Abstract: A method, system, and/or computer program product ensures regulatory compliance during application migration to cloud-based containers. In response to receiving a message directing an application to be migrated to a container cloud, the application is matched to multiple containers described in a container registry, where each container is matched to a service that provides a server. A regulatory rule by which at least one of the server, the application, and requisite containers are governed is identified. In response to detecting a change to at least one of the server, the application, and the requisite containers so that there is noncompliance with a regulatory rule, a chain of compliance services is automatically recomposed using an artificial intelligence planning technology.

Abstract: Input data are received from a source environment comprising a plurality of servers and one or more applications running on at least one of the servers. One or more patterns are discovered from the received data comprising information regarding the plurality of servers running applications that collectively perform a service. The patterns are analyzed to learn a recurring pattern. A security policy is designed for the recurring pattern. The recurring pattern and the security policy designed for the recurring pattern is stored in a database.

Abstract: Network routing and load balancing in a software design network (SDN)-enabled computing environment may be provided. Input data discovered from a source computing environment is received, wherein one or more of components of the source computing environment are to be migrated to a target computing environment, the input data comprising at least source configuration information and utilization information. Target compute resources, network design and system management design may be determined based on the input data, and a new network configuration generated as output. Based on these design decisions, the steady-state network management using SDN is proposed. The new network configuration may be transmitted to an SDN controller associated with the target computing environment for storing as flow table rules. The SDN controller pushes the flow table rules to one or more routing switches, the flow table rules for performing the network routing and the load balancing.

Abstract: Input data are received from a source environment comprising a plurality of servers and one or more applications running on at least one of the servers. One or more patterns are discovered from the received data comprising information regarding the plurality of servers running applications that collectively perform a service. The patterns are analyzed to learn a recurring pattern. A security policy is designed for the recurring pattern. The recurring pattern and the security policy designed for the recurring pattern is stored in a database.

Abstract: A method and a system may automatically compute optimized target resources and identify configurations given discovered source properties and dependencies of machines, while prioritizing performance in the target environment. An algorithm and/or tools for programmatically identifying and locating business application instances in an infrastructure, based on weighted similarity metric may be also provided.

Abstract: Network routing and load balancing in a software design network (SDN)-enabled computing environment may be provided. Input data discovered from a source computing environment is received, wherein one or more of components of the source computing environment are to be migrated to a target computing environment, the input data comprising at least source configuration information and utilization information. Target compute resources, network design and system management design may be determined based on the input data, and a new network configuration generated as output. Based on these design decisions, the steady-state network management using SDN is proposed. The new network configuration may be transmitted to an SDN controller associated with the target computing environment for storing as flow table rules. The SDN controller pushes the flow table rules to one or more routing switches, the flow table rules for performing the network routing and the load balancing.

Abstract: A method, system, and/or computer program product ensures regulatory compliance during application migration to cloud-based containers. In response to receiving a message directing an application to be migrated to a container cloud, the application is matched to multiple containers described in a container registry, where each container is matched to a service that provides a server. A regulatory rule by which at least one of the server, the application, and requisite containers are governed is identified. In response to detecting a change to at least one of the server, the application, and the requisite containers so that there is noncompliance with a regulatory rule, a chain of compliance services is automatically recomposed using an artificial intelligence planning technology.

Abstract: A method, a computer program product, and a computer system for automatically migrating servers into an environment of multiple firewalls. A computer creates a graph representing the servers and connectivity, based on connectivity strengths and resource requirements. The computer groups the servers into multiple groups by using a graph based partitioning algorithm which considers the connectivity strengths and the resource requirements. The computer creates two adjacency matrices, one for local rules and the other for global rules. The computer adds endpoints to a local adjacency list, in response to determining that the endpoints are in a respective one of the multiple groups. The computer adds endpoints to a global adjacency list, in response to determining that the endpoints are not in respective one of the multiple groups. The computer converts the adjacency lists to firewall rules for the respective one of the multiple groups.

Abstract: A method, a computer program product, and a computer system for automatically migrating servers into an environment of multiple firewalls. A computer creates a graph representing the servers and connectivity, based on connectivity strengths and resource requirements. The computer groups the servers into multiple groups by using a graph based partitioning algorithm which considers the connectivity strengths and the resource requirements. The computer creates two adjacency matrices, one for local rules and the other for global rules. The computer adds endpoints to a local adjacency list, in response to determining that the endpoints are in a respective one of the multiple groups. The computer adds endpoints to a global adjacency list, in response to determining that the endpoints are not in respective one of the multiple groups. The computer converts the adjacency lists to firewall rules for the respective one of the multiple groups.

Abstract: A method and a system may automatically compute optimized target resources and identify configurations given discovered source properties and dependencies of machines, while prioritizing performance in the target environment. An algorithm and/or tools for programmatically identifying and locating business application instances in an infrastructure, based on weighted similarity metric may be also provided.