Abstract: An approach for reduced size extent identifiers for a file system may be implemented by generating a full-size extent or file identifier and generating a smaller identifier from a portion of the full-size identifier. A check may be performed as to whether the smaller identifier is unique within a file system and if it is unique, the smaller identifier may be used in place of the full-size identifier. If not unique, the size of the smaller identifier may be increased. In some embodiments, the size of the smaller identifier is increased until a unique identifier if found.

Abstract: An illustrative embodiment disclosed herein is an apparatus including a processor having programmed instructions to receive, from a client, a request to create a catalog item corresponding to a file, determine an identifier of a cluster manager associated with a cluster having available capacity, send, to the cluster manager, a source location of the catalog item, and cause the cluster manager to store the catalog item from the source location in the cluster.

Abstract: Systems and methods for scheduling job requests in a virtualization system. A method embodiment commences upon initialization of a pair of multi-level queues comprising a high priority job queue and a low priority job queue. A plurality of virtual machines issue job requests. Queue management logic receives incoming job requests from the virtual machines and locates or creates a job request group corresponding to the virtual machine of the incoming job request. The incoming job request is positioned into the job request group and the job request group is positioned into a queue. When a job executor is ready for a next job, then a job for execution can be identified by locating a next job in a next job request group that is at the front of either the high priority queue or at the front of the low priority queue. When a job finishes, the queues are reorganized.

Abstract: Synchronization techniques for computing systems that interface with external service providers. A method for accessing status and other attributes of an external service provider commences upon identifying an external service such as a firewall appliance or backup repository that provides computing-related functions to computing entities of the computing system. One or more access mechanisms such as an application programming interface is exposed to the external service. The external service is registered with the computing system to use the access mechanism. When the external service detects a change of its state, the external service can communicate that change to the computing system through a “push” operation. The computing system processes the “pushed” data from the external service by verifying the status of the registration and authorization permissions, and then modifies one or more entity attributes of the computing resource entity.

Abstract: Examples of systems and methods are described for selecting firmware versions of multiple components for a distributed computing system (e.g., a cluster). Multiple selection interfaces may be presented to a user who may select at least one firmware version of at least one component. Based on the user selection(s), a service manager may evaluate firmware component dependencies and identify compatible firmware versions of other components for installation. In this manner, a set of firmware versions may be installed and/or upgraded which may be different than a current set of versions and/or a set of versions recommended in a wholly automated manner.

Abstract: One embodiment of the present invention provides an enhanced authentication system. During operation, the system can obtain, from a remote device of a client, an authentication request prior to the exchange of application layer web traffic associated with a piece of resource protected by the system. The system can then determine, in the authentication request, an indicator indicating whether certificate-based authentication is enforced for the client. If certificate-based authentication is enforced for the client, the system can initiate certificate-based authentication for the client. On the other hand, if certificate-based authentication is not enforced for the client, the system can send information associated with a user interface to the client. The user interface can allow the client to select an authentication method from a set of authentication methods supported by the system.

Abstract: A platform-as-a-service (PaaS) manager abstracts deployment of PaaS software stacks to different computing platforms such that the PaaS software stacks provide a common platform to host an application despite differences in the underlying architectures of the computing platforms. Each PaaS software stack is hosted on a service domain installed on a respective one of the computing platforms, and includes an operating system and provides access to a set of services for execution of applications. The some examples, the different computing platforms include multiple different cloud architectures.

Abstract: An illustrative embodiment disclosed herein is a method including receiving, by a controller virtual machine (CVM) and from a hypervisor, a request to clone a virtual machine (VM) state. The VM state includes a parent state and a snapshot. The method further includes cloning, by the CVM, the parent state and the snapshot to generate a cloned parent state and a cloned snapshot, respectively, and sending, by the CVM and to the hypervisor, data indicating successful cloning of the parent state and the snapshot.

Abstract: A computing node is configured to initialize by requesting a particular network resource from a network management server, and receiving acknowledgment of the particular network resource and an encryption key from the network management server to contact a configuration management server. The initialization further includes providing, using the particular network resource, a registration request message encrypted based on the encryption key to the configuration management server, and receiving configuration information corresponding to the computing node from the configuration management server in response to the registration request computing node.

Abstract: Examples described herein include imaging servers which may support asynchronous imaging of one or more computers (e.g., computing nodes). The imaging server may use out-of-band communication to install requested images on one or more computing nodes. The imaging server may support multiple concurrent installation sessions, and may maintain a log specific to each session. This may facilitate session-specific status reporting. In this manner, operating systems, hypervisors, or other software may be installed on computing nodes.

Abstract: An illustrative embodiment disclosed herein is an apparatus including a processor having programmed instructions to determine a frequency rate for tracking changed data of a virtual machine (VM), track the changed data at the determined frequency rate, receive a request to generate a recovery point associated with a specified time, and, responsive to receiving the request to generate the recovery point associated with the specified time, generate the recovery point.

