Abstract: Techniques are described for extending virtual desktops across different devices. The virtual desktop client sets up a web server on a primary device. A QR code encoded with information identifying the web server is displayed on the primary device and is scanned by a secondary device. A web browser is launched on the secondary device and the web browser connects to the web server on the primary device. The virtual desktop is reconfigured to produce its GUI on two monitors, one for the primary device and one for the secondary device. The GUI data for the second monitor is streamed by the virtual desktop client to the secondary device over the HTTPS connection, to be displayed on the secondary device. GUI data for the first monitor is displayed on the primary device. Inputs are streamed from the secondary device to the primary device and are forwarded to the virtual desktop.

Abstract: Systems and methods are described for utilizing non-serializable object parameters with a function as a service (“FaaS”) platform. A user can select, in a user interface of a web application, a server and a command for executing in a shell client. The web application can generate instructions for constructing an object in a shell client that corresponds to the server. The web application can retrieve a shell script associated with the selected command. The web application can send the instructions and shell script to a FaaS. The FaaS can execute, in a shell client, a script that constructs the object as a parameter in a shell session. In the same shell session, the FaaS can execute the shell script, causing the shell client to use the object as a parameter for the shell script.

Abstract: Some embodiments provide a centralized overlay-network cloud gateway and a set of centralized services in a transit virtual cloud network (VCN) connected to multiple other compute VCNs hosting compute nodes (VMs, containers, etc.) that are part of (belong to) the overlay network. The centralized overlay-network cloud gateway provides connectivity between compute nodes of the overlay network (e.g., a logical network spanning multiple VCNs) and compute nodes in external networks. Some embodiments use the centralized overlay-network cloud gateway to provide transitive routing (e.g., routing through a transit VCN) in the absence of direct peering between source and destination VCNs. The overlay network, of some embodiments, uses the same subnetting and default gateway address for each compute node as the cloud provider network provided by the virtual private cloud provider.

Abstract: The present disclosure provides techniques for deduplicating files. The techniques include creating a data structure that organizes metadata about chunks of files, the organization of the metadata preserving order and locality of the chunks within files. The organization of the metadata within storage blocks of storage devices matches the order of chunks within files. Upon a read or write operation to a metadata, the preservation of locality of metadata results in the likely fetching, from storage into a memory cache, metadata of subsequent and contiguous chunks. The preserved locality results in faster subsequent read and write operations of metadata, because the read and write operations are likely to be executed from memory rather than from storage.

Abstract: Some embodiments provide a method for an MFE, in a first datacenter, to implement an LN spanning the first datacenter and a set of additional datacenters. The method stores records that each map one or more LN addresses for DCNs belonging to the LN and operating in the first datacenter to a different TEP address. The method stores an additional record that maps addresses for DCNs connected to a particular LFE of the LN and operating in the additional datacenters to a group of TEP addresses corresponding to LN gateways that handle data traffic for the particular LFE between the first datacenter and the additional datacenters. Upon receiving a data message with a destination address corresponding to a DCN connected to the particular LFE and operating in one of the additional datacenters, the method uses the additional record to identify a TEP address for encapsulating the data message.

Abstract: A software-defined wide area network (SD-WAN) environment that leverages network virtualization management deployment is provided. Edge security services managed by the network virtualization management deployment are made available in the SD-WAN environment. Cloud gateways forward SD-WAN traffic to managed service nodes to apply security services. Network traffic is encapsulated with corresponding metadata to ensure that services can be performed according to the desired policy. Point-to-point tunnels are established between cloud gateways and the managed service nodes to transport the metadata to the managed service nodes using an overlay logical network. Virtual network identifiers (VNIs) in the metadata are used by the managed service nodes to identify tenants/policies.

Abstract: Various examples are described for the integration and customization of third-party applications and services with computing infrastructure of a data center. One or more computing devices can maintain a remote computing environment for an enterprise that provides at least one remote computing service on behalf of the enterprise. A portal can be provided that is configured to, from an entity not associated with the remote computing environment, receive a specification of information associated with one of a plurality of third-party services and compatibility criteria of the one of the third-party services. Existing infrastructure used by the remote computing environment in providing the at least one remote computing service is identified. Third-party services that are compatible with the existing infrastructure is identified and presented in a console in association with operation of the remote computing environment.

Abstract: An example method for diagnosing an input/output (I/O) issue associated with an object owned by the first host in a vSAN cluster is disclosed. The method includes identifying a first component and a second component of the object. In response to the first component being locally stored on the first host, the methods include collecting a first set of I/O aggregated statistic information. In response to the second component being remotely stored on the second host, the methods include issuing a command to the second host, obtaining a second set of I/O aggregated statistic information from the second host and network metrics associated with the first host and the second host. The methods include diagnosing the I/O issue associated with the object based on the first and second sets of I/O aggregated statistic information and the network metrics.

Abstract: Example methods and systems for correlation-based security threat analysis are described. In one example, a computer system may obtain event information that is generated by monitoring a virtualized computing instance supported by a host; and network alert information that is generated by monitoring network traffic associated with the virtualized computing instance. The network alert information may specify security threat signature(s) detected based on the network traffic. The computer system may map the network alert information to threat information that specifies indicator(s) of compromise associated with the signature(s) and perform a correlation analysis based on the event information, network alert information and threat information. Based on the correlation analysis, it is determined whether there is a potential security threat associated with the virtualized computing instance.

