International Business Machines Corporation

Amazon Technologies, Inc.

Lenovo (singapore) Pte. Ltd.

Andrew Gary Hourselt

Teresa Shen Swingler

Melissa Jorgette Garcia

Robert Beverley Basham

Douglas Stewart Laurence

Ashaki Ayanna Ricketts

Kelly Louise Hicks

James Christopher Sorenson

John Thomas Olson

Deanna Lynn Quigg Brown

Nedzad Taljanovic

Dinesh Chandra Coca

Neha Shetty

John Jason Auvenshine

Hui Calvin Yang

Theodore Brian Vojnovich

Kevan D Holdaway

Erik Bartholomy

Louis Daniel Echevarria

Richard Michael Sears

Elena Schneider

Jia Ming Zhang

Pei Hu

Ping Li

Stanley C Wood

Wen Han Luo

Matthew Charles Compton

Josephine F Bayang

Robin Daniel Roberts

Kerri Renee Shotwell

Min Cai

Lei Wei

Lourdes Magally Gee

James Blaine Engle

Deanna L Q Brown

Victor L Walter

Rezaul Shah Mohammad Islam

Colm MacCárthaigh

Muthu A Muthiah

Steven Collison

Craig Frederick Schultz

Harley D Puckett, Iii

Jonathan Douglas Beard

Brad J Behle

Kavitha Gudapati

Vipul Srivistava

Kelly Louise McWaters

Rezaul S M Islam

Louis Daniel Echeverria

Thomas E Haddock

Andrey Vasilyevich Talnikov

Kenneth D Paquette

Yang Xu

Yuan Yin

Ashaki A R Reid

Contents of client-initiated handshake messages of a security protocol are obtained at a handshake processing offloader configured for an application. The offloader uses a first security artifact (which is inaccessible from a front-end request processor of the application) and the contents of the handshake messages to generate a second security artifact. The second security artifact is transmitted to the front-end request processor, which uses it to perform cryptographic operations for client-server interactions of the application.

Security protocol handshake offloading

For displaying an off-switch location, a processor displays a rack image of a physical rack of a plurality of monitored devices separate from the processor. The processor displays an icon configured to convey a status of each monitored device of the plurality of monitored devices. The processor monitors a position of a mouse. The processor identifies a given monitored device at the position of the mouse and configuration data associated with the given monitored device. The configuration data defines an area of the rack view associated with the given monitored device. In response to identifying the given monitored device, the processor displays a locate off hyperlink for the given monitored device. In response to a selection of the locate off hyperlink, the processor displays an off-switch location on the rack image of the given monitored device.

Displaying an off-switch location

A load shedding mechanism and an endpoint selection mechanism may be used to rebalance loads of endpoints of a network-based service. The load shedding mechanism may monitor health information of one or more endpoints and determine whether to perform a load shedding operation based on the health information. In response to determining to perform the load shedding operation for a selected endpoint, the load shedding mechanism may, prior to a client close request for a keep-alive connection of the selected endpoint, trigger an early close of the keep-alive connection. In response to a corresponding client attempting to reconnect based at least in part on the early close, the endpoint selection mechanism may select another endpoint to form a keep-alive connection with the client.

Load rebalancing in a network-based system

Methods and apparatus for handling failure of servers in traffic forwarding (TF) systems between networks. A TF system may include units each including multiple servers. Outbound and inbound traffic for a local network may be distributed among the units according to a routing technique, with each unit responsible for an allocated portion of the traffic. Servers in a unit may participate in a health check protocol to detect servers that are not healthy. If the healthy servers in a unit drops below a threshold at which the unit cannot reliably handle its allocated portion of the traffic, the servers may automatically take the unit out of service, for example by stopping advertisement of routes, and the traffic may be reallocated across the remaining units. This may help prevent congestion-related delays, high latency, packet losses, and other problems on connections through the unhealthy unit.

Managing host failures in a traffic forwarding system

Methods and apparatus for handling failure of traffic forwarding (TF) systems in networks that include multiple zones each including a TF system between a production network and a border network. A TF system advertises routes in its zone and handles egress of packets from sources on the local production network onto the border network. TF systems may also advertise low-priority routes in other zones. If a TF system in a zone fails, sources in the zone may make connection requests to the low-priority routes. Instead of egressing the packets onto the border network, the requests on the low-priority routes are responded to with reset messages. Thus, the sources do not have to wait for a connection timeout, and packets for destinations in the zone are not egressed onto local border networks in other zones and sent through thin pipes between the local border networks.

