Abstract: A system includes one or more databases configured to store at least one configuration rule and one or more processors in communication with the databases. The processors may be configured to compare a product parameter to configuration rules to determine a drift item based on a current value of the product parameter being different than acceptable values defined by a test specified by the configuration rule, the test comprising one of a plurality of test types. The processors may be further configured to store, based on a determination that the drift item is not in a drift database of the databases, the drift item in a database, receive a record of one or more actions performed to resolve the drift item, and in response to receipt of the record, modify a status of the drift item from unresolved to resolved in the database.

Abstract: Techniques for monitoring operating statuses of an application and its dependencies are provided. A monitoring application may collect and report the operating status of the monitored application and each dependency. Through use of existing monitoring interfaces, the monitoring application can collect operating status without requiring modification of the underlying monitored application or dependencies. The monitoring application may determine a problem service that is a root cause of an unhealthy state of the monitored application. Dependency analyzer and discovery crawler techniques may automatically configure and update the monitoring application. Machine learning techniques may be used to determine patterns of performance based on system state information associated with performance events and provide health reports relative to a baseline status of the monitored application. Also provided are techniques for testing a response of the monitored application through modifications to API calls.

Abstract: A system comprises premises equipment including premises devices located at a premises. The system includes a partner device located at the premises and configured to use a partner protocol different from a protocol of the premises equipment. The system includes a system server configured to interact with the premises devices. The system server is configured to interact with the partner device via a partner proxy corresponding to the partner device. The system includes automation rules coupled to the system server. The automation rules include actions and triggers for controlling interactions between at least one of the partner device and the premises devices. The system includes a user interface coupled to the system server and configured to interact with the premises devices and the partner device.

Abstract: A system and a method are provided for facilitating the security of sets of credentials. The system and method allow a user to lock or unlock a credential set of at least one user account. The user attempts to access the user account as standard procedure. Before a service provider goes through an authentication process, a third-party server of a service provider requests a token from the system. Based on if the credential set is in a locked status or unlocked status, at least one remote server of the system respectively relays an invalidation token or a validation token to the third-party server. If the invalidation token is relayed to the third-party server, the service provider does not go through the authentication process. If the validation token is relayed to the third-party server, the service provider proceeds with the authentication process as standard procedure.

Abstract: In one particular example, a data communications system addresses changes in server load and/or connection latency in connection with data communication services provided through DNS master and slave servers. The system provides dynamic information routing, via a set of DNS master servers being in a multi-master configuration and including a first master DNS server and a second master DNS server, and consistency of DNS records is established between the master servers. Subsequently, the first DNS master server enters into an isolation mode in which updates are not communicated via the network. A set of isolation rules, which indicate how DNS records are to be updated in a communications network, are accessed and used in response to the network connections becoming reliable and the first master server updates the DNS records according to the rules, thereby establishing consistency between the first and the second DNS master servers.

Abstract: A network device may include a processor. The processor is configured to: receive a network address of a load balancer device from a management device; send a test request to the load balancer device based on the received network address; obtain a network address of a data collector device from the load balancer device; and perform a test with the data collector device. The data collector device is configured to: obtain a result of the test; and send the result to a data lake.

Abstract: A method and system for monitoring a rail vehicle are provided. The method includes: a local device acquires current operating data and historical operating data of a rail vehicle from a controller of the rail vehicle, herein the local device, which is connected with the controller, is a portable testing device; the local device obtains fault information according to the current operating data and the historical operating data, herein the fault information includes at least one of a fault code and a fault description; the local device obtains a maintenance plan corresponding to the fault information, herein the maintenance plan is obtained through a remote device or a server side; and the local device maintains the rail vehicle according to the maintenance plan. The disclosure solves a technical problem in the traditional art that a troubleshooting process of a rail vehicle is difficult, and when the rail vehicle has a fault, the fault cannot be solved timely.

Abstract: According to certain embodiments, a provisioning manager comprises an interface and processing circuitry. The interface is configured to obtain provisioning data from a provisioning database. The processing circuitry is configured to prepare one or more configuration files based on the provisioning data and provide the one or more configuration files to the one or more service instances using file distribution technology. The one or more configuration files indicate how to provision one or more service instances used in sending or receiving electronic messages.

