Abstract: A data warehouse connector service is described. The data warehouse connector service integrates with an identity resolution system of a customer data platform to systematically communicate identity-resolved customer profile data from the customer data platform to a cloud-based data warehouse. Operation of the data warehouse connector is managed through various configuration settings accessible to an end-user of the customer data platform via a user interface.

Abstract: A data warehouse connector service is described. The data warehouse connector service integrates with an identity resolution system of a customer data platform to systematically communicate identity-resolved customer profile data from the customer data platform to a cloud-based data warehouse. Operation of the data warehouse connector is managed through various configuration settings accessible to an end-user of the customer data platform via a user interface.

Abstract: A data warehouse connector service is described. The data warehouse connector service integrates with an identity resolution system of a customer data platform to systematically communicate identity-resolved customer profile data from the customer data platform to a cloud-based data warehouse. Operation of the data warehouse connector is managed through various configuration settings accessible to an end-user of the customer data platform via a user interface.

Abstract: Methods and devices for correlative monitoring, analysis, and control of multi-service, multi-network systems are provided herein. Exemplary methods may include generating a network topology graph of a metanetwork using traffic records obtained from the metanetwork, generating a causal digraph of the metanetwork using the traffic records and the network topology graph, and transmitting one or more of the network topology graph and the causal digraph to a computing system.

Abstract: In general, techniques are described for performing decentralized packet dispatch. A network device comprising one or more service processing units (SPUs) and an interface may implement the techniques. The interface receives a packet associated with a session and selects a first one of SPUs to dispatch the packet based on first information extracted from the packet. The first one of the SPUs dispatches the packet to a second one of the SPUs based on second information extracted from the packet. The second one of the SPUs performs first pass processing to configure the network security device to perform fast path processing of the packet such that second one of the SPUs applies one or more services to the packet and subsequent packets associated with the same session without application of services to the packets by the first one of the service processing units.

Abstract: A fair weighted-hashing technique may be used in load balancing among a group of modules. In one implementation, a device may maintain a table that relates how incoming client resource requests are to be distributed among the modules. The device may update the table, in response to an indication that an additional module, associated with a module identifier, is to be included in the group of modules. The updating may include determining a number of entries to add to the table for the additional module, calculating a first hash value for each of the number of entries, and modifying the table by writing the module identifier to one or more sequential entries of the table, beginning at an index into the table corresponding to the first hash value.

Abstract: Methods and devices for correlative monitoring, analysis, and control of multi-service, multi-network systems are provided herein. Exemplary methods may include generating a network topology graph of a metanetwork using traffic records obtained from the metanetwork, generating a causal digraph of the metanetwork using the traffic records and the network topology graph, and transmitting one or more of the network topology graph and the causal digraph to a computing system.

Abstract: Techniques are described to enable two or more layer two (L2) firewall devices to be configured as a high availability (HA) cluster in an active-active configuration. A first layer two (L2) firewall and a second L2 firewall are positioned within the same L2 network. The first L2 firewall and the second L2 firewall are concurrently configured with active virtual security devices (VSDs) within the L2 network, and concurrently apply L2 firewall services to packets within the L2 network. A VSD of one of the L2 firewalls automatically switches to an active VSD status for a VSD group in place of a VSD of another L2 firewall when the other L2 firewall fails.