Abstract: Techniques that enable a hypervisor to (1) maintain shared memory pages and (2) handle memory accounting for VMs that are suspended to and resumed from the volatile memory of a host system are provided. Regarding (1), the hypervisor can maintain shared memory pages in volatile memory across the suspend-to-memory and resume-from-memory operations, without having to save their reference counts. Regarding (2), the hypervisor can keep track of the volatile memory reserved and consumed by VMs as they are suspended and resumed, without erroneously double counting that memory.

Abstract: Described embodiments provide systems and method for determining action insights to address, correct or fix application failures. A device can identify an assignment of a user to a virtual machine and the assignment can enable launch of an application with use of the same virtual machine on behalf of the user. The virtual machine can be one of a delivery group of virtual machines. A threshold can be determined for the virtual machine that indicates a likely failure of the virtual machine to launch the application based data about performance of the delivery group. The device can modify the assignment of a user from the virtual machine to another virtual machine of the delivery group based on a comparison of a load on the virtual machine and the determined threshold, so as to avoid failure of the application to launch.

Abstract: A device may receive and store credentials identifying security levels of users for access to functionalities of an on-premises device, and may receive a credential of a user and a request to access a functionality of the on-premises device. The device may determine whether a security level of the credential matches a first security level of the credentials, and may reject the request when the security level fails to match the first security level. The device may determine, when the security level matches the first security level, whether a computing resource of the on-premises device matches a computing resource of the first security level, and may provide the user with access to the computing resource when the computing resource matches the computing resource of the first security level. The device may reject the request when the computing resource fails to match the computing resource of the first security level.

Abstract: The present disclosure is directed to distributing processing capabilities throughout different nodes in a wireless mesh network. Methods and apparatus consistent with the present disclosure increase the efficiency of communications in a wireless mesh network because they help minimize the need to forward communications to other nodes in the wireless mesh network such that an evaluation can be performed. Apparatus and methods consistent with the present disclosure may distribute ratings or verdicts associated with previous requests to access data to different nodes in a wireless mesh network without generating additional wireless communications through the wireless mesh network. Apparatus and methods consistent with the present disclosure distribute content ratings to different nodes in a wireless network such that different wireless nodes may block redundant requests to undesired content without increasing messaging traffic.

Abstract: Systems and methods are disclosed for a geofence-based location tracking and notification triggering system. One of the methods includes obtaining location information associated with a user device; accessing information indicating entities located within one or more threshold distances of the obtained location; determining whether a user of the user device satisfies constraints specified by the entities; and generating a notification to be provided to the user device, the notification indicating information associated with at least one entity for which the user satisfies specified constraints. Preferably, the notification is in the form of a text messages, which provides advantages for real-time notifications with increased spatial relevance to a user.

Abstract: Techniques are provided for on-demand creation and/or utilization of containers and/or serverless threads for hosting data connector components. The data connector components can be used to perform integrity checking, anomaly detection, and file system metadata analysis associated with objects stored within an object store. The data connector components may be configured to execute machine learning functionality to perform operations and tasks. The data connector components can perform full scans or incremental scans. The data connector components may be stateless, and thus may be offlined, upgraded, onlined, and/or have tasks transferred between data connector components. Results of operations performed by the data connector components upon base objects may be stored within sibling objects.

Abstract: A method for automatically reregistering a clone virtual machine with a cloud security monitoring service is provided. The method generally includes detecting a connection between a cloud agent running in a virtual machine on a host and a hypervisor module on the host. In response to detecting the connection, the cloud agent queries the hypervisor module for one or more first identifiers of the virtual machine. The method generally includes checking a database, by the cloud agent, for one or more second identifiers stored in the database matching the one or more first identifiers received from the hypervisor module and, based on finding no second identifiers stored in the database matching the one or more first identifiers, sending a request to the cloud security monitoring service to register the virtual machine with the cloud security monitoring service.

Abstract: Techniques are provided for reducing signaling latency in multi-link devices (MLDs). An example method of providing latency sensitive information with a MLD includes receiving downlink data packets from a station via a first radio link, performing radio frequency sensing with a second radio link, detecting a latency sensitive event, and transmitting an indication of the latency sensitive event.

