Abstract: Various example embodiments for supporting intent-based networking within a communication network are presented herein. Various example embodiments for supporting intent-based networking within a communication network may be configured to support a management system configured to support various network deployment scenarios, including greenfield deployment scenarios for enabling customers to deploy and activate new networks, brownfield deployment scenarios for enabling customers to apply intent-based networking to existing networks based on intelligent reconstruction of the original intent(s) of the network and configuration of the network to ensure satisfaction of the original intent(s) of the network, or the like, as well as various combinations thereof.

Abstract: Techniques are described herein that are capable of pausing deployment of a pre-provisioned virtual machine. Deployment of a virtual machine on a computing system is initiated. The deployment of the virtual machine is paused, prior to execution of code that depends on a name of the virtual machine, to wait for receipt of user-specific setting(s) of the virtual machine. The deployment of the virtual machine is continued based at least in part on receipt of the user-specific setting(s). Continuing the deployment includes configuring the virtual machine to have at least one of the user-specific setting(s).

Abstract: Techniques are described for providing a cloud data collector (CDC) application for managing the generation of infrastructure templates. The CDC application provides graphical user interfaces that enable a user to provide inputs indicating configurations of data to be ingested by the data intake and query system, each configuration including one or more user accounts, in addition to data sources and regions associated with data sources. Using the configurations provided as input to the CDC application, the CDC application generates an infrastructure template that can be used to configure the service provider network to provide the requested security data to the data intake and query system.

Abstract: Technologies are disclosed for managing one or more quick response (QR) code-based media control device functions, such as configuring one or more consumer profiles related to the media control device. A QR code may be scanned, for example using a camera in communication with the media control device. The camera device may be integrally mounted with the media control device, or remotely mounted from the media control device. The media control device may interpret information conveyed by the QR code. One or more parameters for one or more consumer profiles for use on the media control device may be ascertained, perhaps for example based, at least in part, on the information. The media control device may configure at least a first consumer profile, perhaps for example using, at least in part, the one or more parameters. The first consumer profile may be implemented on the media control device.

Abstract: One or more embodiments provide techniques that permit virtual computing instances in isolated environments to communicate information outside the isolated environments without requiring networking. In one embodiment, an encoder which runs in a virtual machine (VM) within an isolated environment, such as one of the VMs of a packaged virtual machine application that does not have external network connectivity, is configured to encode information, such as state information of the packaged virtual machine application, in portion(s) of a network address. The encoder further configures an unconnected network interface of the same VM, or another VM in the isolated environment, with the network address that includes the encoded information. A decoder, which could not otherwise communicate with the virtual computing instance via any network, may then retrieve the network address assigned to the unconnected network interface and decode that network address to obtain the information encoded therein.

Abstract: A conventional network managing method has a problem that there is a high possibility that a setting error of communication software occurs. According to one embodiment, a non-transitory computer-readable medium including a network managing program is executed in a master apparatus, system information stored in a slave apparatus in advance is read out in a procedure conforming to an SNMP, protocol information in which a communication protocol that can be used by the slave apparatus is described is read out from the slave apparatus by using an object ID described in the system information thus read out, and the protocol information thus read out is referred to start communication with the slave apparatus by executing software corresponding to the communication protocol.

Abstract: Systems and methods for distributed, automated management of brownfield real estate asset remediation and/or redevelopment, including at least one server computer for analyzing and providing recommendations for a potential brownfield investment, wherein the at least one server computer is paired with a web-based graphical interface for accessing and editing stored documents, pictures, tasks, and budget information related to at least one brownfield asset.

Abstract: This application relates to apparatus and methods for booting servers, such as cloud datacenter compute servers. The servers may execute one or more hypervisors, such as stateless hypervisors, with each hypervisor supporting one or more virtual machines. In some examples, each of a plurality of servers are configured to boot from a network. The compute servers may obtain an IP address identifying a location of hypervisor bootable images. Upon a reboot, the servers may request and obtain a hypervisor bootable image from the IP address. The servers may execute the hypervisor bootable image to run a hypervisor. In some examples, the servers also obtain virtual machine images from the network. One or more hypervisors executing on each server may obtain, and execute, one or more of the virtual machine images to run one or more virtual machines.

