Abstract: Embodiments of the disclosure provide systems and methods for providing access control in a multi-tenant, multi-cluster environment. Providing access control in such an environment can comprise defining, by a domain cluster, a plurality of user roles, each user role having a defined access permission for objects on tenant clusters of the environment. A request can be received by the domain cluster from a user to access the environment and a determination of a user role for the user can be made by the domain cluster. A token can be provided by the domain cluster in response to the request. The token can comprise a definition of access levels for the determined user role for the user and each tenant cluster can control access to the resource objects on the tenant cluster based on the definition of access levels defined in the token.

Abstract: An example method for a distributed NetFlow exporter with a single IP endpoint in a network environment is provided and includes configuring a network protocol stack of an exporter with switched virtual interface (SVI) state information of an SVI associated with a switch in a network, retrieving flow data from a NetFlow cache, and communicating the flow data to a collector according to the configured network protocol stack. Although the communication bypasses the SVI, the collector perceives the flow records as being communicated by the SVI. The SVI state information includes a public Internet Protocol (IP) address and a Media Access Control (MAC) address of the SVI, where the exporter executes on an adaptor of a server in the network. The method also includes configuring a destination IP address and a destination MAC address on the exporter according to a NetFlow policy.

Abstract: An example method for a distributed NetFlow exporter with a single IP endpoint in a network environment is provided and includes configuring a network protocol stack of an exporter with switched virtual interface (SVI) state information of an SVI associated with a switch in a network, retrieving flow data from a NetFlow cache, and communicating the flow data to a collector according to the configured network protocol stack. Although the communication bypasses the SVI, the collector perceives the flow records as being communicated by the SVI. The SVI state information includes a public Internet Protocol (IP) address and a Media Access Control (MAC) address of the SVI, where the exporter executes on an adaptor of a server in the network. The method also includes configuring a destination IP address and a destination MAC address on the exporter according to a NetFlow policy.