Abstract: In one example, a non-transitory computer readable medium for hardware management includes instructions to generate an instruction volume by copying a master volume, wherein the instruction volume is a computing device image, execute a set of scripts to alter the instruction volume based on a profile for a computing device, and deploy the instruction volume to the computing device to configure the computing device based on the profile for the computing device.

Abstract: A method of improving quality of digital communication in a communication session between communicating entities includes collecting context information pertaining to at least one of the communicating entities. The context information is indicative of a plurality of context parameters related to at least one of: a device, a communication client, at least one media stream, an access network. Information indicative of a plurality of performance-specific observations recorded at one or more monitoring entities is collected. The observations are analyzed to determine the quality of digital communication in the communication session. The context information is analyzed, to identify at least one action to be taken to improve the quality of digital communication. Information indicative of the at least one action is sent to the at least one of the communicating entities and/or the at least one network entity during the communication session.

Abstract: In one embodiment, a network device includes an interface to receive packets from sources in a network for forwarding to destinations in the network, the sources and destinations being assigned to groups, each packet including a source and destination identifier, a memory configured to store a source-group mapping table that maps source identifiers to source-groups, a destination-group mapping table that maps destination identifiers to destination-groups, and an intergroup access-control list that maps source-destination-group pairs to forwarding rules, and a single IC chip configured, for each packet, to find a source-group for the source identifier in the source-group mapping table, find a destination-group for the destination identifier in the destination-group mapping table, find a forwarding rule for a source-destination pair including the found source and destination-group in the intergroup access-control list, and forward or drop the packet according to the found forwarding rule.

Abstract: The present disclosure provide a packet processing method, a related apparatus, and an NVO3 network system. A first NVE receives a first packet sent by a first CE, where the first packet includes a MAC address of the first CE and a VLAN ID; the first NVE determines a VNI of the first CE according to an inbound interface of the first packet and the VLAN ID; the first NVE performs NVO3 encapsulation on the first packet to obtain an NVO3 encapsulated first packet, where the NVO3 encapsulated first packet includes the VNI of the first CE, and a source IP address in an NVO3 header of the NVO3 encapsulated first packet is a first shared VTEP IP address shared by the first NVE and a second NVE; and the first NVE forwards the NVO3 encapsulated first packet to a remote NVE.

Abstract: An on-demand virtual security system between a client and a server in communication with a network, the system including an orchestrator, wherein upon receiving a service request from at least one of the client and the server, the orchestrator instantiates a security virtual function within the network and supplies the security virtual function with at least one connectivity policy, and wherein the security virtual function applies the at least one connectivity policy to approve or disapprove a connection between the client and the server and wherein upon the security virtual function approving the connection between the client and the server, a orchestrator establishes a data session; and wherein after the data session has concluded, the orchestrator terminates the security virtual function.

Abstract: According to the invention, a method for determining what hardware components are installed on a computing device is disclosed. The method may include identifying the computing device, and determining, based on the computing device, a hardware component of the computing device. The method may also include retrieving information about the hardware component, and setting, based at least in part on the information about the hardware component, a parameter for an algorithm of software on the computing device.

Abstract: A technique for reconfiguring a virtual machine in a cloud computing environment is disclosed. A method implementation of the technique comprises receiving (S310) a reconfiguration request from an application (110) being executed on the virtual machine in the cloud computing environment, the reconfiguration request indicating a desired resource allocation for the virtual machine, sending (S312) a reconfiguration response to the application (110), the reconfiguration response including a reconfiguration offer indicating a possible resource allocation for the virtual machine, receiving (S316) a reconfiguration acknowledgement from the application (110) indicating acceptance of the reconfiguration offer, and triggering (S318) reconfiguration of the virtual machine so as to allocate resources to the virtual machine according to the accepted reconfiguration offer.

