Abstract: Methods, apparatus, systems and articles of manufacture are disclosed to allocate hardware in virtualized computing architectures. An example apparatus to manage a virtual server rack comprises a drift analyzer to determine that hardware resources assigned to a virtualized workload domain exceed the resources requested for the virtualized workload domain; and a rebalancer to reassign one or more of the hardware resources in response to an indication from the drift analyzer.

Abstract: A device configured to receive requirements that identifies hardware operating characteristics and to determine a performance metric for the requirements. The device is configured to generate a set of resource cluster configurations that each identify a set of hardware resources and a set of algorithms. The device is further configured to identify a first resource cluster configuration having a first performance value with the highest performance value from among the set of resource cluster configurations. The device is further configured to combine the first resource cluster configuration with a second resource cluster configuration, and to determine a second performance value for the combined resource cluster configuration.

Abstract: Uplink congestion control based on session initiation protocol (SIP) messaging includes receiving SIP messages from user equipment devices (UEs) via established wireless uplink connections; and monitoring a rate of the SIP messages received from the UEs. Uplink congestion control further includes identifying whether the rate of received SIP messages exceeds a first threshold during a first period of time; and sending SIP response messages to the UEs to reduce congestion on the wireless uplink connections upon identifying that the rate of received SIP messages exceeded the first threshold over the first period of time, where the sent SIP response messages instruct the UEs to resend the SIP messages after predetermined time delays.

Abstract: Systems, apparatuses, methods, and computer program products are disclosed for quantum computing (QC) detection. An example method includes generating QC detection data. The example method further includes generating a pair of asymmetric cryptographic keys comprising a public cryptographic key and a private cryptographic key, generating encrypted QC detection data based on the pair of asymmetric cryptographic keys, and destroying the private cryptographic key. The example method further includes monitoring a set of data environments for electronic information related to the encrypted QC detection data. Subsequently, the example method may include generating a QC detection alert control signal in response to detection of the electronic information related to the encrypted QC detection data.

Abstract: Methods, computer program products, and computer systems for performing dynamic storage tiering in a virtual environment are disclosed. In one embodiment, such a method can include moving a storage object from a first storage tier of a storage system to a second storage tier of the storage system, which can be performed based, at least in part, on tiering information. Such moving can include determining a location of the storage object in the storage system by translating a location of the storage object in a virtual machine file to the location of the storage object in the storage system, using mapping information, and transmitting an instruction to a storage manager of the storage system. The instruction indicates that the storage manager should perform the moving. The mapping information translates a location in the virtual machine file to a corresponding location in the storage system.

Abstract: A device may receive CNF data identifying a CNF to be deployed in a network and a configuration of the CNF and may validate connectivity between resources to be utilized to deploy the CNF to generate connectivity data indicating whether one or more connectivity issues exist. The device may validate packages to be utilized to deploy the CNF to generate package data indicating whether one or more package issues exist and may validate an NFVO to be utilized to deploy the CNF to generate NFVO data indicating whether one or more NFVO issues exist. The device may validate an NFVI to be utilized to deploy the CNF to generate NFVI data indicating whether one or more NFVI issues exist and may determine whether one or more issues are associated with deploying the CNF based on the connectivity data, the package data, the NFVO data, and the NFVI data.

Abstract: Provided are a computer program product, system, and method for reducing a rate at which data is mirrored from a primary server to a secondary server. A determination is made as to whether a processor utilization at a processor managing access to the secondary storage exceeds a utilization threshold. If so, a determination is made as to whether a specified operation at the processor is in progress. A message is sent to the primary server to cause the primary server to reduce a rate at which data is mirrored from the primary server to the secondary server in response to determining that the specified operation is in progress.

Abstract: Provided are a method for detecting an anomaly in devices, the method being performed by a computing device and comprising: acquiring operation information on a first device connected to a security management unit (SMU) of a first domain, and operation information on a second device connected to a SMU of a second domain, and detecting an anomaly in the first device and/or the second device by comparing the operation information on the first device with the operation information on the second device, wherein the SMU of the first domain is not directly connected to the SMU of the second domain.

