Abstract: Provided in the present application are a method and apparatus for registering user information, which are used for solving the problem of multiple pieces of registration information covering one another due to NWDAFs registering registration information of a terminal device to a UDM. The method includes a network data analytic function (NWDAF) acquiring registration information of a terminal device; and the NWDAF sending a registration request to a unified data management (UDM) function, and the registration request includes the registration information and location information, which is used for identifying a storage path of the registration information in the UDM, and the location information includes an identifier of the NWDAF.

Abstract: A system and method for distributed caching, the system having at least one network-connected storage device, a content server, and a control server. The control server is configured to discover the at least one network-connected storage device, collect device information from the at least one network-connected storage device, where the device information comprises a device location, assign each of the at least one network-connected storage device to a device domain based on each device location, and provide the content server with the device information for the one or more network-connected storage.

Abstract: An environment construction system holds resource price information indicating a price of available resources in a second environment and communication distance information indicating a distance of a communication path between the second environment and a first environment when the available resources are used for the second environment, acquires system configuration information of an information system and environment arrangement information indicating a physical location where the first environment is disposed, analyzes the system configuration information to generate an analysis result indicating a configuration of the system, determines an environment arrangement policy indicating a requirement required for the second environment based on the analysis result, selects a resource to be used for the second environment based on the resource price information, the communication distance information, and the environment arrangement policy, converts the system configuration information to use the selected resour

Abstract: A computer-implemented method, according to one approach, includes: receiving observability data produced by a first portion of a distributed application. The observability data is evaluated and in response to determining that the observability data indicates the first portion of the distributed application is degraded, the amount of the observability data produced by the first portion of the distributed application is increased. Additionally, the amount of observability data produced by other portions of the distributed application that are correlated with the first portion of the distributed application is also increased.

Abstract: System, apparatus, and computer program products are disclosed for protected display of a requested user interface. In one aspect, a method includes receiving a protected mode display request to display the requested user interface in a protected mode, wherein the requested user interface comprises a plurality of data values; in response to the protected mode display request: (i) retrieving a data protection template for the protected mode display request, (ii) determining, based on the data protection template, one or more protected data values of the plurality of data values and one or more unprotected data values of the plurality of data values, (iii) for each protected data value, generating a masked representation, and (iv) generating a masked user interface that comprises: (a) each unprotected data value, and (b) each masked data value; and causing the masked user interface to be presented using a display device.

Abstract: Systems and methods for optimizing the management of resources in Kubernetes clusters are disclosed. An embodiment of the present invention is directed to central dynamic Helm charts, providing a flexible and efficient mechanism for deploying, managing, and updating applications within Kubernetes environments across an entity/platform. By centralizing Helm chart configurations and dynamically adjusting them based on real-time resource metadata, an embodiment of the present invention enhances scalability, reliability, and consistency in Kubernetes deployments. In addition, an embodiment of the present invention provides a Configuration Tool that automates creation of directory structures and YAML files required to perform industry standard deployment patterns with ease.

Abstract: A system and method is presented for sending a message between devices in a communication network. The system includes a first processor and a first memory in communication with the first processor. The first processor executes instructions stored in the first memory to divide the message into a plurality of segments according to a first procedure and assign a respective sequence number to each segment, and to construct a plurality of packets. Each packet comprises a payload and a header. The payload comprises at least one segment. The first processor further establishes a plurality of parallel socket connections, each to a second processor, and passes respective packets to respective parallel socket connections. The parallel socket connections are selected according to a second procedure, for transmission to the second processor until a determined number of segments has been successfully received and processed by the second processor.

