Abstract: A pluggable optical module, including: a body; a coldplate coupled to the body; and a pair of cooling fluid supply and return line quick disconnects coupled to the coldplate and extending from the coldplate and the body. Optionally, the coldplate is integrated into the body. Alternatively, the coldplate is coupled adjacent to an exterior surface of the body using one or more securement mechanisms, and a thermal interface material is disposed between the coldplate and the exterior surface of the body. The body and the coldplate are adapted to be inserted into a host card, circuit pack, or module as an integrated unit, with the pair of cooling fluid supply and return line quick disconnects adapted to fluidly engage a corresponding pair of cooling fluid supply and return line quick disconnects coupled to fluid supply and return manifolds or plenums disposed in the host card, circuit pack, or module.

Abstract: A multi-tenant service platform provides network services, such as content delivery, edge compute, and/or media streaming, on behalf of, or directly for, a given tenant. The service platform offers a policy layer enabling each tenant to specify levels of acceptable performance degradation that the platform may incur so that the platform can use electricity with desirable characteristics to service client requests associated with that tenant. Service nodes in the platform (e.g., edge servers) enforce the policy layer at the time of a service request. Preferably, the ‘quality’ of the electricity is a measurement of source of the energy, e.g., whether it is sourced from high-carbon fossil fuels (low-quality) or low-carbon renewables (high-quality). If the desired quality of electricity cannot be achieved, the node can resort to using less electricity to handle the request, which is achieved in a variety of ways.

Abstract: Methods, systems, and computer program products for direct assignment of physical devices to confidential virtual machines (VMs). At a first guest privilege context of a guest partition, a direct assignment of a physical device associated with a host computer system to the guest partition is identified. The guest partition includes the first guest privilege context and a second guest privilege context, which is restricted from accessing memory associated with the first guest privilege context. The guest partition corresponds to a confidential VM, such that a memory region associated with the guest partition is inaccessible to a host operating system. It is determined, based on a policy, that the physical device is allowed to be directly assigned to the guest partition. Communication between the physical device and the second guest privilege context is permitted, such as by exposing the physical device on a virtual bus and/or forwarding an interrupt.

Abstract: It is often important that a server's responses to a set of client requests are coherent with one another, but if the client's requests are spread over time, that may not occur. In accordance with the teaching of this patent document, a client is able to communicate with a server to achieve coherency. A client can send a request (e.g., an HTTP request for a given resource) with a data preservation directive. The data preservation directive causes the server to initiate a server-side process to preserve the state of underlying server-side data upon which the response relies (or will rely). Also, a client can send a request with an attribute requesting the response be coherent with respect to some date-time or other reference point. This attribute thus asks the server to ensure coherency in the response to the client.

Abstract: Distribution and management of services in virtual environments is described herein. In one or more implementations, a service distribution and management model is implemented in which system services and applications are seamlessly distributed across multiple containers which each implement a different runtime environment. In one or more implementations, a system for distributing access to services in a host operating system of a computing device includes a host operating system configured to implement a host runtime environment, and one or more services implemented by the host operating system. The system further includes a service control manager configured to enable communication between a client stub of a service implemented in a client runtime environment and a service provider of the service that is implemented in a service runtime environment that is separate from the first client runtime environment.

Abstract: A multi-tenant service platform provides network services, such as content delivery, edge compute, and/or media streaming, on behalf of, or directly for, a given tenant. The service platform offers a policy layer enabling each tenant to specify levels of acceptable performance degradation that the platform may incur so that the platform can use electricity with desirable characteristics to service client requests associated with that tenant. Service nodes in the platform (e.g., edge servers) enforce the policy layer at the time of a service request. Preferably, the ‘quality’ of the electricity is a measurement of source of the energy, e.g., whether it is sourced from high-carbon fossil fuels (low-quality) or low-carbon renewables (high-quality). If the desired quality of electricity cannot be achieved, the node can resort to using less electricity to handle the request, which is achieved in a variety of ways.

