Abstract: A system and method are disclosed associated with a cloud platform as a service provider. A monitoring agent, associated with a database service instance running on a client database virtual machine, periodically executes a performance throttling detection engine. The performance throttling detection engine gathers database statistics based on metrics and features of the database service using a rule-based approach. When it is determined that a pre-determined condition is met, the system may transmit the gathered database statistics to an external application. For example, the external application might comprise a database tuning service and the pre-determined condition may be associated with a decision that the database service may potentially need to tune knob configuration parameters (associated with memory knobs, background writer knobs, asynchronous knobs, etc.).

Abstract: Some embodiments may be associated with a cloud computing environment. A serverless runtime workload may execute an eBPF program via a kprobe which gets invoked when function code is executed as a Linux process. The system may determine, by the kprobe function associated with an identifier, that an orchestrator is evicting the serverless runtime workload. Responsive to the determination, a userspace program may be invoked via the eBPF in tandem with the kprobe acting as an interception mechanism. The system may then capture the current workload process state data associated with the serverless runtime workload based on the identifier. A clustered memory-based storage component may store the captured current workload process state data in association with the identifier. A subsequent serverless runtime workload may determine that the orchestrator is restoring the serverless runtime workload.

Abstract: Some embodiments may be associated with a cloud computing environment. A cloud resource credential management system may be provisioned as part of a virtual machine deployment, access information associated with an application or a service configuration file and establish a cloud resource credential provisioning system external to an application to be executed in connection with the virtual machine. The cloud resource credential provisioning system may, for example, map a cloud resource policy and a cloud resource credential. The cloud resource credential provisioning system may then intercept a cloud resource call from the application to a cloud resource provider and validate that the cloud call request complies with the cloud resource policy. If the cloud resource call complies with the cloud resource policy, the cloud resource credential provisioning system may extend the cloud resource call with the cloud resource credential and forward the extended cloud resource call to the cloud resource provider.

Abstract: A host delegates Just-In-Time (JIT) bytecode compilation to a serverless Web Assembly (WASM) runtime. The WASM runtime receives the bytecode, together with any additional arguments (e.g.: offsets of dependent functions, vtable metadata, virtual machine state). The host may include a parser to provide the additional arguments. In response to receiving the bytecode and arguments, the WASM runtime triggers a thread and loads appropriate WASM modules to compile the bytecode. The resulting assembly instructions are sent back to the host for execution in connection with the (frequently requested) method. Only the bytecode of frequently-accessed methods (as determined at the host) may be delegated for compilation. Delegation of bytecodes for compilation according to embodiments, may conserve a significant percentage of CPU cycles at the host, which can then be used for executing code instead.

Abstract: Some embodiments may be associated with a cloud-based computing environment. A multi-tenant master process platform, associated with a RDBMS, may create a logical database for a tenant on a physical instance of the cloud-based computing environment. A connection to the logical database may be received from a client user associated with the tenant, and a process for the connection may be created. A process identification number created for the process may then be captured along with the database identifier for the tenant using an in-kernel virtual machine program. The system may send the process identification number and the database identifier to a user space program. The user space program creates a control group with the name of the database identifier and places the process identification number into the control group. The control group can then be limited with respect to a maximum amount of resources (memory, CPU etc.).

Abstract: Some embodiments may be associated with a cloud-based computing environment. A WASM runtime may execute as serverless functions on an entity (VM or container) dynamically selected based on a data store location (associated with data locality and/or gravity). The WASM runtime may include one or more sandboxes each running a WASM module. A database service may access the data store, and the database service may execute on the same entity as the WASM runtime. In some embodiments, an orchestration layer selects the entity based on a default policy or user-defined custom rules in accordance with exposed attributes (CPU load, memory load, read/write mixture, etc.). According to some embodiments, the serverless functions execute in a multi-tenant fashion. Moreover, the WASM runtime process may use instruction set secure enclaves to secure an access host such that, even if a root is compromised, an attacker cannot access a sandbox memory heap.

