Abstract: Methods and apparatus providing a dynamically sized, highly scalable and available server farm are disclosed. A Virtual Server Farm (VSF) is created out of a wide scale computing fabric (“Computing Grid”) which is physically constructed once and then logically divided up into VSFs for various organizations on demand. Each organization retains independent administrative control of a VSF. A VSF is dynamically firewalled within the Computing Grid. A allocation and control of the elements in the VSF is performed by a Control Plane connected to all computing, networking, and storage elements in the computing grid through special control ports. The internal topology of each VSF is under control of the Control Plane. No physical rewiring is necessary in order to construct VSFs in many different configurations, including single-tier Web server or multi-tier Web-server, application server, database server configurations. Each tier of a multi-tier VSF (e.g.

Abstract: A resource manager is operable to control the allocation of a resource to competing computing processes. The resource manager responds to a request from a requesting process for allocation of the resource and, when the resource is currently allocated to another process, it provides an indication to the requesting process of the expected time before the resource will become available. The expected time indication can be derived, for example, by requesting information from a process to which the resource is currently allocated, or by heuristic methods, or by a combination of both. In a telecommunications apparatus, the processes can be applications requiring access to a telephony resource, for example a modem. The applications are implemented as objects, in particular beans, in an object oriented environment whereby the resource manager is able to ascertain parameters from the objects.

Abstract: A Virtual Server Farm (VSF) is created out of a wide scale computing fabric (“Computing Grid”) which is physically constructed once and then logically divided up into VSFs for various organizations on demand. Allocation and control of the elements in the VSF is performed by a control plane connected to all computing, networking, and storage elements in the computing grid through special control ports. The control plane is comprised of a control mechanism hierarchy that includes one or more master control process mechanisms communicatively coupled to one or more slave control process mechanisms. The one or more master control process mechanisms instruct the slave control process mechanisms to establish VSFs by selecting subsets of processing and storage resources.

Abstract: A portable apparatus has a base section that includes a blower, and can be configured for heating or evaporative cooling. By attaching a heating attachment, a gas heating apparatus is provided, and there is no open and/or visible flame. The heating attachment can be replaced with an evaporative cooling attachment, so that evaporative cooling can be performed using the same base with the evaporative cooling attachment. A system of switching pulleys and/or belts to change blower speed, as well as a single switch that operates both devices, is also provided. Thus, a portable heating and evaporative cooling apparatus is provided that has a wide range of industrial application, and that overcomes the related art cost of separate heating and evaporative cooling apparatuses.

Abstract: Methods and apparatus providing, controlling and managing a dynamically sized, highly scalable and available server farm are disclosed. A Virtual Server Farm (VSF) is created out of a wide scale computing fabric (“Computing Grid”) which is physically constructed once and then logically divided up into VSFs for various organizations on demand. Each organization retains independent administrative control of a VSF. A VSF is dynamically firewalled within the Computing Grid. Allocation and control of the elements in the VSF is performed by a control plane connected to all computing, networking, and storage elements in the computing grid through special control ports. The internal topology of each VSF is under control of the control plane. No physical rewiring is necessary in order to construct VSFs in many different configurations, including single-tier Web server or multi-tier Web-server, application server, database server configurations. Each tier of a multi-tier VSF (e.g.

Abstract: A telephony control is provided in the form of a relocatable serialized object having an identical route node to a directed graph. The directed graph includes modules performing telephony control functions. By providing modules implementing simple primitive elements of a telephony control, a telephony control of any desired degree of complexity can be created. Also, by providing the telephony control as a relocatable serialized object, it is possible to offer a user a number of different telephony controls at a web server and to enable to user to relocate a copy of that telephony control to the user's telecommunications apparatus for implementing a telephony control, for example, a voicemail system, of any desired degree of complexity, at the user's telecommunications apparatus.

Abstract: A system for automatically encrypting and decrypting data packet sent from a source host to a destination host across a public internetwork. A tunnelling bridge is positioned at each network, and intercepts all packets transmitted to or from its associated network. The tunnelling bridge includes tables indicated pairs of hosts or pairs of networks between which packets should be encrypted. When a packet is transmitted from a first host, the tunnelling bridge of that host's network intercepts the packet, and determines from its header information whether packets from that host that are directed to the specified destination host should be encrypted; or, alternatively, whether packets from the source host's network that are directed to the destination host's network should be encrypted.

Abstract: A telephony control is provided in the form of a relocatable serialised object having an identical route node to a directed graph. The directed graph includes modules performing telephony control functions. By providing modules implementing simple primitive elements of a telephony control, a telephony control of any desired degree of complexity can be created. Also, by providing the telephony control as a relocatable serialised object, it is possible to offer a user a number of different telephony controls at a web server and to enable to user to relocate a copy of that telephony control to the user's telecommunications apparatus for implementing a telephony control, for example, a voicemail system, of any desired degree of complexity, at the user's telecommunications apparatus.

