Abstract: Methods and systems of identifying and remediating at-risk resources in a computing environment are provided. A method includes periodically determining respective infrastructure topologies of a computing environment that changes over time, wherein the determining is performed by a computer system communicating with the computing environment. The method also includes: identifying, by the computer system, an intrusion event in the computing environment; determining, by the computer system, at-risk resources in the computing environment based on the determined intrusion event and a corresponding one of the infrastructure topologies; and performing, by the computer system, remediation action for the at-risk resources.

Abstract: A computer-implemented method includes receiving, by a computing device within a networking environment, a workload for execution within the networking environment; initiating, by the computing device, transfers of the workload to a plurality of network elements within the cloud networking environment; providing, by the computing device, tracking information of the workload as the workload traverses through the plurality of network elements; and storing or outputting, by the computing device, the tracking information regarding of the workload.

Abstract: A computer-implemented method includes receiving, by a computing device within a networking environment, a workload for execution within the networking environment; initiating, by the computing device, transfers of the workload to a plurality of network elements within the cloud networking environment; providing, by the computing device, tracking information of the workload as the workload traverses through the plurality of network elements; and storing or outputting, by the computing device, the tracking information regarding of the workload.

Abstract: Methods and systems of identifying and remediating at-risk resources in a computing environment are provided. A method includes periodically determining respective infrastructure topologies of a computing environment that changes over time, wherein the determining is performed by a computer system communicating with the computing environment. The method also includes: identifying, by the computer system, an intrusion event in the computing environment; determining, by the computer system, at-risk resources in the computing environment based on the determined intrusion event and a corresponding one of the infrastructure topologies; and performing, by the computer system, remediation action for the at-risk resources.

Abstract: An apparatus, system, and method are disclosed for distributing configuration parameters. The present invention includes one or more storage devices configured to store data, a first DHCP server configured to process DHCP messages and redirect communications regarding configuration parameters for the storage devices to a second DHCP server, and a configuration datastore configured to store configuration parameters for the storage devices. The second DHCP server may be configured to process DHCP messages and retrieve configuration parameters for the storage devices from the configuration datastore. In certain embodiments, each storage initiator communicates with the DHCP servers, receives the configuration parameters such as iSCSI parameters, and provides the configuration parameters to one or more storage devices.

Abstract: An apparatus, system, and method are disclosed for deploying sensitive communication parameters to a diskless computing device. A parameter structure module is included to store one or more Internet Small Computer System Interface (“iSCSI”) communication parameters in an extendable data structure configured to store a set of basic parameter settings and a set of extended parameter settings. A link module is included to establish a secure link to a diskless computing device over a physically secure connection. A deployment module is included to deploy the extendable data structure over the secure connection to a non-volatile memory in the diskless computing device. The non-volatile memory is configured to provide sensitive iSCSI communication parameters provided by the extendable data structure to a CPU of the diskless computing device during a boot sequence.

Abstract: A method of configuring a blade enclosure is provided in which, in a first step, slots are identified whose SAS connectors are to be connected to SAS device blades in a minimum capacity configuration. In a second step, slots are identified whose SAS connectors are to be connected to the SAS device blades in a maximum capacity configuration. A path is then established from the SAS switch to the SAS connector of each slot identified in either the first step or the second step. Blade devices, such as RAID controller blades and disk enclosure blades are installed in the identified slots. Thus, the SAS switch within the enclosure selectively and efficiently interfaces with a predetermined number of blade slots rather than with all slots.

Abstract: An apparatus, system, and method are disclosed for providing a redundant array of inexpensive disks (“RAID”) storage subsystem within a processor blade enclosure. A first RAID controller blade is included and configured to fit in a processor blade enclosure. At least one processor in communication with the first RAID controller blade is included. A disk enclosure blade is provided that includes a plurality of hard disk drives. The disk enclosure blade is configured to fit in the processor blade enclosure and the hard disk drives are in communication with the first RAID controller blade.

Abstract: An assembly that facilitates the use of modules requiring orthogonal airflow in a chassis providing normal airflow. Partitions within the housing direct ambient airflow from the front air inlet, through the modules, and out the rear air exhaust. The housing and partitions define first and second vertically and horizontally offset slots for receiving first and second orthogonal airflow modules, and also define separate first and second airflow pathways. The first airflow pathway provides airflow through a front air inlet, under the second module, orthogonally through the first module and out the rear air exhaust. Similarly, the second airflow pathway provides airflow through a front air inlet, over the first module, orthogonally through the second module and out the rear air exhaust. Both airflow pathways both draw ambient air into the housing and exhaust warm air from the rear of the housing, while keeping the two airflow pathways separated.

Abstract: An apparatus, system, and method are disclosed for providing a redundant array of inexpensive disks (“RAID”) storage subsystem within a processor blade enclosure. A first RAID controller blade is included and configured to fit in a processor blade enclosure. At least one processor in communication with the first RAID controller blade is included. A disk enclosure blade is provided that includes a plurality of hard disk drives. The disk enclosure blade is configured to fit in the processor blade enclosure and the hard disk drives are in communication with the first RAID controller blade.

