International Business Machines Corporation

Radware, Ltd.

Benny Rochwerger

Julian Satran

Irit Loy

Katherine Barabash

Rami Cohen

David Hadas

David Aviv

Liane Lewin-Eytan

Efraim Zeidner

David Breitgand

Alain Charles Azagury

Kenneth Nagin

Yair Koren

Arie Tal

Yaron Wolfsthal

Alexander Glikson

Alex Glikson

Renato John Recio

Vinit Jain

Ehud Doron

Gidon Gershinsky

Yariv Aridor

Kenneth M Nagin

Liran Schour

Shy Marom

Ezra Silvera

Shay Goikhman

Samuel Bercovici

Oleg Goldshmidt

Kobi Samoray

Itamar Gilad

A method and system for multi-layer traffic steering for enabling service chaining over a software defined network (SDN) are provided. The method is performed by a central controller of the SDN and includes receiving at least one service chaining rule defining at least one value-added service (VAS) to assign to an incoming traffic flow addressed to a destination server; analyzing each of the at least one received service chaining rule to determine if an application-layer steering is required; generating at least one application-layer steering rule, upon determining that an application-layer steering is required; generating at least one network-layer steering rule, upon determining that an application-layer steering is not required; and programming a multi-layer steering fabric with the generated at least one of network-layer steering rule and application-layer steering rule.

Multi-layer traffic steering for service chaining over software defined networks

A system and method for managing an application delivery controller (ADC) cluster including a plurality of ADCs are provided. The method includes creating a hash table including a plurality of buckets, wherein a number of the plurality of buckets is a multiple of a maximum number of active ADCs that can be supported by the ADC cluster; allocating, to each active ADC of the ADC cluster, one of the plurality of buckets; and instructing at least one network element to distribute traffic to and from the active ADCs based on the hash table.

Techniques for adaptive traffic direction via scalable application delivery controller services

A method, host machine, and a virtual network for distributing application delivery controller services in a virtual network are presented. The method includes activating a first application delivery controller (ADC) agent on at least a first host machine of a plurality of host machines included in the virtual network, wherein the first host machine is configured to host at least one client; intercepting, by the first ADC agent, a request from the at least one client, wherein the request is for a service provided by one server of a plurality of servers hosted by the plurality of host machines; selecting, by the first ADC agent, a server of the plurality of servers to serve the request; forwarding, by the first ADC agent, the intercepted request to the selected server; and relaying a response to the intercepted request received from the selected server to the at least one client.

Techniques for distribution of application delivery

An approach is provided in which a system creates a network application model that includes network policy objects and connection rules corresponding to sending data between the network policy objects. The system converts the network application model to network configuration information, which links the network policy objects to the connection rules. In turn, a network control plane is configured based upon the network configuration information to map the network application model to a physical infrastructure.

Object oriented networks

Systems and methods for migrating a virtual resource from a source host in a source network to a destination host in a destination network are provided. In one embodiment, the method comprises establishing a secure communication connection between a source proxy in the source network and a destination proxy in the destination network; and monitoring migration traffic directed from the source host to the source proxy and forwarding said traffic to the destination proxy which in turn forwards the traffic to the destination host over the secure communication connection between the source proxy and the destination proxy, such that the communication addresses of the source host and the destination host remain guarded from direct access by an entity outside of the source network or the destination network.

Migration of virtual resources over remotely connected networks

A method for managing remote deployment of a virtual machine (VM) in a network environment is provided. A VM image stored in a second storage medium is copied to a first storage medium. The first storage medium is located in close proximity to a first computing system, and the second storage medium is located remotely from the first computing system and in close proximity to a second computing system. As the VM image is being copied, a first VM is deployed on the first computing system from a partial copy of the VM image stored in the first storage medium, and a second VM is deployed on the second computing system from the VM image stored in the second storage medium. Service requests submitted to the first computing system are managed either locally by the first VM or remotely by the second VM based on type of service requested.

