Cisco Technology, Inc.

International Business Machines Corporation

Frequentz LLC

Ralf Rantzau

Debojyoti Dutta

Sebastian Jeuk

Gonzalo A Salgueiro

Ramakrishnan Srikant

Amit Kumar Saha

Johnu George

Madhu S Kumar

Zhen Liu

Anton Viktorovich Riabov

Grant W Wagner

Angela Marie Schuett

Pankaj Rohatgi

Manoj Sharma

Alexandre Valentinovich Evfimievski

Marc Solanas Tarre

Weifeng Chen

Steven P Beier

Rakesh Agrawal

Genady Grabarnik

Nagui Halim

Gerald George Kiernan

Xinyuan Huang

Yathiraj B Udupi

Mark David Feblowitz

Roberto Javier Bayardo

Sridar Kandaswamy

Gary J Robinson

Kay Schwendimann Anderson

Tyrone W A Grandison

Christos Faloutsos

Purushotham Kamath

Rahul Ramakrishna

Valer-Alin Crisan

Rajath Agasthya

Umair Akeel

Anthony C Asher

Christian C Clauss

Karin Kailing

Alexandre V Evfunievski

Gautham B Pai

Systems, methods, and computer-readable media for managing storing of data in a data storage system using a client tag. In some examples, a first portion of a data load as part of a transaction and a client identifier that uniquely identifies a client is received from the client at a data storage system. The transaction can be tagged with a client tag including the client identifier and the first portion of the data load can be stored in storage at the data storage system. A first log entry including the client tag is added to a data storage log in response to storing the first portion of the data load in the storage. The first log entry is then written from the data storage log to a persistent storage log in persistent memory which is used to track progress of storing the data load in the storage.

Using persistent memory to enable restartability of bulk load transactions in cloud databases

In an embodiment, a data processing method comprises receiving, at a BIER replicator node that is programmed to implement Bit Index Explicit Replication (BIER) protocol, from a data source, a multicast stream packet identifying a service-level multicast group address; using the BIER replicator node, replicating the multicast stream packet according to BIER protocol and transmitting two or more replicated packet streams to two or more BIER receiver nodes that are programmed to implement BIER; using the two or more BIER receiver nodes, transmitting the two or more replicated packet streams to two or more receivers. Other embodiments may use modified iOAM (In-situ Operations, Administration, and Maintenance) techniques.

Service traffic replication and dynamic policy enforcement in a multi-cloud service mesh

Approaches are disclosed for distributing messages across multiple data centers where the data centers do not store messages using a same message queue protocol. In some embodiment, a network element translates messages from a message queue protocol (e.g., Kestrel, RABBITMQ, APACHE Kafka, and ACTIVEMQ) to an application layer messaging protocol (e.g., XMPP, MQTT, WebSocket protocol, or other application layer messaging protocols). In other embodiments, a network element translates messages from an application layer messaging protocol to a message queue protocol. Using the new approaches disclosed herein, data centers communicate using, at least in part, application layer messaging protocols to disconnect the message queue protocols used by the data centers and enable sharing messages between messages queues in the data centers. Consequently, the data centers can share messages regardless of whether the underlying message queue protocols used by the data centers (and the network devices therein) are compatible with one another.

Multi-datacenter message queue

Systems, methods, and computer-readable media for storing data in a data storage system using a child table. In some examples, a trickle update to first data in a parent table is received at a data storage system storing the first data in the parent table. A child table storing second data can be created in persistent memory for the parent table. Subsequently the trickle update can be stored in the child table as part of the second data stored in the child table. The second data including the trickle update stored in the child table can be used to satisfy, at least in part, one or more data queries for the parent table using the child table.

