Abstract: Client data corresponding to a single client can be stored. A decision to proceed with a defragmentation of two or more particular core groups can be determined. A destination core group to receive client data can be identified. At least one additional core group can be initiated to manage interim data write requests from the single client. Each of the two or more particular core groups can be closed to data write requests. A defragmentation of the two or more particular core groups can be performed by merging into the destination core group. The destination core group can be availed to data read and delete requests. The two or more fragmented core groups can be reallocated for other uses. The additional core groups continue to receive read and write requests. The destination core groups further can be merged and defragmented further.

Abstract: The present disclosure relates to systems and methods for tracking content across multiple content outlets. Content items, characterized by first metadata, and content slots, characterized by second metadata, can be received. Third metadata for digital content slots can be generated. Fourth metadata can be received. A recommended content item package can be provided based on a comparison between a combination of the first metadata, the second metadata, and the third metadata and the fourth metadata. The recommended content item package can include a content file and a metadata file. A performance and a measurement of the recommended content item package can be determined by executing the metadata file to track the content file across one or more of the content slots and the potential digital content slots. The performance and the measurement can be provided.

Abstract: The present disclosure provide a multiple factor authentication process using text passcodes. A process performs a first verification of a user using an authentication credential transmitted via a first communication channel. Based on successfully performing the first verification, the process performs a second verification using a word or a textual phrase transmitted to the user via a different communication channel. The word or textual phrase can be a single-use, limited-time token provided as text or audio.

Abstract: The present disclosure relates to chatbot systems, and more particularly, to techniques for identifying an explicit invocation of a chatbot and determining an input for the chatbot being invoked. In certain embodiments, explicit invocation analysis involves detecting an invocation name in an utterance. The invocation name is an identifier assigned to a particular chatbot. In response to detection of the invocation name, the utterance is refined for input to the particular chatbot by determining which parts of the utterance, if any, contain relevant information for the particular chatbot and generating a new utterance, using the relevant parts of the utterance, for processing by the particular chatbot. The refining can involve removal of a portion of the utterance associated with the invocation name.

Abstract: A redirector (RD) in a cloud hosted data center receives a packet originating from a source device in an on-premises data center. The packet is directed to a destination IP address associated with a router located in the cloud hosted data center. A destination address field in a header of the packet is set to the destination IP address. The RD determines whether the packet is to be forwarded to the router or to a host machine implementing a service host that implements a tunnel end-point in a VCN. Responsive to determining that the packet is to be forwarded to the host machine: the RD sets the destination address field to an address associated with the service host, and forwards the packet to the host machine. Responsive to determining that the packet is to be forwarded to the router, the RD forwards the packet to the router.

Abstract: The present embodiments relate to data center outage detection and alert generation. An outage detection service as described herein can process near real-time data from various sources in a datacenter and process the data using a model to determine one or more projected sources of a detected outage. The model as described herein can include one or more machine learning models incorporating a series of rules to process near-real time data and offline data and determine one or more projected sources of an outage. An alert message can be generated to provide the projected sources of the outage and other data relevant to the outage.

Abstract: Methods, systems, and computer readable media for restoration of Diameter connectivity. An example method includes accepting a first Diameter connection with a Diameter client having a Diameter identifier. The method includes receiving a request to establish a new Diameter connection with the Diameter identifier. The method includes holding the request to establish a new Diameter connection for a specified time limit, and, while holding the request, probing the first Diameter connection to determine whether the first Diameter connection has been broken. In response to determining that the first Diameter connection has been broken, the method includes aborting the first Diameter connection and accepting a second Diameter connection with the Diameter client having the Diameter identifier.

Abstract: A computer including multiple processors and memory implements a managed runtime providing a synchronization application programming interface (API) for threads that perform synchronized accesses to shared objects. A standardized header of objects includes a memory word storing an object identifier. To lock the object for synchronized access, the memory word may be converted to store the tail of a linked list of a first-in-first-out synchronization structures for threads waiting to acquire the lock, with the object identifier relocated to the list structure. The list structure may further include a stack of threads waiting on events related to the object, with the synchronization API additionally providing wait, notify and related synchronization operations. Upon determining that no threads hold or desire to hold the lock for the object and that no threads are waiting on events related to the object, the memory word may be restored to contain the object identifier.

