Abstract: Systems and methods of reconstructing execution call flows to detect anomalies is provided. A device can establish call flows using information extracted from a log file to. Each of the call flows can identify information from the log file of a call flowing through a plurality of modules. The device can identify a count of a number of occurrences of one or more keywords in information of each call flow. The device can generate a vector of numbers for each call flow based at least on the count for the one or more keywords for that call flow. The device can classify each call flow into one or more clusters that indicate whether an operation of the call flow is anomalous. The device can classify each call flow using the vector of numbers for each call flow.

Abstract: The disclosure is directed towards systems and methods for configuring a device via an SDN controller. A connection can be established between an SDN controller and a device intermediary to a plurality of clients and a plurality of servers, in order to provision resources of the device for use by one or more applications of the SDN controller. A request can be received by the device from the SDN controller to define one or more configuration policies for an application communicating with the SDN controller. The configuration policies can configure the device to provide one or more functions of the device to the application communicating with the SDN controller. The request can be generated by the SDN controller and can include function definitions based on a device model installed on the SDN controller. The device model can corresponding to the device and can include device properties of the device and configuration parameters for each of the functions provided by the device.

Abstract: Described embodiments provide systems and methods for determining a change in a performance of a server. A device can receive a processing load and a request rate of a server. The device can determine a value indicative of a correlation between the processing load and the request rate of the server for a range of time. The device can determine whether the value is outside a range of a threshold for the server. The threshold can be indicative of one or more previous values determined for the server for the range of time. The device can generate an alert indicating a change in a performance of the server responsive to a comparison of the value to the threshold for the server.

Abstract: Described embodiments provide systems and methods for learning across multiple application delivery controllers and updating settings across the application delivery controllers. A profile can be generated based on selection of a set of intermediary devices managed by a device. The set of intermediary devices configured to load balance data of an application hosted in different computing environments. Activity can be identified at the intermediary devices with use of a firewall. The activity having an appearance of a malicious attack on at least one intermediary device of the set. The device can determine if the activity is permissible or a violation based on a comparison of an aggregation of data records for the identified activity and a threshold. The device can provide a notification to at least one intermediary device of the set to configure the at least one intermediary device to allow the activity or prevent the activity.

Abstract: Described embodiments provide systems and methods for learning across multiple application delivery controllers and updating settings across the application delivery controllers. A profile can be generated based on selection of a set of intermediary devices managed by a device. The set of intermediary devices configured to load balance data of an application hosted in different computing environments. Activity can be identified at the intermediary devices with use of a firewall. The activity having an appearance of a malicious attack on at least one intermediary device of the set. The device can determine if the activity is permissible or a violation based on a comparison of an aggregation of data records for the identified activity and a threshold. The device can provide a notification to at least one intermediary device of the set to configure the at least one intermediary device to allow the activity or prevent the activity.

Abstract: Described embodiments provide systems and methods for monitoring server utilization and reallocating resources using upper bound values. A device can determine a value indicative of an upper bound of a processing load of a server using data points detected for the processing load over a first range of time. The upper bound can correspond to a percentage of the processing load during the first range of time. The device can monitor, using the value, the processing load of the server over a second range of time. A determination can be made whether the value of the processing load is greater than a threshold during the second range of time. The device can generate an alert for the device responsive to a comparison of the value of the processing load to the threshold.

Abstract: Described embodiments provide systems and methods for determining a change in a performance of a server. A device can receive a processing load and a request rate of a server. The device can determine a value indicative of a correlation between the processing load and the request rate of the server for a range of time. The device can determine whether the value is outside a range of a threshold for the server. The threshold can be indicative of one or more previous values determined for the server for the range of time. The device can generate an alert indicating a change in a performance of the server responsive to a comparison of the value to the threshold for the server.

Abstract: Described embodiments provide systems and methods for monitoring server utilization and reallocating resources using upper bound values. A device can determine a value indicative of an upper bound of a processing load of a server using data points detected for the processing load over a first range of time. The upper bound can correspond to a percentage of the processing load during the first range of time. The device can monitor, using the value, the processing load of the server over a second range of time. A determination can be made whether the value of the processing load is greater than a threshold during the second range of time. The device can generate an alert for the device responsive to a comparison of the value of the processing load to the threshold.

Abstract: The disclosure is directed towards systems and methods for configuring a device via an SDN controller. A connection can be established between an SDN controller and a device intermediary to a plurality of clients and a plurality of servers, in order to provision resources of the device for use by one or more applications of the SDN controller. A request can be received by the device from the SDN controller to define one or more configuration policies for an application communicating with the SDN controller. The configuration policies can configure the device to provide one or more functions of the device to the application communicating with the SDN controller. The request can be generated by the SDN controller and can include function definitions based on a device model installed on the SDN controller. The device model can corresponding to the device and can include device properties of the device and configuration parameters for each of the functions provided by the device.

