Microsoft Technology Licensing, LLC

Mohit Kumar Garg

Andrea D'Amato

Richard Paul Testardi

Ashok Kumar Nandoori

Devidas Joshi

Gautam Gopinadhan

Ernie Pistor

Sebastien Charles

Stephen Wade Wolfe

John Renaud

Benjamin M Schultz

Abhishek Agarwal

Poornananda R Gaddehosur

Vikrant Arora

Ashish Jain

Ning Wei

Nalin Raj Gupta

Sandeep Bansal

Abhishek Gupta

Abhishek Tiwari

Shivakumar Thangapandi

Shireen Anvarhusein Isab

Faraz H Qadri

Aniket A Malatpure

Swapnil T Ashtekar

Greeshma Vijayakumar

Phani Prakash Boppana

Trivikram Somisetty

Buyu Chen

Ankur Hayatnagarkar

Aakash Valangaiman Radhakrishnan

Systems and methods for remote command access in a hybrid cloud to on-premises devices are described. An example method includes receiving, by a gateway service, a request for a connection between a remote support service agent and an on-premises device. The method further includes receiving, by the gateway service, consent from an authorized user associated with the on-premises device. The method further includes creating, by the gateway service, a first session with the on-premises device, where a scope of the consent is limited to the first session. The method further includes provisioning, by the gateway service, a device-specific hybrid connection endpoint for the first session. The method further includes forming, by the gateway service a secure session by binding the device-specific hybrid connection endpoint with a second session, the secure session allowing for transport of data and a set of commands based on a scope of the consent.

Remote command access in a hybrid cloud to on-premises devices

Techniques of remote computing resource access using sharable links are disclosed herein. One example technique includes receiving, at a security portal of a private network, an access request from a client device of a user for accessing a virtual machine ('VM') on the private network via a public network. The technique can then include retrieving a copy of a configuration file corresponding to the virtual machine according to the VM identifier in the access request and accessing the virtual machine according to operating parameters in the retrieved copy of the configuration file to generate an execution result. The technique can further include transmitting, from the security portal, the execution result to the client device of the user via the public network, thereby shielding, with the security portal, the virtual machine on the private network from actions initiated via the public network.

Sharable link for remote computing resource access

Transportable storage devices are communicatively coupled behind one or more dedicated 'edge' data servers to take advantage of the benefits of the data servers and transportable storage devices while limiting their disadvantages. Each edge data server ingests data from one or more client devices and copies the data to one or more of the transportable storage devices for eventual transport to a cloud data center for upload to a cloud storage system. Multiple versions of a segment of data (e.g., of a file or a blob) are maintained at various points in the disclosed system and the disclosed technology ensures that the most recent version is the version ultimately stored on the cloud storage system.

Synchronizing online and offline transfer of data to cloud storage system

Disclosed herein are systems, methods, computer media, and apparatuses for providing resource tracking, such as in a data center environment. A control and monitoring node receives updates indicating instantiation of resources in the computing system network. The control and monitoring node determines that there are duplicate resources in the network, and then determines which of the duplicate resources to provide connectivity to. The control and monitoring node provides network configuration updates to various networking resources in the network to provide network connectivity to the one of the duplicate resources in the network.

Data center resource tracking

Transportable storage devices are communicatively coupled behind one or more dedicated 'edge' data servers to take advantage of the benefits of the data servers and transportable storage devices while limiting their disadvantages. Each edge data server ingests data from one or more client devices and copies the data to one or more of the transportable storage devices for eventual transport to a cloud data center for upload to a cloud storage system. Object identifiers of objects stored on the transportable storage devices are maintained in a namespace of the data servers after decoupling of the transportable storage devices from the data servers so that the object identifiers remain visible to client devices.

Namespace data object name persistence after decoupling of transportable storage device from data server

The present disclosure relates to systems, methods, and computer-readable media for managing routing of traffic between clients and resource instances when providing stateful services. For example, systems disclosed herein involve a load balancer that routes probe request(s) from clients to corresponding resource instances having access to stateful session data for a stateful session between the resource instance(s) and corresponding client(s). The resource instances may provide instance identifiers to the clients for use in generating subsequent session calls. In this way, systems described herein ensure that subsequent session calls are passed to the correct resource instances having access to relevant session information.

Load balancing stateful sessions using DNS-based affinity

Techniques are disclosed for managing gateway switchovers. An indication is received that a primary gateway will be switched to a backup gateway. In response to the indication, a response is made to a periodic health probe that a gateway switchover has been initiated. Incoming data traffic is forwarded from the primary gateway to the backup gateway. Subsequent to an elapsed time delay, a response is made to the periodic health probe that the primary gateway will no longer accept incoming data traffic. The time delay may be based at least in part on one or more of a time interval of the periodic poll and a time to effect the gateway switchover. The forwarding of the incoming data traffic from the primary gateway to the backup gateway is terminated.

Fast failover for gateway instances

Techniques for intelligently managing a virtual private network (VPN) gateway in a cloud computing system are disclosed herein. In one embodiment, an instance of a VPN gateway can query whether a logic lock on a network address is maintained by another instance via periodic renewal. In response to receiving a query result indicating that a logic lock on the network address is lost by the another instance, the instance can migrate a VPN connection originally handled by the another instance from the another instance to the instance such that a private network is connected to the instance via the migrated VPN connection to reduce downtime for accessing computing resources in the cloud computing system.

Virtual private network gateway management

Techniques for dynamically scaling instances of virtual private network (VPN) gateway in a cloud computing system are disclosed herein. In one embodiment, a method includes determining whether a number of packets processed by a first instance of the VPN gateway exceeds a preset threshold. In response to determining that the number of packets exceeds the preset threshold, a new security association (SA) corresponding to a portion of the VPN network traffic is created. Upon completion of creating the SA, a load balancing policy at a load balancer is modified to forward a portion of the network traffic to a second instance of the VPN gateway when an incoming packet contains a security parameter index (SPI) corresponding to the created SA in its EPS header.

Dynamic scaling of virtual private network connections

Growing community of inventors

Sunnyvale, CA, United States of America

Mohit Kumar Garg