International Business Machines Corporation

Vmware, Inc.

Snowflake Inc.

Juniper Networks, Inc.

Nvidia Corporation

Nicira, Inc.

Telefonaktiebolaget Lm Ericsson (Publ)

Oracle International Corporation

Western Digital Technologies, Inc.

Wipro Limited

Fiberlink Communications Corporation

Rahul Jain

Vineeth Narasimhan

Joshua Lambert

Sumeet Singh

Thomas Herchek

Ryan Elliot Hope

Nitish Jha

Mukesh Hira

Ganesan Chandrashekhar

Su Wang

Jayant Jain

Sreenivas Voruganti

Parijat Dube

Sandeep Siroya

Balaji Murali

Ashish Pal

Pierluigi Rolando

Milind R Naphade

Kantesh Mundaragi

Manjit Singh Sodhi

Shankar Ramanathan

Sainath Reddy Cheruvu

Sarbajit Kumar Rakshit

Nitin Kumar Gupta

Raghuveer Prasad Nagar

Xu Bin Liu

Sandeep Bajaj

Karthik Subbian

Jianjun Shen

Ramakrishnan Kannan

Noshir Cavas Wadia

Jayashree Subrahmonia

Rahul Kasralikar

Quan Tian

Philipp Frank

Peng Ye

Shashank Mujumdar

Chung-Hong Lai

Mengdie Song

Mallikarjun Tallapragada

Wenying Dong

Prerna Agarwal

Apoorva Jindal

Rekha Devi Garapati

Ankita Kalra

Arvind Kumar V M

Saumyaranjan Acharya

Stephen Persky

Ankit Kapil

Ullam Subbaraya Yadhunandan

PrasannaKumar Shripal Kole

Ganesh Rajagopalan

Shankara Rao Thejaswi Nanditale

Anand G Shirahatti

Cynthia Ferne Craine

Vijayendra Kumar Gupta

Shamus Kahl

Cesar Marco Rubio

Jared Keown

Nathan Rooney

Michal Horemuz

Stephen J Wilson

Kin Soon Douglas Ho

The disclosure provides a method for authenticating a network agent deployed in a networking environment. The method generally includes receiving, by a network controller in the networking environment, a name of an external node where the network agent is running and a token associated with the external node; in response to receiving the name of the external node, obtaining, by the network controller, a secret associated with the token; parsing, by the network controller, the secret to determine an expected external node name corresponding to the token; comparing the expected external node name with the received external node name; and trusting the network agent when the expected external node name and the received external node name match.

Securing connections between a networking and security controller and distributed agents in a container-based cluster

A computer-implemented method for analyzing issues in a cellular network is provided. The cellular network includes a plurality of cells, including source cells and neighbor cells. The method includes building a network graph representing features of the cells. The method includes identifying, using the network graph, sub-graphs for each source cell indicating a network issue. The method includes, for each network issue of the source cell for each sub-graph, ranking each feature. The method includes, for each source cell, training, using a feature set identified, a first machine learning (ML) model. The method includes training a second ML model, using patterns identified by each cluster, to classify an unidentified pattern of one or more neighbor cells contribution to the source cell network issue and identify root cause information for the issue.

Automated root cause analysis of network issues in a cellular network using machine learning

A software upgrade to be deployed by a cloud extension agent is received by a remote network management platform, the cloud extension agent running locally on a network and initiating an outbound connection to the remote network management platform through a firewall of the network. A command is generated for the software upgrade, the command comprising an identification of a source of the software upgrade. The command is provided to the cloud extension agent, wherein providing the command causes the cloud extension agent to acquire the software upgrade from the identified source and deploy the software upgrade.

Deploying upgrades for cloud services

A system may include a memory and a processor in communication with the memory. The processor may be configured to perform operations. The operations may include extracting a first multiple dimensional dataset and a second multiple dimensional dataset and encoding the first multiple dimensional dataset into a first encoded dataset and the second multiple dimensional dataset into a second encoded dataset. The operations may include combining the first encoded dataset and the second encoded dataset into a combined encoded dataset and conveying the combined encoded dataset to a user.

Optimized transmission and consumption of digital content

Aspects of a storage device are provided that handle pairing and atomic processing of fused commands received from submission queues based on data structures such as a linked lists which the controller respectively associates with each submission queue. A memory of the storage device includes a plurality of data structures each associated with a different submission queue. A controller of the storage device receives a first command for a fused operation from a submission queue, stores the first command in a data structure, receives a second command for the fused operation from the submission queue, determines whether the second command corresponds to the fused operation, stores the second command in the data structure in response to the determination, and performs the fused operation in response to storing the second command. As a result, fused command handling may be achieved with minimal impact to queue arbitration logic and command latency.

Fused command handling

A cloud extension agent can be provided on a customer premise for interfacing, via an outbound secure connection, cloud based services.

