Abstract: An integrated firewall provides security in a multi-tenant environment having a connection-based switched fabric directly connecting database servers which provide a plurality of database services with application servers hosting database service consumers each having a different database service consumer identity. The firewall functionality integrated into each database server provides access control by discarding communication packets which do not include a database service consumer identity and using the database service consumer identity in combination with an access control list to control access from the database service consumers to the database services. The access control includes address resolution access control, connection establishment access control, and data exchange access control based on said access control list.

Abstract: An integrated firewall provides security in a multi-tenant environment having a connection-based switched fabric directly connecting database servers which provide a plurality of database services with application servers hosting database service consumers each having a different database service consumer identity. The firewall functionality integrated into each database server provides access control by discarding communication packets which do not include a database service consumer identity and using the database service consumer identity in combination with an access control list to control access from the database service consumers to the database services. The access control includes address resolution access control, connection establishment access control, and data exchange access control based on said access control list.

Abstract: An integrated firewall provides security in a multi-tenant environment having a connection-based switched fabric directly connecting database servers which provide a plurality of database services with application servers hosting database service consumers each having a different database service consumer identity. The firewall functionality integrated into each database server provides access control by discarding communication packets which do not include a database service consumer identity and using the database service consumer identity in combination with an access control list to control access from the database service consumers to the database services. The access control includes address resolution access control, connection establishment access control, and data exchange access control based on said access control list.

Abstract: A security solution provides secure communication in a multi-tenant environment which includes a connection-based fabric, storage cells holding data associated with different tenants, database servers which provide a plurality of database services using said data, application servers hosting database service consumers. The fabric is configured into partitions isolating the storage cells from the database service consumers. The application servers securely associate unique database service consumer identities with each database service consumer and all communications with the database servers. The database servers reject all communications from the application servers which do not include an identity and use an access control list to control access from the database service consumers to the database services using address resolution access control, connection establishment access control, and data exchange access control based on said access control list.

Abstract: A system and method can manage software services in virtualized and non-virtualized environments. A plurality of data collection components in a computing environment can include a plurality of virtual machines running on the one or more microprocessors, wherein the plurality of virtual machines are adapted to be deployed with services and applications. Each data collection component operates to use one or more data structures to communicate with a data consumer, wherein each data structure describes metrics to be collected by said data collection component and is capable of containing collected metric values.

Abstract: A security solution provides secure communication in a multi-tenant environment which includes a connection-based fabric, storage cells holding data associated with different tenants, database servers which provide a plurality of database services using said data, application servers hosting database service consumers. The fabric is configured into partitions isolating the storage cells from the database service consumers. The application servers securely associate unique database service consumer identities with each database service consumer and all communications with the database servers. The database servers reject all communications from the application servers which do not include an identity and use an access control list to control access from the database service consumers to the database services using address resolution access control, connection establishment access control, and data exchange access control based on said access control list.

Abstract: An integrated firewall provides security in a multi-tenant environment having a connection-based switched fabric directly connecting database servers which provide a plurality of database services with application servers hosting database service consumers each having a different database service consumer identity. The firewall functionality integrated into each database server provides access control by discarding communication packets which do not include a database service consumer identity and using the database service consumer identity in combination with an access control list to control access from the database service consumers to the database services. The access control includes address resolution access control, connection establishment access control, and data exchange access control based on said access control list.

Abstract: A system and method can deploy and manage software services in virtualized and non-virtualized environments. The system provides an enterprise application virtualization solution that allows for centralized governance and control over software and Java applications. Operations teams can define policies, based on application-level service level agreements (SLA) that govern the allocation of hardware and software resources to ensure that quality of service (QoS) goals are met across virtual and non-virtualized platforms. The system use a rules engine that can compare administrator defined constraints with runtime metrics; generate events when a constraint is violated by a metric of the runtime metrics and generate events when a constraint is violated by a metric of the runtime metrics.

Abstract: Metadata can be used for determining or selecting debug points to activate for server software. The metadata can be used for selecting or logically grouping the debug point without requiring the selecting of debug points based upon package boundaries. The metadata can be used by the system to produce a select set of the debug activation information. This debug activation information can be used by a management unit to activate debug points in the server software.

