Abstract: The present invention provides a reception apparatus constituting an information-control central apparatus that is a communication apparatus that performs one-to-many communication with devices as a plurality of counterpart communication apparatuses. The reception apparatus includes a packet processor that processes a received packet and a buffer that, in response to input of a packet received from a counterpart communication apparatus, adjusts an interval between packets to be sequentially inputted to the packet processor to a specified value or more and outputs the input packet to the packet processor, thereby to avoid occurrence of packet loss.

Abstract: System and method for managing public internet protocol (IP) addresses for a group of virtual data centers utilize a virtual overlay network to route communications between the virtual data centers and a public network through a virtual edge router of one of the virtual data centers using a public IP address assigned to that virtual edge router.

Abstract: Upon providing (101) message content (such as a remote control instruction) to be transmitted, and in conjunction with provision (102) of a plurality of different transmission characteristics (as correspond, for example, to different types of transmission) and a corresponding plurality of correlated recovery identifiers (103), a particular transmission characteristic is selected (104) and used to transmit (105) a joint message. In particular, in a preferred approach, the selected transmission characteristic (106) is used when transmitting at least a portion of the message content portion of the joint message while another part of the joint message carries the recovery identifier to thereby facilitate selection of an appropriate reception technique by a receiver when receiving the joint message.

Abstract: A communication system for communication in a communication network having a first subnetwork and a second subnetwork includes a first identification entity assigned to the first subnetwork and configured to receive an identity of a communication terminal and identify the communication terminal on a basis of the identity for communication over the first subnetwork. The communication system additionally includes a second identification entity assigned to the second subnetwork and configured to receive the identity of the communication terminal and identify the communication terminal on the basis of the identity for communication over the second subnetwork. The communication system further includes a management entity configured to authenticate the communication terminal for communication over a particular subnetwork.

Abstract: A method includes, prior to authenticating a mobile device, receiving by an access point a first message from the mobile device, determining that the mobile device is to be authenticated prior to responding to the first message, and sending to an authentication server a second message that includes an authentication request and the first message. The method also includes receiving from the authentication server a third message that includes a response to the authentication request and that further includes the first message.

Abstract: A method, by a host providing an application, configures forwarding rules in a traffic distributor using an address resolution protocol. The host receives IP data packets distributed by the traffic distributor to different hosts located in a first network based on a predefined forwarding criterion contained in the forwarding rules. The host applies the application to the IP data packets. The host determines whether a predefined operating status of the host is met. If met, a message is generated using the address resolution protocol. The message contains information for which at least one characteristic of the predefined forwarding criterion the IP data packets should be forwarded to the host, and a configuring indicator by which the traffic distributor is initiated to generate the forwarding rule for the host taking into account the at least one characteristic contained in the message. The generated message is transmitted to the traffic distributor.

Abstract: A system, a cloud platform, a device and a method are for configuring edge devices. The system includes one or more edge devices generating corresponding one or more field data; a controller connected to one or more edge devices to acquire one or more field data; and a cloud platform connected to the controller to configure one or more edge devices. The cloud platform includes a cloud platform receiving module receiving one or more field data from the controller; an asset database including one or more templates corresponding to the configuration data of one or more edge devices; and a configuration module configuring one or more edge devices according to one or more field data and the corresponding templates. A specific protocol is used, in at least one embodiment, to packetize the field data generated by edge devices and utilizes the corresponding templates and field data to configure edge devices.

Abstract: Methods, systems, and computer readable mediums for hitless repair. Hitless repair may include making a first determination, by a system control device (SCD) agent of a network device, that a SCD of the network device has experienced an error and/or is to be updated; making a second determination, by the SCD agent, that the SCD and the network device support the hitless repair; performing, by the SCD agent, a pre-hitless repair action set; and performing, by the SCD agent and after completing the pre-hitless repair action set, a post-hitless repair action set, including a hitless reset of the SCD.

Abstract: Techniques are described herein for concurrently evaluating graph processing tasks in a fair and efficient manner. In an embodiment, a request to execute a graph processing task is received. A first mapping associates each graph processing task of a plurality of graph processing tasks to a set of workload characteristics of a plurality of sets of workload characteristics. A second mapping associates each set of workload characteristics of the plurality of sets of workload characteristics to a set of execution parameters of a plurality of sets of execution parameters. Using the first mapping, a set of workload characteristics is determined based on the graph processing task. Using the second mapping, a set of execution parameters is determined based on the determined set of workload characteristics. The graph processing task is executed based on the determined set of execution parameters.