Extending remote diagnosis cloud services

Fail-over in cloud services

A method of monitoring status information of devices is described. The method includes establishing a first connection to a hardware resource executing a cloud extension agent on a local network, over a wide area network external from the local network and separated by at least one firewall, using a standard internet protocol. The method further includes sending, via the first connection, a first set of instructions to manage a first set of mobile devices by one or more local servers on the local network; and receiving status information via the secure network connection, wherein the status information is from the one or more local servers on the local network associated with a plurality of devices that access the one or more local servers.

Monitoring status information of devices

A cloud extension agent can be provided on a customer premise for interfacing, via an outbound secure connection, cloud based services. The cloud extension agent can reach the cloud based services through existing firewall infrastructure, thereby providing simple, secure deployment. Furthermore, the secure connection can enable substantially real-time communication with a cloud service to provide web-based, substantially real time control or management of resources on the customer premises via the cloud extension agent.

System and method for extending cloud services into the customer premise

A method, system, and computer program product for simulating potential consequences and possible solutions due to a release of stored energy using augmented reality. The method may include aggregating IoT feeds from devices in a surrounding area. The method may also include calculating amounts of stored energy in the surrounding area based on the IoT feeds. The method may also include predicting contextual situations that could result due to a release of the stored energy in the surrounding area. The method may also include determining one or more consequences for each of the contextual situations. The method may also include calculating a degree of severity of the one or more consequences for each contextual situation. The method may also include determining one or more proposed solutions based on the degree of severity. The method may also include transmitting a recommendation of at least one proposed solution for implementation.

Predict solutions for potential hazards of stored energy

Example methods are provided a network device to perform service insertion in a public cloud environment that includes a first virtual network and a second virtual network. In one example method, in response to receiving a first encapsulated packet from a first virtualized computing instance located in the first virtual network, the network device may generate a decapsulated packet by performing decapsulation to remove, from the first encapsulated packet. The method may also comprise identifying a service path specified by a service insertion rule, and sending the decapsulated packet to the service path to cause the service path to process the decapsulated packet according to one or more services. The method may further comprise: in response to the network device receiving the decapsulated packet processed by the service path, sending the decapsulated packet, or generating and sending a second encapsulated packet, towards a destination address.

Service insertion in public cloud environments

Example methods and systems are provided a network device to perform tunnel-based service insertion in a public cloud environment. An example method may comprise establishing a tunnel between the network device and a service path. The method may also comprise: in response to receiving a first encapsulated packet, identifying the service path specified by a service insertion rule; generating and sending a second encapsulated packet over the tunnel to cause the service path to process an inner packet according to one or more services. The method may further comprise: in response to receiving, from the service path via the tunnel, a third encapsulated packet that includes the inner packet processed by the service path, sending the inner packet processed by the service path, or a fourth encapsulated packet, towards a destination address of the inner packet.

Tunnel-based service insertion in public cloud environments

A first cloud extension agent that facilitates internet-based management of a first set of local computing resources of a network is provided by a remote network management platform. A first connection is established to the first cloud extension agent. A second cloud extension agent that facilitates internet-based management of a second set of local computing resources of a network is provided by the remote network management platform. A second connection is established to the second cloud extension agent. A first set of instructions is provided to the first cloud extension via the first connection and a second set of instructions is provided to the second cloud extension via the second connection.

Distributed cloud agents for managing cloud services

Some embodiments provide a centralized overlay-network cloud gateway and a set of centralized services in a transit virtual cloud network (VCN) connected to multiple other compute VCNs hosting compute nodes (VMs, containers, etc.) that are part of (belong to) the overlay network. The centralized overlay-network cloud gateway provides connectivity between compute nodes of the overlay network (e.g., a logical network spanning multiple VCNs) and compute nodes in external networks. Some embodiments use the centralized overlay-network cloud gateway to provide transitive routing (e.g., routing through a transit VCN) in the absence of direct peering between source and destination VCNs. The overlay network, of some embodiments, uses the same subnetting and default gateway address for each compute node as the cloud provider network provided by the virtual private cloud provider.

Transitive routing in public cloud

Some embodiments provide a method for a managed forwarding element (MFE) executing on a data compute node (DCN) that operates on a host computer in a public datacenter. The MFE implements a logical network that connects multiple DCNs within the public datacenter. The method receives a packet, directed to the DCN, that (i) has a first logical network source address and (ii) is encapsulated with a second source address associated with an underlying public datacenter network. The method determines whether the first logical network source address is a valid source address for the packet based on a mapping table that maps logical network addresses to underlying public datacenter network addresses. When the first source address is not a valid source address for the packet, the method drops the packet.

Managed forwarding element detecting invalid packet addresses

Growing community of inventors

Bengaluru, India

Rahul Jain