Abstract: An apparatus includes at least one processing device configured to establish a plurality of paths between at least one initiator of a host device and a plurality of targets of respective storage nodes of a distributed storage system, and for each of a plurality of input-output operations generated in the host device for delivery to the distributed storage system: to access a target lookup service of the host device to determine a particular one of the storage nodes that stores data for a logical storage volume and offset targeted by the input-output operation, to select a particular one of the plurality of paths from the initiator to one of the targets on the particular storage node, and to send the input-output operation to the particular storage node over the selected path. The initiator and the targets are illustratively configured in accordance with a designated standard storage access protocol.

Abstract: A logical routing element (LRE) having multiple designated instances for routing packets from physical hosts (PH) to a logical network is provided. A PH in a network segment with multiple designated instances can choose among the multiple designated instances for sending network traffic to other network nodes in the logical network according to a load balancing algorithm. Each logical interface (LIF) of an LRE is defined to be addressable by multiple identifiers or addresses, and each LIF identifier or address is assigned to a different designated instance.

Abstract: Technology for configuring and executing a shallow virtual machine to enhance memory protection between different portions of user space memory of a particular computing process. An example method involves: receiving, by a processor of a host, a request to create a computing process comprising a first and second executable code, wherein the computing process comprises an instruction to cause the processor to switch between first and second page table structures; loading the first and second executable code into memory of the host, wherein the first page table structure comprises mapping data for the first executable code and for the second executable code and wherein the second executable code comprises driver code of a device; updating the second page table structure to disable execution of the first executable code and to provide the second executable code with access to the device; and restricting the first executable code from accessing the device.

Abstract: Provided are a proxy end registration method, a proxy end registration system, a computer-readable memory medium, and a terminal. The method includes: receiving, by a management end, heartbeat information sent by a proxy end, and determining whether a management end database contains a UUID in the heartbeat information, wherein the heartbeat information is generated according to a MAC address of the proxy end and timestamp information; if not, determining whether a first hash counter in the heartbeat information is 0, the first hash counter being used for indicating a heartbeat IP transformation state of the heartbeat information; if the first hash counter is not 0, notifying the proxy end of the need to re-register; or if the first hash counter is 0, allowing the proxy end to register.

Abstract: An apparatus includes a processor to: receive a request to perform a job flow; within a performance container, based on the data dependencies among a set of tasks of the job flow, derive an order of performance of the set of tasks that includes a subset able to be performed in parallel, and derive a quantity of task containers to enable the parallel performance of the subset; based on the derived quantity of task containers, derive a quantity of virtual machines (VMs) to enable the parallel performance of the subset; provide, to a VM allocation routine, an indication of a need for provision of the quantity of VMs; and store, within a task queue, multiple task routine execution request messages to enable parallel execution of task routines within the quantity of task containers to cause the parallel performance of the subset.

Abstract: Embodiments of a multitenant content server that employs embodiments of a database architecture for use in multitenant environments that includes a global partition and a tenant partition for each tenant. These partitions can be accessed using sessions corresponding to the partitions and interfaces associated with the tenants.

Abstract: One example method includes collecting telemetry data for each of a group of virtual machines (VM), and each of the VMs is associated with a user, collecting usage data for each of the VMs, creating a user profile definition for each user, and the user profile definition is created based on the telemetry data and usage data of the VMs associated with that user, creating, for each user, a user profile that is based on the user profile definition for that user, clustering the users based on similarity of their respective user profiles, and generating a recommended VM hardware configuration for a VM of one of the users.

Abstract: Some embodiments provide a method that configures a virtual datacenter that includes a set of workloads executing on hosts in a public cloud and an edge gateway executing on a particular host for handling data traffic between the workloads and different external entities having different sets of network addresses. The method configures a router to execute on the particular host to route data messages between the edge gateway and an underlay network of the public cloud. The router has at least two different interfaces for exchanging data messages with the edge gateway, each router interface corresponding to an interface of the edge gateway. The edge gateway interfaces enable the edge gateway to perform different sets of services on data messages between the workloads and the external entities. The method configures the router to route traffic received from the external entities and addressed to the workloads based on source network addresses.

