Abstract: Some embodiments of the invention provide a method for monitoring and adjusting a service chain that includes several services to perform on data messages passing through a network. For a service chain implemented by a set of service paths each of which includes several service nodes that implement the services of the service chain, the method receives, from a set of service proxies, operational data relating to data transmission characteristics of a set of operational service nodes. The method analyzes the data transmission characteristics. In response to the analysis of the data transmission characteristics, the method alters the set of service paths implementing the service chain.

Abstract: Some embodiments of the invention provide a method for monitoring and adjusting a service chain that includes several services to perform on data messages passing through a network. For a service chain implemented by a set of service paths each of which includes several service nodes that implement the services of the service chain, the method receives, from a set of service proxies, operational data relating to data transmission characteristics of a set of operational service nodes. The method analyzes the data transmission characteristics. In response to the analysis of the data transmission characteristics, the method alters the set of service paths implementing the service chain.

Abstract: A novel method of providing virtual private access to a software defined data center (SDDC) is provided. The SDDC uses distributed VPN tunneling to allow external access to application services hosted in the SDDC. The SDDC includes host machines for providing computing and networking resources and a VPN gateway for providing external access to those resources. The host machines that host the VMs running the applications that VPN clients are interested in connecting performs the VPN encryption and decryption. The VPN gateway does not perform any encryption and decryption operations. The packet structure is such that the VPN gateway can read the IP address of the VM without decrypting the packet.

Abstract: A novel method of providing virtual private access to a software defined data center (SDDC) is provided. The SDDC uses distributed VPN tunneling to allow external access to application services hosted in the SDDC. The SDDC includes host machines for providing computing and networking resources and a VPN gateway for providing external access to those resources. The host machines that host the VMs running the applications that VPN clients are interested in connecting performs the VPN encryption and decryption. The VPN gateway does not perform any encryption and decryption operations. The packet structure is such that the VPN gateway can read the IP address of the VM without decrypting the packet.

Abstract: Some embodiments of the invention provide a method for monitoring a particular service chain that includes several services to perform on data messages passing through a network. The method provides a user interface to receive a selection of the particular service chain from a plurality of service chains. The particular service chain is implemented by several service paths, each of which includes several service nodes that implement the services of the service chain. The method generates a graphical display of the service paths through the service nodes, and as part of this graphical display, provides operational data relating to operations of the service nodes of the service paths. In some embodiments, the method also provides, as part of the graphical display, operational data relating to operations of individual service path.

Abstract: Some embodiments of the invention provide a method for monitoring and adjusting a service chain that includes several services to perform on data messages passing through a network. For a service chain implemented by a set of service paths each of which includes several service nodes that implement the services of the service chain, the method receives, from a set of service proxies, operational data relating to data transmission characteristics of a set of operational service nodes. The method analyzes the data transmission characteristics. In response to the analysis of the data transmission characteristics, the method alters the set of service paths implementing the service chain.

Abstract: Some embodiments of the invention provide a method for monitoring a particular service chain that includes several services to perform on data messages passing through a network. The method provides a user interface to receive a selection of the particular service chain from a plurality of service chains. The particular service chain is implemented by several service paths, each of which includes several service nodes that implement the services of the service chain. The method generates a graphical display of the service paths through the service nodes, and as part of this graphical display, provides operational data relating to operations of the service nodes of the service paths. In some embodiments, the method also provides, as part of the graphical display, operational data relating to operations of individual service path.

Abstract: A novel method of providing virtual private access to a software defined data center (SDDC) is provided. The SDDC uses distributed VPN tunneling to allow external access to application services hosted in the SDDC. The SDDC includes host machines for providing computing and networking resources and a VPN gateway for providing external access to those resources. The host machines that host the VMs running the applications that VPN clients are interested in connecting performs the VPN encryption and decryption. The VPN gateway does not perform any encryption and decryption operations. The packet structure is such that the VPN gateway can read the IP address of the VM without decrypting the packet.

Abstract: A novel method of providing virtual private access to a software defined data center (SDDC) is provided. The SDDC uses distributed VPN tunneling to allow external access to application services hosted in the SDDC. The SDDC includes host machines for providing computing and networking resources and a VPN gateway for providing external access to those resources. The host machines that host the VMs running the applications that VPN clients are interested in connecting performs the VPN encryption and decryption. The VPN gateway does not perform any encryption and decryption operations. The packet structure is such that the VPN gateway can read the IP address of the VM without decrypting the packet.

Abstract: A novel method of providing virtual private access to a software defined data center (SDDC) is provided. The SDDC uses distributed VPN tunneling to allow external access to application services hosted in the SDDC. The SDDC includes host machines for providing computing and networking resources and a VPN gateway for providing external access to those resources. The host machines that host the VMs running the applications that VPN clients are interested in connecting performs the VPN encryption and decryption. The VPN gateway does not perform any encryption and decryption operations. The packet structure is such that the VPN gateway can read the IP address of the VM without decrypting the packet.

Abstract: A set of data objects is identified satisfying a search query associated with an application adapted to perform a set of transactions on the data objects. A plurality of common attributes are identified, each shared by at least two objects in the set of data objects. A graphical analytics viewer is dynamically selected from a plurality of viewers each adapted to present a representation of data objects according to a corresponding analytics scheme. The selected viewer is selected for presentation in a graphical user interface based on identifying that the viewer has an analytics scheme related to one of the common attributes. Presentation of the selected viewer includes a selectable graphical representation of each data object in the set of data objects. At least one of the graphical representations is selected and a transaction from the set of transactions initiated on the data object corresponding to the selected graphical representation.

Abstract: A system and method to enable a transparent, outboard, proxy secure channel between two endpoints on a Local Area Network (LAN) using front-end network encryption devices are provided. A secure channel provides an encrypted, authenticated communications pathway that protects an otherwise insecure communications network against threats including passive eavesdropping, active modification and insertion, and impersonation. One version provides a fully transparent secure channel between two endpoints which may be unaware of the data protection being applied. An alternate version enables single-ended communications protection between an endpoint transparently protected by a front-end network encryption device and a remote endpoint having compatible, interoperable encryption software. In a single-ended application, the remote endpoint may be unaware that (1.) the other endpoint is not performing the encryption nor that (2.) a front-end network encryption device is performing the encryption on its behalf.