Abstract: Disclosed is a message broker customization system and method with user administered policy functions. The system uses user defined and controlled policy functions to programmatically customize the behaviors of a message broker's processing of messages and further allowing for that customization to take place on a per channel basis. This provides for greater functionality and flexibility to the users of a message system, especially when the users of the message system do not have administrative control over the message broker.

Abstract: A computerized method for utilizing private Internet Protocol (IP) addressing for communications between components of one or more public cloud networks. The method features determining whether outbound traffic corresponds to a first type of outbound traffic being forwarded from a cloud instance supported by the gateway. In response to determining that the first type of outbound traffic is being forwarded from the cloud instance, the first type of outbound traffic is directed via a data interface of the gateway. Also, the method features determining whether the outbound traffic corresponds to a second type of outbound traffic being initiated by logic within the gateway. In response to determining that the second type of outbound traffic is being initiated by logic within the gateway, directing the second type of outbound traffic via a management interface of the gateway.

Abstract: Embodiments of this application disclose a traffic monitoring method, an apparatus, an integrated circuit, a network device, and a network system. When receiving a first packet, a traffic collection apparatus determines that a measurement value of a target performance indicator of the first packet matches a value of first information in a first register, updates a value of second information in the first register based on the measurement value of the target performance indicator of the first packet, and increases a value of third information in the first register by 1.

Abstract: The techniques described herein relate to methods that include: obtaining criteria for a mobile network deployment; selecting a server configuration template for a server configuration based upon the criteria; generating the server configuration for the mobile network deployment based upon the server configuration template; validating the server configuration to ensure the criteria are met by the mobile network deployment of the server configuration; deploying the server configuration as the mobile network deployment; obtaining key performance indicators from the mobile network deployment; updating the mobile network deployment in response to obtaining the key performance indicators; and updating the server configuration template in response to obtaining the key performance indicators.

Abstract: The disclosed concepts achieve privacy for data operated on by an algorithm in an efficient manner A method includes receiving a first algorithm subset, receiving a second algorithm subset, generating two shares of a first mathematical set based on the first algorithm subset and transmitting the two shares of the first mathematical set from a first entity to a second entity. The method can include generating two shares of a second mathematical set based on the second algorithm subset, transmitting the two shares of the second mathematical set from the second entity to the first entity, receiving first split data subset of a full data set and receiving a second split data subset of the full data set. The system, based on these subsets of data, generates a first output subset and a second output subset which are combined for the final output.

Abstract: Concepts and technologies are disclosed herein for creating and using native virtual probes in computing environments. A request for a service that includes a virtual function can be received, where the virtual function is to be monitored by a native virtual probe. An image of the service can be obtained, where the image can include a first image component for the virtual function and a second image component for the native virtual probe. The image can be deployed. Deployment of the image can result in instantiation of the virtual function on a computing device and instantiation of the native virtual probe on the computing device.

Abstract: A method for oversubscribing a host memory of a host running a virtual machine monitor (VMM), comprising, examining a virtual machine (VM) memory for a VM for metadata associated with the VM memory, the metadata maintained by a guest OS running on the VM, collecting the metadata for the VM memory, and managing the VM memory using the metadata for oversubscribing a host memory.

Abstract: A processing system may identify a plurality of user interaction data associated with a target category of a plurality of users, identify a relevant subset of user interaction data, compress the plurality of user interaction data to the relevant subset of user interaction data, train a machine learning model with the relevant subset of user interaction data, obtain additional user interaction data associated with an additional user, identify a relevant subset of the additional user interaction data, apply the relevant subset of the additional user interaction data as an input to the machine learning model, obtain an output of the machine learning model quantifying a measure of which the relevant subset of the additional user interaction data is indicative of the target category, and perform at least one action responsive to the measure of which the relevant subset of the additional user interaction data is indicative of the target category.