Abstract: A method for recovering a data center, includes making a determination, by a cloud module, that the data center has experienced a failure; sending, by the cloud module and in response to the determination, an infrastructure file including data center infrastructure information to a client device; receiving, after sending the infrastructure file, a confirmation from the client device that at least a portion of the data center infrastructure is installed; sending, from the cloud module to the data center module, a snapshot in response to the confirmation; deploying, by the data center module, the snapshot at the data center; validating, by the data center module, complete connectivity of data center; sending, by the data center module, a heartbeat signal to the cloud module in response to the validating; and sending, by the cloud module, a standby signal to disaster recovery resources in response to receiving the heartbeat signal.

Abstract: An apparatus and method is provided for simulating a physical computer system using virtualization. The disclosed system virtualizes devices of a physical computer system by modeling hardware and software components that are physically present within the physical computer system. The system simulates changing at least one of a piece of hardware or software in the virtualized computer system and assesses an effect of the change in the virtualized computer system to determine a potential effect of the change if the change were implemented on the physical computer system.

Abstract: One or more of an autonomous vehicle, a user terminal, and a server of the present disclosure may be linked or converged with an artificial intelligence (AI) module, an unmanned aerial vehicle (UAV), a robot, an augmented reality (AR) device, virtual reality (VR), a 5G service-related device, and the like. There is provided a method for providing information in a server according to an embodiment of the present disclosure includes receiving a request message including information related to generation of a virtual machine (VM) from an operating apparatus, generating a VM corresponding to the operating apparatus based on the request message, receiving information acquired at the operating apparatus, performing computation corresponding to the acquired information by use of the VM, and transmitting information related to a result of the computation to the operating apparatus.

Abstract: In an approach to providing virtualized hardware resources, one or more reconfigurable hardware devices (RHDs) are configured to instantiate a first virtual System-on-Chip (vSoC) instance of one or more vSoC instances, the first vSoC instance implementing at least one virtualized system component.

Abstract: A method and apparatus for mapping a virtual machine in a cloud infrastructure to a network port. The method includes: obtaining, by a smart monitoring device distinct from the virtual machine and a network appliance, a first location of the virtual machine in the cloud infrastructure; mapping, by the smart monitoring device, the first location of the virtual machine to a first source port in the network appliance and a first destination port in the network appliance; based on a determination that the virtual machine is not at the first location, obtaining, by the smart monitoring device, a second location of the virtual machine in the cloud infrastructure; and based on the determination that the virtual machine is not at the first location, mapping, by the smart monitoring device, the second location of the virtual machine to a second source port in the network appliance and a second destination port in the network appliance.

Abstract: A data intake and query system can manage the search of large amounts of data using one or more processing nodes. The data intake and query system can identify a group of processing nodes and assign a first processing node of the group to download and search a particular data group based on a first node map. The data intake and query system may identify an action associated with the first processing node. The data intake and query system can cause a particular processing node of the group to download the particular data group based on a second node map and transmit an authorization to perform the action to the first processing node.

Abstract: A parallel processing architecture includes a CPU, a task pool populated by the CPU, and a plurality of autonomous co-processing cells each having an agent configured to proactively interrogate the task pool to retrieve tasks appropriate for a particular so-processor. Each co-processor communicates with the task pool through a switching fabric, which facilitates connections for data transfer and arbitration between all system resources. Each so-processor notifies the task pool when a task or task thread is completed, whereupon the task pool notifies the CPU.

Abstract: A set of virtual machines (VMs) with different guest operating systems installed is initially booted and prepared to facilitate rapid creation, or “forking,” of a child VM(s) for malware analysis of a software sample. Because malicious code may be packaged for a specific operating system version, subsets of the VMs may have different versions of the same guest operating system installed. Upon detection of a sample indicated for malware analysis, a child VM(s) running the appropriate guest operating system is created based on a corresponding one(s) of the set of VMs. A process in which the corresponding VM(s) has been booted is forked to create a child process. A child VM which is a copy of the VM booted in the parent process is then created in the child process. The sample is then sandboxed in the child VM for analysis to determine if the sample comprises malware.

