Abstract: The present disclosure relates generally to techniques for processing asynchronous queries across multiple data cores including secondary data cores stored in the secondary storage system in a distributed computing system. Secondary data cores are recovered in the data plane from secondary storage in order to be accessible for searching. Using this technique, asynchronous queries are run in parallel allowing the client to dynamically manage the queries and receive notifications when results are available.

Abstract: Example methods and systems to implement an economic printing mode with font information modification are described. In one example, a computer system may obtain source printing content associated with a print job that is destined for a printer and the economic printing mode may be selected for the print job. The computer system may extract, from the source printing content, (a) textual information to be printed and (b) font information associated with the textual information. The source printing content may be transformed to generate target printing content that is printable using a lower ink consumption compared to the source printing content by modifying the font information associated with the textual information. The computer system may provide the target printing content that includes modified font information to the printer for printing and/or generate a preview of the target printing content prior to printing using the printer.

Abstract: The disclosure provides a method for optimizing remote display at a client device in communication with a remote desktop. The method generally includes receiving one or more frames for display at the client device, determining that a frame rate of the received one or more frames is less than an expected frame rate and/or a resolution of the received one or more frames is less than an expected resolution, determining that at least one of a local central processing unit (CPU) usage at the client device is less than a CPU usage threshold or a local graphics processing unit (GPU) usage at the client device is less than a GPU usage threshold, applying one or more enhancement techniques to the received one or more frames to produce one or more optimized frames while continuously monitoring the local CPU usage and/or the local GPU usage at the client device, and rendering the one or more optimized frames for display at the client device.

Abstract: The disclosure provides an approach for prescriptive analytics for network services. Embodiments include receiving one or more rules for anomaly detection. Embodiments include receiving metric data of one or more services and collecting context data related to the metric data. Embodiments include determining a baseline for the metric data. Embodiments include detecting an anomaly based on analysis of the metric data in view of the baseline for the metric data and the one or more rules for anomaly detection. Embodiments include associating the anomaly with a subset of the context data that is related to the anomaly. Embodiments include determining a score for the anomaly based on the analysis and determining that a notification should be generated based on the score. Embodiments include providing the notification to a user interface for display. The notification comprises includes an indication of the anomaly and the subset of the context data.

Abstract: Methods, apparatus and articles of manufacture for custom interface specification in a cloud management system are disclosed. An example cloud management system includes: a first interface to communicate with a second interface external to the cloud management system; and a host to manage requests from the second interface and allocate resources to the second interface as a reverse proxy for the second interface with respect to a backend. The example host is to at least: add, at the request of the second interface, an endpoint with respect to the second interface; fetch, at the request of the second interface, data for the endpoint from the backend, the backend identified for the endpoint based on metadata in a component registry; and provide the data from the backend to the second interface.

Abstract: Methods and systems described herein are directed to storing and querying log messages using log message bifurcation. Each log message that exceeds a time limit for storage in a live storage database is bifurcated into a log pattern that is stored in a log-pattern database and a metric object that records variable information of the log message in a time-series metric database. The log-pattern database and the time-series metric database together provide long-term log storage for the information contained in log messages that are too old to be stored in a live storage database. A request for access to log messages stored in the long-term log storage is completed by reconstructing the requested log messages from log patterns stored in the log-pattern database and metric objects stored in the time-series metric database.

Abstract: Optimizing file access includes a process for identifying a file access event for a first accessed file, and incrementing a first access counter in an access list in a memory, which also includes access counters for other accessed files. The process further includes exporting the first access counter to a performance monitoring dashboard, or exporting to a storage allocator and, based on the value, moving the first accessed file between a first storage and a second storage. The process also includes determining whether the value of the first access counter meets a first threshold, or a sum of values of the access counters for the other accessed files meets a second threshold. Based on meeting the first threshold or meeting the second threshold, the process includes persisting the access counters on a storage media. The access counters also provide security monitoring (e.g., identifying excessive file access).

Abstract: Methods, apparatus and articles of manufacture to provide workflow subscription management in a cloud computing environment are disclosed. Examples disclosed herein cause a graphical user interface associated with a virtual appliance to present a template to create a first workflow subscription, the template including (1) a first input element to specify a workflow to be performed, and (2) a second input element to specify an event topic that is to trigger operation of the workflow, the second input element including a field to specify at least one of (i) whether other workflow subscriptions are to be blocked from an event notification associated with the event topic until the first workflow subscription has acted upon the event notification, or (ii) whether a reply notification is to be sent to a service associated with the event notification after the workflow has completed in response to being triggered based on the event notification.

Abstract: Disclosed are various examples for web application security through containerization. In one example, a web application is executed within a container application. The container application includes a management software development kit (SDK). A security policy for the web application is retrieved from a management service. The security policy is applied to the web application using the management SDK of the container application.

Abstract: Some embodiments provide a method for a network management and control system that manages a virtual infrastructure deployed across a set of datacenters. The method receives a definition of an application to be deployed in the virtual infrastructure. The application definition specifies a requirement that the application receive data traffic from sources external to the virtual infrastructure. Based on the application definition, the method defines a first set of firewall rules for the application that indicate conditions for allowing data traffic from sources external to the virtual infrastructure. For an existing second set of higher-level firewall rules for data traffic entering and exiting the virtual infrastructure, the method specifies a new firewall rule that directs a network element implementing the sets of firewall rules to apply the first set of firewall rules to any data traffic that is from sources external to the virtual infrastructure and directed to the application.

