Abstract: Certain embodiments described herein are relate to a method for dynamically rekeying a security association. The method includes establishing, by a destination tunnel endpoint (TEP), an in-bound security association with a source TEP, with a first security parameter index (SPI) value, for encrypting data packets communicated between the source TEP and the destination TEP. The method further includes rekeying, by the destination TEP, the in-bound security association, the rekeying including generating a second SPI value for replacing the first SPI value based on a trigger event relating to at least one of a real-time security score of the in-bound security association, a number of security associations assigned to a compute resource that the in-bound security resource is assigned to, an amount of load managed by the compute resource that the in-bound security resource is assigned to, and an indication received from an administrator.

Abstract: Disclosed are various examples for providing contextual awareness with an internet of things (IoT) infrastructure in an enterprise workspace. IoT devices can connect to a network through a gateway or other edge device enrolled in a management service. The gateway device can provide context-based services defined by the management services to users in an enterprise through interactions with IoT devices. A gateway device can identity managed user devices within a service range of the gateway device. When a managed user device is within the service range of the gateway device, the gateway device can provide a context-based service by interacting with connected IoT devices.

Abstract: Examples disclosed herein provide systems, methods, and software for attaching an application to a computing system. In one example, a method of attaching at least one application to the computing system includes identifying an application attach triggering event, and identifying at least one application based on the application attach triggering event. The method further includes attaching an application volume to the computing system that contains the at least one application, and filtering one or more applications from the application volume that are not the at least one application.

Abstract: Example methods and systems for quality-aware user data forwarding in a mobile communications system are described. One example may involve a first virtualized network function (VNF) instance supported by a computer system establishing a user plane tunnel with a second VNF instance; and learning path quality information associated with multiple paths over the user plane tunnel. In response to receiving a packet that includes user data for forwarding in an uplink direction or a downlink direction, the first VNF instance may select the first path over the second path based on at least the path quality information; and generate and send an encapsulated packet over the user plane tunnel towards the second VNF instance. The encapsulated packet may include the packet and an outer header specifying the first outer source port number associated with the first path.

Abstract: Methods, systems, and computer-readable media that manage cloud computing environments. A pool manager creates a pool of cloud computing environments according to a pool specification specifying a headroom threshold of the pool. The pool manager receives, from a requester computer, a request to claim a cloud computing environment. The pool manager determines that one or more cloud computing environments are available. In response, the pool manager provides to the requesting computer credentials for accessing the cloud computing environment. The pool manager designates the cloud computing environment as claimed and unavailable to other requester computers until receiving a notification indicating that the cloud computing environment is unclaimed. The pool manager ensures that the correct number of environments are available on a pre-determined schedule.

Abstract: Methods, apparatus, systems, and articles of manufacture are disclosed for Strategy-Driven Optimization of Computer Resource Configurations in a Cloud Environment. Disclosed examples include a non-transitory computer readable storage medium comprising instructions that, when executed, cause processor circuitry to: monitor consumption of cloud resources associated with a containerized workload; associate the consumption with a monetary cost; and generate a notification to notify a user the cost exceeds the threshold, the notification including workload metrics associated with the monetary cost.

Abstract: Examples described herein include systems and methods for providing a GUI customization tool for customizing a GUI template. The GUI can provide multiple customization options for altering the appearance of the GUI template. Template previews can be displayed in conjunction with the customization options. The template previews can represent different display platforms, such as a web browser, a desktop application, or a mobile device. The GUI customization tool can receive selections of the customization options. Upon receiving a selection, the GUI customization tool can update the template previews according to the selection made. The template previews can be updated in real time.

Abstract: Various examples are described for optimizing a reservation workflow in a user interface. In a calendar user interface element, a user can move from a single day reservation to multi-day reservation without having to choose a multi-day reservation to begin the reservation workflow. Additionally, the user interface can instantly recover from an unavailable booking without requiring the user to navigate to another user interface to select an alternative booking.

Abstract: A method of preserving the contiguity of large pages of a workload during migration of the workload from a source host to a destination host includes the steps of: detecting at the destination host, receipt of a small page of zeros from the source host, wherein, at the source host, the small page is part of one of the large pages of the workload; and upon detecting the receipt of the small page of zeros, storing, at the destination host, all zeros in a small page that is part of one of the large pages of the workload.

Abstract: Techniques for providing application-independent access control in a cloud-services computing environment are provided. In one embodiment, a method for providing application-independent access control is provided. The method includes obtaining a user identity for accessing the cloud-services computing environment and receiving a user request to perform a task using an application. The method further includes collecting process-related data for performing the task using the application and obtaining one or more network routing addresses. The method further includes determining, based on the user identity, the process-related data, and the one or more network routing addresses, whether the task is to be performed. If that the task is to be performed, the task is caused to be performed using the application; and if the task is not to be performed, the user request is denied.

