Abstract: The present invention addresses the need for improved virtualized cloud infrastructure policy implementation and management in order allow real-time monitoring and optimization of virtualized resources. It provides systems and methods for real-time cloud infrastructure policy implementation and management that include a plurality of host devices, a plurality of real-time probe agents associated with the plurality of host devices operating on each of the plurality of host devices, and a policy engine communicatively coupled to the plurality of host devices and containing a policy associated with an application program deployed in at least one of the plurality of host devices. The policy engine is programmed to monitor in real time changes in deployment of the application program across the plurality of host devices and to push the policy to the real-time probe agent operating on each host device on which the application program is deployed.

Abstract: A dynamically transitioning system for monitoring a shipping container transported by a transit vehicle for an environmental anomaly has ID nodes within the container (at least some being associated with objects being transported), a command node on the container, and an external master node at a known location on the vehicle. The command node operates as a primary monitor for the anomaly by monitoring signal activity from the ID nodes; identifying the anomaly based upon the signal activity; generating a layered alert notification that identifies a targeted mediation recipient and mediation action, and establishes a mediation response priority; and transmits the notification to an external transceiver on the transit vehicle to initiate a mediation response for the mediation action. The command node dynamically instructs the external master node to temporarily operate as the primary monitor when the command node is within a threshold distance from the external master node's location.

Abstract: Aspects of the technology provide solutions for determining a time period (“epoch”) required to monitor or analyze a tenant network. Some implementations of the technology include a process for making automatic epoch determinations, which includes steps for identifying one or more network parameters for a tenant network, analyzing the tenant network using the network parameters to discover one or more configuration settings of the tenant network, and determining a first epoch for the tenant network, the first epoch corresponding with a period of time to complete analysis of the tenant network using the network parameters. In some aspects, the process can further include steps for generating a tenant profile for the tenant network, the tenant profile based on the network parameters, the first epoch, and the one or more configuration settings of the tenant network. Systems and machine-readable media are also provided.

Abstract: A system and method for content request monitoring and filtering for a plurality of managed devices in a managed network uses a smart PAC file that is uniquely associated with a particular user using a particular managed device and a DNS look up to perform both the logging/monitoring of the content request and the filtering without a hardware appliance or partial proxying.

Abstract: By splitting CGN functions based on a control plane and a forwarding plane, a CGN control plane function is put into a BRAS CP device, and a CGN forwarding plane function is retained on a CGN card on the BRAS DP device, and CGN configuration information is distributed by the BRAS CP device to the BRAS DP device.

Abstract: A method of providing a user interface on a mobile communication device to control smart devices in an environment. The method comprises discovering a plurality of smart devices in an environment by a client application executing on a mobile communication device by initiating wireless communication between the mobile communication device and the plurality of smart devices, wherein the client application learns an electronic model identity of each of the discovered smart devices, communicating with a data store by the client application to look-up control interfaces of the discovered smart devices based on the electronic model identities of the smart devices, looking-up predefined environmental preferences associated with the mobile communication device in the data store by the client application, transmitting control commands by the client application to the plurality of smart devices based in part on the looked-up predefined environmental preferences.

Abstract: A data storage device may comprise a network interface configured to couple to a computer network; a memory configured to store at least one of a first, second and third media file, at least two of the first to third media files being configured differently from one another; and a processor coupled to the memory and to the network interface. The processor may be configured to generate a media stream by at least sequentially applying at least one filter to one or more of the first to third media files; sequentially reformatting one or more of the first to third media files such that each or some substantially conforms to a common format; ordering the filtered and/or reformatted media files according to a selectable metric; aggregating the media files together to generate the media stream; and making the media stream accessible to the computer network over the network interface.

Abstract: An online system selects for display content items having an option to allow a user to converse with a content provider over an electronic communication system in a way that optimizes for the occurrence of that communication. Content items provided by the online system include links to an online communication system from which the online system can directly observe whether the user engaged in communications with third parties. The online system can thus obtain labeled training data describing communications between users and users' previous interactions with content items and pages of the online system. The trained model is applied to candidate content items to predict a probability that a user will engage in a communication with the content provider if the content is provided to the user, and the model optimizes the selection of content items for which the call to action is to engage in the communication.

Abstract: Methods and systems are described for assigning the proper internet protocol (IP) address to a client device following authentication of the client device on a network. In particular, at commencement of an authentication procedure of the client device, a role is associated with the client device that denies all DHCP renews/requests. By assigning a role to the client device 103 with a “deny DHCP renew/request” rule at the commencement of an authentication procedure, the systems and methods described herein ensure that a race condition does not allow the client device to renew an IP address in an old segment of the network. Accordingly, the client device may avoid a possibly improper IP address in a segment of the network system in which the client device is no longer associated with or operating on.

Abstract: Some embodiments relate to a method implemented by a first terminal for setting up a session with a second terminal. An identifier of a session server is obtained at least from a subscriber device in the first terminal which comprises a subscriber identifier and an operator identifier. A session request and an identifier of the second terminal are sent to the server. At least one instruction is received from the server and a message comprising a first set, relative to the first terminal, of at least one characteristic parameter of the requested session is generated in accordance with at least one instruction received and sent to the server. A message is received from the server comprising a second set of at least one characteristic parameter of the requested session, the second set relating to the second terminal and having a non-zero overlap with the first set.

