Abstract: Various exemplary embodiments relate to a method and related network node including one or more of the following: receiving performance metrics from at least one device within the cloud network; analyzing the performance metrics to generate at least one application requirement, wherein the at least one application requirement indicates a recent performance associated with a resource provisioned for a customer, wherein the resource is supported by a first device within the cloud network; identifying a second device within the cloud network to support the resource based on the at least one application requirement; and migrating the resource from the first device to the second device.

Abstract: Various exemplary embodiments relate to a method and related network node including one or more of the following: receiving, from a requesting device, a request to establish a component of an application; identifying a policy file associated with the application, wherein the policy file defines at least one segment for the application and defines at least one constraint for a first segment of the at least one segment; selecting the first segment for establishment of the component; selecting a location for establishment of the component, wherein the location is selected to be consistent with the at least one constraint; and establishing the component at the selected location.

Abstract: A goal evaluation capability is provided. A resource allocation request of a customer is received. The resource allocation request includes a request for allocation of resources of a distributed system of a provider, a set of customer constraints, and a customer goal. A set of feasible resource allocations for the customer is determined based on the set of customer constraints and on information associated with the distributed system. The set of feasible resource allocations includes a plurality of feasible resource allocations. A provider goal function associated with a provider goal of the provider is determined. A customer goal function associated with the customer goal of the customer is determined. A feasible resource allocation is selected for the customer, from the set of feasible resource allocations, based on the provider goal function and the customer goal function.

Abstract: A client device requests permission from a network access device to access a network associated with the network access device. The client device sends credentials of a user associated with the client device for authenticating with the network access device. The client device receives from the network access device permission to access the network along with a session certificate and an associated key. The session certificate and the key are associated with the credentials of the user. The client device establishes a network session using the network based on receiving the permission. During the network session, the client device establishes a secure communications channel with a website. The client device authenticates the user to the website by sending the session certificate to the website over the secure communications channel. The client device then receives permission from the website to access contents of the website.

Abstract: Various exemplary embodiments relate to a method and related network node including one or more of the following: receiving performance metrics from at least one device within the cloud network; analyzing the performance metrics to generate at least one application requirement, wherein the at least one application requirement indicates a recent performance associated with a resource provisioned for a customer, wherein the resource is supported by a first device within the cloud network; identifying a second device within the cloud network to support the resource based on the at least one application requirement; and migrating the resource from the first device to the second device.

Abstract: Dynamic monitoring of an element in a network is provided by predicting whether a resource threshold crossing, such as load-based level, is likely to be exceeded within a certain time period. If the level is likely to be exceeded shortly, the monitoring rate of the element for a given time period may be increased. Conversely, if the level is unlikely to be exceeded in the near term, the monitoring rate may be decreased.

Abstract: A goal evaluation capability is provided. A resource allocation request of a customer is received. The resource allocation request includes a request for allocation of resources of a distributed system of a provider, a set of customer constraints, and a customer goal. A set of feasible resource allocations for the customer is determined based on the set of customer constraints and on information associated with the distributed system. The set of feasible resource allocations includes a plurality of feasible resource allocations. A provider goal function associated with a provider goal of the provider is determined. A customer goal function associated with the customer goal of the customer is determined. A feasible resource allocation is selected for the customer, from the set of feasible resource allocations, based on the provider goal function and the customer goal function.

Abstract: A client device requests permission from a network access device to access a network associated with the network access device. The client device sends credentials of a user associated with the client device for authenticating with the network access device. The client device receives from the network access device permission to access the network along with a session certificate and an associated key. The session certificate and the key are associated with the credentials of the user. The client device establishes a network session using the network based on receiving the permission. During the network session, the client device establishes a secure communications channel with a website. The client device authenticates the user to the website by sending the session certificate to the website over the secure communications channel. The client device then receives permission from the website to access contents of the website.

Abstract: Various exemplary embodiments relate to a method and related network node including one or more of the following: receiving, from a requesting device, a request to establish a component of an application; identifying a policy file associated with the application, wherein the policy file defines at least one segment for the application and defines at least one constraint for a first segment of the at least one segment; selecting the first segment for establishment of the component; selecting a location for establishment of the component, wherein the location is selected to be consistent with the at least one constraint; and establishing the component at the selected location.