Abstract: Provided are a computer program product, system, and method for using symbolic execution to validate a hardware configuration with a reference software implementation of processing rules. Symbolic execution is performed of a software model comprising executable code defining logic of a hardware pipeline to produce first symbolic output. Symbolic execution is performed of a reference software implementation of processing rules implemented in the hardware pipeline to produce second symbolic output. The first symbolic output and the second symbolic are compared output to determine a discrepancy between the first and the second symbolic outputs. The discrepancy is reported including report information on a cause of the discrepancy.

Abstract: A computer-implemented method for distributing packets for asymmetrical traffic by a network interface card (NIC). The computer-implemented method includes obtaining information of an incoming packet incoming from a source endpoint behind a stateful service and accessing a destination endpoint using a network address translation (NAT) service, hashing the information to calculate queue identification for the packet to direct the packet to the queue associated therewith, executing a NAT on an outgoing packet associated with the incoming packet to allow for retrieval of the queue identification from a header of the outgoing packet, sending the outgoing packet to the destination endpoint, which is responsive with a return packet, stamping the queue identification to the return packet upon the return packet being transmitted back from the destination endpoint and the queue identification being retrieved and instantiating an RSS override operation to redirect the return packet to the queue on the response.

Abstract: According to an aspect, a network interface card having a processor, a set of resources, and a plurality of virtual functions is provided. Each virtual function of the network interface card is configured to provide network access to a workload. The processor of the network interface card is configured to allocate the set of resources among the plurality of virtual functions, and wherein the allocation of the set of resources is non-uniform across the plurality of virtual functions.

Abstract: A method, system and computer program product, the method comprising: in response to receiving a packet from a stream of packets transmitted to a computing platform, determining, based on a meta-data of the packet, whether to capture the packet or avoid capturing thereof, said determining comprising: subject to the meta-data indicating that a sequence number of the packet is within a first range or within a second range, wherein a distance between an end of the first range and a beginning of the second range is at least of a predetermined size, wherein a distance, through a wraparound, between an end of the second range and a beginning of the first range is at least of the predetermined size, thereby a wraparound situation is identifiable within the stream of packets; and in response to determining to capture the packet: capturing the packet; and transmitting the packet to analysis.

Abstract: A method, system and computer program product, the method comprising: in response to receiving a packet from a stream of packets transmitted to a computing platform, determining, based on a meta-data of the packet, whether to capture the packet or avoid capturing thereof, said determining comprising: subject to the meta-data indicating that a sequence number of the packet is within a first range or within a second range, wherein a distance between an end of the first range and a beginning of the second range is at least of a predetermined size, wherein a distance, through a wraparound, between an end of the second range and a beginning of the first range is at least of the predetermined size, thereby a wraparound situation is identifiable within the stream of packets; and in response to determining to capture the packet: capturing the packet; and transmitting the packet to analysis.

Abstract: Machines, systems and methods for data transmission in a data communications network are provided. The method comprises receiving a data packet for transmission, the data packet having a first header portion and a second header portion, wherein the first header portion comprises an identifier indicating that any information in the first header portion is not to be used; and determining destination information comprising at least a physical address of a destination in the data communications network to which the data packet is to be transmitted based on information included in the second header portion.

Abstract: Machines, systems and methods for efficient data communication are provided. The method comprises receiving a data packet to be transmitted to a destination node in a overlay-based communications network, wherein the destination information is included in a virtual header that includes a virtual address of the destination node; determining a physical address of the destination node based on the virtual address of the destination node; replacing the virtual header for the received data packet with a physical header that includes the physical address; and transmitting the data packet over the communications network to a destination host based on the physical address included in the physical header.

Abstract: Machines, systems and methods for efficient data communication are provided. The method comprises receiving a data packet to be transmitted to a destination node in a overlay-based communications network, wherein the destination information is included in a virtual header that includes a virtual address of the destination node; determining a physical address of the destination node based on the virtual address of the destination node; replacing the virtual header for the received data packet with a physical header that includes the physical address; and transmitting the data packet over the communications network to a destination host based on the physical address included in the physical header.

Abstract: Systems and methods for migrating a virtual resource from a source host in a source network to a destination host in a destination network are provided. In one embodiment, the method comprises establishing a secure communication connection between a source proxy in the source network and a destination proxy in the destination network; and monitoring migration traffic directed from the source host to the source proxy and forwarding said traffic to the destination proxy which in turn forwards the traffic to the destination host over the secure communication connection between the source proxy and the destination proxy, such that the communication addresses of the source host and the destination host remain guarded from direct access by an entity outside of the source network or the destination network.

Abstract: Machines, systems and methods for data transmission in a data communications network are provided. The method comprises receiving a data packet for transmission, the data packet having a first header portion and a second header portion, wherein the first header portion comprises an identifier indicating that any information in the first header portion is not to be used; and determining destination information comprising at least a physical address of a destination in the data communications network to which the data packet is to be transmitted based on information included in the second header portion.

Abstract: A method for tracking transactions performed on a non-volatile storage medium. The medium consists of a plurality of storage ranges. The method includes assigning respective local counters to the plurality of storage ranges, the local counters having respective local counter values, and storing the local counter values together in a selected region of the non-volatile storage medium. The method further includes updating the respective local counter values stored in the selected region responsively to the transactions performed on the storage ranges to which the local counters are respectively assigned. The method also includes reading and combining the local counter values from the selected region in order to determine a global counter value with respect to the non-volatile storage medium.

Abstract: A method for tracking transactions performed on a non-volatile storage medium. The medium consists of a plurality of storage ranges. The method includes assigning respective local counters to the plurality of storage ranges, the local counters having respective local counter values, and storing the local counter values together in a selected region of the non-volatile storage medium. The method further includes updating the respective local counter values stored in the selected region responsively to the transactions performed on the storage ranges to which the local counters are respectively assigned. The method also includes reading and combining the local counter values from the selected region in order to determine a global counter value with respect to the non-volatile storage medium.