Abstract: This disclosure describes techniques for selectively placing and maintaining sensitive workloads in subsystems that achieve a minimum level of trustworthiness. An example method includes identifying at least one trustworthiness requirement associated with an application and transmitting, to a first subsystem, a request for at least one trustworthiness characteristic of the first subsystem and at least one second subsystem connected to the first subsystem. A response indicating the at least one trustworthiness characteristic is received from the first subsystem. The example method further includes determining that the at least one trustworthiness characteristic satisfies the at least one trustworthiness requirement; and causing the application to operate on a mesh comprising the first subsystem and the at least one second subsystem.

Abstract: A method (1300) and system (201) for generating an astro-lapse video on a user device is disclosed. Initially, at least one current frame comprising one or more stars, is captured via the user device. Further, region(s) with a degree of exposure and focus greater or less than a predefined threshold are determined and a set of subsequent frames including the stars are captured. The exposure and focus of region(s) in the subsequent frames is corrected during the capturing based on degree of exposure and focus of the region(s) within the current frame. Further, fusion weights of the current and subsequent frames are determined based on one or more cloud categories and associated cloud density scores. Finally, an astro-lapse video is generated by fusing the at least one current frame and the set of subsequent frames based on the determined fusion weights.

Abstract: Techniques for using Network Address Translation (NAT), Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS) to anonymize server-side addresses in data communications. Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a virtual IP (VIP) address that is mapped to the client device and the endpoint device. In this way, IP addresses of servers are obfuscated by a virtual network of VIP addresses. The client device may then communicate data packets to the server using the VIP address as the destination address, and a virtual network service that works in conjunction with DNS can convert the VIP address to the actual IP address of the server using NAT and forward the data packet onto the server.

Abstract: This disclosure provides systems, methods, and apparatus, including computer programs encoded on computer-readable media, for analyzing management frames for multiple basic service sets (BSSs). In one aspect, a wireless node may obtain a first management frame from a wireless local area network (WLAN) apparatus, the WLAN apparatus operating multiple virtual access points (VAPs) respectively corresponding to multiple BSSs. The wireless node may determine whether the first management frame includes a BSS profile of a BSS associated with the wireless node based, at least in part, on an arrangement of a plurality of BSS profiles within one or more management frames. The wireless node may determine to further process the first management frame based, at least in part, on a determination that the first management frame includes the BSS profile of the BSS associated with the wireless node.

Abstract: Techniques for using Network Address Translation (NAT), Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS) to anonymize server-side addresses in data communications. Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a random IP address that is mapped to the client device and the endpoint device. In this way, IP addresses of servers are obfuscated by a random IP address that cannot be used to identify the endpoint device or service. The client device may then communicate data packets to the server using the random IP address as the destination address, and a gateway that works in conjunction with DNS can convert the random IP address to the actual IP address of the server using NAT and forward the data packet onto the server.

Abstract: Computer-implemented methods, apparatuses, and non-transitory storage media for determining peak connections in a distributed environment are provided. In some implementations, determining peak connections in a distributed environment can include receiving, according to a predetermined time schedule, data indicating a number of user equipments (UEs) connected to and a number of UEs disconnected from each of a plurality of scheduling units of a radio access network (RAN) during each of a plurality of time windows in a first period of time, determining, based on the received data, a maximum number of UEs connected to the scheduling units at a time in the first period of time, and transmitting the determined maximum number of UEs to a network manager of the RAN.

Abstract: An example operation may include one or more of receiving, via a user interface, a feature set, querying a repository of application programming interfaces (APIs) to identify an API in the repository that corresponds to the received feature set based on a comparison of features in the feature set to features of the API stored in the repository, identifying criteria of the identified API that is published in the repository, and displaying a recommendation with the identified API including the identified criteria of the identified API via the user interface.

Abstract: A terrain elevation data generation method includes: obtaining, at an apparatus, a low-resolution data set corresponding to a geographic area and comprising a plurality of low-resolution terrain elevation values corresponding to first locations within the geographic area; and applying, at the apparatus, the plurality of low-resolution terrain elevation values to a resolution enhancing model to produce a plurality of higher-resolution terrain elevation values corresponding to second locations within the geographic area, a second quantity of the second locations within the geographic area being higher than a first quantity of the first locations within the geographic area.

Abstract: Techniques for signaling, to a network controller, a connection state of a proxy for use by the network controller to correlate proxied-connections with application pairs for traffic optimization. In some examples, the techniques may include receiving, at a controller of a network, control plane information associated with a proxy that manages a proxied flow through the network. Based on the control plane information, the controller may determine that application traffic is flowing across the proxied flow between a first application and a second application. In this way, based at least in part on a policy associated with at least one of the first application or the second application, the controller may reconfigure a network element of the network for optimizing the application traffic flowing across the proxied flow.