Abstract: A method for application migrating from a first cluster to a second cluster. The method may include detecting application migration request from the first cluster to the second cluster for performing application migration; identifying first volumes associated with the first cluster that are used by the application; establishing data copying from the first volumes of a first storage device associated with the first cluster to second volumes of a second storage device associated with the second cluster; determining if a copy condition is met based on the data copying; for meeting the copy condition, stopping the application on the first cluster; flushing uncopied data from the first volumes to the second volumes; determining whether the flushing of the uncopied data is completed; and for the flushing of the uncopied data being completed, deploying the application on the second cluster.

Abstract: Providing high availability for backup and restore applications in public clouds is described. A system creates a first virtual machine and a second virtual machine for at least one zone of a public cloud. The system creates a disk in the public cloud, and enables a selection to attach the disk as a shared disk to the first virtual machine and/or the second virtual machine; The system creates object storage that stores backup data for the first virtual machine and/or the second virtual machine. The system deploys the first virtual machine as an active node that executes a backup and restore application and the second virtual machine as a passive node that executes the backup and restore application when the active node fails to execute the backup and restore application.

Abstract: When a coordinator of a sharded DBMS receives from a client a query that has an XML operator that references a column in a sharded table and returns an XML image having an XML image type, then the coordinator issues a remote query that uses a new operator to ensure that the shard returns a TBX BLOB having a TBX type. In response to receiving the remote query with the new operator, each shard extracts a binary large object (BLOB) out of the XML image at the shard and returns the TBX BLOB data to the coordinator. In addition, the sharded DBMS provides a make-XML operator that the coordinator uses to work with the TBX BLOB received from each shard and recreate an XML type image, which is the result that the client expects.

Abstract: A container orchestration platform manages a plurality of instances of resources including a first custom resource and a second custom resource. An API server of the container orchestration platform receives a request to delete an instance of the second custom resource; determines whether instance data associated with the instance of the second custom resource has a backreference identifying an instance of the first custom resource, the backreference indicating the instance of the first custom resource is dependent on the instance of the second custom resource; and in response to determining that the instance data has the backreference to the instance of the first custom resource, bypasses deletion of the instance of the second custom resource.

Abstract: Systems and methods for memory management for virtual machines. An example method may comprise running, by a host computer system, a Level 0 hypervisor managing a Level 1 virtual machine running a Level 1 hypervisor which manages a Level 2 virtual machine. The Level 1 hypervisor may detecting execution of an operation that prevents modification to a set of entries in a Level 2 page table and generate a shadow page table where each shadow page table entry of the plurality of shadow page table entries maps a Level 2 guest virtual address of a Level 2 address space associated with the Level 2 virtual machine to a corresponding Level 1 guest physical address of a Level 1 address space associated with the Level 1 virtual machine. The Level 0 hypervisor may generate a Level 0 page table.

Abstract: A mini-cloud system with a mobile device host has been described to enable subscription or service model for computing infrastructure, software, and digital content. The system enables a thin laptop, or tablet that can be stateless devices to connect to instances of virtual machines or virtual devices running on the smartphone or mobile devices. The system allows device consolidation to support a mobile environment to build devices used on the go as modular components by removing duplicative components to reduce cost or electronic waste.

Abstract: An information handling system may include a first host system, comprising a first processor and a first network interface, and a second host system, comprising a second processor and a second network interface. The first network interface may be configured to accelerate migration of a designated virtual resource from the first host system to the second host system.

Abstract: Methods and systems for automatic installation of applications against a service instance of an online store are described. A change in status of a service instance for the online store is detected. A functionality associated with the changed status is identified, where the functionality is currently absent from the service instance. A software application is identified to provide the functionality. The identified software application is automatically installed against the service instance, to enable the functionality for the online store.

Abstract: Disclosed is a method of resource encryption and display. The method includes: performing file splitting and local encryption on a pre-downloaded splash screen resource file; calculating a current true time according to a correct time obtained from a server and a device power-on time difference of a client, and determining whether a current device time is reliable according to the true time; and when the current device time is reliable, directly obtaining the splash screen resource file through decryption and splicing, and displaying the splash screen resource file.