Abstract: A system and method include tracking virtual entities in a hybrid cloud system.

Abstract: Examples of systems are described herein which may dynamically allocate compute resources to recovery clusters. Accordingly, a recovery site may utilize fewer compute resources in maintaining recovery clusters for multiple associate clusters, while ensuring that, during use, compute resources are allocated to a particular cluster. This may reduce and/or avoid vulnerabilities arising from a use of shared resources in a virtualized and/or cloud environment.

Abstract: In particular embodiments, a system for managing a virtualization environment includes host machines, each of the host machines including a hypervisor, user virtual machines (UVMs) and a virtual machine controller. The virtualization environment also includes virtual disks comprising a plurality of storage devices, and being accessible by the virtual machine controllers. The virtual machine controllers conduct I/O transactions with the virtual disks. The system stores an entity-relationship graph representing elements in the virtualization environment. Each of the elements is represented by an entity-type node in the entity-relationship graph, and relationships between the elements are represented by edges between the nodes.

Abstract: According to an aspect of the present disclosure, the records of an audit log are stored using blockchain technology. The audit log is accordingly rendered immutable and thus tamper proof. According to another aspect of the present disclosure, the identity of each user is mapped to a corresponding code value using a one-way-function (that is, the user identity cannot be practically be deciphered from the code value). A table is maintained with entries mapping the user identifiers to the code value. The records in the audit log are stored with the user identifiers substituted by the code values. The log records corresponding to the user are made unidentifiable associated with the user by deleting the table entry corresponding to the user identifier of the user. Accordingly the ‘right to be forgotten’ may be supported. Another aspect extends such a right to general records.

Abstract: In one embodiment, a system for managing a virtualization environment includes a set of host machines, each of which includes a hypervisor, virtual machines, and a virtual machine controller, and a first virtualized file server configured to receive a request to access a storage item located at a second virtualized file server, determine that the storage item is designated as being accessible by other virtualized file servers, identify an FSVM of the second virtualized file server at which the storage item is located, and forward the request to the FSVM of the second virtualized file server. The storage item may be designated as being accessible by other virtualized file servers when the storage item is associated with a predetermined tag value indicating that the storage item is shared among virtualized file servers. The predetermined tag value may be stored in a sharding map in association with the storage item.

Abstract: Techniques for replay of groups of I/Os for disaster recovery. At a primary site, a plurality of primary site computing entities that are to be restored from the secondary computing site after a disaster recovery event are identified as belonging to an entity group. At the primary site, I/O commands that are performed over any of the entities of the entity group are observed and streamed to the secondary site, where they are persisted into a log. Periodically, the primary site sends the secondary site an I/O map that associates a time with an indication of the last performed I/O commands pertaining to any observed I/O commands that had been performed over any one or more of the computing entities of the entity group. Upon receiving a disaster recovery request, the most recent I/O map and the secondary site log are processed to construct a snapshot for the entity group.

Abstract: Methods, systems and computer program products for user-specific curation of applications from heterogeneous application sources. Multiple components are interconnected to perform user-specific curation operations. The user-specific curation operations comprise accessing application metadata corresponding to a plurality of applications from a plurality of application sources. The application sources may be heterogeneous and may be situated at local sites or at remote sites. A set of rules are applied to the application metadata to determine if one or more applications are authorized for use by a particular user or group. Publication attributes that control accessibility by a particular user or particular group of users are associated with the authorized applications. Based on the publication attributes as they apply to a particular user, one or more curated applications are selected from the authorized applications.

Abstract: Methods, systems and non-transitory computer readable media for handling IP network addresses in a virtualization system. Embodiments are configured to receive, from a cloud provider, a cloud provider media access control address to assign to a network interface of a computing node. Also received from the cloud provider is a cloud provider's IP address associated with the cloud provider's media access control address. A virtual machine on the computing node is configured such that the cloud provider's IP address serves as an IP address of the virtual machine and such that a virtualization system media access control address serves as a MAC address of the virtual machine. The virtualization system correlates the cloud provider's media access control address to the IP address of the virtual machine. In some cases, the cloud provider's media access control address stored in a virtual switch of a hypervisor.

Abstract: Methods, systems and computer program products for deploying a virtualization system onto cloud computing infrastructure. Virtual machines of a virtualization system are deployed onto computing nodes that are interconnected via a cloud provider's networking infrastructure. When migrating a virtual machine from a source computing node to a target computing node that is also interconnected to the cloud provider's networking infrastructure, the addressing of the to-be-migrated virtual machine changes. Dynamically-updated media access control translation tables are maintained at the computing nodes. The media access control translation tables are populated with cloud provider media access control addresses received from the cloud provider. A virtual switch at each computing node modifies incoming and outgoing packets of a to-be-migrated virtual machine based on contents of that node's media access control translation table.