Abstract: The disclosure provides an approach for detecting and preventing attacks in a network. Embodiments include receiving network traffic statistics of a system. Embodiments include determining a set of features of the system based on the network traffic statistics. Embodiments include inputting the set of features to a classification model that has been trained using historical features associated with labels indicating whether the historical features correspond to attacks. Embodiments include receiving, as output from the classification model, an indication of whether the system is a target of an attack. Embodiments include receiving additional statistics related to the system. Embodiments include analyzing, in response to the indication that the system is the target of the attack, the additional statistics to identify a source of the attack. Embodiments include performing an action to prevent the attack based on the source of the attack.

Abstract: A search engine queries a network model for behavior of the entire network, such as data flow, based on combinations of multiple network elements. The search engine provides the state information and/or predicted behavior of the network by searching network objects in a graph-based model or a network state database that satisfy constraints given in a search query. The search engine provides the state information and/or predicted behavior based on regular-expression or plain language search expressions that do not provide packet header information. The search engine parses such search expression into a sequence of atoms that encode forwarding paths of interest to the user. A flow path through the modeled network can be generated dynamically, within the context of the search queries.

Abstract: A runtime state of a virtual port associated with a virtual machine (“VM”) is persisted as the VM is migrated from a source host to a destination host. In certain embodiments, a virtual switch forwards network frames between the VM and the physical network interface via the virtual port. During migration of the VM, the runtime state of the virtual port is transferred to the destination host and applied at the second host to a virtual port associated with a second virtual switch at the destination host. The runtime state of the virtual port at the source host is then cleared, and the second virtual switch at the destination host forwards network frames between the migrated VM and the physical network interface of the destination host using the virtual port at the second host.

Abstract: System and methods are provided for improved directory enumeration and data copy with shared client directories in virtual desktops by quickly and efficiently retrieving shared directory entries from the client device over a separate fast channel and caching them on the virtual desktop, where the directory entries can be available locally to applications in the virtual desktop for performing directory enumeration. The fast channel can further be utilized for efficiently transferring data in data copy operations between the client device and the virtual desktop.

Abstract: Various examples are disclosed for performing cross-cluster load balancing. In some aspects, a workload is selected for cross-cluster migration. A destination cluster is identified for a migration of the workload from a source cluster to the destination cluster. A cross-cluster migration recommendation is generated to migrate the workload from the source cluster to the destination cluster.

Abstract: This disclosure relates generally to creating and managing cloud infrastructure, and more specifically, integrating one or more cloud infrastructure tools for building cloud infrastructures. An example method includes, receiving a request to deploy a cloud infrastructure on a cloud service provider based on a cloud template of the cloud management platform; transmitting configuration instructions associated with a cloud infrastructure tool to a container orchestration platform for execution on one or more containers running on the container orchestration platform to deploy the cloud infrastructure; receiving a deployment state of the cloud infrastructure on the cloud service provider from the container orchestration platform following execution of the configuration instructions; and reporting a status of the cloud infrastructure based on the deployment state.

Abstract: Disclosed are various examples of unified application management for heterogeneous application delivery. Application metadata for various applications can be received from management services and can be analyzed according to application unification rules to identify multiple application variants of a particular application. A unified application can be generated to represent the multiple application variants that are identified. Application entitlements can be defined for the unified application model, and the management services can provide access to the particular application according to the entitlements.

Abstract: A method receives a request packet from a workload at a first logical interface of a logical router and determines that a source address is a first link local address for the workload and a destination address is a second link local address for the first logical interface. A second logical interface includes the second link local address. The method stores an identifier for the first logical interface as an egress interface. The identifier distinguishes the first logical interface from the second logical interface. A service is performed for the request packet and a response packet is generated. The response packet includes the source address of the second link local address for the first logical interface and the destination address of the first link local address for the workload. The method uses the identifier to select the first logical interface as the egress interface to send the response packet.

Abstract: An example system can provide intelligent continuous learning by updating a machine learning model based on a new dataset. The system can utilize a transfer loss function that does not depend on old datasets used to train the existing model. The system can receive, on a graphical user interface (“GUI”), a selection of configuration criteria including threshold performance for automatic deployment. The new model can be created iteratively based on the configuration criteria. An evaluation of the new model over multiple iterations can be presented on the GUI. In an instance where the new model meets a deployment requirement selected on the GUI, a server can deploy the new model in place of the existing model.

Abstract: The present disclosure relates generally to virtualization, and more particularly to techniques for deploying containers in a virtual environment. The container scheduling can be based on information determined by a virtual machine scheduler. For example, a container scheduler can receive a request to deploy a container. The container scheduler can send container information to the virtual machine scheduler. The virtual machine scheduler can use the container information along with resource utilization of one or more virtual machines to determine an optimal virtual machine for the container. The virtual machine scheduler can send an identification of the optimal virtual machine back to the container scheduler so that the container scheduler can deploy the container on the optimal virtual machine.