Abstract: Examples provide a method of communication between a client driver and a filesystem server. The client driver executes in a virtual machine (VM) and the filesystem server executes in a hypervisor. The method includes: allocating, by the client driver, shared memory in an address space of the VM for the communication; sending identification information for the shared memory from the client driver to the filesystem server through an inter-process communication channel between the client driver and the filesystem server; identifying, by the filesystem server in cooperation with a kernel of the hypervisor, the shared memory within an address space of the hypervisor, based on the identification information, to create a shared memory channel; sending commands from the client driver to the filesystem server through the shared memory channel; and receiving completion messages for the commands from the filesystem server to the client driver through the shared memory channel.

Abstract: System and method for performance control in a cloud computing environment uses dependency hierarchy between software entities executing in the cloud computing environment and operational status of each of the software entities executing in the cloud computing environment. Using the dependency hierarchy between the software entities and the operational status of each of the software entities, a scaling operation is performed to the virtual computing instances such that a service-level objective (SLO) of the cloud computing environment satisfies a predetermined threshold.

Abstract: Techniques for splitting a query into native query operations and post-processing operations are provided. In one embodiment, a user query including a plurality of search parameters is received. Expressions representing the plurality of search parameters in the user query are determined. A first subset and a second subset of the expressions are identified. Each expression of the first subset corresponds to one of a plurality of native query operations executable by a database platform, and each expression of the second subset corresponds to one of a plurality of predefined post-processing operations not executable by the database platform. A database query is generated based on one or more expressions of the first subset, and a post-processing query is generated based on each expression in the second subset. The database query is executed by the database platform, then the post-processing query is executed on the results from database platform.

Abstract: The present application is directed to a distributed system that provides multi-cloud aggregation and that includes a cloud-connector server, cloud-connector nodes, and one or more service-provider nodes that cooperate to provide services that are distributed across multiple clouds. A service-provider node obtains tenant-associated information from a virtual data center in which the service-provider node is installed and provides the tenant-associated information to the cloud-connector server.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for online rehydration. One of the methods includes intercepting a request issued by a virtual computing instance to a primary storage system, wherein the request identifies first data stored in the primary storage system; determining whether the first data has been rehydrated by a rehydration system; and in response to determining that at least a first portion of the first data has not been rehydrated by the rehydration system: submitting, to the rehydration system, a rehydration request that identifies the first portion of the first data that has not been rehydrated; obtaining, from the rehydration system, a response that includes a copy of the first portion of the first data, wherein the rehydration system has obtained the copy from a backup storage system; and responding to the request using the copy of the first portion of the first data.

Abstract: Disclosed are various approaches for facilitating single sign-on (SSO) for third-party services that are accessible through messages (e.g., email) received by a user. A user can receive a message that includes an embedded URL or link that opens in a third-party service that requires authentication. Instead of requiring the user to enter authentication credentials for accessing the third-party service, a tunnel service can be used to intercept requests for authentication and redirect the requests to an identity manager that can issue a SSO token following an authentication of the user and device. Upon supplying the third-party service with the SSO token, the user can access the content associated with the third-party service without entering authentication credentials.

Abstract: System and method for providing trusted execution environments uses a peripheral component interconnect (PCI) device of a computer system to receive and process commands to create and manage a trusted execution environment for a software process running in the computer system. The trusted execution environment created in the PCI device is then used to execute operations for the software process.

Abstract: Example methods and computer systems for packet handling for active-active stateful service insertion are disclosed. One example may involve a computer system detecting a packet addressed from a source address to a service endpoint address. Based on configuration information associated with the service endpoint address, the computer system may identify a first active logical service router (SR) and a second active logical SR that are both associated with the service endpoint address and configured to operate in an active-active mode. The first active logical SR may be selected over the second active logical SR by mapping tuple information to the first active logical SR. The computer system may generate an encapsulated packet by encapsulating the packet with an outer header addressed to an outer destination address associated with the first active logical SR and send the encapsulated packet towards the first active logical SR for processing according to a stateful service.

Abstract: Introspection into containers running in virtual machines (VMs) that are instantiated on a host computer is achieved. A method of processing an introspection command for a container, funning in a virtual machine, is carried out by a VM management process, and includes the steps of receiving a first request that is formulated according to a first protocol, e.g., transmission control protocol, and includes the introspection command, identifying the virtual machine from the first request, formulating a second request that includes the introspection command, according to a second protocol (e.g., virtual socket protocol), and transmitting the second request to a container management process running in the virtual machine for the container management process to execute the introspection command.

Abstract: Methods and apparatus are disclosed to deploying a distributed system using operating system or container virtualization. An example apparatus includes a management container including a configuration manager and a container manager. The example configuration manager to is receive an instruction for a desired deployment state and is to apply a first change to a first current deployment state of the management container based on the desired deployment state. The example container manager is to apply a second change to a second current deployment state of a deployed container based on the desired deployment state. The container manager is to return information indicative of the desired deployment state to the configuration manager when the second change from the second current deployment state to the desired deployment state is achieved.

