Mellanox Technologies, Ltd.

Wiz, Inc.

Daniel Klein

Ami Luttwak

Yaniv Shaked

Gal Kozoshnik

Roy Reznik

Lion Levi

Mattan Shalev

Yinon Costica

Eitan Zahavi

Gil Bloch

Raaz Herzberg

Tamir Ronen

Vladimir Koushnir

Jose Yallouz

Gil Mey-Tal

Yishai Oltchik

Aleksandr Minchiu

Michael Gandelman Milgrom

An apparatus, system, and method include, for each of two or more switches of a communication network, identifying a set of routing paths from the switch to a destination node based on a topology associated with the communication network. The set of routing paths include a first subset of routing paths and a second subset of routing paths. The topology includes an indication of a convergence of the first subset of routing paths at a node between the switch and the destination node. The apparatus, system, and method include allocating a data flow to a first routing path of the first subset of routing paths and a second routing path of the second subset of routing paths according to a target data flow rate common to the first routing path and the second routing path.

Adaptive routing for asymmetrical topologies

A system and method for evaluating definitions from a markup language document for agentless host configuration of an image in a virtualized computing environment generates an instruction to deploy a virtual instance based on a base image, the virtual instance including a disk. The method further includes generating an inspectable disk based on the disk of the virtual instance; receiving a markup language document, the document including a plurality of definitions, each including a data element; inspecting the inspectable disk for a cybersecurity object corresponding to a data element of a first definition of the plurality of definitions; evaluating the first definition based on the cybersecurity object to generate an evaluated first definition result, in response to determining that the definition is evaluable; generating an output based on the evaluated first definition result; and generating the output based on a notification, in response to determining that the definition is unevaluable.

System and method for agentless host configuration detection of an image in a virtualized environment

A system and method for evaluating definitions from a markup language document for agentless host configuration includes generating an inspectable disk based on a disk of a host, the host deployed in a virtualized computing environment. The system is configured to: receive a markup language document, the markup language document including a plurality of definitions, each definition including a data element; inspect the inspectable disk for a cybersecurity object corresponding to a first data element of a first definition of the plurality of definitions; evaluate the first definition further based on the cybersecurity object to generate an evaluated first definition result, in response to determining that the definition is evaluable; generate an output based on the evaluated first definition result; and generate the output based on a predetermined notification, in response to determining that the definition is unevaluable.

System and method for agentless host configuration detection in a computing environment

A method and system for populating multi-layer technology product catalogs are provided. The method includes scanning an environment and executing a software project to collect hints on technology products required for the execution of the software project; mapping the collected hints to identifiers of technology products to identify technology products required for the execution of the software project; analyzing each of the identified technology products to determine a set of descriptors identifying certain attributes of a technology product; classifying each of the identified technology products to at least one technology layer, wherein a technology layer represents the functionality of a technology product; populating a technology product catalog to include a plurality of entries, wherein each entry is associated with a single technology product and maintains the set of descriptors and the at least one technology layer associated with the technology product; and saving the populated technology product catalog in a database.

Populating multi-layer technology product catalogs

In one embodiment, an in-network compute resource assignment system includes a network device to receive a request to select resources to perform a processing job, wherein the request includes at least one resource requirement of the processing job, and end point devices assigned to perform the processing job, a memory to store a state of in-network compute-resources indicating resource usage of the in-network compute-resources by other processing jobs, and a processor to manage the stored state, and responsively to receiving the request, selecting ones of the in-network compute-resources to perform the processing job based on: (a) a network topology of a network including the in-network compute-resources; (b) the state of the in-network compute-resources; and (c) the at least one resource requirement of the processing job.

Ad-hoc allocation of in-network compute-resources

A network element includes processing circuitry and multiple ports. The ports connect using links to a communication network. The processing circuitry is configured to receive packets via the ports and forward the received packets to respective destination addresses via the ports. The destination addresses are organized in address groups, each address group including multiple destination addresses of nodes connected to a common network element in the communication network. The processing circuitry is further configured to, in response to identifying that a given port connects to a faulty link, determine one or more address groups that became unreachable via the given port due to the faulty link, generate a notification reporting one or more of the determined address groups that are unreachable via any port other than the given port, and transmit the notification to one or more other network elements, via one or more ports other than the given port.

Efficient propagation of fault routing notifications

Growing community of inventors

Tel Aviv, Israel

Daniel Klein