International Business Machines Corporation

Adam D Reznechek

Jason Allan Nikolai

David M Koster

Andrew Thomas Thorstensen

Mathew Richard Odden

Lance Bragstad

Michael John Fork

Steven Edward Royer

A method comprises establishing a packet size limit. The packet size limit may govern the maximum permitted size of packets that are transmitted between a first node and a second node of a network. The method also comprises monitoring a buffer of the second node in the network. The method also comprises determining, based on the monitoring, that the buffer of the second node is filled above an upper capacity threshold. The method also comprises increasing, based on the determining, the first packet size limit.

Real-time adjustment of packet size limit in virtual networks

A stream server manages connections by multiple clients. The stream server receives, sends and manages streams for each client. The stream server analyzes incoming streams and maintains a database of device signatures and a database of user profiles based on the analyzed data. The stream server receives a stream from a client, analyzes the stream to identify an applicable device signature, user profile, or both, and modifies the stream. Modification of the stream may include filtering noise, placing the user in receive-only mode, ending a session for a user, adjusting metadata, etc. In addition, modification of the stream may vary based on the role or authorization of the user, or based on commands from one or more of the users.

Stream server that modifies a stream according to detected characteristics

A method, apparatus and program product utilize Domain Name Service (DNS) prefetching in a recursive DNS server, e.g., to mitigate Distributed Denial of Service (DDoS) attacks on a DNS service.

Recursive domain name service (DNS) prefetching

A streams manager assesses the security risk of streaming communication and dynamically migrates operators of a streaming application based on the security risk. The streams manager may also dynamically change encryption of intranode communication between the operators to increase performance of the computer node. The streams manager includes a stream security module (SSM) with a monitor that monitors risk in the system and changes placement of operators and encryption between operators on a node depending on the risk. The stream security module may use security data and node profile data collected by the monitor or the system to determine the risk. The stream security module may provide recommendations to a customer for the customer to override changes in placement and encryption.

Placement of operators and encryption of communication based on risk in a computer system node

A streams manager assesses the security risk of streams communication and when possible turns off encryption of intranode communication between operators of a streaming application on a computer node to increase performance of the computer node. The streams manager includes a stream security module (SSM) with a monitor that monitors risk in the system and changes encryption between operators on a node depending on the risk. The stream security module may use security data and node profile data collected by the monitor or the system to determine the risk. The stream security module may provide recommendations to a customer for the customer to override changes in encryption.

Risk-based encryption of communication on a computer system node

Systems, methods, and computer program products to perform an operation comprising receiving a first data frame and a second data frame by a device driver of a first virtual network interface controller (vNIC) of a plurality of vNICs sharing a physical network interface controller (NIC) of a computing system, storing, by the device driver of the first vNIC, the first and second data frames in a first queue for the first vNIC, generating, by the device driver of the first vNIC, an optimized data frame comprising the first and second data frames, wherein the optimized data frame specifies a modified Ethernet preamble, and sending the optimized data frame to a hypervisor of the computing system.

Router based maximum transmission unit and data frame optimization for virtualized environments

A resource utilization mechanism (RUM) preemptively extracts data from long latency storage in a cloud computing environment to economically and quickly provide data that is infrequently accessed by customers. The RUM identifies periods of low resource utilization where capacity can be efficiently utilized, identifies data to be retrieved, and retrieves the data from long latency storage to make it available to the customer. The RUM may notify a customer that the data is available and allow the customer to accept terms of use for the data or opt out of using the data.

Preemptive extraction of data from long latency storage in a cloud computing environment

A method, and a system are provided for implementing dynamic switching of network protocols for optimal performance for data being transmitted between nodes. An appropriate transport protocol between nodes is dynamically chosen based upon monitored system and network metrics.

Implementing autoswitching network protocols for optimal efficiency

A method, and a system are provided for implementing cloud based malware container protection. A container is provisioned for a user. The container is monitored, and when an abnormal activity is detected based upon historical metric data, a unikernel is provisioned and a user application is migrated to the unikernel while inspection occurs.

Growing community of inventors

Rochester, MN, United States of America

Adam D Reznechek