Abstract: A system and method for providing external resources through a zero trust environment includes recording a web session of a first user to generate a policy allowing a second user to access the resource used in the web session. The method includes receiving a request to initiate a network session with the zero trust environment, the request including login credentials, wherein the login credentials correspond to an authorizing user account; receiving a request to access a resource in a network environment which is external to the zero trust environment; detecting in the request a domain associated with the resource; and configuring a policy engine of the zero trust environment to generate a policy allowing network traffic between the domain and a designated user account, based on the received request.

Abstract: A network interface controller (NIC) capable of efficient packet forwarding is provided. The NIC can be equipped with a host interface, a packet generation logic block, and a forwarding logic block. During operation, the packet generation logic block can obtain, via the host interface, a message from the host device and for a remote device. The packet generation logic block may generate a plurality of packets for the remote device from the message. The forwarding logic block can then send a first subset of packets of the plurality of packets based on ordered delivery. If a first condition is met, the forwarding logic block can send a second subset of packets of the plurality of packets based on unordered delivery. Furthermore, if a second condition is met, the forwarding logic block can send a third subset of packets of the plurality of packets based on ordered delivery.

Abstract: Data-driven intelligent networking systems and methods are provided. The system can accommodate dynamic traffic with fast, effective per-flow credit-based flow control. The system can maintain state information of individual packet flows, which can be set up or released dynamically based on injected data. Each flow can be provided with a flow-specific input queue upon arriving at a switch. Packets of a respective flow can be acknowledged after reaching the egress point of the network, and the acknowledgement packets can be sent back to the ingress point of the flow along the same data path. As a result, each switch can obtain state information of each flow and perform flow control on a per-flow basis.

Abstract: Techniques are provided for discerning energy consumption and carbon footprint data associated with hardware-as-a-service resources, and managing workloads based on carbon cost metrics. A management interface collects energy consumption information associated with a plurality of servers processing workloads in a cloud computing environment. The management interface monitors energy consumption in the plurality of servers. An energy consumption manager calculates carbon cost metrics for the plurality of servers based on the energy consumption information; identifies a subset of the servers as being underutilized based on the carbon cost metrics; and calculates an overall carbon cost of the plurality of servers. A workload manager generates container platform operation labels for the plurality of servers when the overall carbon cost is below a threshold value, such that a workload scheduled on the container platform migrates to one of the servers based on the container platform operation labels.

Abstract: A system for efficiently determining a set of next-hop switches from a switch is provided. During operation, the system can determine the plurality of next-hop switches for an Internet Protocol (IP) address prefix. The system can then store, in an entry of a forwarding data structure of the switch, a list of identifying information indicating the plurality of next-hop switches corresponding to the IP address prefix. The identifying information for the plurality of next-hop switches can be stored in the list in an order of preference for forwarding traffic matching the IP address prefix. Upon receiving a packet with a destination IP address matching the IP address prefix, the system can select the entry from the forwarding data structure for determining a next-hop switch for forwarding the packet. The system can then determine the next-hop switch for the packet from the entry based on the order of preference.

Abstract: A system chassis may comprise a frame having a width, depth, and height and a plurality of divider walls coupled to the frame and forming a plurality of receptacles each configured to receive an electronics tray containing an electronic assembly. Each of the plurality of divider walls comprises a metal sheet having a front edge, a back edge, and two lateral edges, the two lateral edges attached to two lateral walls of the frame. The front edge of the metal sheet has a concave shape such that a distance between the front edge and the back edge of the metal sheet continuously decreases while moving laterally from one lateral edge to a center of the front edge and continuously increases while moving laterally from the center to the opposite lateral edge.

Abstract: A process includes accessing by a management controller of a computer platform, a platform certificate that is stored in a secure memory. The platform certificate includes data representing a reference inventory for the computer platform. The platform certificate includes data representing information designated to bind the platform certificate to a security processor. The security processor is accessible by the management controller. The security processor is inaccessible by an operating system of the computer platform. The process includes verifying the platform certificate. Verifying the platform certificate includes validating, by the management controller, a signature of the platform certificate; and validating, by the management controller, the information designated to bind the platform certificate to the security processor. Verifying the platform certificate includes comparing, by the management controller, a second inventory of the computer platform to the reference inventory.

Abstract: Embodiments of the disclosure provide a system, method, or computer readable medium for programming a target analog voltage range of an analog content addressable memory (aCAM) row. The method may comprise calculating a threshold current sufficient to switch a sense amplifier (SA) on and discharge a match line (ML) connected to a cell of the aCAM; and based on calculating the threshold current, programming a match threshold value by setting a memristor conductance in association with the target analog voltage range applied to a data line (DL) input. The target analog voltage range may comprise a target analog voltage range vector.

Abstract: In some examples, a system executes a monitor separate from an operating system (OS) that uses mapping information in accessing data in a physical memory. The monitor identifies, using the mapping information, invariant information, that comprises program code, of the OS without suspending execution of the OS, the identifying comprising the monitor accessing the physical memory independently of the OS. The monitor determines, based on monitoring the invariant information of the OS, whether a security issue is present.

