Abstract: A method controls a modification of an adjustable device. A system establishes a circle of trust for a plurality of devices, where at least one of the plurality of devices is an adjustment control device for adjusting an adjustable device. Operations of the adjustment control device are controlled via a blockchain, where the blockchain must approve the adjustment control device before an adjustment of the adjustable device is performed by the adjustment control device. The system receives an approval from the blockchain for the adjustment control device to adjust the adjustable device, and the adjustment control device adjusts the adjustable device in response to receiving the approval from the blockchain.

Abstract: A system and method for dynamically creating distributed, self-adjusting and optimizing core network with machine learning is disclosed. The method includes receiving a request to access one or more services and establishing a secure real time communication session with one or more client devices and a set of service layers based on the received request. The method further includes determining one or more service parameters based on the received request and sending one or more handshake messages to each of the set of service layers. Further, the method includes determining one or more environmental parameters and determining best possible service layer capable of processing the received request by using a trained service based ML model. The method includes processing the request at the determined best possible service layer and terminating or transferring the secure real time communication session after the request is processed.

Abstract: Techniques for automating traffic optimizations for egress traffic of an application orchestration system that is being sent over a network to a remote service. In examples, the techniques may include receiving, at a controller of the network, an egress traffic definition associated with egress traffic of an application hosted on the application orchestration system, the egress traffic definition indicating that the egress traffic is to be sent to the remote service. Based at least in part on the egress traffic definition, the controller may determine a networking path through the network or outside of the network that is optimized for sending the egress traffic to the remote service. The controller may also cause the egress traffic to be sent to the remote service via the optimized networking path.

Abstract: A method, system and apparatus are disclosed. According to one or more embodiments, a detection node in communication with a network function virtualization, NFV, system operating a NFV stack that is logically separable into a plurality of levels including a first level and a second level is provided. The detection node includes processing circuitry configured to: translate an executed first level event sequence to at least one translated second level event sequence, and compare the at least one translated second level event sequence to an executed second level event sequence to at least in part detect inconsistencies between the at least one translated second level event sequence and the executed second level event sequence where the executed second level event sequence and the executed first level event sequence being part of a multi-level sequence flow.

Abstract: A safe system is able to execute remote maintenance reliably with respect to a process execution unit for executing a safety control in accordance with a safety program. This safety system includes: a process execution unit for executing a safety control in accordance with a safety program; a communication unit that is directly connected to the process execution unit and mediates external access to a safety program held in the process execution unit; and a support device that is connected via a network to the communication unit and, in accordance with a user operation, executes maintenance, including an addition or a change, with respect to the safety program. The support device and the communication unit identify each other by means of information that has been exchanged in advance, and exchange data required for maintenance.

Abstract: Provided are a remote control method and apparatus, an electronic device and a medium, which relate to the field of communications and in particular, to the fields of smart home, smart life, Internet of things and cloud service. The specific implementation is as follows: acquiring a remote control instruction from a first smart device, wherein the remote control instruction is generated according to a control operation on a second remote controller and transmitted to the first smart device through a second smart device, and the first smart device is connected to a first remote controller; and controlling a control object of the first remote controller according to the remote control instruction.

Abstract: In one embodiment, a system for managing a virtualization environment includes a set of host machines, each of which includes a hypervisor, virtual machines, and a virtual machine controller, one or more virtual disks comprising a plurality of storage devices, the one or more virtual disks being accessible by the virtual machine controllers, where the virtual machine controllers conduct I/O transactions with the virtual disks, and a deployment system configured to receive a request to deploy a virtualized file server on a plurality of host machines, where the request is associated with deployment parameters, select a deployment image for the host machines based on the deployment parameters, and provide the deployment image to each host machine via the virtual disk. The virtual machine controller located on the host machine stores at least a portion of the deployment image on a storage device associated with the host machine.

Abstract: A gas inspection management system includes: an inspection information database that stores inspection results and information on links to inspection images for objects of inspection; an access condition receiver that receives an input of an access request and an input of condition specification from a manager; a hardware processor that: selects part or all of the objects from the inspection information database, based on the access request, acquires information on the inspection results and the information on the links for the selected objects, and generates a display image including the information on the inspection results and the information on the links for the selected objects; and a display that displays the display image.