Abstract: An imaging apparatus may be used for histological and/or molecular imaging of a tissue sample. An imaging apparatus may include one or more light sources that generate one or more excitation beams directed toward an excitation location being focused on the sample to generate signals in the sample and one or more interrogation beams directed toward a detection location such that a portion of the one or more interrogation beams returning from the sample is indicative of at least some of the generated signals. An imaging apparatus may include a photodetector configured to detect radiative signals from the sample. An imaging apparatus may generate an image of the sample using only pressure (photoacoustic) signals, only temperature (photothermal) signals, and/or both photoacoustic and photothermal signals from the generated signals.

Abstract: The current disclosure provides for techniques and approaches for the generation of autologous mutant neoantigen-specific, TCR-engineered T cells used for adoptive transfer in treatment of cancer patients. Also provided are surrogate cancer cells, which is a personalized cell system that can be used for vaccination and TCR discovery in cancer patients.

Abstract: It is often important that a server's responses to a set of client requests are coherent with one another, but if the client's requests are spread over time, that may not occur. In accordance with the teaching of this patent document, a client is able to communicate with a server to achieve coherency. A client can send a request (e.g., an HTTP request for a given resource) with a data preservation directive. The data preservation directive causes the server to initiate a server-side process to preserve the state of underlying server-side data upon which the response relies (or will rely). Also, a client can send a request with an attribute requesting the response be coherent with respect to some date-time or other reference point. This attribute thus asks the server to ensure coherency in the response to the client.

Abstract: A networking hardware system includes a housing; a board located in the housing and comprising a plurality of components; a liquid cooled heat exchanger; and one or more fans disposed near the liquid cooled heat exchanger and configured to provide cool airflow from the liquid cooled heat exchanger to any of the plurality of components. The housing can be substantially sealed from an external environment and includes no air intake thereon, removing a need for higher powered fans and for air filtering for dust. The housing can include a faceplate with no air intake thereon, providing increased density for ports on the faceplate.

Abstract: An imaging apparatus may be used for histological and/or molecular imaging of a tissue sample. An imaging apparatus may include one or more light sources that generate one or more excitation beams directed toward an excitation location being focused on the sample to generate signals in the sample and one or more interrogation beams directed toward a detection location such that a portion of the one or more interrogation beams returning from the sample is indicative of at least some of the generated signals. An imaging apparatus may include a photodetector configured to detect radiative signals from the sample. An imaging apparatus may generate an image of the sample using only pressure (photoacoustic) signals, only temperature (photothermal) signals, and/or both photoacoustic and photothermal signals from the generated signals.

Abstract: A system for securing electronic devices includes a processor, non-transitory machine readable storage medium communicatively coupled to the processor, security applications, and a security controller. The security controller includes computer-executable instructions on the medium that are readable by the processor. The security application is configured to determine a suspicious file from a client using the security applications, identify whether the suspicious file has been encountered by other clients using the security applications, calculate a time range for which the suspicious file has been present on the clients, determine resources accessed by the suspicious file during the time range, and create a visualization of the suspicious file, a relationship between the suspicious file and the clients, the time range, and the resources accessed by the suspicious file during the time range.

Abstract: An imaging apparatus may be used for histological and/or molecular imaging of a tissue sample. An imaging apparatus may include one or more light sources that generate one or more excitation beams directed toward an excitation location being focused on the sample to generate signals in the sample and one or more interrogation beams directed toward a detection location such that a portion of the one or more interrogation beams returning from the sample is indicative of at least some of the generated signals. An imaging apparatus may include a photodetector configured to detect radiative signals from the sample. An imaging apparatus may generate an image of the sample using only pressure (photoacoustic) signals, only temperature (photothermal) signals, and/or both photoacoustic and photothermal signals from the generated signals.

Abstract: It is often important that a server's responses to a set of client requests are coherent with one another, but if the client's requests are spread over time, that may not occur. In accordance with the teaching of this patent document, a client is able to communicate with a server to achieve coherency. A client can send a request (e.g., an HTTP request for a given resource) with a data preservation directive. The data preservation directive causes the server to initiate a server-side process to preserve the state of underlying server-side data upon which the response relies (or will rely). Also, a client can send a request with an attribute requesting the response be coherent with respect to some date-time or other reference point. This attribute thus asks the server to ensure coherency in the response to the client.

