Abstract: Example implementations relate to end-to-end quality of service in storage area networks. For example, a method includes receiving input at a target from a user, the input to assign a priority level to a logical unit. This may include registering the logical unit priority level at a switch using an in-band communication in response to the priority level being assigned to the logical unit. This can also include instructing a host to implement the priority level using the in-band communication in response to the priority level being assigned to the logical unit. Further, the methods and systems may enforce the priority level with the host, the switch, and the target.

Abstract: A physical host machine of a public cloud system includes a set of processing units for executing instructions stored in non-transitory machine readable media. The physical host machine also includes a physical network interface cars (PNIC) and a non-transitory machine readable medium that stores a data compute node (DCN). The DCN includes first and second applications, first and second logical interfaces, a network stack, and a managed forwarding element (MFE). The first application is connected to the pNIC through the network stack, the first logical interface, and the MFE. The second application is connected to the PNIC through the network stack, the second logical interface, and the MFE.

Abstract: In one example, provide a plurality of initial switch configuration templates associated with network switches, establishing a link with a network switch comprising a connection with a principal port of the network switch, select from the plurality of initial switch configuration templates an initial switch configuration template associated with the network switch device, and transmit to the network switch device, through the principal port, an in-band command with the selected initial switch configuration template.

Abstract: Some embodiments provide a method of operating several logical networks over a network virtualization infrastructure. The method defines a managed physical switching element (MPSE) that includes several ports for forwarding packets to and from a plurality of virtual machines. Each port is associated with a unique media access control (MAC) address. The metho defines several managed physical routing elements (MPREs) for the several different logical networks. Each MPRE is for receiving data packets from a same port of the MPSE. Each MPRE is defined for a different logical network and for routing data packets between different segments of the logical network. The method provides the defined MPSE and the defined plurality of MPREs to a plurality of host machines as configuration data.

Abstract: In some examples, a switch includes a plurality of switch ports, and a processor. The processor is to send, through selected switch ports of the plurality of switch ports, respective requests for port information of device ports of a device connected to the selected switch ports, and receive, from the device responsive to the requests, the port information of the device ports. The processor is to identify, from the device ports of the device in response to the received port information, a failover device port for a first device port of the device, and send, to the device, information of the failover device port for the first device port at the device.

Abstract: Some embodiments provide a method for a set of central controllers that manages forwarding elements operating in a plurality of datacenters. The method receives a configuration for a bridge between (i) a logical L2 network that spans at least two datacenters and (ii) a physical L2 network. The configuration specifies a particular one of the datacenters for implementation of the bridge. The method identifies multiple managed forwarding elements that implement the logical L2 network and are operating in the particular datacenter. The method selects one of the identified managed forwarding elements to implement the bridge. The method distributes bridge configuration data to the selected managed forwarding element.

Abstract: Examples disclosed herein relate to identification of an alternate principal member port by a target device in a Storage Area Network (SAN). In some examples, a target device in a SAN may determine that a principal member port of a target driven peer zone on the target device is likely to fail based on diagnostic information related to the principal member port. The target driven peer zone may be configured in the SAN via the target device. In response to determining, the target device may identify an alternate principal member port on the target device. The target device may perform an action to indicate the alternate principal member port as the principal member port.

Abstract: Virtualization software that includes a VDRB (virtual distributed router/bridge) module for performing L3 routing and/or bridging operations is provided. At least some of the VDRBs are configured as VDBs (virtual distributed bridge) for performing bridging operations between different network segments in a distributed manner. The bridging tasks of a network are partitioned among several VDBs of the network based on MAC addresses. MAC addresses of VMs or other types of network nodes belonging to an overlay logical network are partitioned into several shards, each shard of MAC addresses assigned to a VDB in the network. Each VDB assigned a shard of MAC addresses performs bridging when it receives a packet bearing a MAC address belonging to its assigned shard. A VDB does not perform bridging on packets that do not have MAC address that falls within the VDB's shard of MAC addresses.

Abstract: A data compute node executes (i) a set of tenant applications connected to a third party overlay network, (ii) a set of network manager applications, and (iii) a managed forwarding element that includes a pair of overlay and underlay network virtual adapters. A packet that is received from a network manager application and addressed to an underlay network destination is sent to the underlay network destination address through a physical NIC of the host without network address translation or encapsulation. A packet that is received from a tenant application and addressed to an underlay network destination is subject to SNAT and is sent to the underlay network destination address. A packet that is received from a tenant application and is addressed an overlay destination address is encapsulated with the header of the overlay network and is sent to the overlay network destination address through the underlay virtual adapter.

Abstract: Examples relate to updating login credentials of an iSCSI client in a Storage Area Network (SAN). In an example, an iSNS server may send a target notification to an iSCSI target device, the target notification including an instruction for the target device to update a target-side record of login credentials for an iSCSI client. iSNS server may receive a first target response message from iSCSI target device. In response, iSNS server may provide updated login credentials for the iSCSI client to the iSCSI target device. iSNS server may receive a second target response message. In response, iSNS server may send a client notification to iSCSI client to update a client-side record of login credentials. iSNS server may receive a first client response message. In response, iSNS server may provide the updated login credentials to the iSCSI client.