Managing remote deployment of a virtual machine and service request to be processed by the virtual machines based on network bandwith and storage connectivity

According to one embodiment of the present disclosure, an approach is provided in which a policy server receives a request for a policy from a requestor. The policy server identifies an initiating virtual machine; the initial virtual machine's corresponding virtual network; and a destination virtual machine. Next, a policy corresponding to sending data from the first virtual machine to the second virtual machine is selected. The policy includes one or more logical references to the virtual network and does not include a physical reference to a physical entity located on a physical network. In turn, a physical path translation corresponding to the selected policy is identified and sent to the requestor.

Distributed policy service

Systems and methods for deploying a virtual machine (VM) on a host are provided. An exemplary method comprises notifying a host to download a master copy of a VM image from a remotely located network storage device, in response to a service provider providing a definition manifest for a service request supported by the VM, wherein the host deploys the VM directly from the VM image downloaded to a storage medium locally connected to the host machine, wherein deployment of the VM allows the host to locally service the service request associated with the definition manifest, wherein the host replicates copies of the VM image, in response to receiving additional service requests to create one or more VM clones; wherein the host customizes the one or more VM clones based on the definition manifest.

Optimized deployment and replication of virtual machines

A method for accessing data stored in a distributed storage system is provided. The method comprises determining whether a copy of first data is stored in a distributed cache system, where data in the distributed cache system is stored in free storage space of the distributed storage system; accessing the copy of the first data from the distributed cache system if the copy of the first data is stored in a first data storage medium at a first computing system in a network; and requesting a second computing system in the network to access the copy of the first data from the distributed cache system if the copy of the first data is stored in a second data storage medium at the second computing system. If the copy of the first data is not stored in the distributed cache system, the first data is accessed from the distributed storage system.

Data storage management using a distributed cache scheme

Systems and methods for policy-driven capacity management in a resource provisioning environment, the method comprising storing, in an operational database one or more virtual resource sets (VRSs) and elasticity ranges for components to be deployed in a resource provisioning environment, and probabilistic guarantees on the elasticity ranges defined in a service manifest provided by a service subscriber; collecting historical data about capacity usage in the resource provisioning environment and failure statistics from the operational database, in addition to prior service commitments due to previously contracted service level agreements (SLAs) stored in a SLA repository; calculating equivalent capacity for the resource provisioning environment based on a defined residual benefit goal, and other business goals instrumented by way of a policy engine; and placing requested virtual resources on physical resources, in response to determining that sufficient physical capacity is available to host the calculated equivalent capacity.

Policy-driven capacity management in resource provisioning environments

A method for managing communication between nodes in a virtual network is provided. A first computing system utilizes first information to forward first data to the second computing system in a physical network. If the first information is incorrect, the second computing system forwards an unlearning request to the first computing system, and the first computing system updates or deletes the first information. If the first information is not available, the first computing system forwards the first data to a group of computing systems in the physical network by way of an unknown network service. Upon receiving the first data, the second computing system or a third computing system in the physical network forwards a learning request to the first computing system, and the first computing system utilizes the learning request to generate the first information.

Managing communication between nodes in a virtual network

Systems and methods for remotely installing software on a computing system while the computing system is running on a first bootable image, so that the computing system is not removed from operation during the installation of a second bootable image. The method comprises constructing the second bootable image on a storage medium accessible to the computing system while the computing system is operating in a first operating environment in association with the first bootable image, customizing the second bootable image so that the computing system can operate in a second operating environment in association with the second bootable image, disassociating the computing system from the first bootable image, and associating the computing system with the second bootable image.

Installation of a bootable image for modifying the operational environment of a computing system

A method for managing communication between nodes in a virtual network is provided. A first computing system utilizes first information to forward first data to the second computing system in a physical network. If the first information is incorrect, the second computing system forwards an unlearning request to the first computing system, and the first computing system updates or deletes the first information. If the first information is not available, the first computing system forwards the first data to a group of computing systems in the physical network by way of a multicast service. Upon receiving the first data, the second computing system or a third computing system in the physical network forwards a learning request to the first computing system, and the first computing system utilizes the learning request to generate the first information.

A cluster application deployment model provides an efficient computer implemented technique for the deployment of applications on a shared file system, and includes an automated mechanism for mapping the shared application image into the local file system of a new node of a cluster.

Growing community of inventors

Zichron Yaakov, Israel

Benny Rochwerger