Abstract: A solution for running a software application on a computing machine is provided, which includes registering a capability of a delegation component to execute at least one action on the computing machine, each one defined by at least one characteristic thereof, receiving a request for executing the at least one action from the software application by the delegation component, the request being bound to the delegation component at run-time according to the capability registration thereof, and delegating, by the delegation component, the execution of the at least one action to at least one local component of the computing machine being capable of executing at least part of the at least one action and/or to at least one remote component of at least one remote computing machine being capable of executing at least part of the at least one action according to an availability of the at least one local component.

Abstract: A solution for running a software application on a computing machine is provided, which includes registering a capability of a delegation component to execute at least one action on the computing machine, each one defined by at least one characteristic thereof, receiving a request for executing the at least one action from the software application by the delegation component, the request being bound to the delegation component at run-time according to the capability registration thereof, and delegating, by the delegation component, the execution of the at least one action to at least one local component of the computing machine being capable of executing at least part of the at least one action and/or to at least one remote component of at least one remote computing machine being capable of executing at least part of the at least one action according to an availability of the at least one local component.

Abstract: A solution for running a software application on a computing machine is provided, which includes registering a capability of a delegation component to execute at least one action on the computing machine, each one defined by at least one characteristic thereof, receiving a request for executing the at least one action from the software application by the delegation component, the request being bound to the delegation component at run-time according to the capability registration thereof, and delegating, by the delegation component, the execution of the at least one action to at least one local component of the computing machine being capable of executing at least part of the at least one action and/or to at least one remote component of at least one remote computing machine being capable of executing at least part of the at least one action according to an availability of the at least one local component.

Abstract: A method (300;400) and system (100) for transmitting information across a firewall (130b) between multiple endpoints (120) and gateways (135), in a resource management environment (such as the TME) having characteristics that are firewall-incompatible. A gateway proxy (125g) and an endpoint proxy (125e) are associated with the endpoints and the gateways, respectively. The two proxies are connected to each other by means of a pass through communication tunnel crossing the firewall, which tunnel is secured by mutual authentication of the gateway proxy and the endpoint proxy at its ends. Each endpoint and each gateway is tricked into communication only with the respective proxy. Particularly, a listening port is allocated on the endpoint proxy on behalf of each endpoint, so that the corresponding gateway will open a connection back to the endpoint proxy on the listening port for transmitting any packet to the endpoint.

Abstract: A mechanism provides a layered communication stack. A connection manager manages the actual transfer of data through a single point-to-point connection crossing a respective firewall. A sessions manager multiplexes multiple sessions over the connection. A routing manager exploits the sessions manager for building a routing table dynamically. A routed sessions manager implements routed sessions between two applications at opposite ends of the system; the routed sessions manager exploits the sessions manager to let the data navigate through the firewalls, and it exploits the routing manager to address the data correctly from source to destination.

Abstract: In an autonomic management method for self-configuring a subject entity in a data processing system, the subject entity retrieves, from a set of rules published by an authority entity, one or more rules corresponding at least one category of the subject entity. Each rule defines a desired state for a category, and at least one retrieved rule includes at least one formal parameter defining a correlation with at least one further category. For each retrieved rule, the subject entity resolves each formal parameter included in the retrieved rule by associating each further category specified in the formal parameter with at least one further subject entity belonging to the further category. The subject entity also applies the retrieved rule to configure the subject entity according to the desired state specified in the retrieved rule.

Abstract: A mechanism provides a layered communication stack. A connection manager manages the actual transfer of data through a single point-to-point connection crossing a respective firewall. A sessions manager multiplexes multiple sessions over the connection. A routing manager exploits the sessions manager for building a routing table dynamically. A routed sessions manager implements routed sessions between two applications at opposite ends of the system; the routed sessions manager exploits the sessions manager to let the data navigate through the firewalls, and it exploits the routing manager to address the data correctly from source to destination.

Abstract: A method provides a layered communication stack. A connection manager manages the actual transfer of data through a single point-to-point connection crossing a respective firewall. A sessions manager multiplexes multiple sessions over the connection. A routing manager exploits the sessions manager for building a routing table dynamically. A routed sessions manager implements routed sessions between two applications at opposite ends of the system; the routed sessions manager exploits the sessions manager to let the data navigate through the firewalls, and it exploits the routing manager to address the data correctly from source to destination.

Abstract: A method (300;600) and system for monitoring distributed applications (for example, running on multiple WAS nodes of a cluster) is proposed. The solution of the invention is based on a self-adaptive resource management infrastructure. Particularly, an authority publishes (306-312) a plurality of rules, each one defining a desired target configuration for a category of subjects. A membership controller on each subject is responsible to assign (315-333) the subject to the respective category; a compliance engine then retrieves and applies (336-351) the rules corresponding to the category of the subject. The resource management infrastructure is used to implement a monitoring on-demand of the distributed application. For this purpose, two rules are defined (603-606) for the WAS nodes having the distributed application in a running condition and in a non-running condition, respectively.