Abstract: An example system includes first servers deployed in a public cloud computing infrastructure and second servers deployed external to the public cloud computing infrastructure connected to the first servers via a layer 3 network. The first servers include first virtual routers to implement one or more virtual networks and first virtual execution elements. The first virtual execution elements execute a network controller that includes a plurality of microservices. A network device manages network routing for the second servers. The network controller is configured to exchange routing information with the network device. The network controller is configured to configure, based on the routing information, the first virtual routers to configure a virtual network of the one or more virtual networks for packetized communications among the first virtual execution elements executing on the first servers in the public cloud computing infrastructure and the second servers.

Abstract: Disclosed are various approaches for generating a management token corresponding to a client device. The management token can include one or more device policies that can be installed or enforce on a client device. This can allow a device that might not be enrolled as a managed device to be taken into a facility and comply with the security policies of the facility.

Abstract: An intersection determination is made regarding whether or not a traffic route included in map information intersects a boundary between areas on a basis of the traffic route and an area shape between areas that are adjacent in the map information, the intersection determination being made for each pair of adjacent areas. On a basis of a weight determined for the boundary in a case where the intersection determination is made that no intersection exists, a movement cost graph expressing a movement cost for each area that accounts for the weight is constructed. A corrected shortest distance between areas is calculated on a basis of the movement cost graph. A human mobility between areas is estimated for each timestep, the timestep being the length of a predetermined time interval, according to a predetermined function for estimating the human mobility between areas on a basis of the corrected shortest distance between areas and a population of each of the areas at different predetermined times.

Abstract: In some embodiments, there is provided triggering a chat bot session to make a change to a master data entity at a master data store; determining an identity of the master data entity and the master data store associated with the chat bot session by at least extracting context information from an application and/or a user interface; generating, based on the identity of the master data entity and the master data store, a change command to make the change to the master data entity; and sending a change request including the change command to make the change to the master data entity at the master data store. Related systems, methods, and articles of manufacture are also disclosed.

Abstract: The present disclosure relates to techniques for collection and processing of data over a network, and in particular to in providing generalized analysis for preserving privacy of data sources. In some embodiments, a system receives a request for analytical data made by a requester, wherein the request includes: information for identifying one or more data source devices to be queried for input data, a type of data processing to be performed on the input data for generating the analytical data, and a data type for the analytical data. In response to receiving the request, the system causes the one or more data source devices to be queried for the input data. The system causes a response that includes the analytical data to be sent to the requester. Other embodiments are described throughout the present disclosure.

Abstract: Some embodiments provide a system for implementing a logical network that includes a set of end machines, a first logical middlebox, and a second logical middlebox connected by a set of logical forwarding elements. The system includes a set of nodes. Each of several nodes includes (i) a virtual machine for implementing an end machine of the logical network, (ii) a managed switching element for implementing the set of logical forwarding elements of the logical network, and (iii) a middlebox element for implementing the first logical middlebox of the logical network. The system includes a physical middlebox appliance for implementing the second logical middlebox.

Abstract: The vehicular control device for displaying on the vehicular display includes: a physical processor that operates a plurality of operating systems in parallel on the virtualization software; a trigger detection unit for detecting the activation trigger; and an allocation unit. When detecting the activation trigger to activate the first operating system that executes the priority application and the second operating system as the other operating system, the allocation unit temporarily allocates the first operating system to the virtual processor cores with the allocation amount more that the predetermined allocation amount of the virtual processor cores after the activation is completed.

Abstract: Example methods and systems for health check as a service are described. One example may involve a computer system receiving a request to perform a health check for a network environment that includes a set of multiple flows. The computer system may select a subset that includes (a) a first flow between a first pair of endpoints and (b) a second flow between a second pair of endpoints. The health check may be initiated for the first flow and the second flow by generating and sending (a) a first instruction to cause injection of a first health check packet, and (b) a second instruction to cause injection of a second health check packet. The computer system may determine health status information associated with the subset based on (a) first observation information triggered by the first health check packet, and (b) second observation information triggered by the second health check packet.

Abstract: Techniques are disclosed for processing data packets and implementing policies in a software defined network (SDN) of a virtual computing environment. A plurality of servers are communicatively coupled to network interfaces of one of a skinny NIC or a smart NIC. The skinny NIC is configured to provide network interfaces for virtual machines hosted on a corresponding server. The smart NIC is configured to enable virtual machine communications within a virtual network in accordance with associated policies.

