation request comprises a plane identifier corresponding to the plane; and performing, based on the plane operation request, the operation on the plane.

Abstract: A set of AP radios in a wireless network deployment for which configurations are to be deployed is identified. Those configurations deemed to be likely to cause a coverage hole are flagged as high-risk. A candidate deployment order for deploying configurations to the set of AP radios is determined based on deployment ordering criteria. The ordered APs are grouped into candidate deployment batches and a batch refinement process is performed to ensure that no neighbor AP radio is in a same deployment batch as an AP designated to receive a high-risk configuration deployment. The configurations are then deployed to the AP radios in accordance with the refined deployment batches. For any candidate deployment batch that includes a flagged AP radio and a neighbor AP radio, one of the radios is removed from the deployment batch and placed in a re-order list, which is separately subjected to ordering and batching processes.

Abstract: In certain embodiments, a method includes receiving, in association with a configuration of a proposed cloud solution, a selection of a first cloud solution aspect made by a user of a guidance tool, and generating, using a hybrid recommender system, a recommendation for a subsequent selection of a second cloud solution aspect of the configuration of the proposed cloud solution. The hybrid recommender system may include a collaborative filtering system and a content-based filtering system, and may generate the recommendation according to information that includes user information, prior configuration information, and the selection. The method further includes providing the recommendation to the user via a user interface of the guidance tool; receiving the subsequent selection; and generating, by the guidance tool, a proposed cloud solution output based at least in part on the selection and the subsequent selection.

Abstract: Embodiments described herein are generally directed to a containerized application software deployment architecture. According to an example, a system includes multiple hosts that are part of aa stretch cluster spanning multiple data centers. Each of the hosts include a processing resource, a memory, and a storage device. Each host of a first subset of the multiple hosts runs multiple containerized instances of a component of a Security Information and Event Management (SIEM) application within respective containers. At least one host of the multiple hosts is separate from the first subset and is dedicated to running at least one containerized ingress gateway application operable to load balance requests directed to the SIEM application among the multiple containerized instances running on the first subset of hosts.

Abstract: One aspect of the instant application can provide a storage system. The storage system can include a plurality of byte-addressable storage devices and a plurality of media controllers. A respective byte-addressable storage device is to store a parity block or a data block of a data stripe, and a respective media controller is coupled to a corresponding byte-addressable storage device. Each media controller can include a tracker logic block to serialize critical sections of multiple media-access sequences associated with an address on the corresponding byte-addressable storage device. Each media-access sequence comprises one or more read and/or write operations, and the data stripe may be inconsistent during a critical section of a media-access sequence.

Abstract: In some examples, a management controller is to dynamically vary a parameter that controls an operational characteristic of a bus when transferring different portions of information from a memory over the bus during a process of an electronic device in which a cryptographic operation is performed. The different portions of the information from the memory are to be transferred over the bus with different operational characteristics of the bus.

Abstract: Systems and methods are provided to improve traditional chip processing. Using crossbar computations, the convolution layer can be flattened into vectors, and the vectors can be grouped into a matrix where each row or column is a flattened filter. Each submatrix of the input corresponding to a position of a convolution window is also flattened into a vector. The convolution is computed as the dot product of each input vector and the filter matrix. Using intra-crossbar computations, the unused space of the crossbars is used to store replicas of the filters matrices and the unused space in XIN is used to store more elements of the input. In inter-crossbar computations, the unused crossbars are used to store replicas of the filters matrices and the unused XINs are used to store more elements of the input. Then, the method performs multiple convolution iterations in a single step.

Abstract: Approaches for writing data objects to a distributed file system are described. In an example, a size of a data object to be created within a distributed file system may be determined based on a client request. Based on the size of the data object, data content of the data object is inserted into one of the object location table, object data table or a data container within the distributed file system. In an example, metadata corresponding to the data object may be written to an object location table.

Abstract: Embodiments of the disclosure provide a system, method, or computer readable medium for providing a differentiable content addressable memory (aCAM) that implements an analog input analog storage and analog output learning memory. The analog output of the differentiable CAM can provide input to a learning algorithm, which may compute the gradients in comparison to historic values and reduce data inaccuracies and power consumption.

Abstract: Systems and methods are provided for improving geolocation services, like GPS, using network device measurements. For example, a plurality of access points (APs) or other network devices may be implemented in a network environment and constructed with a GPS chip. Range measurements can be collected from these network devices and incorporated with the GPS locations using various methods described herein to improve the overall location determination of these devices.

Abstract: A system determines an original instruction with a first logical register (LR) mapped to a first physical register (PR). The system determines a current instruction with a current LR. A prior instruction is associated with a second LR mapped to a second PR. The system allocates the current LR to a third PR. Responsive to determining that the current and prior instructions are executed in different iterations, the system marks the second PR as not eligible for early release. Responsive to determining that the current LR is previously mapped to the first PR, the allocation comprises a redefinition of the first LR. Responsive to determining that the first PR is eligible for early release and that the current and original instructions are executed in the same or consecutive iterations, the system releases the first PR based upon the redefinition and not the prior instruction completing or the current instruction committing.

Abstract: Examples disclosed herein relate to using a compiler for implementing tensor operations in a neural network base computing system. A compiler defines the tensor operations to be implemented. The compiler identifies a binary tensor operation receiving input operands from a first output tensor of a first tensor operation and a second output tensor of a second tensor operation from two different paths of the convolution neural network. For the binary tensor operation, the compiler allocates a buffer space for a first input operand in the binary tensor operation based on a difference between a count of instances of the first output tensor and a count of instances of the second output tensor.

Abstract: Examples described herein relate to a security management system to secure a container ecosystem. In some examples, the security management system may protect one or more entities such as container management applications, container images, containers, and/or executable applications within the containers. The security management system may make use of digital cryptography to generate digital signatures corresponding to one or more of these entities and verify them during the execution so that any compromised entities can be blocked from execution and the container ecosystem may be safeguarded from any malicious network attacks.

Abstract: In an example implementation consistent with the features disclosed herein, high availability of a stateful application is achieved by orchestrating multiple computing clusters. A stateful application is deployed at a first application operator and a second application operator of a first computing cluster and a second computing cluster, respectively. The first application operator includes a first control loop that changes the first computing cluster based on first resources of the first computing cluster. The second application operator includes a second control loop that changes the second computing cluster based on second resources of the second computing cluster. Synchronization of the first resources with the second resources is configured, such as via an object storage service. The first application operator and the second application operator are scaled to, respectively, nonzero and zero. A load balancer is configured to route requests to the first computing cluster.

Abstract: Examples described herein relate to providing pool-based automated lifecycle management of infrastructure via abstracted resources. According to an example, a consumption model is maintained in which heterogeneous infrastructure is represented in a generalized form as logical resource objects, including nodes and pools of the nodes. The nodes have respective node roles indicative of specific functionality the nodes are operable to provide to a workload based on the respective attributes/qualities of the nodes. A state model is maintained through which the logical resource objects are transitioned among states and responsive to which notifications are provided to an application orchestration tool associated with the workload. Interactions by the application orchestration tool with heterogeneous infrastructure utilized by the workload are abstracted by providing an API through which requests to manage a lifecycle of the heterogeneous infrastructure are expressed with reference to the logical resource objects.