Abstract: Systems, methods and computer program products for controlling access to an organization's data in a multitenant environment are provided. An organization hierarchy is defined at a multitenant platform, the organization hierarchy comprising an organization and a plurality of sites owned by the organization, each of the plurality of sites representing a data isolation boundary for the organization's data. The sites are associated with subscriptions to applications of the multitenant platform. The organization can designate user partitions within the sites, each user partition designating a corresponding set of site users and a corresponding authentication service. the multitenant platform enables access to each subscription of a site only if a site user is authenticated by the authentication service designated in the user partition corresponding to the site user.

Abstract: An ordering management system for a property includes: a location module configured to determine locations of mobile devices that are located within boundaries of the property; a selection module configured to, in response to receipt of an order from a first mobile device for delivery of one or more items to a location of the first mobile device within the boundaries of the property: select one vendor at the property to supply the item(s) of the order; determine a group of the mobile devices based on the location of the first mobile device; and select a second mobile device from the group; a device communication module configured to selectively transmit, to the second mobile device, the location of the selected one vendor and the location of the first mobile device; and a vendor communication module configured to selectively transmit the order to the selected one vendor.

Abstract: Provided are a method for obtaining a route selection policy, a method for performing a route selection policy rule, an apparatus, a device and a computer-readable storage medium therefor. The method includes: generating a route selection policy rule for a terminal; transmitting an application function response to an application function network element after generation of the route selection policy rule for the terminal; and providing, to the terminal, the route selection policy rule, wherein the route selection policy rule includes at least one of a valid time or a valid location, the valid time representing a time at which the route selection policy rule is applicable, and the valid location representing a geographical location at which the route selection policy rule is applicable.

Abstract: An information handling system may include at least one processor; and a memory; wherein the information handling system is configured to manage a network that includes a first virtual link trunking (VLT) node, a second VLT node, and a plurality of devices that are communicatively coupled to the first VLT node via a first set of links and to the second VLT node via a second set of links, wherein the managing includes: detecting that the first VLT node has malfunctioned; detecting that the first VLT node has recovered; and after the first VLT node has recovered, preventing traffic over the first set of links until determining that all information needed to forward the traffic has been synced between the first VLT node and the second VLT node.

Abstract: A method for optimized server picking in a virtual private network (VPN) environment, the method receiving, from a user device, a preference of the user device with respect to a VPN server for establishing a VPN connection; receiving user device information associated with the user device; determining, based at least in part on the preference and the user device information, a subset of a plurality of VPN servers; and determining, from the subset of a plurality of VPN servers, a VPN server as an optimal VPN server for establishing the VPN connection. Various other aspects are contemplated.

Abstract: A method of managing traffic flow through a multi-node network, the multi-node network interlinking a first mobile network and a second mobile network, the method including, when a subscriber user equipment entity that has as a home network the first mobile network and that is operating in the second mobile network attempts to establish a connection to a correspondent user equipment entity: communicating a connection request message from the second network to the first network over a first route via a set of nodes of the multi-node network; at least one of the nodes of the set: identifying a candidate alternative route between nodes of the multi-node network for at least part of a connection between the subscriber user equipment entity and the correspondent user equipment entity; and transmitting an indication of the candidate alternative route to a controller; and the controller selecting, in accordance with predetermined criteria, one of the first route and the at least one candidate alternative route and c

Abstract: Techniques for load balancing encrypted traffic based on security parameter index (SPI) values of packet headers and sets of 5-tuple values of the packet headers are described herein. Additionally, techniques for including quality of service (QoS)-type information in SPI value fields of packet headers are also described herein. The QoS-type information may indicate a particular traffic class according to which the packet is to be handled. Further, techniques for pre-configuring a backend host such that encrypted traffic may be migrated to the backend host from another backend host without causing temporary service disruptions are also described herein.

Abstract: A method for streaming and nonstreaming media transfer between devices includes receiving, by a server, a request message for a handoff of content from a first device displaying the content to a second device. The method further includes generating a handoff protocol for the handoff in response to the handoff request message. The method further includes transmitting, to one of the first device and the second device, a first notification message that includes a plurality of handoff parameters, based on the handoff protocol, that identifies an algorithm for the handoff of the content. The content is displayed with the second device after the handoff is complete.