Abstract: The technology disclosed herein enables a dynamic chain of virtual service functions for processing network traffic in a virtual computing environment. In a particular embodiment, a method includes providing a service chain policy to a virtual routing element connecting the respective service functions and determining an initial classification of a network packet entering the dynamic service chain. The initial classification indicates at least a first service function in a sequence of the service functions for processing the network packet. The method further includes providing a service chain policy to a virtual routing element connecting the respective service functions.

Abstract: A client receives streaming data according to Moving Picture Experts Group-Dynamic Adaptive Streaming over HTTP (MPEG-DASH) standard. The client includes a transmitter which transmits a Media Presentation Description (MPD) request or a segment request to a server, and a receiver which receives an MPD specified in the MPD request and a segment specified in the segment request. The MPD request contains information requesting transmission of an initialization segment by a push. The receiver receives the initialization segment transmitted by the push.

Abstract: A distributed data storage system may implement determining indexing progress for a table stored in the distributed data storage system. A table may be stored in multiple table partitions. When a secondary index is created for the table, each partition may independently index the items stored within the table partition in order to identify those items in the partition that should be stored in the secondary index. During creation of the secondary index, creation progress points that indicate the progress of the indexing across the table partitions may be determined. The creation progress points may be provided via a programmatic, textual, or graphical interface to the distributed data storage system.

Abstract: Systems which support an asymmetric link define rules and policies in each individual physical layer. An asymmetric link is a physical layer with a different number of transmit versus receive lanes. Asymmetric links enable physical layers to optimize performance, power, and system resources based on the required data bandwidth per direction across a link. Modern applications exhibit large demands for high memory bandwidth, i.e., more memory channels and larger bandwidth per channel. The utilization data, patterns) of link usage, and/or patterns) of lane usage may be gathered to exploit the facilities provided by asymmetric links. An engine includes AI-fueled analytics to monitor, orchestrate resources, and provide optimal routing, exploiting asymmetric links, lane polarity, and enqueue-dequeue in a computing ecosystem.

Abstract: Systems and methods for managing network resources are disclosed. One method can comprise receiving first information relating to network traffic parameters and receiving second information relating to one or more contextual events having an effect on the network traffic parameters. The first information and the second information and be correlated. And one or more network resources can be allocated based on the correlation of the first information and the second information.

Abstract: A system and method for decentralized data processing includes receiving, by a first data processing unit of a data processing unit array, a user request and sending, by the first data processing unit, the user request to at least one of other data processing units of the data processing unit array. Each of the first data processing unit and the other data processing units include a dedicated non-volatile memory. The system and method also include receiving, by the first data processing unit, a code of execution results from each of the other data processing units that execute the user request, combining, by the first data processing unit, the code of execution results from the each of the other data processing units that execute the user request, and responding, by the first data processing unit, to the user request by transmitting the combined code of execution results.

Abstract: Variety of approaches to provide an automatic group creation based on an organization hierarchy are described. A hosted service initiates operation(s) to automatically create a group upon detecting a new organization hierarchy or a utilization of a feature of a hosted service by an existing organization hierarchy. Next, group members are determined based on the organization hierarchy. The group is created that includes the group members to coordinate services within the hosted service based on the organization hierarchy. Furthermore, an attribute of the created group is defined. A resource is also generated for the created group. The resource includes a notebook, a work space, a collaboration site, and/or a planner. The created group is deployed to coordinate the services. The resource is managed through the services.

Abstract: The present disclosure is related to the content delivery technology and discloses a method and system for scheduling an edge CDN node. The method is applicable to a CDN scheduling center under a 5G network architecture and includes: receiving a terminal request for a target domain name sent by a central layer UPF network element; assigning a target edge CDN node to a terminal according to location information of the terminal carried in the terminal request if the terminal request is an HTTPDNS request; and assigning the target edge CDN node to the terminal according to a source IP address of the terminal request if the terminal request is a conventional DNS request. By adopting the present disclosure, the CDN scheduling center may determine the location information of the terminal under the 5G network architecture, thereby accurately assigning the edge CDN node to the terminal.

Abstract: This application discloses a network slice management method and a device that is designed to improve network slice deployment efficiency. In the network slice management method, after obtaining indication information of a network slice template and performance requirement information of a target network slice, a first network management device may determine deployment information of the target network slice based on the two pieces of information, and may manage the target network slice based on the deployment information of the target network slice, without manual involvement. Therefore, network slice deployment efficiency can be improved.