Abstract: A distributed database service can be migrated from a source environment to a destination environment. The distributed database service can be associated with a database and database members. the source environment can include source database members such that each source database member includes a respective image of the database. Migrating the distributed database service can include provisioning a migration gateway in the source environment. Migrating the distributed database service can also include provisioning a domain name system service in the destination environment. Migrating the distributed database service can also include provisioning a first destination database member in the destination environment. While updating the first destination database member with a respective image of the database, the distributed database service can process a database request.

Abstract: “Resource guarantee” refers to a unit of a resource that is guaranteed and therefore designated to a consumer. A multi-phased constraint programming (CP) approach is used to determine assignments of resource guarantees of a set of consumers to a set of hosts in a resource system. Phase I uses CP to segregate non-split consumers from split consumers. Phase II uses CP to assign each cotenant group of non-split consumers to a respective host. Phase III uses CP to assign resource guarantees of the split consumers across the hosts, wherein resource guarantees of a single split consumer may be splits across different hosts. Each phase involves execution of a CP solver based on a different CP data model. A CP data model declaratively expresses combinatorial properties of a problem in terms of constraints. CP is a form of declarative programming.

Abstract: When a cloud services provider infrastructure (CSPI) receives a request from an administrator to perform an operation on an appliance, a load balancer may select a first server within the CSPI to process the request. If the first server does not have a connection with the appliance, the first server may generate a redirect response that includes server identification information identifying a particular server having a pre-established connection with the appliance. The first server may send the redirect response to the application that the administrator used to send the request. The application may then generate a second request that includes the server identification information, and send the second request to the CSPI. A load balancer in the CSPI may then forward the second request to the particular server, and the particular server may use the pre-established connection to send a request to the appliance requesting performance of the operation.

Abstract: Techniques for persisting user data across secure shell instances are provided. A method includes receiving a first request from a session manager service to establish a connection to a secure shell instance and restore a user block volume with corresponding backup user data. The method may include reserving an empty block volume. The method may also include transmitting a backup data identifier associated with the corresponding backup user data to a backup service and receiving the corresponding backup user data from the backup service. The method may further include providing the corresponding backup user data to the empty block volume to create a restore volume and transmitting a restore volume identifier corresponding to a data center identifier to the session manager service. The method may include receiving a second request to attach the restore volume to a reserved instance, the second request being received from the session manager service.

Abstract: Methods and systems are provided for securing access to confidential data using a blockchain ledger. An update to access permissions can be received from a first entity on behalf of a second entity, the update can change access permissions to a confidential data store. A smart contract that validates the update can be called. Upon consensus from a blockchain community, the update to the access permissions for the second entity can be executed. The blockchain community can be a plurality of different organizations that share access to the confidential data store, and the update can be appended to a blockchain ledger that stores access permissions for the blockchain community.

Abstract: Techniques are disclosed for restricting operations between two attached two compute instances. An infrastructure and a generalized method is described for attaching two or more cloud resources (e.g., two compute instances) in spite of the compute resources being provisioned by two different services from different cloud tenancies, and then modifying the allowed operations that can be performed due to the attachment.

Abstract: Embodiments are directed to encrypting data of a database table. Embodiments receive the database table, the database table including a plurality of rows, each row including a unique primary key and at least one column of unencrypted data. Embodiments convert each unique primary key into a unique initialization vector (“IV”). For a current row, embodiments encrypt the unencrypted data using a corresponding unique IV for the row, the encrypting including length-preserving encryption. Within each column, embodiments replace the unencrypted data with the encrypted data.

