Abstract: An authorization method using provisioned certificates is disclosed. The method includes writing security attributes to fields within a certificate and issuing the certificate to a software application on a principal node. The software application requests to perform actions on one or more resources on a resource node, sending one or more action requests along with a copy of its certificate. The resource node has an agent which verifies the permissions from the certificate and routes the request to its designated resource. The resource node returns one or more messages to the principal node, verifying whether or not complete the requests.

Abstract: A method is provided in one example embodiment and includes creating a segment organization, which includes a configuration profile. The method also includes attaching the configuration profile to a server in the segment organization. The method further includes sending the attached configuration profile to a database in a physical network.

Abstract: A method is provided in one example embodiment and includes creating a segment organization, which includes a configuration profile. The method also includes attaching the configuration profile to a server in the segment organization. The method further includes sending the attached configuration profile to a database in a physical network.

Abstract: In one embodiment, a system includes: a robotic arm assembly; a plurality of components arranged around the robotic arm assembly and positioned within reach of the robotic arm assembly; and a controller configured to control operation of the robotic arm assembly within the system. Each of the plurality of components is configured to either: store ingredients under predetermined environmental conditions; store food preparation tools; dispense ingredients; blend, cook, or assemble ingredients into a completed food item; provide cleaning functionality to the system and/or components thereof; provide user access to completed food items; or display information relevant to a food item or preparation thereof to users.

Abstract: In one embodiment, the present disclosure includes an automated food production kiosk. Embodiments of a kiosk may comprise a robotic system having a reach. A plurality of food ingredient dispensers may be configured around the robotic system. Each dispenser may have a physical interface within a reach of the robotic system to receive an item. One or more physical processing units have a physical interface within the reach of the robotic system to receive the item. The kiosk may prepare food items under control of a local server, a cloud server, or both, for example.

Abstract: In one embodiment, the present disclosure includes an automated delivery system apparatus comprising a mechanical guide, a movable unit coupled to the guide on a first surface, and an engaging unit configured to couple to a second surface separated from the first surface by a thickness. The engaging unit is configured to engage an item on the second surface. A magnetic binding force between the movable unit and engaging unit moves the engaging unit along a path corresponding to a path of the movable unit. The engaging unit moves an item along a least a portion of the path.

Abstract: In one embodiment, the present disclosure includes a solid dispenser comprising a dispensing element and a housing. The dispensing element includes a plurality of blades extending from a cylindrical base. In one example embodiment, the blades are separated by 90 degrees to form channels from an upper opening in the housing to a lower opening in the housing. A hopper for storing items to be dispensed may be configured on one side of the dispenser, and a trap for controlling the flow of dispensed items may be configured on the other side of the dispenser. In one embodiment, the dispenser is controlled by motors coupled to a server as part of a fully automated cloud controlled robotic food preparation system, where each dispenser may accurately deliver different quantities of ingredients for different orders.

Abstract: In one embodiment, the present disclosure includes a granule dispenser comprising a container for holding granulated components, a cap coupled to a bottom of said container, and a stopper. The stopper may be spring loaded against the ridge of said cap. An interface between the stopper and the cap comprises a plurality of protrusions and a plurality of sawtooth forms, wherein the protrusions mate to a base portion between the sawtooth forms in a first position to form a seal between the cap and the stopper, and wherein, when the stopper is rotated, the protrusions engage a sloped portion of the sawtooth forms to create a plurality of openings between the cap and the stopper.

Abstract: In one embodiment, the present disclosure includes a cloud computer system for controlling a plurality of remote devices comprising a cloud server including a cloud based operating system comprising a data model stored in a computer memory. The data model includes commands that may be performed by a plurality of remote devices in a remote system and, for each remote device, one or more operations for triggering processes executed by the remote device. The cloud based operating system generates a set of instructions from the plurality of commands and corresponding operations to control a portion of the remote devices to perform a task.

Abstract: Techniques are presented herein for distributing address information of host devices in a network. At a first router device, a packet is received from a first host device that is destined for a second host device. The first host device is dually-connected to the first router and a second router device. The second router device is part of a virtual port channel pair with the first router device. A message is sent to the second router device, the message indicating that the first host device is connected to the second router device. The packet is encapsulated with an overlay header and is sent to a third router device that is connected to the second host device. The encapsulated packet contains a Layer 2 address associated with the first host device and a Layer 3 address associated with the first host device.

