Abstract: Disclosed are various embodiments for automating the prediction of workload tenures in datacenter environments. In some embodiments, parameters are identified for a plurality of workloads of a software defined data center. A machine learning model is trained to determine a predicted tenure based on parameters of the workloads. A workload for the software defined data center is configured to include at least one workload parameter. The workload is processed using the trained machine learning model to determine the predicted tenure. An input to the machine learning model includes the at least one workload parameter.

Abstract: A compound social network site can manage complex organizational entities, such as businesses, via a compound social network graph. Nodes of the compound social network graph are connected by compound edges which correspond to multiple tiers of profile data of the organizational entities.

Abstract: A system and method for provisionally authenticating a host moving from one router to another router in a network using border gateway protocol (BGP) is disclosed. A host is initially authenticated at a first BGP router, this discovery is advertised to a second BGP router pursuant to BGP with a new extended community indicating successful authentication (or pre-authentication) of the host at the first BGP router. An indication for re-authentication of the host at the second BGP router is then received, which blocks network traffic from the host to the second BGP router. Due to the notification of a previous authentication of the host, the second BGP router begins a provisional authentication session. In response to a successful completion of the provisional authentication session, the host is authorized to transmit network traffic on the second BGP router and subsequently blocked from doing the same at the first BGP router.

Abstract: A method for training an analytics engine hosted by an edge server device is provided. The method includes determining a classification for data in an analytics engine hosted by an edge server and computing a confidence level for the classification. The confidence level is compared to a threshold. The data is sent to a cloud server if the confidence level is less than the threshold. A reclassification is received from the cloud server and the analytics engine is trained based, at least in part, on the data and the reclassification.

Abstract: A method for operation of a broadband access network of a telecommunications network includes: in a first step, a first access functionality primarily associated with a first central office point of delivery is also connected to a second central office point of delivery, and a second access functionality primarily associated with the second central office point of delivery is also connected to the first central office point of delivery; and in a second step, the cluster controller and both a first control functionality or control plane of the first central office point of delivery and a second control functionality or control plane of the second central office point of delivery control whether the first and second access functionalities are served by the first central office point of delivery or second central office point of delivery.

Abstract: A digital object may be routed via a network. Routing of a digital object may be based in part on a requested service, and/or on an ability of an intermediate node to provide the requested service, and/or on a willingness of the intermediate node to provide the requested service.

Abstract: Technologies for dynamic allocation of network communication resources includes a resource manager server to allocate a set of network communication resources to a compute device through an expansion bus switch that is coupled to the compute device and to the network communication resources. The resource manager server obtains telemetry data indicative of a present utilization of the allocated set of network communication resources and determines whether the present utilization satisfies a predefined utilization threshold. Additionally, the resource manager server adjusts, through the expansion bus switch and in response to a determination that the present utilization does not satisfy the predefined utilization threshold, an amount of network communication resources in the set to the compute device.

Abstract: In one embodiment, a device detects oscillations in a path metric for a network path between violating a service level agreement for an online application and not violating the service level agreement for the online application. The device classifies the oscillations as near-boundary or wild, based on degrees to which the path metric violated a threshold of the service level agreement. The device provides data regarding the oscillations to a user interface that includes an indication as to whether the oscillations are near-boundary or wild. The device adjusts the threshold of the service level agreement based in part on feedback from the user interface, when the oscillations are near-boundary.

Abstract: Techniques are provided for a high availability solution (e.g., a network attached storage (NAS) solution) with address preservation during switchover. A first virtual machine is deployed into a first domain and a second virtual machine is deployed into a second domain of a computing environment. The first and second virtual machines are configured as a node pair for providing clients with access to data stored within an aggregate comprising one or more storage structures within shared storage of the computing environment. A load balancer is utilized to manage logical interfaces used by clients to access the virtual machines. During switchover, the load balancer preserves an IP address used to mount and access a data share of the aggregate used by a client.

Abstract: Provided is a method for creating an inter-domain bidirectional tunnel. The method includes: receiving, by a node, a path creation message sent by a path computation element, the path creation message including mapping path information for creating an inter-domain label switched path (LSP), and bidirectional tunnel instruction information, and obtaining, by the node, an actual transmission path, which is used for data transmission between intra-domain or inter-domain nodes, based on the mapping path information and the bidirectional tunnel instruction information. The present disclosure further provides a communication method, a communication device, and a computer-readable storage medium.

