Abstract: Described herein is a system and method for flow state save/restore of a virtual filtering platform. A first instance of a driver manages policy and flow state for ongoing flows between client device(s) and virtual machine(s). The virtual filtering platform is transitioned from the first instance of a driver to a second instance of the driver by serializing the policy and state for the ongoing flows on the first instance of the driver using a one pass algorithm. The serialized policy and state for the ongoing flows can be de-serialized with the ongoing flows re-established and/or reconciled on the second instance of the driver in accordance with the de-serialized policy and state for the plurality of ongoing flows. In some embodiments, a memory management technique can use a single operating system memory allocation call to allocate memory for the transition, with the technique managing utilization of the allocation memory.

Abstract: Disclosed is a pressure regulator, comprising: a first cylindrical chamber; a second cylindrical chamber located concentrically within the first cylindrical chamber and in thermal communication with the first cylindrical chamber; and further comprising at least one of: an internal valve, wherein the internal valve is connected at a first end to the first cylindrical chamber and at a second end to the second cylindrical chamber, wherein the internal valve allows the flow of gas from the second cylindrical chamber to the first cylindrical chamber; and an external gas chamber and an external valve, wherein the external gas chamber is located outside the first cylindrical chamber, wherein the external valve is connected at a first end to the first cylindrical chamber and at a second end to the external gas chamber, wherein the external valve allows the flow of gas from the external gas chamber to the first cylindrical chamber.

Abstract: Systems and methods for handovers with simplified network topology are disclosed. In a first embodiment, a method is disclosed, comprising: at a coordinating gateway during a handover of a mobile device from a first base station to a second base station, receiving a first handover request from the first base station; discarding a first shared security key received in the first handover request; sending a tunnel switching request to a core network node; obtaining precursors for a second shared security key from the core network node in a response to the switching request; sending a second handover request to the second base station with the precursors to calculate the second shared security key for securing a data connection for the mobile device following the handover; deriving the second shared security key from the obtained precursors at the first base station; and deriving the second shared security key from the obtained precursors at the coordinating gateway.

Abstract: Techniques are disclosed for a graphics processing unit (GPU) to process cubic Bezier curves, and render the cubic Bezier curves. In an example, the GPU receives a cubic Bezier curve. For example, a graphics pipeline of the GPU receives a plurality of corner points of a control polygon in the form of a patch primitive, the control polygon representing the cubic Bezier curve. The graphics pipeline tessellates the cubic Bezier curve into multiple quadratic Bezier curves, such that the multiple quadratic Bezier curves approximate the cubic Bezier curve. The number of quadratic Bezier curves generated in such a manner is adaptively based on a zoom level at which the cubic Bezier curve is to be displayed. For example, as and when the zoom level changes, new number of such quadratic Bezier curves are tessellated from the cubic Bezier curve. The quadratic Bezier curves are then rendered for display.

Abstract: In some embodiments, there may be provided a system. The system may be configured to receive web server data indicating a current state of a web server; determine, by a machine learning model and based on the web server data, whether the web server is in a first failure state; generate a first failure state indication for the web server in response to the determination, by the machine learning model, that the web server is in the first failure state; determine, by a forecaster and based on the web server data, whether the web server is in a second failure state; and generate a second failure state indication for the web server in response to the determination, by the forecaster, that the web server is in the second failure state.

Abstract: A method for digital predistortion (DPD) calibration in a wireless communication device is provided that includes transmitting, by transmission circuitry of the wireless communication device, a plurality of pulses, where each pulse corresponds to an amplitude step in a pattern of amplitude steps, where the amplitude steps are separated by silence gaps, receiving each pulse in receiver circuitry of the wireless communication device, generating, by an accumulator component of the wireless communication device, an accumulated sample for each pulse based on a plurality of samples output by the receiver circuitry for the pulse, and computing, by a processor of the wireless communication device, amplitude dependent gain (AM/AM) and amplitude dependent phase shift (AM/PM) values for each accumulated sample.

