Citrix Systems, Inc.

Ciena Corporation

Other

Chiradeep Vittal

Alex Huang

William K Chan

Sheng Liang

Will Chan

Abhishek Chauhan

Jeremy Matthew White

Raghav Sn

Shawn Edmondson

Sanchita Ghai

Kevin Kluge

Rajesh Joshi

Manikam Muthiah

Aman Chaudhary

Guanghong Yang

Vinay Shivananda

Bhavana Shobhana

Ruchit Gupta

Gopesh Garg

William Chan

Described embodiments provide systems and methods for displaying a service graph in association with a time of a detected anomaly. A device may store a plurality of snapshots of a service graph of a plurality of microservices. Each of the snapshots of the service graphs include metrics at a respective time increment from execution of each of the plurality of microservices. The device may detect an anomaly with operation of one or more microservices of the plurality of services. The device may identify a set of snapshots of the service graph within a predetermined time period of a time of the anomaly. The device may display each of the snapshots in the set of snapshots of in sequence corresponding to time increments within the predetermined time period of the time of the anomaly.

Displaying a service graph in association with a time of a detected anomaly

Described embodiments provide systems and methods for replaying a service graph of a plurality of microservices. A device stores a plurality of snapshots of a service graph of a plurality of microservices generated for each of a plurality time increments over a time period. Each of the plurality of snapshots of the service graphs include metrics at a respective time increment from execution of each of the plurality of microservices. The device receives a request to replay the service graph. Responsive to the request, the device displays at least two or more of the plurality of snapshots of the service graph in sequence corresponding to two or more of the plurality of time increments.

Replay a service graph at a point in time to troubleshoot

Described embodiments provide systems and methods for executing a plurality of validation tests to validate a plurality of microservices of one or more services. A device intermediary to a plurality of microservices of one or more services identifies a plurality of validation tests, each of the validation tests configured with a timeline, a target microservice and one of a synthetic error or a latency to implement to validate the target microservice. The device executes a first validation test of the plurality of validation tests to implement, over a first timeline, one of a first synthetic error or a first latency in responding to a first target microservice of the plurality of microservices. The device executes a second validation test of the plurality of validation tests to implement, over a second timeline, one of a second synthetic error or a second latency in responding to a second target microservice of the plurality of microservices. The device validates, responsive to executing each of the plurality of validation tests, the plurality of microservices of the one or more services.

Dependency API controlled experiment dashboard

The implementations described herein provide a tool for identifying security issues and applying security policies to the service(s) and/or microservices. Rather than a user (such as an administrator) reactively diagnosing security incidents, the systems and methods described herein may provide a tool by which the user can proactively monitor the use of the services and microservices for security issues and control the user of such microservices and services via policies. The systems and methods allow API granular policy control to determine which APIs may be granted or denies access based on a variety of criteria, such as but not limited to the source of the request, the specific API being called, temporal conditions, geography and so forth. The user can identify security concerns or issues on a per API basis.

Applying policies to APIs for service graph

Disclosed herein includes a system, a method, and a device for providing persistence across applications using a content switching server. A device can receive a first request from a client for a version of an application having different versions provided by one or more servers. The device can provide access to each version of the application via different load balancing virtual servers. A content switching virtual server of the device can select a load balancing virtual server to handle the first request for the version of the application. The content switching virtual server can generate a session identifier for a session between the client and the version of the application to persist the session with the selected load balancing virtual server for subsequent requests from the client for the version of the application.

Systems and methods for persistence across applications using a content switching server

The disclosure is directed towards systems and methods for injecting or introducing synthetic errors and latency for testing purposes into microservices provided by one or more servers. A device acting as an intermediary to communication can inject errors into responses or requests traversing the device. The errors can include additional latency, dropped packets, or memory or disk errors. Introducing errors and latency for testing purposes can be used to proactively monitor and identify issues with resources.

API dependency error and latency injection

Methods and systems for performing application deployments in a computing environment are presented herein. One or more components of the computing environment may perform a canary deployment of an updated version of an application. As the canary deployment is performed, one or more determinations as to whether to continue, stop, or complete the canary deployment may be performed. These determinations may be based on one or more metrics determined by an application delivery controller of the computing environment. The application delivery controller may be configured to divert or forward traffic to application resources that execute the updated version. Additionally, the canary deployment may be performed in an automated fashion.

Canary deployment using an application delivery controller

Described herein are systems and methods for identifying a down, inactive or missing network link or microservice of a service graph. The system and methods described herein may identify a service graph for monitoring. The system and methods described herein may monitor the service graph topology, such as services and networks. The system and methods described herein may determine a link or node is down or inactive. The system and methods described herein may display indications in the service graph that the ode or link is down or inactive. The implementations described herein may increase the efficiency of diagnostics and monitoring of the links and nodes and may decrease downtime as a result of incidents by providing a faster mechanism by incidents may be remediated.

Service graph highlights missing nodes and links

A cloud system may create and support multiple network offerings for virtual machines in a cloud zone. Physical networks comprising sets of network elements, such as routers, gateways, firewalls, load balancers, and other network hardware, may be created and updated within a zone. Network offerings may be defined and associated, using tags or other techniques, with virtual machine networks, physical networks and/or network elements. Cloud end users may request specific network offerings when creating virtual machines, or may request to move existing virtual machines from one network offering to another. The cloud system may use the requested network offering to identify the virtual machine network, physical network, and/or network elements corresponding to the requested network offering. The cloud system may allocate a new virtual machine network and configure the network elements within the associated physical network to provide network services to the virtual machine.

Network offering in cloud computing environment

A diagnostic virtual machine having access to resources of an infrastructure as a service cloud may be created. A user device may be provided access to the diagnostic virtual machine. In some embodiments, the diagnostic virtual machine may be configured to monitor a cluster of hypervisors, and the resources of the infrastructure as a service cloud which the diagnostic virtual machine has access to may include physical resources of the infrastructure as a service cloud that are associated with the cluster of hypervisors.

Creating multiple diagnostic virtual machines to monitor allocated resources of a cluster of hypervisors

Methods and systems for managing cloud zones are described herein. A management server for a cloud of computing resources may add private zones to the cloud. The private zones may contain computers owned and operated by a user of the cloud, such as a cloud customer, rather than the cloud operator. The management server may manage the computing resources in the private zone by sending commands to an agent, which in turn relays the management server's commands to the individual computing resources. The agent may be authenticated using a token.

Growing community of inventors

Cupertino, CA, United States of America

Chiradeep Vittal