Abstract: The present disclosure relates to chatbot systems, and more particularly, to techniques for obtaining data items for input to a chatbot. In certain embodiments, a chatbot system includes a component that can be invoked by a chatbot in the chatbot system to obtain data items needed by the chatbot. The component can be invoked based on a reference to the component in a dialog flow definition configured for the chatbot. The reference to the component can indicate a composite entity that the component will use to determine how the data items are obtained from a user. The composite entity acts as a container for the data items and may be configured separately from the dialog flow definition of the chatbot. The data items can be obtained based on rules specified in a composite entity definition configured for the composite entity.

Abstract: Techniques discussed herein relate to managing aspects of provisioning cloud-computing edge devices. In some embodiments, a user request specifying one or more resources to be provisioned at a cloud-computing edge device may be received by a cloud-computing device operated by a cloud-computing provider. An ephemeral credential may be generated for the edge device and used to determine whether access control policies exist that enable the edge device to access the resource(s). If the resource(s) are accessible, a manifest may be generated in accordance with the user request. The manifest may specify a configuration for the cloud-computing edge device and includes information related to the resource. Operations may be subsequently executed to provision the cloud-computing edge device in accordance with the manifest. However, if the resource(s) are not accessible, the user request may be denied.

Abstract: The present embodiments relate to implementing change data on no-master NoSQL data stores. An optimized node can be identified from a plurality of NoSQL data storage nodes and a specialized node can be connected (e.g., collocated) to the optimized node. The specialized node can maintain change data capture (CDC) data provided by client nodes in a hash map that can be used as a point of truth for coordinating CDC data across the plurality of NoSQL data storage nodes. The plurality of NoSQL data storage nodes can identify and coordinate all read/write data obtained from multiple client devices in a geographically separated large-scale (e.g., planet scale) system to identify change data in a distributed data store. The specialized data can provide read data to devices in the large-scale system to reconcile inconsistencies in change data across nodes in the large-scale system.

Abstract: Systems, methods, and other embodiments associated with a technique for using micro frontends to build a runtime version of a base application are described. In one embodiment, the method allows for selected micro frontends to be incorporated into the base application. Metadata corresponding to the selected micro frontend may be used to identify at least one or more application programming interfaces (APIs) that are defined in the metadata. The identified APIs are incorporated with the micro frontends to create a final version of the micro frontend. A runtime version of the base application is constructed, at least in part, by combining the base application with the retrieved micro frontends including the one or more APIs that were identified.

Abstract: The subject matter described herein includes a method for reducing the likelihood of successful denial of service (DoS) attacks by validating overload control information (OCI) scope information against network function (NF) profile information obtained using target resource identification information. The method includes receiving a service based interface (SBI) request message, obtaining, from the SBI request message, target resource identification information, obtaining NF profile information using the target resource identification information and storing the NF profile information, receiving an SBI response message including overload control information and scope information for the overload control information, using the stored NF profile information to determine whether the scope information for the overload control information is valid, and, in response to determining that the scope information for the overload control information is invalid, rejecting the SBI response message.

Abstract: A data catalog system is described that includes capabilities for automatically identifying and classifying sensitive information stored in data objects associated with various data sources. The data catalog system identifies a data object associated with a data asset stored in a data catalog metadata repository and computes a sensitivity score for the data object based on a set of one or more sensitive data identification techniques. The system determines a set of enrichment labels for the data object based on the sensitivity score computed for the data object. The enrichment labels are used to further qualify, enrich, or classify the data objects identified as containing sensitive information. For instance, the enrichment labels may identify a set of custom properties to be assigned to a data object, identify glossary terms to be applied to the data object or the enrichment labels may identify tags to be assigned to the data object.

Abstract: A double-blind comparison is performed between prognostic-surveillance systems, which are located on a local system and a remote system. During operation, the local system inserts random faults into a dataset to produce a locally seeded dataset, wherein the random faults are inserted into random signals at random times with variable fault signatures. Next, the local system exchanges the locally seeded dataset with a remote system, and in return receives a remotely seeded dataset, which was produced by the remote system by inserting different random faults into the same dataset. Next, the local system uses a local prognostic-surveillance system to analyze the remotely seeded dataset to produce locally detected faults. Finally, the local system determines a performance of the local prognostic-surveillance system by comparing the locally detected faults against actual faults in the remotely seeded fault information. The remote system similarly determines a performance of a remote prognostic-surveillance system.

