Abstract: This disclosure describes techniques and mechanisms for providing an intelligent de-scheduler filtering system that minimizes service disruptions within a network. The techniques may provide continuous monitoring of clusters within a dynamic system and provide an intelligent determination of pod(s) within a duster to move by utilizing a disruption score based on disruption policies, balancer policies, service level agreement policies, and other data associated with the cluster and/or pods. The techniques enable a subset of pods that are flagged as violating compute usage to be selected to be moved, such that the subset will result in the least disruption to move to help restore or realign compute resources in the system.

Abstract: This disclosure describes techniques and mechanisms for providing an intelligent de-scheduler filtering system that minimizes service disruptions within a network. The techniques may provide continuous monitoring of clusters within a dynamic system and provide an intelligent determination of pod(s) within a cluster to move by utilizing a disruption score based on disruption policies, balancer policies, service level agreement policies, and other data associated with the cluster and/or pods. The techniques enable a subset of pods that are flagged as violating compute usage to be selected to be moved, such that the subset will result in the least disruption to move to help restore or realign compute resources in the system.

Abstract: Systems and methods provide for scaling service discovery in a micro-service environment. A controller can inject a service discovery agent onto a host. At least one of the controller or the agent can identify a first set of micro-service containers that are dependencies of the first micro-service container and a second set of micro-service containers that are dependencies of the second micro-service container. At least one of the controller or the agent can update routing data for the first set of micro-service containers and the second set of micro-service containers. At least one of the controller or the agent can determine the second micro-service container has terminated on the host computing device. At least one of the controller or the agent can update the agent to remove the routing data for the second set of micro-service containers.

Abstract: A network analytics controller is established in a network. The network includes a plurality of nodes. A plurality of network analytics agents is established; each agent at a node of the network. Network analytics configuration parameters, including a network analytics scope, are received at the networks analytics controller. A task is assigned to each agent at a node determined to be within the network analytics scope, the task comprising that portion of the network analytics specified in the network analytics configuration parameters relevant to the corresponding node. The assigned task is performed at each agent assigned a task. The networks analytics controller receives the results of each performed task, and aggregates the received results.

Abstract: Systems and methods provide for scaling service discovery in a micro-service environment. A controller can inject a service discovery agent onto a host. At least one of the controller or the agent can identify a first set of micro-service containers that are dependencies of the first micro-service container and a second set of micro-service containers that are dependencies of the second micro-service container. At least one of the controller or the agent can update routing data for the first set of micro-service containers and the second set of micro-service containers. At least one of the controller or the agent can determine the second micro-service container has terminated on the host computing device. At least one of the controller or the agent can update the agent to remove the routing data for the second set of micro-service containers.

Abstract: A network analytics controller is established in a network. The network includes a plurality of nodes. A plurality of network analytics agents is established; each agent at a node of the network. Network analytics configuration parameters, including a network analytics scope, are received at the networks analytics controller. A task is assigned to each agent at a node determined to be within the network analytics scope, the task comprising that portion of the network analytics specified in the network analytics configuration parameters relevant to the corresponding node. The assigned task is performed at each agent assigned a task. The networks analytics controller receives the results of each performed task, and aggregates the received results.

Abstract: Systems and methods provide for scaling service discovery in a micro-service environment. A controller can inject a service discovery agent onto a host. At least one of the controller or the agent can identify a first set of micro-service containers that are dependencies of the first micro-service container and a second set of micro-service containers that are dependencies of the second micro-service container. At least one of the controller or the agent can update routing data for the first set of micro-service containers and the second set of micro-service containers. At least one of the controller or the agent can determine the second micro-service container has terminated on the host computing device. At least one of the controller or the agent can update the agent to remove the routing data for the second set of micro-service containers.

Abstract: Systems and methods provide for scaling service discovery in a micro-service environment. A controller can inject a service discovery agent onto a host. At least one of the controller or the agent can identify a first set of micro-service containers that are dependencies of the first micro-service container and a second set of micro-service containers that are dependencies of the second micro-service container. At least one of the controller or the agent can update routing data for the first set of micro-service containers and the second set of micro-service containers. At least one of the controller or the agent can determine the second micro-service container has terminated on the host computing device. At least one of the controller or the agent can update the agent to remove the routing data for the second set of micro-service containers.

Abstract: Systems and methods provide for scaling service discovery in a micro-service environment. A controller can inject a service discovery agent onto a host. At least one of the controller or the agent can identify a first set of micro-service containers that are dependencies of the first micro-service container and a second set of micro-service containers that are dependencies of the second micro-service container. At least one of the controller or the agent can update routing data for the first set of micro-service containers and the second set of micro-service containers. At least one of the controller or the agent can determine the second micro-service container has terminated on the host computing device. At least one of the controller or the agent can update the agent to remove the routing data for the second set of micro-service containers.

Abstract: Systems and methods provide for scaling service discovery in a micro-service environment. A controller can inject a service discovery agent onto a host. At least one of the controller or the agent can identify a first set of micro-service containers that are dependencies of the first micro-service container and a second set of micro-service containers that are dependencies of the second micro-service container. At least one of the controller or the agent can update routing data for the first set of micro-service containers and the second set of micro-service containers. At least one of the controller or the agent can determine the second micro-service container has terminated on the host computing device. At least one of the controller or the agent can update the agent to remove the routing data for the second set of micro-service containers.