Abstract: In some aspects, a channel hopping sequence for communication on a mesh network is generated. The hopping sequence may include multiple channels assigned to respective positions in the hopping sequence. In some cases, a first channel is assigned to a first position such that the first channel may transmit communications in a first transmission mode, such as a low-bandwidth transmission mode. In addition, an additional channels adjacent to the first channel is also assigned to the first position such that the combination of the first channel and additional channel may transmit communications in a second transmission mode, such as a high-bandwidth transmission mode. In some cases, a whitelist is determined based on the assigned channels. The whitelist may indicate channels that do not conflict with the assigned channels during transmission of a communication. In addition, channels may be assigned to the hopping sequence based on the whitelist.

Abstract: A system and method for multi-channel communications that includes receiving an initiating communication triggering establishment of a conversation associated with a set of participant endpoints, wherein the set of participant endpoints comprises of participant endpoints from at least two distinct communication channels; configuring a set of intermediary endpoints for communications between at least a subset of the set of participant endpoints on different communication channels; and for each communication of the conversation, transmitting communications to a receiving set of participant endpoints through the configured intermediary endpoint.

Abstract: Aspects of the disclosure relate to providing cloud computing resources from one or more cloud service providers for a client computing device through a computing platform. The client computing device may benefit from an economy of scale while being able to obtain different types of cloud services over a plurality of cloud providers. The client computing device may request an initial amount of cloud services and subsequently may request cloud services that utilize a requested amount of cloud resources. The requested amount of cloud resources may be apportioned among the plurality of cloud service providers, to provide the requested cloud service. The computing platform may also support a cloud abstraction layer interacting between client computing device and one or more cloud providers so that the client computing device can obtain cloud service in a transparent manner.

Abstract: Disclosed are various embodiments for providing split-tunneled network connectivity on a per-application basis. A request to make a universal datagram protocol (UDP) connection to a remote host specified by an internet protocol (IP) address in the request is received from a network driver. A hostname lookup table is queried to determine a hostname associated with the IP address for the remote host. A policy is identified based on the hostname associated with the IP address for the remote host. Then, the UDP connection is routed based on the policy.

Abstract: An information processing system includes a management apparatus that manages construction of a cluster system including a plurality of information processing apparatuses, the management apparatus being configured to acquire information relating to a configuration of the cluster system, and generate definition information that defines the configuration of the cluster system on the basis of the acquired information, and the plurality of information processing apparatuses each including a memory configured to store templates and association information, each of the templates being a model of a construction program to be used for construction of the cluster system, each of the templates including information that designates an extraction method of information from the definition information, and a processor configured to acquire the definition information, perform generation of the construction program in accordance with the definition information, the plurality of templates, and the association information, and

Abstract: Disclosed herein are a method and system for protecting shared information. The information protection method includes setting shared information to be protected and a sharing counterpart with whom the shared information is to be shared, segmenting the shared information into a plurality of pieces and storing the segmented pieces in the terminals of respective users included in the sharing counterpart, and receiving the segmented pieces from the terminals of the users and restoring the shared information if all of the users included in the sharing counterpart accept the use of the shared information.

Abstract: Techniques of operating a server computer running an application for clients operating in multiple network namespaces involve multiplexing communications streams from clients hosted in different network namespaces into a single communication stream to present the requests to an application as if they originated from a single network namespace. Along these lines, a server computer commences operation by initiating a network namespace driver for each network namespaces and a multiplexing driver to multiplex network namespace communication streams received from the network namespace drivers. When the multiplexing driver receives an application access request from a network namespace driver within a network namespace communication stream, the multiplexing driver provides the request and a network namespace identifier identifying the network namespace driver to a stream head within a multiplexed communication stream that includes requests from other network namespace drivers.

Abstract: In some examples, a method includes acquiring status information of at least one resource of a data center, estimating, based on the status information, whether load on a power supply will exceed a threshold value at a time subsequent a time of the estimating, and in response to estimating that load on the power supply will exceed the threshold value at the time subsequent the time of the estimating, transmitting a command signal to a server rack that is coupled to the power supply to configure equipment of the server rack to operate at a reduced power supply level that is reduced from a power supply level at the time of the estimating and that is based on a service level agreement associated with the server rack.