Abstract: Some embodiments provide a method for a network controller. The method receives network configuration data including an association of an entity configuration profile set with a logical network entity. The entity configuration profile set is a group of at least two entity configuration profiles for different types of settings to apply to logical network entities with which the entity configuration profile set is associated. The method identifies a host machine at which the logical network entity is implemented. The method distributes the entity configuration profile set and each of the at least two entity configuration profiles to the identified host machine.

Abstract: A method for providing a dormant state for content management servers is provided. Client devices are allowed to conduct transactions with servers when the servers are active. However, in a dormant state, the servers are not allowed to accept new transactions. Thus, by utilizing the dormant state, software upgrades can be made to one server at a time. Alternatively, all servers can be taken down for major upgrades, with the servers still operated in a read-only mode based on a file image from a point in time just prior to the shutdown. When the upgrade is completed, the servers can be returned to the active state.

Abstract: An audio processing device includes a first analog cable connector that receives at least one analog audio source signal from a first analog cable. The first analog cable connector suitable to detachably interconnect the audio processing device to the first analog cable. The audio processing device includes a second analog cable connector and transmits the at least one analog audio source signal to the second analog cable connector suitable to be received by a second analog cable, where the second analog cable connector is suitable to detachably interconnect the audio processing device to the second analog cable. The audio processing device includes digital identification data that identifies the audio processing device. The audio processing device transmits the digital identification data to the second analog cable connector suitable to be received by the second analog cable. An enclosure that encloses the audio processing device.

Abstract: Methods, systems, computer-readable media, and apparatuses for providing mobile device management (MDM) functionalities are presented. In some embodiments, a pseudo device representative of a physical end user device may be established within a cloud computing environment. The pseudo device may be provisioned for use with MDM service providers and configured to receive commands from the MDM service providers on behalf of the physical end user device. In some embodiments, multiple pseudo devices each representative of a physical end user device may be established within a cloud computing environment. A first pseudo device may be provisioned for use with a first MDM service provider and configured to receive commands from the first MDM service provider on behalf of the physical end user device. A second pseudo device may be provisioned for use with a second MDM service provider and configured to receive commands from the second MDM service provider.

Abstract: A computer program product is provided for extending a clustered file system. The computer program product comprises a computer readable storage medium having program instructions embodied therewith. The program instructions are executable by a processor to cause the processor to build a central cluster repository, establish a service-specific interface for accessing non-file system data in the central cluster repository, and extend a clustered file system with the service-specific interface.

Abstract: Some embodiments provide a method for a network controller. The method receives network configuration data including an association of an entity configuration profile to a logical entity group that references at least two logical network entities. The entity configuration profile includes a set of configuration settings to apply to logical network entities with which the entity configuration profile is associated. The method associates the entity configuration profile with the logical network entities referenced by the logical entity group. Based on the associations of the entity configuration profile with the logical network entities, the method determines multiple host machines that require the configuration data for the entity configuration profile. The method distributes the entity configuration profile to the host machines.

Abstract: A system and method of deploying operating environments in an enterprise computing environment comprised of managed virtual or hardware servers is disclosed. A library of operating environments, each environment including at least one package including an operating system image and an application, is provided. A user controlling a cluster of servers may request creation of a test environment using an operating environment from the library, and test the environment with applications to ensure the user's needs are met. The user may request all servers within the user's cluster be provisioned with the operating environment through a deployment manager.

Abstract: A method implemented by a receiving host entity comprises transmitting, by a transmitter of the receiving host entity, a message comprising an anonymization policy of the receiving host entity, the message comprising an anonymized identifier of the receiving host entity, the anonymized identifier being an ephemeral identifier of the receiving host entity, and receiving, by a receiver of the receiving host entity, a data packet from a sending host entity, a destination identifier field of the data packet including the anonymized identifier.

Abstract: The present disclosure relates to automatically and periodically updating a multi-tier application stack in a cloud environment. More particularly, the present disclosure relates to systems and methods that access a central server to determine if new updates have been released, and when new updates have been released, automatically apply the new updates to an application environment with minimal network burden and service interruption.