Abstract: Systems and methods are described for recommending security groups using graph-based learning models. A server can create a network graph that illustrates network flows between devices in a network and security groups that the devices belong to. The network graph can include nodes that represent the devices and security groups. The server can apply a graph-based learning model to learn embeddings of the nodes and create vectors using the embeddings. Using vectors of two nodes, the server can calculate a vector that represents an edge between the two nodes. The server can apply a binary classifier determine whether the edge should exist. A “true” classification between two nodes can indicate that they should be able to communicate, and vice versa. A “true” classification between a device node and a security group node can indicate that the device should be assigned to the security group, and vice versa.

Abstract: An image of a virtualization software and firmware in a plurality of hosts are upgraded by performing the steps of: in response to a user input, generating a software specification that specifies a desired state of the virtualization software and a desired state of the firmware; based on the software specification, preparing a desired image of the virtualization software that includes software components of a desired version of the firmware; and coordinating an upgrade to the desired image of the virtualization software and the desired version of the firmware in the hosts. The upgrade includes an upgrade in each of the hosts to the desired version of the firmware, and an upgrade in each of the hosts to the desired image of the virtualization software that includes the software components of the desired version of the base image and the software components of the desired version of the firmware.

Abstract: The current document is directed to a universal-query adapter that provides, to users and clients, a universal-query-language interface to multiple different management applications and/or services within a cloud-computing facility or distributed cloud-computing facility. In one implementation, the universal-query adapter provides, for input of universal-query-language queries, a universal-query interface and, in turn, interfaces to service adapters, semantic providers, and translators associated with the multiple different management applications and/or services. The modular implementation of the universal-query adapter facilitates both implementation of the universal-query adapter as well as scalability of the universal-query adapter, allowing new and newly discovered management applications and/or services to be easily included in the set of target management applications and/or services for query execution.

Abstract: In a computer-implemented method for querying a variably partitioned time series database, a query of a time series database is received, the query including a time range and a predicate comprising at least one dimension, wherein the time series database comprises a plurality of time series database schemas. At least one time series database schema of the time series database corresponding to the time range is determined. The query is divided into a plurality of sub-queries, wherein each sub-query of the plurality of sub-queries corresponds to one time series database schema of the plurality of time series database schemas. The plurality of sub-queries is executed to return a plurality of results.

Abstract: Disclosed are various embodiments for collecting and presenting IoT metrics. A software update package can be deployed to an IoT gateway. A device template used to register an IoT endpoint with an IoT management service can also define metrics that can be collected regarding the performance of the IoT endpoints.

Abstract: Disclosed are various approaches for workflow service application stating. In some aspects, an application content request is transmitted to a workflow service. The application content request can request updated states from a network service that acts as a back end for the application. The application content can be provided to the client device or other installed applications, without having opened the application on a client device.

Abstract: The disclosure provides an approach for the dynamic configuration of virtualized objects. A virtual object may be associated with a desired state defining a first plurality of resources for allocating to the virtual object. The first plurality of resources correspond to one or more resource types. Techniques include determining that each of a plurality of hosts does not have sufficient available resources to allocate the first plurality of resources to the virtual object according to the desired state. Techniques include selecting, a first host of the plurality of hosts to run the virtual object. Techniques include allocating a second plurality of resources to the virtual object from the first host, wherein the second plurality of resources is less than the first plurality of resources, and running the virtual object in the first host.

Abstract: An example method to manage post provisioning operations of a virtual computing instance in a heterogeneous cloud environment is disclosed. The virtual computing instance may be provisioned by a first management entity and configured to receive a command from a second management entity. The method includes defining the instance with a dynamic type by the first management entity and repeatedly finding the dynamic type with one or more finder workflows to determine whether the virtual computing instance is terminated based on the command from the second management entity. In response to not finding the dynamic type within the heterogeneous cloud environment, the method further includes creating a catalog item for the virtual computing instance in a common service catalog and managing one or more resources allocated for the virtual computing instance based on the created catalog item.

Abstract: Disclosed are various approaches for dynamically creating content to present to a user based on an identified intent, or other context, associated with a message (e.g., email). A message that is received from a message server can be analyzed to identify the message content within the message prior to distributing to the recipient client device. Trained intent identification models can be applied to the identified message content to determine an intent, or other type of context, associated with the message. Upon identifying the intent, the message header can be modified to include the intent prior to forwarding the message to the recipient client device. The client device can then display a user interface including the message and a user interface element corresponding to a third-party service. The user interface element can be dynamically generated to include an action component that upon selection, triggers an action associated with the intent.

Abstract: Executing workflows can include receiving, via an interface associated with execution of a workflow, an entry corresponding to a particular workflow object from among a plurality of workflow objects of a datacenter, communicating the entry to a third-party system, receiving, from the third-party system, search results corresponding to the entry, wherein the search results include indications of a subset of the plurality of workflow objects of the datacenter that each have a threshold correlation with the entry, displaying, via the interface, a plurality of items respectively corresponding to the subset of the plurality of workflow objects of the search results, receiving a selection, via the interface, of an item of the plurality of items, and designating a workflow object of the subset of the plurality of workflow objects of the search results that corresponds to the selected item as an input parameter of the workflow responsive to the selection.