Abstract: A system, method, and computer program product for implementing dynamic telecom network agent filtering is provided. The method includes retrieving peripheral data associated with user equipment (UE) enabled with respect to a telecom network associated with a telecom network hardware device. The peripheral data is mapped with a pre-defined filter selection model and a filtering agent model is selected. Likewise, filtering agents associated with the UE are selected and environmental characteristics associated with the telecom network are retrieved. A location of the UE is tagged and the filtering agents are pushed to the UE. Network commands associated with execution of the filtering agents are generated and the filtering agents are executed with respect to the UE. In response, noise and distortion occurring during operation of the UE with respect to the telecom network is reduced.

Abstract: A hybrid access configuration function (HACF) is deployed as a virtual or physical network function (V/PNF) that can reconfigure the capacity of access network devices based on HCPE usage demands, and/or perform traffic engineering by switching to best access paths based on packet flow's service requirements or by shifting traffic from one sub-flow to another. This is achieved by HACF's direct interfaces to various device control functions, including control and management functions of RAN, SON, PON, and SMF, as well as the control function of HAG/HCPE to manage resources. Furthermore, HACF can create new instances of virtual HAGs at the access network closer to the user clusters when extra HAG capacity is needed.

Abstract: Systems and method for migrating a web application from a source environment to a cloud service. A cloud service system accesses a temporary container containing a manifest and a plurality of web parts for the web application. The manifest includes a list of contents of the temporary container and defines an appearance and functionality of the web application. The cloud service system then reconstructs the web application on the cloud service by automatically generating a user interface environment for the web application on the cloud service based on the manifest and importing each web part of the web parts to the cloud service. The cloud service system configures each web part and the user interface environment to interact as defined by the manifest. The user interface environment reconstructed on the cloud service replicates the appearance and functionality of the web application operating system in the source environment.

Abstract: Workloads are scheduled on a common set of resources distributed across a cluster of hosts using at least two schedulers that operate independently. The resources include CPU, memory, network, and storage, and the workloads may be virtual objects, including VMs, and also operations including live migration of virtual objects, network file copy, reserving spare capacity for high availability restarts, and selecting hosts that are to go into maintenance mode. In addition, the at least two independent schedulers are assigned priorities such that the higher priority scheduler is executed to schedule workloads in its inventory on the common set of resources before the lower priority scheduler is executed to schedule workloads in its inventory on the common set of resources.

Abstract: In some examples, a controller includes a secure memory to store a key, and a processor to access a system memory that is external of the controller and that is accessible by a main processor separate from the controller, protect information retrieved from the system memory using the key to produce protected information, and store the protected information in the system memory.

Abstract: An image of a virtualization software and firmware in a plurality of hosts are upgraded by performing the steps of: validating a desired image of the virtualization software by extracting dependencies and conflicts defined in metadata of all payloads of the desired image of the virtualization software, and confirming there are no violations of the extracted dependencies and conflicts; performing a pre-check of the desired image of the virtualization software against a current image of the virtualization software and a pre-check of the desired version of the firmware against a current version of the firmware; and upon determining from results of the pre-check that the virtualization software can be upgraded to the desired image and the firmware can be upgraded to the desired version, upgrading the current image of the virtualization software to the desired image and upgrading the current version of the firmware to the desired version.

Abstract: A method and an apparatus for migrating virtual machine includes monitoring a status of a compute node; determining whether the compute node meets a trigger condition; wherein the trigger condition comprising a time period of lost connection of the compute node reaches a predetermined time period, or an unstable status of the compute node; and if the compute node meets the trigger condition, transmitting a message to a control node to migrate the VM.

Abstract: Systems, methods, and computer-readable media for interconnecting SDWANs through segment routing. A first SDWAN and a second SDWAN of a SDWAN fabric can be identified. A segment routing domain that interconnects the first SDWAN and the second SDWAN can be formed across a WAN underlay of the SDWAN fabric. Data transmission between the first SDWAN and the second SDWAN can be controlled by performing segment routing through the segment routing domain formed between the first SDWAN and the second SDWAN.