Abstract: Examples described herein include systems and methods for bare metal management of computing devices. Firmware of the computing device can be configured to contact a network location as part of an HTTP boot and download a boot agent. The boot agent can be prioritized to execute before a primary OS boot loader. The boot agent can download an OS configuration including a package that is inserted into the primary OS. The primary OS, as configured, can then boot. The boot agent can also attest to OS health and device compliance on subsequent boots. For example, the boot agent can cause the firmware to track how many boots have occurred since compliance verification. If a threshold number of boots occur without verification, the boot agent can initiate restoration. Alternatively, if a decommission flag is set, the boot agent can cause the computing device to boot into its original configuration.

Abstract: Embodiments of the present invention disclose a network slice selection method, user equipment (UE), and a network device. An example method includes: obtaining, by UE, slice list information of a current network from a network device; and after determining a target service request, determining, by the UE based on the target service request, a target slice from the slice list information of the current network, to connect a service corresponding to the target service request to the target slice.

Abstract: The disclosed technology is generally directed to device provisioning in an IoT environment. For example, such technology is usable in provisioning IoT devices to an IoT Hub. In one example of the technology, an identification message that includes information associated with identification of a first IoT device is received. The validity of the first IoT device is then verified. After the first IoT device is verified, based at least in part on the identification message, an IoT hub is selected from a plurality of IoT hubs. The first IoT device is then caused to be registered with the selected IoT hub.

Abstract: A method and system for updating a virtual machine that is utilized as a base virtual machine for one or more linked clone virtual machines. The method comprises deploying the base virtual machine on a host system, the base virtual machine comprising a base virtual disk which is attachable to the one or more linked clones and a base delta disk. The method further comprises deploying a software update to the base delta disk of the base virtual machine and once the software update is deployed to the base delta disk of the base virtual machine, shutting down the base virtual machine. The method further comprises updating the base virtual machine by merging the software update deployed on the base delta disk of the base virtual machine with the base virtual disk of the base virtual machine.

Abstract: A mobile communication device certification system is disclosed comprising a mobile communication device including a device client that detects and transmits device side events to a certification application. The system also comprises one or more servers comprising a network client and the certification application. The network client detects and transmits network side events associated with the mobile communication device to the certification application. The certification application receives and analyzes the device and network side events, corroborates at least one device side event based on at least one network side event, determines and stores mobile device events in a data store based on the analysis and corroboration, receives an unlock request after resale of the mobile communication device, accesses one or more of the mobile device events responsive to the unlock request, and sends an unlock command to the mobile communication device based on the accessed mobile device event(s).

Abstract: According to an example, pre-cognitive SIEM may include using trained classifiers to detect an anomaly in input events, and generating a predictive attack graph based on the detected anomaly in the input events. The predictive attack graph may provide an indication of different paths that can be taken from an asset that is related to the detected anomaly to compromise other selected assets in a network of the asset, and the other selected assets may be selected based on a ranking criterion and a complexity criterion. A rank list and a complexity list may be generated. The rank list, the complexity list, a depth of the predictive attack graph, and a weighted value may be used to generate a score that provides an indication of a number of assets that can be compromised and a difficulty of exploiting vulnerabilities related to services of the assets that can be compromised.

Abstract: A computer return apparatus includes a processor. The apparatus includes a memory connected to the processor. The apparatus includes a display. The apparatus includes a return screen that the processor automatically causes to appear during or after boot-up of the processor on the display, that displays information concerning an owner who owns the computer, concerning user information about who the user is who the computer is assigned to for use, and return information for returning the computer to the owner from data stored in the memory. A method for displaying information to assist with returning a computer to its owner.

Abstract: A multilayer architecture for supporting variable networks is discussed. The architecture includes an application layer in communication with a simulation and network management layer and a coupling layer. The coupling layer interfaces with physical connections within a network device and the remaining layers; and wherein the simulation and network management layer sets one or more network parameters within the application layer.

Abstract: Methods and systems for configuring nodes in a cloud computing network are described. One example method includes receiving, over a network, a configuration request from a particular node in the cloud computing network, the configuration request including node information for the particular node; verifying that the particular node is authorized for configuration based at least in part on the node information; in response to verifying that the particular node is authorized for configuration, identifying configuration actions to perform on the particular node based at least in part on the node information; and sending, over the network, a configuration command corresponding to one or more of the identified configuration actions to the particular node, wherein the particular node executes the configuration command upon receipt to perform the corresponding configuration actions.