Abstract: Systems, methods, and non-transitory, machine-readable media may facilitate adaptive resource capacity prediction and control using cloud infrastructures with a capacity prediction interface. Specifications of resource allocations for resources provided by a cloud infrastructure system may be collected. Observation data may be collected and may include resource metrics data. Prediction rules may be selected as a function of particular resource metrics. A subset of the resources may be identified. The selected prediction rules may be used to predict resource capacities for the subset of the resources as a function of the particular resource metrics and generate resource capacity predictions. Incidents may be identified based on the resource capacity predictions. A capacity prediction interface may be generated and may be configured to represent the resource capacity predictions and facilitate preemptive actions with respect to the incidents identified based on the resource capacity predictions.

Abstract: Embodiments of a device and method are disclosed. In an embodiment, a method for communications involves establishing a tunnel connection between a switch of a network and a gateway of the network and in response to a communications device connecting to a network port of the switch, conducting data traffic involving the communications device through the tunnel connection between the switch and the gateway.

Abstract: A network device may poll data for counters of the network device, and may store, for a first time interval, the data polled for the counters in a data structure. The network device may maintain the data polled for the counters in the data structure for a second time interval that is longer than the first time interval, and may receive, from a network management system (NMS), a request for data polled for the counters with the second time interval. The network device may determine, based on the request, whether the NMS is authorized to receive the data polled for the counter, and may provide, to the NMS, the data polled for the counters, with the second time interval, when on the NMS is authorized to receive the data polled for the counters.

Abstract: Aspects of the subject disclosure may include, for example, monitoring status of a network configured to provide end-to-end delivery of services to priority user equipment authorized according to a prioritized class of service and other user equipment not authorized for the prioritized class of service. The prioritized class of service extends a reserved network capacity for end-to-end delivery of a service via first domain including first network slices and a second domain including second network slices. A network interruption compromising the reserved capacity is determined based on the monitored status and integration of an alternate group of slices into one of the first network domain, the second network domain, or both to replace the compromised group of slices, is orchestrated. Integration of the alternate group of slices restores reserved network capacity according to the prioritized class of service. Other embodiments are disclosed.

Abstract: Technologies are disclosed for performing context-aware routing of traffic based on an application of a series of filters and/or selectors to determine an optimal group of interfaces for servicing traffic relating to a prefix. A traffic management control plane processes input data corresponding to aggregated telemetry data for a network by determining candidate groups of interfaces to service a network prefix and applies tunable filters and/or selectors to the candidate groups to determine a targeted group to use for servicing traffic corresponding to the prefix. The determined targeted group is mapped to the prefix in a mapping result, which is then provided to an actuator interface to control network devices to inject the new mapping into the network to control traffic according to the mapping.

Abstract: Provided is a work machine maintenance management system capable of predicting replacement timing of a component of a work machine early. The work machine maintenance management system of this disclosure includes a maintenance management DB server 110 that accumulates maintenance management information of a plurality of work machines and a maintenance management control device 120 that predicts replacement timing of each component of each of the work machines based on the maintenance management information. The maintenance management information includes an actual durable period from start of use to replacement each component of each work machine. The maintenance management control device 120 includes a replacement-factor determining section 121, a service life model creator 122, a failure model creator 123, and a replacement time predictor 126.

Abstract: An information retrieval method includes obtaining Mi (i+1)th-hop candidate documents based on a retrieval text query and Ki ith-hop candidate documents; obtaining a score of each candidate document in the Mi (i+1)th-hop candidate documents; obtaining, based on a score of a candidate document Pjy(i+1) and a probability of a path L, a probability of a path corresponding to the candidate document Pjy(i+1); obtaining K(i+1) (i+1)th-hop candidate documents based on probabilities of paths respectively corresponding to the Mi (i+1)th-hop candidate documents; and obtaining, based on the K(i+1) (i+1)th-hop candidate documents, a retrieval result corresponding to the query.

Abstract: A source node from the cluster of nodes, responsive to receiving the file sharing command from other applications on the same node (e.g., on a virtual machine in the cluster of nodes), copies the shared file to a source workspace directory and compress, and then copy the compressed file to the file sync database. The command comprises a configuration template with file retrieval information. A target node from the cluster of nodes, listens for commands from other nodes in the cluster of nodes. Responsive to receiving the file sharing command, the compressed file is copied from the file sync database to a target workspace directory and decompress, and then copy the shared file to node.

