Abstract: A cloud extension agent can be provided on a customer premise for interfacing, via an outbound secure connection, cloud based services. The cloud extension agent can reach the cloud based services through existing firewall infrastructure, thereby providing simple, secure deployment. Furthermore, the secure connection can enable substantially real-time communication with a cloud service to provide web-based, substantially real time control or management of resources on the customer premises via the cloud extension agent.

Abstract: A flexible policy system allows compliant apps on a mobile device to interact with a secure container memory space to ensure that data leak prevention policies are being enforced. Third-party applications can include an SDK or application wrapper that provide policy enforcement via agent functionality. An administrator can define policies via a web-based portal, allowing a server to identify appropriate users and devices and to distribute policies to those devices to be enforced within the secure container on each device. Policies can identify the datatypes and security levels, and the related applications and users that have authority to access that data. The agent or application wrapper enforces these policies on the mobile device before applications can access data in the secure memory space.

Abstract: The present invention addresses the need for improved virtualized cloud infrastructure policy implementation and management in order allow real-time monitoring and optimization of virtualized resources. It provides systems and methods for real-time cloud infrastructure policy implementation and management that include a plurality of host devices, a plurality of real-time probe agents associated with the plurality of host devices operating on each of the plurality of host devices, and a policy engine communicatively coupled to the plurality of host devices and containing a policy associated with an application program deployed in at least one of the plurality of host devices. The policy engine is programmed to monitor in real time changes in deployment of the application program across the plurality of host devices and to push the policy to the real-time probe agent operating on each host device on which the application program is deployed.

Abstract: This disclosure describes techniques for analyzing information generated as a result of monitoring resources within computing environments. In one example, this disclosure describes a method that includes observing a plurality of alerts generated in response to monitoring resources associated with a plurality of connected elements within a network; determining a plurality of occurrence counts; determining a plurality of concurrent occurrence counts, wherein each of the plurality of concurrent occurrence counts represents a count of concurrent occurrences of two or more of the alerts in the set of historical alerts; and identifying one or more root cause alerts, wherein the one or more root cause alerts are determined based on the plurality of occurrence counts and the plurality of the concurrent occurrence counts, and wherein the one or more root cause alerts are a subset of the plurality of alerts.

Abstract: Techniques for presenting information about a network, virtualization infrastructure, cluster, or other computing environment, which may involve presentation of user interfaces that may enable nuanced, unique, and/or comprehensive insights into how infrastructure elements, instances, and/or computing resources are being used and information about patterns of usage and/or utilization. Techniques for communicating, within a computing system, information used to create, update, and/or modify the user interfaces that present information about a network, virtualization infrastructure, cluster, or other computing environment. Techniques in accordance with one or more aspects of the present disclosure may involve use of separate interfaces for collecting or accessing data used to draw a user interface that presents information about a network, and for collecting or receiving data used to update the user interface as changes occur to the utilization of infrastructure elements represented within the user interface.

Abstract: A computing system includes a computing device configured to execute a plurality of virtual machines, each virtual machine of the plurality of virtual machines configured to provide control plane functionality for at least a different respective subset of forwarding units of a network device, the computing device distinct from the network devices. The computing system also includes a policy agent configured to execute on the computing device. The agent is configured to determine that a particular virtual machine of the plurality of virtual machines provides control plane functionality for one or more forwarding units of the network device; determine control plane usage metrics for resources of the particular virtual machine; and output, to a policy controller, data associated with the control plane usage metrics and data associating the particular virtual machine with the one or more forwarding units for which the particular virtual machine provides control plane functionality.

Abstract: A variety of different graphical user interfaces are generated that when displayed provide a visual and interactive representation of one or more performance metrics associated with the operation of a computer network. The graphical user interfaces may be used to monitor the underlay computer network for a virtualization infrastructure, as one example. Aspects include grouping the servers of a computer network into a plurality of aggregates, each aggregate comprising one or more servers. A set of probes are configured that are issued by an agent of a server in one aggregate and sent through the computer network to one or more agents in the server(s) of a different aggregate. Responses and other measurements taken based on the issuance of the probes is gathered and analyzed to generate metrics that are then used to generate, at least in part, the information provided in the graphical user interfaces.

Abstract: A system that permits or otherwise facilitates assessment of operational state of a computing component in a computing environment. In one example, this disclosure describes a method that includes collecting, by a server device that is executing within a server device cluster, metric information indicative of an operational state of the server device, wherein the metric information is associated with a plurality of virtual computing instances executing on the server device; analyzing, by the server device and based on the metric information, whether a first condition associated with a first virtual computing instance is satisfied; analyzing, by the server device and based on the metric information, whether a second condition associated with a second virtual computing instance is satisfied; and updating control information characterizing the operational state of the server device executing within the server device cluster.

Abstract: Managing data resource utilization in a wireless network environment comprising a first data network and a second data network is described herein. The described management infrastructure and method incorporates monitoring data usage of a wireless network subscriber over the first data network, determining that the data usage over the first data network meets a specified threshold, and, in response to the determination that usage has reached the specified threshold, administratively disconnecting the wireless network subscriber from the first data network so as to cause a data session of the wireless network subscriber to be reassigned to the second data network.

