Abstract: Cloud-based monitoring of hardware components in a fleet of storage systems, including: collecting, for a plurality of hardware components that are included in a physical storage system, information describing the operation each hardware component, wherein information is collected for the hardware components of multiple physical storage systems; predicting, based on the information describing the operation each hardware component and historical information describing the operation of one or more other hardware components, the expected performance of each hardware component; and modifying, based on the expected performance of each hardware component, the utilization of at least one or more of the physical storage systems in the fleet.

Abstract: A container recovery using volumes comprising container images may be performed by a method comprising: determining, by a recovery process and based on node data, to recover a container operating on a first node onto a second node, where a container image is associated with the container; determining, by the recovery process and based on the container image, volume data indicative of a volume comprising the container image; and initiating, by the recovery process and based on the volume data, recovery of the container from the first node onto the second node.

Abstract: A node of a container system is made immutable to containers (e.g., to applications operating in the containers) running on the node. For example, the node may be made immutable by performing a method comprising: mounting, by a container runtime operating on a node within a container system, a volume comprising a container image, wherein the node comprises storage resources; creating, on the node and based on access to the volume, an instance of a container associated with the container image; and mapping, with respect to the container, accesses to the storage resources to one or more volumes stored remotely from the node, where the storage resources on the node are immutable to the container based on the mapping the accesses to the storage resources to the one or more volumes.

Abstract: A storage system, associated with a container system, may be configured to perform a method that includes: providing, by the storage system to a container operating within a container system, one or more storage services; determining, by the storage system, an interruption to the one or more storage services; and providing, based on the interruption and from the storage system to a container orchestrator for the container system, an alert associated with the container.

Abstract: A storage system, associated with a container system, may be configured to perform a method that includes: providing, by a storage system, storage services to a container system; determining, by the storage system and based on the providing the storage services to the container system, a potential security threat; and performing, by the storage system, a remedial action based on the potential security threat.

Abstract: Cloud-based monitoring of hardware components in a fleet of storage systems, including: collecting, for a plurality of hardware components that are included in a physical storage system, information describing the operation each hardware component, wherein information is collected for the hardware components of multiple physical storage systems; predicting, based on the information describing the operation each hardware component and historical information describing the operation of one or more other hardware components, the expected performance of each hardware component; and modifying, based on the expected performance of each hardware component, the utilization of at least one or more of the physical storage systems in the fleet.

Abstract: A method and system for controlling network traffic with different tags within the same connection by applying policies for each tag are disclosed. A method is disclosed in which incoming traffic is received. A traffic class is assigned to the traffic class. Outgoing traffic is controlled based on the assigned policy for the incoming traffic.

Abstract: Methods, apparatuses and systems facilitating enhanced classification of network traffic that extends beyond analysis of explicitly presented packet attributes and holistically analyzes data flows, and in some implementations, related data flows against known application behavior patterns to classify the data flows. Implementations of the present invention facilitate the classification of encrypted or compressed network traffic, or where the higher layer information in the data flows are formatted according to a non-public or proprietary protocol.

Abstract: Methods, apparatuses and systems directed to an automatic network traffic discovery and classification mechanism that includes dynamically adjusted traffic discovery thresholds. In one implementation, the dynamic discovery thresholds are adjusted based on analysis of one or more operational parameters associated with network traffic discovery, and/or network traffic characteristics. The present invention in one implementation can be configured to dynamically adjust one or more thresholds or range limits that affect the behavior of the automatic traffic classification mechanism, such as the rate at which new traffic classes are added to a traffic classification database. One implementation of the present invention minimizes the user intervention often required with the use of static traffic discovery thresholds.

Abstract: A method and system for controlling network traffic with different tags within the same connection by applying policies for each tag are disclosed. A method is disclosed in which incoming traffic is received. A traffic class is assigned to the incoming traffic. A policy is assigned to the incoming traffic based on the assigned traffic class. Outgoing traffic is controlled based on the assigned policy for the incoming traffic.