Abstract: A first forwarding VM may execute in a first availability zone and have a first IP address. Similarly, a second forwarding VM may execute in a second availability zone and have a second IP address. The first and second IP addresses may be recorded with a cloud DNS web service of a cloud provider such that both receive requests from applications directed to a particular DNS name acting as a single endpoint. A service cluster may include a master VM node and a standby VM node. An IPtable in each forwarding VM may forward a request having a port value to a cluster port value associated with the master VM node. Upon a failure of the master VM node, the current standby VM node may be promoted to execute in master mode and the IPtables may be updated to now forward requests having the port value to a cluster port value associated with the newly promoted master VM node (which was previously the standby VM node).

Abstract: An updater platform may create a listening delegator process, associated with a listener file descriptor, within a deployment (without implementing an accept protocol). The platform may execute an original instance of an application process within the deployment and intercept a socket creation call from the original instance of the application process and replace it with the listener file descriptor. As a result, incoming connection requests are received by the listening delegator process and forwarded to the original instance of the application process. The platform may then determine that a configuration update is to be made to the application process and start an additional instance of the application process, with the updated configuration, within the deployment, such that incoming connection requests are received by the listening delegator process and forwarded to the additional instance of the application process. The platform may then switch off the original instance of the application process.

Abstract: Various embodiments of systems and methods for decentralized image management are described herein. The method includes generating, distributing, and retrieving images on peer-to-peer network. Request for generating an image is received. Multiple components/layers of a to-be-generated image is identified. A layer is stored as a file. Files corresponding to the layers are packaged as an image file representing the image. The packaged image file and/or files of respective layers are distributed across the network, e.g., across a plurality of available nodes upon receiving a distribution command/request. When a request for retrieving the image is received, the nodes storing the multiple layers of the image are identified. The layers are retrieved from the identified multiple nodes. Using the retrieved multiple layers, the image is recreated/generated.

Abstract: Some embodiments may be associated with a cloud-based actor framework. A dispatcher platform may determine that a first tenant actor is to be created for a first tenant in connection with a workload associated with a plurality of tenant identifiers. The first tenant may be, for example, associated with a first tenant identifier. The dispatch platform may then select a first thread for the first tenant actor from a pool of available threads and spin a first web assembly module such that execution of the first web assembly module is associated with a first web assembly browser sandbox. The dispatcher platform can then securely create the first tenant actor within the first web assembly browser sandbox to execute the workflow for the first tenant identifier. Similarly, a second web assembly browser sandbox may execute a second tenant actor for a second tenant identifier.

Abstract: A Relational Database Management System (“RDBMS”) as a service cluster may including a master RDBMS Virtual Machine (“VM”) node associated with an Internet Protocol (“IP”) address and a standby RDBMS VM node associated with an IP address. The RDBMS as a service (e.g., PostgreSQL as a service) may also include n controller VM nodes each associated with an IP address. An internal load balancer may receive requests from cloud applications and include a frontend IP address different than the RDBMS IP as a service addresses and a backend pool including indications of the master RDBMS VM node and the standby RDBMS VM node. A Hyper-Text Transfer Protocol (“HTTP”) custom probe may transmit requests for the health of the master RDBMS VM node and the standby RDBMS VM node via the associated IP addresses, and responses to the requests may be used in connection with a failover operation.

Abstract: Some embodiments may be associated with a cloud computing environment. A device layer may execute a kernel and determine that a write to disk storage is requested by an application executing in the cloud computing environment. A kernel function at the device layer may mark buffers of a page in a page cache that correspond to the requested write as dirty. An event-driven mechanism may send an event to an entry handler in user space, wherein the event has a block number associated with the dirty buffer as a payload. the block numbers received via events may be accumulated in the user space until it is determined that a pre-determined condition associated with the accumulated block numbers is satisfied. At that point, blocks associated with the accumulated block numbers may be saved to a persistent data store as an incremental backup.

Abstract: Some embodiments provide a non-transitory machine-readable medium that stores a program executable by at least one processing unit of a computing device. The program monitors utilization of a set of resources by a resource consumer operating on the computing device. Based on the monitored utilization of the set of resources, the program further generates a model that includes a plurality of long short-term memory recurrent neural network (LSTM-RNN) layers and a set of attention mechanism layers. The model is configured to predict future utilization of the set of resources. Based on the monitored utilization of the set of resources and the model, the program also determines a set of predicted values representing utilization of the set of resources by the resource consumer operating on the computing device.

