Abstract: Certain embodiments described herein are generally directed to a first host machine exchanging a Security Parameter Index (SPI) value with a second host machine by storing the SPI in an options field of an encapsulation header of an encapsulated packet.

Abstract: Computer system and method for characterizing throughput performance of a datacenter utilize bandwidth information of physical network interfaces in the datacenter and results of benchmark testing on throughput on a single processor core to compute a plurality of throughput constraints that define a throughput capacity region for the datacenter to improve throughput performance of the datacenter.

Abstract: Aspects of the present disclosure relate to adaptive and user-defined security against side-channel attacks in a virtual network. Traffic in the virtual network can be monitored at the hypervisor level and network security levels, such as padding and inclusion of dummy packets in the traffic stream, may be adaptively switched based on the monitored traffic information. In addition, user-defined security policies can be input to a management console. Thus, the security levels can be adaptive to real-time traffic bandwidth usage in the network and also flexibly specified by the user/administrator, which may be more efficient.

Abstract: A distributed computer system and method for managing secret information for virtual entities in the distributed computer system utilizes multiple secret storage service entities to provide secret information to a virtual entity to be hosted in a host computer in the distributed computer system. At least one piece of the secret information for the virtual entity is distributed to the multiple secret storage service entities to provide the secret information to the virtual entity using the at least one piece of the secret information from one of the multiple secret storage service entities.

Abstract: Computer system and method for characterizing throughput performance of a datacenter utilize bandwidth information of physical network interfaces in the datacenter and results of benchmark testing on throughput on a single processor core to compute a plurality of throughput constraints that define a throughput capacity region for the datacenter to improve throughput performance of the datacenter.

Abstract: Certain embodiments described herein are generally directed to a first host machine exchanging a Security Parameter Index (SPI) value with a second host machine by storing the SPI in an options field of an encapsulation header of an encapsulated packet.

Abstract: A distributed computer system and method for managing secret information for virtual entities in the distributed computer system utilizes multiple secret storage service entities to provide secret information to a virtual entity to be hosted in a host computer in the distributed computer system. At least one piece of the secret information for the virtual entity is distributed to the multiple secret storage service entities to provide the secret information to the virtual entity using the at least one piece of the secret information from one of the multiple secret storage service entities.

Abstract: In one embodiment, during participation in an online collaborative computing session, a computer process associated with the session may monitor an audio stream of the session for a predefined action-inducing phrase. In response to the phrase, a subsequent segment of the session is recorded, such that a report may be generated containing any recorded segments of the session (e.g., and dynamically sent to participants of the session).

Abstract: In one embodiment, during participation in an online collaborative computing session, a computer process associated with the session may monitor an audio stream of the session for a predefined action-inducing phrase. In response to the phrase, a subsequent segment of the session is recorded, such that a report may be generated containing any recorded segments of the session (e.g., and dynamically sent to participants of the session).

Abstract: According to the present invention, methods and apparatus are provided to improve the techniques and mechanisms for forwarding packets at a fiber channel switch. A combined area table/domain table (ATDT) is accessed using destination information associated with a fiber channel packet. Area/port or domain information can be used to address entries in the ATDT. Each entry provides one or more paths to a given destination. Traffic shaping, load balancing, and other policy based forwarding considerations can be applied.

Abstract: Provided are methods and apparatus that enforce zoning rules by separately employing source and destination information. In certain embodiments, information uniquely identifying network destinations is provided on a destination CAM. In these embodiments, each destination identified in the destination CAM has an associated zoning decision vector provided in a results memory. The vector provides specific zoning decisions (permit or deny transmission) for specific sources on the network. The specific zoning decision to be applied to a frame under consideration is selected from a zoning decision vector by using source information taken from the frame.

Abstract: According to the present invention, methods and apparatus are provided to improve the techniques and mechanisms for forwarding packets at a fibre channel switch. A combined area table/domain table (ATDT) is accessed using destination information associated with a fibre channel packet. Area/port or domain information can be used to address entries in the ATDT. Each entry provides one or more paths to a given destination. Traffic shaping, load balancing, and other policy based forwarding considerations can be applied.