International Business Machines Corporation

Eran Raichstein

Gregory John Tevis

Katherine Barabash

Anna Levin

Ofer Elrom

Uri Wolloch

David Gregory Van Hise

Rami Cohen

Yaniv Ben-Itzhak

Liane Lewin-Eytan

Michael Sternberg

Oren Wolf

Amitabha Biswas

Gil Sasson

Hani Talal Jamjoom

Dan S Pelleg

Shriram Rajagopalan

Amir Ronen

Dean Lorenz

Asaf Yeger

Liran Schour

Ofer Peretz

Vitaly Lyaskovsky

Gadi Hay

Gregory D Van Hise

Michael Edward Factor

James Patrick Smith

Avishai Haim Hochberg

Christopher Zaremba

Abel Alkon Gordon

David Breitgand

Ophir Azulai

Dean Har'el Lorenz

Michael Masin

Ofer Lavi

Ofer Biran

Ilyas Mohamed Iyoob

Nadav Yosef Har'el

Alex Gantman

Robert S Elder

Shmuel Ben Yehuda

Daniel Katz

Avi Weit

Eli Shahaf

Razya Ladelsky

Ami Kleinman

Dudi Lester

Amihay Schwarz

Raul D Segal

Sergey Guenender

Machines, systems and methods for managing quality of service (QoS) in a multi-tenant virtualized computing environment, the method comprising: collecting transmission rate statistics associated with data communicated in a virtual network, wherein at least one virtual switch monitors communications initiated by at least a virtual machine (VM) executed on a host machine serviced by the virtual switch; determining, by way of the virtual switch, profile parameters associated with a first communication initiated by the VM belonging to at least a first group, wherein a connection request is submitted by the virtual switch to a traffic controller to assist in establishing the first communication; classifying the connection request for establishing the first communication according to the profile parameters associated with the first communication; determining a first aggregated transmission rate associated with the VM that initiated the first communication based on the classifying.

Bandwidth control in multi-tenant virtual networks

Embodiments of the present communications systems and methods may provide the capability for fast and reliable transitioning between the different versions of the service of the multi-node service deployed in the utility computing system. For example, in an embodiment, a computer-implemented method for data traffic distribution may comprise allocating a plurality of data traffic service network addresses to a load balancer service, wherein each data traffic service network address is associated with a different version of the load balancer service, receiving a plurality of data traffic flows, and distributing each data traffic flow to a version of the load balancer service based on a data traffic service network address of each data traffic flow.

DNS-based in-packet service version tagging

Automatic cloning of a PYTHON CONDA environment into a DOCKER image, such that at least one CONDA container that functions the same as the PYTHON CONDA environment can be started from the DOCKER image. The automatic cloning may include: First, creating a Dockerfile that comprises commands to: install a PYTHON ANACONDA environment or obtain a PYTHON ANACONDA environment image, copy the PYTHON CONDA environment into the DOCKER image, and run a CONDA command, in the ANACONDA environment, to create a cloned PYTHON CONDA environment from the copied PYTHON CONDA environment. Second, building the DOCKER image from the Dockerfile.

Automatic cloning of Conda environment into Docker image

A heterogeneous resource reservation (HRR) manager configured to classify historical application requests from a past time interval for a first workload to generate labeled historical application requests. The HRR manager further configured to generate a forecast based on the labeled historical application requests and for predicting future application requests for the first workload for a future time interval and calculate a joint plan based on the forecast. The joint plan including a set of virtual resources, a set of billing contracts, and a set of load balancer weights. The HRR manager further configured to implement the joint plan for a distributed computing workload during the future time interval.

Heterogeneous resource reservation

A method, system and computer program product, the method comprising: in response to receiving a packet from a stream of packets transmitted to a computing platform, determining, based on a meta-data of the packet, whether to capture the packet or avoid capturing thereof, said determining comprising: subject to the meta-data indicating that a sequence number of the packet is within a first range or within a second range, wherein a distance between an end of the first range and a beginning of the second range is at least of a predetermined size, wherein a distance, through a wraparound, between an end of the second range and a beginning of the first range is at least of the predetermined size, thereby a wraparound situation is identifiable within the stream of packets; and in response to determining to capture the packet: capturing the packet; and transmitting the packet to analysis.

Method and system for monitoring communication in a network

Embodiments of the present invention provide methods, computer program products, and systems for fulfilling a service chain request. Embodiments of the present invention can be used to collect network data of a plurality of instances of services and connections between the plurality of instances of services and redefine service chains to direct flow to an alternative instance of a service responsive to determining that an instance of a service in a service chain has become inaccessible. Embodiments of the present invention can be used to fulfill a service chain request and avoid one or more instances of services (and/or connections there between) that could cause a delay between transmitting data packets through the service chain.

Adaptive service chain management

Multiple target blocks on a first storage device are allocated to store a target object. The target blocks are arranged to be in a one-to-one correspondence with multiple source blocks of a source object. The target blocks are set to a non-populated state, and target blocks in the non-populated state are populated with data from corresponding source blocks. While the target blocks are being populated, if a request is received to retrieve data from one of the target blocks that is in the non-populated state, then the one of the target blocks is populated with the data from the corresponding source block and set to a populated state.

Fast copy using file system block mappings

Multiple target blocks are allocated on a first storage device to store a target object. The target blocks are arranged to be in a one-to-one correspondence with multiple source blocks of a source object. The target blocks are set to a non-populated state, and target blocks in the non-populated state are populated with data from corresponding source blocks. While the target blocks are being populated, if a request is received to retrieve data from one of the target blocks that is in the non-populated state, then the one of the target blocks is populated with the data from the corresponding source block and set to a populated state.

An exposed Internet Small Computer System Interface (iSCSI) target of a backup repository is defined as a source of, and a storage volume to be recovered as a target of, a mirrored pair of storage resources. The iSCSI target represents a point-in-time backup snapshot. Data from the iSCSI target is synchronized to the storage volume. The mechanisms of the illustrated embodiments leverage iSCSI with Instant Restore to reduce a Recovery Time Objective (RTO) and provide a secure transport when recovering a volume over a WAN.

Instant data restoration

A learning-based computer network security system may include a service delivery controller executing on one or more of hardware processors that receives requests for transmitting network flows to one or more destination machines via a communication network. The service delivery controller may group the network flows into one or more similarity groups, and direct the network flows in a particular similarity group to a learning-based security appliance instance designated for the particular similarity group. Based on receiving feedback from the security appliance instance, the service delivery controller may regroup the similarity groups, and/or redirect the network flows, and/or redistribute the training results between the appliances, and/or modify assignment of appliances to similarity groups.

Service delivery controller for learning network security services

Growing community of inventors

Yokneam Ilit, Israel

Eran Raichstein