Abstract: A virtual machine monitoring device allows for securing a network band of a virtual machine in a virtualization infrastructure system. To achieve this, the virtual machine monitoring device includes: a data acquisition unit that collects hosts on which virtual machines operate, operation statuses of the virtual machines, and used network bands of the hosts; a monitoring unit that specifies, when the used network bands of the hosts exceed a predetermined network band threshold value, virtual machines that operate on the hosts and the operation statuses of which do not satisfy a predetermined reference; a migration determination unit that determines a virtual machine to be migrated among the specified virtual machines and determines a migration destination host; and a migration instruction unit that instructs the virtualization infrastructure control device to perform the migration.

Abstract: An illustrative file indexing approach enhances what was previously possible with hypervisor-free live browsing of virtual machine (VM) block-level backup copies. Capabilities are described for indexing files discovered in VM block-level backup copies, including file content. The illustrative file indexing functionality activates a live-browse session to discover files present within VM block-level backup copies and indexes file names and directory structures as created by an original source VM, resulting in an illustrative file index. The illustrative file indexing functionality optionally indexes file contents within VM block-level backup copies, resulting in an illustrative content index. The file index and content index are retained in persistent data structure(s) stored apart from the VM block-level backup copies. The indexes are searchable without mounting or live-browsing the VM block-level backup copies. In some embodiments the file index and the content index are consolidated.

Abstract: A method for scheduling input/output (I/O) commands is described. The method includes receiving, by an I/O scheduler, an I/O command from an application; generating, by the I/O controller, an I/O resource requirement based on the I/O command; determining, by a traffic controller, that an amount of available resources satisfies a criteria based on the I/O resource requirement; and sending, by the traffic controller, the I/O command to a queue in response to the criteria being satisfied.

Abstract: In an aspect, a field-deployable hardware apparatus includes a stackable housing, a graphical processing unit disposed within the stackable housing, the graphical processing unit comprising a first plurality of processor cores, a general-purpose processor disposed within the stackable housing, the general-purpose processor comprising a second plurality of processor cores, at least a binary unit system disposed within the stackable housing and connecting the graphical processing unit to the general-purpose processor, and a memory communicatively connected to at least a core of the first plurality of cores and the second plurality of cores, the memory containing instructions configuring the at least a core to execute a hypervisor, wherein the hypervisor generates a virtual environment on the at least a core.

Abstract: In an example embodiment, a solution is provided that provides parallel executions of privileged actions in an audited and secured way. This highly impacts the resiliency of applications because it allows for quick responses in outage situations and makes maintenance activities that could prevent the outages less cumbersome.

Abstract: A network management device executes acquisition processing, determination processing, and implementation processing. The acquisition processing is for acquiring notification information that is issued in response to a failure occurring in a physical server or a virtual machine constructed in the physical server in a network virtual environment. The determination processing is for determining, in a case where the notification information is acquired, whether or not healing processing for recreating the virtual machine in which the failure has occurred needs to be implemented, based on information related to the failure. The implementation processing is for automatically implementing the healing processing in a case where it is determined that the healing processing needs to be implemented.

Abstract: In accordance with an embodiment, described herein are systems and methods for use with a microservices or other computing environment, including a web server together with related libraries and features usable to build cloud-native applications or services. The system enables configuration of a server that can operate to serve requests via multiple network or communication protocols, such as for example HTTP1, gRPC over HTTP2, and/or WebSocket. A route abstraction allows each protocol to have its own routing, e.g., an HTTP routing. A sub-abstraction can provide a more specific route, for example as an HTTP1 route, or an HTTP2 route. For a request message received via a particular protocol, the system can pick up the appropriate route for the request, and process it accordingly.

Abstract: Provided are a data encoding device, a data transmission system, a data encoding method, and a data encoding program that can compress a data volume and transmit the compressed data without reducing the amount of information in text data. The data encoding device includes: an input unit to which text data created based on weather prediction information on a two-dimensional map is input; an encoding unit configured to encode the text data in accordance with a predetermined conversion list to create encoded text data; and a communication unit configured to transmit the encoded text data via text data communication.

