International Business Machines Corporation

Scott Christopher Moonen

Ajay Arvind Apte

Roy Frank Brabson

Donald R Woods

Jason Robert McGee

Orvalle T Kirby, Iii

Hugh Edward Hockett

Linwood Hugh Overby, Jr

Christopher Meyer

James Patrick Robbins

Curtis Matthew Gearhart

Theodore O Kirby

Patrick Michael LiVecchi

Ching-Yun Chao

James Patrick Hoff

Daniel N De Araujo

John Yow-Chun Chang

Ki Hong Park

Yuhsuke Kaneyasu

Simon J Kofkin-Hansen

Lewis Lo

Leonardo A Uzcategui

Barbara J Vander Weele

Rohan Gandhi

Ankit Patel

Wuchieh James Jong

Iqbal M Umair

Kin Ueng

Devin A Conley

Robert E Warren

Jeffrey B Cates

Patrick L Davis

Jordan Shamir

Walter Bartlett Farrell

Robley Hall

Iain Mccown

Matthew D McClintock

Bryan M Buckland

Chris Moss

Keith J Welter

A method comprises obtaining a set of log files for a software system. The set of log files applies to an extended window. A periodic pattern in a first set of error-event surges in the set of log files is identified. The error-event surges in the first set is identified as event noise. A second set of log files for the software system is obtained. The second set of log files applies to a shortened window. Timeseries analysis on the second set of log files is performed. A particular error-event surge in a detection period in the second set of log files that is abnormal as compared to the shortened window is detected based on the timeseries analysis. That the particular error-event surge does not fit into the periodic pattern is determined, the particular error-event surge is characterized as an anomaly, based on the determining.

Anomaly recognition in information technology environments

Automatically managing an entire life-cycle of a practice failover. The system uses a virtualization management system that hosts one or more business applications which has capability and authority to manage both the application hosting infrastructure as well as the storage infrastructure that is used by the applications in a disaster recovery configuration. The set of applications is replicated along with an application platform together with the applications.

Disaster recovery practice mode for application virtualization infrastructure

Components are dynamically associated in a multi-tier application to different layers of a corresponding multi-tier application infrastructure. This includes defining, in a memory of a host computing system, a pattern that has an inventory of components of a multi-tier application. Each of the components are associated with a corresponding tier label for an n-tier architecture and the pattern is loaded into a pattern engine. The pattern engine deploys each component of the pattern to a layer of the n-tier architecture corresponding to a tier label associated with the component.

Dynamic association of application workload tiers to infrastructure elements in a cloud computing environment

Methods and systems for managing computer network traffic are provided. A computer implemented method includes tunneling network traffic between a first network and a second network using a data storage system that is shared by the first network and the second network.

Tunneling network traffic using object storage

Embodiments of the present invention provide a method, system and computer program product for the dynamic association of components in a multi-tier application to different layers of a corresponding multi-tier application infrastructure. In an embodiment of the invention, a method for dynamically associating components in a multi-tier application to different layers of a corresponding multi-tier application infrastructure includes defining in memory of a host computing system a pattern that has an inventory of components of a multi-tier application. The method also includes associating each of the components with a corresponding tier label for an n-tier architecture. The method yet further includes loading the pattern into a pattern engine. Finally, the method includes deploying by the pattern engine each component of the pattern to a layer of the n-tier architecture corresponding to a tier label associated with the component.

A first management node of a first rack can be registered to a shared file storage system by establishing a mutual trust relationship between the first management node and the shared file storage system. The first management node can access a plurality of respective public keys and a plurality of respective certificates of authority that are stored in the shared file storage system and associated with a plurality of respective registered management nodes. The first management node can store a public key and a certificate of authority in the shared file storage system. The first management node can form mutual trust relationships with other registered management nodes. The first management node can validate authenticity of messages received from registered management nodes of the plurality of registered management nodes using a respective public key and a respective certificate of authority associated with a respective registered management node sending a message.

Trust relationship management amongst racks in a data center

A method, system and computer program product for deploying a pattern. A placement engine of a hierarchical tier selects the region(s) of a next lower tier based on placement policies and constraints at the next lower tier and availability of the artifacts required by the virtual machine instance(s) in the next lower tier utilizing the summarization of resource usage and availability at the next lower tier. The placement engine at the lowest tier selects the compute node(s) in the selected region(s) of the lowest tier to place the virtual machine instances of the pattern based on placement policies and constraints at the compute node level and availability of the artifacts required by the virtual machine instance(s) of the pattern in the compute node level. In this manner, the virtual machine instances of the pattern can be effectively deployed when the resources of the cloud environment are large and geographically dispersed.

Deploying virtual machine instances of a pattern to regions of a hierarchical tier using placement policies and constraints

A network node for communicating data packets secured with a security protocol over a communications network includes a host information handling system (IHS) and one or more external security offload devices coupled by a secure data link. The host IHS communicates state information about data packets, and the external offload security device provides stateless secure data encapsulation and decapsulation of packets using a security protocol. An external network interface controller or internal network interface controller communicates encapsulated data packets over the communications network to a final destination. Encapsulation and decapsulation of packets by the external security offload device reduces network latency and reduces the computational load on the processor in the host IHS. Maintaining state information in the host IHS allows hot-swapping of external security offload devices without information loss. The external security offload device may be included in a firewall, or intrusion detection device, and may implement IPsec protocol.

Network node with network-attached stateless security offload device employing out-of-band processing

Techniques for processing filter rules are disclosed. To this end, filter rules having one or more attributes where each attribute indicates a condition to qualify whether a filter rule applies to a subsequent event are received. Summary rules are generated where each summary rule has a number of summary conditions. Some filter rules become associated with the generated summary rules. The summary conditions are extended to span the attributes of the associated filter rules.

Apparatus and methods for processing filter rules

A method for managing a first TCP connection with a second computer is disclosed. The method can include associating the first TCP connection with a first set of numbers. The method can further include receiving a SYN message from an unidentified computer, wherein the SYN message is associated with a second set. The method can further include creating a record representing a new TCP connection with the unidentified computer, wherein the new TCP connection is associated with the second set, sending a SYN/ACK message to the second computer and receiving an ACK message from the second computer, wherein the ACK message is associated with a third set. The method can further include verifying the first TCP connection and deleting the record if the third set matches the first set. Alternatively, if the third set matches the second set, then the first TCP connection is replaced with the new TCP connection.

Management of duplicate TCP connections using sequence and acknowledgment numbers

Growing community of inventors

Holly Springs, NC, United States of America

Scott Christopher Moonen