Abstract: A method for providing a managed networking service for a cloud computing system enables users to consume managed virtualized network functions (VNFs) at edge locations. The method includes registering a plurality of third-party vendors for the managed networking service. The plurality of third-party vendors provide a plurality of VNFs for the managed networking service. The method also includes receiving user input from a user of the cloud computing system. The user input includes a request to deploy the plurality of VNFs at an edge location. The plurality of VNFs can be provided by different third-party vendors through the managed networking service. The method also includes causing the plurality of VNFs to be deployed on an edge device that is located at the edge location. The plurality of VNFs can be represented as logical entities in a database that is utilized by the managed networking service.

Abstract: The techniques described herein enable a private connectivity solution between a virtual network of a service consumer and a virtual network of a service provider in a cloud-based platform. The techniques map a service (e.g., one or more workloads or containers) executing in the virtual network of the service provider into the virtual network of the service consumer. The mapping uses network address translation (NAT) that is performed by the cloud-based infrastructure. As a result of the techniques described herein, a public Internet Protocol (IP) address does not need to be used to establish a connection thereby alleviating privacy and/or security concerns for the virtual networks of the service provider and/or the service consumer that are hosted by the cloud-based platform.

Abstract: A method may include segregating an event stream that includes events associated with a cloud-based application hosted on a first remote resource and a second remote resource. The events may include metrics indicative of a state of the first remote resource and/or the second remote resource. The event stream may be segregated into a first child stream including events associated with the first remote resource and a second child stream including events associated with the second remote resource. The first child stream and/or the second child stream may be analyzed to identify a pattern indicative of a fault at the first remote resource and/or the second remote resource. An alert may be sent to in order to notify a client of the fault at the first remote resource and/or the second remote resource. Related systems and articles of manufacture are also provided.

Abstract: Log data associated with at least one user session in a network environment associated with an original user is received. A logical graph is generated using at least a portion of the received log data. One example of such a logical graph is a privilege change graph that models privilege changes between processes. Another example of such a logical graph is a user login graph that models machines with which the original user interacts. Another example of such a logical graph is a machine-server graph that clusters machines into nodes based on resources executing on the machine. The generated logical graph is used to detect an anomaly.

Abstract: A method for providing stateful proxying is disclosed, comprising: associating a first base station with a first base station identifier at a signaling protocol gateway, and with a first Internet Protocol (IP) address of the signaling protocol gateway; associating a second base station with a second base station identifier at the signaling protocol gateway, and with a second IP address of the signaling protocol gateway; establishing a first signaling protocol connection between a third base station and the first base station via the signaling protocol gateway with the first base station using the first IP address of the signaling protocol gateway; and establishing a signaling protocol connection between the third base station and the second base station with the second base station using the second IP address of the signaling protocol gateway.

Abstract: Techniques are disclosed for a graphics processing unit (GPU) to process cubic Bezier curves, and render the cubic Bezier curves. In an example, the GPU receives a cubic Bezier curve. For example, a graphics pipeline of the GPU receives a plurality of corner points of a control polygon in the form of a patch primitive, the control polygon representing the cubic Bezier curve. The graphics pipeline tessellates the cubic Bezier curve into multiple quadratic Bezier curves, such that the multiple quadratic Bezier curves approximate the cubic Bezier curve. The number of quadratic Bezier curves generated in such a manner is adaptively based on a zoom level at which the cubic Bezier curve is to be displayed. For example, as and when the zoom level changes, new number of such quadratic Bezier curves are tessellated from the cubic Bezier curve. The quadratic Bezier curves are then rendered for display.

Abstract: A computer-implemented method is provided that includes receiving, from a first client device associated with a managed network, a request for a record from a plurality of records that relate to the managed network. A depiction of a first graphical user interface that visually represents part of the record is sent to the first device and a representation of a selected portion of the record, that includes text from the part of the record that was visually represented, is received from the first device. A request for the summary of the record is then received from a second client device associated with the managed network and a depiction of a second graphical user interface that visually represents the summary of the record is transmitted to the second device. The depiction of the second graphical user interface is representative of at least the selected portion.