Abstract: In one embodiment, a method comprises identifying, by a path computation element, essential parent devices from a nonstoring destination oriented directed acyclic graph (DODAG) topology as dominating set members belonging to a dominating set; receiving, by the path computation element, an advertisement message specifying a first dominating set member having reachability to a second dominating set member, the reachability distinct from the nonstoring DODAG topology; and generating, by the path computation element based on the advertisement message, an optimized path for reaching a destination network device in the nonstoring DODAG topology via a selected sequence of dominating set members, the optimized path providing cut-through optimization across the nonstoring DODAG topology.

Abstract: A connection from first terminal CL11, Cl12 to m of relay servers RS1 to RS4 is performed and a connection from second terminal CL21, CL22 to n thereof is performed to relay a communication between the terminals with one of the relay servers connected in common to both of the terminals set to be an active relay server. If a failure occurs in the active relay server, the other relay server connected in common to the first terminal and the second terminal is searched to relay a communication between the terminals with the relay server set to be an alternative relay server at the first terminal and the second terminal. Consequently, a data communication between the terminals is performed through the relay server selected optionally, and furthermore, adjustment for determining the alternative relay server is performed on the terminal side if a failure occurs in an active relay server.

Abstract: The present solution provides a network communication method, peers and a network communication system, the method includes establishing communication with a communication room peer, and obtaining a capacity of the communication room peer, and an IP address and a port of communication room; establishing communication with a pilot peer, obtaining an IP address and a port of the pilot peer, sending a capacity of the communication room and a total number of user peers to the pilot peer, so that the pilot peer creates a required number of communication room peers based on the capacity of the communication room and the total number of user peers; and establishing communication with the user peers, sending the IP address and the port of the communication room peer to the user peers, so that the user peers join in the corresponding communication room peer to perform communication.

Abstract: Concepts and technologies are disclosed herein for providing and using a distributed forwarding service. A service request can be received at a computing device and can relate to a distributed forwarding service. The computing device can configure the distributed forwarding service by determining a number of nodes that are to provide the distributed forwarding service and configuring a shared control function to control the nodes. The computing device can trigger instantiation of the distributed forwarding service. Instantiation of the distributed forwarding service can include dedicating a shared incoming switch for the distributed forwarding service, dedicating a shared outgoing switch for the distributed forwarding service, instantiating the nodes, and instantiating the shared control function. The distributed forwarding service can include the shared incoming switch, the shared control function, the nodes, and the shared outgoing switch.

Abstract: A system and method for dynamically implementing a resource budget based at least in part on receiving information that prompts a determination of whether to adjust a maximum amount of resources available for utilization at least in part by data storage operations. As a result of the determination, the system and method produce, based at least in part on the information, a resource budget that reflects an adjustment to the maximum amount of resources available for utilization at least in part by the data storage operations, and implements the resource budget such that performance of the data storage operations is adjusted in accordance with the adjustment to the maximum amount of resources available for utilization.

Abstract: In the context of a client sub-system that requires the use of directory services on behalf of a tenant (such as an overlay tenant), learning an identity of a server node, that can provide such directory services by: (i) sending, by the client sub-system to a first server node, a first directory service request for directory service for a first tenant; (ii) receiving, by the client sub-system, a first acknowledgement from a second server node; and (iii) learning, by the client sub-system, that the second server node can provide directory service for the first tenant based upon the first acknowledgement.

Abstract: A system to collect and store in a special data structure arranged for rapid searching massive amounts of data. Performance metric data is one example. The performance metric data is recorded in time-series measurements, converted into unicode, and arranged into a special data structure having one directory for every day which stores all the metric data collected that day. The data structure at the server where analysis is done has a subdirectory for every resource type. Each subdirectory contains text files of performance metric data values measured for attributes in a group of attributes to which said text file is dedicated. Each attribute has its own section and the performance metric data values are recorded in time series as unicode hex numbers as a comma delimited list. Analysis of the performance metric data is done using regular expressions.

Abstract: Systems and methods are described for link aggregation and dynamic distribution of network traffic in a switching Clos network. In one embodiment of the present invention, a spine switch of a Clos network learns a first mapping of a Media Access Control (MAC) address of a client device to a first port of the spine switch and a second mapping of the MAC of the client device to a second port of the spine switch. The spine switch aggregates the first mapping and the second mapping as a link group for the MAC address of the client device in a MAC address table and distributes network traffic destined for the MAC address of the client device among members of the link group.

