Abstract: An example network device includes a primary node and a secondary node. The primary node includes one or more processors implemented in circuitry and configured to receive a message from a collector device requesting to subscribe to statistics of a metrics streaming session; initiate a telemetry session for sending the statistics to the collector device; replicate data of the telemetry session to the secondary node; and send the data of the telemetry session to the collector device. In this manner, in the event of the switchover, the secondary node may act as the primary node and resume the telemetry session. That is, the secondary node, acting as a primary node following the switchover, may receive statistics data from one or more sensors related to the metrics streaming session, and send telemetry session data, representative of the statistics data, to the collector device as part of the telemetry session.

Abstract: The present disclosure relates to a communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. A method performed by a source edge enabler server for selecting a target edge application server in an edge computing system for a user equipment (UE) is provided.

Abstract: A system for user registration and preference configuration for a data sharing platform is provided. The system comprises a user data repository containing data relating to a plurality of users, a permissions repository containing user profile configuration settings relating to the plurality of users, and a graphical user interface generated by the system and provided over a network. The graphical user interface is configured to receive an input of a user to register for a data sharing service of the system, generate a plurality of selectable interaction points, receive user profile information, user profile configuration settings, and a designation of at least one experience provider with which to share data of the user, and store, via associative linking, the received user profile information, user profile configuration settings, and the designation of the at least one experience provider with which to share data of the user.

Abstract: A computer-implemented method for on-demand data replication in a network architecture includes activating an on-demand program to pair a network-based replication agent with a data source. Compute resources for the replication agent are allocated based on one or more hints received from the data source. The one or more hints are indicative of at least a size of an upcoming data traffic transmission from the data source. Upon receiving data from the data traffic transmission, the replication agent is activated via the on-demand program to replicate the received data using the allocated replication resources. The allocated compute resources are released upon completion of data replication of the received data. The on-demand program is a serverless function configured to activate the replication agent on-demand, upon receiving the data from the data traffic transmission.

Abstract: Aspects of the invention include receiving, from a first client, a first object, determining a first file format for the first object, wherein the first file format is operable to run on a first platform, generating a catalog for the first object, wherein the catalog comprises data associated with the first object, and wherein the catalog for the first object is stored on a first server, receiving, from a second client, a request to access the data associated with the first object, determining a second platform operated by the second client, converting, on a second server, the first file format for the first object to a second file format, the second file format operable to run on the second platform, and transmitting the first object in the second file format to the second client.

Abstract: A system includes a memory and a processor. The processor is configured to determine a first cluster configuration for a particular service that is running on both a first and a second computing clusters. The first cluster configuration includes a first configuration value for configuring the particular service to run on the first computing cluster. The processor is further configured to determine a second cluster configuration for the particular service that is running on both the first and second computing clusters. The second cluster configuration includes a second configuration value for configuring the particular service to run on the second computing cluster. The first configuration value is different from the second configuration value. The processor is further configured to send one or more instructions to the second computing cluster in order to change the second configuration value to match the first configuration value.

Abstract: An address rotation system detects a trigger to initiate rotation of location information of an origin server that provides content to be served by a content delivery service. In response to the trigger, the address rotation system identifies an active networking route of the content delivery service and obtains, from the route, an assigned first name of the origin server and a first network address in a name service. The address rotation system replaces the first network address with a second network address and updates the name service to resolve a second name to the second network address. The address rotation system updates the content delivery service with the second name to allow the content delivery service to use the second name to obtain the second network address and access the origin server.

Abstract: The present disclosure provides a page presentation method, including: receiving an access request for a target page, wherein the target page has a plurality of page blocks; and presenting a block snapshot of at least one page block in the target page stored locally in response to the access request, wherein each page block has a respective block snapshot. In addition, the present disclosure also provides a page presentation system, a computer system, and a computer-readable medium.

Abstract: In an internal network monitoring method for monitoring an internal network, a specified network packet, which is scheduled to be transmitted via a specified path, is inspected. A packet characteristic is extracted from a data link layer of the specified network packet. The specified network packet is directly transmitted via the specified path if the packet characteristic does not comply with a preset condition. The specified network packet is redirected to be transmitted via another path different from the specified path or mirroring the specified network packet to create a mirror packet if the packet characteristic complies with the preset condition.

Abstract: A method for storage, retrieval, and use of programmable pipeline device profiles includes creating a plurality of different programmable pipeline device profiles and a catalog for locating and retrieving the profiles, each programmable pipeline device profile including compiled object code for configuring a programmable pipeline device to implement a network test or network visibility function and metadata describing the programmable pipeline device profile. The method further includes storing the catalog and at least a portion of the profiles in a non-transitory computer readable storage medium. The method further includes selecting, using the catalog, one of the profiles stored in the non-transitory computer readable storage medium. The method further includes using the profile to configure the programmable pipeline device for implementing the network test or visibility function.

