Vmware, Inc.

Atul Jadhav

Abhijit Sharma

Prahalad Gowardhan Deshpande

Shashank Ranjan

Nikhil Bhalerao

Karthik Seshadri

Sivaraj M

Mageshwaran Rajendran

Giri Prashanth Subramanian

Ravi Singhal

Santhosh Prabhu Muraleedhara Prabhu

Rohit Reja

Nibunan G S

The present disclosure provides an approach for generating one or more firewall rules to regulate communication between containerized services running within containers. The approach includes determining which services communicate with each other, independently of in which containers the services execute. The determining occurs over a period of time. If two services communicated with each other during the period of time, then the firewall allows the services to continue communicating, but only over the same ports as used during the period of time. If two services did not communicate during the period of time, then the firewall does not allow the services to communicate after the expiration of the period of time. In some embodiments, redetermining the communication flow over a new period of time may occur after the initial period of time so as to refresh the firewall rules.

Recommending network NANO-segmentation for micro-services using flow analysis

Methods, apparatus, systems, and articles of manufacture are disclosed herein to formally verify a network with both physical and virtual components. The modeling and formal verification is performed by an apparatus comprising: a topology generator to generate a network model including a plurality of devices connected in a network; a flow modeler to add a rule to the network model, the rule to define a flow of network packets through the network model; a reduction mapper to identify the rules common to ones of the devices; and a mapping verifier to verify the network meets a user specification.

Methods and apparatus to model and verify a hybrid network

The present disclosure provides an approach for creating one or more firewall rules to regulate communication between containers. The approach includes calculating a trust score for each container. To generate a rule for any two containers, a difference between the trust scores is computed, and if the difference in trust levels is too large, then the more trustworthy container is not allowed to communicate with the less trustworthy container. If the difference in trust scores is not too large, then the trustworthy container is allowed to communicate with the other trustworthy container, or an untrustworthy container is allowed to communicate with another untrustworthy container.

Security context aware nano-segmentation for container based microservices

Various examples are disclosed for generating metrics for quantifying computing resource usage. A computing environment can identify a computing function that utilizes a plurality of computing services hosted in at least one virtual machine. The computing environment can determine a first cost metric for the at least one virtual machine based on hardware resources used by the at least one virtual machine and determine a second cost metric for individual ones of the computing services based on virtual machine resources used by the individual ones of the computing services and the first cost metric. A third cost metric can be determined for the computing function as a function of the second cost metric and a utilization ratio.

Generating metrics for quantifying computing resource usage based on cost and utilization of virtualized services and optimizing performance through virtualized service migration

Growing community of inventors

Pune, India

Atul Jadhav