Microsoft Technology Licensing, LLC

At&t Intellectual Property I, L.p.

At+t Corp.

Other

Lucent Technologies Inc.

At&t Bell Laboratories

University of Illinois

At&t Corp/csi Zeinet(a Cabletron Co.)

Albert Gordon Greenberg

David A Maltz

Parveen Kumar Patel

Deepak Bansal

Srikanth Kandula

Ming Zhang

Changhoon Kim

Parantap Lahiri

Kadangode K Ramakrishnan

Partho Pratim Mishra

Nicholas G Duffield

Jennifer Yates

Lihua Yuan

Pawan Goyal

Oliver Spatscheck

Balachander Krishnamurthy

Alireza Dabagh

Jennifer Lynn Rexford

Edward G Amoroso

Alexandre Gerber

Sudipta Sengupta

Yousef A Khalidi

Thomas Keane

Parvez Anandam

Pradeep Ayyappan Nair

Ramnath Prasad

Jacobus Erasmus Van Der Merwe

Yi-Min Wang

Charles Robert Kalmanek, Jr

Flavio Giovanni Bonomi

Sharad Agarwal

Jia Wang

Yin Sheng Zhang

Jonathan David Goldstein

Angela L Chiu

Daniel Max Firestone

Gisli Hjalmtysson

Seyhan Civanlar

Aman M Shaikh

Charles Loboz

Zhuangbo Tang

Matthew Roughan

Paramvir Bahl

Ranveer Chandra

Raghvendra Savoor

Zhi Li

Alastair Wolman

Zihui Ge

John David Dunagan

Canhui Ou

Robert Duncan Doverspike

Carsten Lund

Guangzhi Li

Christopher J Chase

Murari Sridharan

Pankaj Garg

Dongmei Wang

Emre Mehmet Kiciman

Stephen Albert Sposato

Thekkthalackal Varugis Kurien

John Gregory Klincewicz

Sun-Uk Park

Frederick True

Neal Shackleton

Kevin T Damour

J Bradley Bridges

Boris Dmitrievich Lubachevsky

Jerold Osato

Jin Li

Mathilde Benveniste

Subhabrata Bapi Sen

Mary P Czerwinski

Jitendra Dattatraya Padhye

Zheng Zhang

Patrick Guy Haffner

Yi Lu

Navendu Jain

Venkata N Padmanabhan

Cheng Huang

Danyel Aharon Fisher

Rishabh Tewari

Ratul Mahajan

Ganesh Ananthanarayanan

Balaji Satyanarayana Prabhakar

Robert Pike

Harish Kumar Chandrappa

Abhishek Kumar Singh

Parag Sharma

Narasimhan Agrahara Venkataramaiah

Hasan Alkhatib

Behrooz Chitsaz

Yimin Deng

Manuel Silverio Da Silva Costa

Frank K Hwang

Bryan William Tuttle

Ward Whitt

Srinivas Krishnan

Aaron C Hoff

Geoff Outhred

Ashvin Sanghvi

Network management of cloud computing environments subject to different data control policies is standardized in a manner that ensures compliance with the data control policies. An execution service remote from a cloud computing environment being managed implements workflows to manage different aspects of the cloud computing environment, including monitoring, incident management, deployment, and/or buildout. The execution service issues requests to perform management actions for network devices in the cloud computing environment. A device access service in the cloud computing environments receives the requests, and, in response to the requests, the device access service obtains access control data to access the network devices and perform the requested management actions for the network devices.

Standardization of network management across cloud computing environments and data control policies

Described is a server monitoring technology that is scalable to large numbers of servers, e.g., in a datacenter. Agents on servers run queries to monitor data sources for that server, such as performance counters and other events. The agents monitor their resource usage and those of monitored events to stay within an administrator-specified resource budget (policy), e.g., by modifying the running queries and/or monitoring parameters. A controller receives results of the monitoring, analyzes the results, and takes action as needed with respect to server operation and monitoring. The controller may dynamically update an agent's queries, monitoring parameters and/or monitored data post-processing operations. The controller may issue alerts and reports, including alerts indicative of inter-server problems between two or more servers.

Flexible and safe monitoring of computers

Techniques are described herein that are capable of monitoring connectivity and latency of network links in virtual networks. For instance, a ping agent injects first ping packets into network traffic on behalf of hosts in the virtual network. The ping agent monitors incoming packets to identify first ping response packets, which are in response to the first ping packets, among the incoming packets. A ping responder rule that is included in inbound packet filter rules for a port in a virtual switch intercepts second ping packets in the network traffic. The ping responder rule converts the second ping packets into second ping response packets and injects the second ping response packets into outbound packet filter rules to be transferred to sources from which the second ping packets are received.