Abstract: Systems, methods, and computer-readable media are disclosed for performing a hitless upgrade of executable code in the absence of an orchestrator or other upgrade manager. A mechanism is disclosed that utilizes containers to update software functionality, features, or the like without interrupting a service provided by a container and without relying on an orchestrator or other upgrade manager to coordinate the upgrade process. State information indicative of a current state of module(s) within a container is maintained in an external data store such as a state database. A hand-off from a current container to a new container that updates module code/functionality of the current container can be initiated upon determining that a state metric calculated by the old container at a future timestamp matches a state metric independently calculated by the new container at the same timestamp.

Abstract: A monitoring method for data transmission includes the following steps. Collection data is provided by data collection equipment when determining that equipment data has been received from an equipment terminal. Analysis data is provided by analysis equipment when determining that the collection data has been received from the data collection equipment. A data transmission state is displayed on a monitoring terminal when determining that the analysis data has been received from the analysis equipment. A first abnormal message is provided in response to the analysis data not having been received, and the data transmission state includes the first abnormal message indicating that the analysis equipment is abnormal. A second abnormal message is provided in response to the collection data not having been received, and the data transmission state includes the second abnormal message indicating that the collection equipment is abnormal.

Abstract: A container management infrastructure is provided for deployment of management features using a containerized service on a management device and applications thereof are provided. In operation, the infrastructure receives, from a remote computing device, an instruction to select a group of management functionalities. In response, the infrastructure retrieves a corresponding group of the services corresponding to the selected group of management functionalities from a first cloud network, creates a container image using the retrieved group of the services, and deploy the container image to a second cloud network. The second cloud network receives and stores the container image. Upon receiving a request from a remote computing device for the container image, the second cloud network sends the container image to the remote computing device, such that the container image may be executed on the remote computing device to provide a virtual management device thereon.

Abstract: An apparatus can be configured to receive monitoring information associated with a machine learning (ML) or artificial intelligence (AI) workload implemented by an edge compute unit of a plurality of edge compute units. Status information corresponding to a plurality of connected edge assets can be received, the plurality of edge compute units and connected edge assets included in a fleet of edge devices. A remote fleet management graphical user interface (GUI) can display a portion of the monitoring or status information for a subset of the fleet of edge devices, based on a user selection input, and can receive a user configuration input indicative of an updated configuration associated with at least one edge compute unit of the fleet. A cloud computing environment can transmit control information corresponding to the updated configuration to the at least one edge compute unit.

Abstract: Virtual private network (VPN) service provider infrastructure (SPI) receives a request to access a VPN from a client device. The VPN SPI selects an Internet Protocol (IP) address for access to the VPN by the client device from a pool of IP addresses. The VPN SPI provides access to the VPN for the client device via the IP address. The VPN SPI receives one or more handshake notifications from the client device. The VPN SPI determines that a threshold time period has passed since a latest-in-time handshake notification of the one or more handshake notifications. The VPN SPI disconnects the client device from the VPN in response to determining that the threshold time period has passed. The VPN SPI adds the IP address to the pool of IP addresses in response to disconnecting the client device from the VPN.

Abstract: A system and a method for application transformation to cloud by conversion of an application source code to a cloud native code is provided. First and second transformation recommendation paths are received and remediation tem plates based on the same are applied. A pre-defined transformation process flow is applied on application source code based on first and second transformation recommendation paths including a pre-processing stage involving analysis of source code and target framework. A plugin unit is provided which provides an adaptable plugin framework for creating multiple plugin types. The adaptable plugin framework allows addition of semi-automated workflow that applies functionality to accelerate application development or application to cloud transformation or addition of semi-automated steps to accelerate greenfield application development and application source code transformation to cloud native code.

Abstract: This application describes a method operable by a safety unit that comprises a safety sensor, the sensor configured to perform a safety feature based on one or more sensor parameters. The method may involve accessing a memory card, the card having stored thereon a password, a parameter set, and a flag indicative of whether the parameter set is unique to the sensor. The method may involve determining, based on the flag, that the parameter set is not unique to the sensor. The method may involve determining whether the password stored on the card matches a sensor password of the sensor. The method may involve, in response to the password stored on the card matching the sensor password, writing a sensor serial number of the sensor onto the card.