Abstract: Some embodiments provide a method for dynamically implementing quality of service (QoS) for machines of a network. The method identifies a QoS policy rule that defines a QoS policy to be implemented for machines that meet a set of criteria specified by the QoS policy rule. The method dynamically identifies a set of machines that meet the set of criteria. The method configures a set of managed forwarding elements of the network to implement the QoS policy rule for network traffic associated with the set of machines. In some embodiments, the method monitors network events (e.g., user logins, addition of new machines, etc.) and identifies a corresponding QoS policy rule to be enforced at corresponding locations in the network based on the detected event.

Abstract: Embodiments of the present invention provide methods, systems, apparatuses, and computer program products for predicting network asset requests for a future network time interval.

Abstract: A management server modifies a set of objects which is utilized by the management server to manage a network computing environment including server node. The management server updates a set of container objects in response to modifying the set of objects. Each container object includes attributes to specify a unique identifier of the container object, to specify an update generation number of the container object, and to specify a unique identifier of an object that is associated with the container object. An object synchronization process is performed using the updated set of container objects. The object synchronization process includes identifying each container object having update generation number which is greater than a last update generation number of the given server node, and sending the identified container objects to the given server node to update the set of local objects of the given server node based on the identified container objects.

Abstract: Example techniques for permitting access to cloud computing resources based on tags are described. In an example, a user is permitted to access a resource provided by a cloud computing platform based on a comparison of identifier of the user with an identifier specified in an access tag associated with the resource.

Abstract: Systems and methods for identifying sequences of encrypted packets that carry files between clients and application servers, and for estimating the sizes of these files. A traffic-monitoring system searches the traffic for connections that appear to carry file content. The system estimates the number of files that were transferred over the connection. Next, the system estimates the respective sizes of one or more of the files that were transferred over the connection. To perform this estimation, the system first “peels away” as many lower-level protocol headers as possible from each of the packets that carries part of the file, and identifies the size that is specified in the lowest-level payload that remains. Next, the system tallies the specified sizes. Finally, the system reduces the packet-size tally to account for an estimated overhead due to the encryption of the packets.

Abstract: A computer-implemented method according to one embodiment includes initializing a new gateway node at a first site in response to a failure of an old gateway node at the first site; creating, at the new gateway node, a list of dirty directories at the first site; synchronizing, with a second site by a background thread at the first site, all directories within the list of dirty directories; and synchronizing, with the second site by a foreground thread at the first site, new operations performed within the first site after the initialization of the new gateway node.

Abstract: A cloud-based data protection service is disclosed. In an embodiment, the data protection service may support backup of data sets from one or more sites associated with one or more organizations. In an embodiment, deduplication of backup data across multiple sites of an organization and/or multiple sites associated with different organizations may be supported. In an embodiment, backup data may be post-processed in the cloud to insert fingerprints corresponding to data blocks that did not change since a previous backup was performed, to scan the backup for security threats such as viruses, other malware, personally identifiable information, etc. In an embodiment, restore may be supported from the cloud, where restore blocks may be larger than backup data blocks. In another embodiment, restore may be based on blocks that have changed since the most recent backup (or a user-selected backup).

Abstract: Some embodiments provide a method that, at a first machine that operates at a first physical site as a primary global manager for a logical network spanning a plurality of physical sites, receives a set of ordered data describing a configuration of the logical network. The method stores, in a particular order, the received set of ordered data in a first database located at the first physical site. Through a channel between (i) the first machine and (ii) a second machine that operates at a second physical site as a secondary global manager for the logical network in case of failure of the primary global manager, the method provides the set of ordered data in the particular order for the second machine to store in a second database in the particular order. The second database located at the second physical site.

Abstract: An authentication system for use with personal electronic identity gadgets of at least one user of services in that the personal electronic identity gadgets are configured to authenticate to a main service provider and are configured to trigger synchronization of data storages of service providers. The system has a data storage of an authentication system server component of at least one main service provider. The data storage is synchronizable with data storage(s) of server component(s) of at least one other service provider, either directly or via personal electronic identity gadgets, and the authentication system server component of the at least one main service provider is configured for mapping personal electronic identity gadgets to the account of the user of services. The system offers an authentication method that allows to recover from emergencies and/or increase the user comfort and/or increase security.

Abstract: A method, system and computer program product for dynamically adjusting a timeout parameter associated with a connection between a client device and a server. Information is associated with at least one of a characteristic of a content to be rendered by a server, a characteristic of traffic of a connection to the server, and a characteristic of a user of the server is received from the client device and transmitted to the server. Based on the transmitted information, an amount of time in a previously stored timeout parameter associated with a client device is adjusted automatically with a new timeout parameter to enable communication between the client device and the server. The new timeout parameter is stored in place of the previously stored timeout parameter. Responsive to the amount of time to wait for a response from the client device satisfying the new timeout parameter, the communication between the client device and the server is terminated.