Abstract: Embodiments of the present invention relate to apparatuses, systems, methods and computer program products for security analysis and validation during construction and deployment of dynamic network components. Specifically, the system is typically structured for identifying and remediating defects in a first resource program code being built at an internal network layer of the first distributed network, in real-time, and validating the first resource program code at both a lower deployment environment and a higher deployment environment. In some aspects, the system, in response to the successful first validation of the first resource program code, stores the first resource program code at an artifactory system. In response to a successful second validation, the system then typically allows deployment of the first resource program code to the lower deployment environment.

Abstract: In one embodiment, a system for managing a virtualization environment includes host machines implementing a virtualization environment, a plurality of clusters of the host machines, a virtualized file server (VFS) comprising a plurality of file server virtual machines (FSVMs), and a VFS cluster manager (CM) configured to distribute storage items among the clusters and receive cluster storage statistics for one or more shares of the VFS. The CM is further configured to, in response to a request from a first FSVM to identify a storage location for a storage item, identify a cluster at which the storage item is to be located based on the cluster storage statistics, identify a second FSVM at which the storage item is to be located based on compute usage statistics of one or more FSVMs in the identified cluster, and send an address of the second FSVM to the first FSVM.

Abstract: In an approach, a processor obtains a configuration file of a distributed file system federation, the configuration file comprising a list of a plurality of subclusters within the distributed file system federation and migration trigger factors for the plurality of subclusters. A processor determines a list of one or more source subclusters and a list of to-be-migrated directories in the one or more source subclusters based on a scanning result of the plurality of subclusters and the migration trigger factors in the configuration file. A processor generates a migration plan to migrate the to-be-migrated directories from the one or more source subclusters to one or more target subclusters in the distributed file system federation.

Abstract: In one or more embodiments, one or more systems, one or more methods, and/or one or more processes may determine a temperature value within a chassis of an information handling system (IHS); may determine an ambient temperature value outside the chassis based at least on the temperature value within the chassis; may provide the ambient temperature value outside the chassis to a process executing on the IHS; may determine a threshold temperature value associated with at least one processor of the IHS based at least on the ambient temperature value outside the chassis and based at least on a target skin temperature value of the IHS; and may configure the at least one processor based at least on the threshold temperature value associated with the at least one processor.

Abstract: A system and a method are provided for facilitating an account protection check for the security of sets of credentials. The system and method allow a service provider to automatically lock a credential set of at least one user account if fraudulent activity is detected. A third-party server of a service provider requests a token from the system before the authentication process. User metadata is analyzed to detect potentially fraudulent activity from the user account. If the credential set is in a locked status or unlocked status, at least one remote server of the system respectively relays an invalidation token or a validation token to the third-party server. If the invalidation token is relayed to the third-party server, the service provider does not go through the authentication process. If the validation token is relayed to the third-party server, the service provider proceeds with the authentication process as standard procedure.

Abstract: According to one or more embodiments of the disclosure, a service identifies a packet sent by a first device in a network to a second device as being of a particular protocol. The service identifies a control command within the packet for the second device, based in part on the particular protocol identified for the packet. The service determines, based on the control command within the packet, a quality of service policy for the packet. The service causes the quality of service policy to be applied to the packet along a path in the network via which the packet is sent from the first device to the second device.

Abstract: The disclosure describes a mesh network including a first device and a second device, which acts as an exit device with respect to the first device such that communication between the first device and an external device, outside the mesh network, is communicated via the second device. The first device receives access information utilized by the second device to access a DNS server in a LAN that includes the second device, and transmits a meshnet query packet that includes a DNS query for domain information associated with the external device. The first device receives, based on transmitting the meshnet query packet, the domain information associated with the external device, and transmits a meshnet initiation packet that includes a network communication for communicating with the external device, the network communication including the domain information. Various other aspects are contemplated.

Abstract: Various example embodiments for supporting data center management are presented herein. Various example embodiments for supporting data center management may be configured to support fabric service management for a data center fabric including a set of servers and a fabric network configured to support communications of the servers. Various example embodiments for supporting fabric service management within a data center may be configured to support a capability for configuring a fabric network of the data center fabric of the data center based on merging and unmerging of underlay and overlay configurations. Various example embodiments for supporting fabric service management within a data center may be configured to support a capability for debugging a fabric network of the data center fabric of the data center based on use of probes.