Abstract: Methods, systems, and computer readable media for coordinating publish-subscribe messaging. The method includes receiving, from a publisher, a first message pertaining to a first topic and sending the first message to at least a subscriber subscribed to the first message. The method further includes receiving, from each of the at least a subscriber subscribed to the first message, an acknowledgment that an action related to the first message is complete. The method further includes notifying the publisher that all acknowledgments related to the first message are received when the broker receives the acknowledgment from each of the at least a subscriber subscribed to the first message. The method further includes receiving, from the publisher, a second message based on the notification that all acknowledgments for the first message are received.

Abstract: The invention provides a method of transferring resource control unit operational control functionality within a single frequency network, in which multiple transmission points transmit identical downlink data packets in a synchronized manner, from a first node to a second node, the method comprising receiving at a resource control unit a set of resource control information from at least one candidate node; determining using the resource control information a suitability of the at least one candidate node to be the second node; and initiating transfer of the resource control unit operational control functionality from the first node to the second node.

Abstract: Presented herein are techniques to conserve power by network devices in a software define wide area network (SDWAN). A method includes monitoring operations of a software defined wide area network including a network device in the software defined wide area network, based on results of the monitoring, generating a usage model for the network device, determining, based on the usage model, an interface selection scheme for the network device, and causing the network device to execute the interface selection scheme.

Abstract: A deployment request is received for a plurality of clusters within a plurality cloud computing environments. The deployment request relates to one or more operational actions for computing devices associated with the plurality of clusters. The plurality of clusters is associated with a single application programming interface (API). A set of standards are received for the plurality of clusters from the API. The plurality of clusters is configured according to the set of standards to create a configured plurality of clusters. The configured plurality of clusters are deployed within the plurality of cloud computing environments.

Abstract: A lightweight and extensible information model for machine-to-machine systems is disclosed. A service layer information management architecture uses three categories of atomic objects, subjects, actions, and descriptions. Information for use within the model is built using the atomic information objects. Application programming interfaces are used to perform operations and information processing by different nodes. Common service functions are used in the model as instances of a generic common service information model.

Abstract: A technique for distributing and acquiring information about network devices using the Domain Name System (DNS) is disclosed. Device information, such as configuration settings and system status, is exchanged bi-directionally between one or multiple DNS services and network nodes using the DNS protocol. The information exchanged is encoded as DNS records.

Abstract: A generation device includes a memory, and processing circuitry coupled to the memory and configured to sense anomaly of a network based on information having a plurality of items related to communication in the network, identify a cause of anomaly corresponding to each piece of the information when anomaly is sensed, and generate, based on values of the items in the information and the cause of anomaly identified, a cause-of-anomaly pattern for each predetermined set of pieces of the information.

Abstract: A system, method, and computer-readable medium for performing a data center management and monitoring operation. The data center management and monitoring operation includes: identifying a plurality of process flows executing on a system, each of the plurality of process flows having a trace identifier and a corresponding weighted priority; identifying a plurality of microservices associated with each of the plurality of process flows; determining when the system does not have enough system resources to execute all of the plurality of process flows; and, automatically scaling each of the plurality of microservices associated with each of the plurality of process flows when the system does not have enough system resources to execute all of the plurality of process flows.

Abstract: Provided is an update device capable of appropriately updating the nodes used in business processing. The update device comprises a communication control unit which instructs the load balancer to stop distribution to the first cluster, a transfer unit which instructs the first management node and the second management node to transfer the first execution node from being under management of the first management node to being under management of the second management node, and an update unit which instructs the first management node to update the first management node on grounds that the first execution node being under management of the first management node has been transferred to being under management of the second management node.

Abstract: A system for initiating web containers and isolating network traffic to web containers is described. The system initiates and uses web containers for associated web-based resources, such as domain addresses owned by a single entity. When a web container for a domain address has not been initiated, the system determines an owner of the domain address and any domain addresses associated with the owner and initiates a web container for the domain address and the associated domains. When a user navigates to the domain addresses associated with the determined owner, the system isolates the network activity to the initiated web container.