Abstract: An architecture to enable verification, ranking, and identification of respective edge service properties and associated service level agreement (SLA) properties, such as in an edge cloud or other edge computing environment, is disclosed. In an example, management and use of service information for an edge service includes: providing SLA information for an edge service to an operational device, for accessing an edge service hosted in an edge computing environment, with the SLA information providing reputation information for computing functions of the edge service according to an identified SLA; receiving a service request for use of the computing functions of the edge service, under the identified SLA; requesting, from the edge service, performance of the computing functions of the edge service according to the service request; and tracking the performance of the computing functions of the edge service according to the service request and compliance with the identified SLA.

Abstract: A method for implementing user defined policies in a communication network. In one aspect, a policy function (e.g., an online charging system (OCS)) receives a policy information request having a subscription identifier, SID, identifying a subscription where a set of two or more policies are linked to the SID, and one of the policies included in the set of policies is set as an active policy for the subscription, and where each policy is associated with a different user identifier, UID. The policy function determines the policy that is set as the active policy for the subscription identified by the SID included in the policy information request. Using the determined UID, the policy function obtains and transmits the active policy.

Abstract: Methods, systems, and devices for wireless communications are described. A set of user equipments (UEs) may communicate with each other on communication links using data resources from a pool of shared resources. The UEs may be configured to multiplex control resources with data resources of a shared resource pool. In some cases, a UE may communicate, in control resources, control signaling to reserve data resources of a shared resource pool. After transmitting the request, the UE may communicate data in one or more data resources. The UE may communicate the data using transmission components while concurrently processing control signaling using other components.

Abstract: Methods and systems for detecting and responding to anomalous nodes in a network include inferring temporal factors, using a computer-implemented neural network, that represent changes in a network graph across time steps, with a temporal factor for each time step depending on a temporal factor for a previous time step. An invariant factor is inferred that represents information about the network graph that does not change across the time steps. The temporal factors and the invariant factor are combined into a combined temporal-invariant representation. It is determined that an unlabeled node is anomalous, based on the combined temporal-invariant representation. A security action is performed responsive to the determination that unlabeled node is anomalous.

Abstract: Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (1) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane. For instance, in some embodiments, each forwarding plane connects to a machine or service node through a port that receives data messages from, or supplies data messages to, the machine or service node.

Abstract: A third party item listing management system useable for validation of third party items to be included on a retailer website is disclosed. The third party item listing management system includes an application programming interface (API) accessible by a plurality of third parties and configured to receive item data. An item management process receives the item data and calls an item validation pipeline which includes a plurality of item validation stages including an item legalization stage. In the item legalization stage, the item data and the identity of the third party are validated against a plurality of item listing rules to determine whether the one or more items are allowed to be offered via the retailer website by the third party. The item listing rules can include a rule preventing the third party from listing an item included in a core item collection offered by the retailer via the retailer website.

Abstract: Some examples of the present disclosure relate to validating endpoints in a service mesh of a distributed computing environment. In one example, a processor can receive configuration settings applied to an endpoint in a data plane of a service mesh in a distributed computing environment. The processor can receive configuration data associated with a configuration of hardware components and software components in the distributed computing environment. The processor can determine a discrepancy between the configuration settings and the configuration data. The processor can then output the discrepancy for use in resolving an operational error relating to the service mesh.

Abstract: An example network device determines to assign a number of global Internet protocol (IP) addresses to respective network interfaces, determines a subnetwork for the network interfaces, determines a prefix corresponding to the subnetwork, determines a first global IP address having the prefix, determines a range value that is equal to or greater than the number of global IP addresses, generates a message according to Duplicate Address Detection Protocol (DAD) including data indicating that the message includes a range of addresses, the data further indicating the first global IP address and the range value, and sends the message according to DAD to one or more host network devices to determine whether any global IP address in a range starting with the first global IP address and through the range value is in use by the one or more host network devices.

Abstract: A method of generating generic protocol handlers includes receiving a user request in a middleware, generating a request payload by analyzing the request in a protocol handler of the middleware, transforming the request payload into a set of canonical types, transmitting the set of canonical types to a path module, receiving a response payload, transforming the response payload in a second protocol handler of the middleware, and transmitting the response to the user.