Abstract: The present disclosure relates techniques for coordinating and synchronizing client-facing support services with the activities and responses from one or more technical teams assigned to address a client issue. In certain implementations, this may allow an agent or customer approach to use a single reference identifier (such as a case or matter number) to access information or updates from technical teams that do not typically employ such a number for their own tracking purposes. In this manner, relevant information to a client issue may be accessed from all involved technical teams at the agent level as well as allowing the technical teams themselves to readily see activity by other teams.

Abstract: A method for digital predistortion (DPD) calibration in a wireless communication device is provided that includes transmitting, by transmission circuitry of the wireless communication device, a plurality of pulses, where each pulse corresponds to an amplitude step in a pattern of amplitude steps, where the amplitude steps are separated by silence gaps, receiving each pulse in receiver circuitry of the wireless communication device, generating, by an accumulator component of the wireless communication device, an accumulated sample for each pulse based on a plurality of samples output by the receiver circuitry for the pulse, and computing, by a processor of the wireless communication device, amplitude dependent gain (AM/AM) and amplitude dependent phase shift (AM/PM) values for each accumulated sample.

Abstract: Certain embodiments involve efficiently generating and/or modifying an outline of electronic text. For example, a system obtains data indicating a glyph identifier associated with a first glyph of a plurality of glyphs displayed via a graphical user interface. The system retrieves a first outline of the first glyph from a cache using the glyph identifier and determines a transformation matrix associated with the first outline of the first glyph. The system generates first base art data for the first glyph, the first base art data including the first outline of the first glyph and the transformation matrix. The system converts the first glyph into the first outline based at least in part on the first base art data and then displays the first outline via the graphical user interface.

Abstract: Techniques for allowing access to shared cloud resource using private network addresses are disclosed herein. In one embodiment, a connection packet representing a connection request to a shared cloud resource in the cloud computing system can be intercepted. In response, the connection packet can be encapsulated with data representing one or more of a VNET ID, a VNET source address, or a VNET destination address of a virtual network from which the connection packet is received. The encapsulated connection packet can then be forwarded to the shared cloud resource while retaining the data representing one or more of the VNET ID, the VNET source address, or the VNET destination address for access control at the shared cloud resource.

Abstract: In some embodiments, there may be provided a system. The system may be configured to receive web server data indicating a current state of a web server; determine, by a machine learning model and based on the web server data, whether the web server is in a first failure state; generate a first failure state indication for the web server in response to the determination, by the machine learning model, that the web server is in the first failure state; determine, by a forecaster and based on the web server data, whether the web server is in a second failure state; and generate a second failure state indication for the web server in response to the determination, by the forecaster, that the web server is in the second failure state.

Abstract: Described herein is a system and method for managing network flow state for ongoing flows (connectionless protocol flows and connection-based protocol flows) between client device(s) and a virtual machine using a flow collection data structure (e.g. hash table) having a predefined maximum quantity of ongoing flows that can be managed. When it is determined that the flow collection data structure is managing greater than an acceptable threshold of connectionless protocol flows, at a dynamically adjustable frequency, flow state for more connectionless protocol flow(s) having an unexpired time-to-live are expired. The frequency can be adjusted based upon a rate at which new flows are being created and/or a rate at which flows are being deleted. Also described herein is a system and method in which, at a particular frequency, only a portion of the flows in the flow collection data structure are evaluated in order to minimize impact on packet processing.

Abstract: Log data associated with an environment that includes containers is received. An example of such an environment is one managed by Kubernetes. A logical graph is generated using at least a portion of the received log data. The logical graph is used to detect an anomaly. In response to the anomaly being detected, the anomaly is recorded.