Abstract: A container management system having a first cluster that includes a first service for generating an operation and a second cluster that includes a second service for generating an operation, the second cluster located remotely from the first cluster. A master proxy adjusts a request from the first cluster to access the second service from the second cluster, routes a transmission of the adjusted request to the second cluster and adjusts a response to the adjusted request from the second cluster to the first cluster. The first cluster uses the response to generate a cluster operation based on the first service and the second service.

Abstract: Various embodiments each include at least one of systems, methods, firmware, and software to automatically configure a scanner, such as a scanner coupled to point-of-sale or self-service terminal. Some embodiments include initializing a scanner that is in an un-configured state and requesting scanner configuration settings from at least one device via a network, such as another scanner. Some embodiments further include receiving scanner configuration settings in response to the request and implementing the scanner configuration settings on the scanner.

Abstract: The described embodiments transfer an activity from a source electronic device to a companion electronic device. The source electronic device receives activity information describing an activity performed in a first application at the source electronic device, determines an activity identifier for the activity information, and broadcasts an activity advertisement comprising the activity identifier. Upon receiving the activity advertisement, the companion electronic device determines whether a second application that is associated with the first application is available at the companion electronic device. If the second application is available, the companion electronic device requests extended activity data from the source electronic device. The source electronic device responds by sending extended activity data from the first application to the companion electronic device.

Abstract: An information handling system includes first and second data processing systems and a configuration management system. The configuration management system determines to change a first configuration setting for the first data processing system, modifies a first configuration profile for the first data processing system to include the changed first configuration setting, determines that the change to a first configuration setting necessitates the change to a second configuration setting for the second data processing system, modifies a second configuration profile for the second data processing system to include the changed second configuration setting, exports the modified second configuration profile to the second data processing system, and exports the modified first configuration profile to the first data processing system after exporting the modified second configuration profile to the second data processing system.

Abstract: A method and an information handling system (IHS) for authenticating boot path updates in an IHS. The method includes initializing, by an image loader of the IHS, a current boot path associated with a first image. The method also includes detecting, by a processor of the IHS, detecting an attempt to update the current boot path to utilize a second image that is different from the first image. The method further includes, in response to detecting the attempt to update the current boot path, initializing a pre-authentication process to authenticate the second image. The method further includes, in response to the pre-authentication process authenticating the second image, updating the current boot path to utilize the second image and enabling a subsequent boot of the IHS using the second image.

Abstract: Methods, systems and computer program products for remotely providing local server boot capabilities are provided. Aspects include receiving a command to boot a specified server of a plurality of servers by a rack level server boot device from remote user device. Aspects also include identifying a target emulated hard drive of a plurality of emulated hard drives of the rack level server boot device. The target emulated hard drive may be associated with a port of a plurality of ports of the rack level server that is connected to the specified server. Aspects also include selecting a specified OS boot image of one or more OS boot images stored by a memory of the rack level server boot device. Aspects further include causing the specified server to boot from the target emulated hard drive using the specified OS boot image.

Abstract: Systems and methods are included for causing a computing device to assemble and boot from a managed operating system. When the computing device is powered on, it can execute firmware that specifies a server to contact. The server can identify an operating system (OS) to boot, and the location of a pre-enrollment installer for assembling the OS image. The pre-enrollment installer can download base OS images in one or more pieces from multiple locations determined based on ownership information of the computing device. The multiple OS images can relate to enterprise management and company-specific applications and drivers. Once the pre-enrollment installer has combined the base OS images, the computing device reboots using the combined OS image.

Abstract: As disclosed herein a method, executed by a computer, for enabling a hybrid cloud environment includes receiving, on a cloud environment, a hybrid cloud application package comprising a deployable cloud package and a deployable on-premise package, and deploying the deployable cloud package in a container on the cloud environment, providing a cloud application. The method further includes establishing a secure bi-directional communication tunnel between the cloud environment and an on-premise environment, thereby masking network connection information, and sending, with the secure bi-directional messaging framework, the deployable on-premise package to an on-premise server in the on-premise environment. The method further includes sending a message, with the secure bi-directional messaging framework, requesting services from an on-premise application. A computer program product and a computer system corresponding to the above method are also disclosed herein.