Abstract: The present invention relates to a method for incident management of home automation equipment comprising at least one home automation device (D) and at least one central control unit (U), the method being implemented by a management unit (Sv) and comprising the following steps: a step (EDSv1) of receiving a diagnosis request concerning at least one central control unit (U) belonging to the home automation equipment or at least one home automation device belonging to the home automation equipment (St); a step (EDS3) of sending at least one diagnosis request message to the at least one central control unit (U) concerned by the diagnosis request or to the at least one central control unit (U) to which the at least one home automation device concerned by the diagnosis request is attached; a step (EDSv8) of receiving a diagnosis result coming from a central control unit (U); a step (EDSv9) of providing a diagnosis report to the maintenance user (USAV), comprising: information concerning the communication between

Abstract: A spatial hierarchical model provides spatial context to a plurality of building control assets disposed within a plurality of hierarchical levels of the spatial hierarchical model. A method includes identifying non-compliance events detected by building control assets disposed at and below a particular hierarchical level of the spatial hierarchical model. The non-compliance events detected by building control assets disposed at and below the particular hierarchical level of the spatial hierarchical model over a period of time are aggregated and a healthy building dashboard that includes a representation of the aggregated non-compliance events for each of at least some of the one or more of the healthy building criteria detected by building control assets disposed at and below the particular hierarchical level of the spatial hierarchical model is generated and is displayed on a display.

Abstract: A method performed by an agent for handling an event of a network service deployed in a cloud environment is provided. The agent is capable to access to a server in the cloud environment. The agent obtains information from the server. The information is about an event of the network service. When the network service relates to a Third Generation Partnership Project (3GPP) network, the agent decides whether to register network service with or without an associated address of a load balancer of the network service. The agent then registers in a core network node operating in the 3GPP network, the network service with or without an associated address of a load balancer of the network service according to the event and according to the outcome of the deciding.

Abstract: A multi-cloud service system establishes tunnels and network overlays across multiple CSPs while meeting a criterion for a latency threshold. The system conducts a latency benchmarking evaluation across each cloud region for multiple CSPs and based on the latency bench marking evaluation results, the system may identify a group of cloud regions that satisfy a criterion such as predetermined maximum latency threshold or geographical restriction. The system may provision the group of cloud regions by provisioning a tunnel between nodes of the multiple CSPs. The system further establishes an overlay network on top of the tunnel by encapsulating packets using encapsulation end point such as VTEP (VXLAN tunnel end point) over VXLAN (Virtual Extension Local Area Network), which may help to ensure reliable transmission of packets from pod to pod. The system may inject user data into each node to initiate operations across the provisioned nodes using injected user data.

Abstract: Searching encrypted data using encrypted contexts by performing at least the following: configuring a first encryption context that allows access to a first encrypted field, configuring a second encryption context that allows access to a second encrypted field, assigning the first encryption context to a first role and the second encryption context to a second role, assigning the first role to a first user account to allow the first user account to access the first encrypted field, assigning the second role to a second user account to allow the second user to access the second encrypted field, receiving a query request associated with the first user account for a search term, wherein the query request includes instructions to search for an unencrypted version of the search term and a first encrypted value of the search term that is based on the first encryption context.

Abstract: The invention relates to a computer-implemented system and method for authenticating a customer of a business. The method may include the steps of: receiving from the customer at least one item of identifying information; confirming the identity of the customer; generating a token that represents an active session in which the customer interacts with one or more systems or personnel at the business; conducting a first set of communications between the customer and a first system of the business; inquiring with the customer as to whether the customer desires to transfer the active session to a second system at the business or to a third party system; and transferring the active session using the token to the second system or the third party system. The method may also comprise the steps of retrieving background information on the customer to assist a representative of the business in assisting the customer.

Abstract: A system described herein may provide a technique for the dynamic selection of configurable resources in an environment that includes a hierarchical or otherwise differentiated arrangement of configurable resources. The environment may include, or may be implemented by, a Distributed Resource Network (“DRN”), which may include hardware or virtual resources that may be configured, including the instantiation of containers, virtual machines, Virtualized Network Functions (“VNFs”), or the like. The DRN may be hierarchical in that some resources of the DRN may provide services to, and/or may otherwise be accessible to, a greater quantity of elements of the DRN or some other network.