Abstract: A method and data processing system are provided. The data processing system comprises an application associated with a plurality of sockets and a sub-system for making data available to the application via the plurality of sockets. The sub-system is configured to provide in response to a request from the application: an indication of events that have occurred on one or more of the plurality of sockets; and an indication of an order in which the events should be processed.

Abstract: In accordance with an example implementation of this disclosure, an email handler comprises email processing circuitry, a web server, and a database. The email processing circuitry is operable to generate a uniform resource locator for a notification object to be embedded in an email message. The email processing circuitry is operable to embed the notification object in the email message. The email processing circuity is operable to send the email message into a network. The web server is operable to receive a request sent to the uniform resource locator by a client device, The web server is operable to determine characteristics of the client device based on content of the request. The web server is operable to store the characteristics in the database. The web server is operable to control access to content by the client device based on characteristics of the client device stored in the database.

Abstract: The present disclosure provides a method and system of limiting traffic. The method includes: sending, by a distributed node, a service volume in a current preset time period to a central node according to a fixed period; determining, by the central node, a decision quota of the distributed node based on the received service volume, and sending the decision quota to the distributed node; receiving, by the distributed node, the decision quota sent by the central node; and determining, by the distributed node based on the latest received decision quota after receiving an access request, whether traffic limitation needs to be performed for the access request. The traffic limitation decision of the present application is made by the distributed node autonomously, the decision path is short, and fast and accurate decision making is achieved.

Abstract: A base station may comprise circuitry configured to establish a plurality of wireless links with a mobile device and a memory configured to store a plurality of media access control (MAC) addresses associated with the plurality of wireless links. The base station may comprise one or more receivers configured to receive data units over the plurality of wireless links. A first data unit of the data units may span a plurality of channels. The first data unit may comprise a header portion duplicated along at least some of the plurality of channels and the first data unit may comprise a data portion which is not duplicated along the plurality of channels. The header portion duplicated along at least some of the plurality of channels may consist of bits of a release version dependent portion and bits of a portion which is non-release version dependent.

Abstract: A storage controller is implemented for controlling a storage system. The storage controller may be implemented using a distributed computer system and may include components for servicing client data requests based on the characteristics of the distributed computer system, the client, or the data requests. The storage controller is scalable independently of the storage system it controls. All components of the storage controller, as well as the client, may be virtual or hardware-based instances of a distributed computer system.

Abstract: Systems and methods of service enhancement in a Software Defined Networking (SDN) network include performing an evaluation of one or more services in the SDN network for service enhancements; performing a scoring of the service enhancements of the one or more services; and causing implementation of at least one of the service enhancements in the SDN network. The evaluation can be based on temporarily implementing the service enhancements and measuring a benefit thereof. The evaluation can also be based on estimating the service enhancements based on historical measurements from the SDN network.

Abstract: The present disclosure relates to scalable network security functions and handling of packet flows between network security zones in a communications network. Packets that are part of a bidirectional packet flow between the network security zones are received, and a determination is made as to an instance of a security application to which to assign the bidirectional packet flow for security processing. The determination is made based on relative loading of a plurality of identical instances of the security application running on a host machine. All of the received packets that are part of the bidirectional packet flow are directed for processing on the host machine by the one of the security application instances.

Abstract: A method for fetching a content from a web server to a client device is disclosed, using tunnel devices serving as intermediate devices. The client device access an acceleration server to receive a list of available tunnel devices. The requested content is partitioned into slices, and the client device sends a request for the slices to the available tunnel devices. The tunnel devices in turn fetch the slices from the data server, and send the slices to the client device, where the content is reconstructed from the received slices. A client device may also serve as a tunnel device, serving as an intermediate device to other client devices. Similarly, a tunnel device may also serve as a client device for fetching content from a data server. The selection of tunnel devices to be used by a client device may be in the acceleration server, in the client device, or in both.

Abstract: Network resource allocation takes place within a wireless communication channel in which resource is defined with respect to time and frequency; a resource allocation process involves joint allocation of resource for communication to and from a controlled device, to enable a cyclic exchange of information and thus to enable wireless closed loop control of the device.