Abstract: Technologies are described herein for accelerating the boot process of client computers by consolidating client-specific boot data in a data storage system. Boot statistics are collected for a number of client computers booting from virtual storage volumes provided by the data storage system. The boot statistics are analyzed to identify client-specific boot data stored on each of the virtual storage volumes, and the client-specific boot data is consolidated and copied into contiguous regions of a single, consolidated boot volume in the data storage system. Requests for read operations from the client computers for the client-specific boot data are then redirected to the consolidated boot volume, increasing boot performance for the client computers.

Abstract: A multi-homed edge device VxLAN data traffic forwarding system includes a first VTEP device that receives an Ethernet packet from a first edge device, encapsulates the Ethernet packet in a VxLAN packet, generates a source port value, and provides the source port value in a field in the VxLAN packet. The first VTEP device transmits multiple copies of the VxLAN packet to second VTEP devices that each determine whether the source port value in their respective copy of the VxLAN packet is included in a forwarding range for that second VTEP device that is different than forwarding range(s) for each of the other second VTEP device(s). If not, that second VTEP device prevents information in that copy of the VxLAN packet from being transmitted to the second edge device. If so, that second VTEP device transmits information in that copy of the VxLAN packet to the second edge device.

Abstract: Disclosed are techniques for ranking domain names for presentation to a user. The techniques include obtaining, over a computer network, domain name data including, for each of a plurality of training domain names, respective user information; generating, by at least one electronic processor, a model relating at least features of each of the plurality of training domain names to respective user features derived from the respective user information; obtaining novel user information for a novel user; obtaining a plurality of domain names; ranking the plurality of domain names, using the model and novel input data including novel user features derived from the novel user information, according to predicted domain name suitability for the novel user; and providing a ranked list of the plurality of domain names.

Abstract: The invention provides, in one aspect, an improved system for data access comprising a file server that is coupled to a client device or application executing thereon via one or more networks. The server comprises static storage that is organized in one or more directories, each containing, zero, one or more files. The server also comprises a file system operable, in cooperation with a file system on the client device, to provide authorized applications executing on the client device access to those directories and/or files. Fast file server (FFS) software or other functionality executing on or in connection with the server responds to requests received from the client by transferring requested data to the client device over multiple network pathways. That data can comprise, for example, directory trees, files (or portions thereof), and so forth.

Abstract: A method for classification of suspicious activities is provided. In the method, a first intrusion detection system comprising a normal operation mode and which is connected to a second intrusion detection system by a first communications connection is implemented. In response to detecting a malfunction of the first communications connection, the first intrusion detection system is switched from the normal operation mode to a limited operation mode for receiving first data from one or more honeypot systems and second data from the second intrusion detection system. A prediction model for representing malicious attacks is generated by execution of a predefined classification algorithm with respect to the received data, wherein the predefined classification algorithm further determine a model evaluation metric with respect to the prediction model. The prediction model is deployed to detect the malicious attacks if the model evaluation metric meets a predefined validation condition.

Abstract: A state management server applies configuration information to a set of virtual computer system instances in accordance with one or more limitations specified by an administrator. In an embodiment, the limitations include a velocity parameter that limits the number of virtual computer system instances to which the configuration may be applied concurrently. In an embodiment, the limitations include an error threshold that stops the application of the configuration if the number of configuration failures meets or exceeds the error threshold. In an embodiment, the set of virtual computer systems is identified by providing a list of the individual virtual computer system instances, or by specifying one or more tags that are associated with the virtual computer systems in the set. In an embodiment, the administrator is able to specify that an association be applied according to a predetermined schedule.

Abstract: System, device, and method of multi-path wireless communication. A method includes: constructing in an electronic device of a user, a control message indicating a user command intended to be performed by a Home Automation Device (HAD) of the user; wherein the constructing includes inserting into the control message a unique Message-Identifier. The method then transmits the control message, from the electronic device of the user to the HAD, concurrently via at least two different wireless communications channels which include at least: (i) a first wireless communication channel that includes passage of traffic through the Internet, and (ii) a second wireless communication channel in which no traffic passes through the Internet.

Abstract: A method is implemented by a network device in a network including a plurality of network devices. The method implements multicast forwarding configuration resulting in reduced state for the network by utilizing unicast tunneling between a root, replication points and leaves that implement each multicast distribution tree. The method selects a multicast group to determine forwarding configuration for the selected multicast group, prunes a shortest path tree for the selected multicast group to generate a source group tree, and determines whether the network device is a root or a replication node for the source group tree. The method further checks whether a downstream leaf or replicating node is adjacent to the network device, and where the selected branch does not have an adjacent replication node or leaf, identifies the next replicating node or leaf on the selected branch, and configures the network device to forward multicast group traffic using a unicast tunnel.