Abstract: A system generates vector representations of entries of traffic logs generated by a firewall. A first model learns contexts of values recorded in the logs during training, and the system extracts vector representations of the values from the trained model. For each log entry, vectors created for the corresponding values are combined to create a vector representing the entry. Cluster analysis of the vector representations can be performed to determine clusters of similar traffic and outliers indicative of potentially anomalous traffic. The system also generates a formal model representing firewall behavior which comprises formulas generated from the firewall rules. Proposed traffic scenarios not recorded in the logs can be evaluated based on the formulas to determine actions which the firewall would take in the scenarios. The combination of models which implement machine learning and formal techniques facilitates evaluation of both observed and hypothetical network traffic based on the firewall rules.

Abstract: A wireless communication method includes the following operations: adding a data message of a vendor of a first wireless communication device to a frame of a packet through a physical layer; transmitting, by the first wireless communication device, the packet to a second wireless communication device; analyzing, by the second wireless communication device, the packet to obtain the data message; determining, by the second wireless communication device, whether both of the vendor of the first wireless communication device and a vendor of the second wireless communication device are a predetermined vendor according to the data message; if both of the vendor of the first wireless communication device and the vendor of the second wireless communication device are the predetermined vendor, performing, by the second wireless communication device, a specific communication mode of the predetermined vendor to connect to the first wireless communication device.

Abstract: A computerized method is described for authenticating access to a subscription-based service to detect an attempted cyber-attack. More specifically, a request is received for a subscription for analysis of objects, which are supplied by a customer to a malware detection system. A customer identifier is assigned to the customer initiating the request for the subscription and a sensor associated with the customer is identified and an identifier of the sensor is associated with the customer identifier. Then, service policy level information pertaining to the subscription is associated with the identifier of the sensor, where the service policy level information includes a set of subscription attributes including object analysis restrictions.

Abstract: The embodiments of the present disclosure disclose a positioning method, a device, a server, a storage medium, and a terminal, involving with the field of communication. Firstly, the positioned terminal receives the positioning request sent by the positioning server; then the positioned terminal is triggered to open the positioning module based on the positioning request, and obtains the current position information through the positioning module; the positioned terminal sends the current position information to the positioning terminal; and finally, after the completion of the sending of the current position information, the positioned terminal turns off the positioning module.

Abstract: Data is received that comprises or characterizes an executable and dynamic linked library (DLL). Features are then extracted from the executable and DLL. The extracted features are input into at least one machine learning model to generate a suspiciousness score. The machine learning model can be trained to determine whether the executable file comprises ransomware. An execution chain of trust score for the executable and DLL can later be determined based on the extracted features and the suspiciousness score. This execution chain of trust score for the executable and DLL characterizes one or more associated parent processes. This suspiciousness score and the execution chain of trust score can be used to determine whether or not to initiate one or more ransomware countermeasures. Related apparatus, systems, techniques and articles are also described.

Abstract: Techniques are provided for implementing omnichannel messaging. A set of application programming interfaces are utilized to create a set of channels connected to services of a customer platform. A channel is defined to specify how the channel is to interact with a service of the customer platform. Flows are formatted and defined for sending and receiving messages across the set of channels based upon native messaging experiences provided by the services of the customer platform. Flows are formatted and defined for viewing and interacting with the messages based upon a set of contexts for viewing and interacting with the messages through the services. The flows are executed for processing messages.