Abstract: Various examples herein described are directed to methods, apparatuses, and computer program products for implementing unified data control policies in a distributed and product-oriented computing platform that includes a plurality of distributed data service clusters and a centralized policy information repository. In some examples, the distributed data service cluster is associated with a distributed policy decision object and one or more distributed policy enforcement objects. In some examples, the distributed policy decision object generates control policy evaluation responses in response to control policy evaluation requests. Additional example embodiments provide, such as but not limited to, example methods for generating policy information objects.

Abstract: Each of the processing devices stores an event vector, which is updated when certain events (e.g. memory errors, overtemperature events) occur on the device. Different elements of the vector correspond to different types of events. When an event of a given type occurs on one device, the update to the event vector on that device is propagated to other devices in the system. Those other devices, in response, update the corresponding element in their own event vector to indicate that an event of that given type has occurred in the system. In this way, events are aggregated between the different devices using the event vector. The event vector is considered to be a global event vector, since its elements indicate whether certain events have occurred across the entire system, and the vector is consistent across the system.

Abstract: A robotic program of an industrial robot is simulated. Inputs on a robotic program of a robot are received. The robotic program of the robot is represented with a neutral representation modeled with a neutral language. Specific code portions of the robotic program in the neutral representation are mapped with corresponding specific code portions of a native representation modeled with a native language of the at least one robot. The robot program in simulated in one of the neutral representation and the native representation. Corresponding code portions of the neutral representation and of the native representation of the robotic program are synchronized via the mapping.

Abstract: All-in-one network architecture management system develops, deploys, and maintains a network architecture, based on the specific needs of client inputs and client requirements. The network architecture management system comprises a user interface to receive initial requirements from clients, and monitors the deployed architecture to ensure that the configurations continue to meet the client's needs as throughput scales. The network architecture management system establishes a communication channel with a plurality of network services to maintain compliance, identify architecture gaps, and update architecture designs for scaling.

Abstract: A computing system can receive a request for the service from a client device of a user. In response to receiving the request, the system can generate a unique identifier for the request to facilitate a rendezvous between the user and a service provider.

Abstract: A system and a method are provided for facilitating an account protection check for the security of sets of credentials. The system and method enable the use of an access control mechanism to regulate the changes to the lock status of the sets of credentials. A third-party server of a service provider requests a token from the system before the authentication process. The access control mechanism also approves or denies the request before the authentication process. If the credential set is in a locked status or unlocked status, at least one remote server of the system respectively relays an invalidation token or a validation token to the third-party server. If the invalidation token is relayed to the third-party server, the service provider does not go through the authentication process. If the validation token is relayed to the third-party server, the service provider proceeds with the authentication process as standard procedure.

Abstract: A system and a method are provided for facilitating an account protection check through blockchain. The system and the method allow a service provider to utilize blockchain technology to validate the access request to various accounts. A public key and a private key are generated and recorded by a blockchain ledger that are used to access the accounts. A third-party server of a service provider requests a token from the system before the authentication process. If the credential set is in a locked status or unlocked status, at least one remote server of the system respectively relays an invalidation token or a validation token to the third-party server. If the invalidation token is relayed to the third-party server, the service provider does not go through the authentication process. If the validation token is relayed to the third-party server, the service provider proceeds with the authentication process as standard procedure.

Abstract: An apparatus comprising: at least one processor; and at least one memory including computer program code; the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus at least to: determine (902) that at least one state of a network slice is to be adjusted in a limited geographical area of at least one network resource; and adjust (904, 906, 908) the at least one state of the network slice in the limited geographical area of the at least one network resource.

Abstract: The present disclosure relates to systems, methods, and computer readable media for receiving and processing a request to deploy network functions across one or more deployment areas of a telecommunications network. Systems described herein process a request by applying a hierarchical configuration model including a hierarchy of configuration management instructions that can be applied to a request that complies with a format of the hierarchical configuration model. Features described herein facilitate deployment of unique configuration instructions across multiple network functions and across multiple deployment areas based on a single request and without further user interaction with respect to each of multiple network functions.