Abstract: Systems and methods for backing up and restoring virtual machines in a cluster environment. A cluster agent that is cluster aware operates as an interface with the backup server. The cluster agent can locate the virtual machines being backed up or restored and coordinate with a local agent to perform the backup or restore of the virtual machines.

Abstract: Embodiments of systems and methods for reducing Keyboard, Video, and Mouse (KVM) downtime during firmware update or failover events are discussed. In some embodiments, a chassis may include: a plurality of Information Handling Systems (IHSs); a first Enclosure controller (EC); and a second EC coupled to the first EC, where the first and second ECs comprise program instructions stored thereon that, upon execution, cause the chassis to: establish a KVM session with a selected IHS via the first EC; in response to the first EC receiving a firmware update command, update and restart the second EC; notify the first EC, by the second EC, that the update and restart is completed; trigger by a first KVM process in the first EC, a second KVM process in the second EC; and take control, by the second EC, of the KVM session.

Abstract: Methods and apparatus to propagate an update between nodes in a distributed environment are disclosed. An example apparatus includes a first virtual appliance configured to install an update using an update file from a first update repository, the first update repository located apart from the first virtual appliance, the first virtual appliance configured to form a second update repository at the first virtual appliance, the second update repository to include a copy of the update file from the first update repository. The example apparatus also includes a second virtual appliance, the second virtual appliance formed as a replica of the first virtual appliance, the second virtual appliance to install the update using the copy of the update file from the second update repository.

Abstract: In some examples, a method can include receiving, at a network monitor, discrete side information from a first server at a first rack regarding a data flow between the first server and a second server at a rack other than the first rack. The discrete side information can, for example, include an indicator determined by the first server that indicates whether the data flow satisfies a reference criteria. The method can further include performing, with the network monitor, a network inference process partly based on the received discrete side information.

Abstract: Systems, apparatuses and methods may receive, at a local Internet of Things (IOT) device, a request to deploy an IOT application. Additionally, the IOT application may be partitioned into a plurality of atomic nodes, wherein configuration information for the plurality of atomic nodes may be sent, at runtime, to a plurality of remote IOT devices having abstracted resources that support operation of the first plurality of atomic nodes. In one example, the configuration information is sent via a device independent message protocol having a universal namespace.

Abstract: Methods and systems are provided that enable single sign-on (SSO) mechanisms on rich clients running hosting applications that include documents with one or more embedded web assets. An embedded web asset may be any resource (e.g., document, image, data, etc.) that is accessed via a browser from within a hosting application. In aspects, authentication of a user identity is required to access an embedded web asset. In particular, an identity management module is provided on a rich client. The identity management module is configured to maintain multiple credentials for multiple user identities that are associated with multiple applications, whether the applications are embedded applications or hosting applications. In this way, a user may access multiple applications, including embedded web assets, associated with each user identity—without signing into each application. That is, a user is able to login a single time for each user identity.

Abstract: A system may receive network device configuration information associated with a network service. The system may determine multiple settings associated with the network service based on receiving the network device configuration information. The multiple settings may include a common setting and a device-specific setting. The system may generate a first network service model of the network service based on the multiple settings. The first network service model may include multiple nodes corresponding to the multiple settings. The system may re-configure one or more nodes associated with the first network service model, and may generate a second network service model of the network service. The system may generate a user interface template based on the second network service model and may provide the user interface template to a client device for display. The client device may allow a configuration of the multiple settings based on the user interface template.

Abstract: A bytecode construction, a method, and a system for optimizing just in time compilation. The bytecode includes several regions wherein a region is a logical sequence of one or more bytecode blocks and the bytecode is annotated with region hints embedded therein. The region hints have a bytecode structure and are designed for instructing a just-in-time, or JIT, runtime environment for JIT compilation of the regions by JIT compilers implemented at nodes of a network. A method and a system for implementing the bytecode construction are also presented.