Abstract: This disclosure provides solutions for automatically grouping network devices (e.g., endpoints) into clusters based on device characteristics. In some aspects, the disclosed technology also provides solutions for generating user selectable queries based on cluster characteristics. A process of the disclosed technology can include steps for identifying one or more device characteristics associated with a first network device, identifying one or more cluster characteristics for each of a first cluster and a second cluster, and comparing the device characteristics associated with the first network device with the one or more cluster characteristics for the first cluster and the second cluster. The process can further include steps for adding the first network device to the first cluster based on the cluster characteristics for the first cluster and the device characteristics for the first network device. Systems and machine-readable media are also provided.

Abstract: Methods and systems are presented for performing data scanning in a heterogenous data storage environment. A data scanning process on multiple different data storages may be performed based on a data scanning request, which specifies certain data of interest to be detected during the scanning. First, sampled data records are scanned from each of the data storages. Based on analyzing the data in the sampled data records and the metadata associated with each data storage, a fingerprint may be generated for each of the data storages that indicates a likelihood that the data storage includes the data of interest. A second scan may be performed on the data storage only if the fingerprint exceeds a threshold. The data of interest may be detected in the data storages during the second scan of the selected data storages.

Abstract: This disclosure describes an unmanned aerial vehicle (“UAV”) configured to autonomously deliver items of inventory to various destinations. The UAV may receive inventory information and a destination location and autonomously retrieve the inventory from a location within a materials handling facility, compute a route from the materials handling facility to a destination and travel to the destination to deliver the inventory.

Abstract: Disclosed herein are embodiments of systems, methods, and products that provide adversary detection and threat hunting. A server may comprise a user side virtual machine facing the cyber protection users, a collection virtual machine facing the at-risk network, and a data repository. The server may receive user requests requesting status data from the at-risk network via the user side virtual machine. The server may collect status data from the at-risk network via the collection virtual machine and store the collected data into the data repository. Different users may request duplicate information from the at-risk network. The server may retrieve the requested information from the data repository for duplicate requests and return the responses immediately for such requests. Because the server does not query the at-risk network for duplicate requests, the server may reduce the amount of bandwidth needed to acquire and distribute the requested information.

Abstract: Systems, methods, and media for setting up a media content streaming device are provided. In some implementations, the systems comprise: a first communication interface that is configured to provide a media output to a media content presentation device; a second communication interface that is configured to transfer data; and a hardware processor that is configured to: retrieve a setup application in response to detecting a connection between the media content streaming device and a user device via the second communication interface; cause the setup application to be launched on the user device; receive, from the user device, information relating to setting up the media content streaming device; set up the media content streaming device based on the received information relating to setting up the media content streaming device; and prompt a user to connect the media content streaming device to the media content presentation device via the second communication interface.

Abstract: A data analysis system uses metadata stored in association with database records to render mirror the data collection user interfaces utilized by the data collection systems to create the data records in the database. To enable this data analysis system functionality, the data collection system stores metadata defining the data collection user interface used to create a particular data record in association with that particular data record in the database. The data analysis system can then access the metadata to render a mirror of the data collection user interface on the fly, so that an operator of the data analysis system can create a new database record or edit a preexisting data record using the same user interface that was utilized to originally create the data record. The metadata typically defines the visual aspects, data parameters, and functional aspects of the data collection user interface.

Abstract: Package deployment over multiple cloud computing systems is provided where a package that includes a software container, file or a data package can be obtained, where the package is compatible to be deployed to multiple cloud computing systems. A selected cloud computing system that is selected from the multiple cloud computing systems can be determined, and the package can be deployed to the selected cloud computing system.

Abstract: A wireless communication coverage extension system comprises a backhaul subnetwork that includes a set of interconnected nodes. A plurality of nodes of the backhaul subnetwork implementing a functionality of access point of a same wireless communication network. To avoid conflicts of IP addresses, a monitoring of the presence of the main DHCP server is implemented, by a said node, to which the main DHCP server is connected. In the case where the first monitoring shows a disconnection of the main DHCP server, a backup DHCP server is activated in a node of the backhaul subnetwork. Then a general disconnection of the nodes of the backhaul subnetwork and of any device connected to the wireless communication coverage extension system is implemented. The IP address leases are then renewed by the backup DHCP server, following the general disconnection.

