Abstract: Techniques and architecture are described for eliminating double encryption in zero-trust network access authenticated sessions. The techniques include an endpoint client-based proxy of a network receiving, from a browser, a request to access a protected private service. The endpoint client-based proxy pauses access of the browser to the protected private service and establishes a transport layer security (TLS) connection between the endpoint client-based proxy and a zero-trust network access (ZTNA) gateway. The ZTNA gateway determines whether the protected private service uses a secure transport mechanism and establishes either a null cipher encrypted tunnel between at least the endpoint client-based proxy and the ZTNA gateway or a non-null cipher encrypted tunnel between at least the endpoint client-based proxy and the ZTNA gateway. The endpoint client-based proxy resumes access of the browser to the protected private service.

Abstract: Files in a file system are assigned to front-end instances. The files are represented by segment trees. Similarity groups are assigned to back-end instances. The similarity groups include segments at a lower-level of the segment trees. The front-end instances are responsible for operations involving an upper-level of the segment trees. The back-end instances are responsible for operations involving the lower-level of the segment trees. Upon a failure of an instance, an attempt is made to restart the failed instance. If the restart is successful, file and similarity group assignments are retained. If the restart is not successful, file assignments are redistributed to other front-end instances when the failed instance is a front-end instance, and similarity group assignments are redistributed to other back-end instances when the failed instance is a back-end instance.

Abstract: A fencing service receives a cluster message based on a first service's removal from membership in a first node in a cluster, and generates an access key based on a generation identifier in the cluster message. The fencing service sends the access key to a shared storage, thereby enabling the shared storage to create signing keys based on the access key, and which are used to validate signed requests to access resources stored by the shared storage. A second service in a second node in the cluster receives the cluster message, and generates the access key based on the generation identifier. The second service accesses a resource previously accessed by the first service, by generating a signing key based on the access key and a request to access the resource stored by the shared storage, and then sending the request signed by the signing key to the shared storage.

Abstract: A system creates a mapping of a storage intent, defined for a digital asset, to one of the primary storage tiers, in a primary protection storage system, which matches the storage intent. The system receives a request to store a copy of the digital asset and stores the copy with the storage intent in the primary storage tier, based on the mapping of the storage intent to the primary storage tier. Upon receiving a request to replicate the copy of the digital asset, the system creates a mapping of the storage intent to one of the secondary storage tiers, in a secondary protection storage system, which matches the storage intent. The system replicates each copy of the digital asset, which is stored in the primary storage tier, and the storage intent to the secondary storage tier, based on the mapping of the storage intent to the secondary storage tier.

Abstract: Embodiments are described for migrating data and load balancing in a multi-domain network having a clustered network partitioned into a number of separate domains. Each domain contains resources like processors and memory, as well as deduplication and compression services. A single global namespace for the network is presented by combining all of the namespaces in the domains. A multi-domain manager component with an analytics engine facilitates analytics-driven migration of data among nodes in different domains, and a load balancer component monitors environmental operating conditions of each node in the clustered network, detects nodes having operating conditions exceeding defined tolerances, and migrates data and processes from nodes exceeding the defined tolerances to other nodes not exceeding the defined tolerances.

Abstract: A distributed and deduplicating file system that stores backup metadata to object storage is described. A node, in a cluster of nodes, receives backup data associated with a write operation to back up a data file, and identifies metadata associated with deduplicated data by deduplicating the backup data. If the access frequency associated with the metadata is greater than or equal to an access threshold, and the size of the metadata is less than or equal to a storage threshold, the cluster writes the metadata to each of the memory devices corresponding to the nodes in the cluster. If the access frequency associated with the metadata is less than the access threshold, or the size of the metadata is more than the storage threshold, the node writes information which includes the metadata to an object storage that stores data objects for the nodes in the cluster.

Abstract: System creates mapping of storage intent, defined for digital asset, to primary storage tier, of primary storage tiers in primary protection storage system, that matches storage intent. System receives request to store copy of digital asset, and stores the copy with storage intent in primary storage tier, based on mapping of storage intent to primary storage tier. System identifies expanded group of storage tiers comprising primary storage tiers combined with additional storage tier. If additional storage tier matches storage intent more than primary storage tier matches storage intent, which is mapped to primary storage tier, system changes mapping of storage intent to primary storage tier into mapping of storage intent, defined for digital asset, to additional storage tier. System relocates each copy of digital asset, based on mapping of storage intent to primary storage tier, to additional storage tier, based on mapping of storage intent to additional storage tier.

Abstract: This invention relates to compositions and methods for modifying a Plant AT-rich sequence- and Zinc-binding protein 8 (PLATZ8) gene in plants to improve yield traits. The invention further relates to plants and plant parts produced using the methods and compositions of the invention.

Abstract: A system creates a mapping of a storage intent, defined for a digital asset, to one of the primary storage tiers, in a primary protection storage system, which matches the storage intent. The system receives a request to store a copy of the digital asset and stores the copy with the storage intent in the primary storage tier, based on the mapping of the storage intent to the primary storage tier. Upon receiving a request to replicate the copy of the digital asset, the system creates a mapping of the storage intent to one of the secondary storage tiers, in a secondary protection storage system, which matches the storage intent. The system replicates each copy of the digital asset, which is stored in the primary storage tier, and the storage intent to the secondary storage tier, based on the mapping of the storage intent to the secondary storage tier.