Abstract: Embodiments described herein are generally directed to a containerized application software deployment architecture. According to an example, a system includes multiple hosts that are part of aa stretch cluster spanning multiple data centers. Each of the hosts include a processing resource, a memory, and a storage device. Each host of a first subset of the multiple hosts runs multiple containerized instances of a component of a Security Information and Event Management (SIEM) application within respective containers. At least one host of the multiple hosts is separate from the first subset and is dedicated to running at least one containerized ingress gateway application operable to load balance requests directed to the SIEM application among the multiple containerized instances running on the first subset of hosts.

Abstract: Methods and systems are presented for providing a container orchestration framework for facilitating development and deployment of software applications across different operating environments within an enterprise system. Upon receiving a service request for processing a set of data is received, the container orchestration framework determines one or more machines that store the set of data. Instead of processing the set of data remotely, the container orchestration framework deploys a container that encapsulates an application on the one or more machines. Each application instance running on the one or more machines are executed to process a corresponding subset of data stored on the machine locally. The container orchestration framework obtains the output data from executing the applications on each of the one or more machines, and present the output data as a response to the service request.

Abstract: A multi-tenant authentication system facilitates packaging and installing of integrations for authentication services of system tenants. The integrations include cloud resources of one or more cloud services. In order to package an integration, the multi-tenant authentication system retrieves resource manifests for cloud resources from corresponding cloud services. The multi-tenant authentication system generates the resource manifests to describe the cloud resource and any dependencies of the cloud resource, and also generates a package manifest including instructions for using the resource manifests to install the corresponding integration. The multi-tenant authentication system further facilitates installation of integration packages for tenants of the multi-tenant authentication system. The multi-tenant authentication system communicates with cloud services associated with resource manifests to install corresponding cloud resources to consistently replicate integrations for different tenants.

Abstract: The present disclosure relates to a framework that provides execution of serverless functions in a cloud environment based on occurrence of events/notifications from services in an entirely different cloud environment. A target agent obtains a notification from a source agent, where the target agent is deployed in a target cloud environment and the source agent is deployed in a source cloud environment that is different than the target cloud environment. The target agent determines a function that is to be invoked based on the notification. Upon successfully verifying whether the target agent is permitted to invoke the function that is deployed in a target customer tenancy of the target cloud environment, the target agent invokes the function in the target customer tenancy of the target cloud environment.

Abstract: The disclosed method and system increase routing efficiency by identifying a set of candidate Autonomous Systems (ASes) able to reduce average AS distances towards a set of target ASes. Starting from a list of Routing Information Base (RIB) snapshots and a set of target ASes, candidate ASes are ranked based on the gain they would provide in terms of AS distance if they were connected to the network administrator AS. A set of starting ASes may represent the ASes to which the administrator is already connected, and a set of forbidden ASes may represent the ASes to which the administrator does not want to connect. An exemplary web-based interface may show gains of candidate ASes, allowing the administrator to better understand how much an average AS distance toward the set of target ASes would improve.

Abstract: Operations of a method include receiving a configuration request requesting configuration management of a base configuration package that describes infrastructure of an application. The operations include determining, for the base configuration package, a plurality of package functions. Each package function of the plurality of package functions extends functionality of the base configuration package. The operations include determining, for the base configuration package and the plurality of package functions, a change-proposal function. The change-proposal function proposes one or more of the plurality of package functions to extend the functionality of the base configuration package. The operations include transmitting, to a user device, the change-proposal function and receiving, from the user device, approval of the change-proposal function.

Abstract: A method of supporting Packet Flow Descriptor, PFD, management in a Service Based Architecture, SBA, based telecommunication network, wherein said telecommunication network comprises an Application Function, AF, that is arranged for implementing an Packet Flow Descriptor, PFD, management service allowing request and response message from and to a Network Exposure Function, NEF, comprised by said telecommunication network, said method comprises the steps of receiving, by said AF, from said NEF, a request message for requesting a PFD, wherein said request message comprises an application identification for identifying an application transmitting, by said AF, to said NEF, a response message comprising said application identification and said requested PFD. A complementary method and corresponding network functions and a computer program product are also presented herein.

