Abstract: A method and system of improving TCP performance by offloading TCP processing to a protocol acceleration module is provided. For example, one or more in-sequence data packets being transmitted between a protocol sender and a protocol receiver is observed, and either the protocol sender or receiver resides within a virtualized host. A determination is made whether the protocol packet buffer within the protocol acceleration module is full. In further examples, one or more in-sequence packets are processed in an accelerated mode, where the processing includes copying the in-sequence data packets into the protocol packet buffer.

Abstract: A device includes a multistage filter and an elephant trap. The multistage filter has hash functions and an array. The multistage filter is operable to receive a packet associated with a candidate heavy network user and send the packet to the hash functions. The hash functions generate hash function output values corresponding to indices in the array. The elephant trap is connected to the multistage filter. The elephant trap includes a buffer and probabilistic sampling logic. The probabilistic sampling logic is operable to attempt to add information associated with the packet to the buffer a particular percentage of the time based in part on the result of the multistage filter lookup. The buffer is operable to hold information associated with the packet, counter information, and timestamp information.

Abstract: An assessment environment is provided to generate real-time or nearly real-time events and/or alarms based at least on operational state of a host device. An agent module executing in the host device can monitor some or all of the performance metrics that are available in the host device and can analyze the monitored information in order to generate operational information and/or intelligence associated with an operational state of the host device and/or a computing component (e.g., an application, a virtual machine, or a container) associated therewith. The monitoring and analysis can be performed locally at the host device in real-time or nearly real-time. Analysis of the monitored information can be utilized to update first control information indicative of occurrence of an event and/or second control information indicative of presence or absence of an alarm condition. The control information can be sent to a remote device.

Abstract: A flexible policy system allows compliant apps on a mobile device to interact with a secure container memory space to ensure that data leak prevention policies are being enforced. Third-party applications can include an SDK or application wrapper that provide policy enforcement via agent functionality. An administrator can define policies via a web-based portal, allowing a server to identify appropriate users and devices and to distribute policies to those devices to be enforced within the secure container on each device. Policies can identify the datatypes and security levels, and the related applications and users that have authority to access that data. The agent or application wrapper enforces these policies on the mobile device before applications can access data in the secure memory space.

Abstract: A flexible policy system allows compliant apps on a mobile device to interact with a secure container memory space to ensure that data leak prevention policies are being enforced. Third-party applications can include an SDK or application wrapper that provide policy enforcement via agent functionality. An administrator can define policies via a web-based portal, allowing a server to identify appropriate users and devices and to distribute policies to those devices to be enforced within the secure container on each device. Policies can identify the datatypes and security levels, and the related applications and users that have authority to access that data. The agent or application wrapper enforces these policies on the mobile device before applications can access data in the secure memory space.

Abstract: A method of remote correction of invalid contact file syntax is disclosed. The method comprising receiving a file comprising information associated with one or more contacts; attempting to import the received file on a target device; in response to an import failure: depersonalizing the received file of contact information; identifying a location within one or more contacts the depersonalized file which caused the import failure, wherein the location is stored as metadata; transmitting the depersonalized file and the metadata to a remote server for repair; and receiving a repaired depersonalized file; repairing the received file of contacts based on the repaired depersonalized file; and importing the file of contacts on the target device.

Abstract: An electrical power subsystem includes a generator comprising a generator stator and a generator rotor, and a power converter electrically coupled to the generator. The power converter includes a plurality of rotor-side converters electrically coupled in parallel, a line-side converter, and a regulated DC link electrically coupling the plurality of rotor-side converters and the line-side converter. The electrical power subsystem further includes a stator power path for providing power from the generator stator to the power grid, and a converter power path for providing power from the generator rotor through the power converter to the power grid.

Abstract: Example embodiments described herein provide systems and methods for transmitting data packets between a protocol sender and a protocol receiver in a cloud environment, having either the protocol sender or the protocol receiver residing within a virtualized host. A protocol acceleration module may observe the data packets transmitted along the data path between the protocol sender and the protocol receiver using protocol stack configuration information of the protocol sender. The protocol acceleration module may override the protocol stack configuration information with policy-based protocol stack configuration information such that data packets transmitted from the protocol acceleration module to the protocol receiver use the policy-based protocol stack configuration information. For various embodiments, the protocol stack configuration information of the protocol sender is not modified.

Abstract: Aspects of this disclosure relate to monitoring use of shared resources to identify processes using such shared resources in a manner that may be affecting the performance of other processes. In one example, a method comprises: monitoring, by a computing device, usage metrics for a shared cache that is shared by one or more processors of the computing device; mapping the usage metrics to each of a plurality of virtual computing environments executing on the one or more processors, wherein the plurality of virtual computing environments includes a first virtual computing environment and a second virtual computing environment; determining, based on the mapped usage metrics, that the first virtual computing environment is using the shared cache in a manner that adversely affects the performance of the second virtual computing environment; and restricting, by the computing device, access to the shared cache by the first virtual computing environment.

