Abstract: Example methods and systems are provided for location-aware service request handling. The method may comprise: generating and sending location information associated with virtualized computing instance to a service node or a management entity for transmission to the service node. The location information may identify logical element(s) to which the virtualized computing instance is connected. The method may further comprise: in response to detecting, from the virtualized computing instance, a service request for a service from the service node, generating a modified service request by modifying the service request to include the location information associated with the virtualized computing instance; and sending the modified service request towards the service node.

Abstract: Disclosed are various examples for Internet of Things (IoT) device discovery and configuration. In some embodiments, a gateway receives a specified IoT protocol, and instructions for the gateway device to broadcast an IoT device discovery message. The gateway broadcasts the IoT device discovery beacon message, and IoT devices provide unique IoT device identifiers in response. A list of IoT devices is transmitted to the management service. The gateway device receives and implements a command to allow communications with the IoT devices.

Abstract: The disclosure provides an approach for enabling network functions to be executed in serverless computing environments. One embodiment employs a per-packet architecture, in which the trigger for launching a serverless computing instance is receipt of a packet. In such a case, each received packet is packaged into a request to invoke network function(s) required to process the packet, and a serverless computing environment in turn executes the requested network function(s) as serverless computing instance(s) that process the packet and return a response. Another embodiment employs a per-flow architecture in which the trigger for launching a serverless computing instance is receipt of a packet belonging to a new traffic flow. In such a case, a coordinator identifies (or receives notification of) a received packet that belongs to a new sub-flow and launches a serverless computing instance to process packets of the sub-flow that are redirected to the serverless computing instance.

Abstract: The present disclosure is directed to a method of identifying an infected network node. The method includes identifying a first network node as infected. The method includes collecting a first set of network data from the first network node including anomalous activities performed by the first network node. The method includes generating an anomalous behavior model using the first set of network data. The method includes collecting a second set of network data from a second network node including anomalous activities performed by the second network node. The method includes comparing the second set of data to the generated anomalous behavior model. The method includes determining, from the comparison, that a similarity between first characteristics and second characteristics exceeds a predefined threshold. The method includes ascertaining, based on the determination, the second network node as an infected network node.

Abstract: In a computer system with a disk array that has physical storage devices arranged as logical storage units and is capable of carrying out hardware storage operations on a per logical storage unit basis, data movement operations can be carried out on a per-file basis. A data mover software component for use in a computer or storage system enables cloning and initialization of data to provide high data throughput without moving the data between the kernel and application levels.

Abstract: Methods, systems, and techniques for facilitating access to content stored remotely, for example, as part of a virtual machine infrastructure or elsewhere in a networked environment, using a uniform mechanism are provided. Example embodiments provide an Enhanced Virtual Desktop Management Server/System with a Content Abstraction Layer which enables users to access their data stored as part of a virtual machine environment, or replicated otherwise on a network, using a generic API. The API can be incorporated into a web browser or other third party interface to provide access to the users' data without needing to remote a bitmap representation of a virtual desktop display. Accordingly, users can access their data, applications, and settings regardless of the type of access device and regardless of whether the corresponding virtual desktop is running in the data center, provisioned in the datacenter but running on a client device, or not running at all.

Abstract: Techniques for seamless certificate replacement for endpoints in hyperconverged infrastructure are disclosed. In one example, a certificate replacement request for an endpoint may be received. Upon receiving the certificate replacement request, a new certificate may be placed in the endpoint such that the endpoint includes an old certificate and the new certificate. Further, dependent endpoints having communication with the endpoint using the old certificate may be discovered and monitored. Furthermore, the new certificate of the endpoint may be placed in the discovered dependent endpoints and existing communication between the endpoint and each of the discovered dependent endpoints using the old certificate may be maintained. Upon completion of the existing communication, next communication between the endpoint and each of the discovered dependent endpoints may be enabled using the new certificate. Then, the old certificate may be decommissioned from the endpoint and the discovered dependent endpoints.

Abstract: Disclosed are various examples for enrollment of gateway enrollment for Internet-of-Things (IoT) device management. In one example, enrollment credentials are generated that permit functionality limited to enrollment operations. A request to enroll a gateway with the management service is received. The request includes the enrollment credentials, and is received from the gateway. Gateway credentials are generated for authentication of the gateway with the management service. The gateway credentials are transmitted to an application executed by the gateway without being provided to the user by the application. The gateway is authenticated with the management service using the gateway credentials.

Abstract: Disclosed are various embodiments for staged user enrollment using audio devices. In one embodiment, among others, a system includes a computing device and program instructions. The program instructions can cause the computing device to receive a configuration profile for configuring a client device. The configuration profile includes a device policy associated with an organizational group. The program instructions can further cause the computing device to generate a sound payload based on encoding the configuration profile onto a sound signal. A request is received a request from a voice assistant service for configuring the client device. The request is associated with configuring the client device according to the device policy. The sound payload is transmitted to the voice service for broadcasting from a speaker device. The sound payload is broadcast within an audible distance of the client device.

Abstract: An example apparatus to manage network resources includes a link aggregator to: aggregate a first plurality of physical network interface cards to create a first link aggregated group, the first link aggregated group corresponding to a first virtual network interface card; and aggregate a second plurality of physical network interface cards to create a second link aggregated group, the second link aggregated group corresponding to a second virtual network interface card; and a link manager to: connect the first link aggregated group between a first distributed virtual port and a first top-of-rack switch; connect the second link aggregated group between a second distributed virtual port and a second top-of-rack switch; and remove an invalid connection between the first plurality of physical network interface cards and the second top-of-rack switch.

