Abstract: Techniques are disclosed for implementing a dynamically reconfigurable network lattice within a distributed computing system. A computing device may determine a combined configuration that includes a union of at least a subset of cloud infrastructure component topologies. The computing device may then provide instructions for implementing a physical layer characterized by the combined configuration. The computing device may then determine a subset configuration corresponding to a cloud infrastructure component topology of the subset of cloud infrastructure component topologies. The computing device may then deploy the subset configuration to the physical layer of the distributed computing system.

Abstract: The present disclosure is directed to devices and techniques for auto-qualifying images on new hardware or infrastructure configurations. The systems and methods include initiating an auto-qualification process for pre-testing one or more images registered within a bare metal system having one or more new infrastructure configurations, discovering all of the one or more images registered for use within the bare metal system, booting each of the one or more registered images into an isolated infrastructure having the one or more new infrastructure configurations, probing instances of each of the one or more registered images booted on the isolated infrastructure to determine stability of each of the one or more registered images on the one or more new infrastructure configurations, and marking each of the one or more registered images as stable or unstable.

Abstract: Techniques are disclosed for bootstrapping a secure data center using a cross domain system and a cluster of edge devices. The cross domain system can be implemented at the secure data center to provide one-way ingress and egress channels for network traffic to the target data center. The cross domain system is connected to a host data center and can receive configuration data from the host data center to configure the cluster of edge devices. The cross domain system can include a cluster configuration node that can request bootstrapping data from the host data center on demand, receive the requested bootstrapping data, and use the bootstrapping data to generate a virtual bootstrapping environment on the cluster of edge devices.

Abstract: Techniques are disclosed for bootstrapping a secure data center using a cross domain system with a proxying sidecar node. The cross domain system can be implemented at the secure data center to provide one-way ingress and egress channels for network traffic to the target data center. The cross domain system is connected to a host data center and can receive configuration data from the host data center to configure the proxying sidecar node. The proxying sidecar node can request bootstrapping data from the host data center on demand, receive the requested bootstrapping data, and send the bootstrapping data to nodes in the secure data center to provision one or more services in the secure data center. The received bootstrapping data passes into the secure data center via the ingress channel.

Abstract: Techniques are disclosed for bootstrapping a secure data center using a cross domain system with a static sidecar node. The cross domain system can be implemented at the secure data center to provide one-way ingress and egress channels for network traffic to the target data center. The cross domain system is connected to a host data center and can receive configuration data from the host data center to configure the static sidecar node. The static sidecar node can receive bootstrapping data from the host data center and store the bootstrapping data. The bootstrapping data can include software resources for provisioning services in the secure data center. The received bootstrapping data passes into the secure data center via the ingress channel.

Abstract: Techniques are described for changing and customizing the functional behavior of a network virtualization device (NVD) using multiple different personalities. The disclosed techniques enable a network device such as an NVD to be configured and reconfigured during its lifetime to support different functional behaviors in an easy and convenient manner. In certain embodiments, this is accomplished through the use of personalities. During the lifetime of an NVD, different personalities may be associated with or bound to an NVD, where the personality bound to a NVD determines the capabilities or functional behavior of the NVD. By changing the personalities bound to an NVD, the functional behavior, characterized by a set of functions that the NVD can perform, can be changed.