Abstract: This disclosure describes techniques for monitoring, scheduling, and performance management for virtualization infrastructures within networks. In one example, a computing system includes a plurality of different cloud-based compute clusters (e.g., different cloud projects), each comprising a set of compute nodes. Policy agents execute on the compute nodes to monitor performance and usage metrics relating to resources of the compute nodes. Policy controllers within each cluster deploy policies to the policy agents and evaluate performance and usage metrics from the policy agents by application of one or more rulesets for infrastructure elements of the compute cluster. Each of the policy controllers outputs data to a multi-cluster dashboard software system indicative of a current health status for the infrastructure elements based on the evaluation of the performance and usage metrics for the cluster.

Abstract: A cloud extension agent can be provided on a customer premise for interfacing, via an outbound secure connection, cloud based services. The cloud extension agent can reach the cloud based services through existing firewall infrastructure, thereby providing simple, secure deployment. Furthermore, the secure connection can enable substantially real-time communication with a cloud service to provide web-based, substantially real time control or management of resources on the customer premises via the cloud extension agent.

Abstract: In various example embodiments, a system and method are presented for a bandwidth (BW) management system. The BW management system includes a BW manager module to manage bandwidth of a collection of flows by traffic classes using bandwidth limits assigned to the traffic classes arranged in a hierarchical bandwidth tree (HBT). The BW management system includes a quality of service (QOS) manager module to manage bandwidth for leaf traffic subclasses in the HBT based on application priority classifications. The bandwidth management system including a window manager (WM) module to manage bandwidth for individual flows in the collection of flows using a sliding window protocol to control the rate at which the first host transmits data packets to the second host. The QOS manager module is in communication with the WM module and the BW manager module while the bandwidth management system is actively managing the bandwidth of the collection of flows.

Abstract: In various example embodiments, a system and method are presented for a bandwidth (BW) management system. The BW management system accepts, on behalf of a receiving host, data packets for a first individual flow at a flow rate sent by a sending host. The bandwidth management system manages bandwidth by traffic classes representing collections of flows associated with nodes in a hierarchical bandwidth tree (HBT). The first individual flow is included within the collection of individual flows associated with one or more of the traffic classes. The BW management system controls the rate at which the sending host is transmitting the data packets for the first individual flow using a sliding window protocol by managing the bandwidth utilization of the nodes to conform to bandwidth limits assigned to the nodes. The BW management system receives the data packets for the first individual flow at an adjusted flow rate based on the sliding window protocol.

Abstract: A cloud extension agent can be provided on a customer premise for interfacing, via an outbound secure connection, cloud based services. The cloud extension agent can reach the cloud based services through existing firewall infrastructure, thereby providing simple, secure deployment. Furthermore, the secure connection can enable substantially real-time communication with a cloud service to provide web-based, substantially real time control or management of resources on the customer premises via the cloud extension agent.

Abstract: Managing data resource utilization in a wireless network environment comprising a first data network and a second data network is described herein. The described management infrastructure and method incorporates monitoring data usage of a wireless network subscriber over the first data network, determining that the data usage over the first data network meets a specified threshold, and, in response to the determination that usage has reached the specified threshold, administratively disconnecting the wireless network subscriber from the first data network so as to cause a data session of the wireless network subscriber to be reassigned to the second data network.

Abstract: Embodiments of the present invention are directed to generating and delivering data elements out of the context of an application installation. Each data element generated by an application is transmitted to a collection server after a networked computing device has connected back to a network, and even after the application has been removed from the networked computing device. Each data element is associated with a globally unique transaction identifier. Each data element and its corresponding transaction identifier are packaged together for transmission to the collection server via one or more of a plurality of transmission pathways, including a messaging pathway. The collection server uses the transaction identifier to check whether a corresponding data element is already stored by the collection server. The data element is stored by the collection server, if not already stored.

Abstract: A method and apparatus of processing multimedia data comprising a first section received in error are disclosed. The method comprises obtaining error distribution information corresponding to the first section. The method further comprises applying one of a plurality of error recovery schemes to the first section of the multimedia data based on the error distribution information.

Abstract: A cloud extension agent can be provided on a customer premise for interfacing, via an outbound secure connection, cloud based services. The cloud extension agent can reach the cloud based services through existing firewall infrastructure, thereby providing simple, secure deployment. Furthermore, the secure connection can enable substantially real-time communication with a cloud service to provide web-based, substantially real time control or management of resources on the customer premises via the cloud extension agent.

Abstract: Techniques for error concealment in multimedia data processing. In an embodiment, error distribution information corresponding to a first section in an access unit is obtained. In another embodiment, a plurality of error recovery schemes may be applied to the first section of the multimedia data based on the error distribution information.

Abstract: A cloud extension agent can be provided on a customer premise for interfacing, via an outbound secure connection, cloud based services. The cloud extension agent can reach the cloud based services through existing firewall infrastructure, thereby providing simple, secure deployment. Furthermore, the secure connection can enable substantially real-time communication with a cloud service to provide web-based, substantially real time control or management of resources on the customer premises via the cloud extension agent.