Abstract: An example method for a first host, being an owner of an object stored in a virtual storage area network (vSAN) cluster, to perform encryption and decryption operations during a rekey in the vSAN cluster is disclosed. The method includes obtaining a first encryption key and a first key identifier (ID) of the first encryption key; transmitting the first key ID and an active key index to a second host; using the first encryption key to perform encryption and decryption operations; and in response to a determination of receiving a key change notification from a master node of the vSAN cluster, terminating a connection with the second host.

Abstract: The current document is directed to methods and systems that place and manage workloads across heterogeneous hosts within distributed computer systems. In a disclosed method, the functionality of an existing distributed-computer-management system designed for managing homogeneous hosts is modified and improved for application to distributed-computer systems that include heterogeneous hosts. Much of the functionality needed for managing heterogeneous hosts is obtained by modifying implementation of managed objects employed by host agents without affecting the interface between the distributed-computer-management system and the host agents. In addition, host-selection functionality within the distributed-computer-management system can be extended and improved to consider heterogeneous-host characteristics both for placing workloads across heterogeneous hosts and for live migration of virtual machines among different types of hosts.

Abstract: A system and method for scaling resources of a secondary network for disaster recovery uses a disaster recovery notification from a primary resource manager of a primary network to a secondary resource manager of the secondary network to generate a scale-up recommendation for additional resources to the secondary network. The additional resources are based on latest resource demands of workloads on the primary network included in the disaster recovery notification. A scale-up operation for the additional resources is then executed based on the scale-up recommendation from the secondary resource manager to operate the secondary network with the additional resources to run the workloads on the secondary network.

Abstract: A system is described for collaborative access to a virtual desktop through separate remote client devices. An owner of the virtual desktop can initiate a session with the virtual desktop through a client on her client device. The owner can request through her client to create a collaborative session, identifying one or more collaborators. Links for joining the virtual desktop can be generated and an invitation can be sent to each collaborator. A collaborator can accept the invitation and a client application can be launched on the collaborator's client and routed to the virtual desktop. Once authorized, collaborators can be connected to the virtual desktop session. Each collaborator in the session may view the GUI of the virtual desktop in her client application. Input control can be managed and delegated to collaborators by the owner of the session.

Abstract: In an embodiment, a computer-implemented method for a MAC addresses synchronization mechanism for a bridge port failover is disclosed.

Abstract: Described herein are systems, methods, and software to manage the deployment and use of application identifier tokens in a distributed firewall environment. In one implementation, a computing environment generates tokens associated with application types executing on virtual nodes in the computing environment. After generating the tokens, the computing environment provides at least one token of the tokens to each of the virtual nodes based on at least one application type executing on the virtual node. When a communication is identified in the virtual node associated with an application, the virtual node may encapsulate the communication and a corresponding token in a packet and forward the packet via a virtual network interface associated with the virtual node.

Abstract: A method of remediating configurations of a plurality of system services running in each of a plurality of hosts, wherein each of the hosts is configured with a virtualization software for supporting execution of virtual machines therein, includes the steps of: retrieving actual configurations of the system services, wherein the actual configurations are stored in accordance with a configuration schema of the system services and include a user configuration, which is a configuration initiated by the user, and a system configuration, which is a configuration initiated by the host in response to the user configuration; retrieving desired configurations of the system services from a desired configuration file; comparing each of the actual configurations with a corresponding one of the desired configurations; and upon determining that at least one actual configuration, which is not a system configuration, is different from a corresponding one of the desired configurations, replacing the at least one actual config

Abstract: Disclosed are various embodiments for improving the resiliency and performance of cluster memory. First, a computing device can submit a write request to a byte-addressable chunk of memory stored by a memory host, wherein the byte-addressable chunk of memory is read-only. Then, the computing device can determine that a page-fault occurred in response to the write request. Next, the computing device can copy a page associated with the write request from the byte-addressable chunk of memory to the memory of the computing device. Subsequently, the computing device can free the page from the memory host. Then, the computing device can update a page table entry for the page to refer to a location of the page in the memory of the computing device.

Abstract: A system comprising nodes coupled to a network including virtual links in an overlay network provisioned over an underlay network. The system includes a virtual machine (VM) provisioned at a node and coupled to the network. The VM is configured to receive feedback data of link conditions, and use the feedback data to dynamically determine and adapt an optimal route through the network. The VM is configured to control routing of traffic flows using the optimal route. The routing includes split routing of a traffic flow from the node via two or more of the virtual links.

Abstract: In an embodiment, a computer-implemented method for dynamically exchanging runtime state data between datacenters with a gateway using a controller bridge is disclosed. In an embodiment, the method comprises: receiving one or more first runtime state data from one or more logical sharding central control planes (“CCPs”) controlling one or more logical sharding hosts; receiving one or more second runtime state data from a gateway that is controlled by a CCP that also controls one or more physical sharding hosts; aggregating to aggregated runtime state data, the one or more first runtime state data received from the one or more logical sharding CCPs and the one or more second runtime state data received from the gateway; determining updated runtime state data based on the aggregated runtime state data, the one or more first runtime state data, and the one or more second runtime state data; and transmitting the updated runtime state data to at least one of the one or more logical sharding CCPs and the gateway.