Abstract: A call handling mechanism provides a resource manager for controlling the allocation of functional modules to process a received call. Each of the functional modules can be implemented as a software application, preferably implemented in the form of a bean, such as a Java bean. The resource manager allocates the functional modules in accordance with the priority order. Different types of applications are given priority numbers within different ranges so that, for example, a voice application such as a voicemail application will always precede a facsimile application, which in turn will precede a data application. In this manner, reliable call answering can be provided using third party supplied call handling applications which are pre-allocated priority numbers in an appropriate range for the type of application.

Abstract: A method and apparatus for selectively logically adding storage to a host features dynamically mapping one or more disk volumes to the host using a storage virtualization layer, without affecting an operating system of the host or its configuration. Storage devices participate in storage area networks and are coupled to gateways. A boot port of the host is coupled to a direct-attached storage network that includes a switching fabric. When a host needs storage to participate in a virtual server farm, software elements allocate one or more volumes or concatenated volumes of disk storage, and command the gateways and switches in the storage networks to logically and physically connect the host to the allocated volumes. As a result, the host acquires access to storage without modification to a configuration of the host, and a real-world virtual server farm or data center may be created and deployed substantially instantly.

Abstract: A method and apparatus for defining and deploying a networked computer system features creating and storing a graphical representation using a graphical editor to drag and drop icons representing computing elements and network elements into a workspace, such that a logical configuration of the networked computer system is represented by the graphical representation. A corresponding textual representation of the computer system is automatically created and stored according to a structured markup language. Based on the textual representation, one or more commands are generated for configuring an operable computer system that conforms to the logical configuration. The commands may be directed to one or more devices that are interconnected to one or more computing elements and storage devices, to instruct the devices to logically connect the computing elements and storage devices into the computer system.

Abstract: A communication appliance with a desktop unit and a secondary unit. The desktop unit includes an outer casing, bottom feet, openings in the outer casing for control elements, a plurality of heat-producing electronic components and at least one speaker. The bottom feet extend from a bottom of the outer casing and support the outer casing on a surface such that the bottom of the outer casing is spaced from the surface. The control elements are used for operating the communication appliance. The outer casing includes a plurality of cooling slots for cooling electronic components found in the interior of the communication appliance so that a fan or other external device is not needed.

Abstract: A system for screening data packets transmitted between a network to be protected, such as a private network, and another network, such as a public network. The system includes a dedicated computer with multiple (specifically, three) types of network ports: one connected to each of the private and public networks, and one connected to a proxy network that contains a predetermined number of the hosts and services, some of which may mirror a subset of those found on the private network. The proxy network is isolated from the private network, so it cannot be used as a jumping off point for intruders. Packets received at the screen (either into or out of a host in the private network) are filtered based upon their contents, state information and other criteria, including their source and destination, and actions are taken by the screen depending upon the determination of the filtering phase. The packets may be allowed through, with or without alteration of their data, IP (internet protocol) address, etc.

Abstract: A system for screening data packets transmitted between a network to be protected, such as a private network, and another network, such as a public network. The system includes a dedicated computer with multiple (specifically, three) types of network ports: one connected to each of the private and public networks, and one connected to a proxy network that contains a predetermined number of the hosts and services, some of which may mirror a subset of those found on the private network. The proxy network is isolated from the private network, so it cannot be used as a jumping off point for intruders. Packets received at the screen (either into or out of a host in the private network) are filtered based upon their contents, state information and other criteria, including their source and destination, and actions are taken by the screen depending upon the determination of the filtering phase. The packets may be allowed through, with or without alteration of their data, IP (internet protocol) address, etc.

Abstract: A system for screening data packets transmitted between a network to be protected, such as a private network, and another network, such as a public network. The system includes a dedicated computer with multiple (specifically, three) types of network ports: one connected to each of the private and public networks, and one connected to a proxy network that contains a predetermined number of the hosts and services, some of which may mirror a subset of those found on the private network. The proxy network is isolated from the private network, so it cannot be used as a jumping off point for intruders. Packets received at the screen (either into or out of a host in the private network) are filtered based upon their contents, state information and other criteria, including their source and destination, and actions are taken by the screen depending upon the determination of the filtering phase. The packets may be allowed through, with or without alteration of their data, IP (internet protocol) address, etc.

Abstract: A system for automatically encrypting and decrypting data packet sent from a source host to a destination host across a public internetwork. A tunnelling bridge is positioned at each network, and intercepts all packets transmitted to or from its associated network. The tunnelling bridge includes tables indicated pairs of hosts or pairs of networks between which packets should be encrypted. When a packet is transmitted from a first host, the tunnelling bridge of that host's network intercepts the packet, and determines from its header information whether packets from that host that are directed to the specified destination host should be encrypted; or, alternatively, whether packets from the source host's network that are directed to the destination host's network should be encrypted.