Abstract: The disclosure is directed towards systems and methods for configuring a device via an SDN controller. A connection can be established between an SDN controller and a device intermediary to a plurality of clients and a plurality of servers, in order to provision resources of the device for use by one or more applications of the SDN controller. A request can be received by the device from the SDN controller to define one or more configuration policies for an application communicating with the SDN controller. The configuration policies can configure the device to provide one or more functions of the device to the application communicating with the SDN controller. The request can be generated by the SDN controller and can include function definitions based on a device model installed on the SDN controller. The device model can corresponding to the device and can include device properties of the device and configuration parameters for each of the functions provided by the device.

Abstract: Methods and systems for providing network models and network configurations for communications are described. The method includes establishing, by a device intermediary to a plurality of clients and servers, a first interface on a manager of the device for delivering a network model of the device from the manager of the device to a software defined network (SDN) controller of an SDN. The method includes providing, via the first interface, the network model configured to provide definitions of one or more network layer entities of the device that are configured to provide network layer services. The method includes establishing, a second interface on the manager of the device configured to transmit and receive communications between the device and the SDN controller. The method includes receiving, by the manager via the second interface, network configuration to configure the device to process SDN application requests received from the SDN controller.

Abstract: The disclosure is directed towards systems and methods for configuring a device via an SDN controller. A connection can be established between an SDN controller and a device intermediary to a plurality of clients and a plurality of servers, in order to provision resources of the device for use by one or more applications of the SDN controller. A request can be received by the device from the SDN controller to define one or more configuration policies for an application communicating with the SDN controller. The configuration policies can configure the device to provide one or more functions of the device to the application communicating with the SDN controller. The request can be generated by the SDN controller and can include function definitions based on a device model installed on the SDN controller. The device model can corresponding to the device and can include device properties of the device and configuration parameters for each of the functions provided by the device.

Abstract: The disclosure is directed towards systems and methods for configuring a device via an SDN controller. A connection can be established between an SDN controller and a device intermediary to a plurality of clients and a plurality of servers, in order to provision resources of the device for use by one or more applications of the SDN controller. A request can be received by the device from the SDN controller to define one or more configuration policies for an application communicating with the SDN controller. The configuration policies can configure the device to provide one or more functions of the device to the application communicating with the SDN controller. The request can be generated by the SDN controller and can include function definitions based on a device model installed on the SDN controller. The device model can corresponding to the device and can include device properties of the device and configuration parameters for each of the functions provided by the device.

Abstract: The disclosure is directed towards systems and methods for integrating a device with a software-defined networking (SDN) controller. A device intermediary to a plurality of clients and a plurality of servers can receive a request to establish a communicative connection between an SDN controller and the device. The request can be based on a device package including a device model, a device script configured to integrate the device with the SDN controller and including one or more function call definitions, a functional profile including a default value for at least one parameter of the device, and a plurality of device-level configuration parameters specifying values of parameters utilized by the device. The device can receive a request to configure one or more functions of the device. The request can configure the functions generated by the SDN controller based on the device package.

Abstract: Methods and systems for providing network models and network configurations for communications are described. The method includes establishing, by a device intermediary to a plurality of clients and servers, a first interface on a manager of the device for delivering a network model of the device from the manager of the device to a software defined network (SDN) controller of an SDN. The method includes providing, via the first interface, the network model configured to provide definitions of one or more network layer entities of the device that are configured to provide network layer services. The method includes establishing, a second interface on the manager of the device configured to transmit and receive communications between the device and the SDN controller. The method includes receiving, by the manager via the second interface, network configuration to configure the device to process SDN application requests received from the SDN controller.

Abstract: The disclosure is directed towards systems and methods for integrating a device with a software-defined networking (SDN) controller. A device intermediary to a plurality of clients and a plurality of servers can receive a request to establish a communicative connection between an SDN controller and the device. The request can be based on a device package including a device model, a device script configured to integrate the device with the SDN controller and including one or more function call definitions, a functional profile including a default value for at least one parameter of the device, and a plurality of device-level configuration parameters specifying values of parameters utilized by the device. The device can receive a request to configure one or more functions of the device. The request can configure the functions generated by the SDN controller based on the device package.

Abstract: The disclosure is directed towards systems and methods for configuring a device via an SDN controller. A connection can be established between an SDN controller and a device intermediary to a plurality of clients and a plurality of servers, in order to provision resources of the device for use by one or more applications of the SDN controller. A request can be received by the device from the SDN controller to define one or more configuration policies for an application communicating with the SDN controller. The configuration policies can configure the device to provide one or more functions of the device to the application communicating with the SDN controller. The request can be generated by the SDN controller and can include function definitions based on a device model installed on the SDN controller. The device model can corresponding to the device and can include device properties of the device and configuration parameters for each of the functions provided by the device.