Abstract: A cloud computing platform provides zero trust network access as a service to customers that maintain applications on-premises, and a zero trust network access appliance at the customer premises that couples the on-premises applications to the cloud computing platform. In this context, the number of secure tunnels maintained for an application between the customer premises and the cloud computing platform may be dynamically managed to support variations in user demand for the application.

Abstract: A cloud computing platform provides zero trust network access as a service to customers that maintain applications on-premises. In this context, the cloud computing platform may associate customers and/or applications with specific service proxies, and add an abstraction layer for network access that maps an alias domain for each customer and/or application to a network load balancer associated with the specific service proxies associated with the corresponding application(s). This approach advantageously simplifies the configuration of service proxies at the cloud computing platform by permitting dedicated relationships among network load balancers, specific service proxies, and specific applications, while concurrently reducing or avoiding the administrative burden on customers of updating network pointers when the clusters of service proxies are periodically reconfigured to adjust to varying user traffic.

Abstract: A cloud computing platform provides zero trust network access as a service to a customer that maintains an application on-premises. In this context, the customer may be required to demonstrate ownership of a domain before the cloud computing platform will provide access to the on-premises application via the domain.

Abstract: Infrastructure for zero trust network access (ZTNA) is deployed as a cloud-based service remotely from a customer premises where user applications are hosted. By connecting an appliance on the customer premises to the cloud-based service through a secure tunnel or the like, an application hosted on the customer premises can then be accessed externally as a ZTNA application without the customer premises opening a firewall to public networks or otherwise exposing potential attack surfaces to the customer premises.

Abstract: Example embodiments are directed to a solid-state drive (SSD) enclosure design that is adaptable for different printed circuit board assemblies (PCBA). The SSD enclosure design comprises a three-piece construction that includes a top enclosure, a bottom enclosure, and an intermediate structure. The bottom enclosure is coupled to the top enclosure to form a housing for a PCBA having NOT AND (NAND) devices and a controller. The intermediate structure is coupled to the PCBA and positioned between the top enclosure and the bottom enclosure within the housing. The intermediate structure comprises a plurality of heatsinks to transfer heat from the NAND devices and a controller heatsink to transfer heat from the controller, whereby the type and location of the heatsinks can be changed for a different PCBA without having to change the top enclosure or bottom enclosure. The top enclosure can include vents that allow air to flow through.

Abstract: Aspects of the present disclosure are directed to a memory sub-system with isothermal cooling of components. A PCB assembly may be secured between a heat spreader and a heat sink that are thermally coupled. The heat sink radiates heat absorbed from both sides of the PCB assembly. By connecting the heat spreader to the heat sink, heat is more effectively transferred from the side of the PCB assembly not directly connected to the heat sink. The PCB assembly may be secured between a top enclosure and a bottom enclosure. The top enclosure and the bottom enclosure may be thermally coupled using a vapor chamber. The vapor chamber pumps heat from a higher-temperature side of the PCB assembly to a lower-temperature side of the PCB assembly. By using the vapor chamber to thermally couple the top and bottom enclosures, creation of hot spots is avoided.

Abstract: A method includes a liquid cooling manifold cooling a processor component of a system by liquid cooling a first cold plate coupled to the processor component, cooling a memory component of the system by liquid cooling the first cold plate coupled to the memory component, and a liquid cooling a drive component of the system by liquid cooling a second cold plate coupled to the drive component.

Abstract: Example embodiments are directed to an input/output (IO) bracket that may be used in a solid-state drive (SSD), the IO bracket comprises a faceplate and at least one heat pipe coupled to the faceplate that extends horizontally from a surface of the faceplate. The at least one heat pipe is configured to be coupled to a controller of the SSD in order to transfer heat from the controller out of the SSD. By coupling the controller to the heat pipe instead of a main heatsink, the main heatsink can efficiently dissipate heat from remaining components of the SSD.

Abstract: Exemplary methods, apparatuses, and systems include an environmental operations manager for controlling memory access of the memory device. The environmental operations manager receives a set of data bits for programming to a memory location. The environmental operations manager receives environmental condition data. The environmental operations manager delays programming of the set of data bits to the memory location and writing the set of data bits to a buffer location in response to determining that the environmental condition data satisfies a threshold.