Abstract: Disclosed is a field detection device designed to be connected to at least one access point of a fieldbus network via at least one interface. The field detection device is designed to initiate or execute, for each of at least two connection protocols, an associated query in at least one fieldbus segment of the fieldbus network and to detect which field devices and fieldbus components in said at least one fieldbus segment can be accessed via the connection protocol in question. Furthermore, the field detection device is designed to provide a connection directory in which at least one connection protocol is specified for each field device and for each fieldbus component of a set of field devices and fieldbus components of the at least one fieldbus segment, by means of which connection protocol the field device in question or the fieldbus component in question can be accessed.

Abstract: Systems, methods, and apparatuses are described for determining compliance with a plurality of restrictions associated with one or more devices in an organization. First text indicating restrictions may be received, and second text indicating a current configuration of one or more devices may be received. Both sets of text may be processed by, e.g., removing a portion of the text based on a predetermined list of terms and simplifying the text using a lemmatization algorithm. A first vector and second vector may be generated based on the processed sets of text, and each vector may be weighted based on an inverse frequency of words in their respective text. Each vector may be normalized based on semantic analysis. The two vectors may be compared. Based on the comparison, third text corresponding to a portion of the second vector may be generated and transmitted to a third computing device.

Abstract: Equipment in a production facility is managed with use of information from the equipment and information from a sensor for measurement of a state of the equipment, while achieving a high degree of freedom in increasing and decreasing the number of such sensors. The present invention is provided with a gateway (10) and a server (20). The gateway is connected to a controller included in each piece of equipment and connected, without being intermediated by the controller, to an externally attached sensor accompanying the each piece of equipment. The server is connected to the gateway. The gateway carries out the processes of: receiving, from each controller, information indicative of an internal state of the piece of equipment; receiving, from each sensor, information indicative of an external state of the piece of equipment; and transmitting these pieces of information to the server.

Abstract: According to one embodiment, a control system includes a client terminal, a first server and a second server. The client terminal transmits an assignment request of an IP address including first identification information that uniquely identifies the client terminal and is set as a host name to the first server. The first server assigns an IP address to the client terminal in accordance with the request, and transmits the IP address and the host name to the second server. The second server transmits, when one or more items of second identification information include the first identification information set as the host name and when a setup process of the client terminal has not been performed, data for the process of the client terminal to the client terminal using the IP address.

Abstract: Certain aspects of the present disclosure provide techniques for an access point (AP) that does not use a flash memory for some storage (e.g., storing software images, logs, data, and other content used or generated by the AP) and file system operations (e.g., reading and writing dynamic files used by the AP). A method that may be performed, by an AP having a limited amount of flash memory, includes downloading a system image from a network entity, other than the AP, via a wireless network connection; and providing wireless local area network (WLAN) AP services using the downloaded system image.

Abstract: In general, the invention relates to providing computer implemented services using information handling systems. One or more embodiments of the invention includes receiving a request to decompose a composed information handling system, wherein the composed information handling system comprises a hardware resource, obtaining a cleaning requirement for the hardware resource, initiating, based on the cleaning requirement, a cleaning operation on the hardware resource, receive a confirmation that the cleaning operation is complete, and after receiving the confirmation, set a state of the hardware resource to allocatable.

Abstract: A system for processing a diagnostic message of a vehicle includes a first external diagnosis device included in a D domain, an internal diagnosis device included in an M domain, a second external diagnosis device included in a G domain, and a vehicle gateway transmitting a diagnostic result corresponding to a request for diagnosis only to a domain including a diagnosis device requesting the diagnosis when the request for the diagnosis is received from one of the first external diagnosis device, the internal diagnosis device, or the second external diagnosis device.

Abstract: Some embodiments provide a method for implementing a software-defined private mobile network (SD-PMN) for an entity. At a physical location of the entity, the method deploys a first set of control plane components for the SD-PMN, the first set of control plane components including a security gateway, a user-plane function (UPF), an AMF (access and mobility management function), and an SMF (session management function). At an SD-WAN (software-defined wide area network) PoP (point of presence) belonging to a provider of the SD-PMN, the method deploys a second set of control plane components for the SD-PMN that includes a subscriber database that stores data associated with users of the SD-PMN. The method uses an SD-WAN edge router located at the physical location of the entity and a SD-WAN gateway located at the SD-WAN PoP to establish a connection from the physical location of the entity to the SD-WAN PoP.

