Abstract: A computer-implemented method for generating a secured software application, involves receiving a source software application which has instructions for processing by a process virtual machine. The method involves generating a secured software application comprising a first set of bytecode instructions derived from the source software application, a second set of the bytecode instructions derived from the source software application, and a security component. The first set of bytecode instructions are for processing on a first process virtual machine, in a first process, on a target processing system. The security component comprises instructions which, when executed on the target processing system, will cause the target processing system to provide a second process virtual machine in a second process where it will process instructions from the second set of bytecode instructions.

Abstract: For each server under consideration for container migration, whether the server has a value for a first parameter that precludes the server from being migrated to a container is determined. Each server having a value that precludes the serve from being migrated to a container is removed from further consideration. For each server remaining under consideration, a value of the server for each second parameter of a number of second parameters is determined, and the values of the server for the second parameters are weighted to yield a weight for the server. The servers remaining under consideration for migration are ranked based at least on the weights for the servers, yielding an order in which the servers are to migrated.

Abstract: Methods and systems for a unified application notification framework are described herein. A server may receive a notification from a service provider. The service provider may be associated with an application executable on a virtual machine. The virtual machine may be part of a virtual environment that includes a user interface. The server may determine an identifier for the received notification. The identifier may indicate the application on the virtual machine associated with the service provider. The server may provide the received notification to the user interface for display to a user. The received notification may be displayed without execution of the application on the virtual machine.

Abstract: A computer-implemented method comprises obtaining an intermediate computer code object including a set of instructions corresponding to a task to be performed. The intermediate computer code object—being machine independent—further includes for each of the at least one set of instructions one or more metadata descriptors representative of at least a complexity measure of the task to be performed. The method also comprises executing the intermediate computer code object on a computing platform comprising at least two different execution units having a different memory with a different memory location. This executing comprises selecting for each of the at least one set of instructions a target execution unit from the plurality of execution units. This selecting takes the one or more metadata descriptors and a decision rule into account, wherein the decision rule relates the plurality of complexity measures to a performance characteristic of the plurality of execution units.

Abstract: Examples for managing virtual infrastructure resources in cloud environments can include (1) instantiating an orchestration node for managing local control planes at multiple clouds, (2) instantiating first and second local control planes at different respective clouds, the first and second local control planes interfacing with different respective virtualized infrastructure managers (“VIMs”), where the first and second local control planes establish secure communication with the orchestration node, and (3) deploying, by the orchestration node, services to the first and second local control planes. Further, the first and second local control planes can cause the respective VIMs to manage the services at the different respective clouds.

Abstract: A proactive autoscaling system can use heuristics and machine learning to proactively, dynamically and automatically scale computing resources allocated to applications up and down, prior to scaling events that cause changes in load levels. The proactive autoscaling system may be stateless, and may be agnostic to use case, platform, field of endeavor, or communication protocol used by the applications. The proactive autoscaling system gleans metrics in real-time. The gleaned metrics are indicative of load levels concerning one or more applications. These gleaned metrics may be in a variety of formats, and may be from different sources, both internal or external to the applications. The proactive autoscaling system automatically predicts scaling events based on gleaned metrics. Prior to the occurrence of a predicted scaling event, the proactive autoscaling system can automatically scale computing resources available to one or more target applications, in response to the predicting of the scaling event.

Abstract: An information processing device provided with: an application division setting part for assigning execution responsibility for each of a plurality of execution files included in an application to one of a plurality of information processing devices, and for generating execution responsibility assignment information indicating each of the execution files and an information processing device to which the execution responsibility for the execution file is assigned; a communication part for transmitting the execution responsibility assignment information to a network; and an application division execution part for referring to the execution responsibility assignment information to execute an execution file whose execution responsibility is assigned to its own device out of the plurality of execution files.

Abstract: An embodiment of a semiconductor apparatus may include technology to receive a request for storage-related resources, and demand-query one or more persistent storage media devices for device-determined performance-related information in response to the request, where the device-determined performance-related information is based on dynamically measured performance of persistent storage media of the device itself. Other embodiments are disclosed and claimed.

Abstract: Technologies for providing a multi-tenant local breakout switching and dynamic load balancing include a network device to receive network traffic that includes a packet associated with a tenant. Upon a determination that the packet is encrypted, a secret key associated with the tenant is retrieved. The network device decrypts a payload from the packet using the secret key. The payload is indicative of one or more characteristics associated with network traffic. The network device evaluates the characteristics and determines whether the network traffic is associated with a workload requesting compute from a service hosted by a network platform. If so, the network device forwards the network traffic to the service.

Abstract: An information processing system, an information processing method, and an information processing apparatus. The information processing system includes at least one memory configured to store a plurality of jobs in order, by type of processing to be executed and a plurality of processors assigned to a specific type of processing to be executed, processes a job assigned to other processor stored in the memory in substitution for the other processor based on a determination that the job of the assigned type of processing is not stored in the memory, and cancels substituting of the processing of the job assigned to the other processor according to a processing status of at least one of other processors.