Abstract: Technologies for switching network traffic include a network switch. The network switch includes one or more processors and communication circuitry coupled to the one or more processors. The communication circuitry is capable of switching network traffic of multiple link layer protocols. Additionally, the network switch includes one or more memory devices storing instructions that, when executed, cause the network switch to receive, with the communication circuitry through an optical connection, network traffic to be forwarded, and determine a link layer protocol of the received network traffic. The instructions additionally cause the network switch to forward the network traffic as a function of the determined link layer protocol. Other embodiments are also described and claimed.

Abstract: The present disclosure generally relates to user interfaces for health applications. In some embodiments, exemplary user interfaces for managing health and safety features on an electronic device are described. In some embodiments, exemplary user interfaces for managing the setup of a health feature on an electronic device are described. In some embodiments, exemplary user interfaces for managing background health measurements on an electronic device are described. In some embodiments, exemplary user interfaces for managing a biometric measurement taken using an electronic device are described. In some embodiments, exemplary user interfaces for providing results for captured health information on an electronic device are described. In some embodiments, exemplary user interfaces for managing background health measurements on an electronic device are described.

Abstract: A device may receive provisioning data identifying an application server and a user equipment. The device may provide a request for reachability data associated with the user equipment and may receive the reachability data. The device may cause a trigger for a packet and data identifying the application server to be provided to the user equipment. The device may receive, from the user equipment, the packet that includes a network address and a port identifier of a port of the user equipment. The device may provide, to a firewall associated with the application server, an identifier, the network address, and the port identifier. The device may cause, via the firewall, the reachability data, the network address, and the port identifier to be provided to the application server to enable the application server to provide data to the user equipment.

Abstract: Examples of the present disclosure can include a method. The method may include (1) identifying, by a virtual infrastructure manager (“VIM”), a virtual network function (“VNF”) descriptor from information obtained from the integrated network, (2) selectively generating at least one container on the physical network based on the VNF descriptor, (3) determining, by the VIM, an integrated network requirement based on state information associated with the integrated network, (4) providing, by the VIM, to a container management platform, the integrated network requirement, and (5) causing a VNF to be generated in the container to fulfill the integrated network requirement. Corresponding systems, non-transitory computer-readable media, and methods are also disclosed.

Abstract: An information processing system includes an information processing apparatus that obtains a state of a job input to a printing apparatus, generates, based on the state of the obtained job, notification information including instruction information used to control the job, and transmits the generated notification information to a network. A mobile terminal apparatus receives the notification information from the network, and notifies, based on the received notification information, the instruction information used to control the job. The information processing apparatus also estimates an execution result of a job which has been input to the printing apparatus but is in an execution standby state, obtains, as a state of the job, the estimated execution result, and in a case in which the estimated execution result indicates abnormal completion, generates the notification information including the instruction information used to control the job.

Abstract: A hypervisor identifies a memory address associated with a device slot of a communication bus; determines that the device slot of the communication bus is not associated with any of one or more devices; generates a memory page for the memory address, wherein the memory page comprises a value that indicates that the memory address is not associated with any of the devices; maps, in a page table, a page table entry for the memory page to the memory address, wherein the page table entry indicates that the memory page is read only for a guest operating system (OS) of a virtual machine (VM); and causes the memory page to be provided to the guest OS of the VM in view of a read access of the memory address by the guest OS.

Abstract: A connection analyzer at a server information handling system analyzes virtual desktop requests from client information handling systems to prioritize available virtual desktop display protocols for responding to the requests based upon the client type and network interface. The virtual desktop is established by reference to a priority list of virtual desktop display protocols available for sending virtual desktops from a server information handling system.

Abstract: A method, a device, and a non-transitory storage medium are described in which multi-tiered networks and resource utilization-based provisioning service is provided. A multi-tiered mobile edge computing network that includes multiple mobile edge computing networks that are multi-tiered based on distance from a network edge includes a network device that selects a location to provision an application service for an end device based on a total resource utilization value and a performance metric associated with one or multiple candidate mobile edge computing networks.

Abstract: Some embodiments provide a method for defining security groups in a network. In a user interface, the method displays (i) a set of existing security groups and (ii) a set of recommend security groups based on monitored network flows in the network. Each existing security group and recommended security group includes at least one data compute node (DCN). The method provides a user interface tool for (i) accepting recommended security groups to be part of the set of existing security groups and (ii) adding DCNs from the recommended security groups to the existing security groups. Security rules are defined and implemented in the network for DCNs belonging to existing security groups.