Abstract: A vehicle control device includes a re-use determination section and a verification section. When the software of a virtual machine is to be verified, the re-use determination section decides, in accordance with an index assigned beforehand to the virtual machine, whether or not to re-use a verification result of common software that has been obtained in verification of the software of another virtual machine. When the re-use determination section decides to re-use the verification result of the common software obtained in the verification of the software of the other virtual machine, the verification section re-uses the verification result of the common software obtained in the verification of the software of the other virtual machine and verifies VM software of the virtual machine.

Abstract: Processing circuitry (10) performs processing in one of at least three domains (82, 84, 86, 88). Address translation circuitry (16) translates a virtual address of a memory access performed from a current domain to a physical address in one of a plurality of physical address spaces (61) selected based at least on the current domain. The domains include a root domain (82) for managing switching between other domains. The physical address spaces (61) include a root physical address space associated with the root domain (82), separate from physical address spaces associated with other domains.

Abstract: Techniques are described for creating a network-link between a first virtual network in a first cloud environment and a second virtual network in a second cloud environment. The first virtual network in the first cloud environment is created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment. The network-link is created based on one or more link-enabling virtual networks being deployed in the first cloud environment and the second cloud environment.

Abstract: Techniques are disclosed for migrating one or more services from an edge device to a cloud computing environment. In one example, a migration service receives a request to migrate a first set of services from the edge device to the cloud computing environment. The migration service identifies a hardware profile of a computing device (or devices) of the cloud computing environment that matches the edge device, and then configures the computing device to execute a second set of services that corresponds to the first set of services. The migration service establishes a communication channel between the edge device and the computing device, and then executes a set of migration operations such that the second set of services is configured to execute as the first set of services. The computing device may operate in a virtual bootstrap environment or dedicated region of the cloud computing environment.

Abstract: Disclosed in some examples, are methods, systems, devices, and machine-readable mediums which solve the above problems using a global shared region of memory that combines memory segments from multiple CXL devices. Each memory segment is a same size and naturally aligned in its own physical address space. The global shared region is contiguous and naturally aligned in the virtual address space. By organizing this global shared region in this manner, a series of three tables may be used to quickly translate a virtual address in the global shared region to a physical address. This prevents TLB thrashing and improves performance of the computing system.

Abstract: Techniques are described for learning an unknown virtual network information, such as an virtual Internet Protocol (IP) address, of a pod in a virtual network. In some examples, a virtual router executing at a computing device may receive an Address Resolution Protocol (ARP) packet from a virtual execution element in the virtual network, the virtual execution element executing at the computing device. The virtual router may determine, based at least in part on the ARP packet, whether virtual network information for the virtual execution element in a virtual network is known to the virtual router. The virtual router may, in response to determining that the virtual network information of the virtual execution element in the virtual network is not known to the virtual router, perform learning of the virtual network information for the virtual execution element.

Abstract: A network monitoring apparatus sets monitoring targets that are physical interfaces included in leaf nodes and spine nodes, links connecting the leaf nodes and the spine nodes, transfer function units included in the spine nodes, and an overlay tunnel set between the originating-side leaf node on the terminating-side leaf node, aggregates monitoring results at the respective monitoring targets, and determines the failure type of a failure and the degree of influence of the failure on the basis of the type of the monitoring target in which the failure has occurred and the occurring event.

Abstract: Techniques described herein relate to a method for performing pre-backup tasks. The method includes obtaining, by a proxy host, a snapshot request associated with a full backup of a file system stored in a network attached storage (NAS) from a backup manager; in response to obtaining the snapshot request: instantiating a NAS container to obtain a snapshot of the file system; providing the snapshot to the NAS container; after providing the snapshot to the NAS container: generating, using the snapshot, slices associated with the file system; sorting the slices based on average file sizes associated with each slice; grouping the slices based on the average file sizes and group criteria to generate slice groups; generating a slice list specifying the slices and the slice groups; and providing the slice list to the backup manager.

Abstract: A system and method for providing cloud virtualization (SV) is disclosed. According to one embodiment, a system includes a transactional cloud manager and a compute cluster connected to the transactional cloud manager. The compute cluster includes a system monitor and a control manager in a host. A virtual machine runs on the host, wherein the virtual machine has a VM system monitor and a VM control manager. The transactional cloud manager creates virtual machine clusters on the host.