Abstract: Disclosed herein are systems and methods for dynamically switching between synchronous and asynchronous communication channels. A communication request can be received from an application, and a request identifier can be generated for the communication request. The communication request can be transmitted to an edge server application via a first communication channel. The first communication channel can be selected from a plurality of communication channels based at least in part on a policy. In an instance in which a condition specified by the policy is detected in the transmission of the communication request, a second communication channel can be selected from the plurality of communication channels. The communication request can be transmitted to the edge server application using the second communication channel.

Abstract: The current document is directed to methods and systems that efficiently process and store log/event messages generated within distributed computer facilities. Various different types of initial processing steps may be applied to a stream of log/event messages received by a message-collector system or a message-ingestion-and-processing subsystem. The currently disclosed methods and systems employ additional pre-processing steps to identify the types of received log/event messages, monitor event-type-associated log/event-message-usage-delay histories, and employ time-series-analysis-based and/or neural-network-based estimation of event-type-associated log/event-message usage to efficiently store log/event-messages in low-cost and low-latency storage facilities.

Abstract: Computational methods and systems described herein are directed to predicting behavior of a distributed application in response to proposed changes to the distributed application and/or proposed changes to a distributed computing system in which the distributed application is running. A training set of graphs of a distributed computing environment of the distributed application is constructed. Each graph represents a state of the distributed computing environment at a point in time. Machine learning techniques train a neural network (“NN”) model that outputs key performance indicators (“KPIs”) of the distributed application in response to changes to the distributed computing environment. When a user proposes a change, the NN model predicts KPIs that indicate how the distributed application is impacted by the proposed change.

Abstract: Computational methods and systems troubleshoot problems in a data center network. A dependency graph is constructed in response to an entity of the network exhibiting anomalous behavior. The dependency graph comprises nodes that correspond to metrics of entities that transmit data to and receive data from the entity over the network and edges that represent a connection between metrics. An anomaly score is determined for each metric of the dependency graph. Correlated metrics connected by the edges of the dependency graph are determined. Time-change events of the metrics of the dependency graph are also identified. Each metric of the dependency graph is rank ordered based on the anomaly scores, correlations with other metrics, and the time-change events. Higher ranked metrics are more likely associated with a problem in the network that corresponds to the anomalous behavior of the entity.

Abstract: A software-based implementation of a hardware security module (HSM) includes a software-based HSM device that uses a hardware-protected secure environment to provide protection for data and for execution of code of the HSM device. The HSM device operates in a virtualized computing environment, and an interface to the security device enables an application running on a virtualized computing instance to access the security device. The execution of the code in the secure environment is a first security mode of operation, and the HSM device can switch between multiple different security modes of operation.

Abstract: Methods, computer-readable storage medium, and systems described herein facilitate registering and consuming network services on a virtual network. A virtual machine management server (VMMS) is configured to receive a service definition associated with a network service. The VMMS creates one or more service profiles based on the service definition. The VMMS configures a plurality of hosts based on the one or more service profiles such that the network service is usable, via a virtual network, by one or more virtual machines within the plurality of hosts.

Abstract: A system and method for training and executing an adaptive bitrate (ABR) controller can include clustering content into content clusters based on content metadata, clustering network scenarios based on network information, normalizing input measurements, training the ABR controller for each content within at least one of a given content cluster and a given network scenario cluster by determining network information and network metadata, associated with the respective content, determining a content bitrate, determining a reward associated with the content bitrate, and training the ABR controller based on the reward.

Abstract: A method of ensuring atomicity of transactions across a plurality of active hosts in a distributed environment, is provided. The method generally includes receiving, from a client, a second request to commit a second transaction subsequent to receiving a first request to commit a first transaction; assigning a second prepare identifier (ID) to the second transaction, wherein the second prepare ID assigned to the second transaction is greater than a first prepare ID assigned to the first transaction; transmitting, to the plurality of active hosts, instructions to prepare for committing the second transaction, the instructions including the second prepare ID; receiving, from each host, an acknowledgement indicating successful preparation for committing the second transaction; and transmitting, to the plurality of active hosts, instructions to commit the second transaction prior to receiving, from each host, an acknowledgement indicating successful preparation for committing the first transaction.

Abstract: A method and email application enable email attachments to be viewed through a system external to the email application itself in accordance with select categories. The email application creates categories and categorizes the email attachments according to such categories. The email application then maps the categories into a format understandable by the external system for category information and provides the mapped categories to the external system in such format In response to receiving a request from the external system for the contents of one of the mapped categories and in response to such category having no further subcategories, the email application identifies the email attachments under such category and maps the identified email attachments to file names. The file names are then provided to the external system as the contents of such category.

Abstract: Example methods and computer systems for receive-side processing for encapsulated encrypted packets. One example may comprise: in response to receiving, over a tunnel, a first encapsulated encrypted packet that includes a first encrypted inner packet and a first outer header, generating a first decrypted inner packet by performing decryption and decapsulation; and based on content of the first decrypted inner packet, assigning the first decrypted inner packet to a first processing unit. The method may further comprise: in response to receiving, over the tunnel, a second encapsulated encrypted packet that includes a second encrypted inner packet and a second outer header, generating a second decrypted inner packet by performing decryption and decapsulation; and based on content of the second decrypted inner packet, assigning the second decrypted inner packet to a second processing unit, thereby distributing post-cryptography processing over multiple processing units.