Abstract: A system can include a host device that includes a host management component and a virtual machine execution environment with a guest management component. The guest management component receives a data object generated by the host component. The data object specifies host parameters detected for the host device and hypervisor parameters detected for the hypervisor component. The hypervisor component relays the data object from the host management component to the guest management component, which identifies a violation of a compliance rule using this information. The guest management component performs an action based on the violation.

Abstract: A method for reconciling host membership information in a data center. The method generally includes querying, by a remote management device configured to manage one or more host clusters in the data center, one or more cluster stores to retrieve first host membership information for each of the one or more host clusters, each cluster store being associated with a host cluster of the one or more host clusters, comparing second host membership information stored at the remote management device for the one or more host clusters to the first host membership information to identify one or more discrepancies between the second host membership information and the first host membership information, and updating the second host membership information such that the second host membership information is consistent with the first host membership information.

Abstract: An example virtualized computing system includes a host cluster having a virtualization layer executing on hardware platforms of hosts, the virtualization layer supporting execution of virtual machines (VMs), the VMs including pod VMs and native VMs, the pod VMs including container engines supporting execution of containers in the pod VMs, the native VMs including applications executing on guest operating systems; and an orchestration control plane integrated with the virtualization layer, the orchestration control plane including a master server having a pod VM controller to manage lifecycles of the pod VMs and a native VM controller to manage lifecycles of the native VMs.

Abstract: A computer-implemented method of verifying software is provided. The method comprises creating a number of virtual machines that simulate computing environments and running a number of software program on the virtual machines. The software programs have full access to the simulated computing environments, but the source code of the software program is unavailable. A hypervisor performs virtual machine introspection as the software programs run on the virtual machines, wherein the virtual machines and software programs are unaware the virtual machine introspection is being performed. Telemetry data is collected about the software programs, including any identified threats posed by the software programs to the simulated computing environments, and presented to a user via an interface.

Abstract: An information processing apparatus that is able to execute an extended application, and a method of controlling the information processing apparatus are provided. The information processing apparatus holds, in a launched state, a virtual machine (VM) for executing the extended application, determines, in a case that the extended application is launched, whether or not the extended application can reuse the VM. In a case that it is determined that the extended application can reuse the VM, the information processing apparatus determines whether or not a VM that can be reused by the extended application is held, and in a case that it is determined that the VM which can be reused by the extended application is held, execute the extended application using the held VM.

Abstract: The present disclosure provides a scalable, standardized IT deployment environment that allows for deployment to any public or private cloud automatically, and without human interaction, that is resizable such that the individual resources can be released (“turned off”) when not needed and powered on when use is expected. Additionally, the present disclosure provides a cost calculation system for better understanding the costs of the IT environment as early as the pre-provisioning stage. The present disclosure also provides a system for proactively testing productivity and efficiency within the IT environment, the results of which can be fed back into the autoscaling mechanism.

Abstract: Methods, apparatus, systems and articles of manufacture manage services in distributed systems are disclosed. An example apparatus includes at least one storage device, and at least one processor to execute instructions to at least perform an update of a first virtual machine in response to a determination that the first virtual machine is to enter a maintenance mode, the update based on storing a first service in a local service registry of the first virtual machine, in response to an unsuccessful update of the first virtual machine, restore the first virtual machine based on a snapshot, and provide the first service from a system service registry to a second virtual machine in response to a query from the second virtual machine for the first service.

Abstract: A physical server of a virtual machine (VM) priority control system transmits priority group setting information in which the amounts of resource usage of VMs and priority groups to which the VMs belong are stored to a controller. The controller determines a priority group to which each VM is desired to belong on the basis of an acquired amount of resource usage of the VM, generates dummy VMs corresponding to vacancies belonging to each group, and determines whether performance of each VM can be guaranteed. Further, the controller determines a new current priority group of the VM by exchanging the current priority group of the VM with the current priority group of a pair whose priory groups are paired with those of the VM among pairs of the current priority group and the desired priority group of each of the VMs and the dummy VMs.