Abstract: In one example, resilient software application upgrades in a virtual datacenter is disclosed, in which network flow data is periodically obtained between a plurality of APPVMs and/or containers and deep packet inspection information from firewalls associated with the obtained network flow data in the virtual datacenter. Dependency relationships between the plurality of APPVMs and/or containers are then obtained based on the periodically obtained network flow data, the periodically obtained deep packet inspection information, and a network flow criteria. An upgrade that is about to happen to a software residing in one or more of the plurality of APPVMs and/or containers is determined. One or more of the plurality of APPVMs and/or containers affected by the software upgrade is determined based on the determined dependency relationships. Snapshots of the affected one or more of the plurality of APPVMs and/or containers are then obtained before initiating the software upgrade.

Abstract: System and method for propagating control results in an environment is disclosed. At least one control for compliance is designated for an entity. The entity complies with the at least one control and the result is measured to generate a control result, the control result stored in a data store. The generated control result is selectively designated for propagation in an enterprise management system. The enterprise management system is configured to propagate the designated generated control result to another entity, based on the selective designation. The designation of propagation of control result is based on a relationship between the entity and another entity.

Abstract: Aspects of the disclosure provide systems and methods for establishing one or more Distributed Gateways located close to a location of a UE to facilitate faster packet delivery to the UE during transitions. Such transitions can include the UE transitioning its state, for example from being idle to connected to the network, but also includes operations in which the serving AP(s) for the UE changes. The method includes establishing at least two virtual network function (VNF) components (VFNCs) of a distributed gateway (D-GW), each VNFC associated with an access point (AP). Each VNFC buffers packets directed to the wireless device. The method further includes selecting at least one AP for serving the wireless device, and forwarding the buffered packets from the VNFC associated with the selected APs to the selected APs for forwarding to the wireless device. Packets buffered at the VNFCs of non-selected APs are discarded.

Abstract: A user equipment (UE) communication method, a device, and a communications system are provided. A first UE sends a notification message to a cellular network access device, wherein the notification message indicates that the first UE requests to be a beacon device. The first UE receives, from the cellular network access device, a message indicating that the first UE is the beacon device. The first UE sends detection signal, wherein the detection signal is for a second UE to detect the detection signal.

Abstract: Methods and systems for performing load balancing and session persistence in IP (e.g., IPv6) networks are described herein. Some aspects relate to a destination options extension header that may be used to store load balancing session persistence option (LBSPO) data, including a client identifier and a server identifier for each of a client and a server. A load balancer for a server farm can perform session persistence and load balancing based on the LBSPO information. The server can include its own address in the LBSPO data when responding to an initial request from a client. The client device may then address subsequent packets to the server selected for that session, thereby bypassing the load balancer after the session is established, thereby freeing the load balancer to handle other requests. The LBSPO information may remain unchanged for the duration of the session.

Abstract: In one embodiment, a method includes determining a location of a system responsive to location information received from at least one of a location sensor and a wireless device of the system, associating the location with a key present in the system to generate an authenticated location of the system, and determining whether the authenticated location is within a geofence boundary indicated in a location portion of a launch control policy (LCP) that provides a geographic-specific policy. Other embodiments are described and claimed.

Abstract: A method of translating network attributes of packets in a multi-tenant environment, and an appliance and a program product implementing the method. The method comprises the following steps: receiving a packet from a multi-tenant environment; referring to the information of tenants, translating a selected network attribute of the packet into a unique identity representing the packet in the multi-tenant environment; and forwarding the translated packet including the unique identity.

Abstract: Communication between callers and call center agents may be optimized. A request message may be transmitted to an application services module to connect with an agent associated with the selection. A contact number of a proxy server may be received from the application service module. The contact number may be utilized to connect with the agent via the proxy server.

Abstract: A method of congestion control (500) in a communications network is provided. The method comprises detecting congestion (501, 502) for data packets being transmitted along a data path between a sender and a receiver of the communications network, wherein the receiver accesses the communications network via a Radio Access Network (RAN), interrupting transmission (503, 505, 506) of data packets to the receiver during an idle period, and transmitting an indication (504) pertaining to the interruption of transmission to the RAN. Thereby, the RAN may use opportunities for switching to a lower radio state directly, or shortly after, the onset of the idle period, rather than triggered by an inactivity timer. In that way, utilization of air interface resources is improved and power consumption on the UE side is reduced. Further, a corresponding computer program, a corresponding computer program product, and a network node for congestion control in a communications network, are provided.

