Vmware, Inc.

Bmc Software, Inc.

Abhijit Sharma

Mukul Gupta

Neeran Mohan Karnik

Rohit Toshniwal

Prahalad Gowardhan Deshpande

Shiv Agarwal

Apurv Gupta

Nilesh Avinash Phadke

Abhay Ghaisas

Somil Bhandari

Avinash Nigam

Alexander G Vul

Ambarish Prashant Pande

Shashank Ranjan

Atul Jadhav

Manikantan Narender Nath

Amarjit Gupta

Varun Karnati

Rajesh Kamineni

Nikhil Bhalerao

Abhay Ghasisas

Amol Manohar Vaikar

Gaurav Agarwal

Steve Wong

Joseph A Scarpelli

Suhas A Kelkar

Karanbir Gujral

Ravi Singhal

Madan Singhal

Devraj Narendra Baheti

Sameer Pokarna

Gyan Sagar Sinha

Kshitij Gupta

Komal K Shah

Pratiksha Ishwarlal Gugale

Shubhrajyoti Mohapatra

Rohit Kashikar

Rakesh Dhoopar

Guriqbal Singh

Some embodiments provide a method for evaluating locations of applications in a multi-cloud network with applications located in different cloud datacenters of one or more cloud providers. The method receives data for flows collected from the cloud datacenters. The data for each flow indicates a source and destination of the flow and applications to which at least one of the source and destination of the flow belong. The method uses network topology data to identify a subset of the flows as egress flows, each of which is charged by a cloud provider at which the flow source is located. Based on data from the cloud providers, the method determines a cost for each of the egress flows and a cost associated with each of the applications. The method provides these costs to users of the network for the users to optimize locations of the applications in the different cloud datacenters.

Egress cost optimization for multi-cloud network

The present disclosure provides an approach for generating one or more firewall rules to regulate communication between containerized services running within containers. The approach includes determining which services communicate with each other, independently of in which containers the services execute. The determining occurs over a period of time. If two services communicated with each other during the period of time, then the firewall allows the services to continue communicating, but only over the same ports as used during the period of time. If two services did not communicate during the period of time, then the firewall does not allow the services to communicate after the expiration of the period of time. In some embodiments, redetermining the communication flow over a new period of time may occur after the initial period of time so as to refresh the firewall rules.

Recommending network NANO-segmentation for micro-services using flow analysis

A system and method for topology construction in hybrid cloud environments includes receiving connection information from a local perimeter edge router of a local network that has a known topology and receiving connection information from a remote perimeter edge router of a remote network that is provided by a cloud provider. The received local perimeter edge router connection information is associated with the received remote perimeter edge router connection information. The associated connection information is normalized to a generic model, the generic model representing connections having different link layer policies in a generic way and the normalized connection information is applied to a network topology of the local network and the remote network.

System and method for topology construction in hybrid cloud environments

A feature selection methodology is disclosed. In a computer-implemented method, components of a computing environment are automatically monitored, and have a feature selection analysis performed thereon. Provided the feature selection analysis determines that features of the components are well defined, a classification of the features is performed. Provided the feature selection analysis determines that features of the components are not well-defined access to those features are discarded. Results of the feature selection methodology are generated.

Automatic discovery of computing components within a hierarchy of accounts defining the scope and services of components within the computing environment

A datacenter management system uses data collection proxies to collect performance data and configuration data for different physical and virtual entities in the datacenter. A schema is used to represent the different entities, entity relationships, and entity properties in the datacenter. A search engine identifies the intent of a natural language based search query based on the schema and a datacenter dictionary. The search engine then searches the data based on the search query intent. A dictionary manager converts both periodic and aperiodic data into a time series. This allows the search engine to operate as a time machine identifying both performance data and configuration data for any selectable time period.

