Abstract: Persistent connections are provided between components in a containiner environment. A hypertext transfer protocol (HTTP) client may include a monitoring service and a proxy service. To obtain information regarding containers in the container environment, the monitoring service communicates a request to the proxy service. The proxy service in turn maintains a persistent connection for a session with a container management service using an authentication token, and communicates the request to the container management service during the session. The container management service obtains the requested information from the container(s) and returns the information in a response to the proxy service, which in turn returns the response to the monitoring service. The session is destroyed/ended only under certain error conditions—otherwise, the session between the proxy service and the container management system is kept persistent.

Abstract: Processes for managing computing processes within a plurality of data centers configured to provide a cloud computing environment are described. An exemplary process includes executing a process on a first host of a plurality of hosts. When the process is executing on the first host, a first network identifier associated with the plurality of hosts is not a network identifier of a pool of network identifiers associated with the cloud computing environment and first and second route tables respectively corresponding to first and second data centers of the plurality of data centers associate the first network identifier with the first host. The exemplary process further includes detecting an event associated with the process. In response to detecting the event associated with the process, the first and second route tables are respectively updated to associate the first network identifier with a second host of the plurality of hosts.

Abstract: Example methods and systems for flow-based latency measurement for logical overlay network traffic are described. In one example, in response to detecting a first inner data packet associated with a packet flow, a first computer system may generate and send a first encapsulated packet via a logical overlay tunnel towards a second computer system. The first encapsulated packet may be generated by encapsulating the first inner data packet with a first outer header that includes first time information associated with the first inner data packet at the first computer system. In response to detecting a second encapsulated packet from the second computer system via the logical overlay tunnel, the first computer system may determine a flow-based latency measurement associated with the packet flow based on the first time information, and second time information identified from a second outer header of the second encapsulated packet.

Abstract: The disclosure herein describes placing a delta component of a base component in a target fault domain. A delta component associated with a base component is generated. The generation includes selecting a first fault domain as a target fault domain for the delta component based on the first fault domain including a witness component associated with the distributed data object of the base component. Otherwise, the generation includes selecting a second fault domain as the target fault domain based on the second fault domain including at least one data component that includes a different address space than the base component. Otherwise, the generation includes selecting a third fault domain as the target fault domain based on the third fault domain being unused. Then, the delta component is placed on the target fault domain, whereby data durability of the distributed data object is enhanced, and available fault domains are preserved.

Abstract: An image of a virtualization software and firmware in a plurality of hosts are upgraded by performing the steps of: in response to a user input, generating a software specification that specifies a desired state of the virtualization software and a desired state of the firmware; based on the software specification, preparing a desired image of the virtualization software that includes software components of a desired version of the firmware; and from a virtual machine management server that is programmed to deploy virtual machines in the hosts, coordinating an upgrade to the desired image of the virtualization software and the desired version of the firmware in the hosts by (1) instructing a hardware support manager to upgrade the hosts to the desired version of the firmware, and (2) instructing each of the hosts to upgrade to the desired image of the virtualization software.

Abstract: The disclosure provides an approach for implementing a distributed firewall within a data center. The firewall is implemented as a kernel space filter driver within the operating system of virtual machines. Each virtual machine hosts several user sessions. The firewall may be dynamically updated with new security policies, either by an administrator or a component of the data center.

Abstract: A system can include an evaluation platform that applies models to improve the quality of experience of users impacted by uplink interference at a network cell, such as at a base station. For a user session at a cell, an expected performance with optimized uplink interference can be compared to an actual performance to determine whether the session is impacted. This can include iteratively increasing a hypothetical power parameter and determining uplink interference based on source and neighboring cells. When positively impacted sessions exceed a threshold, the platform can dynamically change the power parameter of the base station to reflect the hypothetical value.

Abstract: Examples described herein include systems and methods for importing text into a draft email on a user device. In response to a user selecting the first selectable element, the user device can launch a camera interface on the display. The user can capture an image, such as a page of a book or newspaper, and then scale the captured image to the relevant desired portion. The example method can further include recognizing text within the scaled portion of the image and automatically importing the recognized text into the draft email. The user device can utilize a machine learning model to perform text recognition at the device and then insert the recognized text into the draft email automatically. The user device can also display an indication of the accuracy of the imported recognized text within the draft email.

Abstract: A system which includes at least one host, wherein the host is configured to implement at least one container group including a first container, a data communication module, an interface, and a malicious detection module, wherein the data communication module is configured to collect data based on data communication of the container group, and transmit collected data, or data representative thereof, to the interface, the interface being configured to transmit collected data, or data representative thereof, to the malicious detection module, for detecting malicious data.

Abstract: Methods and apparatus to facilitate infrastructure installation checks and corrections in a distributed environment are disclosed. An example apparatus includes a virtual appliance including a management endpoint. The example apparatus includes a component server including a management agent to communicate with the management endpoint. The virtual appliance is to assign a role to the component server and to determine a subset of prerequisites associated with the role based on an applicability to the role. Each of the subset of prerequisites is associated with an error correction script. The component server is to determine whether the component server satisfies the subset of prerequisites associated with the role. The component server is to address an error when the component server is determined not to satisfy at least one of the subset of prerequisites by executing the error correction script associated with the at least one of the subset of prerequisites.

