Abstract: In a computer-implemented method for generating a recommendation for automatic transformation of times series data at ingestion, historical query data of a time series data monitoring system is analyzed, where the historical query data includes a plurality of queries and data associated with execution of the plurality of queries. Based on the analyzing, it is determined whether an execution cost of a query of the plurality of queries can be reduced by performing automatic transformation of at least a portion of times series data accessed responsive to the query at ingestion into the time series data monitoring system. In response to determining that the execution cost of the query can be reduced by performing automatic transformation at ingestion, a recommendation to perform the automatic transformation of the at least a portion of the times series data at ingestion is generated.

Abstract: Disclosed are various embodiments for integrating client applications with hosted applications. For example, an email can be received from an email client. It can then be determined whether the email is associated with a hosted application. In response to a determination that the email is associated with the hosted application, a request can be made to a connector for a calendar object. The calendar object is then received and returned to the email client.

Abstract: Accurate time estimates for operations performed on an SDDC are disclosed. The method includes receiving information about a job performed on an SDDC from at least one of a plurality of different reporting SDDC's, the information including a description of the SDDC, a description of the job performed on the SDDC, and a plurality of time stamps, each time stamp indicative of an operation performed on the SDDC in order to complete the job. The information is stored in a database in a granular time-based data set. When a request for a time estimate for a yet-to-be-performed job is received from at least a second SDDC (the request including a description of the SDDC), the stored information is used in conjunction with the description of the second SDDC to generate a time estimate for the yet-to-be-performed job.

Abstract: A system and method for topology construction in hybrid cloud environments includes receiving connection information from a local perimeter edge router of a local network that has a known topology and receiving connection information from a remote perimeter edge router of a remote network that is provided by a cloud provider. The received local perimeter edge router connection information is associated with the received remote perimeter edge router connection information. The associated connection information is normalized to a generic model, the generic model representing connections having different link layer policies in a generic way and the normalized connection information is applied to a network topology of the local network and the remote network.

Abstract: Described herein are systems, methods, and software to manage maximum segment size (MSS) values associated with multiple tunnels according to an implementation. In one implementation, a gateway may obtain a Transmission Control Protocol (TCP) synchronize (SYN) packet from a computing node. The gateway may identify a tunnel associated with the TCP SYN packet, determine a maximum segment size (MSS) value based on the overhead associated with the tunnel, and replace a first MSS value in the TCP SYN packet with the MSS value determined by the gateway. Once added, the gateway may encapsulate the TCP SYN packet and communicate the packet to a second gateway.

Abstract: In an example, a computer system includes a hardware platform and a hypervisor executing on the hardware platform. The hypervisor includes a kernel and a plurality of user-space instances within a user-space above the kernel. Each user-space instance is isolated from each other user-space instance through namespaces. Each user-space instance includes resources confined by hierarchical resource groups. The computer system includes a plurality of virtual hypervisors, where each virtual hypervisor executes in a respective user-space instance of the plurality of user-space instances.

Abstract: In one embodiment, an operating system (OS) or hypervisor running on a computer system can allocate a portion of the volatile memory of the computer system as a persistent memory allocation. The OS/hypervisor can further receive a signal from the computer system's Basic Input/Output System (BIOS) indicating an alternating current (AC) power loss or cycle event and, in response to the signal, can save data in the persistent memory allocation to a nonvolatile backing store. Then, upon restoration of AC power to the computer system, the OS/hypervisor can restore the saved data from the nonvolatile backing store to the persistent memory allocation.

Abstract: A computer-implemented method for using a standalone tool for certificate management is provided. The standalone tool for certificate management is provided between a plurality of computing nodes and a management node. The standalone tool determines a certificate status for each of the plurality of computing nodes in the computing system. The standalone tool also determines any certificate operations for each of the plurality of computing nodes in the computing system. The certificate status and any of the certificate operations are presented in a consolidated view.

Abstract: A method of remediating system services relies on a first dependency graph with super nodes, to each of which a set of system services are assigned, and second dependency graphs, each of which represents dependencies among the system services that are in one of the sets. The method includes the steps of: comparing an actual configuration state of the system services to a desired configuration state of the system services to identify configurations that are in drift; identifying system services corresponding to the configurations that are in drift; determining an order of updating configurations of the identified system services using the first and second dependency graphs; and applying the desired configurations of the identified system services in the order determined, wherein after the configurations of an identified system service are updated, the system service executes with the updated configurations.

Abstract: Exemplary methods, apparatuses, and systems include a target site management server transmitting, to a source site management server, a plurality of protection service plans available for replication of data from the source site to the target site. The transmission of the protection service plans includes a description of one or more service level characteristics provided by each protection service plan and excludes a listing of physical and virtual resources within the target site that are to provide the service level characteristics. The target site management server receives selection of one of the protection service plans and determines the physical resources within the target site to provide the advertised service level characteristics for the data replication. The target site management server further transmits configuration details to one or more of the determined physical resources to implement the replication infrastructure within the target site according to the selected protection service plan.