Abstract: In some examples, a system associates a plurality of buffers in a memory with respective multiple bins of a fingerprint index in persistent storage. The system computes fingerprints for incoming data units, and selects, based on an adaptive sampling indication, a subset of the fingerprints. The system adds fingerprint index entries corresponding to the selected subset of the fingerprints to a respective subset of the multiple bins, wherein adding a fingerprint index entry to a bin of the respective subset of the multiple bins comprises adding the fingerprint index entry to the buffer of the bin.

Abstract: A method and associated systems for automated orchestration of complex server provisioning tasks. An orchestration-optimization system receives input that identifies a destination, platform, and pattern of tasks that together characterize a procedure for building a particular virtualized computer environment. The system selects a set of generic orchestration methods that identify in general terms each task required to build the environment. The system then embeds into the orchestration methods all currently known contextual data associated with the specified build procedure, converting the generic methods into a build-specific runlist of tasks. When the environment is ready to be built, additional environment-specific data that becomes known only at build time is inserted into placeholders previously embedded into the runlist tasks. The system then performs the sequence of runlist tasks in order to automatically build the virtualized system.

Abstract: A network component placement architecture addresses the difficult technical challenge of determining where specific technical components of an overall service may be provisioned. The architecture is particularly effective at determining where, among a myriad of possible service provides, platforms, and regions, the technical components can be placed and meet all of the applicable technical constraints on the placement of the technical components. In one implementation, the placement architecture includes a sequence of pipeline stages that define an analysis sequence leading to a set of possible placement options.

Abstract: Data is received characterizing a virtual resource requirement for deployment of a resource in a first remote computing environment and/or a second remote computing environment. Second data is received characterizing resource cost for the first remote computing environment and the second remote computing environment. The receiving the second data includes accessing, via an application programming interface of the first remote computing environment and based on an account identity of an entity associated with the virtual resource requirement, the second data characterizing computing resource cost for the first remote computing environment. A first cost for deploying the resource within the first remote computing environment and a second cost for deploying the resource within the second remote computing environment is predicted using the received data. The first cost and the second cost is provided. Related apparatus, systems, techniques and articles are also described.

Abstract: There are provided systems and methods for shared application interface data through a device-to-device communication session. A user may utilize a device to engage in an electronic communication session with another user, such as a shared messaging or video chat session. During the session, the user may utilize another application on the same device to perform separate application data processing, such as accessing a website or an online marketplace that may include interface output data. The user may activate a plug-in or add-on that may allow application data sharing for current application data in the separate application during the communication session. The device may determine the present application data, such as a displayable instance of the current interface data, and may transmit the data to the other user's device through the communication session. Further, the plug-in may allow for split transaction and data processing.

Abstract: Each data stream in a backup job is individually tracked by data agent(s) and media agent(s) in its path, generating performance data packets in-process and merging them into the processed data stream. The data stream thus incrementally accumulates performance data packets from any number of successive backup processes. The in-process tracking also captures hierarchical relationships among backup processes and in-process subtending tasks, so that the resulting performance report can depict parent and child operations. The hierarchical relationships are embedded into the performance data packets and may be analyzed by parsing the data stream. The media agent transfers the data packets belonging to the secondary copy to secondary storage. The media agent analyzes the performance data packets in the data stream and generates a performance report, which covers the data stream from source to destination, based on the accumulated information carried by the performance data packets.

Abstract: In some embodiments, an apparatus (e.g., a first device) for secure execution of software is provided. The apparatus includes a housing arranged to hold a second device. The apparatus includes a memory configured to store a set of instructions of an application, a local communications device, and a processor. The apparatus is configured to execute the application and transmit a first set of data via the local communication device to be processed by the second device. The apparatus may receive, input data from the second device, interpret the input data using the set of instructions of the application, and transmit a second set of data via the local communication device to be processed by the second device, the second set of data may reflect an updated active state of the application.

Abstract: A method for machine learning based prediction of at least one subsequent UI layout is provided. The method may include detecting, by the electronic device, a first transition event. Further, the method may include identifying, by the electronic device, a UI layout associated with a first application of the electronic device. Further, the method may include predicting, by the electronic device, the at least one subsequent UI layout to be displayed based on at least one transition parameter, wherein the at least one subsequent UI layout is associated with at least one of the first application or at least one second application. Further, the method may include loading, by the electronic device, the at least one subsequent UI layout in a memory of the electronic device.

