Abstract: An example method may include receiving a first authentication credential corresponding to a component in a data center. The first authentication credential may be provided by a user to access the component. Further, the method may include dynamically generating a second authentication credential corresponding to the first authentication credential. The second authentication credential may be system-generated to access the component. Furthermore, the method may include generating mapping information for mapping the second authentication credential to the first authentication credential. In response to receiving a first request to perform a data center operation that is dependent on the component, the method may include utilizing the first authentication credential to authenticate the first request and utilizing the second authentication credential to perform the data center operation using the mapping information.

Abstract: The present disclosure is related to devices, systems, and methods for providing SSL connectivity inside SDDCs with hyperconverged infrastructure. An example method can include configuring a primary Secure Sockets Layer (SSL) certificate on an endpoint of a hyperconverged infrastructure (HCI), configuring a secondary SSL certificate on the endpoint, securing data communicated between the endpoint and another endpoint of the HCI using the primary certificate, securing data communicated between the endpoint and the other endpoint using the secondary certificate, instead of the primary certificate, responsive to determining a fault in the primary certificate, and securing data communicated between the endpoint and the other endpoint using a new primary certificate configured on the endpoint, instead of the secondary certificate, responsive to the new primary certificate being configured on the endpoint.

Abstract: Some embodiments provide a method for associating data message flows from applications executing on a host computer with network interfaces of the computer. The method of some embodiments identifies a set of applications operating on a machine executing on the host computer, identifies candidate teaming policies for associating each identified application with a subset of one or more interfaces, and generates a report to display the identified candidate teaming policies per application to a user. In response to user input selecting a first teaming policy for a first application, the method generates a rule, and distributes the rule, to the host computer to associate the first application with a first subset of the network interfaces specified by the first teaming policy.

Abstract: Some embodiments provide a method for associating data message flows from applications executing on a host computer with network interfaces of the computer. The method of some embodiments identifies a set of applications operating on a machine executing on the host computer, identifies candidate teaming policies for associating each identified application with a subset of one or more interfaces, and generates a report to display the identified candidate teaming policies per application to a user. In response to user input selecting a first teaming policy for a first application, the method generates a rule, and distributes the rule, to the host computer to associate the first application with a first subset of the network interfaces specified by the first teaming policy.

Abstract: Methods, apparatus, systems and articles of manufacture are disclosed for managing compute resources in a computing environment. Disclosed examples are to select an offering workload in a computing environment to lend at least one resource to a needy workload in the computing environment; Disclosed examples are also to cause a host associated with the offering workload to at least one of (i) instantiate a first virtual machine when the host is implemented with a second virtual machine or (ii) instantiate a first container when the host is implemented with a second container. Disclosed examples are further to assign the first virtual machine or the first container to the needy workload.

Abstract: Described herein are systems, methods, and software to manage resources in a gateway shared by multiple tenants. In one example, a system may monitor usage of resources by a tenant of the gateway and compare the usage with usage limits associated with the resources. The system may further determine when the usage of a resource exceeds a usage limit associated with the resource and, when the usage of the resource exceeds the usage limit, identify an operation associated with causing the usage limit to be exceeded and blocking the operation.

Abstract: Described herein are systems, methods, and software to manage resources in a gateway shared by multiple tenants. In one example, a system may monitor usage of resources by a tenant of the gateway and compare the usage with usage limits associated with the resources. The system may further determine when the usage of a resource exceeds a usage limit associated with the resource and, when the usage of the resource exceeds the usage limit, identify an operation associated with causing the usage limit to be exceeded and blocking the operation.

Abstract: Described herein are systems, methods, and software to manage virtual local area network (VLANs) over multiple data centers. In one example, a method of managing a gateway at a first data center includes receiving, at a local manager, configuration information for a VLAN segment and a global VLAN segment identifier from a global manager of the data centers. The method further includes generating a global policy engine (GPE) data structure that associates the global VLAN segment identifier with a virtual network identifier (VNI) for the first data center and one or more policy rules, wherein the policy rules are derived from IP address prefix information provided from a second gateway, such as an edge gateway.

Abstract: Some embodiments provide a method for associating data message flows from applications executing on a host computer with network interfaces of the computer. The method of some embodiments identifies a set of applications operating on a machine executing on the host computer, identifies candidate teaming policies for associating each identified application with a subset of one or more interfaces, and generates a report to display the identified candidate teaming policies per application to a user. In response to user input selecting a first teaming policy for a first application, the method generates a rule, and distributes the rule, to the host computer to associate the first application with a first subset of the network interfaces specified by the first teaming policy.

Abstract: Some embodiments provide a method for associating data message flows from applications executing on a host computer with network interfaces of the computer. The method of some embodiments identifies a set of applications operating on a machine executing on the host computer, identifies candidate teaming policies for associating each identified application with a subset of one or more interfaces, and generates a report to display the identified candidate teaming policies per application to a user. In response to user input selecting a first teaming policy for a first application, the method generates a rule, and distributes the rule, to the host computer to associate the first application with a first subset of the network interfaces specified by the first teaming policy.