Abstract: A Power-over-Ethernet (POE) powered device (PD) may be coupled to two power sourcing equipments (PSEs), a PSE and an additional PSE. The PSE may exchange a transport layer protocol communications with the additional PSE. The communications comprising a first communication from the PSE to the additional PSE indicative of a PoE configuration of the PSE and a second communication from the additional PSE to the PSE indicative of a PoE configuration of the additional PSE. The PSE may create a power availability table based on the communications. The PSE may detect occurrence of an event comprising at least one of a change in the power availability table or a change in ability of the PSE to provide power to the PD. On occurrence of the event, the PSE may send additional communications to the additional PSE, requesting to adjust its power allotment for the PD.

Abstract: In embodiments of the present disclosure, a method is provided for performing a frame processing operation on a broadcast/multicast frame at a physical access point (AP). A pre-processing operation is performed on the frame at a protocol layer between a physical layer and an upper layer of the AP to obtain a pre-processed frame. The pre-processing operation comprises a common operation to be performed for the plurality of virtual interfaces at the protocol layer. In this way, by performing a pre-processing operation common to the virtual interfaces supported by the physical AP, the consumption of resources caused by the performance of repeated operations in the frame processing operation can be reduced.

Abstract: In some examples, a system derives a first representation of an assembly of components based on a first source of information, and derives a second representation of the assembly of components based on a second source of information that is of a different type than the first source of information, where the second representation includes any or a combination of an indication of a source of a respective component of the assembly of components, or placement location information of a component in the assembly. The system compares the first representation to the second representation to identify a deviation between the first representation and the second representation, the deviation corresponding to an alteration of the assembly of components.

Abstract: In some examples, a memory device includes a plurality of rows of memory cells, a plurality of victim counters associated with respective rows of memory cells of the plurality of rows of memory cells, and a plurality of aggressor counters associated with the respective rows of memory cells. A first victim counter of the plurality of counters is associated with a first row of the plurality of rows of memory cells, the first victim counter to advance in response to advances in counts of aggressor counters associated with neighboring rows of memory cells that are neighbors of the first row.

Abstract: Examples described herein relate to method, resource management system, and non-transitory machine-readable medium for redeploying a computing resource. Data related to a performance parameter corresponding to a plurality of computing resources deployed on a plurality of host-computing nodes may be received. The performance parameter is associated with one or both of: communication between computing resources of the plurality of computing resources, or communication of the plurality of computing resources with a network device. Further, for a computing resource of the plurality of computing resources, a candidate host-computing node is determined from the plurality of host-computing nodes based on the data related to the performance parameter and the computing resource may be redeployed on the candidate host-computing node.

Abstract: In some examples, a device includes a first processing core comprising a resistive memory array to perform an analog computation, and a digital processing core comprising a digital memory programmable with different values to perform different computations responsive to respective different conditions. The device further includes a controller to selectively apply input data to the first processing core and the digital processing core.

Abstract: Example implementations relate to a cooling module, and a method of cooling an electronic circuit module. The cooling module includes first and second cooling components fluidically connected to each other. The first cooling component includes a first fluid channel having supply, return, and body sections, and a second fluid channel. The second cooling component includes an intermediate fluid channel. The body section is bifurcated into first and second body sections, and the first and second body sections are further merged into a third body section. The supply section is connected to the first and second body sections. The return section is connected to the third body section and the intermediate fluid channel via an inlet fluid-flow path established between the first and second cooling components. The second fluid channel is connected to the intermediate fluid channel via an outlet fluid-flow path established between the first and second cooling components.

Abstract: One aspect of the instant application provides an apparatus for locking a circuit board in position. The apparatus can include a cam latch, a plunger, and a hinge pin coupling the cam latch and the plunger. The cam latch is positioned to rotate around the hinge pin, and the rotation of the cam latch causes a linear motion of the plunger in a plane parallel to a component-mounting surface of the circuit board, thereby facilitating locking and unlocking of the circuit board.

Abstract: Implementations of the present disclosure relate to automatic AP failure recovery with assistance of a neighbor AP. A method includes detecting, by a first access point (AP), a failure at the first AP. The method further includes transmitting, by the first AP to a second AP, a query about an operating status of the second AP. The first AP then receives, from the second AP, a response to the query, the response indicating the operating status of the second AP. The method also includes determining, by the first AP and based at least in part on the operating status of the second AP, that the failure is not indicative of an event also impacting the second AP. The method further includes utilizing, by the first AP, the second AP to assist with recovery from the failure.

Abstract: Systems and methods are provided for frame burst overlapping basic service set (OBSS) handling. In various embodiments, the disclosed methods and systems provide for synchronizing access points (APs) in the same channel. Based on the synchronizing, the APs in the same OBSS channel can determine a distribution policy for using frame bursting. Each AP can use frame bursting in accordance with the distribution policy. In various embodiments, the APs can periodically send frame burst synchronization packets. The frame burst synchronization packets can indicate respective numbers of client devices associated with each AP. Based on the frame burst synchronization packets sent by the APs, a total number of client devices using the same channel can be determined. The distribution policy for using frame bursting can be determined based on the total number of client devices.