Cisco Technology, Inc.

International Business Machines Corporation

Solarlego Inc.

David W Chang

Abhijit Patra

Nagaraj Bagepalli

Dileep Kumar Devireddy

Paul Arnold Ostler

Murali Anantha

Rajesh Kumar Sethuraghavan

Anshul Dawra

Ganesh Sadasivan

Stephen S Coates

Stephen Andrew Brodsky

Bilung Lee

Tony Leung

Randall William Horman

Rakesh M Pathak

Vijay R Bommireddipalli

Kyle Andrew Donald Mestery

Surendra M Kumar

Prashant Gandhi

William Earl Malloy

Holger Karn

Maurizio Portolani

Kyle Mestery

Mauricio Arregoces

Stefano Testa

Vijay Sagar

Harsha Narayan

Nagaraj A Bagepalli

Bagepalli Nagaraj

Many hybrid cloud topologies require virtual machines in a public cloud to use a router in a private cloud, even when the virtual machine is transmitting to another virtual machine in the public cloud. Routing data through an enterprise router on the private cloud via the internet is generally inefficient. This problem can be overcome by placing a router within the public cloud that mirrors much of the routing functionality of the enterprise router. A switch configured to intercept address resolution protocol (ARP) request for the enterprise router's address and fabricate a response using the MAC address of the router in the public cloud.

Default gateway extension

Network policies can be used to optimize the flow of network traffic between virtual machines (VMs) in a hybrid cloud environment. In an example embodiment, one or more policies can drive a virtual switch controller, a hybrid cloud manager, a hypervisor manager, a virtual switch, or other orchestrator to create one or more direct tunnels that can be utilized by a respective pair of VMs to bypass the virtual switch and enable direct communication between the VMs. The virtual switch can send the VMs network and security policies to ensure that these policies are enforced. The VMs can exchange security credentials in order to establish the direct tunnel. The direct tunnel can be used by the VMs to bypass the virtual switch and allow the VMs to communicate with each other directly.

Policy-driven switch overlay bypass in a hybrid cloud network environment

A hybrid cloud solution for securely extending a private cloud or network to a public cloud can be enhanced with tools for evaluating the resources offered by multiple public cloud providers. In an example embodiment, a public cloud evaluation system can be used to create a virtual machine (VM) in a public cloud to serve the function of a public cloud evaluation agent. The public cloud evaluation agent can instantiate one or more VMs and other resources in the public cloud, and configure the VMs and resources to execute performance evaluation software. The results of the performance evaluation software can be transmitted to a private enterprise network, and analyzed to determine whether the public cloud is an optimal public cloud for hosting an enterprise application.

Performance-based public cloud selection for a hybrid cloud environment

According to one aspect, a method includes an Intercloud Fabric Switch (ICS) included in a public cloud and an ICS cluster obtaining a packet, and determining if the packet is obtained from a site-to-site link that links the ICS to an enterprise datacenter. If the packet is obtained from the site-to-site link, it is determined whether the packet is an unknown unicast packet. If the packet is an unknown unicast packet, the packet is dropped, and if not, the packet is provided to an access link that links the ICS to a virtual machine. If the packet is not obtained from the site-to-site link, it is determined whether the packet is obtained from an inter-ICS link that allows the ICS to communicate with the ICS cluster. If the packet is obtained from the inter-ICS link, the packet is dropped if it is an unknown unicast packet.

System and method for scaling multiclouds in a hybrid cloud architecture

According to one embodiment of the present invention, a system enables control of database applications. The system comprises a computer system including a database application to provide access to a database system, and at least one processor. The computer system requests retrieval of application specific property information for the database application from a data repository, and applies the retrieved application specific property information to the database application to control operation of the database application. Embodiments of the present invention further include a method and computer program product for controlling database applications in substantially the same manner described above.

Method and system for centralized control of database applications

Techniques for connecting a plurality of solar rechargeable batteries in a planar arrangement or vertical arrangement are disclosed, wherein the plurality of solar rechargeable batteries are electrically connected, wherein each of the plurality of solar rechargeable batteries includes an integrated solar cell and a plurality of interconnections for electrically connecting with the plurality of solar rechargeable batteries in series and in parallel, and wherein the plurality of interconnections include a combination of male and female connectors that allow for electrically connecting the plurality of solar rechargeable batteries in series and in parallel; determining whether the plurality of solar rechargeable batteries are connected in series or in parallel; balancing the load of the plurality of solar rechargeable batteries so that each of the plurality of solar rechargeable batteries is equally charged; and wherein each of the plurality of solar rechargeable batteries can be connected standalone to an electrically powered device to power the electrically powered device.

Interconnecting solar rechargeable batteries in a planar or vertical arrangement

A sense of location is provided for distributed virtual switch components into the service provisioning scheme to reduce latency observed in conducting policy evaluations across a network in a hybrid cloud environment. A management application in a first virtual network subscribes to virtual network services provided by a first virtual service node in the first virtual network. A second virtual network receives the subscription to the virtual network services and starts a virtual switch that switches network traffic for one or more virtual machines in the second virtual network that are configured to extend services provided by the first virtual network into the second virtual network. The second virtual network starts a second virtual service node in the second virtual network that provides network traffic services for the one or more virtual machines.

Location-aware virtual service provisioning in a hybrid cloud environment

Techniques are provided for implementing a zone-based firewall policy. At a virtual network device, information is defined and stored that represents a security management zone for a virtual firewall policy comprising one or more common attributes of applications associated with the security zone. Information representing a firewall rule for the security zone is defined and comprises first conditions for matching common attributes of applications associated with the security zone and an action to be performed on application traffic. Parameters associated with the application traffic are received that are associated with properly provisioned virtual machines. A determination is made whether the application traffic parameters satisfy the conditions of the firewall rule and in response to determining that the conditions are satisfied, the action is performed.

Zone-based firewall policy model for a virtualized data center

A sense of location is provided for distributed virtual switch components into the service provisioning scheme to reduce latency observed in conducting policy evaluations across a network in a hybrid cloud environment. A management application in a first virtual network subscribes to virtual network services provided by a second virtual network. A first message is sent to the second virtual network, the first message comprising information configured to start a virtual switch in the second virtual network that switches network traffic for one or more virtual machines in the second virtual network that are configured to extend services provided by the first virtual network into the second virtual network. A second message is sent to the second virtual network, the second message comprising information configured to start a virtual service node in the second virtual network that provides network traffic services for the one or more virtual machines.

Presented herein are elastic service chain techniques. In one example, a network element receives data traffic to be processed by a service chain that specifies an ordered sequence of service pools including a first service pool and second service pool, wherein each service pool comprises a plurality of network services. A network service is determined from the first service pool to be applied to the data traffic, and data traffic is forwarded to the network service in the first service pool.

Elastic service chains

Growing community of inventors

Milpitas, CA, United States of America

David W Chang