Abstract: A system provides haptic functionality over a networked system. The system receives information from a first device registered at the networked system and determines a notification to be provided to a user based on the information. The system then selects a second device registered at the networked system and provides the notification to the user by producing a haptic effect on the second device.

Abstract: The technology disclosed herein enables multi-path routing in virtual edge systems of a virtual network environment. In a particular embodiment, a method provides establishing a connection for a communication with a client outside of the virtual network environment through a first virtual edge system of a plurality of virtual edge systems. The method further provides generating state information about the connection that indicates properties of the connection with respect to the first virtual edge system and updating a state information base of the first virtual edge system with the state information. Also, the method provides transferring the state information to one or more other virtual edge systems of the plurality of virtual edge systems and updating respective state information bases of the one or more other virtual edge systems with the state information.

Abstract: A managed server (MS) within an administrative domain is quarantined. The administrative domain includes multiple MSs that use management instructions to configure management modules so that the configured management modules implement an administrative domain-wide management policy that comprises a set of one or more rules. The quarantined MS is isolated from other MSs. A description of the MS is modified to indicate that the MS is quarantined, thereby specifying a description of the quarantined MS. Cached actor-sets are updated to indicate the quarantined MS's changed state, thereby specifying updated actor-sets. A determination is made regarding which updated actor-sets are relevant to an other MS, thereby specifying currently-relevant updated actor-sets. A determination is made regarding whether the currently-relevant updated actor-sets differ from actor-sets previously sent to the other MS.

Abstract: A resource allocating method for a VNF and an apparatus are used to resolve a prior-art problem that when a VNF is established. In the method, a resource allocation device in an NFV architecture selects a corresponding physical machine for a VDU based on a resource configuration information group of the VDU. The resource configuration information group includes a resource scheduling parameter, and the resource scheduling parameter is for indicating a requirement of a VNF on a resource selection and scheduling policy. In this way, when a plurality of factors need to be considered to schedule a resource for the VDU, the resource configuration information group may include resource scheduling parameters that indicate a plurality of factors, and the resource allocation device may schedule a resource for the VDU based on a plurality of factors, thereby improving resource scheduling flexibility in a VNF instantiation process.

Abstract: Techniques for dynamic allocation of network address spaces in virtual networks implemented in a service provider system are described. Upon a scaling condition of an allocation rule being determined to be satisfied, a network address space of a virtual network can be automatically expanded or contracted. The scaling condition can be specified by a customer associated with the virtual network. The allocation rule may also include a allocation factor that indicates an amount of network addresses that are to be added to or removed from the virtual network.

Abstract: Techniques for action execution based on management controller received action requests are provided. In one aspect, a utility program running under the control of an operating system on a server computer may retrieve an indication of an action request. The action request may be stored in a management controller accessible storage. Storage of the action request may not require operating system administrator credentials. The action specified in the request may be executed by the utility program.

Abstract: One aspect related to design of systems and methods for manufacturing products that include technology in skilled areas is configuring a production station for use by an operator without specialized skills. The present invention contemplates an approach to designing a station configurable to perform one or more of incoming inspection, assembly, testing, and branding. A preferred approach includes verifying data associated with units prior to accepting them for incorporation, preventing incorporation of an incorrect unit, and guiding an operator in possible remedial action. This approach includes storing data in a server and making such data substantially instantly accessible to production stations once written in the server. Such data preferably includes software to configure the production station such that the operator need not have specialized skills. A production station designed using this approach is particularly useful in the manufacture of an outdoor unit of a split-mount microwave radio system.

Abstract: Method and system for generating dynamic rules for a computer network firewall are provided. The method includes applying a plurality of drop rules to a plurality of packets that are received at a network interface. The plurality of drop rules are sequentially arranged rules and determine at least one of allowance and dropping of a packet based on corresponding tracking information. Then a unique drop rule is generated for dropping a set of packets based on an implicit deny rule. The implicit deny rule determines a drop for the plurality of packets. Thereafter, sequence for the unique drop rule in the plurality of drop rules is determined based on dropping of the plurality of packets. Accordingly, the unique drop rule is deployed in the sequence of drop rules.