Abstract: Drift is automatically detected in configuration of services running in a management appliance of a software-defined data center. A method of automatically detecting drift includes: in response to a notification of a change in a configuration of a first service enabled for proactive drift detection, transmitting a first request to compute drift in the configuration of the first service to a plug-in of the first service, the first request including the change in the configuration of the first service; periodically, at designated time intervals, transmitting a second request to compute drift in the configuration of a second service enabled for passive drift detection, to the plug-in of the second service, the second request including a current state of the configuration of the second service; and notifying a desired state management service of the computed drift in the configuration of the first and second services.

Abstract: According to disclosed embodiments, as discussed below, a cell broadcasting framework is provided including receiving a request from a Network Function (NF) consumer by a service communication proxy (SCP) on a network, the request including a set of parameters, identifying a plurality of target NF producers corresponding to the set of parameters, transmitting the request to the plurality of target NF producers, receiving a plurality of successful request responses corresponding to some or all of the plurality of target NF producers, transmitting one of the plurality of successful request response to the NF consumer, and discarding all other successful request responses.

Abstract: A multi-cloud service system establishes tunnels and network overlays across multiple CSPs while meeting a criterion for a latency threshold. The system conducts a latency benchmarking evaluation across each cloud region for multiple CSPs and based on the latency bench marking evaluation results, the system may identify a group of cloud regions that satisfy a criterion such as predetermined maximum latency threshold or geographical restriction. The system may provision the group of cloud regions by provisioning a tunnel between nodes of the multiple CSPs. The system further establishes an overlay network on top of the tunnel by encapsulating packets using encapsulation end point such as VTEP (VXLAN tunnel end point) over VXLAN (Virtual Extension Local Area Network), which may help to ensure reliable transmission of packets from pod to pod. The system may inject user data into each node to initiate operations across the provisioned nodes using injected user data.

Abstract: A method and system according to embodiments enable generalized program to program interoperability. The method and system employ an automatic or substantially automatic transform adapter for using a given exchange standard for two-way communication with a program. In order for the adapter to employ the exchange standard, a discovery manager may learn the program's data communications structure and/or format, and may learn data meaning information from the program. An adapter creator may derive a transform which converts the program's data communications structure and data meaning into the exchange standard. The transform may be used by the adapter to enable two-way communication with any adapter and/or program similarly employing the given exchange standard to achieve interoperability.

Abstract: A method and device for processing a network service instantiation request received by an orchestration entity using a virtualized network function service. A descriptor of the network service includes at least one reference to an object to be deployed in order to instantiate the network service. When the descriptor of the object is not available at the orchestration entity, the orchestration entity obtains information from the network service descriptor that can be used to identify at least one target entity configured to instantiate the object on instruction from the orchestration entity or to transmit the descriptor of the object to the orchestration entity, and transmits, to one of the at least one target entities, a request to instantiate the object or a request to recover a file comprising the descriptor of the object.

Abstract: A system and method for evaluating definitions from a markup language document for agentless host configuration of an image in a virtualized computing environment generates an instruction to deploy a virtual instance based on a base image, the virtual instance including a disk. The method further includes generating an inspectable disk based on the disk of the virtual instance; receiving a markup language document, the document including a plurality of definitions, each including a data element; inspecting the inspectable disk for a cybersecurity object corresponding to a data element of a first definition of the plurality of definitions; evaluating the first definition based on the cybersecurity object to generate an evaluated first definition result, in response to determining that the definition is evaluable; generating an output based on the evaluated first definition result; and generating the output based on a notification, in response to determining that the definition is unevaluable.

Abstract: A computer-implemented method discovers a configuration of a network having a plurality of heterogenous devices and a device hierarchy The method includes discovering, using a link layer protocol and a first set of network configuration data including at least a first firmware information, a first device identity information, and a first device configuration information. Discovering the first set of network configuration data includes the sequential steps of: identifying an identity of a home device by a behavior of the home device in response to SSH commands and/or a packet-layer specific behavior of the home device; gathering information about the home device using a set of device-specific link layer protocol commands using a translation library that translates generic commands to the device-specific commands; identifying a neighboring device of the home device by polling active network connections; and; repeating the steps treating the neighboring device as the home device.