Abstract: Techniques are presented herein for distributing address information of host devices in a network. At a first router device, a packet is received from a first host device that is destined for a second host device. The first host device is dually-connected to the first router and a second router device. The second router device is part of a virtual port channel pair with the first router device. A message is sent to the second router device, the message indicating that the first host device is connected to the second router device. The packet is encapsulated with an overlay header and is sent to a third router device that is connected to the second host device. The encapsulated packet contains a Layer 2 address associated with the first host device and a Layer 3 address associated with the first host device.

Abstract: A method is provided in one example embodiment and includes creating a segment organization, which includes a configuration profile. The method also includes attaching the configuration profile to a server in the segment organization. The method further includes sending the attached configuration profile to a database in a physical network.

Abstract: Techniques are presented herein for distributing address information of host devices in a network. At a first router device, a packet is received from a first host device that is destined for a second host device. The first host device is dually-connected to the first router and a second router device. The second router device is part of a virtual port channel pair with the first router device. A message is sent to the second router device, the message indicating that the first host device is connected to the second router device. The packet is encapsulated with an overlay header and is sent to a third router device that is connected to the second host device. The encapsulated packet contains a Layer 2 address associated with the first host device and a Layer 3 address associated with the first host device.

Abstract: In one embodiment, a system includes: a robotic arm assembly; a plurality of components arranged around the robotic arm assembly and positioned within reach of the robotic arm assembly; and a controller configured to control operation of the robotic arm assembly within the system. Each of the plurality of components is configured to either: store ingredients under predetermined environmental conditions; store food preparation tools; dispense ingredients; blend, cook, or assemble ingredients into a completed food item; provide cleaning functionality to the system and/or components thereof; provide user access to completed food items; or display information relevant to a food item or preparation thereof to users.

Abstract: Techniques provided herein enable a set of independent, unconnected devices in a network to support distributed Layer 3 (L3) gateway functionality for an overlay based virtual network by intelligently triggering proxy addressing information updates.

Abstract: Presented herein are techniques to detect a misconfigured duplicate Internet Protocol (IP) address in a distributed data center network fabric. A network topology is provided that includes a plurality of network elements. A network element receives a configuration message comprising an IP address from a first host associated with the first network element. The IP address is detected to already be in use by a second host associated with a second network element. A request message is provided to the second network element, the request message configured to cause the second network element to attempt to contact the second host. A reply message is received from the second network element. If the reply message indicates that the second host exists at the second network element, an indication of a misconfiguration event is generated. Otherwise, the IP address is associated with the first host.

Abstract: An example method for implementation of virtual extensible local area network (VXLAN) in top-of-rack (ToR) switches in a network environment is provided and includes receiving a packet encapsulated with a VXLAN header having an unknown virtual tunnel endpoint (VTEP) Internet Protocol (IP) address in a network environment, and installing an entry at an index location of a forwarding table. The index location includes an encoding of the VTEP-IP address as a VTEP index (VTEP-IDX), and the entry maps a VXLAN interface to an IP address associated with a VXLAN network identifier (VNI). In specific embodiments, the VTEP-IDX is log N bits, where N is a size of the forwarding table. The forwarding table indicates a destination VTEP IP address when encapsulating the packet, and the source VTEP IP address when decapsulating the packet.

Abstract: In a mesh-based connected data center network architecture, a mechanism is provided to allow efficient delivery of IP multicast frames within the network. Described approaches avoid replication into VLANs (or SVIs) across the fabric by using the outer encapsulated tree to identify trees on which to replicate the traffic. Replication may be performed at the furthest point from the source (via routing or bridging). Also, multicast traffic may be distributed to dually connected (vPC) hosts on links from various network devices.

Abstract: Techniques are provided for provisioning network resources for virtual machines. At a first switch device, a configuration request message is received from a virtual switch to provision virtual network segmentation resources for a virtual machine managed by the virtual switch. The first switch device provisions the virtual network segmentation resources for the virtual machine. The first switch devices sends to a second switch device a first synchronization message that includes information describing the virtual network segmentation resources. The second switch device is a peer of the first switch device. The first switch device also sends to the second switch device a second synchronization message that includes state information indicating that the first switch device is in an active state for servicing the virtual machine and that the second switch device is to be placed in a dormant state for servicing the virtual machine.

Abstract: A leaf switch of a switch fabric includes multiple ports to connect with respective ones of multiple servers. Virtual local area networks (VLANs) are configured on the leaf switch. Dynamic creation of virtual ports is enabled on the leaf switch for at least one of the VLANs on an as needed basis. The leaf switch receives from a particular server connected to a corresponding one of the ports a notification message that a virtual machine is hosted on the particular server. Responsive to the notification message, the leaf switch dynamically creates a virtual port that associates the corresponding one of the ports with the at least one of the VLANs.