Abstract: Examples provide a method of communication between a client application and a filesystem server in a virtualized computing system. The client application executes in a virtual machine (VM) and the filesystem server executes in a hypervisor.

Abstract: Some embodiments provide a method, for configuring logical network entities at a host computer. The method receives configuration data for a particular logical networking entity implemented at the host computer. The method identifies that the configuration data for the particular logical networking entity includes at least two conflicting configuration settings for the particular logical networking entity. At least one of the configuration settings for the particular logical networking entity is based on association of a configuration profile to a group of logical entities that includes the particular logical networking entity. The method determines a particular one of the conflicting configuration settings with a highest priority to apply to the particular logical networking entity at the host computer.

Abstract: A system can improve application performance by using lazy loading of code containers based on non-navigational actions in single-page or hybrid applications. A page can launch by loading a main bundle of code. The main bundle can include an action manifest that maps action identifiers to separate code modules. Those separate code modules can include functions for handling the actions. Based on a non-navigational action that occurs, the application can use the action manifest to map a first action identifier of the first action to a first code module. The application can then lazy load a first code module asynchronously from the main bundle. The application can also use route guards with filters to determine child actions, validate action routes, and cache the validated routes for later use without a remote server call.

Abstract: This disclosure describes processes for performing direct memory access (“DMA”) between memory of a host and memory of a smart network interface controller (“SNIC”) connected to a bus of the host. The host runs a host thread in a processor of the host and the SNIC runs a SNIC thread in a processor of the SNIC. The host thread and the SNIC thread facilitate direct access of the SNIC thread to memory locations in the memory of the host. The SNIC thread can fetch data directly from and/or write data directly to the memory locations of the memory of the host over the bus.

Abstract: This disclosure is directed to processes and systems for generating data packets in a smart network interface controller (“SNIC”) of a host server computer. A smart packet generator (“spktgen”) controller receives a user command that contains directions for how packets are generated in the SNIC. The command is sent to a spktgen daemon that runs in a control core of the multicore processor. The spktgen daemon extracts the type of packet generator and packet parameters recorded in the command and sends the type of packet generator and packet parameters to a spktgen engine that also runs in the control core. The spktgen engine creates threads in each of one or more data cores of the multicore processor. Each thread comprises instructions for generating data packets from the data generated by data generating sources of the host in accordance with the type of packet generator and the packet parameters.

Abstract: Disclosed are various approaches for extending a single sign-on (SSO) session to multiple devices. If a device is enrolled as a managed device with a management service, a SSO session can be extended to the device if the user has previously authenticated with an identity provider from another device. The user is authenticated on the second device using a user-and-device token issued by the management service with which the device is enrolled as a managed device.

Abstract: Techniques for providing hybrid access control in a cloud-services computing environment are provided. In one embodiment, a method for providing hybrid access control is provided at a host computing device. The method includes obtaining access control settings including at least a first user's role-based access settings with respect to a first sub-system of a hierarchical computing-resource system. The method further includes propagating the access control settings from the first sub-system to a second sub-system; obtaining user group domains assigned to a plurality of sub-systems; and obtaining a group membership associated with the first user. The method further includes determining, based on the obtained user group domains and the obtained group membership associated with the first user, whether the first user's role-based access settings propagated to the second sub-system are to be adjusted; and making adjustments accordingly.

Abstract: A first user device can receive a communication certificate associated with a user of the first user device. The communication certificate can allow the first user device to exchange certain information with a second user device that also possesses the communication certificate. The first user device can receive a notification. The first user device can also determine that a second user device associated with the user did not receive the notification. The first user device can initiate a direct connection with the second user device. The first use device can verify that the second device possesses the communication certificate. After verification, the first user device can send the notification to the second user device.

Abstract: An example method of generating telemetry data from application programming interface (API) data in a computing system includes: obtaining the API data from a plurality of software components executing in a plurality of client computers; serializing the API data for transmission from the client computers to a server computer, the serialized data including a parent object having a child object; and generating the telemetry data having a relational schema from the serialized telemetry data by generating a table for the parent object and storing attributes of the child object in the table generated for the parent object.

Abstract: Example methods and systems are provided for cross-cloud connectivity checks. One example method may include detecting a first connectivity check packet that is addressed from a first virtualized computing instance deployed in a first cloud environment; and determining that the first connectivity check packet is destined for a second virtualized computing instance in a second cloud environment reachable via the network device. The method may also comprise: generating a second connectivity check packet by modifying the first connectivity check packet to include one or more indicators that a connectivity check is required along a datapath towards the second virtualized computing instance in the second cloud environment. The method may further comprise: sending the second connectivity check packet to cause one or more observation points along the datapath to, based on the one or more indicators, generate and send report information associated with the second connectivity packet.