Abstract: Solutions for discovering and onboarding edge devices at scale include: receiving, by a device aggregator, edge device state information including state information for a first edge device; based on at least the state information for the first edge device, configuring the first edge device to perform as a software-defined wide area network (SD-WAN) node; based on at least the edge device state information, determining a first device profile for the first edge device; and transmitting the first device profile to a workload manager. In some examples, the edge device state information includes state information for a second edge device; the second edge device is configured to perform as an SD-WAN node; and a second device profile is determined for the second edge device and transmitted to the workload manager. The workload manager allocates an SD-WAN workload among the first edge device and the second edge device.

Abstract: Systems, methods, and computer program products are provided for disparate quantum computing (QC) detection. An example system includes QC detection data generation circuitry configured to generate a set of QC detection data. The example system further includes cryptographic circuitry configured to distort the set of QC detection data via a first PQC cryptographic technique, generate a pair of asymmetric cryptographic keys comprising a public cryptographic key and a private cryptographic key via a second PQC cryptographic technique, generate encrypted QC detection data from the distorted set of QC detection data based on the pair of asymmetric cryptographic keys, and destroy the private cryptographic key. The example system further includes data monitoring circuitry configured to monitor a set of data environments for electronic information related to the encrypted QC detection data.

Abstract: Systems and methods are disclosed herein for a provisioning service, such as a broker provisioner service (BPS), for provisioning a device (e.g., such as a control device and/or a mobile device) to one or more remote servers. The device may send a connection request message to the BPS to be provisioned with the remote servers (e.g., one or more services offered by the remote servers). The BPS may determine one or more services and/or brokers associated with the corresponding remote servers with which the device may be provisioned, e.g., based on provisioning rules. The BPS may apply the provisioning rules to determine the appropriate services and/or brokers and the corresponding remote servers with which the device may be provisioned. The BPS may send a provision message to the device. The device may establish communications with the provisioned services and/or brokers and/or the corresponding remote servers.

Abstract: A listing of each of the plurality of appliances is used, with reference to a command and/or protoctol database, to configure a software agent to exchange communications, via a one or more communication channels, with each of the plurality of appliances. An action triggering state of at least one of the plurality of appliances is associated with an action. The action is performed when it is determined that a current state of the at least one of the plurality of appliances corresponds to the action triggering state.

Abstract: A routing method, a routing device and a computer-readable storage medium are disclosed. The routing method includes: allocating, to each of network slices corresponding to different algorithm types, a segment identifier corresponding to a respective algorithm type, and flooding the segment identifier through an IGP; configuring, for each network slice, a QoS policy corresponding to a respective algorithm type; and, forwarding a packet based on the segment identifier and the QoS policy.

Abstract: An example method includes receiving, by an SD-WAN system, WAN link characterization data for a plurality of WAN links of the SD-WAN system over a time period; and for each site of a plurality of sites of the SD-WAN system, generating, by the SD-WAN system, a local policy for the site, wherein generating the local policy is based on a machine learning model trained with the WAN link characterization data for the plurality of WAN links, and providing the local policy to an SD-WAN edge device of the site.

Abstract: A system and method for evaluating definitions from a markup language document for agentless host configuration includes generating an inspectable disk based on a disk of a host, the host deployed in a virtualized computing environment. The system is configured to: receive a markup language document, the markup language document including a plurality of definitions, each definition including a data element; inspect the inspectable disk for a cybersecurity object corresponding to a first data element of a first definition of the plurality of definitions; evaluate the first definition further based on the cybersecurity object to generate an evaluated first definition result, in response to determining that the definition is evaluable; generate an output based on the evaluated first definition result; and generate the output based on a predetermined notification, in response to determining that the definition is unevaluable.