Abstract: A method and apparatus are disclosed from the perspective of a UE (User Equipment). In one embodiment, the method includes the UE receiving and/or monitoring a first control region via a first link. The method further includes the UE transmitting a first request if the first link fails. The method also includes the UE receiving and/or monitoring a second control region for a response via a second link within a time window associated with the first request. In addition, the method includes the UE receiving and/or monitoring the first control region after the time window associated with the first request is over.

Abstract: A method for creating a virtual machine includes: receiving a virtual machine creation request to create a plurality of virtual machines; dividing the plurality of virtual machines into a plurality of virtual machine groups; determining a home physical rack for each virtual machine group, where one virtual machine group corresponds to one home physical rack; and creating each virtual machine group on the home physical rack of each virtual machine group. Because each virtual machine group is created on a home physical rack to which each virtual machine group belongs, each virtual machine group is equivalent to one physical rack.

Abstract: Embodiments provide automated security scanning of incoming images for use in creating containers such as a Virtual Machines. Based upon attribute(s) of metadata of the incoming image, a security engine chooses from amongst stored scripts for mounting and execution by installation logic. Such scripts can relate to the scanning itself, and/or pre-scanning considerations (such as scan frequency). In one example, the meta data attribute identifies a relevant Operating System (OS) of the incoming image. Other meta data attributes such as •scan frequency, •most recent passed scan, •log information, and •contact information (for issuance of a possible alert), may also be considered as part of the processing of an incoming image. Embodiments may enhance security by avoiding introduction of vulnerabilities through image instantiation. Embodiments may also impart flexibility to conserve resources by selectively scanning according to a frequency and/or date of last successful passage of the image.

Abstract: Techniques of managing oversubscription of network resources are disclosed herein. In one embodiment, a method includes receiving resource utilization data of a virtual machine hosted on a server in a computing system. The virtual machine is configured to perform a task. The method also includes determining whether a temporal pattern of the resource utilization data associated with the virtual machine indicates one or more cycles of resource utilization as a function of time and in response to determining that the temporal pattern associated with the virtual machine indicates one or more cycles of resource utilization as a function of time, causing the virtual machine to migrate to another server that is not oversubscribed by virtual machines in the computing system.

Abstract: A method of resizing a block storage volume for a virtual machine includes executing the virtual machine and attaching a virtual storage device to the virtual machine. The virtual storage device exposes the block storage volume on memory hardware to the virtual machine. The block storage volume includes a first storage capacity. The method also includes mounting the block storage volume to the virtual machine and resizing the block storage volume while the virtual machine continues to execute. The block storage volume is resized without attaching an additional virtual storage device to the virtual machine or mounting an additional block storage volume to the virtual machine.

Abstract: One example method includes chunking a respective disk of each of a plurality of virtual machines (VM) to create a respective plurality of chunks associated with each of the VMs, creating, based on the chunking process, a cluster comprising one or more of the VMs, creating a VM template whose data and disk structure match respective data and disk structures of each of the VMs in the cluster, and in response to a file operation involving a first one of the VM disks, defragmenting the first VM disk so that a disk structure of the first VM disk is the same as a disk structure of the VM template.

Abstract: A method for execution by a processing system includes determining to retrieve index data for a set of objects stored by an object storage system. An index type is selected from a plurality of index. A request message indicating a request for the index data of one of a plurality of indices stored by the object storage system corresponding to the index type is generated, and the request message is transmitted to the object storage system. The index data for the set of objects is received in a response message from the object storage system. The index data includes a plurality of pairs that each include a key and a value, where the keys correspond to the index type, and where the value of each pair includes metadata of one of the set of objects. The index data is stored in local memory in response to receiving the index data.

Abstract: Multiple low cost individual sensors communicate with a server. A proxy sensor communicates with the server. The server periodically compares information from the individual sensors with information from the proxy sensor. The server validates and accepts information from individual sensors. The server changes gain and offset values for individual sensors providing information that is not validated by the comparing.

Abstract: A system includes a hypervisor, a virtual machine (VM), and a host system. The VM includes a kernel and an application and the VM is in communication with the hypervisor. The host system includes a memory and one or more processors, where the one or more processors are in communication with the memory. The host system hosts the VM and the hypervisor. The one or more processors is configured to perform creating, via the kernel, a first socket accessible to the application. A second socket in communication with an endpoint is created at the host system. A virtual communication channel between the hypervisor and the kernel of the VM connects the first socket to the hypervisor. The hypervisor is configured to transmit inputs/outputs (I/Os) received from the application through the virtual channel to the endpoint via the second socket.