Abstract: A system and method can deploy and manage software services in virtualized and non-virtualized environments. The system provides an enterprise application virtualization solution that allows for centralized governance and control over software and Java applications. The system uses a plurality of agents to manage the software processes and resources running in the computing environment. The system also uses a controller to collect data from the agents about the current operating performance of the computing environment and to deploy the services in a way that best honors the service level agreements of all deployed services. The communication between each of the plurality of agents and the controller is secured with a mutual authentication method.

Abstract: A rotary dry drilling system comprises a surface mounted drill having a drill bit and a drill bit driver rotationally connected by a hollow drill string. There is included core sample capture means adapted to travel from the head of the drill string to the tail of the drill string. The system also comprises an auger for removing cuttings from a comminution zone and cuttings fluidization means to facilitate transport of cuttings from the comminution zone to the auger. Once the cuttings are removed by the auger they are collected and transported to the surface for disposal.

Abstract: The J2EE connector architecture can be extended to reduce coding redundancy and resource consumption. A base J2EE connector can be used to allow an application to communicate with a first system or location. An extended connector can be used to communicate with a second system or location. The extended connector can use communication information located in the base connector, such that the extended connector only needs to store configuration information to allow the application to communicate with the second system or location. This description is not intended to be a complete description of, or limit the scope of, the invention. Other features, aspects, and objects of the invention can be obtained from a review of the specification, the figures, and the claims.

Abstract: Upon an event, diagnostic information about the state of server software can be compiled. The diagnostic information can include information concerning the JDBC subsystem. A timer can be used to inhibit a compilation of a new diagnostic image if the old diagnostic image was recently compiled.

Abstract: A system and method can deploy and manage software services in virtualized and non-virtualized environments. The system provides an enterprise application virtualization solution that allows for centralized governance and control over software and Java applications. Operations teams can define policies, based on application-level service level agreements (SLA) that govern the allocation of hardware and software resources to ensure that quality of service (QoS) goals are met across virtual and non-virtualized platforms. The system use a rules engine that can compare administrator defined constraints with runtime metrics; generate events when a constraint is violated by a metric of the runtime metrics and generate events when a constraint is violated by a metric of the runtime metrics.

Abstract: A system and method can deploy and manage software services in virtualized and non-virtualized environments. The system provides an enterprise application virtualization solution that allows for centralized governance and control over software and Java applications. The system uses a plurality of agents to manage the software processes and resources running in the computing environment. The system also uses a controller to collect data from the agents about the current operating performance of the computing environment and to deploy the services in a way that best honors the service level agreements of all deployed services. The communication between each of the plurality of agents and the controller is secured with a mutual authentication method.

Abstract: Systems and methods in accordance with the present invention improve upon standard J2EE Connector Architecture implementations by adding functionality not included in the Architecture specification. An improved implementation can include, for example, packaging and development interfaces that allow any J2EE-compliant resource adapter to plug into J2EE applications in a modular manner. A connection manager can provide a scalable application environment that can support a large number of clients requiring access to an EIS. A connection manager can also provide active connection pool management and deployment. A transaction manager can allow transaction management across multiple resource managers, while a resource adapter can provide support for integrated error logging and tracing. A password converter tool can be used with the security management contract to parse and encrypt any passwords in the deployment descriptor.

Abstract: Diagnostic Instrumentation system can use diagnostic monitors. The diagnostic monitors can be indicated using instrumentation at class loading time. The diagnostic monitors can have associated diagnostic functions which can be enabled or disenabled while the server software is running.

Abstract: Diagnostic information can be stored and then collected into a large diagnostic image file upon an event, such as a prefailure condition. The diagnostic image can be compressed for emailing to a second site to allow the determination of problems with server software at the server software site.

Abstract: In one embodiment, watch rules can be created for diagnosis information. The watch rules can be examined against the diagnosis information and if there is a match, a notification can be based upon a predetermined notification type.

Abstract: A diagnostic context can be associated with a request and the diagnostic context can be used for determining whether to do diagnosis functions at predetermined points.