Abstract: An example operation may include a method comprising one or more of constructing a VNF package that includes at least one of a VNFD with one or more VNFC module descriptors or one or more VNFC module artifacts, generating a VNF package archive, receiving the VNF package archive containing the VNF package, processing a manifest file in the VNF package archive, onboarding one or more traditional VNF package components including a VNFD file and at least one software artifact, onboarding one or more independently manageable VNFC software module components in the VNF package, and enabling a VNF in a service catalog.

Abstract: Techniques disclosed herein relate to migrating virtual computing instances such as virtual machines (VMs). In one embodiment, VMs are migrated across different virtual infrastructure platforms by, among other things, translating between resource models used by virtual infrastructure managers (VIMs) that manage the different virtual infrastructure platforms. VM migrations may also be validated prior to being performed, including based on resource policies that define what is and/or is not allowed to migrate, thereby providing compliance and controls for borderless data centers. In addition, an agent-based technique may be used to migrate VMs and physical servers to virtual infrastructure, without requiring access to an underlying hypervisor layer.

Abstract: Implementations for generating a command line interface (CLI) for projects based on configuration management technologies are described. An example method may include maintaining a CLI specification file for a project that is executable by a configuration management system, the CLI specification file specifying an entry point to cause execution of the project, a command to invoke the project via the entry point, and option parameters of options of the project, receiving an invocation request for the project via a user input of the command, verifying that arguments of the invocation request are valid in view of the option parameters of the CLI specification file, and responsive to verifying that the arguments are valid, generating a CLI for the project in view of the CLI specification file, the CLI to cause the project to be executed by the configuration management system using the entry point.

Abstract: A memory scheduler in a hypervisor allocates physical memory to virtual machines (VMs) based on memory usages metrics generated within the VMs and provided to the hypervisor. More particularly, the memory scheduler determines an allocation target for each VM based on a guest-generated memory usage metric associated with the VM. The allocation target can be increased or decreased from its previous value to reflect changing needs in the VM. Physical memory is allocated when a VM requests it, and is reclaimed during a reclamation process based on its associated allocation target.

Abstract: A computer-implemented method includes receiving characteristic information of a container registry. The container registry includes a plurality of container images. The method includes selecting at least two container images in the container registry and selecting parameters for optimization based on the characteristic information. The method also includes generating a cost function based on the parameters for optimization and optimizing the at least two container images in the container registry based on the cost function. A computer-implemented method includes receiving a composition of each of at least two layers in a container image. The composition of each of the at least two layers includes at least one file. The method includes mapping overlap between the composition of the at least two layers and estimating a redundancy in the container image based on the overlap. The method also includes calculating new layers which reduce the redundancy in the container image.

Abstract: Disclosed are various embodiments for distributing the load of a plurality of virtual machines across a plurality of hosts. A potential new host for a virtual machine executing on a current host is identified. A gain rate associated with migration of the virtual machine from the current host to the potential new host is calculated. A gain duration associated with migration of the virtual machine from the current host to the potential new host is also calculated. A migration cost for migration of the virtual machine from the current host to the potential new host, the migration cost being based on the gain rate and the gain duration is determined. It is then determined whether the migration cost is below a predefined threshold cost. Migration of the virtual machine from the current host to the optimal host is initiated in response to a determination that the migration cost is below the predefined threshold.

Abstract: A method and apparatus of a device that automates a task over a network that includes a plurality of data centers is described. In an exemplary embodiment, the device receives state change information from a plurality of devices in the plurality of data centers. In addition, the device generates an overall state for the network. The device further receives a task to be performed over the plurality of data centers. The device additionally schedules the task to be performed using the overall network state.

Abstract: Method, apparatus, and computer program product are provided for dynamically changing containerized workload isolation in response to detection of a triggering factor. In some embodiments, workload is containerized using a default container runtime (e.g., runC) that spawns one or more cgroup-based containers on a compute node using resource limiting capabilities of the compute node's host kernel including cgroups and namespaces. In some embodiments, in response to a triggering factor, such as a host kernel vulnerability, at least some of the containerized workload is migrated from running in the one or more cgroup-based containers to one or more virtual machines (VMs) launched by a standby container runtime (e.g., runV). In some embodiments, the cgroups and namespaces of the one or more cgroup-based containers are live migrated, without service interruption, to one or more VM runtimes on the one or more VMs using CRIU—checkpoint/restore in userspace.

Abstract: A Virtual Machine (VM) is created utilizing a virtual Operating System (OS) disk and virtual application disks, each of which may be from disparate third party suppliers. One or more files in the virtual application disk are then linked to a specific file system location (node) in the virtual OS disk.

Abstract: A method, system, and computer program product for automatically generating service definitions for application clients of a message broker is provided. The method includes retrieving a trace of interactions between different application instances and corresponding message queues in a message brokering system. Thereafter, messages in the trace can be analyzed to identify the application instances and related message exchange data. Finally, a service definition document can be generated for each identified application instance using the related message exchange data to describe computational services provided by the identified application instance.