Abstract: A method includes enabling, by a processor, a user to create indication of configuration of a virtual subsystem. The processor enables the user to create, in the indication of configuration of the virtual subsystem, indication of a namespace associated with one of storage devices, indication of a controller, indication of a host, and indication of connectivity between a controller and a namespace or between a host and a namespace. The processor enables the user to select the indicated controller and the indicated namespace, select the indicated host and the indicated controller, and create, in the indication of configuration of virtual subsystem, indication of connectivity between the controller and the namespace and indication of connectivity between the host and the controller. The processor implements the configuration of the virtual subsystem in an appliance to cause the appliance to provide the host with storage access to the namespace via the controller.

Abstract: Systems and methods for managing Serial Attached Small Computer System Interface (SAS) traffic with storage monitoring are described. In some embodiments, an Information Handling System (IHS) may include an embedded controller (EC) and a memory coupled to the EC, the memory having program instructions stored thereon that, upon execution, cause the EC to: designate a first Baseband Management Controller (BMC) as active; designate a second BMC as passive; and receive, from the active BMC, monitoring data relating to one or more of a plurality of storage devices without receiving the monitoring data from the passive BMC.

Abstract: Described herein are systems, methods, and software to enhance the management of software defined networking configurations over multiple hosting environments. In one implementations, a sync service receives a software defined networking configuration from a software defined networking manager of a first hosting site. Once received, the sync service determines differencing data between the software defined networking configuration and a second software defined networking configuration received previously by the sync service from the first hosting site. The sync service further identifies a configuration update for a second software defined networking manager of a second hosting site based on the differencing data, and transfers the configuration update to the second software defined networking manager.

Abstract: Disclosed are various examples for facilitating enrollment of a client device into more than one management framework. A client device can be enrolled with a management service as a fully managed device. The client device can also be enrolled with the management service as a personal or bring-your-own-device (BYOD), which causes a workspace to be created on the device that is segregated from the rest of the client device. Both enrollments can be managed by a remotely executed management service.

Abstract: A setting support program related to monitoring of a system causes a computer to execute a process including (1) receiving an input of first system information including a first configuration element group of a first system, (2) referring to a storage unit that stores a second configuration element group of a second system and setting information related to monitoring of the second system for a plurality of the second systems to identify setting information related to the monitoring of the second system corresponding to the second configuration element group having predetermined similarity to the first configuration element group included in the first system information, and (3) outputting the identified setting information as setting information of the first system.

Abstract: Systems and methods are included for causing a computing device to assemble and boot from a managed operating system. When the computing device is powered on, it can execute firmware that specifies a server to contact. The server can identify a base operating system (OS) image to boot, and the location of a pre-enrollment installer for installing the base OS image. The pre-enrollment installer can download the base OS image in one or more pieces from multiple locations. This can include base OS images related to enterprise management and company-specific applications and drivers. Once the pre-enrollment OS has combined the base OS images, the computing device reboots using the combined image.

Abstract: A method to configure a localizable software solution, which includes receiving a search request to search a requested type of configuration data items, accessing a first configuration data item of the requested type, in response to the search request, scanning contents of the first configuration data item to identify a key within the first configuration data item, accessing, by resolving the key within the first configuration data item and based on the at least one user attribute, a second configuration data item of a second type, generating a custom configuration data item by replacing, within the first configuration data item, the key with the second configuration data item, and returning the custom configuration data item to a configuration engine. The configuration engine localizes the localizable software solution using the custom configuration data item.

Abstract: A method, Web server and computer system for converging a desktop application and a Web application. The method includes: in response to a request from a client user for using a target desktop application, starting a desktop application initialization process on the Web server and determining an appropriate corresponding hosting server for the user; preparing and provisioning desktop application environment on the corresponding hosting server and starting the target desktop application; transmitting the corresponding hosting server's address to the client to make desktop application interaction between the client and the corresponding hosting server; and in response to the completion of the desktop application interaction, stopping and exiting the target desktop application on the corresponding hosting server. The client user is provided with a unified Web console for accessing desktop applications and Web applications and Web files can be shared between the desktop applications and the Web applications.