Abstract: Techniques for steering overlay network traffic along specific paths through an underlay network. The techniques may include determining a path through an underlay network that is optimized for sending a packet from a first node of an overlay network to a second node of the overlay network. The techniques may also include determining a destination address for sending the packet along the path from the first node to the second node, the destination address including a micro segment identifier (uSID) corresponding with an underlay node that is disposed along the path through the underlay network and trailing bits representing a portion of an address that corresponds with the second node. The techniques may also include causing the packet to be modified to include the destination address such that the packet is sent from the first node to the second node along the path.

Abstract: A system including an array of functional units connected via a two-dimensional mesh network is described. A first functional unit in the array of function units includes a memory device and a processing device, operatively coupled with the memory device, to perform operations including generating a node identifier identifying a second functional unit in the array of functional units, and transmitting, over the two-dimensional mesh network, the node identifier identifying the second functional unit in the array of functional units. The node identifier may include a mesh interface component and a port identifier, and one or more information elements selected from the group consisting of a payload, a target node identifier, a target type identifier, an information type identifier, a linear identifier, and a protocol identifier.

Abstract: A spatial hierarchical model provides spatial context to a plurality of building control assets disposed within a plurality of hierarchical levels of the spatial hierarchical model. A method includes identifying non-compliance events detected by building control assets disposed at and below a particular hierarchical level of the spatial hierarchical model. The non-compliance events detected by building control assets disposed at and below the particular hierarchical level of the spatial hierarchical model over a period of time are aggregated and a healthy building dashboard that includes a representation of the aggregated non-compliance events for each of at least some of the one or more of the healthy building criteria detected by building control assets disposed at and below the particular hierarchical level of the spatial hierarchical model is generated and is displayed on a display.

Abstract: A system includes a network of multiple network domains, each network domain includes a software defined network (SDN) controller. Each SDN controller includes a network interface circuitry, a processor and a memory. The network interface circuitry provides a communicative coupling with at least one domain of the multiple network domains. The memory includes instructions that when executed by the processor, performs a network update comprising adding links, subtracting links or reporting a status of links in at least one network domain upon receiving a network update request, and performs sending and receiving the network update request to a second SDN controller, where the network update request is part of real-time publish/subscribe protocol, the sending network update request includes a publish message having a specified topic and a set of QoS attributes, and the receiving a network update request includes subscribing to the specified topic and the set of QoS attributes.

Abstract: Techniques for operationalizing workloads at edge network nodes, while maintaining centralized intent and policy controls. The techniques may include storing, in a cloud-computing network, a workload image that includes a function capability. The techniques may also include receiving, at the cloud-computing network, a networking policy associated with an enterprise network. Based at least in part on the networking policy, a determination may be made at the cloud-computing network that the function capability is to be operationalized on an edge device of the enterprise network. The techniques may also include sending the workload image to the edge device to be installed on the edge device to operationalize the function capability. In some examples, the function capability may be a security function capability (e.g., proxy, firewall, etc.), a routing function capability (e.g., network address translation, load balancing, etc.), or any other function capability.

Abstract: A system and method for securing a computing environment using graphing of computing interfaces. A method includes traversing a network configuration graph with respect to a first component deployed in a computing environment. Traversing the network configuration graph results in a connections between components in the computing environment represented by nodes including at least one connection to a first node representing the first component. The nodes include at least one computing interface node and at least one other node. Each computing interface node represents a computing interface of computing interfaces deployed in the computing environment. The method also includes determining, based on the connections, a configuration of the first component with respect to service or consumption of at least one of the computing interfaces. The method also includes detecting a misconfiguration of the first component based on the determined configuration of the first component.

Abstract: Systems, methods, and techniques are provided for a fabric addressable memory. A memory access request is received from a host computing device attached via one edge port of one or more interconnect switches, the memory access request directed to a destination segment of a physical fabric memory block that is allocated in local physical memory of the host computing device. The edge port accesses a stored mapping between segments of the physical fabric memory block and one or more destination port identifiers that are each associated with a respective edge port of the fabric addressable memory. The memory access request is routed by the one edge port to a destination edge port based on the stored mapping.

Abstract: An automated service ticket generation system including an application configured to receive risk data associated with an asset and generate a service ticket based on the risk data. The application may receive risk data including an indication of whether the asset is out of compliance or will soon be out of compliance with a policy and/or regulation. Responsive to receiving the risk data, the application may access a remote computing device to generate the service ticket. The service ticket may include a mitigation task for an asset owner to perform in order to comply with the policy and/or regulation. The application may cause an indication of the service ticket to be presented on a display of a computing device. In some examples, the application may cause an indication of the service ticket to be sent to a computing device associated with the asset.