Abstract: Disclosed are systems, methods, and computer-readable storage media for automatically, dynamically generating feature model augmentation statements for data nodes for a new network feature described in a data modeling language. A software-defined controller, or other network components, can detect the availability of a new network feature defined by a feature model in a data modeling language and process the feature model to create an authorization policy data defining access rules control rules for the new network feature. Based on the authorization policy, the controller or the authorization model generator can generate a set of augmentation statements for one or more data nodes in the feature model of the new network feature and augment the new feature model with the augmentation statements for controlling access to the new network feature.

Abstract: Disclosed are systems, methods, and computer-readable storage media for scaling service discovery in a micro-service environment. A controller can instantiate, on a host computing device, a first container instance providing a first micro-service of an application. The host computing device can include a service discovery agent. The controller can identify a set of micro-services that are dependencies of the first micro-service, and update the service discovery agent with routing data for container instances providing the set of micro-services that are dependencies of the first micro-service. The service discovery agent can use the routing data to route requests from the first container instance to container instances providing the set of micro-services that are dependencies of the first micro-service.

Abstract: A method for translating network addresses includes receiving a first network packet, the first network packet comprising an internal source address. The method also includes generating, by performing a mapping operation, a mapping value. The generating of the mapping value uses, at least in part, at least a portion of the internal source address, and at least a portion of an external source address. The external source address is associated with the internal source address. The method also includes forwarding, using a second network packet, at least a portion of the first network packet. The second network packet comprises the external source address and at least a portion of the mapping value.

Abstract: One embodiment includes, inter alia, methods, apparatus, computer-storage media, mechanisms, and/or means associated with automated transitioning between different communication protocols in a network. In one embodiment, automatic transition routers are automatically discovered along with the knowledge of what non-native protocols need to be transported across a network. Communication pathways are automatically established as needed to transport these non-native protocols. One embodiment is particularly useful in transitioning a network from one protocol to another, such as from Internet Protocol version 4 to version 6.

Abstract: A controller in a network can gather operational data describing performance of an end point group in the network. The end point group can include one or more containers providing microservices. The controller can calculate an overall health score for the end point group based on the operational data. The overall health score can indicate whether an actual overall performance of the end point group is meeting a desired overall performance of the end point group defined by a first set of policies assigned to the end point group. The controller can present, in a graphical user interface, a visual representation of the overall health score. The visual representation of the overall health score can indicate that the overall health score is within a first overall health range from a set of two or more overall health ranges.

Abstract: In one embodiment, a method is provided for using a server computer, creating and storing a first module name, a first indication of a first version, and a first signature for a first data model that is digitally stored in a digital electronic data storage unit; receiving a second data model from the data storage unit and identifying a second module name in the second data model; comparing the second module name of the second data model to the first module name of the first data model; determining that the first module name and the second module name comprise a same name, and in response thereto, identifying a second indication of a second version from a revision field of the second data model; using the server computer, comparing the second indication of the second version from the second data model to the first indication of the first version of the first data model; determining the first indication and the second indication indicate the same version, determining a second signature for the second data model

Abstract: Disclosed are systems, methods, and computer-readable storage media for automatically, dynamically generating feature model augmentation statements for data nodes for a new network feature described in a data modeling language. A software-defined controller, or other network components, can detect the availability of a new network feature defined by a feature model in a data modeling language and process the feature model to create an authorization policy data defining access rules control rules for the new network feature. Based on the authorization policy, the controller or the authorization model generator can generate a set of augmentation statements for one or more data nodes in the feature model of the new network feature and augment the new feature model with the augmentation statements for controlling access to the new network feature.

Abstract: Disclosed are systems, methods, and computer-readable storage media for scaling service discovery in a micro-service environment. A controller can instantiate, on a host computing device, a first container instance providing a first micro-service of an application. The host computing device can include a service discovery agent. The controller can identify a set of micro-services that are dependencies of the first micro-service, and update the service discovery agent with routing data for container instances providing the set of micro-services that are dependencies of the first micro-service. The service discovery agent can use the routing data to route requests from the first container instance to container instances providing the set of micro-services that are dependencies of the first micro-service.

Abstract: A controller in a network can gather operational data describing performance of an end point group in the network, wherein the end point group includes one or more containers providing micro services. The controller can calculate a health score for the end point group based on the operational data. The health score can indicate whether an actual performance of the end point group is meeting a desired performance of the end point group defined by a first set of policies assigned to the end point group. The controller can determine, based on the health score, that the actual performance of the end point group is not meeting the desired performance of the end point group, and modify the end point group to achieve the desired performance of the end point group.

Abstract: Disclosed are systems, methods, and computer-readable medium for adjusting group based policies. A controller in a network can gather operational data describing performance of an end point group (EPG) in the network. The EPG can be operating according to a first set of policies to achieve a desired performance for the end point group. The controller can calculate a health score for the end point group based on the operational data. The health score can indicate whether an actual performance of the end point group is meeting the desired performance of the end point group. The controller can determine, based on the health score, that the actual performance of the end point group is not meeting the desired performance of the end point group, and apply a second set of policies to the end point group to achieve the desired performance of the end point group.