Oracle International Corporation

Bea Systems, Inc.

Richard P Mousseau

Rajendra Inamdar

Sandeep Shrivastava

John Herendeen

Bjorn Dag Johnsen

Vadim Makhervaks

Ryan LeCompte

R Sean Lindsay

Stephen Hess

Franklin Fulton Simpson

David Brean

Mark Spotswood

Codanda Ganapathy Chinnappa

Sumanta Kumar Chatterjee

Avneesh Pant

Ravi Sankar Akella

Prasenjit Mukherjee

Rahul Srivastava

Bjørn Dag Johnsen

Kant C Patel

Feroz Alam Khan

Bhaskar Mathur

Sudeep Vatsanath Reguna

Jean De Lavarene

Michael Cico

Paul Ferwerda

Michael Jasnowski

Deborah C June

Peter Bower

Chinnappa Ganapathy Codanda

Mark Nelson

Troy Schulz

Keith Kelleman

Jon Richards

Jeff Berkowitz

Helena Aberg Ostlund

Sutanu Ghosh

A system and method for providing a virtual assembly builder for use with a cloud computing environment. In accordance with an embodiment, the system can include a virtual assembly builder component which maintains a repository of virtual assembly archives, wherein each virtual assembly can include a metadata and one or more virtual machine templates that can be used to instantiate an instance of the assembly; and a virtual assembly builder deployer provided as a web service or other interface, which enables operations for uploading virtual assemblies to the repository, registering virtual assemblies with cloud components, and/or managing deployment instances defined by an assembly.

System and method for providing a virtual assembly builder for use with a cloud computing environment

A system and method can provide a data service in a network environment. The system can provide a data service component on a node in the network environment, wherein the network environment includes a plurality of nodes interconnected via a network fabric. Furthermore, the system can use a native packet forwarding mechanism to direct a data flow in the network fabric to said data service component on the node. Then, the system can use said data service component to process one or more data packets in the data flow in the network fabric.

System and method for providing a data service in an engineered system for middleware and application execution

An integrated firewall provides security in a multi-tenant environment having a connection-based switched fabric directly connecting database servers which provide a plurality of database services with application servers hosting database service consumers each having a different database service consumer identity. The firewall functionality integrated into each database server provides access control by discarding communication packets which do not include a database service consumer identity and using the database service consumer identity in combination with an access control list to control access from the database service consumers to the database services. The access control includes address resolution access control, connection establishment access control, and data exchange access control based on said access control list. The integrated firewall enables direct connection of database servers and application servers via an InfiniBand network providing without requiring a separate intermediary firewall appliance or security node.

System and method for providing an integrated firewall for secure network communication in a multi-tenant environment

A system and method can provide a data service in a network environment. A subnet administrator can receive a path record resolution request from a source node, wherein the source node uses the path record resolution request to obtain an address of a destination node. Furthermore, the subnet administrator can provide an address of an intermediate node to the source node, wherein the intermediate node provides the data service. Then, the source node can send one or more data packets in a data flow to the intermediate node based on the address of the intermediate node.

System and method for controlling a data flow in an engineered system for middleware and application execution

A security solution provides secure communication in a multi-tenant environment which includes a connection-based fabric, storage cells holding data associated with different tenants, database servers which provide a plurality of database services using said data, application servers hosting database service consumers. The fabric is configured into partitions isolating the storage cells from the database service consumers. The application servers securely associate unique database service consumer identities with each database service consumer and all communications with the database servers. The database servers reject all communications from the application servers which do not include an identity and use an access control list to control access from the database service consumers to the database services using address resolution access control, connection establishment access control, and data exchange access control based on said access control list. DoS attack prevention can also be performed based on consumer identities included in packets.

System and method for providing for secure network communication in a multi-tenant environment

A virtual assembly builder for use in virtualization environments, which can be used as a tool for virtualizing installed components in a reference environment, modifying those components if necessary, and then deploying them into another/target environment. Using the virtual assembly builder, a user (e.g., an administrator) can capture the configuration and product/component binaries of existing software components into software appliance artifacts. Appliances can be grouped, and their relationships defined, into software assembly artifacts. Logical connections between appliances within an assembly can be reconfigured by a process of assembly editing. When a desired assembly configuration has been achieved, the assembly can be prepared for, and deployed into, the target environment.

System and method for use of a virtual assembly builder

A system and method can support data service address resolution in a network environment. An intermediate node can receive an incoming data packet from a source node, wherein the incoming data packet targets a destination node, and wherein the incoming data packet includes a global identifier for the destination node and a local identifier for the intermediate node. Furthermore, the intermediate node can obtain local addressing information for the destination node based on the global identifier for the destination node. Then, the intermediate node can send an outgoing data packet to the destination node based on the obtained local addressing information for the destination node.

System and method for supporting data service addressing in an engineered system for middleware and application execution

A system and method can provide a data service in a network environment. The network environment can include a node, which supports a data service component that can provide a data service. Additionally, a filter can be provided on a networking device, such as a host channel adaptor (HCA) that is associated with the node. The networking device operates to use the filter to identify one or more packets targeting the data service component without protocol termination. Furthermore, the filter can forward said one or more packets to the data service component.

System and method for supporting host channel adapter (HCA) filtering in an engineered system for middleware and application execution

A system and method can deploy and manage software services in virtualized and non-virtualized environments. The system provides an enterprise application virtualization solution that allows for centralized governance and control over software and Java applications. The system includes a plurality of resource broker agents. Each resource broker agent resides on one of the plurality of virtualized and non-virtualized machines in the computing environment and can be used to manage the software processes and compute resources running in the computing environment. Each resource broker agent is responsible for starting a set of Virtual Machines running on a specific compute resource and performing resource metering control. The system also includes a virtual machine pool that communicates with the plurality of resource broker agents to create and manage the set of virtual machines for each resource broker agent and collect data.

Resource broker system for dynamically deploying and managing software services in a virtual environment based on resource usage and service level agreement

A system and method can manage software services in virtualized and non-virtualized environments. A plurality of data collection components in a computing environment can include a plurality of virtual machines running on the one or more microprocessors, wherein the plurality of virtual machines are adapted to be deployed with services and applications. Each data collection component operates to use one or more data structures to communicate with a data consumer, wherein each data structure describes metrics to be collected by said data collection component and is capable of containing collected metric values.

System and method for performance data collection in a virtual environment

A system and method can support security management in a computing environment that includes one or more virtualized machines to which one or more applications can be deployed. The system can include a plurality of agents, wherein each agent resides on one of a plurality of machines in the computing environment and operates to manage software processes and resources running in the computing environment. The system also includes a controller that collects data from the plurality of agents about current operating performance of the computing environment, and uses the data gathered to enforce policies and to deploy services in a way that honors one or more service level agreements of the deployed services. Furthermore, the communication between each of the plurality of agents and the controller can be secured with a mutual authentication method, and the communication between an agent and an application is secured with a one-way authentication method.

System and method of security management for a virtual environment

A system and method can deploy and manage software services in virtualized and non-virtualized environments. The system provides an enterprise application virtualization solution that allows for centralized governance and control over software and Java applications. Operations teams can define policies, based on application-level service level agreements (SLA) that govern the allocation of hardware and software resources to ensure that quality of service (QoS) goals are met across virtual and non-virtualized platforms. The system use a rules engine that can compare administrator defined constraints with runtime metrics; generate events when a constraint is violated by a metric of the runtime metrics and generate events when a constraint is violated by a metric of the runtime metrics.

Operation control for deploying and managing software service in a virtual environment

Growing community of inventors

Stratham, NH, United States of America

Richard P Mousseau