Abstract: Techniques for performing traffic outage detection in the Internet are disclosed. In some embodiments, a system, process, and/or computer program product for traffic outage detection in the Internet includes deploying a plurality of agents and a plurality of tests to be executed by the deployed agents; collecting path trace data from the plurality of agents to identify one or more terminal events; and detecting a network outage based on the one or more terminal events.

Abstract: A device may include a processor configured to monitor a user of a video conferencing application. The processor may be further configured to determine that the user corresponds to a passive user based on the monitoring; switch a setting for the video conferencing application for the user from real-time video to video streaming, in response to determining that the user corresponds to a passive user; generate a delay between receiving content via the video conferencing application and playing the content by the video conferencing application, wherein the delay progressively increases from no delay to a particular delay value over a time period, in response to switching the setting for the video conferencing application for the user from real-time video to video streaming; and play the received content using the video conferencing application based on the generated delay.

Abstract: Certain embodiments described herein are directed to a method of receiving information associated with a service provided by a management plane for managing a remote network. The method, in one example, includes registering, at an adapter container, with a data store or an entity within a service instance of a service deployment associated with a service within a software-defined networking environment associated with the remote network, wherein the service is provided for managing a remote network, and wherein registering with the data store or the entity causes the data store or the entity to send information associated with the service instance to the adapter when information is available. The method also includes receiving, at the adapter container, information from the data store or the entity. The method also includes transforming the information from a first format to a second format. The method also includes transmitting the information to an endpoint.

Abstract: Techniques for a virtualized fabric name server for a storage area network are described herein. An aspect includes operating a storage area network, the storage area network including a hybrid control plane. Another aspect includes managing, using a virtualized fabric name server and the hybrid control plane, the storage area network, wherein the virtualized fabric name server is disposed in a container that is hosted on an element of the storage area network.

Abstract: Systems and methods for building management utilizing adaptive edge processing are disclosed. The building system can store gateway components on storage devices. The gateway components can facilitate communication with a cloud platform and facilitate communication with a physical building device. The building system can identify a computing system of the building that is in communication with the physical building device. The physical building device can store one or more data samples. The building system can deploy the gateway components to the computing system responsive to identifying that the computing system is in communication with the physical building device. The gateway components can cause the computing system to communicate with the physical building device to receive the one or more data samples and cause the computing system to communicate the one or more data samples to the cloud platform.

Abstract: In some embodiments, a network regulator device protects a local network of client systems (e.g. Internet-of-things devices such as smartphones, home appliances, wearables, etc.) against computer security threats. When introduced to the local network, some embodiments of network regulator take over some network services from a router, and automatically install the network regulator as gateway to the local network. The network regulator then carries out an automatic device discovery procedure and distribute device-specific utility agents to the protected client systems. An exemplary utility agent detects when its host device has left the local network, and in response, sets up a virtual private network (VPN) tunnel with a security server to maintain protection of the respective device.

Abstract: A method for an interconnection functionality between a first mobile communication network and a second mobile communication network includes: associating or assigning private identifier information to specific public land mobile network (PLMN) identifier information related to the second mobile communication network; and in respect of signalling messages and/or data traffic packets that are to be routed or to be addressed or to be processed, providing for or supporting, by a network identifier and number translating functionality, a replacement and/or a translation, in both directions, between the private identifier information and the specific PLMN identifier information related to the second mobile communication network.

Abstract: According to certain embodiments, a vehicle electronic device comprises a transceiver configured to communicate with a mobile device; and at least one processor configured to generate first authentication information, control the transceiver to transmit the first authentication information to a registered mobile device, control the transceiver to send a request for authentication to the mobile device via a first communication connection, and perform authentication based on whether or not the processor receives second authentication information from the mobile device that corresponds to the first authentication information, wherein the first communication connection directly communicates with the mobile device.

Abstract: The automatic classification of network devices in a network. Specifically, the disclosure entails the designation of network device roles to network devices, as well as the clustering of network devices into logical groups. The association of network devices with network device roles and logical groups may be contingent on the connections between the network devices and a set of network device classification heuristics.