Abstract: A method of configuring a blade enclosure is provided by the present invention in which, in a first step, slots are identified to whose SAS connectors SAS device blades are to be connected in a minimum capacity configuration. In a second step, slots are identified to whose SAS connectors SAS device blades are to be connected in a maximum capacity configuration. A path is then established from the SAS switch to the SAS connector of each slot identified in either the first step or the second step. Blade devices, such as RAID controller blades and disk enclosure blades are installed in the identified slots. Thus, the SAS switch within the enclosure selectively and efficiently interfaces with a predetermined number of blade slots rather than with all slots.

Abstract: An assembly that facilitates the use of modules requiring orthogonal airflow in a chassis providing normal airflow. Partitions within the housing direct ambient airflow from the front air inlet, through the modules, and out the rear air exhaust. The housing and partitions define first and second vertically and horizontally offset slots for receiving first and second orthogonal airflow modules, and also define separate first and second airflow pathways. The first airflow pathway provides airflow through a front air inlet, under the second module, orthogonally through the first module and out the rear air exhaust. Similarly, the second airflow pathway provides airflow through a front air inlet, over the first module, orthogonally through the second module and out the rear air exhaust. Both airflow pathways both draw ambient air into the housing and exhaust warm air from the rear of the housing, while keeping the two airflow pathways separated.

Abstract: A method, system and computer program product for automatically switching remote shared devices in a dense server environment. A device driver in a server blade may be configured to receive a request to access a shared device from the server blade and issue a query to a service processor as to whether the requested shared device is being accessed. If the requested shared device is not being accessed by the requesting server blade, then the device driver may wait to receive a response from the service processor indicating that the requested shared device is available. Once the requested shared device is available, the service processor may connect the requested shared device with the requesting server blade. The request to access the requested shared device may then be transferred to the requested shared device by the device driver.

Abstract: A computer system in which a network processor disposed between a central processing unit and supporting peripheral subsystems and among the peripheral subsystems handles addressing of memory space.

Abstract: This invention is comprised of a data processing system containing at least one main processor connected to a system bus, a system memory connected to the system bus and accessible to each of the main processors, a tamper mechanism, and a local service processor. The tamper mechanism is configured to change state each time the system is inserted into a slot in a rack enclosure. The local service processor is connected to the tamper mechanism and configured to update an insertion log upon detecting a change in state of the tamper mechanism. The insertion log provides a count and a history of rack insertions to which the system has been subjected. The system may include a non-volatile storage element which is updated exclusively by the local service processor that contains the insertion log. The insertion log may include an insertion counter. In this embodiment, the local service processor is configured to increment the insertion counter upon each insertion.

Abstract: This invention is comprised of a data processing system containing at least one main processor connected to a system bus, a system memory connected to the system bus and accessible to each of the main processors, a tamper mechanism, and a local service processor. The tamper mechanism is configured to change state each time the system is inserted into a slot in a rack enclosure. The local service processor is connected to the tamper mechanism and configured to update an insertion log upon detecting a change in state of the tamper mechanism. The insertion log provides a count and a history of rack insertions to which the system has been subjected. The system may include a non-volatile storage element which is updated exclusively by the local service processor that contains the insertion log. The insertion log may include an insertion counter. In this embodiment, the local service processor is configured to increment the insertion counter upon each insertion.

Abstract: A method, system and computer program product for automatically switching remote shared devices in a dense server environment. A device driver in a server blade may be configured to receive a request to access a shared device from the server blade and issue a query to a service processor as to whether the requested shared device is being accessed. If the requested shared device is not being accessed by the requesting server blade, then the device driver may wait to receive a response from the service processor indicating that the requested shared device is available. Once the requested shared device is available, the service processor may connect the requested shared device with the requesting server blade. The request to access the requested shared device may then be transferred to the requested shared device by the device driver.

Abstract: A programmable multispeed communication apparatus includes a plurality of identical media access control (MAC) units for use with a programmable data processing system. The MAC units when multiplexed and connected to a communication media achieve a transmission speed n·s where n is the number of MAC units and s is the speed of the individual MACs. If one or more but not all of the MAC units fail, the apparatus will operate in degraded mode with the remaining active MAC units. User frames are sequentially numbered, partitioned into sequentially numbered partitions which are assigned to one or more MAC's. Each of the partitions includes a prefix which includes the sequential frame number, the sequential partition number and an indicator for distinguishing the last partition of a frame from the other partitions of that frame.

Abstract: An adapter or add-in card for using in a peripheral component interconnect (PCI) computer includes a universal module which couples the card to the PCI bus. The module includes a set of selectively programmable configuration registers which are loaded by a microprocessor on the adapter. A circuit arrangement on the module issues a command which inhibits the PCI processor from accessing the configuration registers until fully loaded.