Abstract: File selection techniques that can handle overlapping module contexts provide flexible and reversible backup, restore, migration, deployment and synchronization operations. Both remote (administrative) control and local (user) control of the file selection are provided. Application and configuration specific templates are provided to a user from the remote administrator for further customization by selecting or de-selecting configurations, applications and/or individual files or configuration entries. The templates may be controlled geographically by the IP address or identity associated with the user. A user's interaction with the customization is saved and the order of changes is maintained, so that when the templates are updated, the user's customizations can be re-applied. The administrator may override user settings based on rules, which may also be geographically determined. The file selection may also be altered based on media type and location, e.g., local backup vs. server backup.

Abstract: The present invention relates to a method of and apparatus for configuring a link in a label switching communication network. The method implemented in a network node comprises determining formation of a communication link between the network node and another network node and sending link formation information to a link manager. The method further comprises receiving link configuration information for the communication link from the link manager and configuring the communication link in response to the received link configuration information.

Abstract: A method of translating network attributes of packets in a multi-tenant environment, and an appliance and a program product implementing the method. The method comprises the following steps: receiving a packet from a multi-tenant environment; referring to the information of tenants, translating a selected network attribute of the packet into a unique identity representing the packet in the multi-tenant environment; and forwarding the translated packet including the unique identity.

Abstract: A management controller may monitor temperatures of information handling resources in an information handling system and identify abnormalities associated with the information handling resources. When a power down sequence is initiated, the management controller may use any identified abnormalities as well as user input indicating a particular information handling resource for service. The management controller may perform service mode cooling to make the information handling system safe for servicing as soon as possible. The user may be alerted when the temperature conditions indicate safe handling of identified information handling resources. The management controller may also control an electromechanical cover preventing access to the information handling resources.

Abstract: Sharing resources in a virtualized environment includes providing access by a plurality of virtual platform clusters to distributed resources of the virtualized environment, where each of the virtual platform clusters has a director that manages resources for one or more virtual machines in a corresponding one of the virtual platform clusters. Sharing resources also includes dynamically managing sharing of the distributed resources among the plurality of virtual platform clusters according to a sharing arrangement, where the distributed resources include a plurality of objects. A first subset of the plurality of objects is shared among the plurality of virtual platform clusters differently than a second subset of the plurality of objects. At least some of the objects that are shared are also copied locally to different ones of the virtual platform clusters.

Abstract: To verify compliance with a data access policy, a query result including data specified by a requesting entity and a representation of a data access policy is received from a database. Based on the representation of the data access policy included in the query result, it is verified whether the requesting entity is permitted to access the data included in the query result. Transmission of the data included in the query result to the requesting entity is controlled responsive to the verification. Related methods, systems, and computer program products are also discussed.

Abstract: A streams manager monitors operator performance of a streaming application to determine when the performance of an operator needs to be improved or optimized. The streams manager in conjunction with a cloud manager automatically determines one or more preferred virtual machines in a cloud with a specified streams infrastructure that best meet the needs of the underperforming operator or application component based on physical location attributes of the preferred virtual machines. The cloud manager determines the physical location attributes of the candidate virtual machines. The streams manager or the cloud manager can then determine a preferred virtual machine of the candidates to deploy the operator based on the physical location attributes. The streams manager then modifies the flow graph so one or more operators of the streaming application are deployed to a preferred virtual machine determined according to the physical location attributes of the preferred virtual machine.

Abstract: Applying a security policy to an application session, includes recognizing the application session between a network and an application via a security gateway, determining by the security gateway a user identity of the application session using information about the application session, obtaining by the security gateway the security policy comprising network parameters mapped to the user identity, and applying the security policy to the application session by the security gateway. The user identity may be a network user identity or an application user identity recognized from packets of the application session. The security policy may comprise a network traffic policy mapped and/or a document access policy mapped to the user identity, where the network traffic policy is applied to the application session. The security gateway may further generate a security report concerning the application of the security policy to the application session.