Abstract: A server system may receive two or more Quality of Service (QoS) dimensions for the multi-objective optimization model, wherein the two or more QoS dimensions include at least a first QoS dimension and a second QoS dimension. The server system may maximize the multi-objective optimization model along the first QoS dimension, wherein the maximizing includes selecting one or more pipelines for the multi-objective optimization model in the software architecture that meet QoS expectations specified for the first QoS dimension and the second QoS dimension, wherein an ordering of the pipelines is dependent on which QoS dimensions were optimized and de-optimized and to what extent, wherein the multi-objective optimization model is partially de-optimized along the second QoS dimension in order to comply with the QoS expectations for the first QoS dimension, and whereby there is a tradeoff between the first QoS dimension and the second QoS dimension.

Abstract: Disclosed is an improved approach to integrate distributed applications into an XA transaction. A transaction manager library is integrated into a distributed application, where the transaction manager library provides the benefit of implementing optimizations for the XA transaction, as well as minimizing or eliminating the need to create custom software code to make the application operable with the transaction manager for the XA transaction.

Abstract: Techniques for configuring a software system include generating a hierarchy of entities representing usage of the software system by a set of users, wherein the hierarchy includes a first set of nodes representing a set of tasks, a second set of nodes representing a set of components that implement the tasks, and a set of edges between the first set of nodes and the second set of nodes. The techniques also include updating the hierarchy based on a first set of configurations for the tasks, wherein the updated hierarchy indicates one or more tasks that have been enabled for the users. The techniques further include determining, based on the updated hierarchy, one or more components that implement the task(s). Finally, the techniques include generating, based on the hierarchy, one or more runbooks that execute the task(s) using the component(s).

Abstract: A method of identifying causal relationships between time series may include accessing a hierarchy of nodes in a data structure, where each node in the plurality of nodes may include a time series of data. The method may also include identifying a subset of nodes in the plurality of nodes for which causal relationships may exist in the corresponding time series. The method may additionally include generating a model for each of the subset of nodes, where the model may receive the subset of nodes and generate coefficients indicating how strongly each of the subset of nodes causally affects other nodes in the subset of nodes. The method may further include generating a ranked output of nodes that causally affect a first node in the subset of nodes based on an output of the corresponding model.

Abstract: Systems and methods are described that estimates a remaining useful life (RUL) of an electronic device. Time-series signals gathered from sensors in the electronic device are received. Statistical changes are detected in the set of time-series signals that are deemed as anomalous signal patterns. Anomaly alarms are generated, wherein an anomaly alarm is generated for each of the anomalous signal patterns. An irrelevance filter is applied to the set of anomaly alarms to produce filtered anomaly alarms, wherein the irrelevance filter removes anomaly alarms associated with anomalous signal patterns that are not correlated with previous failures of similar electronic devices. A logistic-regression model is used to compute an RUL-based risk index for the electronic device based on the filtered anomaly alarms. When the risk index exceeds a risk-index threshold, a notification is generated indicating that the electronic device has a limited remaining useful life.

Abstract: A network interface card, such as a SmartNIC, is used to provide encryption, such as network encryption virtual function (NEVF), for a virtual machine, so that a customer can control network keys in a virtual cloud network. The NEVF includes a memory device (e.g., SRAM) and a crypto processor (e.g., a crypto core). The memory device stores a crypto key. The crypto processor uses the crypto key to encrypt data to and from a virtual machine in the virtual cloud network. A key management system can be used to securely transfer crypto keys to the NEVF. Having one NEVF per virtual machine can enable a customer to manage the crypto key for a virtual cloud network.

Abstract: Techniques for using enhanced logit values for classifying utterances and messages input to chatbot systems in natural language processing. A method can include a chatbot system receiving an utterance generated by a user interacting with the chatbot system and inputting the utterance into a machine-learning model including a series of network layers. A final network layer of the series of network layers can include a logit function. The machine-learning model can map a first probability for a resolvable class to a first logit value using the logit function. The machine-learning model can map a second probability for a unresolvable class to an enhanced logit value. The method can also include the chatbot system classifying the utterance as the resolvable class or the unresolvable class based on the first logit value and the enhanced logit value.