Abstract: A network system configured to provide software defined networking is described. The network system comprises networking hardware such as network controllers, memory and other storage devices, and processors. The processors execute instructions to implement various program modules. A user interface permits a user to generate a request for generating an on-demand network connection. A flow module generates a network flow request, based on the received request for generating the on-demand network connection, and transmits the network flow request to a controller module. The controller module controls the network controllers to generate the on-demand network connection based on the generated network flow request.

Abstract: Systems and methods are described for preprocessing data later ingested into an indexing system. The preprocessing can include receiving messages published to a first publish-subscribe messaging system, the messages containing raw machine data generated by one or more components in an information technology environment, performing one or more processing operations on at least some of the messages to generate preprocessed messages, republishing the preprocessed messages to a second publish-subscribe messaging system, and providing to the indexing system, a subset of the messages from the second publish-subscribe messaging system.

Abstract: Embodiments of the disclosure disclose a system to prevent data of a client from leaking to untrusted parties in a multiparty computation environment. According to one embodiment, in response to a request received at a gateway (e.g., a non-bypassable gateway) of a server from a user device of a user over a network to process user data by an execution service, the system sanitizes the user data by scanning the user data for malicious code. The system selects a trusted execution environment (TEE) worker from a number of TEE workers and initiates an execution of the execution service by the selected TEE worker. The system receives execution results from the selected TEE worker. The system transmits the execution results to the user device of the user over the network.

Abstract: Embodiments for wirelessly programming a control system of a machine, such as a vehicle, are provided. As machines typically include an intricate collection of electronic devices that communicate to one another via a complex network, the ability to reliably program such devices over a wireless connection is extremely unreliable due to network limitations or requirements, such as defined communication protocols or standards. Embodiments relate to a machine interfacing device that can wirelessly communicate with a client device that serves as both a diagnostics and programming interface. The machine interfacing device, physically coupled to the control system, can independently convert and intelligently manage communications to and from electronic devices of the machine control system.

Abstract: Disclosed is a method of distributed data redundancy storage using consistent hashing, which is used for selection of pre-stored data in the distributed position in storage cluster. The method is implemented by establishing a logical topology for each storage node in a distributed storage system, determining the position of each node in a storage node sequence corresponding to each hash subspace by using consistent hashing, and then determining a number of data copies and each piece of stored data according to the redundant storage policy of pre-stored data; and storing each piece of stored data in a different storage node according to storage rules.

Abstract: A management method and apparatus are provided. The method includes: obtaining, by a second management unit, affinity information. The affinity information is used to configure affinity and/or anti-affinity between a target object and another object, or is used to configure affinity and/or anti-affinity between a child object of the target object and another object. The method further includes sending, by the second management unit, a management request of the target object to a first management unit. The management request carries the affinity information. The method further includes managing, by the first management unit, the target object according to the affinity information, after receiving the management request of the target object and sent by the second management unit.

Abstract: A method and device for allocating a distributed lock is provided. A globally unique service process ID (SPI) is introduced for each distributed application service process while guaranteeing correctness of a distributed lock, and the SPI is used to directly manage ownership of the distributed lock. The service replacement process sends to the server a request for inheriting ownership of the distributed lock before the lifecycle of the lock file expires, the inherit request including the SPI.

Abstract: An expanded availability computing system includes a first and second computing systems coupled together via a network. The first computing system includes a device access controller subsystem coupled to devices and a central processing subsystem that is configured to provide Software Defined Service(s) (SDS(s)) using the devices via the device access controller subsystem. A networking subsystem coupled to the device access controller subsystem determines that the at least one SDS is unavailable, configures the device access controller subsystem to receive SDS communications from the networking subsystem, enables remote access for the second computing system via the networking subsystem and through device access controller subsystem to the devices, and transmits SDS communications received from the second computing system to the devices via the device access controller subsystem so that the second computing device provides the SDS(s) using the devices via the device access controller subsystem.