Abstract: Embodiments of the present disclosure may provide a streamlined process for performing operations, such as data sharing and data replication, using multiple accounts. A global identity (also referred to as an organization user) may be employed, where the global identity may have access to multiple accounts across the same or different deployments. The global identity may switch between accounts from its login session and perform various tasks in the context of different accounts without undergoing further authentication.

Abstract: The present disclosure provides a method and a system for triggering of Internet of things (IoT) devices. The system comprising a processor causes the processor to receive a change in output of first IoT device from a plurality of IoT devices, wherein the plurality of IoT devices are connected to each other, determine one or more connectivity paths between the plurality of IoT devices including the first IoT device based on stored connectivity paths between the plurality of IoT devices in a database, select one of the determined one or more connectivity paths between the plurality of IoT devices, wherein the selecting is based on similarity of metadata of each of the plurality of IoT devices in each of the one or more connectivity paths and trigger one or more IoT devices of the plurality of IoT devices in the selected connectivity path.

Abstract: A device may determine internet protocol (IP) traffic monitoring criteria and may monitor IP traffic based on the IP traffic monitoring criteria. The device may update, based on monitoring the IP traffic, a table of currently active IP traffic flows and may update, based on the table of currently active IP traffic flows, an address resolution protocol (ARP) packet filter. The device may receive one or more ARP packets from a different device and may determine whether to accept or discard the one or more ARP packets based on the ARP packet filter. The device may update an ARP table based on determining to accept the one or more ARP packets.

Abstract: Methods, systems, and apparatus, including an apparatus for generating clusters of building blocks of compute nodes using an optical network. In one aspect, a method includes receiving request data specifying requested compute nodes for a computing workload. The request data specifies a target n-dimensional arrangement of the compute nodes. A selection is made, from a superpod that includes a set of building blocks that each include an m-dimensional arrangement of compute nodes, a subset of the building blocks that, when combined, match the target n-dimensional arrangement specified by the request data. The set of building blocks are connected to an optical network that includes one or more optical circuit switches. A workload cluster of compute nodes that includes the subset of the building blocks is generated. The generating includes configuring, for each dimension of the workload cluster, respective routing data for the one or more optical circuit switches.

Abstract: A system for processing messages of a high rate data stream and an apparatus including: a message processor including a plurality of processor sub-modules and configured to read an input data stream, process the input data stream, and to output an output data stream; at least one payload memory storing data related to the input data stream and accessible to the message processor; at least one instruction memory accessible to the message processor and storing computer program instructions configuring the message processor to process the input data stream; and an application processor configured to rewrite the at least one instruction memory.

Abstract: Fault-tolerant and highly available configuration of distributed services including a computer-implemented method for role-based configuration discovery comprising receiving a request comprising an identifier of a role; identifying a first key, in a replica of a distributed configuration store, comprising a first value that matches the role identifier; identifying one or more other key-value pairs associated in the replica with the first key; and returning a response to an entity that sent the request comprising the value of at least one key-value pair that is specific to the role the service has. Also disclosed are techniques for log forwarding.

Abstract: Techniques are described for binding secondary services with a cloud service instance. In one or more embodiments, a service definition defines a set of secondary services that are compatible with a primary service. In response to receiving a request to perform a provisioning operation for the instance of the primary service, a provisioning engine identifies, from the set of secondary services that are compatible with the primary service, a subset of one or more secondary services that are available. The provisioning engine binds the subset of one or more secondary services to the primary service to generate a deployment configuration for the instance of the primary service. Based on the deployment configuration, the provisioning engine provisions a set of components for the instance of the primary service.

Abstract: A new scalable approach to conflict-free deployment of changes across networks. The conflict rules or constraints may be modeled using policies and algorithms to determine an optimized schedule for change deployment.

Abstract: The present invention is an intelligent gateway which can receive multiple sensor data using sub-1G Hz frequency, analyze data, and transmit processed data to a database server. The intelligent gateway can receive data from up to 100 sensors using sub-1G Hz (433, 868 or 915 MHz) wireless frequency. The received data can be analyzed and the gateway can determine when to transmit data, and which packaged data to transmit to the database server. The intelligent gateway can also receive feedback and instructions from the database server. The process data can be transmitted to the database server with different protocols like WIFI, Ethernet and RS485. The intelligent gateway can also include multiple sensors including temperature and humidity sensors, pressure sensors, air speed sensors and a particulate matter sensor for detecting particulates of less than 2.5 micro meters (PM2.5). These sensors are collect additional indoor environmental quality parameters.

Abstract: In one embodiment, a supervisory service for a software-defined wide area network (SD-WAN) tracks a performance metric for a tunnel in the SD-WAN. The supervisory service computes a cumulative distribution function (CDF) for the tracked performance metric. The service assesses curvature of the CDF for the tracked performance metric relative to a service level agreement (SLA) threshold of an application for that performance metric. The service controls assignment of traffic for the application to the tunnel, based on the assessed curvature of the CDF for the tracked performance metric relative to the SLA threshold of the application for that performance metric.