Abstract: A method and system of improving TCP performance by offloading TCP processing to a protocol acceleration module is provided. For example, one or more in-sequence data packets being transmitted between a protocol sender and a protocol receiver is observed, and either the protocol sender or receiver resides within a virtualized host. A determination is made whether the protocol packet buffer within the protocol acceleration module is full. In further examples, one or more in-sequence packets are processed in an accelerated mode, where the processing includes copying the in-sequence data packets into the protocol packet buffer.

Abstract: A device includes a multistage filter and an elephant trap. The multistage filter has hash functions and an array. The multistage filter is operable to receive a packet associated with a candidate heavy network user and send the packet to the hash functions. The hash functions generate hash function output values corresponding to indices in the array. The elephant trap is connected to the multistage filter. The elephant trap includes a buffer and probabilistic sampling logic. The probabilistic sampling logic is operable to attempt to add information associated with the packet to the buffer a particular percentage of the time based in part on the result of the multistage filter lookup. The buffer is operable to hold information associated with the packet, counter information, and timestamp information.

Abstract: An assessment environment is provided to generate real-time or nearly real-time events and/or alarms based at least on operational state of a host device. An agent module executing in the host device can monitor some or all of the performance metrics that are available in the host device and can analyze the monitored information in order to generate operational information and/or intelligence associated with an operational state of the host device and/or a computing component (e.g., an application, a virtual machine, or a container) associated therewith. The monitoring and analysis can be performed locally at the host device in real-time or nearly real-time. Analysis of the monitored information can be utilized to update first control information indicative of occurrence of an event and/or second control information indicative of presence or absence of an alarm condition. The control information can be sent to a remote device.

Abstract: A flexible policy system allows compliant apps on a mobile device to interact with a secure container memory space to ensure that data leak prevention policies are being enforced. Third-party applications can include an SDK or application wrapper that provide policy enforcement via agent functionality. An administrator can define policies via a web-based portal, allowing a server to identify appropriate users and devices and to distribute policies to those devices to be enforced within the secure container on each device. Policies can identify the datatypes and security levels, and the related applications and users that have authority to access that data. The agent or application wrapper enforces these policies on the mobile device before applications can access data in the secure memory space.

Abstract: A flexible policy system allows compliant apps on a mobile device to interact with a secure container memory space to ensure that data leak prevention policies are being enforced. Third-party applications can include an SDK or application wrapper that provide policy enforcement via agent functionality. An administrator can define policies via a web-based portal, allowing a server to identify appropriate users and devices and to distribute policies to those devices to be enforced within the secure container on each device. Policies can identify the datatypes and security levels, and the related applications and users that have authority to access that data. The agent or application wrapper enforces these policies on the mobile device before applications can access data in the secure memory space.

Abstract: A method of remote correction of invalid contact file syntax is disclosed. The method comprising receiving a file comprising information associated with one or more contacts; attempting to import the received file on a target device; in response to an import failure: depersonalizing the received file of contact information; identifying a location within one or more contacts the depersonalized file which caused the import failure, wherein the location is stored as metadata; transmitting the depersonalized file and the metadata to a remote server for repair; and receiving a repaired depersonalized file; repairing the received file of contacts based on the repaired depersonalized file; and importing the file of contacts on the target device.

Abstract: An electrical power subsystem includes a generator comprising a generator stator and a generator rotor, and a power converter electrically coupled to the generator. The power converter includes a plurality of rotor-side converters electrically coupled in parallel, a line-side converter, and a regulated DC link electrically coupling the plurality of rotor-side converters and the line-side converter. The electrical power subsystem further includes a stator power path for providing power from the generator stator to the power grid, and a converter power path for providing power from the generator rotor through the power converter to the power grid.

Abstract: Example embodiments described herein provide systems and methods for transmitting data packets between a protocol sender and a protocol receiver in a cloud environment, having either the protocol sender or the protocol receiver residing within a virtualized host. A protocol acceleration module may observe the data packets transmitted along the data path between the protocol sender and the protocol receiver using protocol stack configuration information of the protocol sender. The protocol acceleration module may override the protocol stack configuration information with policy-based protocol stack configuration information such that data packets transmitted from the protocol acceleration module to the protocol receiver use the policy-based protocol stack configuration information. For various embodiments, the protocol stack configuration information of the protocol sender is not modified.

Abstract: This disclosure describes techniques for monitoring, scheduling, and performance management for virtualization infrastructures within networks. In one example, a computing system includes a plurality of different cloud-based compute clusters (e.g., different cloud projects), each comprising a set of compute nodes. Policy agents execute on the compute nodes to monitor performance and usage metrics relating to resources of the compute nodes. Policy controllers within each cluster deploy policies to the policy agents and evaluate performance and usage metrics from the policy agents by application of one or more rulesets for infrastructure elements of the compute cluster. Each of the policy controllers outputs data to a multi-cluster dashboard software system indicative of a current health status for the infrastructure elements based on the evaluation of the performance and usage metrics for the cluster.