Abstract: Improving distribution of traffic from clients to servers is provided. A device intermediary to a plurality of clients and a plurality of servers can receive a request from a client of the plurality of clients to access one of the plurality of servers. The device can determine a hash value based on at least a portion of the request received from the client. The device can identify an index of a plurality of indices listing the plurality of servers repeated a plurality of times in a deterministic shuffled order. The device can apply a cache array routing protocol (CARP) algorithm to a second plurality of servers listed in a subset of the plurality of indices around the index. The device can select a server from the second plurality of servers with a highest hash value based on the application of the CARP algorithm.

Abstract: Health and usage data are monitored for storage devices of a remote computing environment that is remote from a computing service provider. The remote computing environment comprises a subset of computing systems of a computing service provider that manages the remote computing environment. Based on the monitored health data, it is determined that one of the storage devices has failed. In response, it is determined whether a computing device of the remote computing environment that is associated with the failed storage device should be marked unhealthy or continue to operate at a reduced capacity. When it is determined that the computing device associated with the failed storage device should continue to operate at a reduced capacity, the computing device is reprovisioned with available storage devices and the computing device is operated at the reduced capacity.

Abstract: Techniques are disclosed for session-based routing within Open Systems Interconnection (OSI) Model Layer-2 (L2) networks extended over Layer-3 (L3) networks. In one example, L2 networks connect a first client device to a first router and a second client device to a second router. An L3 network connects the first and second routers. The first router receives, from the first client device, an non-session-based L2 frame destined for the second client device. The first router forms an L3 packet comprising an L3 header specifying L3 addresses of the first and second routers and a protocol selected based on an L3 service for the L2 frame, a payload comprising the L2 frame, and metadata comprising a session identifier distinctly identifying the L2 frame, and forwards the L3 packet to the second router. The second router recovers the L2 frame from the payload and forwards the L2 frame to the second client device.

Abstract: Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (1) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane. For instance, in some embodiments, each forwarding plane connects to a machine or service node through a port that receives data messages from, or supplies data messages to, the machine or service node.

Abstract: Provided is a method and a network apparatus in a cloud infrastructure. The network apparatus includes a processor, and a memory coupled to the processor, the memory for storing computer instructions that, when executed by the processor, cause the processor to generate a resource abstraction layer relating a network cluster including a first server architecture with a first resource set and a second server architecture with a second resource set, to generate an orchestration layer configured to receive a packet flow request and, in response to the packet flow request, schedule virtual network resources based on the resource abstraction layer for servicing a packet flow, and to deploy the virtual network resources to receive and service the packet flow.

Abstract: Disclosed herein are embodiments of systems, methods, and products that provide adversary detection and threat hunting. A server may comprise a user side virtual machine facing the cyber protection users, a collection virtual machine facing the at-risk network, and a data repository. The server may receive user requests requesting status data from the at-risk network via the user side virtual machine. The server may collect status data from the at-risk network via the collection virtual machine and store the collected data into the data repository. Different users may request duplicate information from the at-risk network. The server may retrieve the requested information from the data repository for duplicate requests and return the responses immediately for such requests. Because the server does not query the at-risk network for duplicate requests, the server may reduce the amount of bandwidth needed to acquire and distribute the requested information.

Abstract: A local area social networking server limits social networking activity to people likely to be in close physical proximity to one another and likely to be engaged in similar activities, even people previously unknown to each other, by only permitting social networking between computing devices that are connected to one another through a common local area network. The server identifies recipient devices for a message that (i) are coupled to the same local area network as the sending device, (ii) are associated with demographic characteristics that match those specified for the message as intended recipients, and (iii) are indicated by receptivity data to be receptive to the message and the sender.

Abstract: An asymmetric/symmetric IRB migration system includes an aggregated networking device subsystem with a first and second networking device that are both configured to operate according to an asymmetric IRB model. A migration system coupled to the aggregated networking device subsystem retrieves first and second asymmetric IRB attributes from the first and second networking devices, uses the first asymmetric IRB attributes to generate first symmetric IRB attributes for the first networking device, and uses the second asymmetric IRB attributes to generate second symmetric IRB attributes for the second networking device. The migration system then causes data destined for end host device(s) coupled to the aggregated networking device subsystem to be transmitted only to the first networking device, configures the first networking device using the first symmetric IRB attributes, and then configures the second networking device using the second symmetric IRB attributes.

Abstract: Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (1) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane. For instance, in some embodiments, each forwarding plane connects to a machine or service node through a port that receives data messages from, or supplies data messages to, the machine or service node.

Abstract: The present application relates to devices and components including apparatus, systems, and methods for user equipments and network components performing or assisting in packet filtering operations.