Abstract: Some embodiments may be associated with a cloud computing environment. A cloud resource credential management system may be provisioned as part of a virtual machine deployment, access information associated with an application or a service configuration file and establish a cloud resource credential provisioning system external to an application to be executed in connection with the virtual machine. The cloud resource credential provisioning system may, for example, map a cloud resource policy and a cloud resource credential. The cloud resource credential provisioning system may then intercept a cloud resource call from the application to a cloud resource provider and validate that the cloud call request complies with the cloud resource policy. If the cloud resource call complies with the cloud resource policy, the cloud resource credential provisioning system may extend the cloud resource call with the cloud resource credential and forward the extended cloud resource call to the cloud resource provider.

Abstract: A system and method are disclosed to facilitate a database tuning as a service offered by a cloud platform as a service provider. A throttling detection engine, associated with a database service instance, may periodically determine if an automated database tuning process should be performed. When it is determined that the automated database tuning process should be performed, the throttling detection engine may transmit database performance metrics. A database tuner as a service, coupled to the throttling detection engine, may access aggregated database performance metrics of the database service instance and determine a set of tunable parameters associated with the database service instance. The database tuner as a service may then execute the automated database tuning process to recommend, using an intelligent algorithm, a new set of configurations for the set of tunable parameters to be applied to the database service instance.

Abstract: Some embodiments may be associated with a cloud computing environment. A device layer may execute a kernel and determine that a write to disk storage is requested by an application executing in the cloud computing environment. A kernel function at the device layer may mark buffers of a page in a page cache that correspond to the requested write as dirty. An event-driven mechanism may send an event to an entry handler in user space, wherein the event has a block number associated with the dirty buffer as a payload. the block numbers received via events may be accumulated in the user space until it is determined that a pre-determined condition associated with the accumulated block numbers is satisfied. At that point, blocks associated with the accumulated block numbers may be saved to a persistent data store as an incremental backup.

Abstract: A system and method of reducing network bandwidth for application development are provided. The method comprises receiving from a developer platform (i) core application software and (ii) dependency software associated with the core application software. The compiled dependency software is transmitted to a first server associated with cloud storage. The compiled core application software is transmitted to a second server associated with the cloud storage. An application based on the compiled core application software and the compiled dependency software may be executed.

Abstract: Various embodiments of systems and methods for monitoring IoT gateways are described herein. The method includes rendering an option to operate an internet of things (IoT) gateway in one of a profile and a normal mode. When the profile mode is selected, a profiling agent is attached to the IoT gateway to captured one or more gateway attributes indicative of performance of at least one of a software application and one or more processes executing within the software application of the IoT gateway. The captured gateway attributes are sent to a server or cloud for further analysis and processing, e.g., to improve software application executing within the IoT gateway to enhance the performance of the IoT gateway. When the normal mode is selected, a program to capture one or more hardware attributes of the IoT gateway is executed to capture hardware attributes to analyze the performance of the IoT gateway.

Abstract: Various embodiments of systems and methods for decentralized image management are described herein. The method includes generating, distributing, and retrieving images on peer-to-peer network. Request for generating an image is received. Multiple components/layers of a to-be-generated image is identified. A layer is stored as a file. Files corresponding to the layers are packaged as an image file representing the image. The packaged image file and/or files of respective layers are distributed across the network, e.g., across a plurality of available nodes upon receiving a distribution command/request. When a request for retrieving the image is received, the nodes storing the multiple layers of the image are identified. The layers are retrieved from the identified multiple nodes. Using the retrieved multiple layers, the image is recreated/generated.

Abstract: Various embodiments of systems and methods for decentralized image management are described herein. The method includes generating, distributing, and retrieving images on peer-to-peer network. Request for generating an image is received. One or more components/layers of a to-be-generated image is identified. A layer is stored as a file. Files corresponding to the layers are packaged as an image file representing the image. The packaged image file and/or files of respective layers are distributed across the network, e.g., across a plurality of available nodes upon receiving a distribution command/request. When a request for retrieving the image is received, the nodes storing the one or more layers of the image are identified. The layers are retrieved from the identified one or more nodes. Using the retrieved one or more layers, the image is recreated/generated.