Abstract: Embodiments are directed to managing communication over one or more networks. A monitoring engine may be instantiated to perform actions including receiving network traffic from a physical network that may be associated with network addresses of the physical network. The monitoring engine may analyze the network traffic to associate activity with gateway identifiers (GIDs) associated with gateway computers in an overlay network such that the GIDs are separate from the network addresses. The monitoring engine may be arranged to monitor the network traffic based on monitoring rules. The monitoring engine may provide metrics associated with the gateway computers based on the monitoring of the network traffic. The monitoring engine may compare the metrics to event rules. The monitoring engine may generate events based on affirmative results of the comparison. The events may be mapped to actions based on characteristics of the events and executed.

Abstract: The present disclosure relates to a communication method by I2C bus between a emitting device and a receiving device, in which: a rising edge of a clock signal of the I2C bus, directly following a start condition of an I2C communication, is recorded; and when an interruption is generated within the receiving device, the receiving device verifies whether the rising edge was recorded.

Abstract: As the volume of data under management expands rapidly, so do the costs associated with storing and that data on secondary storage devices. The illustrative approach provides an improvement to the information management system by delaying certain tasks that meet a set of criteria until a specified threshold is met. The system receives a request to be performed on a set of data stored on secondary devices. Power management module determines whether the task satisfies a set of criteria for delayed execution, queues the task, and when a specified threshold of the queued tasks is met powers up the necessary components to execute the tasks.

Abstract: The disclosure provides a service request processing method. A service consumer transmits a service request, including a plurality of service producer types, and an access order of service producer instances corresponding to the plurality of service producer types is determined. The service producer instances corresponding to the plurality of service producer types are controlled to process the service request according to the access order.

Abstract: A system, method and interface for compiling literary works from specialized databases and/or from unique interfaces is provided, including a custom database compiled from plural existing literary indexes, wherein a master index is harmonized from said existing indexes according to common terms (e.g., book, chapter and verse for biblical indexes) with deleted duplicates. In exemplary embodiments, the master index is also augmented by ingestion of additional literary works in digital form that are chopped up based on said common terms (e.g., book, chapter, verse) extracted from the literary work.

Abstract: A network management system manages the operation of a home security system in a communication network, such as a mesh network. The home security system can include multiple components such as a camera, a lighting device, a security alarm, a doorbell switch and doorbell chime, and a fingerprint sensor, which connect with the communication network to perform various operations. The network management system monitors environmental parameters of the communication network, such as parameters associated with the access points and components of the home security system, determines an access point to which a component of the home security system is to be connected for efficient operation of the home security system, and connects the component to the communication network via the determined access point.

Abstract: A state of a system having a plurality of appliances is controlled by using a device discovery process to establish a listing of each of the plurality of appliances in the system. The listing of each of the plurality of appliances is then used, with reference to a command and/or protocol database, to configure a software agent to exchange communications, via a one or more communication channels, with each of the plurality of appliances. An action triggering state of at least one of the plurality of appliances is associated with an action. The action is performed when it is determined that a current state of the at least one of the plurality of appliances corresponds to the action triggering state.

Abstract: A networked system includes a plurality of endpoint devices that each include a compute device and a display device. A virtual desktop configuration system is coupled to the plurality of the plurality of endpoint devices via a network and is configured to retrieve display device characteristics associated with the display device in at least one of the plurality of endpoint devices, configure virtual desktop display characteristics for a virtual desktop based on the display device characteristics, and transmit virtual desktop images having the virtual desktop display characteristics to the compute device in the at least one of the plurality of endpoint devices to cause that compute device in that endpoint device to display the virtual desktop images on the display device in that endpoint device.

Abstract: A method and system is provided for facilitating affiliate link generation using a web browser application. A publisher enables the system by identifying a webpage on an affiliate web site. The system performs an initial assessment of the page to extract webpage information, which is compared to information stored in a database. If the extracted information matches stored information, a record of the webpage is displayed and an affiliate link is dynamically generated for immediate use. If the extracted information does not match stored information, a new record of the webpage is created. If the webpage contains product-specific data, a product-specific record is stored. If the webpage does not contain product-specific data, a non-product record is stored. An affiliate link is then dynamically created. The new record of the product and dynamically created affiliate link is added to the database for immediate use.

