Vmware, Inc.

Symantec Corporation

Anoosmar Technologies Private Limited

Vaultize Technologies Private Limited

Amol Manohar Vaikar

Avinash Nigam

Yusuf Batterywala

Ankur P Panchbudhe

Prahalad Gowardhan Deshpande

Ambarish Prashant Pande

Devraj Narendra Baheti

Praneeth Siva

Anindya Banerjee

Abhijit Sharma

Navin Kabra

Nilesh Avinash Phadke

Amit Verma

Ravi Singhal

Vishal Ranjan

Madan Singhal

Adhir Prabhakar Potdar

Mandar Khanolkar

Pratiksha Ishwarlal Gugale

Shubhrajyoti Mohapatra

Example methods and systems for packet flow monitoring are described. In one example, a first computer system may detect a flow of packets along a datapath between a source and a destination and determine source attribute information associated with the source and destination attribute information associated with the destination. The first computer system may perform attribute-to-identifier mapping by (a) mapping the source attribute information to a source identifier having a reduced size compared to the source attribute information, and/or (b) mapping the destination attribute information to a destination identifier having a reduced size compared to the destination attribute information. The first computer system may generate flow information that includes (a) the source identifier identifying the source and/or (b) the destination identifier identifying the destination; and interact with a second computer system, or storage accessible by the second computer system, to enable the second computer system to obtain the flow information.

Packet flow monitoring with attribute-to-identifier mapping

Techniques for reducing the startup latency of functions in a Functions-as-a-Service (FaaS) infrastructure are provided. In one set of embodiments, a function manager of the FaaS infrastructure can receive a request to invoke a function uploaded to the infrastructure and can retrieve information associated with the function. The retrieved information can include an indicator of whether instances of the function may be sticky (i.e., kept in host system primary memory after function execution is complete), and a list of zero or more host systems in the FaaS infrastructure that currently have an unused sticky instance of the function in their respective primary memories. If the indicator indicates that instances of the function may be sticky and if the list identifies at least one host system with an unused sticky instance of the function in its primary memory, the function manager can select the at least one host system for executing the function.

Reducing the startup latency of functions in a FaaS infrastructure

Some embodiments provide a method for evaluating locations of applications in a multi-cloud network with applications located in different cloud datacenters of one or more cloud providers. The method receives data for flows collected from the cloud datacenters. The data for each flow indicates a source and destination of the flow and applications to which at least one of the source and destination of the flow belong. The method uses network topology data to identify a subset of the flows as egress flows, each of which is charged by a cloud provider at which the flow source is located. Based on data from the cloud providers, the method determines a cost for each of the egress flows and a cost associated with each of the applications. The method provides these costs to users of the network for the users to optimize locations of the applications in the different cloud datacenters.

Egress cost optimization for multi-cloud network

Some embodiments provide a novel method of tracking connections in a network. The method receives an identification of a first network endpoint and a second network endpoint. The method then determines that the first network endpoint cannot directly address a packet flow to the second network endpoint. The method identifies an address translation rule of a network device that translates an address of the second network endpoint into a translated address. The method then determines that the first network endpoint can directly address a packet flow to the translated address. The method then identifies a route from the first network endpoint to the second endpoint through the network device that translates the address and displays the route including an identifier of the network device.

Identifying routes with indirect addressing in a datacenter

The disclosure provides an approach for distribution of functions among data centers of a cloud system that provides function-as-a-service (FaaS). For example, the disclosure provides one or more function distributors configured to receive a request for loading or executing a function, automatically determine an appropriate data center to load or execute the function, and automatically load or execute the function on the determined data center. In certain embodiments, the function distributors are further configured to determine an appropriate data center to provide storage resources for the function and configure the function to utilize the storage resources of the determined data center.

Function as a service (FaaS) execution distributor

A computer network optimization methodology is disclosed. In a computer-implemented method, components of a computing environment are automatically monitored, and have a feature selection analysis performed thereon. Provided the feature selection analysis determines that features of the components are in frequent communication and generating network latency. Provided the feature selection analysis determines that features of the components are not well defined, a similarity analysis of the features is performed. Results of the feature selection methodology are generated, and the components involved in the network traffic latency are reassigned to migrate the latency.

System and method for optimizing network topology in a virtual computing environment

The disclosure provides an approach for service deployment. Embodiments include receiving an indication of user intent for deployment of one or more services in a network from a user that is not an administrator of the network, wherein the indication of the user intent comprises a domain specific language (DSL). Embodiments include parsing the indication of the user intent to determine one or more constraints for deploying the one or more services. Embodiments include receiving topology information for the network, wherein the topology information comprises associations between racks and machines in the network. Embodiments include receiving network performance information for the network. Embodiments include determining one or more deployment rules for the one or more services based on the one or more constraints, the topology information, and the network performance information. Embodiments include deploying the one or more services in the network based on the one or more deployment rules.

Rack-aware and network performance-aware service deployment

Function as a service (FAAS) execution distributor

In one example, a management node may include a storage device to store network device information associated with a plurality of network devices and physical hosts in a datacenter. Example network device information may include at least one of routing information and media access control (MAC) address information. Further, the management node may include a processor operable with the storage device and memory coupled to the processor. In one example, the memory may include a network topology generation unit to determine adjacency between the plurality of network devices in the datacenter using the routing information and/or media access control (MAC) address information associated with the plurality of network devices and generate a network topology including a network path between a source endpoint and a destination endpoint using the adjacency between the plurality of network devices.

Network topology generation based on network device information

An approach for intercepting and caching Domain Name System (DNS) related data and sharing the cached DNS related data among hypervisors is provided. In an embodiment, a method comprises: receiving a DNS query from a virtual machine, determining whether a DNS reply to the DNS query has been received from a DNS server and whether an Internet Protocol (IP) address has been stored in a local DNS cache; in response to determining that tire DNS reply to the DNS query has been received from the DNS server and the IP address has been stored in the local DNS cache; retrieving the IP address from the local DNS cache; and providing the IP address to the virtual machine.

Virtual distributed domain name server

The embodiments herein relate to discrete data containers and, more particularly, to management of data stored in discrete data containers. Embodiments herein disclose methods and systems to update data present within a data container, when a user accessing the data, present within the data container, has updated the data. Embodiments herein disclose a method and system for enabling modifications of data present in data containers, wherein de-containerized data associated with a data container can be modified by at least one user and the modifications by the user can be reflected in real-time to the data in the data container.

Methods and systems for management of data stored in discrete data containers

In one example, resilient software application upgrades in a virtual datacenter is disclosed, in which network flow data is periodically obtained between a plurality of APPVMs and/or containers and deep packet inspection information from firewalls associated with the obtained network flow data in the virtual datacenter. Dependency relationships between the plurality of APPVMs and/or containers are then obtained based on the periodically obtained network flow data, the periodically obtained deep packet inspection information, and a network flow criteria. An upgrade that is about to happen to a software residing in one or more of the plurality of APPVMs and/or containers is determined. One or more of the plurality of APPVMs and/or containers affected by the software upgrade is determined based on the determined dependency relationships. Snapshots of the affected one or more of the plurality of APPVMs and/or containers are then obtained before initiating the software upgrade.

System and method for resilient software upgrades in a virtual datacenter

Disclosed herein are a method and a system for discrete data containerization for Information Rights Management. The system identifies based on a user request, data to be containerized. Further, the system receives at least one rule based on the data and attributes, which is to be used for containerizing the data. Further, using the rule, the system containerizes the data, wherein the data is containerized at individual data level.

Growing community of inventors

Pune, India

Amol Manohar Vaikar