Abstract: A data catalog system is disclosed that provides capabilities for uniquely identifying and retrieving data entities stored in diverse data sources managed by an organization. The data catalog system includes capabilities for generating a unique external identifier for a data entity (e.g., a data asset or a data object) by identifying a set of immutable configuration parameters associated with the data asset and identifying a set of data object attributes that uniquely identify data objects within the data asset. The generated unique external identifiers are stored as part of the metadata harvested by the data catalog system. The external identifiers are used to enforce a single representation of the data assets and the data objects in the data catalog system. The external object identifiers are used to perform data lookups and reconcile states of data entities during the metadata harvesting process.

Abstract: The present disclosure is related to techniques for converting a natural language utterance to a logical form query and deriving a natural language interpretation of the logical form query. The techniques include accessing a Meaning Resource Language (MRL) query and converting the MRL query into a MRL structure including logical form statements. The converting includes extracting operations and associated attributes from the MRL query and generating the logical form statements from the operations and associated attributes. The techniques further include translating each of the logical form statements into a natural language expression based on a grammar data structure that includes a set of rules for translating logical form statements into corresponding natural language expressions, combining the natural language expressions into a single natural language expression, and providing the single natural language expression as an interpretation of the natural language utterance.

Abstract: A client cookie management system is disclosed that includes capabilities for securely managing a session between a web-based application and a user interacting with the web-based application using session cookies. The system receives a request from a user to access a resource provided by a web server and forwards the request to the web server. The web server generates a session cookie comprising a session identifier associated with a session created for the user. The system receives the session cookie from the web server and generates a new session cookie comprising a new session identifier and transmits the new session cookie to the client application. The system receives a second request to access a different resource from the client application. The second request comprises the new session cookie. Upon determining that the new session cookie is not modified, the system transmits the second request to the web server.

Abstract: Method includes obtaining historical document images including text that correspond to different document classes; and generating a dictionary using text of the historical document images. The dictionary includes base words occurring with a greatest frequency in each document class. The base words are extracted from the text of the historical document images and arranged in datasets by a document class, where each dataset includes the base words of a same document class that occur with the greatest frequency within that document class. Trie structure is generated using the base words of the datasets that occur with a greatest frequency in each dataset. The trie structure includes internal nodes including root node and leaf nodes in which keys corresponding to the base words occurring with the greatest frequency in each dataset are respectively stored in predefined order. The trie structure is searchable in the predefined order starting with the root node.

Abstract: Systems and methods for implementing extensible attributes in ETL are disclosed. In some examples, attributes configured at a source file may be extracted from the source file. The extracted attributes can be mapped to a target column of a data warehouse table, and then a dynamic ETL script may be generated. The dynamic script may be executed to move data associated with the attributes to an appropriate new column of the data warehouse.

Abstract: Disclosed techniques relate to managing power within a power distribution system. Power consumption corresponding to devices (e.g., servers) that receive power from an upstream device (e.g., a bus bar) may be monitored (e.g., by a service) to determine when power consumption corresponding to those devices has breached or will likely breach a budgeted threshold corresponding to an amount of power allocated to the upstream device. If the budgeted threshold is breached, or is likely to be breached, the service may initiate operations to distribute power caps for the devices and to initiate a timer. Although distributed, the power caps may be ignored by the devices until they are instructed to enforce the power caps (e.g., upon expiration of the timer). This allows the power consumption of the devices to exceed the budgeted power assigned to the upstream device at least until expiration of the timer while avoiding power outage events.