Abstract: A device can receive a request to generate a configuration management instance associated with a configuration management service. The device can generate the configuration management instance based on the request. The device can configure a set of member devices to be associated with the configuration management instance. The device can receive information associated with a configuration management action to be performed in association with a member device, of the set of member devices, of the configuration management instance. The device can perform the configuration management action in association with the member device, of the set of member devices, after receiving the information associated with the configuration management action.

Abstract: Embodiments of this application provide a method for generating a routing control action in a software-defined network and a related device, to provide optimum control actions for the SDN. The method includes: obtaining a current network state parameter of the SDN; determining a Q function of the SDN based on the current network state parameter of the SDN and a deep neural network model, where the deep neural network model is determined based on a current topology structure of the SDN; and determining a routing control action for the SDN based on the Q function and a link state parameter of each link in the SDN. In the technical solution, the deep neural network model is combined with a Q-learning algorithm of reinforcement learning, and optimum control actions can be determined.

Abstract: One or more embodiments provide techniques for processing a request entering a node cluster managed by a control plane executing on a computing service. A first node of the node cluster receives a request for a service. The first node determines to which service object in the first node to route the request. The first node identifies an existing version of the service executing thereon. The first node determines whether there exists an updated version of the service executing thereon. Upon determining that the updated version of the service does exist, the first node sets the existing version of the service as the current version of the services. The node routes the request to a first service object associated with the current version of the service using a handler of the first service object.

Abstract: System, device, method, and computer program and computer program products for providing communicating between devices having similar or dissimilar characteristics and facilitating seamless interoperability between them. Computer program software and methods of and systems and devices for sharing of content, applications, resources and control across similar and dissimilar permanently or intermittently connected electronic devices. Devices, systems, appliances, and the like communicating and/or interoperating within the framework provided. A social synchronization interoperability method, such as a Dart Social Synchronization method provides an efficient and easy to administrate method for synchronizing specific sets of data and/or operations across any number of devices and protocols without the need for every device to contact a master device, or for any device to act as a master. Social synchronization of devices and content provides an advantageous alternative to mastered synchronization techniques.

Abstract: A mobile device having location services may store information pertaining to a geo-fence that is associated with a user of the mobile device and assigned to a location. The mobile device may identify a current location of the mobile device and store data pertaining to the location of the mobile device. The mobile device determines a current geo-fence state of the mobile device based on the location data in response to an internal stimuli or an external stimuli. The geo-fence state is selected from at least an inside geo-fence state in which the mobile device is deemed to be inside the geo-fence and an outside geo-fence state in which the mobile device is deemed to be outside of the geo-fence. The mobile device may notify a remote server of the current geo-fence state.

Abstract: A Virtual Network Function Descriptor (VNFD) parameter may include subfields that allow a management entity to determine whether the VNFD parameter can be updated. The subfields may include a write-ability subfield that indicates whether the VNFD parameter is a dynamic/configurable VNFD parameter or a fixed/static VNFD parameter. The VNFD parameter may also include an access permission subfield that indicates which entities are authorized to modify/update the VNFD parameter. The VNFD parameter may also include an administrative priority subfield that indicates a priority of an entity that set an attribute of the VNFD parameter. The VNFD parameter may also include a constraints subfield that indicates one or more conditions that are required to occur in order for the VNFD parameter to be updated.

Abstract: A method and apparatus of a network element that installs a control plane data rule from system memory to specialized hardware memory in a network element is described. In an exemplary embodiment, the network element receives control plane data processing statistics of control plane data that is received by the network element, where the control plane data is policed using a plurality of control plane data policing rules stored in the system memory. The network element further determines that a candidate policing rule is being utilized greater than a threshold based on at least the control plane data processing statistics, where the candidate policing rule is one of the plurality of control plane data policing rules stored in the system memory. The network element additionally installs the candidate policing rule in the specialized hardware memory, where the candidate policing rule is subsequently used by the network element to police the control plane data.