Abstract: A reference snapshot selection technique is configured to select a reference snapshot resolution algorithm used to determine an appropriate reference snapshot that may be employed to perform incremental snapshot replication of workload data between primary and secondary sites in a data replication environment. A reference resolution procedure is configured to process a set of constraints from the data replication environment to dynamically select the reference snapshot resolution algorithm based on a figure of merit that satisfies administrative constraints to reduce or optimize resource utilization in the data replication environment.

Abstract: Embodiments of the present invention provide a method, a system, and an apparatus for creating a virtual machine. The method includes: receiving a virtual machine creation request to create a plurality of virtual machines; dividing the plurality of virtual machines into a plurality of virtual machine groups; determining a home physical rack for each virtual machine group, where one virtual machine group corresponds to one home physical rack; and creating each virtual machine group on the home physical rack of each virtual machine group. Because each virtual machine group is created on a home physical rack to which each virtual machine group belongs, each virtual machine group is equivalent to one physical rack.

Abstract: Techniques are described for enabling a service provider to determine an electrical (e.g., and thermal) topology that indicates which racks (e.g., physical server(s)) have a shared risk due to shared data center infrastructure, and place virtual machine instances into the physical servers based on the topology and a user-specified preference of a virtual machine instance type.

Abstract: A quantum computing service includes connections to multiple quantum hardware providers that are configured to execute quantum circuits using quantum computers based on different quantum technologies. The quantum computing service enables a customer to define a quantum algorithm/circuit in an intermediate representation and select from any of a plurality of supported quantum computing technologies to be used to execute the quantum algorithm/quantum circuit.

Abstract: Dynamically controlling use of a shared computing resource by virtual-computing sessions of a client computing device includes storing per-virtual-channel weights representing contributions of session virtual channels to performance, the stored weights including sets of weights for respective distinct application types. A resource allocation operation includes (i) for each session, selecting a set of weights based on a type of application using the session and applying the selected set of weights to activity state data to produce a session activity value, the activity state data representing activity states of the session virtual channels, and (ii) generating resource usage control signals based on the session activity values of the sessions, the resource usage control signals representing a target pattern of use of the shared computing resource by the sessions. An enforcement operation uses the resource usage control signals to establish the target pattern of use of the shared resource by the sessions.

Abstract: A device connected by a link to a host system can include a first port to receive a capability configuration message across a link and a message request receiving logic comprising hardware circuitry to identify a capability of the device identified in the capability configuration message, determine that the capability is to be presented or hidden from operation based on a capability hide enable bit in the capability configuration message, and configure a capability linked list to present or hide the capability based on the determination. The device can also include a message response generator logic comprising hardware circuitry to generate a response message indicating that the capability is to be presented or hidden from operation. The device can include a second port to transmit the response message across the link.

Abstract: Disclosed herein is a technique to automatically re-bind applications and storage volumes during recovery from planned outage or platform failure and disaster recovery. Such implementations can involve managing volume management information that maps volume claim information with a logical volume identifier associated with persistent volume information; and for receipt of a request for a new volume, referencing the volume management information to retrieve an associated logical volume identifier and the persistent volume information based on the volume claim information associated with the request; and providing the retrieved persistent volume information to a volume provisioning function.

Abstract: Embodiments of apparatuses, methods, and systems for unified address translation for virtualization of input/output devices are described. In an embodiment, an apparatus includes first circuitry to use at least an identifier of a device to locate a context entry and second circuitry to use at least a process address space identifier (PASID) to locate a PASID-entry. The context entry is to include at least one of a page-table pointer to a page-table translation structure and a PASID. The PASID-entry is to include at least one of a first-level page-table pointer to a first-level translation structure and a second-level page-table pointer to a second-level translation structure. The PASID is to be supplied by the device. At least one of the apparatus, the context entry, and the PASID entry is to include one or more control fields to indicate whether the first-level page-table pointer or the second-level page-table pointer is to be used.