Abstract: In a multi-tenant computing system, a set of subscriptions are generated, to which resources are assigned. Each subscription has a management application that is used to manage access to resources in the subscription. Credentials that are used by the management application are stored in a key vault within the subscription.

Abstract: An application monitoring system for collecting, utilizing, and/or exchanging state information (e.g., application state and network state), configuration information, and/or other information to make network optimizations for applications orchestrated by an application orchestration system. The application monitoring system may include an application orchestrator discovery component that is configured to determine a presence of an application orchestration system for orchestrating applications. The application monitoring system may also include one or more application watch components for monitoring, among other things, application state, application configuration, and/or application replicas. The application monitoring system may further include a network state propagation component configured to provide network state information to the orchestration system.

Abstract: Described herein are techniques for implementing a low earth orbit (LEO) satellite network and routing communications (e.g., packets) over that network. In embodiments, the techniques may comprise receiving, at a first ground station computing device, a request to determine destination information for a communication, determining, at the first ground station computing device based on information about the communication, a target computing device to which the communication is to be routed, determining, at the first ground station computing based on the target computing device, a location of a destination ground station, determining, at the first ground station computing by mapping orbital data to the location of the destination ground station, a destination satellite, generating the destination information to include at least an address for the destination satellite, and providing the destination information in response to the request.

Abstract: Techniques for informing a network of an application's service-level agreement (SLA) objective(s) so the network can ensure the SLA is met end-to-end, thereby allowing core network support of deterministic SLA and application-based routing without using network-based application recognition (NBAR) and/or compromising user privacy. The techniques may include receiving a first connection request to establish a network-domain connection between different network domains that meets or exceeds a service level objective. Based on the first connection request, the network-domain connection may be established between the different network domains to meet or exceed the service-level objective. In some examples, a second connection request may be received to establish a tunnel between a source application and a destination application, which are disposed in the different network domains.

Abstract: The disclosure provides an approach for on-demand application delivery. Embodiments include determining, by an application delivery component on a computing device, a user logon event. In response to the user logon event, embodiments include receiving, from an application management server separate from the computing device, shortcut information for a set of applications associated with the user and displaying, on the computing device, simulated shortcuts for the set of applications based on the shortcut information. Embodiments include receiving, at the computing device, user input selecting a simulated shortcut of the simulated shortcuts that corresponds to an application of the set of applications.

Abstract: Techniques are described by which a fabric designer system provides a user interface (UI) to enable a user to design a data center fabric. For example, a fabric designer system comprises processor(s) and a memory comprising instructions that when executed by the processor(s) cause the one or more processors to: generate data representative of a user interface (UI) for display on a display device, the data representative of the UI comprising UI elements representing one or more fabric design requirements receive, via the UI on the display device, an indication of a user input selecting one or more of the UI elements representing the one or more fabric design requirements; generate a model for a data center fabric based on the one or more fabric design requirements and a catalog of network devices; and generate UI elements representing fabric design specifications of the model for the data center fabric.

Abstract: Methods, systems, and apparatus, including medium-encoded computer program products include: obtaining a design space for a modeled object, for which a corresponding physical structure is to be manufactured, and one or more design criteria for the modeled object; iteratively modifying a first three-dimensional shape of the modeled object in the design space in accordance with the one or more design criteria, the iteratively modifying includes forming a second three-dimensional shape of the modeled object based on the first three-dimensional shape of the modeled object, where the second three-dimensional shape conforms to a predefined shape-type requirement, and penalizing modifications of the first three-dimensional shape that deviate from the second three-dimensional shape; and providing the first or second three dimensional shape of the modeled object for use in manufacturing the physical structure using one or more computer-controlled manufacturing systems.

Abstract: A terrain elevation data generation method includes: obtaining, at an apparatus, a low-resolution data set corresponding to a geographic area and comprising a plurality of low-resolution terrain elevation values corresponding to first locations within the geographic area; and applying, at the apparatus, the plurality of low-resolution terrain elevation values to a resolution enhancing model to produce a plurality of higher-resolution terrain elevation values corresponding to second locations within the geographic area, a second quantity of the second locations within the geographic area being higher than a first quantity of the first locations within the geographic area.

Abstract: In an approach to improve computer-based supply chain management embodiments of the present invention receive a first order associated with a user, and determine, within predetermine range of confidence, that a second order associated with the user will be received within a predefined timeframe. Additionally, embodiments delay the shipment of the first order, for a predetermined amount of time, based on the determination the second order will be received and execute a hold command that withholds the first order from a distribution center for a predetermined amount of time. Further, responsive to receiving the second order within the predefined timeframe, embodiments consolidate the first order and second order into a consolidated order.