Abstract: A set of devices is inventoried to identify components on the device. Usage information is also identified, indicating a level of usage of the different components. The set of devices is dynamically divided into different collections and deployment control signals are generated to control deployment of an item, onto the devices, based upon the identified collections.

Abstract: A stream application receives a stream of tuples to be processed by a plurality of processing elements. The plurality of processing elements operate on one or more compute nodes. Each processing element has one or more stream operators. Segments of software code are embedded in a tuple of the stream of tuples. The tuple retrieves one or more compute node metrics. The compute node metrics describe one or more resources of a first compute node. The tuple obtains tuple information of one or more tuples of the stream of tuples to be processed by a first stream operator that operates on the one or more resources. The tuple determines a prospective resource disparity related to the first stream operator based on the obtained tuple information and the compute node metrics. The tuple transmits a resource request to the stream application based on the determined prospective resource disparity.

Abstract: A method for applications includes: determining context-related information based on a system signal obtained; executing a target application corresponding to the context-related information, wherein the target application comprises at least one application unit; and using the target application to perform a corresponding operation.

Abstract: An illustrative embodiment disclosed herein is a method, by a migration virtual machine, including determining whether a first target network interface card is configured by dynamic host configuration protocol and sending a first address resolution protocol request for a first source Internet Protocol gateway to the first target network interface card. Sending the first address resolution protocol request is based on determining that the first target network interface card is not configured by dynamic host configuration protocol. The method further includes determining whether the first target network interface card responds to the first address resolution protocol request of the migration virtual machine and applying an Internet Protocol configuration of a first source network interface card to the first target network interface card.

Abstract: A device may include one or more processors to establish a media access control security (MACsec) key agreement (MKA) session between a first network device and a second network device via a MACsec link; establish a fast heartbeat session via the MACsec communication link, between a first packet processing engine of the first network device and a second packet processing engine of the second network device, to permit the first packet processing engine and the second packet processing engine to exchange fast heartbeat messages via the fast heartbeat session and the MACsec communication link; determine, based on the fast heartbeat session, that the MKA session has ended; and/or perform an action based on the MKA session ending.

Abstract: An apparatus includes an aggregation module that is associated with a first network core and that is operatively coupled to a second network core and a third network core. The aggregation module is configured to receive a first copy of an access point license that authorizes access to a network via an access point and the second network core. The aggregation module receives the first copy of the access point license from the second network core in response to an installation and validation of the access point license on the second network core. The aggregation module is configured to send a second copy of the access point license to the third network core that authorizes a device to access the network via the access point and via the third network core in accordance with the access point license and in response to a failure of the second network core.

Abstract: In an example of this disclosure, a method may include receiving, by a database server, a data write request. The data write request may include authentication information corresponding to a first call session and first additional information. The method may include generating, by the database server, a first unique identifier based on the first additional information. The authentication information may correspond to the first unique identifier. The method may include storing the first unique identifier and the authentication information in a data structure in a memory of the database server.

Abstract: Examples herein disclose a command to control a use of a test key for installation of a test basic input output system (BIOS). The examples validate a command and replace at least a portion of a production BIOS with the test BIOS based on an allowance of the test key.

Abstract: A method of configuring an email client is disclosed. An email address is received. The email address is parsed to obtain a domain. A mailserver configuration is generated based on the domain. The email client is configured according to the mailserver configuration.

Abstract: In some examples, a method includes accessing an orthogonal network policy set that represents a first intent-based network policy and a second intent-based network policy. The method may also include determining multiple reduced orthogonal network policy sets from the orthogonal network policy set. The multiple reduced orthogonal network policy sets may differ from one another, and each represent the first and second intent-based network policies. The method may further include selecting a particular reduced orthogonal network policy set among the multiple reduced orthogonal network policy sets to implement on a target switching device.

Abstract: When a license file holds license type information and the license type is “monthly”, a license management system can update expiration timing of the license even if the license is already used.