Abstract: A method for initiating quality of service levels within a user equipment (UE) device may include receiving application mapping rules from a core network, storing the application mapping rules within the UE device, and determining, by the UE device, a slice service profile (SSP) category associated with an application flow. The method may further include determining, by the UE device, whether an application mapping rule associated with the SSP category is stored within the UE device, and obtaining, from the UE device, a quality of service level for the application flow based on the SSP category, in response to determining that the application mapping rule is stored within the UE device.

Abstract: A system described herein may provide a technique for providing updated address mapping information associated with a service mesh via which one or more containerized instances communicate. The system may include and/or implement an application programming interface (“API”) via which the service mesh may provide address mapping information, that includes public and private addresses associated with containerized instances that communicate via the service mesh. The updated information may be received on an ongoing basis, and may be provided to another system that has subscribed to receiving updated mapping information associated with one or more containerized instances.

Abstract: According to some implementations, a data policy compliance service causes the display of a dashboard, wherein the dashboard identifies a first geographic region in which there is a datacenter hosting an organization instance of a customer of a cloud-based software provider. Responsive to user interaction, the data policy compliance service causes the display of the dashboard to reflect information regarding a possible migration of the organization instance from the first geographic region to a second geographic region of the plurality of geographic regions. The information includes a set of one or more compliance assessment metrics reflecting a level of compliance of the organization instance with data privacy and/or data security laws, regulations, and/or policy.

Abstract: Embodiments provide for improved stream generation. A target average bitrate (TAB) segment is generated by encoding a first segment, of a plurality of segments in a video, using a first maximum average bitrate (MAB) of a plurality of MABs specified in an encoding ladder. An intermediate average bitrate (IAB) segment is generated by encoding the first segment using a first intermediate bitrate, wherein the first intermediate bitrate is lower than the first MAB. Upon receiving a request for the first segment at the first MAB, the IAB segment is output based at least in part on determining that a first quality score of the IAB segment is within a predefined tolerance of a second quality score of the TAB segment.

Abstract: Technologies for establishing and utilizing a decentralized cloud infrastructure using a plurality of mobile computing devices include broadcasting for the formation of the decentralized cloud computing and storage infrastructure and establishing wireless communications between the plurality of mobile computing devices. The plurality of mobile computing devices self-organize and cooperate with one another to establish a structured decentralized cloud infrastructure to expose and sharing resources, services, and/or applications for ad hoc or socially-driven decentralized, cloud computing purposes.

Abstract: A request may be identified having one or more constraints for accessing disaggregated resources in a computing environment. One or more resources in a plurality of disaggregated resources may be identified based on the request. Computing server instances may be dynamically orchestrated using the one or more resources in the plurality of disaggregated resources based on the one or more constraints.

Abstract: A device implementing the subject system may include at least one processor configured to receive, by a first system process, a first network address that corresponds to a domain name that was resolved by a second system process, the resolving having been responsive to a resolution request therefor by an application process. The at least one processor may be further configured to receive, by the first system process, a second network address for which a network connection was opened by the application process. The at least one processor may be further configured to, responsive to determining that the application process opened a network connection for a network address for which the application process did not provide, to the second system process, a resolution request for the corresponding domain name, provide, by the first system process, an indication of the network address in conjunction with an indication of the application process.

Abstract: An example method of reserving a resource of virtualized infrastructure in a data center on behalf of a client includes: obtaining, by a distributed semantic network, a set of facts corresponding to resources in the virtualized infrastructure and a set of rules corresponding to relationships between the resources; receiving, at the first semantic network instance, a first reservation request for a first resource of the virtualized infrastructure from a first client, wherein the first reservation request comprises a first rule specifying a requested exclusive lock on the first resource; passing the first rule from the first semantic network instance to the second semantic network instance; receiving an acknowledgement from the second semantic network instance in response to passing the first rule; and sending an acknowledgement to the first client that the first rule specifying the requested exclusive lock on the first resource has been created.

Abstract: Embodiments of the present disclosure provide methods, systems, apparatuses, and computer program products for servicing a group-based communication workspace add request within a group-based communication system.

Abstract: A secure private network connectivity system (SNCS) within a cloud service provider infrastructure (CSPI) is described that provides secure private network connectivity between external resources residing in a customer's on-premise environment and the customer's resources residing in the cloud. The SNCS provides secure private bi-directional network connectivity between external resources residing in a customer's external site representation and resources and services residing in the customer's VCN in the cloud without a user (e.g., an administrator) of the enterprise having to explicitly configure the external resources, advertise routes or set up site-to-site network connectivity.