Abstract: The technology disclosed herein enables high availability bridging between Layer 2 (L2) networks. In a particular embodiment, a method includes high availability bridge cluster comprising a first bridge node and a second bridge node. The first and second bridge nodes include first and second active bridges and first and second standby bridges, respectively. The method provides, in the first active bridge, bridging network communications between two or more L2 networks. The second standby bridge acts as a failover bridge for the first active bridge. The method further provides generating a failure detection message that incorporates a hardware address of the first bridge node and transferring the failure detection message from the first bridge node to the second bridge node. In the second standby bridge, the method provides receiving the failure detection message and using the hardware address to synchronize bridging information between the first active bridge and the second standby bridge.

Abstract: A system and method for managing a trusted connection within a public cloud comprises transmitting a first token and a second token from a cloud service manager to a public cloud controller, initializing a public cloud manager in response to receipt of the first token and the second token, and generate a cloud certificate, and transmitting the cloud certificate and the second token from the public cloud manager to a management plane. The method further comprises establishing a trusted connection between the public cloud controller and the management plane in response to receipt of the cloud certificate and the second token by the management plane.

Abstract: A LRE (logical routing element) that have LIFs that are active in all host machines spanned by the LRE as well as LIFs that are active in only a subset of those spanned host machines is provided. A host machine having an active LIF for a particular L2 segment would perform the L3 routing operations for network traffic related to that L2 segment. A host machine having an inactive LIF for the particular L2 segment would not perform L3 routing operations for the network traffic of the L2 segment.

Abstract: The present disclosure generally relates to deploying a proxy control plane and/or north-south data plane in a control virtual private cloud of a logical network implemented on a software-defined datacenter. The control virtual private cloud is shared by a plurality of compute virtual private clouds of the network. In some embodiments, a proxy control plane is deployed on the control virtual private cloud and disseminates policies directly to endpoints of the logical network. In some embodiments, a north-south data plane is deployed on the control virtual private cloud and directly manages north-south network traffic from endpoints of the logical network. In some embodiments, a proxy control plane and a north-south network data plane are deployed on the control virtual private cloud.

Abstract: The present disclosure generally relates to applying global unified security policies across a plurality of virtual private clouds of a logical network. The logical network is deployed on a software-defined datacenter that constitute one or more private and/or public datacenters. The plurality of virtual private clouds of the logical network may have one or more overlapping internet protocol address blocks, with each virtual private cloud deploying one or more virtual machines and/or containers. A global unified security policy is disseminated to endpoints throughout the logical network using logical ports of the virtual machines and/or containers.

Abstract: A LRE (logical routing element) that have LIFs that are active in all host machines spanned by the LRE as well as LIFs that are active in only a subset of those spanned host machines is provided. A host machine having an active LIF for a particular L2 segment would perform the L3 routing operations for network traffic related to that L2 segment. A host machine having an inactive LIF for the particular L2 segment would not perform L3 routing operations for the network traffic of the L2 segment.

Abstract: A LRE (logical routing element) that have LIFs that are active in all host machines spanned by the LRE as well as LIFs that are active in only a subset of those spanned host machines is provided. A host machine having an active LIF for a particular L2 segment would perform the L3 routing operations for network traffic related to that L2 segment. A host machine having an inactive LIF for the particular L2 segment would not perform L3 routing operations for the network traffic of the L2 segment.

Abstract: A system for network virtualization in which physical network resources in different physical contexts are configured to implement one or more distributed logical network elements, at least some of the physical network resources implementing the distributed logical network elements configured according the physical context of those network resources. The local configuration of a physical locale is a version of the logical configuration that is modified specifically for the physical locale. Such modification is based on locale identifiers that are assigned to the physical locales. Some systems use locale-specific information to modify next-hop preference. Some system use locally modified configurations to determine the placement of VMs.

Abstract: A system provisions global logical entities that facilitate the operation of logical networks that span two or more datacenters. These global logical entities include global logical switches that provide L2 switching as well as global routers that provide L3 routing among network nodes in multiple datacenters. The global logical entities operate along side local logical entities that are for operating logical networks that are local within a datacenter.

Abstract: Disclosed is a server apparatus. The server apparatus comprises: a communication unit for receiving, from an external server, multiple first viewing log data for each of a plurality of first users using a first broadcast receiving apparatus and multiple user information of each of the plurality of first users; and a processor for updating a predictive model for predicting, from the viewing log data, the number of users using the broadcast receiving apparatus and user information of each of the users, on the basis of the received multiple first viewing log data and the received multiple user information, wherein, when second viewing log data is received from a second broadcast receiving apparatus through the communication unit, the processor predicts, using the updated predictive model, the number of users using the second broadcast receiving apparatus and user information of each of the users.