Abstract: Some embodiments facilitate the provision of a service reachable at a virtual internet protocol (VIP) address. The VIP address is used by clients to access a set of service nodes in the logical network. Facilitating the provision of the service, in some embodiments, includes returning a serviced data message to a load balancer that selected a service node to provide the service for the load balancer to track the state of the connection using the service logical forwarding element. To use the service logical forwarding element, some embodiments configure an egress datapath of the service nodes to intercept the serviced data message before being forwarded to a logical forwarding element in the datapath from the client to the service node, and determine if the serviced data message requires routing by the routing service provided as a service by the edge forwarding element.

Abstract: Example methods are provided for unbalanced storage resource usage configuration for a distributed storage system in a virtualized computing environment. An example method may include obtaining usage data associated with multiple storage resources forming the distributed storage system. The multiple storage resources are supported by the multiple hosts. Based on the usage data, the method may further include determining a higher usage set and a lower usage set of one or more storage resources from the multiple storage resources and configuring the multiple hosts to use the multiple storage resources in an unbalanced manner by using the higher usage set of one or more storage resources at a higher usage level compared to the lower usage set of one or more storage resources.

Abstract: The current document is directed a resource-exchange system that facilitates resource exchange and sharing among computing facilities. The currently disclosed methods and systems employ efficient, distributed-search-based auction methods and subsystems within distributed computer systems that include large numbers of geographically distributed data centers to locate resource-provider computing facilities that match the resource needs of resource-consumer computing facilities. Multiple security methods and subsystems are employed to prevent unauthorized access to resource-exchange-system services, to secure resource-exchange-system-participant data from unauthorized access, and to prevent hosted virtual machines and other hosted computational entities from interfering with operation of native virtual machines and other native computational entities within hosting resource-provider computing facilities.

Abstract: The present disclosure is related to methods, systems, and machine-readable media for force provisioning using available resources. A request can be received to provision a virtual computing instance by a software defined data center according to a storage policy specified as part of the request. An insufficiency of storage policy resources to satisfy the storage policy specified for the VCI can be determined.

Abstract: A decentralized method for generation and management of health monitoring related tasks in a hyperconverged infrastructure (HCl) environment is provided. The hosts in the HCl environment each include a health agent and a task manager. The health agent collects health results from health checks and stores the health results in a shared database that is shared by the hosts. The task manager generates a health monitoring related task in response to the health results being indicative of a change in health status, and stores the health monitoring related task in a task pool that is also shared by the hosts. Any of the hosts can obtain and execute the health monitoring related tasks in the task pool based on a task priority and load balancing criteria.

Abstract: The present disclosure is related to methods, systems, and machine-readable media for telemetry-based preloading. A plurality of telemetry events corresponding to a plurality of sessions with an application can be received, wherein each telemetry event is associated with a user selection of any of a plurality of user interface elements of the application that causes one of a plurality of chunks of executable instructions of the application to load. A respective probability associated with each of the plurality of chunks being loaded in a subsequent session can be determined, and the plurality of chunks can be preloaded during an idle period of the subsequent session in an order of descending determined probability.

Abstract: Described herein are systems, methods, and software to enhance user application preferences in a virtual computing environment. In one implementation, an application attach service is configured to identify a request to attach one or more applications to a virtual machine for an end user. In response to the request, the application attach service identifies the one or more required applications based on file type selections provided by the end user during previous virtual computing sessions, and initiates an attach process for the one or more applications to the virtual machine.

Abstract: Aspects of a workflow evaluation interface for validating, debugging, and evaluating virtual machine workflows are described. In one example, a method for displaying a workflow includes capturing a workflow for management of at least one virtual machine. The workflow can include a number of schema elements, among other attributes, input parameters, and output parameters for tasks of the workflow. The method can also include evaluating a logical flow among the schema elements in the workflow and populating a flow panel in a workflow evaluation interface. The flow panel can include a hierarchical flow of tasks in the workflow and at least one nested multi-task sequence in the workflow. The flow panel can include a carrot to expand the nested multi-task sequence as a branch of the hierarchical flow of tasks. The method can also include rendering a graphical representation of the logical flow among the plurality of schema elements.

Abstract: Some embodiments provide a method for deploying edge forwarding elements in a public or private software defined datacenter (SDDC). For an entity, the method deploys a default first edge forwarding element to process data message flows between machines of the entity in a first network of the SDDC and machines external to the first network of the SDDC. The method subsequently receives a request to allocate more bandwidth to a first set of the data message flows entering or exiting the first network of the SDDC. In response, the method deploys a second edge forwarding element to process the first set of data message flows of the entity in order to allocate more bandwidth to the first set of the data message flows, while continuing to process a second set of data message flows of the entity through the default first edge node.

Abstract: Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (1) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane. For instance, in some embodiments, each forwarding plane connects to a machine or service node through a port that receives data messages from, or supplies data messages to, the machine or service node.

Abstract: In one set of embodiments, a computer system can periodically run an unmap service configured to scan a subset of bitmaps maintained by a file system of the computer system. As part of scanning each bitmap in the subset, the unmap service can, for each bit in the bitmap: (1) check whether the bit indicates that a corresponding physical block address (PBA) on the storage backend is currently free; (2) upon determining that the bit indicates the PBA is currently free, identify an extent within the bitmap where the PBA resides; (3) check whether an unmap indicator associated with the extent indicates that at least one free PBA in the extent is not currently unmapped in the storage backend; and (4) upon determining that the unmap indicator indicates at least one free PBA in the extent is not currently unmapped in the storage backend, add the PBA to a list of PBAs to be unmapped.