Abstract: A technique for content proxying is described. The technique includes receiving from a first device a stream of data. The stream of data is formatted in a format that does not indicate content length in a header. A received payload of the stream of data is encoded into a data chunk including a chunk length header and the received payload. The data chunk is forwarded to a second device that does not support the format.

Abstract: Techniques for facilitating parallelized configuration of multiple virtual machines. The techniques include duplicating commands received from an administrator and controlling the multiple virtual machines with those commands in a parallel manner. Different types of commands are treated differently. More specifically, commands for controlling software executing in the virtual machines are replicated and sent to each virtual machine. By contrast, commands for managing virtual machines themselves are provided to virtualization software like a hypervisor to be executed. Duplication of the commands for controlling software executing in the virtual machines is performed by an input/output multiplexer, which also has the function of combining display output from each of the virtual machines. More specifically, the input/output multiplexer displays a common display output to the administrator, where the common display output is the screen that is shown on each of the virtual machines.

Abstract: Examples can include an optimizer that dynamically determines where to place virtual network functions for a slice in a distributed Telco cloud network. The optimizer can determine a slice path that complies with a service level agreement and balances network load. The virtual network functions of the slice can be provisioned at clouds identified by the optimal slice path. In one example, performance metrics are normalized, and tenant-selected weights can be applied. This can allow the optimizer to prioritize particular SLA attributes in choosing an optimal slice path.

Abstract: The present disclosure provides an approach for migrating the contents of an enclave, together with a virtual machine comprising the enclave, from a source host to a destination host. The approach provides a technique that allows the contents of the enclave to remain secure during the migration process, and also allows the destination host to decrypt the contents of the enclave upon receiving the contents and upon receiving the VM that includes the enclave. The approach allows for the VM to continue execution on the destination host. The enclave retains its state from source host to destination host. Applications using the enclave in the source host are able to continue using the enclave on the destination host using the data migrated from the source host to the destination host.

Abstract: System and method for creating group snapshots of multiple storage objects uses storage structures to store the storage objects in a storage system. In order to create a group snapshot of storage objects, a prepare snapshot process is executed at each of multiple host computers managing the storage objects as storage structures to block input and output operations on the storage objects stored in the storage structures. A commit snapshot process is then executed at each of the multiple host computers to create snapshots of the storage object in the respective storage structures. In addition, the snapshots of the storage object are recorded in the respective storage structures as snapshot entries in the respective storage structures.

Abstract: Network-efficient isolation environment redistribution is described. In one example, network communications are surveyed among isolation environments, such as virtual machines (VMs) and containers, hosted on a cluster. An affinity for network communications between the isolation environments can be identified based on the survey. Pairs or groups of the isolation environments can be examined to identify ones which have an affinity for network communications between them but are also hosted on different host machines in the cluster. The identification of the affinity for network communications provides network-level context for migration decisions by a distributed resource scheduler. Certain VMs and containers can then be migrated by the distributed resource scheduler to reduce the network communications in the cluster based on the network-level context information.

Abstract: The present disclosure relates to techniques for managing client computing systems, such as a client distributed-computing system. In one embodiment, a desired state of the client distributed-computing system and a current state of the client distributed-computing system are received. Measurement data generated by a plurality of components of the client distributed-computing system is received. The measurement data is processed using one or more analytical or statistical techniques to generate distilled data. Based on one or more policies and the desired state, the distilled data and the current state are analyzed to determine one or more actions predicted to converge the current state of the client distributed-computing system towards the desired state. One or more control commands corresponding to the one or more actions are provided to the client distributed-computing system. The one or more control commands cause the client distributed-computing system to perform the one or more actions.

Abstract: A varied least recently used (VLRU) caching technique is used to enable print data to be available at a cache of a client for printing, even after an agent performs a deletion of a hash value for the print data at a cache of the agent. The deletion of the print data (cached at the cache of the client) is postponed at the client device via the use of a waiting list, so that the cached print data can be printed at a physical printer of the client, in response to receiving a delayed print job from the agent that specifies the hash value as a result of a deduplication process performed by the agent.

Abstract: Example methods and systems for pre-validation of network configuration are disclosed. One example may comprise: detecting a request for network configuration to be implemented in a physical network environment; and identifying a set of physical network elements associated with the network configuration. The method may further comprise emulating the set of physical network elements to determine a physical network behaviour caused by the network configuration; and assessing validity of the network configuration based on the physical network behaviour. The set of physical network elements may be emulated using (a) multiple first physical network element emulators and (b) a second physical network element emulator that aggregates the multiple first physical network element emulators.

Abstract: Examples described herein include systems and methods performing scalable and dynamic data processing and extraction. A first example method relates to processing events from a source. The method can include detecting an event generated by the source and predicting a probability of that event being part of a span including multiple events. The method can include waiting for the additional multiple events to occur within the predicted timeframe and, if occurring, packaging the events together for handling by a single dynamic function. Otherwise, the events can each be handled by separate dynamic functions. A second example method relates to performing dynamic data extraction from a source. The method can include waking up a function based on a regular poll interval, determining a probability of a data change at the source based on historical data extractions, and invoking an extraction function based on the probability of the data change.