Abstract: A multi-tenant system is realized by the Tunneling protocol. The multi-tenant system includes a server apparatus on which a virtual machine with tenant identification data operates; an equipment whose tenant identification data cannot be recognized; a plurality of switches configured to transfer a packet based on flow entries; and a controller configured to set the flow entries to the switches. The plurality of switches includes a first switch connected with the server apparatus and a second switch connected with the equipment. The second switch rewrites the header of the packet sent from and received by the equipment based on an address translation table. Thus, the equipment becomes available.

Abstract: Provided is a device and a method for providing network virtualization, in which a method of dynamically mapping a processor includes extracting tenant information on a tenant and information on a virtual machine (VM) generated by a Cloud OS or controller; classifying virtual machine queues (VMQs) and processors to process the VMQs by tenant, and dynamically mapping the VMQs onto the processors by tenant.

Abstract: Techniques for managing power loads of a data center include electrically coupling a data center infrastructure power load and a data center IT power load in a power distribution system having a specified power capacity, the infrastructure power load including a plurality of infrastructure power loads associated with at least one of a data center cooling system, a data center lighting system, or a data center building management system, and the IT power load including a plurality of IT power loads associated with a plurality of rack-mounted computing devices; determining that a predicted amount of the IT power load is about equal to or greater than a threshold power value; throttling the infrastructure power load to reduce a portion of the power capacity used by the infrastructure power load; and based on throttling the infrastructure power load, increasing another portion of the power capacity available to the IT power load.

Abstract: Methods and systems for performing load balancing and session persistence in IP (e.g., IPv6) networks are described herein. Some aspects relate to a destination options extension header that may be used to store load balancing session persistence option (LBSPO) data, including a client identifier and a server identifier for each of a client and a server. A load balancer for a server farm can perform session persistence and load balancing based on the LBSPO information. The server can include its own address in the LBSPO data when responding to an initial request from a client. The client device may then address subsequent packets to the server selected for that session, thereby bypassing the load balancer after the session is established, thereby freeing the load balancer to handle other requests. The LBSPO information may remain unchanged for the duration of the session.

Abstract: A method for providing Layer 2 link attributes to a user includes transmitting a query using a Layer 3 network protocol to at least a first network element to determine a link attribute for a Layer 2 link between the first network element and a second network element in a network, receiving a response indicative of the link attribute for the Layer 2 link, determining based on the received response a graphical line attribute corresponding to the link attribute according to a predetermined mapping of link attributes to graphical line attributes, and updating a line element at a graphical user interface according to the graphical line attribute, the line element connecting at the graphical user interface a first graphical element corresponding to the first network element and a second graphical element corresponding to the second network element.

Abstract: Applying a security policy to an application session, includes: recognizing the application session between a network and an application via a security gateway; determining by the security gateway a user identity of the application session using information about the application session; obtaining by the security gateway the security policy comprising network parameters mapped to the user identity; and applying the security policy to the application session by the security gateway. The user identity may be a network user identity or an application user identity recognized from packets of the application session. The security policy may comprise a network traffic policy mapped and/or a document access policy mapped to the user identity, where the network traffic policy is applied to the application session. The security gateway may further generate a security report concerning the application of the security policy to the application session.

Abstract: A method, system, and program product comprising determining a set of objects to be represented in a computer model, determining the relationships between the object to be represented in the computer model, and creating layered over and underlying relationship between the determined set of objects.

Abstract: According to one embodiment system and method provides executing at least a portion of a cloud computing task on a client terminal. The system and method further includes checking whether the client terminal is recharging or not and accessing a server for executing the cloud computing task if the terminal is recharging.

Abstract: In one embodiment, a node may determine a topology of a plurality of reporting nodes within a directed acyclic graph (DAG) in a computer network. The reporting nodes may then be assigned to one of a plurality of reporting groups, where reporting nodes are allowed to report only during designated time windows corresponding to their assigned reporting group. The reporting nodes may then be informed of at least their own assignment to a particular reporting group. In another embodiment, a particular reporting node may join the DAG, and may also receive an assignment to one of a plurality of reporting groups. Accordingly, the particular reporting node may also determine designated time windows corresponding to the assigned reporting group, where the particular reporting node is allowed to report only during the designated time windows.