Abstract: A computer-implemented method comprising: receiving, by a first controller device in a first OpenFlow domain, a packet from an originating endpoint in the first OpenFlow domain destined for a destination endpoint in a second OpenFlow domain that is separate from the first OpenFlow domain; outputting, by the first controller device, a broadcast message identifying the destination endpoint to a plurality of respective controller devices associated with separate OpenFlow domains; receiving, by the first controller device, a response to the broadcast message from the destination endpoint via a second controller device associated with the second OpenFlow domain; updating, by the first controller device, a local flow table identifying a flow for transmitting the packet to the destination endpoint based on information included in the response; and transmitting, by the first controller device, the packet towards the destination endpoint based on updating the local flow table.

Abstract: A method and associated systems for a multi-tenant DNS mechanism. A multi-tenant computing environment hosts multiple private overlay networks, each of which comprises one tenant's domain. A multi-tenant DNS agent receives a DNS request to resolve a domain address located within the multi-tenant environment. The agent examines a special record within the request to determine whether the request requires resolving the domain address to an internal tenant-specific network identifier within a tenant's private network. The agent then forwards the request to a DNS server, notifying the server whether the requested address resolution is tenant-specific. If the request is not tenant-specific, the server performs a conventional DNS lookup. But if the request is tenant-specific, the DNS server instead performs a lookup into a tenant-specific local database that allows the domain address to be resolved to an internal address visible only within the multi-tenant computing environment.

Abstract: A method and associated systems for on-demand cellular-network bandwidth allocation in response to continuously changing populations of sensor devices. A sensor device adds itself to or deletes itself from a cluster of sensors. A physical controller that manages the cluster detects this change, identifies a resulting change in the cluster's bandwidth requirements, and stores this information in a local database. When such a sensor-population change satisfies a triggering condition, the controller requests that a network-management component of the cellular network adjust the controller's bandwidth allocation. The network-management component aggregates this and similar requests from all connected controllers in a global database, and when controller bandwidth requirements satisfy a second triggering condition, the component, using a standard API, asks the network-management component to reprovision the component's virtual bandwidth allocation.

Abstract: A method and associated systems for on-demand bandwidth allocation on a mixed-infrastructure network in response to continuously changing populations of sensor devices. Sensors autonomously add themselves to or delete themselves from sensor clusters available to the network. A physical cluster controller detects each change, identifies resulting changes in a cluster's bandwidth requirements, and stores this information in a local database. If a sensor-population change satisfies a triggering condition, the controller requests that a network-management component of the network adjust the controller's bandwidth allocation. The network-management component aggregates this and similar requests from all connected controllers in a global database, and when controller bandwidth requirements satisfy a second triggering condition, the component, using a standard API, asks the network-management component to reprovision the component's virtual bandwidth allocation.

Abstract: A first information comprising an identification of an encryption algorithm supported by a first component from the first component of a software defined network (SDN) is received at a controller of the SDN. A set of policies and a set of encryption algorithms are sent to the first component. A policy determines a cryptographic operation applicable to a path in the SDN between the first component and a second component of the SDN. The first component comprises an originating point of the path and the second component comprises a destination point of the path.

Abstract: A method and associated systems for on-demand bandwidth allocation on a mixed-infrastructure network in response to continuously changing populations of sensor devices. Sensors autonomously add themselves to or delete themselves from sensor clusters available to the network. A physical cluster controller detects each change, identifies resulting changes in a cluster's bandwidth requirements, and stores this information in a local database. If a sensor-population change satisfies a triggering condition, the controller requests that a network-management component of the network adjust the controller's bandwidth allocation. The network-management component aggregates this and similar requests from all connected controllers in a global database, and when controller bandwidth requirements satisfy a second triggering condition, the component, using a standard API, asks the network-management component to reprovision the component's virtual bandwidth allocation.