Managing loss of network connectivity in traffic forwarding systems

Host port information is pulled directly from the switch before zoning is performed and is organized by chassis as an assist for mapping and masking an entire chassis. A graphical user interface allows a user to select storage by chassis to map and to select servers by chassis to map. The user then applies that mapping such that all servers selected are mapped to all storage selected. The user may repeat this mapping for another set of storage and servers. In a mixed environment, an icon may be shown in the graphical user interface to represent the mix. When the LUN mapping/masking is done, the LUN mapping/masking may be provided to the SAN manager to perform zoning. The LUN mapping/masking defines which host ports see which storage ports.

Zoning of devices in a storage area network with LUN masking/mapping

A method for scheduling execution of an application is provided. The method comprises monitoring a usage state of resources of a first virtual machine that executes the application, so as to determine whether the usage state reaches a predetermined state. The method further comprises migrating an application module consuming the resources to a second virtual machine having corresponding resources, if the usage state reaches a predetermined state.

Policy-based workload performance optimization for dynamically distributed OSGi application

An approach for managing a connection to or from a device is presented. Connections of the device are identified. Based on the connections, the device is determined and classified based on security zones to which the device is or has been connected, a quality of service requirement for one or more applications within the device, or a level of information technology service management for the device. Whether an existing or proposed connection of the device is consistent with the classification of the device is determined, and if not, an indication is displayed or a notification is sent that the existing or proposed connection is inconsistent with the classification of the device.

Automated security policy enforcement and auditing

A method, computer program product, and computer system for client-server communication based on delta transfer. A server of the computer system receives from a client a HTTP request for transferring a current image page, compares the current image page and a saved image page which is stored on the server for the client. Based on the comparison, the server of the computer system constructs delta contents between the current image page and the saved image page. The server of the computer system updates the saved image page on the server with the current image page and sends a HTTP response comprising the delta contents to the client.

HTTP performance enhancement based on delta transfer

A plurality of network addresses identify a source device in the network. A plurality of subscriptions for the source device to receive messages from the target devices each identify one of the target devices and one of the source network addresses the identified target device uses to communicate with the source device. Upon detecting a change to a changed network address, a determination is made of a subscription indicating the changed network address and the target device indicated in the determined subscription is determined. A selection is made of a selected network address, other than the changed network address is selected. If the selected network address can be used to communicate between the determined target device and the source device, then the selected network address is used and provided to the determined target device.

Determining a network address for managed devices to use to communicate with manager server in response to a change in a currently used network address

Provided are techniques for rendering a Graphical User Interface (GUI). A device capabilities set is obtained from a device. A rendering package that corresponds to the device capabilities set for the device is selected. The GUI is generated using the rendering package and the device capabilities set. The GUI is displayed to a user on a user interface to enable the user to manage the device.

Dynamic GUI rendering by aggregation of device capabilities

An apparatus and methods are disclosed for displaying a physical view of a monitored device. The apparatus for displaying a physical view of a device is provided with a plurality of modules configured to functionally execute the steps of displaying a physical representation of a device, generating a plurality of grid lines in association with a predetermined portion of the physical representation of the device, and displaying an icon configured to convey information regarding a status of the device, wherein the icon is displayed within an area defined by the plurality of grid lines. These modules in the described embodiments include a rendering module, a grid module, and a status module.

Apparatus and methods for displaying a physical view of a device

An apparatus, system, and method are disclosed for communicating interactive forms and reports in messaging applications. The apparatus for communicating interactive forms and reports in messaging applications is provided with a plurality of modules configured to functionally execute the necessary steps of selecting a markup language instruction, copying the markup language instruction and post the markup language instruction into a clipboard as a markup language object, pasting the markup language object into a data entry field associated with a messaging application, and injecting the markup language object into a message transmission to a second messaging application. These modules in the described embodiments include a selection module, a copy module, a paste module, and an injection module.

Apparatus, system, and method for communicating interactive forms and reports in messaging applications

A method include forming an initial bitmap from the de-duplicated data on virtual volumes, sorting discrete blocks according to frequency of occurrence to form a revised bitmap to first include a plurality of most common discrete blocks, creating a physical volume map from the revised bitmap, reviewing, from the physical volume map, an initial virtual volume of the virtual volumes contained on a corresponding original physical volume, to determine whether moving the initial virtual volume to a different physical volume reduces the total number of data blocks in the physical volume map, deleting the initial virtual volume from its corresponding original physical volume and adding the initial virtual volume to the different original physical volume to create a revised physical volume map including revised physical volumes, and writing the revised physical volumes to the target set of physical media using the revised physical volume map.

Methods and physical computer storage media for transferring de-duplicated data organized in virtual volumes to a target set of physical media for forming a bitmap and creating a volume map

Growing community of inventors

Tucson, AZ, United States of America

Andrew Gary Hourselt