Abstract: A policy and charging rules function (PCRF) stores a policy rule management table in which a policy rule corresponding to a combination of contract information and a device type is registered and a hierarchical management table in which user information including contract information of a user and information on the device are managed in association with each other, acquires the device type serving as an application target of the policy rule, and a device ID assigned to the device, determines the policy rule according to the acquired device type and the contract information of the user, and instructs a deep packet inspection (DPI) to apply the determined policy rule to the device corresponding to the acquired device ID. The DPI acquires the device ID, and applies the policy rule to communication from the device corresponding to a device ID assigned to the device, and performs control.

Abstract: An information processing device includes a virtualizer configured to operate as a proxy of hardware on the hardware, at least one virtual machine configured to function as a part of a process control system on the virtualizer, an address duplication determiner configured to determine duplication of an address on an external network when the external network is connected to the hardware, and an address duplication manager configured to cut a connection between the virtual machine and the external network when the duplication of the address is detected.

Abstract: A method includes analyzing a dataflow graph representing data dependencies between operators of a dataflow application to identify a plurality of candidate groups of the operators. Based on characteristics of a given hardware accelerator and the operators of a given candidate group of the plurality of candidate groups, determining whether the operators of the given candidate group are to be combined. In response to determining that the operators of the given candidate group are to be combined, retrieving executable binary code segments corresponding to the operators of the given candidate group, generating a unit of binary code including the executable binary code segments and metadata representing an execution control flow among the executable binary code segments, and dispatching the unit of code to the given hardware accelerator for execution of the unit of code.

Abstract: In one or more implementations, content generated using a client application may be associated with a classification. The content may be accessed based on one or more classifications associated with the content. Content may be generated by a client application executed by a client device of a content creator and sent to a server system that may distribute the content to one or more additional client devices of recipients of the content. The server system may also aggregate content having a same classification.

Abstract: A network slice managing entity, comprising means configured to obtain a service request for a network slice, the service request defining service requirements; request network slice descriptions from a database and selecting at least one network slice which support said service requirements according to the descriptions; generate a resource graph comprising nodes representing infrastructure resources and links representing connections between the nodes, the resource graph depicting resources needed for providing the service, wherein the generating is carried out based on a network slice description of the selected at least one network slice; transmit the resource graph to an infrastructure manager for mapping a topology of said network infrastructure onto said resource graph and determining at least one subset of said network infrastructure; and, receive a mapping result from said infrastructure manager containing said at least one subset of said network infrastructure.

Abstract: An electronic device has one or more processors and memory. The memory stores one or more programs configured for execution by the one or more processors. The device receives a request directed to a data source. The request includes one or more intent types and one or more predefined attributes associated with the intent types. Each of the predefined attributes limits a respective data analysis operation of a respective intent type. In response to the request, for each of the intent types, the device formulates a respective intent specification according to the request. The device also applies one or more respective rules corresponding to the respective intent type to determine whether the respective intent type is ambiguous and/or underspecified. When the respective intent type is ambiguous and/or underspecified, the device infers information to resolve the ambiguous and/or underspecified intent.

Abstract: Systems and methods pattern detection in service tickets are disclosed. According to one embodiment, an analytics computer application may: (1) determine a service ticket threshold for an Information Technology (IT) resource; (2) receive a plurality of service tickets for the IT resource; (3) pre-process text of the plurality of service tickets; (4) identify keyword patterns in the pre-processed text of the plurality of service tickets; (5) group the plurality of service tickets into subsets of service tickets based on the keyword patterns; (6) determine that a number of service tickets in one of the subsets of service tickets exceeds the service ticket threshold; (7) identify an IT component associated with the subset of service tickets; (8) identify users affected by the IT component; and (9) notify the users affected by the IT component of an issue with the IT component.

Abstract: A distributed data storage system that includes endpoint nodes, gateway nodes, and one or more gateway name servers. A gateway name server receives from clients resolution requests to resolve to a gateway node and resolves the resolution requests to a gateway node address of a gateway node. A gateway node receives client requests to access an endpoint node and redirects the requests to endpoint nodes identified by a gateway node whose address was resolved to by a gateway name server. An endpoint node receives from a client a retrieval request to retrieve data based on being redirected to the endpoint node. When a retrieval request is received and the endpoint node stores the data, the endpoint node sends the data to the client. When a retrieval request is received and the endpoint node does not store the data, the endpoint node forwards the retrieval request to another endpoint node.