Abstract: Compositions and methods for the treatment and amelioration of arterial stiffness, hypertension, and/or arterial aging in a subject. In embodiments, the active agents of the compositions provide anti-aging treatments by causing arterial remodeling by decreasing collagen production and increasing elastin production in a subject. In certain embodiments, the active agents can be used to treat a subject having diabetes or a diabetes-related disease or condition, such as but not limited to, Type 1 diabetes mellitus (T1DM), Type 2 diabetes mellitus (T2DM), and hyperinsulenima (pre-diabetes). In certain embodiments, the active agents can be used to treat subjects having hypertension, aortic disease, cardiovascular disease, including heart failure (such as congestive heart failure), kidney disease, osteoporosis, Alzheimer's disease, infertility, and emphysema.

Abstract: Virtual baseboard management controller capability to monitor and manage a virtual machine (VM). A guest firmware is operated within a first guest privilege context of a guest partition operating as a VM. The guest partition also includes a second guest privilege context that is restricted from accessing memory associated with the first guest privilege context, and that operates a guest operating system. The guest firmware establishes a communications channel between the first guest privilege context and a client device, and receives a request for performance of a management operation against the VM. The guest firmware initiates the management operation, which includes changing a power state of the VM; stopping or restarting the guest OS; presenting a graphical or serial console associated with the guest OS; updating a firmware associated with the guest partition; or managing a virtual device presented by the first guest privilege context.

Abstract: A network element include one or more modules each supporting one or more pluggable modules; and a first manifold and a second manifold each configured to connect to a conduit associated with a coldplate, wherein one of the first manifold and the second manifold is an inlet manifold and the other is an outlet manifold for a cooling fluid that flows through the conduit to cool the one or more pluggable modules. The one or more pluggable modules can be each a pluggable optical module that is one of compliant to any of XFP, SFP, XENPAK, X2, CFP, CFP2, CFP4, CFP8, QSFP, QSFP+, QSFP28, OSFP, and QSFP-DD and have a housing that has dimensions similar to any of XFP, SFP, XENPAK, X2, CFP, CFP2, CFP4, CFP8, QSFP, QSFP+, QSFP28, OSFP, and QSFP-DD.

Abstract: Transparently providing a virtualization feature to an unenlightened guest operating system (OS). A guest partition, corresponding to a virtual machine, is divided into a first guest privilege context and a second guest privilege context. A compatibility component executes within the first guest privilege context, while a guest OS executes within the second guest privilege context. The compatibility component is configured to intercept input/output (I/O) operations associated with the guest operating OS. Based on the compatibility component intercepting an I/O operation associated with the guest OS, the compatibility component processes the I/O operation using a virtualization feature that is unsupported by the guest OS. Examples of the virtualization feature include accelerated access to a hardware device and virtual machine guest confidentiality.

Abstract: Methods, systems, and computer program products for direct assignment of physical devices to confidential virtual machines (VMs). At a first guest privilege context of a guest partition, a direct assignment of a physical device associated with a host computer system to the guest partition is identified. The guest partition includes the first guest privilege context and a second guest privilege context, which is restricted from accessing memory associated with the first guest privilege context. The guest partition corresponds to a confidential VM, such that a memory region associated with the guest partition is inaccessible to a host operating system. It is determined, based on a policy, that the physical device is allowed to be directly assigned to the guest partition. Communication between the physical device and the second guest privilege context is permitted, such as by exposing the physical device on a virtual bus and/or forwarding an interrupt.

Abstract: Data-at-rest protection for virtual machines includes operating a data protection component within a first privilege context of a guest partition, and operating a guest operating system (OS) within a second privilege context of the guest partition. The data protection component participates in data input/output operations of the guest OS. Based on a data output operation of the guest OS, the data protection component applies a first data protection operation to first data associated with the data output operation; and initiates storage of a first result of the first data protection operation to a data storage device. Based a data input operation of the guest OS, the data protection component applies a second data protection operation to second data associated with the data input operation; and, based on applying the second data protection operation to the second data, communicates an outcome of the data input operation to the guest OS.