Monitoring connectivity and latency of a virtual network

A system that includes multiple hosts, each running a plurality of virtual machines. The system may be, for example, a cloud computing environment in which there are services and a service coordination system that communicates with the hosts and with the services. The services include a middleware management service that is configured to maintain per-tenant middleware policy for each of multiple tenants. The middleware management service causes the middleware policy to be applied to network traffic by directing network traffic to a middleware enforcement mechanism. This middleware policy is per-tenant in that it depends on an identity of a tenant.

Multi-tenant middleware cloud service technology

Network buildout of cloud computing environments subject to different data control policies is performed in a manner that ensures compliance with the data control policies. A buildout service is located in a remote cloud computing environment separate from the cloud computing environments at which buildout is being performed. The buildout service implements workflows to manage different aspects of network buildout in the cloud computing environments. The buildout service does not have access to restricted data in the cloud computing environments, including access control data, such that the buildout service cannot directly interact with network devices. The buildout service issues requests for device configuration to hardware proxies in the cloud computing environments. In response to the requests, the hardware proxies obtain access control data to access and configure the network devices.

Network buildout for cloud computing environments with data control policies

Network management of cloud computing environments subject to different data control policies is standardized in a manner that ensures compliance with the data control policies. Executions services and source of truth services are located in a remote cloud computing environment separate from the cloud computing environments being managed. The execution services implement workflows to manage different aspects of the cloud computing environments, including monitoring, incident management, deployment, and buildout. The source of truth services provide network configuration information for the cloud computing environments to allow automated operation of the execution services. The execution services issue requests for management operations to device access services in the cloud computing environments. In response to the requests, the device access services obtain access control data to access the network devices and perform the management operations.

Monitoring of cloud computing environments subject to different data control policies is performed in a manner that ensures compliance with the data control policies. A monitoring service is located in a remote cloud computing environment separate from the cloud computing environments being monitored. The monitoring service does not have access to restricted data in the cloud computing environments, including access control data, such that the monitoring service cannot directly interact with network devices. The monitoring service issues requests for monitoring data to device access services in the cloud computing environments. In response to the requests, the device access services obtain access control data to access the network devices and obtain the requested data, which is returned to the monitoring service.

Monitoring cloud computing environments with data control policies

The ensuring of predictable and quantifiable networking performance includes adaptively throttling the rate of VM-to-VM traffic flow. A receiving hypervisor can detect congestion and communicate messages for throttling traffic flow to reduce congestion at the receiving hypervisor.

Ensuring predictable and quantifiable networking performance

Various embodiments described herein are directed to optimizing cloud computing infrastructures functionality based on an abuse prevention and remediation platform. A tenant profile may have a tenant confidence score for a tenant, the tenant confidence score being an indicator of the reputation of the tenant usage of cloud computing resources. Based on the confidence score of the tenant, one or more policies for the tenant may be identified limiting access to cloud computing resources. If the virtual internet protocol address (VIP) of the tenant is determined to be tainted, the VIP may be quarantined in a tainted VIP pool, the quarantining excluding the VIP from being selected for use until the VIP is clean. A cleanup routine may be executed, the cleanup routine communicating remedial actions for the tainted VIP. Upon completion of the cleanup routine, the VIP may be restored to a clean VIP pool.

Automatically preventing and remediating network abuse

A method and apparatus for presenting advertisements is disclosed. An apparatus that incorporates teachings of the present disclosure may include, for example, a system having an inspection element that monitors packet traffic associated with an end user, and determines a behavioral profile of the end user from the monitored packet traffic, a publisher element that detects an end user visiting a website managed thereby, and generates an advertisement request associated with the website, and advertisement element that selects one or more advertisements according to the behavioral profile of the end user, and submits said one or more advertisements to the publisher element for presentation thereof to the end user. Additional embodiments are disclosed.

Method and apparatus for presenting advertisements

This document relates to a distributed network coordinate system. One implementation provides computer-readable storage media including instructions that may cause a processor to perform certain acts. For example, the acts may include storing an initial network location of a first device in a network. The network may include the first device and a second device. The acts may also include monitoring one or more network performance metrics related to existing application communications with the second device, and determining an updated network location of the first device, based on the initial network location and the network performance metrics. Aspects of network health can be derived from monitoring changes in the network locations of various devices within the coordinate system.

Identifying problems in a network by detecting movement of devices between coordinates based on performances metrics

Described is a method of assigning a network address to a trap, the network address being a dark address of a virtual private network. The network traffic destined for the network address is monitored and a classification of the network traffic is determined. After the classification, a predetermined response is executed based on the classification of the traffic.

System and method for monitoring network traffic

Growing community of inventors

Summit, NJ, United States of America

Albert Gordon Greenberg