Abstract: A method includes assigning a plurality of workloads to an isolated secure compute environment on a distributed computing system based on respective security criteria for each of the plurality of workloads, the isolated secure compute environment isolated from one or more other isolated secure compute environments on the distributed computing system. While executing the plurality of workloads in the isolated secure compute environment on the distributed computing system, the method also includes determining resource utilization for the isolated secure compute environment, and adjusting, using the determined resource utilization, a number of computing resources assigned to the isolated secure compute environment.

Abstract: A method for workload security rings that includes receiving a plurality of workloads, each associated with respective security criteria and scheduled for execution on a distributed computing system divided into a plurality of security rings each associated with a respective subset of computing devices of the distributed computing system that is physically isolated from the other security rings. For each respective workload, the method includes determining, using the respective security criteria, a security level of the respective workload and identifying, using the security level of the respective workload, one or more of the plurality of security rings that are eligible for executing the respective workload. The method also includes executing the respective workload on one or more computing devices selected from one of the respective subsets of computing devices associated with the identified one or more of the plurality of security rings eligible for executing the respective workload.

Abstract: A computer-implemented method according to one embodiment includes in response to identifying a match between a file and at least one policy, updating details of a container in an object namespace of a file system, where the object namespace of the file system stores object-based representations of files within the file system; creating a symbolic link to the file in the object namespace of the file system; and updating a database to identify the symbolic link and the details of the container.

Abstract: A method for workload security rings that includes receiving a plurality of workloads, each associated with respective security criteria and scheduled for execution on a distributed computing system divided into a plurality of security rings each associated with a respective subset of computing devices of the distributed computing system that is physically isolated from the other security rings. For each respective workload, the method includes determining, using the respective security criteria, a security level of the respective workload and identifying, using the security level of the respective workload, one or more of the plurality of security rings that are eligible for executing the respective workload. The method also includes executing the respective workload on one or more computing devices selected from one of the respective subsets of computing devices associated with the identified one or more of the plurality of security rings eligible for executing the respective workload.

Abstract: A method for workload security rings that includes receiving a plurality of workloads, each associated with respective security criteria and scheduled for execution on a distributed computing system divided into a plurality of security rings each associated with a respective subset of computing devices of the distributed computing system that is physically isolated from the other security rings. For each respective workload, the method includes determining, using the respective security criteria, a security level of the respective workload and identifying, using the security level of the respective workload, one or more of the plurality of security rings that are eligible for executing the respective workload. The method also includes executing the respective workload on one or more computing devices selected from one of the respective subsets of computing devices associated with the identified one or more of the plurality of security rings eligible for executing the respective workload.

Abstract: According to one embodiment, a computer-implemented method for file handling in a hierarchical storage environment includes performing a file access notification process for determining files related to the first file based on enhanced metadata and a priority list defining a likelihood of possible access, in response to receiving a file access notification corresponding to access of a first file. The related files are placed in a highest level storage tier, and the priority list is updated.

Abstract: A method for workload security rings that includes receiving a plurality of workloads, each associated with respective security criteria and scheduled for execution on a distributed computing system divided into a plurality of security rings each associated with a respective subset of computing devices of the distributed computing system that is physically isolated from the other security rings. For each respective workload, the method includes determining, using the respective security criteria, a security level of the respective workload and identifying, using the security level of the respective workload, one or more of the plurality of security rings that are eligible for executing the respective workload. The method also includes executing the respective workload on one or more computing devices selected from one of the respective subsets of computing devices associated with the identified one or more of the plurality of security rings eligible for executing the respective workload.

Abstract: A computer program product is provided for extending network services addresses, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, where the program instructions are executable by a processor to cause the processor to identify, by the processor, an event affecting a node, wherein the node provides external access to a network using an Internet Protocol (IP) address, in response to identifying the event, identify, by the processor, an attribute associated with the IP address, and based on the attribute associated with the IP address, determine, by the processor, whether to move the IP address to another node.

Abstract: A computer-implemented method according to one embodiment includes in response to identifying a match between a file and at least one policy, updating details of a container in an object namespace of a file system, where the object namespace of the file system stores object-based representations of files within the file system; creating a symbolic link to the file in the object namespace of the file system; and updating a database to identify the symbolic link and the details of the container.