Abstract: Methods of secure resource authorization for external identities using remote principal objects are performed by systems and devices. An external entity creates a user group and defines entitlements to an owning entity's secure resource as a set of permissions for the group. An immutable access template with the permissions and an access policy for the secure resource are provided to the owning entity for approval. On approval, a remote principal object is created in the owner directory according to the permissions and access policy. A remote principal that is a group member requests access via an interface to the owner domain using external domain credentials. The identity of the remote principal is verified against the remote principal object by a token service. Verification causes generation and issuance of a token, with the enumerated entitlements, to the remote principal interface affecting a redirect for access to the secure resource.

Abstract: Systems and methods of the present disclosure are directed to providing remote control capabilities in information technology infrastructure. In particular, systems and methods of the present disclosure can provide remotely control capabilities to facilitate the management, configuration, or maintenance of information technology infrastructure.

Abstract: The present disclosure provides a method and an apparatus for processing data. The method includes: establishing a data connection between a local service and a Web client, receiving data that the Web client transmits to the local service through the data connection; and storing the received data to the designated local storage space.

Abstract: Apparatus and methods for sharing bookmarks are provided. Bookmarks may include queries to a chatbot or other interactive application. A server may include a shared bookmark controller and a personal computing device may include a user bookmark controller. A user may save a bookmark and share the bookmark with a chosen recipient. The user bookmark controller may send the bookmark and the identity of the recipient to the shared bookmark controller. The shared bookmark controller may then send the bookmark to the recipient and record whether the recipient saves or rejects the bookmark. Bookmarks may be collated and categorized into groups, and entire groups may be shared.

Abstract: A router architecture that facilitates cloud exchange point routing is disclosed. The architecture relies upon B-nodes to connect branch network to cloud, S-nodes to connect services, and V-nodes to connect cloud to cloud. The nodes can be essentially stateless with node configuration stored outside a router, which facilitates ripping and replacement of nodes. Multiple virtual private clouds can be implemented with respective pluralities of Kubernetes pods and a master Kubernetes cluster. Consumer premises equipment is coupled to a first virtual private cloud that forms a virtual extensible local area network with a second private cloud.

Abstract: A method for use by a system computer for granting access to a network resource includes receiving, in a first session, a first request for accessing the network resource, the first request including authorization information of a user of an access computer, initiating, while in the first session and using the first authorization information, a first authorization process with one or more authorization computers, and determining a failure relating to the first authorization process initiated with the one or more authorization computers. The method further includes, upon determining the failure, sending a second request indicating a temporary access token is to be delivered to the access computer in response to an access computer executing a session refresh for initiating a second session.

Abstract: Some embodiments of the invention provide a method for managing logical forwarding elements (LFEs) implemented by multiple physical forwarding elements (PFEs) operating on multiple devices, each LFE including multiple logical ports. On a host computer executing a particular machine connected to the LFE and a PFE implementing the LFE, the method identifies an address discovery message associating a particular network address of the particular machine with another network address of the particular machine. The method identifies an LFE logical port associated with the particular machine, stores in an encapsulation header an identifier that identifies this port, and then forwards the encapsulated message to a set of one or more devices implementing the LFE for the devices to use in processing data messages associated with the particular machine.

Abstract: The disclosed systems and methods join a user to a primary communication channel that is associated with an automated human interface module. The automated human interface module includes a plurality of nodes. A message including a text communication is posted by the user and sent to a decision module associated with a plurality of classifiers. The decision module is configured to identify a node that best matches the text communication in accordance with the plurality of classifiers. Each respective classifier produces a respective classifier result thereby producing a plurality of classifier results. Each respective classifier result identifies a respective node of the plurality of nodes best matching the text communication. The plurality of classifier results is collectively considered, and the node best matching the text communication is identified and the text communication is sent to the identified node.

Abstract: Systems and methods for providing online real-time expert services are disclosed. In exemplary embodiments, a plurality of user and provider devices communicates with a consulting engagement server over a network. The consulting engagement server includes a plurality of modules that are implemented in software, and which, when executed, provide for the marketing and provision of expert services by providers to users over a network in real time.

Abstract: The present disclosure is directed to systems and methods for transport resource allocation using a centralized control policy, the methods including the steps of receiving node characteristics associated with a plurality of nodes; receiving a centralized policy configuration associated with at least one control policy to be applied based on a set of match conditions; identifying a one or more nodes from the plurality of nodes that satisfy, or that are associated with one or more tunnels that satisfy, the set of match conditions; and applying the at least one control policy to the one or more nodes that satisfy, or to the one or more tunnels that satisfy, the set of match conditions, wherein the at least one control policy is configured to override at least one locally-configured bidirectional forwarding detection (BFD) timer; and/or set a maximum number of tunnels for provisioning at the identified one or more nodes.