Abstract: Some examples described herein relate to providing a customized cloud service. In an example, Key Service Indicators (KSI) may be received for a cloud service. The Key Service Indicators may be associated with a cloud service template for providing the cloud service. The resources required for providing the cloud service may be identified based on the Key Service Indicators.

Abstract: A system and method for ensuring the availability of virtual desktops in a cloud based system. The system includes a primary regional datacenter having a primary desktop pool accessible by a desktop client providing access to a desktop to a desktop user. A secondary regional datacenter includes a secondary desktop pool. A control plane orchestrates communication between the desktop client and the regional datacenters. The control plane creates a copy of the desktop from the primary regional datacenter. The control plane performs an activation procedure when a disaster event occurs. The activation procedure includes creating the desktop in the secondary desktop pool from the copy. The activation procedure also directs the desktop client to the secondary desktop pool to access the desktop from the secondary regional datacenter. A deactivation procedure directs the desktop client in the secondary desktop pool to reestablish availability to desktops in the primary desktop pool.

Abstract: Methods and systems for the dynamically re-clustering of nodes in clusters to provide optimal performance and/or the most efficient use of resources through the use of machine learning models. Specifically, the methods and systems may determine a cluster that optimally performs and/or has the most efficient use of resources based on a first machine learning model. The methods and system may then retrieve available substitute nodes from other domains and/or networks that may lie outside the cluster, but may nonetheless be available to, or accessed by the cluster. The methods and systems may then generate an additional plurality of clusters using one or more of the original nodes of the originally selected clusters and/or one or more of the available substitute nodes.

Abstract: A method and system for outcome-based workload configurations for IT environments. Existing solutions directed to implementing multi-tier configurations on bare-metal IT infrastructure tend to require specialized tools and skills on a tier-by-tier basis. A more unified approach, where a single or singleton configuration that defines and implements the desired state (or outcome) of one or more tiers, is sought and thus proposed. Within this disclosure, implementation of workload deployment policies, is emphasized.

Abstract: Some embodiments of the invention provide a method for deploying network elements for a set of machines in a set of one or more datacenters. The datacenter set is part of one availability zone in some embodiments. The method receives intent-based API (Application Programming Interface) requests, and parses these API requests to identify a set of network elements to connect and/or perform services for the set of machines. In some embodiments, the API is a hierarchical document that can specify multiple different compute and/or network elements at different levels of compute and/or network element hierarchy. The method performs automated processes to define a virtual private cloud (VPC) to connect the set of machines to a logical network that segregates the set of machines from other machines in the datacenter set. In some embodiments, the set of machines include virtual machines and containers, the VPC is defined with a supervisor cluster namespace, and the API requests are provided as YAML files.

Abstract: Systems and techniques for interconnection discovery for automated standards assay are described herein. Configuration data may be obtained for a set of computing systems operating in the computing environment. The configuration data may be evaluated to identify a first application executing on a first computing system of the set of computing systems. First computing system configuration data may be obtained for the first computing system. The first computing system configuration data may be evaluated to identify a dependency of the first application. The dependency may be added to a first application dependency profile for the first application.

Abstract: Verified deliveries are commonplace for various exchanges of goods, packages, and/or other items, but often require close proximity or contact between the exchanging parties or devices associated therewith—e.g., for digital or physical signature. To remedy this, system and methods described herein may leverage an ad hoc network established between a device of a provider and a device of a consumer for exchanging codes or tokens—that may be validated by an authentication service—to provide a verification process during an exchange between the parties. As a result, a safe distance may be maintained between the parties throughout the transaction—thereby avoiding exchange of germs while also increasing safety and security of both parties—and the verification process may be more reliable and secure.

Abstract: Aspects of the present invention disclose a method for managing the control policies associated with processing of a set of resources by a distribution system. The method includes one or more computer processors determining information associated with a configuration of a distribution system. The method further includes determining information related to a set of resource to process utilizing the distribution system. The method further includes determining respective values for a plurality of parameters related to processing the set of resources utilizing the distribution system. The method further includes selecting an initial set of control policies; The method further includes updating the initial set of control policies. The method further includes instructing the distribution system to process the set of resources utilizing the updated set of control policies.