Abstract: The disclosure herein describes placing delta components of a base component in target fault domains. One or more delta components are generated. When a first fault domain that lacks a sibling component of the base component is identified, the first fault domain is selected as a single delta target fault domain and a single delta component is placed on the single delta target fault domain. When a second fault domain that includes a first sibling component of the base component is identified and a third fault domain that includes a second sibling component of the base component is identified, the second fault domain and the third fault domain are selected as a first double delta target fault domain and a second double delta target fault domain, and a first double delta component and a second double delta component are placed on the first and second double delta target fault domains.

Abstract: In an architecture of a virtualized computing system plugins are less tightly integrated with a core user interface of a management server. Rather than being installed and executed at the management server as local plugins, the plugins are served as remote plugins from a plugin server, and may be accessed by a web client through a reverse proxy at the management server. Plugin operations may be executed at the plugin server and/or invoked from a user device where the web client resides. Furthermore, a plugin sandbox and other isolation configurations are provided at the user device, so as to further control access capability and interaction of the plugins.

Abstract: A hybrid cloud storage solution provides a private cloud storage system that is backed by a public cloud storage system. The private cloud storage system caches data files that are accessed from the public cloud storage system by virtual machines or containers in a virtualized computing environment. Subsequent accesses are directed towards the cached data files in the private cloud storage system, rather than being directed towards the public cloud storage system, thereby reducing costs and performance overhead associated with accessing the public cloud storage systems. The cached data files are contained in virtual machine disks (VMDKs) that are portable between virtualized computing instances that run in the virtualized computing environment.

Abstract: This disclosure describes various ways in which a client agent can be incorporated into multiple virtual machines of a server cluster to keep track of the location of each instance of services running on the server cluster and facilitate rapid connection of different services on the server cluster as needed. When a first service requests connection to a second service, a client agent co-located with the first service is able to forward the request to a virtual network interface card (VNIC) associated with the second service. The VNIC is configured to forward the request to an available instance of the second service. The location of the services are determined and stored on one or more service registries right after the service instances are instantiated, removing the need for a search when new requests are received.

Abstract: An application downloaded from the network onto a target (production) machine can be validated in a sandbox environment. An execution report can be generated during the validation. When the validated application is executed on the target machine, operations performed by the application are limited based on the execution report.

Abstract: Some embodiments provide a method for quantifying quality of several service classes provided by a link between first and second forwarding nodes in a wide area network (WAN). At a first forwarding node, the method computes and stores first and second path quality metric (PQM) values based on packets sent from the second forwarding node for the first and second service classes. The different service classes in some embodiments are associated with different quality of service (QoS) guarantees that the WAN offers to the packets. In some embodiments, the computed PQM value for each service class quantifies the QoS provided to packets processed through the service class. In some embodiments, the first forwarding node adjusts the first and second PQM values as it processes more packets associated with the first and second service classes. The first forwarding node also periodically forwards to the second forwarding node the first and second PQM values that it maintains for the first and second service classes.

Abstract: Disclosed are various approaches for automating the detection and identification of security issues. A plurality of signals received from a plurality of security devices are analyzed to identify a predicted security incident, each of the plurality of signals indicating a potential security issue. A confidence score is then calculated for the predicted security incident. At least one compliance policy is then evaluated to determine whether to perform a remedial action specified in the compliance policy, wherein a determination to perform the remedial action is based at least in part on the confidence score. Finally, the remedial action is performed in response to an evaluation of the at least one compliance policy.

Abstract: A system and method for performing an operational metric analysis for a virtual appliance uses application operational data from multiple instances of the virtual appliance. The application operational data is then used to generate an operational metric prediction for the virtual appliance.

Abstract: A method for cooperative active-standby failover between service routers based on health of services configured on the service routers is presented. In an embodiment, a method comprises determining, by a first service router (“SR”) of a SR cluster, a plurality of aggregate score values for a plurality of SRs of the SR clusters. The SR cluster comprises the first SR which is active, and a second SR. An aggregate score value, of the plurality of aggregate score values, indicates health of one or more services configured on a SR. The method further comprises determining, based on the plurality of aggregate score values, whether the first SR, of the SR cluster, is healthier than the second SR. In response to determining that the first SR is healthier than the second SR, the first SR continues to operate in the active mode; otherwise, the first SR switches to a standby mode.

Abstract: Disclosed are various examples for securing enterprise resources using a virtual private network. A client device can send a first unique device identifier for the client device to a remote management service upon enrollment. When a virtual private network application is first executed, the client device can send a second unique device identifier to the remote management service, where the remote management service is configured to store the second unique device identifier in association with the first unique universal identifier. During subsequent executions of the virtual private network application, the virtual private network service can authenticate the client device by comparing the first unique device identifier and the second unique device identifier to a device identifier received from the remote management service. A machine learning routine can be employed to identify anomalies as the virtual private network application is executed.