International Business Machines Corporation

Christopher Thomas Gloe

David Alan Christenson

Daniel Paul Kolz

Bob Richard Cernohous

Scott Jon Prunty

Adam Clark

John Charles Kasperski

Kathryn Ann Tri

John Joseph Bird

Franklin A Gruber

Mark Linus Bauman

Paul Richard Chmielewski

Jay Robert Weeks

Dawn Marie May

Kevin Glynn Paterson

Michael John Fork

Brian E Jongekryg

Kevin Wayne Kirkeby

James Richard Coon

Michael Britt

Chris M Mwarabu

Thomas P Pitzen

Frances E Stewart

Kyong Jin Shim

Timothy R Seeger

Scott Douglas McCreadie

Alicia L Williams

Paul A Wolf

Techniques are disclosed for configuring a virtual machine instance accessed over a publically routable network address to host intranet applications. A virtual (or 'dummy') interface on the virtual machine instance is assigned an IP address that is inaccessible from the public interface. An application executed on the virtual machine instance is bound to a port on the network address assigned to this dummy interface. A virtual private network server assigns client's IP addresses that can be routed to the dummy interface. When a client computing system connects to the VPN server over the virtual machine instance's public interface, the client forwards traffic destined for the dummy interface's inaccessible network over the VPN connection.

Securing applications on public facing systems

A method, apparatus, and program product are provided for protecting a network from intrusions. An offending packet communicated by an offending host coupled to a protected network is detected. In response to the detection, a blocking instruction is returned to the offending host to initiate an intrusion protection operation on the offending host, where the blocking instruction inhibits further transmission of offending packets by the offending host. At the offending host, a blocking instruction is received with a portion of an offending packet. The offending host verifies that the offending packet originated from the host. In response to the verification of the offending packet originating from the host, an intrusion protection operation is initiated on the host thereby inhibiting transmission of a subsequent outbound offending packet by the host.

Blocking intrusion attacks at an offending host

Embodiments of the invention provide a method of managing aliases on a server, including deleting unused aliases, while minimizing required administrator interaction. The server may include expirable alias records, containing an expiration value and an inactivity timer. An alias manager component may process the expirable records. If the alias manager component determines a particular record has expired, the alias manager component may delete that record.

Managing an alias host and domain names on a DNS server

Systems, methods and articles of manufacture are disclosed for identifying and resolving port conflicts during application deployment. The port conflicts may be identified based on application documentation and active port information. The port conflicts may be resolved by identifying an available port and providing information about the available port to a conflicting application. The port conflicts may also be resolved by identifying an available IP address and providing a port on the available IP address to a conflicting application. Further, if conflicting applications allow port sharing, the port conflicts may be resolved by providing port sharing information to the conflicting applications.

Automatic port conflict resolution during application deployment

Systems, methods and articles of manufacture are disclosed for configuring a network device on a private network. A network device broadcasts a status message to the private network. The network device receives a request from a client and sends a response. The network device and the client establish a direct message route wherein one or more network configuration settings are exchanged between the client computer and the network device.

Network device configuration

In an embodiment, a guest operating system receives first host network information that identifies a host virtual network adapter. The first host network information uniquely identifies the host virtual network adapter. The guest operating system sends a first frame that comprises the first host network information to a guest virtual network adapter. The guest virtual network adapter sends the first frame to the host virtual network adapter. The guest operating system receives second host network information that identifies the host virtual network adapter. The second host network information uniquely identifies the host virtual network adapter. The guest operating system sends a second frame that comprises the second host network information to the guest virtual network adapter. The guest virtual network adapter sends the second frame to the host virtual network adapter identified by the second host network information in the second frame.

Communication between a host operating system and a guest operating system

Systems, methods and articles of manufacture are disclosed for updating IP addresses on a private network. A DNS server receives an updated IP address and stores both the updated IP address and an old IP address. The DNS server includes the updated IP address in responses to all DNS query requests, wherein the DNS query requests are to the old IP address. Further, the DNS server deletes the old IP address and updates the DNS server network settings with the updated IP address after every remote client on the private network has stored the updated IP address.

Propogation of DNS server IP addresses in a private network

A method, apparatus and computer readable medium is provided for tracking processes using a socket object. The processes are utilized to execute an application program. Initially, a process list for the socket object is created, such that the process list contains a process identifier for a first process using the socket object. If a second process is using the socket object, the process list is updated to include the process identifier for the second process.

Tracking network socket usage in a data communication network

Systems, methods and articles of manufacture are disclosed for resolving hostnames on a private network with a public Internet server. One embodiment of the invention provides for a public Internet server configured to generate a private network ID when a new private network is identified, wherein the private network ID is a unique reference to all nodes within a private network and wherein the private network is comprised of one or more private DNS servers. The public internet server stores the private network ID and an IP address for at least one or more private DNS servers on the private network and sends, upon request, the private network ID to at least one of the private DNS servers.

Resolving hostnames on a private network with a public internet server

Systems, methods and articles of manufacture are disclosed for resolving hostnames on a private network with a distributed DNS server configuration. One embodiment of the invention provides for a client resolver configured to communicate with a distributed network of servers. The client resolver receives a hostname query and determines if the hostname query is of the type single label hostname or fully qualified hostname. If the hostname query received is of the type fully qualified hostname, the client resolver routes the hostname query to a server with a longest matching domain suffix. If the hostname query received is of the type single label hostname the client resolver generates one or more new fully qualified hostnames and routes the hostname query to each server on the private network.

Growing community of inventors

Rochester, MN, United States of America

Christopher Thomas Gloe