Abstract: Some embodiments provide a method that generates (i) a node profile of a worker node in a workload cluster for deploying a first network function and (ii) a host profile of a virtual machine that implements the workload cluster and a management cluster that manages the workload cluster. The method updates a configuration map of the worker node based on the node profile. The method uses a node configuration operator in a remote data center to configure the worker node based on the configuration map. The method uses a virtual machine configuration operator in the remote data center to configure one or more nodes of the management cluster based on the host profile.

Abstract: Some embodiments provide a method that generating a host profile for deploying a first network function. the method uses a virtual machine configuration operator in a remote data center to configure one or more virtual machines implementing a workload cluster to perform the first network function based on the host profile. The method uses the virtual machine configuration operator to configure one or more virtual machines implementing a management cluster based on the host profile. The workload cluster is managed by the management cluster.

Abstract: The current document is directed to methods and subsystems that instantiate and manage mobile-network computational infrastructure. The currently disclosed improved mobile-network-computational-infrastructure orchestration system employs several layers of containerized-application orchestration and management systems. For increased efficiency and security, mobile-network-specific operators are added to the containerized-application orchestration layers in order to extend the functionalities of the containerized-application orchestration layers and move virtualization-layer dependencies from the mobile-network-computational-infrastructure orchestration system down into the containerized-application orchestration layers.

Abstract: The disclosure provides an approach for selecting a path to use in transferring a virtual computing instance such as a virtual machine (VM), across data centers. In one embodiment, throughput and throttling information are sampled (e.g., per second) when VMs are transferred from a source data center to a destination data center, and the sampled information is used to construct histograms that provide performance profiles of the VM transfers. Such histogram information across a number of VM transfers can then be mined to determine trends. In turn, trends determined from historical histogram information may be extrapolated into the future to predict performance of a subsequent VM transfer operation and to select a path and/or destination storage and host pair to use for the VM transfer operation.

Abstract: The disclosure provides an approach for managing and diagnosing middleboxes in a cloud computing system. In one embodiment, a network operations center, that is located remote to a virtualized cloud computing system and communicates with the cloud computing system via a wide area network, controls network middleboxes in the cloud computing system through a secure routing module inside a gateway of the cloud computing system. The secure routing module is configured to receive, from an authenticated management application and via a secure communication channel, packets intended for managing network middleboxes. In turn, the secure routing module establishes secure communication channels with the target middleboxes, translates the identified packets to protocols and/or application programming interfaces (APIs) of the target middleboxes, and transmits the translated packets to the target middleboxes.

Abstract: Techniques for stateful connection optimization over stretched networks are disclosed. In one embodiment, hypervisor filtering modules in a cloud computing system are configured to modify packets sent by virtual computing instances (e.g., virtual machines (VMs)) in the cloud to local destinations in the cloud such that those packets have the destination Media Access Control (MAC) address of a local router that is also in the cloud. Doing so prevents tromboning traffic flows in which packets sent by virtual computing instances in the cloud to location destinations are routed to a stretched network's default gateway that is not in the cloud.

Abstract: The disclosure provides an approach for selecting a path to use in transferring a virtual computing instance such as a virtual machine (VM), across data centers. In one embodiment, throughput and throttling information are sampled (e.g., per second) when VMs are transferred from a source data center to a destination data center, and the sampled information is used to construct histograms that provide performance profiles of the VM transfers. Such histogram information across a number of VM transfers can then be mined to determine trends. In turn, trends determined from historical histogram information may be extrapolated into the future to predict performance of a subsequent VM transfer operation and to select a path and/or destination storage and host pair to use for the VM transfer operation.

Abstract: The disclosure provides an approach for selecting a path to use in transferring a virtual computing instance such as a virtual machine (VM), across data centers. In one embodiment, throughput and throttling information are sampled (e.g., per second) when VMs are transferred from a source data center to a destination data center, and the sampled information is used to construct histograms that provide performance profiles of the VM transfers. Such histogram information across a number of VM transfers can then be mined to determine trends. In turn, trends determined from historical histogram information may be extrapolated into the future to predict performance of a subsequent VM transfer operation and to select a path and/or destination storage and host pair to use for the VM transfer operation.

Abstract: The disclosure provides an approach for selecting a path to use in transferring a virtual computing instance such as a virtual machine (VM), across data centers. In one embodiment, throughput and throttling information are sampled (e.g., per second) when VMs are transferred from a source data center to a destination data center, and the sampled information is used to construct histograms that provide performance profiles of the VM transfers. Such histogram information across a number of VM transfers can then be mined to determine trends. In turn, trends determined from historical histogram information may be extrapolated into the future to predict performance of a subsequent VM transfer operation and to select a path and/or destination storage and host pair to use for the VM transfer operation.

Abstract: The disclosure provides an approach for managing and diagnosing middleboxes in a cloud computing system. In one embodiment, a network operations center, that is located remote to a virtualized cloud computing system and communicates with the cloud computing system via a wide area network, controls network middleboxes in the cloud computing system through a secure routing module inside a gateway of the cloud computing system. The secure routing module is configured to receive, from an authenticated management application and via a secure communication channel, packets intended for managing network middleboxes. In turn, the secure routing module establishes secure communication channels with the target middleboxes, translates the identified packets to protocols and/or application programming interfaces (APIs) of the target middleboxes, and transmits the translated packets to the target middleboxes.

Abstract: Techniques for stateful connection optimization over stretched networks are disclosed. In one embodiment, hypervisor filtering modules in a cloud computing system are configured to modify packets sent by virtual computing instances (e.g., virtual machines (VMs)) in the cloud to local destinations in the cloud such that those packets have the destination Media Access Control (MAC) address of a local router that is also in the cloud. Doing so prevents tromboning traffic flows in which packets sent by virtual computing instances in the cloud to location destinations are routed to a stretched network's default gateway that is not in the cloud.