Abstract: A computed-implemented method is provided for generating object storage datasets from file datasets. The computed-implemented method includes analyzing entries of a file system to identify a file and checking the file against at least one policy. In response to identifying a match between the file and the at least one policy, details of a container are updated. A symbolic link to the file is created to allow access of the file by an object-based client. Updating the details of the container includes updating a database such that the database identifies at least one of the created symbolic link and the details of the container.

Abstract: A computer program product is provided for extending a clustered file system. The computer program product comprises a computer readable storage medium having program instructions embodied therewith. The program instructions are executable by a processor to cause the processor to build a central cluster repository, establish a service-specific interface for accessing non-file system data in the central cluster repository, and extend a clustered file system with the service-specific interface.

Abstract: A RAID (redundant array of independent storage devices) storage system where a file is stored at a physical protection level corresponding to a RAID protection level defined by metadata included in and/or with the file to be stored.

Abstract: A computer-implemented method according to one embodiment includes receiving, via an interface of a clustered file system, callback registration information from an external service, identifying a plurality of parameters associated with the callback registration information, constructing a service registration within the clustered file system, based on the plurality of parameters, identifying the service registration in response to an occurrence of one or more events, and performing one or more callbacks, according to the service registration.

Abstract: A computer program product is provided for extending network services addresses, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, where the program instructions are executable by a processor to cause the processor to identify, by the processor, an event affecting a node, wherein the node provides external access to a network using an Internet Protocol (IP) address, in response to identifying the event, identify, by the processor, an attribute associated with the IP address, and based on the attribute associated with the IP address, determine, by the processor, whether to move the IP address to another node.

Abstract: A computer-implemented method for load-balancing client input/output (I/O) requests in a clustered storage system may include receiving a request by a first node of a clustered storage system from a client to initiate a session between the client and the first node. The request may specify a multi-channel communication session. In response to receiving the request, an Internet Protocol (IP) address of the first and at least a second node may be transmitted to the client. The multi-channel communication session may be established between the client and the first and second nodes in which the client communicates with the first node using a first communication channel and communicates with the second node using a second communication channel. The first node may transmit to the second node session data determined at the first node. The second node may transmit to the first node session data determined at the second node.

Abstract: A computer program product is provided for extending network services addresses, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, where the program instructions are executable by a processor to cause the processor to identify, by the processor, a network event affecting a node of a network, wherein the node provides external access to the network using an Internet Protocol (IP) address, in response to identifying the network event, identify, by the processor, an attribute associated with the IP address, and based on the attribute associated with the IP address, determine, by the processor, whether to move the IP address to another node of the network.

Abstract: Provided is a system having a cluster of communication controllers, a method for modification of the latter, and a computer program product carrying computer executable code for execution of the method. Each communication controller is operable for providing network connections of the system with external computer systems using communication protocols of a first type and a second type. The first type is a failover tolerant communication protocol type. The second type is a failover non-tolerant communication protocol type. All network connections of each communication controller are disconnected during the modification of said communication controller. The method for modifying the cluster of communication controllers includes splitting the communication controllers into a first pool and a second pool.

Abstract: Provided is a system having a cluster of communication controllers, a method for modification of the latter, and a computer program product carrying computer executable code for execution of the method. Each communication controller is operable for providing network connections of the system with external computer systems using communication protocols of a first type and a second type. The first type is a failover tolerant communication protocol type. The second type is a failover non-tolerant communication protocol type. All network connections of each communication controller are disconnected during the modification of said communication controller. The method for modifying the cluster of communication controllers includes splitting the communication controllers into a first pool and a second pool.

Abstract: According to one embodiment, a computer-implemented method for file handling in a hierarchical storage environment includes performing a file access notification process for determining files related to the first file based on enhanced metadata and a priority list defining a likelihood of possible access, in response to receiving a file access notification corresponding to access of a first file. The related files are placed in a highest level storage tier, and the priority list is updated.

Abstract: A method for file handling in a hierarchical storage environment includes initiating a new document notification process in response to receipt of a new document. The document notification process includes evaluating enhanced metadata of the new document via a relationship analyzing process to produce a priority list defining a likelihood of possible access, where the enhanced metadata includes a set of keywords and/or references from the new document. The method additionally includes storing the new document in a storage tier of a hierarchical storage environment according to the priority list.