Abstract: An example method of mitigating oversubscription of traffic to edge services gateways in a data center includes: receiving, by a host of the data center, traffic metrics corresponding to the ESGs; determining traffic congestion at a first active edge of the ESGs in response to the traffic metrics; dividing, in response to the traffic congestion, a classless inter-domain routing (CIDR) block assigned to the first active edge into a first CIDR block and a second CIDR block; and creating, in a routing table of a router, a first route between an internet protocol (IP) address of the first active edge and the first CIDR block, and a second route between an IP address of a second active edge of the ESGs and the second CIDR block.

Abstract: An example method of mitigating oversubscription of traffic to edge services gateways in a data center includes: receiving, by a host of the data center, traffic metrics corresponding to the ESGs; determining traffic congestion at a first active edge of the ESGs in response to the traffic metrics; dividing, in response to the traffic congestion, a classless inter-domain routing (CIDR) block assigned to the first active edge into a first CIDR block and a second CIDR block; and creating, in a routing table of a router, a first route between an internet protocol (IP) address of the first active edge and the first CIDR block, and a second route between an IP address of a second active edge of the ESGs and the second CIDR block.

Abstract: The technology disclosed herein enables the detection and subsequent mitigation of threats in virtualized workload environments. In a particular embodiment, a method provides, in a workload orchestration platform, managing one or more first logical networks that include a plurality of first workloads and a plurality of shadow workloads. One or more initial processes of the shadow workloads, when instantiated, are known to a security application. The method further includes providing security permissions to the security application that enable the security application to manage the shadow workloads. Also, the method includes providing admin permissions to an administrator application that enable the administrator application to manage the first workloads irrespective of the shadow workloads.

Abstract: The technology disclosed herein enables the detection and subsequent mitigation of threats in virtualized workload environments. In a particular embodiment, a method provides, in a workload orchestration platform, managing one or more first logical networks that include a plurality of first workloads and a plurality of shadow workloads. One or more initial processes of the shadow workloads, when instantiated, are known to a security application. The method further includes providing security permissions to the security application that enable the security application to manage the shadow workloads. Also, the method includes providing admin permissions to an administrator application that enable the administrator application to manage the first workloads irrespective of the shadow workloads.