Abstract: In one embodiment, a controller in a network obtains information associated with one or more nodes connected to a particular node in the network. The controller sends a Manufacturer Usage Description request for the particular node that includes the information associated with the one or more nodes connected to the particular node. The controller receives, in response to sending the Manufacturer Usage Description request, operational parameter values for the particular node. The controller configures the particular node using the operational parameter values.

Abstract: Embodiments of the present invention adapt interconnect systems to apply automated rules and analytics to the Authentication, Authorization, and Accounting (“AAA”) messages between providers that are handled by the interconnect system. The automated rules and analytics interpret or convert the administrative messages into a measure of technical performance of the visited network in relation to a corresponding home network provider. As part of this process, the system establishes a procedure that matches messages involving a device to be related and produces a data structure and corresponding data that is stored and reflects the performance or other salient data points. The structure of the data is set of extracted and calculated data that is derived from the messages and is assembled to reflect operation at the level of each administrative messaging session, involving a request to the home network provider to join a visited network.

Abstract: An example method includes receiving, from a customer system by a cloud exchange comprising processing circuitry, a request to communicatively couple a virtual gateway on network infrastructure of the cloud exchange to a network gateway communicatively coupled to a public network, the request including data indicating a public Internet Protocol (IP) address of the customer system, wherein the customer system is configured with a first connection communicatively coupling the customer system and the public network via a network service provider (NSP) that is separate from the cloud exchange; configuring, by the cloud exchange, a network route for a network gateway to the virtual gateway, the network gateway communicatively coupled to the public network; and providing, by the cloud exchange to the network gateway, routing information including the public IP address of the customer system to create a second connection communicatively coupling the customer system and the public network.

Abstract: A method may include validating an execution plan specifying one or more configurations to apply to an information technology infrastructure. The execution plan may be validated by at least determining a structural validity of the configurations of the execution plan. In response to the configurations of the execution plan being determined to be structurally valid, the validation of the execution plan may further include determining whether the information technology infrastructure satisfies a policy if the configurations specified in the execution plan are applied to the information technology infrastructure. In response to a successful validation of the execution plan, the one or more configurations specified in the execution plan may be applied to the information technology infrastructure by at least provisioning, modifying, and/or de-provisioning one or more resources at the information technology infrastructure.

Abstract: An automatic service monitor in an information-technology environment performs regular search queries against generated machine data to derive performance measurements. The information technology environment is defined in terms of services provided by entities, and the performance measurements are defined as key performance indicators (KPIs) of the services. Generated machine data used by the search queries pertain to the entities performing the service. Definitional information for the services, entities, and KPIs is administered by a user to control the operation of the service monitor. Various aspects of such definitional information as well as related performance measurement information may be presented in a unified console display tailored to, and organized around, a particular service. The console display may serve as a central launch point by supporting user interaction to navigate to other specialized monitoring interfaces.

Abstract: According to one or more embodiments, an image forming apparatus comprises a communication interface, an image forming unit, and a processor. The communication interface communicates with a plurality of information processing apparatuses via a network and receives print jobs from the information processing apparatuses. The image forming unit executes printing according to a first print job. The processor determines a presence of a user associated with a second print job near the image forming apparatus, and then determines, based on the presence of the user, whether to execute the first print job or to transmit or forward the first print job to another image forming apparatus.

Abstract: An automated operating system networking configuration system includes a server computing device with an operating system that is included in a trust domain, and a management controller device included in the trust domain and coupled to the server computing device via a management channel. The management controller device identifies an operating system networking configuration for the operating system and transmits an instruction via the management channel to the server computing device to perform operating system networking configuration operations using the operating system networking configuration. A management service in the operating system receives the instruction from the management controller device via the management channel and, in response to receiving the instruction while being in the trust domain with the management controller device, automatically retrieves the operating system networking configuration.

