Abstract: According to some aspects, provided are systems and methods that implement end-to-end encryption, and provide implementation configured to secure information during execution of queries on an encrypted data source. Various embodiments include multiple encrypted multi-map data structures and associated encryption schemes configured to securely read, write, and delete information while supporting any one or more of the following features: snapshot security, multiple client support, efficient execution under concurrent operation, and resilience to client failures. In various embodiments, addressable multi-map data structures enable concurrent access, and allow correct operation under polynomial time constraints.

Abstract: According to aspects of the disclosure, there is provided a scalable cloud distributed database system for hosting data of multiple database tenants. In some embodiments, the database may be serverless. The serverless database may be configured to automatically and dynamically match resources to workload demands for tenants of the database. Databases described herein may include replica sets hosting multiple tenants. Tenants may be migrated from one replica set to another replica set based on usage. Usage of tenants may be throttled during migration between replica sets. Tenants with lower usage may be selected for migration between replica sets. During migration, files containing both a document and a history of updates to the document may be migrated. Databases described herein may include multiple storage tiers having different read and/or write speeds.

Abstract: According to some aspects, provided are systems and methods that implement end-to-end encryption, and provide implementation configured to secure information during execution of queries on an encrypted data source. Various embodiments include multiple encrypted multi-map data structures and associated encryption schemes configured to securely read, write, and delete information while supporting any one or more of the following features: snapshot security, multiple client support, efficient execution under concurrent operation, and resilience to client failures. In various embodiments, addressable multi-map data structures enable concurrent access, and allow correct operation under polynomial time constraints.

Abstract: According to some aspects, provided are systems and methods that implement end-to-end encryption, and provide implementation configured to secure information during execution of queries on an encrypted data source. Various embodiments include multiple encrypted multi-map data structures and associated encryption schemes configured to securely read, write, and delete information while supporting any one or more of the following features: snapshot security, multiple client support, efficient execution under concurrent operation, and resilience to client failures. In various embodiments, addressable multi-map data structures enable concurrent access, and allow correct operation under polynomial time constraints.

Abstract: According to some aspects, provided are systems and methods that implement end-to-end encryption, and provide implementation configured to secure information during execution of queries on an encrypted data source. Various embodiments include multiple encrypted multi-map data structures and associated encryption schemes configured to securely read, write, and delete information while supporting any one or more of the following features: snapshot security, multiple client support, efficient execution under concurrent operation, and resilience to client failures. In various embodiments, addressable multi-map data structures enable concurrent access, and allow correct operation under polynomial time constraints.

Abstract: In some embodiments, an auto-index system may be provided to determine one or more candidate indexes to be automatically created in a database system. The auto-index system may determine if one or more criteria associated with creating the one or more candidate indexes are met. In response to determining that the one or more criteria associated with creating the one or more candidate indexes are met, the auto-index system may automatically create the one or more candidate indexes, for example, by an automation agent. The one or more criteria may also be associated with respective performance metrics of the database system.

Abstract: In some embodiments, a database cluster to cluster synchronization system may include multiple replicators coupled to a source database cluster and a destination database cluster, where the source and destination cluster may be shard clusters. Each of the multiple replicators may correspond to a respective subset of the source database cluster and configured to monitor changes of data on the respective subset of the source database cluster and translate the changes of data to one or more database operations to be performed on the destination cluster. The changes of data on the source database may be contained in respective change streams associated with each of the replicators.

Abstract: In some embodiments, a database cluster to cluster synchronization system may include multiple replicators coupled to a source database cluster and a destination database cluster, where the source and destination cluster may be shard clusters. Each of the multiple replicators may correspond to a respective subset of the source database cluster and configured to monitor changes of data on the respective subset of the source database cluster and translate the changes of data to one or more database operations to be performed on the destination cluster. The changes of data on the source database may be contained in respective change streams associated with each of the replicators.

Abstract: In some embodiments, a database cluster to cluster synchronization system may include multiple replicators coupled to a source database cluster and a destination database cluster, where the source and destination cluster may be shard clusters. Each of the multiple replicators may correspond to a respective subset of the source database cluster and configured to monitor changes of data on the respective subset of the source database cluster and translate the changes of data to one or more database operations to be performed on the destination cluster. The changes of data on the source database may be contained in respective change streams associated with each of the replicators.

Abstract: A method is provided for resharding a sharded database sharded according to a first shard key. The method includes: receiving, by a processor an instruction to reshard the sharded database; receiving, at the processor, a new shard key to be used in a resharding process to reshard the sharded database; determining, by the processor, whether a duration of unavailability of the sharded database during the resharding process is less than a predetermined amount of time; and automatically performing, by the processor, the resharding process according to the new shard key to produce a resharded database, if the duration of unavailability is less than the predetermined amount of time. The method may be performed without users noticing a significant interruption to read/write operations from/to the database.