Abstract: A method and associated systems for on-demand cellular-network bandwidth allocation in response to continuously changing populations of sensor devices. A sensor device adds itself to or deletes itself from a cluster of sensors. A physical controller that manages the cluster detects this change, identifies a resulting change in the cluster's bandwidth requirements, and stores this information in a local database. When such a sensor-population change satisfies a triggering condition, the controller requests that a network-management component of the cellular network adjust the controller's bandwidth allocation. The network-management component aggregates this and similar requests from all connected controllers in a global database, and when controller bandwidth requirements satisfy a second triggering condition, the component, using a standard API, asks the network-management component to reprovision the component's virtual bandwidth allocation.

Abstract: A method and associated systems for a multi-tenant DNS mechanism. A multi-tenant computing environment hosts multiple private overlay networks, each of which comprises one tenant's domain. A multi-tenant DNS agent receives a DNS request to resolve a domain address located within the multi-tenant environment. The agent examines a special record within the request to determine whether the request requires resolving the domain address to an internal tenant-specific network identifier within a tenant's private network. The agent then forwards the request to a DNS server, notifying the server whether the requested address resolution is tenant-specific. If the request is not tenant-specific, the server performs a conventional DNS lookup. But if the request is tenant-specific, the DNS server instead performs a lookup into a tenant-specific local database that allows the domain address to be resolved to an internal address visible only within the multi-tenant computing environment.

Abstract: A computer-implemented method comprising: receiving, by a first controller device in a first OpenFlow domain, a packet from an originating endpoint in the first OpenFlow domain destined for a destination endpoint in a second OpenFlow domain that is separate from the first OpenFlow domain; outputting, by the first controller device, a broadcast message identifying the destination endpoint to a plurality of respective controller devices associated with separate OpenFlow domains; receiving, by the first controller device, a response to the broadcast message from the destination endpoint via a second controller device associated with the second OpenFlow domain; updating, by the first controller device, a local flow table identifying a flow for transmitting the packet to the destination endpoint based on information included in the response; and transmitting, by the first controller device, the packet towards the destination endpoint based on updating the local flow table.

Abstract: A method and associated systems for on-demand Internet of Things bandwidth allocation in response to changing sensor populations. An IOT sensor device adds itself to or deletes itself from a cluster of IOT sensors. A physical IOT controller that manages the cluster detects this change, identifies a resulting change in the cluster's bandwidth requirements, and stores this information in a local database. When such a sensor-population change satisfies a triggering condition, the controller requests that a cloud-based application server adjust the controller's bandwidth allocation. The server aggregates this and similar requests from all connected controllers in a global database, and when controller bandwidth requirements satisfy a second triggering condition, the server, using a standard API, asks the cloud-management platform to reprovision the server's virtual bandwidth allocation.

Abstract: A computer-implemented method comprising: receiving, by a first controller device in a first OpenFlow domain, a packet from an originating endpoint in the first OpenFlow domain destined for a destination endpoint in a second OpenFlow domain that is separate from the first OpenFlow domain; outputting, by the first controller device, a broadcast message identifying the destination endpoint to a plurality of respective controller devices associated with separate OpenFlow domains; receiving, by the first controller device, a response to the broadcast message from the destination endpoint via a second controller device associated with the second OpenFlow domain; updating, by the first controller device, a local flow table identifying a flow for transmitting the packet to the destination endpoint based on information included in the response; and transmitting, by the first controller device, the packet towards the destination endpoint based on updating the local flow table.

Abstract: A method and associated systems for a multi-tenant DNS mechanism. A multi-tenant computing environment hosts multiple private overlay networks, each of which comprises one tenant's domain. A multi-tenant DNS agent receives a DNS request to resolve a domain address located within the multi-tenant environment. The agent examines a special record within the request to determine whether the request requires resolving the domain address to an internal tenant-specific network identifier within a tenant's private network. The agent then forwards the request to a DNS server, notifying the server whether the requested address resolution is tenant-specific. If the request is not tenant-specific, the server performs a conventional DNS lookup. But if the request is tenant-specific, the DNS server instead performs a lookup into a tenant-specific local database that allows the domain address to be resolved to an internal address visible only within the multi-tenant computing environment.