Abstract: An Internet of Things (IoT) system includes a plurality of terminal devices, a cloud device and a human machine interface (HMI) device. The cloud device is communicatively connected to the terminal devices. The human machine interface (HMI) device is communicatively connected to the terminal devices via a plurality of first communication channels, and communicatively connected to the cloud device via a first dedicated communication channel. The HMI device determines a subscription sequence according to priority information of a plurality of control commands, and schedules and dynamically subscribes to the first communication channels according to the subscription sequence. The HMI device respectively determines whether the terminal devices are adjacent to the HMI device, and transmits switch transmission mode request messages corresponding to the terminal devices adjacent to the HMI device to the cloud device via the first dedicated communication channel.

Abstract: This document describes techniques, apparatuses, and systems for batch size adjustment using latency-critical event recognition. The techniques described herein enable an electronic device (e.g., security camera) to determine the likelihood of an event of interest (e.g., latency-critical event) occurring in data (e.g., audio and/or video) captured by the electronic device. To make such a determination, the electronic device may switch upload modes to upload the data, using a different batch size to reduce latency, to another device for user access, based on the likelihood of an event of interest occurring in the data. In this way, the techniques, apparatuses, and systems for batch size adjustment using latency-critical event recognition provide an efficient way to provide all-day security monitoring.

Abstract: This application discloses a packet processing method and apparatus, and a computer storage medium, and belongs to the field of segment routing technologies. In the method, the network node receives a packet carrying an SRH, where the SRH includes one or more TLV fields and a TLV processing attribute, the TLV processing attribute indicates whether the network node needs to process the TLV fields included in the SRH, and the network node determines, based on the TLV processing attribute, processing of the TLV fields included in the SRH. In this way, any segment endpoint node on a segment routing network may determine the TLV processing attribute by using the SRH, so as to determine whether the TLV fields included in the SRH need to be processed.

Abstract: An information processing apparatus includes a processor configured to: transmit pre-process information to a processing apparatus that generates post-process information as a result of processing the pre-process information; and transmit identification information, used to acquire the post-process information, to an apparatus belonging to an apparatus group, satisfying a predetermined condition, among multiple apparatus groups of apparatuses that are enabled to acquire the post-process information and transfer the acquired post-process information to another apparatus.

Abstract: Methods and systems for processing data associated with a premises management system are disclosed. The data may comprise alarm event data and non-alarm event data. The alarm event data and non-alarm event data may be processed to determine whether to send a notification.

Abstract: A method of managing connections to one or more servers in a multi-tenancy computing environment is provided. At a multi-tenancy connection manager responsible for managing connections for multiple tenants of the multi-tenancy computing environment, a plurality of connection pools is configured, each for use by a respective one of the multiple tenants. A connection request is received from a tenant of the multiple tenants. The tenant is identified based on the connection request. Management rules for managing a connection pool that is associated with the identified tenant are obtained. It is determined whether the management rules permit execution of the connection request. In response to a positive determination, the connection request is executed. In response to a negative determination, the connection request is throttled, to preserve and maintain a quality of service provided.

Abstract: A method of providing information for display, from a portable electronic device, includes displaying information on a display of the portable electronic device, identifying a portion for redacting from the information displayed on the display of the portable electronic device, extracting the portion from the information to provide redacted information and an extracted portion, storing the redacted information, protecting and storing the extracted portion in association with a location identification in a file, and sending the redacted information and sending the file including extracted portions associated with the location identifiers.

Abstract: The techniques disclosed herein provision inter-DC WAN capacity based on network failure statistics and bandwidth demands of a cloud-hosted application. Network capacity is provisioned based on an assumption of runtime cooperation between the application and the network. For example, if the network detects that a link has failed, the application may cooperate with the network to pause a deferrable transfer, reserving bandwidth for non-deferrable transfers. With knowledge that deferrable transfers will be dynamically paused when a primary link fails, backup links may be provisioned with less capacity than the primary link. The ability to dynamically defer transfers also enables a greater degree of bandwidth smoothing, e.g. reducing peak demand by scheduling deferrable transfers for off-peak hours. This allows network links to be provisioned with less capacity than if all transfers were performed immediately.