Abstract: Embodiments monitor for faults in a cloud based network for a plurality of features comprising an application and dependent features. Embodiments generate a graphical representation of the plurality of features comprising a plurality of nodes and corresponding relationships between the nodes, each node corresponding to one of the plurality of features. Embodiments monitor for events for the plurality of features, the events corresponding to one or more of the nodes, to generate monitored events. Embodiments populate a graph database with the monitored events and classify each of the nodes with a trained graph neural network (“GNN”), the classification comprising a prediction of a failure of at least one node. Based on the classifying, for a failure node corresponding to the prediction, embodiments generate a new alert for the failure node or revise a threshold for an existing alert for the failure node.

Abstract: Techniques are disclosed for implementing a dynamically reconfigurable network lattice within a distributed computing system. A computing device may determine a combined configuration that includes a union of at least a subset of cloud infrastructure component topologies. The computing device may then provide instructions for implementing a physical layer characterized by the combined configuration. The computing device may then determine a subset configuration corresponding to a cloud infrastructure component topology of the subset of cloud infrastructure component topologies. The computing device may then deploy the subset configuration to the physical layer of the distributed computing system.

Abstract: In accordance with an embodiment, described herein is a system and method for automatic inference of a cube schema from a tabular data for use in a multidimensional database environment. A cube schema inference component can successively perform column-wise splits to calculate information gain ratios between each pair of a plurality of columns in the tabular data. A cross correlation matrix can be constructed from the information gain ratios between each pair of columns. The system can determine relationships among the plurality of columns based on the cross correlation matrix; create a hierarchy directed graph to represent the relationships; and further transform the hierarchy directed graph into a cube schema that can be used to create a cube for loading the tabular data, or to map the tabular data into an existing cube in the multidimensional database environment.

Abstract: Techniques discussed herein include providing a cloud computing environment in which applications are deployed by a deployment orchestrator using virtual-machine-based virtualization with a static pool of computing nodes (e.g., substrate nodes, overlay nodes) and container-based virtualization with a dynamic pool of computing nodes (e.g., nodes managed by a container orchestration platform). Components of a data plane may be used to deploy containers to micro-virtual machines. A container runtime interface (CRI) may receive a deployment request from the deployment orchestrator. A container networking interface of the data plane may configure network connections and allocate an IP address for the container. A container runtime of the data pane may generate and configure the container with the IP address and run the container within a micro-virtual machine that is compatible with the container orchestration platform.

Abstract: A time series forecasting system is disclosed that receives a forecast request identifying a forecast to be made for a future time point and a time series dataset to be used for making the requested forecast. The system selects a model to be used for making the requested forecast and determines a set of one or more attributes of the time series dataset. Based on the set of attributes, the system selects a compute instance either from a shared node pool or a dedicated instance having a shape to be used for training the selected model and generating a forecast. The system then generates a forecast result for the future time point using the trained model and provides the forecast result as a response to the forecast request.

Abstract: Embodiments govern cloud environments using a policy engine. A plurality of policy definitions for governing a plurality of managed environments can be received at a policy engine, each policy definition including one or more conditions and one or more actions, where the managed environments implement cloud based virtual machines that host cloud based applications. Events that relate to one or more of the managed environments can be received at the policy engine. Conditions for the policy definitions can be evaluated by the policy engine, where conditions for a first policy definition are triggered based on one or more of the received events. Based on the evaluating, one or more actions of the first policy definition can be performed, the one or more actions changing a first managed environment that is governed by the first policy definition.

Abstract: Techniques are disclosed for associating environmental condition information with a software component so that the environmental conditions can be automatically verified when a software package containing the software component is deployed. As a result, environmental conditions can be established when a software component is initially developed by the operators who may be best-suited to determine appropriate environmental conditions. Further, environmental condition enforcement can be performed automatically at the time of deployment, without human intervention. For example, when the software component is about to deployed, a deployment system can automatically examine the information about the target environment to verify that target environment satisfies the encoded environmental conditions.

Abstract: A computer system may receive one or more requests for access to one or more cloud services and may store the one or more requests in a request log. The computer system may receive one or more access rules applicable to cloud service access rights. The computer system may aggregate the one or more requests of the request log to determine access requirements for a container, the container being configured to store one or more applications. The computer system may generate and store container access policies that define access of a container and the one or more cloud services, the container access policies based at least in part on the aggregated one or more requests and the one or more access rules. The computer system may send the container access policies to a request forwarder of a compute instance in a production environment.