Abstract: A method, computer program product and computer system is provided. A processor receives at least one tunnel endpoint load information of a plurality of virtual network tunnel endpoints associated with a first virtual network. A processor receives a request directed to the first virtual network from a requesting virtual machine of a second virtual network. A processor generates a destination network address of a virtual network tunnel endpoint associated with the first virtual network based, at least in part, on the at least one load information of the plurality of virtual network tunnel endpoints. A processor sends the destination network address to the requesting virtual machine.

Abstract: A first information comprising an identification of an encryption algorithm supported by a first component from the first component of a software defined network (SDN) is received at a controller of the SDN. A set of policies and a set of encryption algorithms are sent to the first component. A policy determines a cryptographic operation applicable to a path in the SDN between the first component and a second component of the SDN. The first component comprises an originating point of the path and the second component comprises a destination point of the path.

Abstract: A first information comprising an identification of an encryption algorithm supported by a first component from the first component of a software defined network (SDN) is received at a controller of the SDN. A set of policies and a set of encryption algorithms are sent to the first component. A policy determines a cryptographic operation applicable to a path in the SDN between the first component and a second component of the SDN. The first component comprises an originating point of the path and the second component comprises a destination point of the path.

Abstract: A method and associated systems for on-demand Internet of Things bandwidth allocation in response to changing sensor populations. An IOT sensor device adds itself to or deletes itself from a cluster of IOT sensors. A physical IOT controller that manages the cluster detects this change, identifies a resulting change in the cluster's bandwidth requirements, and stores this information in a local database. When such a sensor-population change satisfies a triggering condition, the controller requests that a cloud-based application server adjust the controller's bandwidth allocation. The server aggregates this and similar requests from all connected controllers in a global database, and when controller bandwidth requirements satisfy a second triggering condition, the server, using a standard API, asks the cloud-management platform to reprovision the server's virtual bandwidth allocation.

Abstract: Embodiments of the present invention provide methods, computer program products, and systems for generating a shortest data path for data packets. Embodiments of the present invention can be used to exclude switches at or near their maximum capacity of flow entries from the shortest data path calculation. Embodiments of the present invention can be used to reduce the “lag time” users can experience while waiting for data packets to be forwarded through different switches.

Abstract: A method and associated systems for on-demand Internet of Things bandwidth allocation in response to changing sensor populations. An IOT sensor device adds itself to or deletes itself from a cluster of IOT sensors. A physical IOT controller that manages the cluster detects this change, identifies a resulting change in the cluster's bandwidth requirements, and stores this information in a local database. When such a sensor-population change satisfies a triggering condition, the controller requests that a cloud-based application server adjust the controller's bandwidth allocation. The server aggregates this and similar requests from all connected controllers in a global database, and when controller bandwidth requirements satisfy a second triggering condition, the server, using a standard API, asks the cloud-management platform to reprovision the server's virtual bandwidth allocation.

Abstract: A method and associated systems for on-demand Internet of Things bandwidth allocation in response to changing sensor populations. An IOT sensor device adds itself to or deletes itself from a cluster of IOT sensors. A physical IOT controller that manages the cluster detects this change, identifies a resulting change in the duster's bandwidth requirements, and stores this information in a local database. When such a sensor-population change satisfies a triggering condition, the controller requests that a cloud-based application server adjust the controller's bandwidth allocation. The server aggregates this and similar requests from all connected controllers in a global database, and when controller bandwidth requirements satisfy a second triggering condition, the server, using a standard API, asks the cloud-management platform to reprovision the server's virtual bandwidth allocation.

Abstract: Auditing networking devices is provided. A first traceroute is initiated from a first computing device to a second computing device. The first traceroute identifies at least one networking device along a data path from the first computing device to the second computing device. The first computing device is caused to send a first resource discovery packet to the second computing device. The first resource discovery packet includes a value matching a reserved multicast MAC address. Information describing one or more networking devices is compiled. The information is based, at least in part, on replies generated by one or more networking devices that received a resource discovery packet. One or more networking devices described by the information from the data path is excluded responsive to receiving a request.