Abstract: A method (300;400) and system (100) for transmitting information across a firewall (130b) between multiple endpoints (120) and gateways (135), in a resource management environment (such as the TME) having characteristics that are firewall-incompatible. A gateway proxy (125g) and an endpoint proxy (125e) are associated with the endpoints and the gateways, respectively. The two proxies are connected to each other by means of a pass through communication tunnel crossing the firewall, which tunnel is secured by mutual authentication of the gateway proxy and the endpoint proxy at its ends. Each endpoint and each gateway is tricked into communication only with the respective proxy. Particularly, a listening port is allocated on the endpoint proxy on behalf of each endpoint, so that the corresponding gateway will open a connection back to the endpoint proxy on the listening port for transmitting any packet to the endpoint.

Abstract: A method (300;400) and system (100) for transmitting information across a firewall (130b) between multiple endpoints (120) and gateways (135), in a resource management environment (such as the TME) having characteristics that are firewall-incompatible. A gateway proxy (125g) and an endpoint proxy (125e) are associated with the endpoints and the gateways, respectively. The two proxies are connected to each other by means of a pass through communication tunnel crossing the firewall, which tunnel is secured by mutual authentication of the gateway proxy and the endpoint proxy at its ends. Each endpoint and each gateway is tricked into communication only with the respective proxy. Particularly, a listening port is allocated on the endpoint proxy on behalf of each endpoint, so that the corresponding gateway will open a connection back to the endpoint proxy on the listening port for transmitting any packet to the endpoint.

Abstract: A self-adaptive resource management method and a corresponding system are proposed. In the solution of the invention, an authority (105) publishes multiple rules into a corresponding repository (115). Each rule defines a desired target configuration for a category of subjects (110). Some of the rules can be conditioned to an authorization for their application on the subjects (by means of an optional enabling code). Whenever a generic subject tries to apply a conditioned rule, a test is made to verify whether the application of the rule has been authorized for the subject; if not, the subject is considered not compliant with the rule for a lack of authorization.

Abstract: A self-adaptive resource management method and a corresponding system are proposed. In the solution of the invention, an authority (105) publishes multiple rules into a corresponding repository (115). Each rule defines a desired target configuration for a category of subjects (110). Some of the rules can be conditioned to an authorization for their application on the subjects (by means of an optional enabling code). Whenever a generic subject tries to apply a conditioned rule, a test is made to verify whether the application of the rule has been authorized for the subject; if not, the subject is considered not compliant with the rule for a lack of authorization.

Abstract: A method (300;600) and system for monitoring distributed applications (for example, running on multiple WAS nodes of a cluster) is proposed. The solution of the invention is based on a self-adaptive resource management infrastructure. Particularly, an authority publishes (306-312) a plurality of rules, each one defining a desired target configuration for a category of subjects. A membership controller on each subject is responsible to assign (315-333) the subject to the respective category; a compliance engine then retrieves and applies (336-351) the rules corresponding to the category of the subject. The resource management infrastructure is used to implement a monitoring on-demand of the distributed application. For this purpose, two rules are defined (603-606) for the WAS nodes having the distributed application in a running condition and in a non-running condition, respectively.

Abstract: In an autonomic management method for self-configuring a subject entity in a data processing system, the subject entity retrieves, from a set of rules published by an authority entity, one or more rules corresponding at least one category of the subject entity. Each rule defines a desired state for a category, and at least one retrieved rule includes at least one formal parameter defining a correlation with at least one further category. For each retrieved rule, the subject entity resolves each formal parameter included in the retrieved rule by associating each further category specified in the formal parameter with at least one further subject entity belonging to the further category. The subject entity also applies the retrieved rule to configure the subject entity according to the desired state specified in the retrieved rule.

Abstract: A method and a corresponding system for transmitting information across a plurality of firewalls (particularly in a multi-segmented DMZ) are disclosed. The proposed solution provides a layered communication stack. A connection manager (210) manages the actual transfer of data through a single point-to-point connection crossing a respective firewall. A sessions manager (220) multiplexes multiple sessions over the connection. A routing manager (225) exploits the sessions manager for building a routing table dynamically. A routed sessions manager (235) implements routed sessions between two applications at opposite ends of the system; the routed sessions manager exploits the sessions manager to let the data navigate through the firewalls, and it exploits the routing manager to address the data correctly from source to destination.

Abstract: A method (300;400) and system (100) for transmitting information across a firewall (130b) between multiple endpoints (120) and gateways (135), in a resource management environment (such as the TME) having characteristics that are firewall-incompatible. A gateway proxy (125g) and an endpoint proxy (125e) are associated with the endpoints and the gateways, respectively. The two proxies are connected to each other by means of a pass through communication tunnel crossing the firewall, which tunnel is secured by mutual authentication of the gateway proxy and the endpoint proxy at its ends. Each endpoint and each gateway is tricked into communication only with the respective proxy. Particularly, a listening port is allocated on the endpoint proxy on behalf of each endpoint, so that the corresponding gateway will open a connection back to the endpoint proxy on the listening port for transmitting any packet to the endpoint.