Abstract: Techniques for generating a stream processing pipeline are provided. In one embodiment, a method includes generating a plurality of pipeline stages of a stream processing pipeline in accordance with a configuration file. The plurality of pipeline stages includes a first processing stage designated for a first data service and a second processing stage designated for a second data service and operating in parallel to the first processing stage.

Abstract: A memory scheduler in a hypervisor allocates physical memory to virtual machines (VMs) based on memory usages metrics generated within the VMs and provided to the hypervisor. More particularly, the memory scheduler determines an allocation target for each VM based on a guest-generated memory usage metric associated with the VM. The allocation target can be increased or decreased from its previous value to reflect changing needs in the VM. Physical memory is allocated when a VM requests it, and is reclaimed during a reclamation process based on its associated allocation target.

Abstract: Some embodiments provide a novel method for collecting and reporting attributes of data flows associated with machines executing on a plurality of host computers to an analysis appliance. Each host computer, in some embodiments, is responsible for collecting and reporting attributes of data flows associated with machines executing on a host computer. The host computer, in some embodiments, first eliminates duplicative flow group records and then aggregates the flow data according to a set of received keys that specify attributes that define the aggregation. For example, a simple key that specifies a set of machine identifiers (e.g., a VM ID) as attribute values will, for each machine identifier, aggregate all flows with that machine identifier into a single aggregated flow group record. In some embodiments, the host computer includes a flow exporter that processes and publishes flow data to the analysis appliance.

Abstract: The present disclosure relates to techniques for handling of bidirectional command protocols via a unidirectional communication connection established between a client computing environment and a cloud-services computing environment. In one embodiment, a command request message is pushed from a service component of the cloud-services computing environment to a client gateway of the client computing environment via the unidirectional communication connection. A token indicating routing information to the service component is embedded in the pushed command request message. A command response message is received at the cloud gateway from the client gateway via a bidirectional communication connection established between the client computing environment and the cloud-services computing environment. The command response message includes the token and data associated with executing the command request message at the client computing environment.

Abstract: The present disclosure relates to techniques for causing functions provided by a remote browser to be executed when functions provided by a local browser are requested. For example, a local BHO can intercept a request for the local browser to perform a navigation function. When the navigation function is designated to be provided by the remote browser, the local BHO can (1) prevent the local browser from performing the navigation function and (2) send a communication to a remote BHO to cause the remote browser to perform the navigation function. The remote BHO can cause representations of webpages to be sent to the local browser without visual representations of functions provided by the remote browser. By not having such visual representations, the local BHO can use visual representations from the local browser as visual representations of functions provided by the remote browser.

Abstract: Techniques disclosed herein permit bundled web applications to be extended at runtime. In particular, the functionality of a container application that is a bundled web application may be extended by extensions that are also bundled web applications. To enable such extensibility, the container application registers reusable portion(s) of its code in a global context during a bootstrapping sequence of the container application. Thereafter, extensions that are loaded may access and utilize the registered portion(s) of code, as if those extensions had been bundled together with the rest of the container application. In addition, extensions may be managed using scoping and/or permissions that control access to the extensions based on the container application mode that the extensions can be used with and white lists of users who are allowed to use the extensions, respectively.

Abstract: Various examples are disclosed for hybrid alert and action solution in internet-of-things (IoT) networks. A computing environment can generate an alert and an action to perform when criteria associated with the alert is satisfied based at least in part on data collected from at least one of a plurality of sensor devices. The computing environment can determine whether the alert and the action is capable of being evaluated and performed on an edge computing device in communication with the at least one of the plurality of sensor devices based at least in part on a computing capability of the edge computing device or the at least one server computing device. The computing environment can assign the alert criteria and the action to the edge computing device or the at least one server computing device.

Abstract: Disclosed are various approaches for encrypting a voice based response to a request through a voice assistant device. The request is associated with a network or federated service. A tunnel speaker containing a private key can decrypt the encrypted response using a private key provided to the tunnel speaker by a client application on a client device.

Abstract: Disclosed are various examples of an action framework for configuring a gateway to perform actions on the gateway itself or in conjunction with connected IoT devices. In some embodiments, a gateway client is permitted on a gateway device using a gateway configuration received from a management service. A command callback function is registered in association the gateway client. An action message is received. The action message specifies an action corresponding to the command callback function. The gateway client using the action message. A command object for the gateway client is generated based on the action message. The command callback function is invoked, and the gateway client processes the command object to perform the action.

Abstract: Techniques for prioritized client-server communications based on server health are disclosed. In one embodiment, a system includes multiple clients, and a server communicatively coupled to the multiple clients. The server may include a quality of service (QoS) aware server agent to divide the clients into client groups, assign a priority level to each of the client groups, monitor a health of the server, and determine heartbeat status messages to be sent to the client groups based on the assigned priority level and the health of the server. Each heartbeat message may indicate a state of the server. Further, the QoS aware server agent may send the heartbeat status messages to corresponding ones of the client groups and instruct clients corresponding to one or more of the client groups to send data based on the corresponding heartbeat status messages.