Abstract: In some embodiments, a database cluster to cluster synchronization system may include multiple replicators coupled to a source database cluster and a destination database cluster, where the source and destination cluster may be shard clusters. Each of the multiple replicators may correspond to a respective subset of the source database cluster and configured to monitor changes of data on the respective subset of the source database cluster and translate the changes of data to one or more database operations to be performed on the destination cluster. The changes of data on the source database may be contained in respective change streams associated with each of the replicators.

Abstract: A database system may use asymmetric hardware for analytics nodes. In some embodiments, a database system includes a replica set comprising a plurality of base nodes and at least one analytics node. The analytics nodes may have asymmetric hardware respective to the base nodes. The base nodes may include a primary node and two secondary nodes. The primary node may be configured to accept writes and propagate the writes to secondary nodes and may also propagate writes to analytics nodes. Secondary nodes may replicate writes and accept reads. Analytics nodes may perform data analysis operations. Analytics nodes may have a first instance size different than a second instance size of the base nodes.

Abstract: In some embodiments, a database cluster to cluster synchronization system may include multiple replicators coupled to a source database cluster and a destination database cluster, where the source and destination cluster may be shard clusters. Each of the multiple replicators may correspond to a respective subset of the source database cluster and configured to monitor changes of data on the respective subset of the source database cluster and translate the changes of data to one or more database operations to be performed on the destination cluster. The changes of data on the source database may be contained in respective change streams associated with each of the replicators.

Abstract: According to some aspects, provided are systems and methods that implement end-to-end encryption, and provide implementation configured to secure information during execution of queries on an encrypted data source. Various embodiments include multiple encrypted multi-map data structures and associated encryption schemes configured to securely read, write, and delete information while supporting any one or more of the following features: snapshot security, multiple client support, efficient execution under concurrent operation, and resilience to client failures. In various embodiments, addressable multi-map data structures enable concurrent access, and allow correct operation under polynomial time constraints.

Abstract: According to some aspects, provided are systems and methods that implement end-to-end encryption, and provide implementation configured to secure information during execution of queries on an encrypted data source. Various embodiments include multiple encrypted multi-map data structures and associated encryption schemes configured to securely read, write, and delete information while supporting any one or more of the following features: snapshot security, multiple client support, efficient execution under concurrent operation, and resilience to client failures. In various embodiments, addressable multi-map data structures enable concurrent access, and allow correct operation under polynomial time constraints.

Abstract: According to some aspects, provided are systems and methods that implement end-to-end encryption, and provide implementation configured to secure information during execution of queries on an encrypted data source. Various embodiments include multiple encrypted multi-map data structures and associated encryption schemes configured to securely read, write, and delete information while supporting any one or more of the following features: snapshot security, multiple client support, efficient execution under concurrent operation, and resilience to client failures. In various embodiments, addressable multi-map data structures enable concurrent access, and allow correct operation under polynomial time constraints.

Abstract: According to aspects of the disclosure, there is provided a scalable cloud distributed database system for hosting data of multiple database tenants. In some embodiments, the database may be serverless. The serverless database may be configured to automatically and dynamically match resources to workload demands for tenants of the database. Databases described herein may include replica sets hosting multiple tenants. Tenants may be migrated from one replica set to another replica set based on usage. Usage of tenants may be throttled during migration between replica sets. Tenants with lower usage may be selected for migration between replica sets. During migration, files containing both a document and a history of updates to the document may be migrated. Databases described herein may include multiple storage tiers having different read and/or write speeds.

Abstract: In some embodiments, an auto-index system may be provided to determine one or more candidate indexes to be automatically created in a database system. The auto-index system may determine if one or more criteria associated with creating the one or more candidate indexes are met. In response to determining that the one or more criteria associated with creating the one or more candidate indexes are met, the auto-index system may automatically create the one or more candidate indexes, for example, by an automation agent. The one or more criteria may also be associated with respective performance metrics of the database system.

Abstract: A method is provided for resharding a sharded database sharded according to a first shard key. The method includes: receiving, by a processor an instruction to reshard the sharded database; receiving, at the processor, a new shard key to be used in a resharding process to reshard the sharded database; determining, by the processor, whether a duration of unavailability of the sharded database during the resharding process is less than a predetermined amount of time; and automatically performing, by the processor, the resharding process according to the new shard key to produce a resharded database, if the duration of unavailability is less than the predetermined amount of time. The method may be performed without users noticing a significant interruption to read/write operations from/to the database.

Abstract: Resources hosted in different virtualization platforms may be managed across the different virtualization platform. Requests to perform types of actions with respect to a resource hosted in a type of virtualization platform may be received. Mapping information between types of actions and actions available via interfaces for different types of virtualization platforms may be evaluated to select actions for an interface of the type of virtualization platform that hosts the resource. The selected actions may then be performed via the interface to perform the action with regard to the resource.