Efficient trickle updates in large databases using persistent memory

A method and apparatus for dynamic integration of a covert namespace are provided. A Software-Defined Networking (SDN) controller is configured to send a request for workload transfer to an endpoint where the endpoint is connected to a virtual switch. The SDN controller determines that a connection between the endpoint and the virtual switch is secure based on a tenant-specific policy associated with the endpoint. A first covert namespace is configured to be connected between the endpoint and the virtual switch to communicate to the endpoint and the virtual switch directly. The operations of the virtual switch are executed using the first covert namespace according to the tenant-specific policy. A workload is caused to be transmitted to the endpoint through the first covert namespace.

Enforcing network endpoint policies in a cloud-based environment using a covert namespace

In one embodiment, a device is described, the device comprising a processor, a memory operative to store data used by the processor, a network interface operative to enable network communications with at least one other device, and a client executed by the processor, the client operative to utilize a first networking protocol to chain a request for information from the at least one other device and to send an information request packet via the network interface to the at least one other device, the information request packet comprising a request for information from the at least one other device, and a header of a second network protocol, in which a response to the request for information may be provided. Related devices, systems, and methods are also described.

Chained collection of information

Systems, methods, and computer-readable media are provided for consistent data to be used for streaming and batch processing. The system includes one or more devices; a processor coupled to the one or more devices; and a non-volatile memory coupled to the processor and the one or more devices, wherein the non-volatile memory stores instructions that are configured to cause the processor to perform operations including receiving data from the one or more devices; validating the data to yield validated data; storing the validated data in a database on the non-volatile memory, the validated data being used for streaming processing and batch processing; and sending the validated data to a remote disk for batch processing.

Using persistent memory to enable consistent data for batch processing and streaming processing

In one embodiment, a service converts a stream of network telemetry data into sketches. The stream of network telemetry data comprises a plurality of characteristics of traffic observed in a network. The service forms a time series of the sketches. The service performs anomaly detection on the time series of the sketches in part by calculating a joint distribution of ranks and frequencies of a portion of the characteristics at different points in time of the time series. The service sends an anomaly detection alert, when an anomaly is detected from the time series of the sketches.

Traffic analytics service for telemetry routers and monitoring systems

The present disclosure involves systems and methods for obtaining and correlating workload performance information from multiple tenants on a computing network and providing deployment improvement suggestions to a cloud operator or tenant based at least on the correlated workload performance information. In one particular implementation, applications deployed and executed on the cloud environment may provide performance logs and/or metrics to an inter-tenant workload engine of the cloud environment. The workload engine may utilize the received performance information to detect performance patterns of an application across the different tenant deployments. A recommendation engine may analyze the performance characteristics across the multiple tenant applications and determine an optimized deployment of the application and generate recommended deployment instructions to a cloud environment administrator and/or one or more tenants of the cloud environment.

Inter-tenant workload performance correlation and recommendation

In an example, there is disclosed a logging server computing apparatus, having: a processor; a memory; and a logging engine to: analyze a network; build an entity-state matrix M from an entity vector e and a state vector s; determine that there is a strong correlation between an entity eand a state s; and report the strong correlation.

Entity-state relationship correlation

Methods and apparatus, including computer program products, implementing and using techniques for protecting data residing in a repository of an electronic product code information service against undesired data disclosure. One or more disclosure policies are defined for an item tagged with an electronic product code. The item has associated data stored in the repository. The disclosure policies describe one or more of: who is permitted to query the repository for information, what type of information is permitted to be obtained from the repository in response to a query, and under what condition the repository can be queried. The disclosure policies are enforced in response to a received query from a party by only disclosing a subset of the data from the repository, the subset being determined in accordance with the defined one or more disclosure policies. A web-based tool for defining disclosure policies is also described.

Providing security for queries to electronic product code information services

System and methods are provided for managing and mitigating privacy risks in a system having a network of processing elements. According to one method, there is receive a request for at least one output product from the system. The request includes a set of privacy parameters. At least one set of workflow generating strategies are created that results in the output product having a privacy risk value below a predefined threshold. At least one of the workflow generating strategies is deployed for automatically producing the at least one output product.

Mitigating and managing privacy risks using planning

Growing community of inventors

San Jose, CA, United States of America

Ralf Rantzau