Abstract: A firmware development tool generates platform-specific firmware images for a multitude of different computing platforms. A multi-platform firmware image creation tool receives the platform-specific firmware images and generates a multi-platform firmware image therefrom. A portion of the multi-platform firmware image includes firmware files that are common across all of the platform-specific firmware images. Other portions of the multi-platform firmware image include firmware files that are specific to each of the platform-specific firmware images. At boot time of a computer system utilizing the multi-platform firmware image, the platform that the computer system uses is detected. The firmware files that are common across the platform-specific firmware images are then loaded into memory. The firmware files that are specific to the detected platform are also loaded into memory.

Abstract: A method and an apparatus for managing a physical location of a network device. The method includes saving, in a first location table, received location information that is sent by a first network device, acquiring topology information of an entire network by communicating with a network controller, searching the topology information for a first top-of-rack switch that has a minimum network hop count to reach the first network device, adding the physical address of the first top-of-rack switch in the first location table to serve as a physical address of the first network device, and building an association between the physical address and the location information of the first network device. Therefore, a physical location of a network device can be conveniently and quickly managed, thereby greatly reducing a manual workload.

Abstract: There is provided an information processing apparatus including an acquisition control unit configured to acquire information on function extension from an external object, the information on the function extension including attribute information indicating a function of a device and connection information relating to a connection to the device, and a function control unit configured to extend a function of the information processing apparatus based on the acquired attribute information, connect to a device corresponding to the extended function based on the acquired connection information, and enable the extended function.

Abstract: Provided is an integrated platform that has an active server, a standby server and a storage device. The storage device has a plurality of storage ports, and a WWN is assigned to each of the plurality of storage ports. An LUID is assigned to each of a plurality of logical volumes provided by the storage device. The active and standby servers are connected, respectively, to storage ports in a one-to-one relationship. The active server has boot search information that associates the WWN of a storage port at a connection destination; the LUN of a boot logical volume, which is a logical volume accessed during booting; and the LUID of the boot logical volume with one another. When a failover is executed, the boot search information of the active server is copied to the standby server.

Abstract: A multi-tenant identity management (IDM) system enables IDM functions to be performed relative to various different customers' domains within a shared cloud computing environment and without replicating a separate IDM system for each separate domain. The IDM system can provide IDM functionality to service instances located within various different customers' domains while enforcing isolation between those domains. A cloud-wide identity store can contain identity information for multiple customers' domains, and a cloud-wide policy store can contain security policy information for multiple customers' domains. The multi-tenant IDM system can provide a delegation model in which a domain administrator can be appointed for each domain, and in which each domain administrator can delegate certain roles to other user identities belong to his domain. Service instance-specific administrators can be appointed by a domain administrator to administer to specific service instances within a domain.

Abstract: A method and apparatus for instantiating network slices using connectivity and computing resources, is provided. Information regarding connectivity and computing resources for supporting network slices is used to identify shared risk groups. Each shared risk group includes those resources expected to be disabled by a common failure event. A first set of functions, such as virtual network functions, belonging to a network slice, is instantiated on a first subset of the resources. The union of all shared risk groups which include at least one of the first subset of resources is disjoint from the union of all shared risk groups which include at least one of a second subset of resources. The second subset of resources is allocated for instantiating a second set of functions which are redundant with the first set of functions. As such, redundant network slices and/or functions thereof can be provided which are robust to failure.

Abstract: A computer includes a processor and multiple components directly or indirectly connected to the processor. Each component is coupled to a control device, and is configured to provide resources for one or more application programs running in the computer. The processor, when executing an application program, attaches a tag to an application request, and sends the tag-attached application request to a control device coupled with a component to which the tag-attached application request is directed. The control device receives the tag-attached application request, determines, based on the tag and a resource allocation policy, an amount of resources in the component and instructs the component to allocate the amount of resources and process the application request in accordance with the amount of resources allocated for the application request.

Abstract: A device and a method for virtual storage are provided. The device includes a physical processor, a hypervisor and a physical storage. The hypervisor is executed on the physical processor and configured to create at least one client virtual machine and a controller virtual machine. The physical storage is clustered with physical storage of at least another device via the controller virtual machine to form a storage cluster. The controller virtual machine is further configured to define a virtual storage pool in the storage cluster and create at least one virtual storage controller virtual machine to interface the at least one client virtual machine with the virtual storage pool so that the at least one client virtual machine accesses the virtual storage pool via the at least one virtual storage controller virtual machine and the controller virtual machine. The method is applied to the device to implement the operations.