Abstract: Mapping information identifies ranges of files, a set of front-end microservices, and assignments of the ranges to the front-end microservices. Each front-end microservice is thereby responsible for a range of files. The files are represented by segment trees and the front-end microservices handle operations involving an upper-level of the segment trees. A file system request on a file is directed to a particular front-end microservice that is responsible for handling a particular range of files within which the file falls according to the mapping information. An indication is received from a container orchestration service that a number of front-end microservices has changed. The mapping information is updated based on the change in the number of front-end microservices.

Abstract: Some embodiments include processing data via an executable file on a monitor to reduce the dimensionality of the data being transmitted over the wireless network. The output of the executable file also encrypts the data before being transmitted wireless to a remote server. The remote server receives the transmitted data and makes likelihood inferences based on the recorded data.

Abstract: Techniques and architecture are described for protecting non-http and TCP/UDP applications in a zero trust network access (ZTNA)/web virtual private network (VPN) environment by establishing a secure communication channel between a native application and an application server providing an application service. More particularly, the present disclosure describes techniques and architecture that leverage the firewall wherein a thin client on a client device enables a client desktop, establishes a secure channel from a native application, e.g., the client desktop, to the firewall, and acts as a proxy.

Abstract: Embodiments are described for a system and method facilitating deduplication in a multi-tier storage system in which a file can have different portions written to different tiers. A process partition the data space of each tier to a number of similarity groups and distributes the similarity groups across file system services in a cluster. The distribution is done in such a way that for a given similarity group ID, the same file system service owns the similarity groups of every tier. This allows for efficient checks for deduplication as it can be done local to a node rather than requiring remote procedure calls.

Abstract: This invention relates to compositions and methods for modifying Brassinosteroid Insensitive-1 (BRI1) genes in plants, optionally to improve yield traits. The invention further relates to plants having increased improved yield traits produced using the methods and compositions of the invention.

Abstract: A multi-rotor radial flux arch stator motor utilizing two or more rotors and one or more stators positioned in between every two adjacent rotors. A plurality of stator windings are wound around the stator cores occupying the space in between the rotors. The stator cores concentrate and direct the flux produced by the stator windings radially to rotors on either side of the stators. The number of stator poles is equal to two times the number of stator windings. The motor design of the invention can be used for both synchronous and asynchronous motor applications. For synchronous applications, a mechanical linkage serves to synchronize the rotors and also transmits torque between rotor shafts if all rotor shafts are not equally loaded. For asynchronous motor applications the motor can be designed without a mechanical linkage between rotors depending on the distribution of the load.

Abstract: This invention relates to compositions and methods for modifying a BRASSINAZOLE-RESISTANT 1 (BZR1) gene in plants to improve yield traits. The invention further relates to plants and plant parts produced using the methods and compositions of the invention.

Abstract: A technique for performing adaptive rate limiting of flow probes is described. The technique includes sending a plurality of flow probes from a first service engine to at least one other service engine. The flow probes are sent at a rate that does not exceed a rate limit. A flow probe of the plurality of flow probes is generated in response to the first service engine receiving a mid-flow packet for a flow that is not recognized by the first service engine. A recipient service engine of the flow probe responds with a success indicator if the recipient service engine recognizes the flow. The technique also includes determining a success rate associated with success indicators received from the at least one other service engine and comparing the success rate with a first threshold. The rate limit is adjusted in response to a comparison result.

Abstract: A security level tagging process to enable a user to associate a security level descriptor with a file, or a namespace directory where files and subdirectories inherit the security level descriptor from a parent directory. A parser can be used to automatically set a security level descriptor based on the contents of the file and/or attributes of files, or an administrator can associate a security level to a storage tier in the file system so that files are placed on the storage tiers with the matching security level as the file security level descriptor. The placement of the file on a storage tier depends on the data security level descriptor of the file and the security level of the storage so that files are placed on tiers where security level associated with the tier is greater than or equal to data security level of the file. Files can be migrated among storage tiers as their security levels may change.

Abstract: Embodiments are described for providing backup resources in a multi-tier network, by providing a plurality of different storage devices, each with different operating characteristics and costs for storage of data assets, and organizing the storage devices into a plurality of tiers based on respective operating characteristics, such as based on performance versus cost parameters. Certain Service Level Agreements (SLAs) dictating storage requirements for each of the data assets to a backup program are provided to the backup system, and a mapper maps each SLA to one or more tiers of the plurality of tiers based on the storage requirements of a respective SLA to the operating characteristics of each tier.

Abstract: Embodiments are described for migrating data and load balancing in a multi-domain network having a clustered network partitioned into a number of separate domains. Each domain contains resources like processors and memory, as well as deduplication and compression services. A single global namespace for the network is presented by combining all of the namespaces in the domains. A multi-domain manager component with an analytics engine facilitates analytics-driven migration of data among nodes in different domains, and a load balancer component monitors environmental operating conditions of each node in the clustered network, detects nodes having operating conditions exceeding defined tolerances, and migrates data and processes from nodes exceeding the defined tolerances to other nodes not exceeding the defined tolerances.