Abstract: Provided are methods and systems for configuring and managing data shipper agents. A method may commence with receiving a list of one or more data shipper agents installed on one or more edge nodes associated with a user. A data shipper agent of the one or more data shipper agents may be installed on one of the one or more edge nodes. The method may continue with providing a graphical user interface that may enable the user to configure the one or more data shipper agents. The method may further include receiving selections of configuration parameters associated with at least one of the one or more data shipper agents. The method may then continue with receiving a configuration of the at least one of the one or more data shipper agents and automatically reconfiguring the configuration of the at least one of the one or more data shipper agents.

Abstract: A certificate re-provisioning (CREP) protocol allows a client device to communicate with a provisioning server and be automatically provisioned, or re-provisioned, with needed credentials without the client device being aware of which credentials it needs. The CREP protocol uses a slot configuration template that defines which credentials are installed on the client device and the provisioning server responds with actions to provision the client device according to a client target configuration stored at the server.

Abstract: A method comprises: by a controller to communicate with devices of a network, storing classifiers assigned to groups of the devices to identify device commonality for each group; associating, to the classifiers, historical probabilities of success with which an automated response executed by one or more of the devices remediates a device alarm event; when a device of the devices reports the device alarm event, identifying each classifier to which the device belongs, each historical probability for each classifier, and a rule with classifier thresholds for the automated response; determining to execute the automated response on the device by evaluating the rule using each historical probability and the classifier thresholds; after the automated response is executed, performing a service test supported across the devices, and monitoring test results from the service test; and after the service test, updating each historical probability using the test results.

Abstract: The disclosure provides an example method for live packet tracing. Some embodiments of the method include configuring a first network interface of a first pod to mark each of a plurality of packets, with a corresponding flow tag and a corresponding packet identifier, receiving, from one or more observation points, at least one of copies or metadata of the plurality of packets each marked with the corresponding flow tag and the corresponding packet identifier. In some embodiments, the method further includes displaying data indicative of the at least one of the copies or the metadata of the plurality of packets.

Abstract: A system and method for configuring components added to a network is disclosed. The method includes determining, by a host, that network identifying information of a plurality of networks to which the host is connected is unknown, listening for messages on the plurality of networks to obtain network identifying information for respective networks, receiving a message on a network of the plurality of networks, the message including a network identifier and a set of configuration settings, and configuring a network connection of the host for the network in view of the network identifier and the set of configuration settings from the message.

Abstract: Techniques for enabling a network access provider to make automatic Software as a Service (SaaS) optimization decisions. Among other things, the techniques may include determining a SaaS application that is being accessed by client endpoints via flows through a network access provider. The techniques may also include determining, based at least in part on a policy associated with the network access provider, whether to enable network optimizations for traffic through the network access provider to the SaaS application. Based at least in part on a determination that the network optimizations are to be enabled for the traffic to the SaaS application, the techniques may include installing a service definition associated with the SaaS application in a service policy database of the network access provider.

Abstract: Systems and methods for ticket-based provisioning of cloud infrastructure from one or more cloud providers to build one or more computing workspaces of an enterprise. A provisioning platform provides a module catalog having one or more infrastructure-as-code (IAC) modules, each including code that is executable to provision cloud computing resources for the cloud infrastructure from the cloud providers to build the computing workspaces of the enterprise. A service catalog has one or more electronic entries mapped to and corresponding with the IAC modules of the module catalog. The service catalog receives one or more tickets that each specify at least one of the electronic entries in the service catalog, to bind each specified electronic entry with a corresponding IAC module, causing the provisioning platform to instantiate on the more cloud providers the computing resources for the cloud infrastructure corresponding to the ticket.

Abstract: Systems, apparatuses, and methods related to a processor having configurable permission data for controlling access to a register of the processor from instructions running in different domains are described. Instructions can be used in predefined execution domains, such as hypervisor, operating system, application, etc. Different permission bits can be set for instructions running in different domains. In response to an instruction executed in the processor generates a request to access the register, the processor is configured to determine whether to accept or reject the request based on a permission bit provided in the permission data corresponding to an execution domain in which the instruction is running.