Datacenter operations using search and analytics

The present disclosure provides an approach for creating one or more firewall rules to regulate communication between containers. The approach includes calculating a trust score for each container. To generate a rule for any two containers, a difference between the trust scores is computed, and if the difference in trust levels is too large, then the more trustworthy container is not allowed to communicate with the less trustworthy container. If the difference in trust scores is not too large, then the trustworthy container is allowed to communicate with the other trustworthy container, or an untrustworthy container is allowed to communicate with another untrustworthy container.

Security context aware nano-segmentation for container based microservices

A container set manager may determine a plurality of container sets, each container set specifying a non-functional architectural concern associated with deployment of a service within at least one data center. A decision table manager may determine a decision table specifying relative priority levels of the container sets relative to one another with respect to the deployment. A placement engine may determine an instance of an application placement model (APM), based on the plurality of container sets and the decision table, determine an instance of a data center placement model (DPM) representing the at least one data center, and generate a placement plan for the deployment, based on the APM instance and the DPM instance.

Service placement techniques for a cloud datacenter

Embodiments described herein generally involve identifying workloads in a networking environment based on a flow record from an observation point. In one embodiment, network data is received from one or more endpoints and used to determine a plurality of administrative domains. Each administrative domain comprises a distinct section of the networking environment within which every Internet Protocol (IP) address is unique. The network data may be used to generate observation point mapping information that maps each observation point to an administrative domain, lookup tables associated with each of the plurality of administrative domains that map IP addresses to administrative domains, and a workload identification table that maps combinations of IP addresses and administrative domains to workloads. The flow record is received from the observation point and a source and destination workload of the flow record are identified using the observation point mapping information, applicable lookup table, and workload identification table.

Workload identification for network flows in hybrid environments with non-unique IP addresses

A computerized datacenter contextual search query interpretation method includes receiving a search query from a user; displaying search suggestions based on the search query and obtaining a selected one of the search suggestions. Any time period associated with the search query is identified, instructions based on the selected search suggestion and any time period for searching a data model of a datacenter are generated to obtain search results and display a graphical visualization of the search results.

Datacenter search query interpretation system

A computerized datacenter entity information method includes obtaining datacenter entity information at an initial time, compressing and storing the datacenter entity information as a datacenter entity frame of reference, obtaining datacenter entity information changes, and compressing and storing the datacenter entity information changes with respect to the datacenter entity frame of reference. In another implementation, the computerized datacenter entity information method includes obtaining datacenter entity information at an initial time, compressing and storing the datacenter entity information as a datacenter entity frame of reference, obtaining datacenter entity information changes, and compressing and storing the datacenter entity information changes with respect to the datacenter entity frame of reference.

Datacenter entity information system

Disclosed are systems and methods for model based provisioning of applications and servers (both physical and virtual) to execute provisioned applications in a reliable and repeatable manner. Several aspects of a complex application management including compliance, change tracking, monitoring, discovery, processing steps, CMDB integration are disclosed within a comprehensive hierarchy of definition templates forming a model. This model can then be used at provisioning time to instantiate a compliant instance of the provisioned application. This model can also be used at run-time for managing run-time aspects of the provisioned application. Additionally, the model based approach can help track applications even when or if applications drift from their intended design and policies for use.

Application blueprint and deployment model for dynamic business service management (BSM)

The embodiments provide a data processing apparatus for automated blueprint assembly. The data processing apparatus includes a micro-blueprint assembler configured to receive a request for automated blueprint assembly for assembling an application, where the request specifies at least one feature, and a model database configured to store model data. The model data includes a plurality of classes and class properties. The data processing apparatus further includes a micro-blueprint database configured to store a plurality of micro-blueprints. Each micro-blueprint corresponds to a functional component of a stack element or service tier, and the functional component is annotated with one or more classes of the plurality of classes and at least one required capability and available capability. The micro-blueprint assembler is configured to generate at least one application blueprint based on the model data and the plurality of micro-blueprints according to the request.

Automated blueprint assembly for assembling an application

Growing community of inventors

Pune, India

Abhijit Sharma