Abstract: Systems, methods, apparatus and computer-readable medium are described for improving efficiency and robustness for configuring data-planes. Furthermore, systems, methods, and devices are provided for efficiently storing, maintaining and retrieving configuration information for data-planes. The configuration information may be stored and retrieved from a hierarchy of information stored in memory, such as a hierarchy of information in memory, wherein the hierarchy of information has configuration data for one or more data-planes and represents one or more command sequences issued by a controller of the control-plane to one or more data-planes. In certain implementations, the hierarchy of information comprises a plurality of nodes, wherein each node represents at least a portion of a command sequence issued by the controller. The command sequences may be configuration command sequences issued by the control plane to configure the data-planes.

Abstract: Systems and methods are provided for a computer-implemented method of implementing an on-demand computing network environment. A network specification is received from a user. Resources from one or more resource providers are provisioned including an audio server resource. The on-demand computing network is configured, where configuring includes assigning a first provisioned resource as a hub device. One or more second provisioned resources are assigned as rim devices, where rim devices are configured to communicate with one another only via the hub device. One rim device is a proxy server to which the user connects using a device having an address, where the audio server transmits audio data to the user via the proxy server without knowledge of the address of the user device.

Abstract: Technology is described for sharing device capabilities between a plurality of Internet of Things (IoT) devices. A first IoT device within a localized network may identify a desired device capability that is capable of augmenting device capabilities of the first IoT device. The first IoT device may identify a second IoT device within the localized network that possesses the desired device capability. The first IoT device may identify the second IoT device using a registry of device capabilities stored in the localized network. The first IoT device may obtain access to the desired device capability of the second IoT device to augment the device capabilities of the first IoT device.

Abstract: The application provides a bandwidth allocation method and device. The method includes that: Discontinuous Reception (DRX) indication information is determined, the DRX indication information being used for a terminal device to determine a working bandwidth to be used within a DRX cycle and/or a frequency point of the working bandwidth; and the DRX indication information is transmitted to the terminal device. According to the bandwidth allocation method of the embodiments of the application, unnecessary power consumption of the terminal device may be avoided.

Abstract: A method of accessing data includes storing a table that includes a plurality of tablets corresponding to distinct non-overlapping table portions. Respective pluralities of tablet access objects and application objects are stored in a plurality of servers. A distinct application object and distinct tablet are associated with each tablet access object. Each application object corresponds to a distinct instantiation of an application associated with the table. The tablet access objects and associated application objects are redistributed among the servers in accordance with a first load-balancing criterion. A first request directed to a respective tablet is received from a client. In response, the tablet access object associated with the respective tablet is used to perform a data access operation on the respective tablet, and the application object associated with the respective tablet is used to perform an additional computational operation to produce a result to be returned to the client.

Abstract: Techniques are provided for scheduling storage volume migrations based on storage volume priorities and specified constraints. One method comprises generating a migratable volume list indicating storage volumes that can be migrated by evaluating available storage volumes according to an assigned priority and adding a storage volume to the migratable volume list in response to one or more constraints being satisfied that limit a migration of one or more of the storage volumes; and scheduling a migration of a volume part of a given storage volume from the migratable volume list based at least in part on a reevaluation of one or more of the constraints. The migratable volume list can be sorted by the assigned priority for each of the storage volumes. The migratable volume list can be regenerated in response to an event occurring that modifies the migratable volume list.

Abstract: A network slice deployment method and an apparatus, where the method includes: obtaining, by a network slice management function (NSMF) network element, network slice requirement information, where the network slice requirement information includes a service requirement that needs to be implemented by a to-be-deployed network slice instance (NSI); determining a network service deployment (NSD) template and network function information that correspond to the service requirement; and generating a network functions virtualization (NFV) deployment policy for performing network functions virtualization deployment of the NSI.

Abstract: Various systems and methods for dynamic access policy provisioning in a connected device framework are described herein. In an example, the techniques for policy provisioning may include resource update access policy automation, directory resource access policy automation, or hidden resources access policy automation, as monitored and operated with an access management service (AMS). In an example, the AMS monitors resources to receive a notification when they change (520). If the change observed is an addition or deletion of a resource object (530), the AMS responds by performing security analysis of devices hosting the new resource(s) (540), which may further result in device onboarding actions (550). The AMS may further respond by evaluating link semantics to determine which other devices and resources may need updated access control list (ACL) policies (560).