Abstract: A multi-fabric VLAN configuration system includes a first fabric with server devices that are configured to communicate using VLANs, a primary I/O module coupled to the server devices, and a first fabric management system coupled to the server devices and the primary I/O module. The first fabric management system identifies VLAN information associated with the VLANs, automatically configures the primary I/O module using the VLAN information, and causes the VLAN information to be transmitted by the primary I/O module. A second fabric in the multi-fabric VLAN configuration system includes a leaf switch device that is coupled to the primary I/O module and that receives the VLAN information, and a second fabric management system that is coupled to the leaf switch device and that receives the VLAN information from the leaf switch device, and automatically configures the leaf switch device using the VLAN information.

Abstract: The embodiments described herein include one embodiment that provides a control method that includes connecting a first controller to a control system; receiving control system configuration data from a database, in which the configuration data comprises holistic state data of a second controller in the control system; and configuring operation of the first controller based at least in part on the configuration data received.

Abstract: Respective network metrics sets corresponding to one or more data sources are examined at a network health manager. Network health states corresponding to one or more endpoint pair categories are determined based on the analysis of the network metric sets. An indication of the network health state of a particular endpoint pair category is stored.

Abstract: In one or more implementations, user interfaces may be generated that include user interface elements that enable the tracking or monitoring of interactions with augmented reality content by users of a client application. Usage metrics for augmented reality content may be collected and analyzed. In addition, information about client application users that interact with augmented reality content may be generated. In one or more examples, characteristics of users of the client application that interact with one or more augmented reality content items may be analyzed to determine a user characterization for one or more augmented reality content items. The usage metrics and user characterizations for augmented reality content items may be presented via a dashboard that is accessible to creators of augmented reality content.

Abstract: Some embodiments provide domain name suggestions based on a user-provided ASCII phrase translated and/or transliterated into any of a number of supported non-English language character sets. To suggest non-English-language domain names, some embodiments parse, translate, and transliterate the user-provided ASCII names into domain names that include at least one non-English language character. Moreover, some embodiments determine the DNS registration status (e.g., as a second-level domain) of the Punycode (in ASCII) corresponding to these non-English domain names and provide the user with the ability to register any that are unregistered.

Abstract: An object is to provide a means for causing wirings and device setting configurations to conform between communication devices and then establishing communication by generating a device setting configuration in accordance with wirings between the communication devices and reflecting the device setting configuration in interfaces of the communication devices. A device setting configuration for establishing communication between communication devices is generated based on information regarding an adjacent device acquired from each communication device, using a network setting information database configured to hold, in an associated manner, information regarding the communication device, information regarding the adjacent device connected directly to the communication device via a communication cable, and information regarding a device setting configuration to be set for an interface of the communication device used to connect to the adjacent device.

Abstract: This disclosure describes techniques for facilitating a primary account holder (PAH) of a client account to control access privileges of service features that are accessible by secondary account holders (SAH), via the client account. More specifically, an Access Privilege Control (APC) system is described that enables the PAH to generate access privilege rules that control the use of service features by a SAH, that are accessible via the client device(s) associated with the client account. The APC system may associate a set of updated access privilege rules with virtual profile data for clients associated with the client account. The virtual profile data may be transmitted to client devices, or subset thereof, associated with the client account. Further, the APC system may monitor an operation of client devices associated with the client account and provide one or more recommendations to update access privilege rules based on monitored service feature usage.

Abstract: The invention relates to a method for securing component data assigned to an automation component (D1, D2, DN), wherein the component data is transmitted to at least one portion of computing nodes of a distributed registry (BN1, BN2, BN3), wherein the distributed registry (BN1, BN2, BN3) functions to authenticate the component data, preferably component data of multiple automation components (BN1, BN2, BN3).

Abstract: A method includes identifying a master template from a repository corresponding to one or more servers in a preconfigured cluster positioned at an edge location. The identifying also includes receiving an input from a user defining a new configuration set by the user. The identifying also includes changing one or more parameter values in at least one configuration profile references. The identifying also includes creating a new master template based on the one or more parameter values. The identifying also includes creating a new planned inventory file based on the new master template. The identifying also includes changing an existing configuration of the one or more servers in the preconfigured cluster during runtime, based on the new planned inventory file.

Abstract: Complex control instruction chains in a blockchain for a specific task for controlling devices to be managed in a simple manner is provided. which permits a prescribed validity to be assigned for a specific task of a blockchain-based device control, the validity being defined by the life cycle (e.g. the period of use) of a device, for example.