Abstract: Systems, methods and/or computer program products for managing the temperature of datacenter during a period of malfunction or inoperability of the cooling system responsible for maintaining temperatures within the datacenter. Temperatures of the datacenter's computing systems are monitored by thermal imaging systems and/or sensors. Computing systems are also monitored for how frequently the systems are accessed during a defined period of time and the number of mission critical deployments by each computing system. Collected parameters, including temperature, frequency of access and number of running mission critical applications are imputed into a scoring algorithm which uses the collected parameters and weightings to generate a ranking of computing systems to shutdown sequentially in response to rising temperatures.

Abstract: A system is disclosed that includes capabilities by which a nested sub-resource residing in a service tenancy can access a customer-owned resource residing in a customer tenancy without the use of a cross-tenant policy. The disclosed system provides the ability for a nested sub-resource residing in a service tenancy to obtain the resource principal identity of a higher-level resource residing in the customer tenancy and use the identity of the higher-level resource to access a customer-owned resource residing in the customer tenancy. Using the resource principal identity of its higher-level resource, the sub-resource can access a customer-owned resource that resides in a customer tenancy in a seamless way without having to write a cross-tenancy policy statement that provides permission to the sub-resource to access the customer-owned resource.

Abstract: Methods and systems for provisioning resources for games executed by a cloud gaming system includes accessing online interactions of a plurality of users in relation to a game. The online interactions are processed to classify discussion features obtained from online social communications. A model is generated to predict game use, using the classified discussion features. The model is updated with online interactions received over time. Resources for the game are provisioned at a data center. The provisioning is done by accessing the model and identifying adjustments in the provisioning for an anticipated usage spike that is to occur by a plurality of users, based on current online interactions.

Abstract: Various embodiments provide for replicating a share across deployments of a data platform, where the share can be on a source deployment and the share can be replicated on one or more target deployments, and where the share is replicated with one or more database objects of the source deployment associated with the share. Some embodiments analyze the share to be replicated and, based on the analysis, determine one or more database objects that would be replicated to the one or more target deployments to enable a replica of the share on the one or more target deployments.

Abstract: A memory system is provided to include a first virtual function controller in communication with a first virtual machine of a host and configured to receive, from the first virtual machine, a command for accessing a namespace and provide, to the first virtual machine, a response to the command; a second virtual function controller in communication with a second virtual machine of the host and configured to be coupled to the namespace and receive the command from the first virtual function controller based on status information of the first virtual function controller and the second virtual function controller; a buffer memory configured to provide an area for data corresponding to the command; and a memory controller configured to access the namespace based on the command and provide the buffer memory with the data.

Abstract: End-to-end topology stitching and representation is described. An example includes instructions for receiving, at a server, a set of configuration data for an infrastructure stack, the set of configuration data including configuration data for each of a plurality of domains of the infrastructure stack; parsing the received set of configuration data; stitching together an end-to-end topology for the plurality of domains of the infrastructure stack based at least in part on the parsed set of configuration data; and generating a representation of the end-to-end topology of the infrastructure stack.

Abstract: A secure, modular multi-tenant machine learning platform is configured to: receive untrusted code supplied by a first tenant; perform a security scan of the untrusted code to determine whether the untrusted code satisfies a set of one or more security requirements; responsive to determining that the untrusted code satisfies the security requirement(s): deploy the untrusted code to a runtime execution environment; deploy a machine learning model associated with the first tenant to the runtime execution environment, the untrusted code being configured to perform one or more functions using the machine learning model; receive a set of untrusted code supplied by a second tenant; perform a security scan of the untrusted code to determine whether the untrusted code satisfies the security requirement(s); and responsive to determining that the untrusted code does not satisfy the security requirement(s): refraining from deploying the untrusted code to a runtime execution environment.

Abstract: Methods and apparatus for providing page migration of pages among tiered memories identify frequently accessed memory pages in each memory tier and generate page hotness ranking information indicating how frequently memory pages are being accessed. Methods and apparatus provide the page hotness ranking information to an operating system or hypervisor depending on which is used in the system, the operating system or hypervisor issues a page move command to a hardware data mover, based on the page hotness ranking information and the hardware data mover moves a memory page to a different memory tier in response to the page move command from the operating system.