Abstract: This disclosure describes techniques to operate a control plane in a network fabric. The techniques include determining a stateless rule corresponding to communication between a first segment of the network fabric and a second segment of the network fabric. The techniques further include configuring the control plane to enforce the stateless rule.

Abstract: Methods and systems for distributing messages to subscribers are included. When a processor operating as a virtual space platform receives a message, the processor will analyze the message and determine, based on one or more elements of the message: a virtual space; a channel within the virtual space to which the message is to be assigned; and a quality of service for delivery of the message. The processor will assign the message to the channel. The processor will then transmit the message to one or more subscribers to the channel according to the quality of service.

Abstract: A transceiver configured for communicating in a wireless communication network being operated so as to schedule communication in a communication channel being organized in a plurality of resources; is configured for performing long-term sensing an utilization of the channel by decoding a data traffic; for estimating a usability of resources of the channel for an own transmission based on the decoding; and for scheduling the own transmission based on the usability of the resources.

Abstract: Threats can be determined from anomalous events based on artificial intelligence (AI) models. For example, a computer system stores, based on an output of a first AI model, first information indicating that a first event cluster of the first event clusters is associated with a threat classification and that a second event cluster of the first event clusters is associated with a non-threat classification. The computer system receives a first dataset representing first events and generate a first input to the first AI model based on the first dataset. The computer system determines, based on the first input to the first AI model, second event clusters and that a third event cluster of the second event clusters has no correspondence in the first event clusters and is associated with an unknown classification. The computer system generates second information indicating that the third event cluster is associated with the unknown classification.

Abstract: In one aspect, the invention comprises a system and method for control of a transaction state system utilizing a distributed ledger. First, the system and method includes an application plane layer adapted to receive instructions regarding operation of the transaction state system. Preferably, the application plane layer is coupled to the application plane layer interface. Second, a control plane layer is provided, the control plane layer including an adaptive control unit, such as a cognitive computing unit, artificial intelligence unit or machine-learning unit. Third, a data plane layer includes an input interface to receive data input from one or more data sources and to provide output coupled to a decentralized distributed ledger, the data plane layer is coupled to the control plane layer. Optionally, the system and method serve to implement a smart contract on a decentralized distributed ledger.

Abstract: A fabric control protocol is described for use within a data center in which a switch fabric provides full mesh interconnectivity such that any of the servers may communicate packet data for a given packet flow to any other of the servers using any of a number of parallel data paths within the data center switch fabric. The fabric control protocol enables spraying of individual packets for a given packet flow across some or all of the multiple parallel data paths in the data center switch fabric and, optionally, reordering of the packets for delivery to the destination. The fabric control protocol may provide end-to-end bandwidth scaling and flow fairness within a single tunnel based on endpoint-controlled requests and grants for flows. In some examples, the fabric control protocol packet structure is carried over an underlying protocol, such as the User Datagram Protocol (UDP).

Abstract: An illustrative method includes detecting a request to perform a cluster-wide snapshot of a cluster comprising one or more nodes on which one or more containerized applications are deployed, the snapshot corresponding to a point in time; preparing, based on the request, objects within the cluster for the snapshot; and generating, in response to the preparing, the cluster-wide snapshot of the cluster.

Abstract: A computer implemented method for determining the identity of an Over-the Top (OTT) application or service being accessed over the Internet from a HTTP, HTTPS or QUIC connection request received in a network monitoring device. Determine if one or more entries are present in the received connection request have an IP address that matches a known server IP address. A determination is then made as to whether if the received connection request is one of a HTTP, HTTPS or QUIC connection request, and if this cannot be determined than determine if a subject field in the received connection request is available. And determine if a candidate domain name is available from IP cache created from one or more of the above steps if a subject field is not available in the received connection request.