Abstract: Some embodiments provide a method for associating data message flows from applications executing on a host computer with network interfaces of the computer. The method of some embodiments identifies a set of applications operating on a machine executing on the host computer, identifies candidate teaming policies for associating each identified application with a subset of one or more interfaces, and generates a report to display the identified candidate teaming policies per application to a user. In response to user input selecting a first teaming policy for a first application, the method generates a rule, and distributes the rule, to the host computer to associate the first application with a first subset of the network interfaces specified by the first teaming policy.

Abstract: Some embodiments provide a method for associating data message flows from applications executing on a host computer with network interfaces of the computer. The method of some embodiments identifies a set of applications operating on a machine executing on the host computer, identifies candidate teaming policies for associating each identified application with a subset of one or more interfaces, and generates a report to display the identified candidate teaming policies per application to a user. In response to user input selecting a first teaming policy for a first application, the method generates a rule, and distributes the rule, to the host computer to associate the first application with a first subset of the network interfaces specified by the first teaming policy.

Abstract: Some embodiments provide a method for associating data message flows from applications executing on a host computer with network interfaces of the computer. The method of some embodiments identifies a set of applications operating on a machine executing on the host computer, identifies candidate teaming policies for associating each identified application with a subset of one or more interfaces, and generates a report to display the identified candidate teaming policies per application to a user. In response to user input selecting a first teaming policy for a first application, the method generates a rule, and distributes the rule, to the host computer to associate the first application with a first subset of the network interfaces specified by the first teaming policy.

Abstract: Methods, apparatus, systems, and articles of manufacture are disclosed for rack nesting in virtualized server systems. An example apparatus includes a resource discoverer to identify resources to be allocated to the nested rack based on a policy indicative of one or more physical racks from which to identify the resources, and determine candidate resources from the resources to be allocated to the nested rack based on a capacity parameter indicative of a quantity of the resources available to be allocated to the nested rack, the candidate resources to have first hypervisors, and a nested rack controller to generate the nested rack by deploying second hypervisors on the first hypervisors, the second hypervisors to facilitate communication between the candidate resources and one or more virtual machines on the second hypervisors, the nested rack to execute one or more computing tasks based on the communication.

Abstract: Methods, apparatus, systems and articles of manufacture to dynamically discover and host services in fog servers are disclosed. An example apparatus includes a service manager to determine that a received service request from an Internet of things (IoT) device is not able to be performed locally at a first fog server; a first interface to transmit the service request to a fog resource manager; and a second interface to transmit instructions to the IoT device to transmit the service request to a second fog server, a response from the fog resource manager including service data related to the second fog server.

Abstract: Described herein are systems, methods, and software to manage virtual routing and forwarding (VRF) in a computing environments. In one example, a management service identifies a registration or import of a route target (RT) to communicate in a VRF and identifies a first unique identifier associated with the RT. The management service further identifies a second unique identifier associated with the VRF and compares the first unique identifier to the second unique identifier. When the unique identifiers match, the management service determines that intra-VRF encryption is required for the communication. In contrast, when the unique identifiers do not match, then the management service determine that inter-VRF encryption is required for the communication.

Abstract: Techniques for migrating virtual machines in logical clusters based on demand for the applications are disclosed. In one example, a system may include a logical cluster that spans across a first datacenter located at a first site and a second datacenter located at a second site, the second datacenter being a replication of the first datacenter. The first datacenter may include a virtual machine executing an application. Further, the system may include a management node communicatively coupled to the first datacenter and the second datacenter. The management node may include a dynamic affinity policy engine to monitor the application running in the first datacenter, determine a demand for the application from the first datacenter and the second datacenter based on the monitoring, and recommend migration of the virtual machine hosting the application from the first datacenter to the second datacenter based on the demand for the application.

Abstract: In one example, a computer implemented method may include dynamically generating a manifest file for a cluster in an hyperconverged infrastructure. The manifest file may include metadata associated with the cluster. Further, the method may include determining one or more physical hosts in a host pool that are compatible with the cluster using the manifest file and generating a cluster-to-physical host mapping table by mapping the cluster to the determined one or more physical hosts that are compatible with the cluster. Furthermore, the method may include provisioning the one or more physical hosts to the cluster using the cluster-to-physical host mapping table in response to detecting a trigger.

Abstract: Techniques for seamless certificate replacement for endpoints in hyperconverged infrastructure are disclosed. In one example, a certificate replacement request for an endpoint may be received. Upon receiving the certificate replacement request, a new certificate may be placed in the endpoint such that the endpoint includes an old certificate and the new certificate. Further, dependent endpoints having communication with the endpoint using the old certificate may be discovered and monitored. Furthermore, the new certificate of the endpoint may be placed in the discovered dependent endpoints and existing communication between the endpoint and each of the discovered dependent endpoints using the old certificate may be maintained. Upon completion of the existing communication, next communication between the endpoint and each of the discovered dependent endpoints may be enabled using the new certificate. Then, the old certificate may be decommissioned from the endpoint and the discovered dependent endpoints.

Abstract: In one example, a non-transitory computer readable storage medium may include instructions that, when executed by a processor, cause the processor to obtain historical logs associated with a plurality of available paths between a source node and a destination node. The historical logs may be obtained for a first interval by routing data over the available paths based on a first priority order and corresponding network characteristics parameters. Further, non-transitory computer readable storage medium may include instructions to determine a modified first priority order of the available paths and corresponding modified network characteristic parameters by analyzing the historical logs using a machine learning model and route the data from the source node to the destination node based on the modified first priority order.