Abstract: Techniques for modifying queries in a set of nested queries are disclosed. A graphical user interface displays a query detail region alongside a nested query display region. The graphical user interface includes functionality to provide for modification of queries in the nested set of queries. Based on a selection by a user, a query modification tool promotes a query attribute from a child query to one or more parent queries. Based on another selection by a user associated with one query in the set of nested queries, the system deletes an attribute from each query in the set of nested queries. Responsive to a selection to create multiple conditions for a query rule, the system modifies the functionality of the user interface to enable entry of multiple condition characteristics. Based on a further selection, the system creates the multiple conditions for the query rule.

Abstract: Techniques are described for determining whether to process a job request. An example, method can include a device receiving a first message from a first stream, the first message comprising a job request from a tenant and a tenant identifier. The device can detect a base number of units permissible to be processed for the tenant over a unit of time. The device can detect a processing speed of a downstream processor of an asynchronous pipeline. The device can detect a number of messages in a second stream, the downstream processor configured to receive messages from the second stream. The device can determine a target throughput and a historical throughput for the tenant. The device can compare the target throughput with the historical throughput to determine whether to process the job request. The device can schedule the job request for processing based at least in part on the comparison.

Abstract: Techniques for presenting a user with instructions for completing tasks based on monitoring images of user actions are disclosed. A system monitors user actions to identify a next operation in a set of operations to present to a user. The system presents to the user instructions for completing the next operation. The system monitors user actions and may also monitor a manufacturing component status or operating equipment status to determine whether an operation has been completed. The system may reorder a sequence of operations for a particular task based on one or both user input and identifying a different sequence of operations associated with a superior task execution rating.

Abstract: For a communication channel having a first endpoint in a customer on-premise network and a second endpoint on a primary host machine in a cloud service provider infrastructure, the primary host machine determines a change in a state information of the communication channel and identifies a backup host machine for the communication channel. The primary host machine causes the change in the state information to be replicated to the backup host machine, wherein the replicated state information stored by the backup host machine is usable by the backup host machine after a failover causes the backup host machine to become the second endpoint of the communication channel.

Abstract: Systems and methods of interface-based ACLs in a virtual Layer-2 network. The method can include sending a packet from source compute instance in a virtual network to a destination compute instance via a destination virtual network interface card (destination VNIC) within a first virtual layer 2 network and evaluating an access control list (ACL) for the packet with a source virtual network interface card (source VNIC). ACL information relevant to the packet can be embedded in the packet. The VSRS can receive the packet and can identify the destination VNIC within the first virtual layer 2 network for delivery of the packet based on information received with the packet and mapping information contained within a mapping table. The VSRS can access ACL information from the packet and can apply the ACL information to the packet.

Abstract: Techniques for multi-stage training of a machine learning model to extract key-value pairs from documents are disclosed. A system trains a machine learning model using a set of training data including unlabeled documents of various document categories. The initial stage identifies relationships among tokens, or words, numbers, and punctuation, in documents. The system re-trains the machine learning model using a set of training data which includes a particular category of documents while excluding other categories of documents. The second training stage is a supervised machine learning stage in which the training data is labeled to identify key-value pairs in the documents. In the initial training stage, the system sets parameters of the machine learning model to an initial state. In the second stage, the system modifies the parameters of the machine learning model based on the characteristics of the training data set including the documents of the particular category.

Abstract: The present disclosure relates to a system and techniques for preventing corruption of snapshot data by limiting the visibility of committed data. To do this, the system may maintain an index that indicates the highest transaction identifier value such that no future commits will have a transaction identifier less than or equal to the indexed transaction identifier value. In embodiments, if a read is performed, only transactions having a transaction identifier less than or equal to the index value can be read. Each time that a transaction is committed, the index value is updated to the transaction identifier for the transaction having the highest transaction identifier without any intermediary transactions.