Abstract: Provided is an electronic device for managing computing resources of at least one cloud server that provides a cloud service by using a virtual machine instance including a communicator configured to receive, from a client device, at least one service request for a service provided by the virtual machine instance; and a controller configured to select one of a plurality of modes of the virtual machine instance for management of the computing resources, based on the at least one service request, and control the computing resources allocated to the virtual machine instance according to the selected mode of the virtual machine instance, wherein the virtual machine instance is generated by the at least one cloud server.

Abstract: Updating inactive compute instances is disclosed. It is determined that a first compute instance that boots from an operating system image on a first storage device is in an inactive state. It is determined that updates to the operating system image on the first storage device exist. The operating system image is copied from the first storage device to a second storage device. The operating system image on the second storage device is updated with the updates to generate an updated operating system image on the second storage device. The updated operating system image is copied form the second storage device to the first storage device in place of the operating system image.

Abstract: A system comprising nodes coupled to a network including virtual links in an overlay network provisioned over an underlay network. The system includes a virtual machine (VM) provisioned at a node and coupled to the network. The VM is configured to receive feedback data of link conditions, and use the feedback data to dynamically determine and adapt an optimal route through the network. The VM is configured to control routing of traffic flows using the optimal route. The routing includes split routing of a traffic flow from the node via two or more of the virtual links.

Abstract: A system and method for providing virtual items to users of an online game operated in a virtual space. Multiple users may participate in affiliations or alliances of discrete groups of users in an online game and may access the online game through client computing platforms associated with the users. The affiliations may have affiliation game units associated with affiliations which provide a benefit to the members of the online game. Affiliation members may cumulatively obtain affiliation game units and/or upgrade affiliation game units by providing one or more virtual items. Upgrading affiliation game units may require the cooperation of multiple members of the affiliation.

Abstract: An apparatus comprises a first processing device, the first processing device comprising a physical hardware controller configured for coupling with a second processing device. The first processing device is configured to identify remote storage service instances attached to the second processing device, and to initiate storage emulation modules for the remote storage service instances attached to the second processing device, the storage emulation modules emulating physical storage devices configured for attachment to the second processing device.

Abstract: A system includes a cluster of nodes, memory, and a processor, where the cluster includes an application programming interface (API) server and one or more components. The processor is configured to initialize an interface to the API server, where the interface is operable to send status information from the one or more components within the cluster via a single output stream. The API server is configured to modify the single output stream of the API server to output status information associated with a first component of the one or more components within the cluster. The status information is aggregated and it is determined whether the cluster is at a failure point. In response to determining that the cluster is at a failure point, an execution signal is set to false, where the execution signal is accessible to an automation tool in communication the cluster.

Abstract: According to an embodiment, a processing apparatus includes a memory and a processor coupled to the memory. The processor is configured to: execute data access that is at least one of data writing to the memory and data reading from the memory; receive access control information for controlling timing of the data access to be executed; and control the timing of the data access based on the received access control information.

Abstract: A cloud implementation of a persisted storage device, such as a disk, is provided. The implementation supports a variety of features and protocols, in full analogy with a physical storage device such as a disk drive. The present disclosure provides for implementing standard eDrive protocols in the cloud by designing internal disk storage, referred to as a “system area,” in a virtual disk instance that the virtual disk can potentially utilize for a multitude of disk features. This internal storage can be used to implement eDrive protocols, which use the system area to maintain the necessary internal virtual disk state.

Abstract: There are provided an information processing system that operates virtual machines and storage controllers on a processor, and an information processing method executed by the information processing system. A storage controller group capable of taking over processing between the storage controllers arranged in different nodes is provided. The virtual machine is movable between the different nodes by deploy. The virtual machine and the storage controller that processes data input and output by the virtual machine are arranged in the same node. A combination of the virtual machines that cannot be arranged in the same node is defined by a restriction. A management unit arranges one of the virtual machines that cannot be arranged in the same node in the node in which the storage controller included in the storage controller group to which the storage controller used by the other virtual machine belongs is not arranged.