Abstract: The invention relates to a communication network which is configured to enable instantiation of network slices which represent virtual networks. The invention further relates to a content application server (CAS) for providing an application service via a network slice to at least one user equipment (UE). A network function (SREF) is provided which on the one hand may have access to one or more slice management network functions (CSMF, NSMF, NSSMF) and on the other hand may be accessible to the CAS. The network function (SREF) may abstract the properties of the network slice using a data structure representing a slice object and expose these abstracted properties to the CAS by providing access to the slice object. The slice object may comprise modifiable properties which represent modifiable properties of the corresponding network slice.

Abstract: Device scanning aspects are described. In certain aspects, the method includes configuring a port forwarding policy on a first device based on a network session information, performing a scan of a second device based on a port forwarding policy.

Abstract: Embodiments of a device and method are disclosed. In an embodiment, a method for automatically building an internet protocol (IP) network involves at a first network element, obtaining a first IP address from a Dynamic Host Configuration Protocol (DHCP) server, at the first network element, receiving a DHCP request from a second network element on an unnumbered interface of the first network element, and at the first network element, forwarding the DHCP request from the second network element to the DHCP server using the first IP address as a relay IP address.

Abstract: The disclosure provides a method and a device for efficiently operating network slicing. According to the disclosure, a method of operating a first node configured to manage a network slice of a communication system includes: transmitting a service level agreement (SLA) range for each network slice subnet and a message requesting a resource according to the SLA range to a second node configured to manage the network slice subnet, receiving SLA arrangement flavor mapping relationship information in the network slice subnet unit from the second node, and identifying the SLA arrangement flavor mapping relationship in a network slice unit based on the received SLA arrangement flavor mapping relationship information in a network slice subnet unit.

Abstract: This application provides a method for controlling a connection between a terminal and a network, and an apparatus. The method includes: receiving, by a terminal, a packet filter; and discarding, by the terminal, an uplink data packet matching the packet filter. Based on this solution, a connection can be blocked near a source (that is, the connection is blocked from the terminal), to reduce traffic exchanged between the terminal and a user plane network element. Compared with an existing technical solution, the terminal implements traffic control to reduce a quantity of uplink data packets sent to the user plane network element, thereby reducing load of the user plane network element.

Abstract: An industrial software defined network (SDN) architecture, system and methods for centralized and simplified management of an industrial network is disclosed.

Abstract: In general, techniques are described for managing address spaces across network elements. A network device including a processor may be configured to perform the techniques. The processor may execute a pool manager that automatically distributes a first block of network addresses to a first network element acting, for a first network, as a first address allocation server to assign the first block of network addresses. The pool manager may further automatically distribute a second block of contiguous network addresses to a second network element acting, for a second network, as a second address allocation server. The pool manager may then dynamically manage a size of the first block of network addresses and a size of the second block of network addresses to address exhaustion of available network addresses within either or both of the first block of network addresses and the second block of network addresses.

Abstract: To facilitate the commissioning of network identifiers (network IDs), an ordered list comprising network ID's associated with devices of an industrial automation process may be generated and stored. Based at least on the ordered list, a network ID may be identified. A prompt may be generated and displayed, the prompt comprising a notification to power-off one or more devices. Another prompt may be generated and displayed, the prompt comprising a notification to power-on a single device of the industrial automation process. In response to receiving a network-identifier request from the single device, a device identifier may be identified for the single device and stored in a list. A response comprising the network ID and a command to change the assignment mode of the device is autonomously generated and transmitted to the single device, which subsequently stores the network ID changes its mode.

Abstract: A control system includes a control device, one or more information processing devices, and an arithmetic unit. The control device executes a control program controlling a control target while managing process data of the control program, and includes a communication processor that periodically transmits one or more data sets, each data set including a value of one or more process data. The information processing devices executes one or more applications using the process data included in the data sets. The arithmetic unit determines a transmission setting of the data set, and includes an acquirer that acquires the process data for each application, and a determiner that determines a number of data sets transmitted by the communication processor and the process data to be included in each data set according to an evaluation criterion regarding a communication load based on the process data for each application.