Abstract: Some memory sub-systems are operated in high temperature and low airflow environments. As a safeguard, thermal throttling may limit throughput on a memory sub-system when a predetermined temperature is reached or exceeded. Improving heat dissipation increases the amount of time a memory sub-system can operate without initiating thermal throttling. Adding a phase-change material (PCM) with a melting temperature above the ambient temperature but below the thermal throttling temperature to a memory sub-system increases the amount of heat the memory sub-system can generate before the temperature reaches the thermal throttling temperature. Thermally coupling components with a heat spreading sheet causes the temperature of the components to vary less than when the components transfer heat by air. Thus, a component that generates less heat may be used to absorb heat generated by another component, increasing the amount of time before any component reaches the thermal throttling temperature.

Abstract: Aspects of the present disclosure configure a memory sub-system processor, to use a thermoelectric generator during a power loss event. The processor delivers power to a set of memory components from a power source. The processor detects a power failure event associated with the power source and, in response to detecting the power failure event, receives holdup power from the thermoelectric generator. The processor delivers the holdup power from the thermoelectric generator to the set of memory components.

Abstract: Certain edge networking devices such as application gateways may report status to a cloud-based threat management platform using a persistent network connection between the gateway and the cloud platform. Where a cloud computing platform for an edge networking device or the treat management platform imposes periodic timeouts, the threat management platform may monitor connects and disconnects for edge devices and asynchronously evaluate connection status of edge devices independently of a heartbeat or other signal through the persistent connection in order to distinguish periodic timeouts imposed by the cloud computing platform from networking devices that are compromised or malfunctioning.

Abstract: A virtualized gateway for applications in a zero trust network access environment is managed from a cloud-based threat management facility for an enterprise network. In order to facilitate creation of a new, centrally managed gateway, a one-time passcode for registration of the gateway to the threat management facility is encoded onto a virtual disk and distributed to a host platform along with a base gateway image for the gateway. This advantageously permits the new gateway to boot and securely register with the threat management facility without further administrative intervention.

Abstract: An apparatus including a heat sink having two or more sections of parallel fins that define colinear channels is disclosed herein. The colinear channels are configured to direct flow of air or coolant across the heat sink and have wider channel widths closer to an inlet for the air or coolant and narrower widths closer to an outlet for the air or coolant.

Abstract: Surreptitious communication with a user is disclosed by way of binary tactile inputs and outputs. A communication module of a computing device receives a first alphanumeric message that is converted to a first binary coded message that is rendered as first and second vibration outputs that are humanly distinguishable. A touch input component of one of a touch screen and a motion sensor detects a sequential pattern of user touches. Distinguished first and second tactile inputs in the sequential pattern identify a second binary coded message that is converted into a second alphanumeric message. First and second alphanumeric messages are comprised of a combination of characters selected from one or more of: (i) letters; (ii) numerals; and (iii) symbols.

Abstract: A Transport Layer Security (TLS) handshake can be terminated early—i.e., before certificate validation—to reduce server-side demand, which can be particularly advantageous in counteracting Denial-of-Service (DOS) attacks and the like. To this end, an endpoint may provide a one-time password (OTP) in the client hello message during the initial steps of a TLS handshake or similar connection protocol. A gateway, upon receiving the client hello message, may generate its own OTP for comparison with the OTP in the client hello message. The endpoint and gateway may advantageously generate the OTP based on a secret provided by a threat management facility with a preexisting secure connection to the two entities. If the OTP provided in the client hello message and the OTP generated on the gateway are the same, then the TLS handshake may continue; otherwise, the Transmission Control Protocol (TCP) connection will be terminated by the gateway.

Abstract: An apparatus including a heat sink having two or more sections of parallel fins that define colinear channels is disclosed herein. The colinear channels are configured to direct flow of air or coolant across the heat sink and have wider channel widths closer to an inlet for the air or coolant and narrower widths closer to an outlet for the air or coolant.

Abstract: A gateway performs silent authentication refreshes with an identity management platform in order to extend the expiration of a cookie provided to an endpoint that accesses network applications through the gateway.

Abstract: A gateway performs silent authentication refreshes with an identity management platform in order to extend the expiration of a cookie provided to an endpoint that accesses network applications through the gateway.

Abstract: A gateway performs silent authentication refreshes with an identity management platform in order to extend the expiration of a cookie provided to an endpoint that accesses network applications through the gateway.