Sap Se

Stoyan Zhivkov Boshev

Shenol Hulmi Yousouf

Petar Rusev Rusev

Diyan Asparuhov Yordanov

Nikolai Veselinov Neichev

Kaloyan Stefanov Nikov

Stoyan Ivanov Veleshki

Nikolay Georgiev Kabadzhov

Antoan Nikolaev Andonov

Petio G Petev

Chavdar Baikov

Hristo S Iliev

Georgi Enchev

Mincho Velev

Tsvetan Stoyanov

Krum Valkov

Georgi D Dimitrov

Plamen Marianov Peev

Nikola Angelov Popov

Hristo Dobtchev

Thomas Walter

Pavel Genevski

Rashid Rashidov

Georgi Gerginov

Bogdan Vatkov

Iliyan Nedkov Mihaylov

Todor Stefanov Stoyanov

Borislav Arnaudov

Marc Wirth

Hristo Ilev

The present disclosure relates to computer-implemented methods, software, and systems for managing cloud application in a transparent multiple availability zone cloud platform. A request to access a cloud application running on the multiple availability zone cloud platform is received. The request can include an application location for accessing the cloud application. A network address corresponding to the application location is determined. In response to determining the network address, a first availability zone of the multiple availability zone cloud platform that is currently active to process the request is determined. A plurality of network locations corresponding to a host component of the application location is determined by a first load balancer. A network location of the plurality of network locations for processing the request is identified based on load balancing criteria. The received request is provided to the identified network location for processing by a first instance of the cloud application.

Transparent multiple availability zones in a cloud platform

The present disclosure relates to computer-implemented methods, software, and systems for managing asynchronous data replication in a multiple availability zone cloud environment. Metadata for files for asynchronous replication at a second availability zone is stored at an in-memory data grid of a first instance of a storage service at a first availability zone at a multiple availability cloud platform that provides storage services. The in-memory data grid includes a queue data structure of metadata records and a map of metadata records. In response to determining that connection from the first availability zone to the second availability zone is available, asynchronous data replication for files identified at the map is executed. A file for replication is identified at the map and provided for replication at a second file storage at the second availability zone through a replication interface of a second instance of the storage service at the second availability zone.

Asynchronous data replication in a multiple availability zone cloud platform

The present disclosure relates to computer-implemented methods, software, and systems for managing data replication. A request associated with storing content of a file is received at a storage service provided by in a multiple availability zone cloud platform. A lock request is sent to an in-memory data grid at a first instance of the storage service to lock the file for accessing. An input stream of the file is received at the persistence interface to be read iteratively in portions. A read portion of the file is iteratively stored in a first file system storage associated with instances of the storage service at a first availability zone. The portions of the file are provided iteratively to a replication executor at the first instance of the storage service to request replication of the content of the file into a second file storage of a second availability zone of the cloud platform.

Real-time data replication in a multiple availability zone cloud platform

Systems and methods include reception of a request for access to a target domain, the request including a source Internet Protocol (IP) address, determination of whether the source IP address is one of a plurality of IP addresses indicated within stored first data, determination, if it is determined that the source IP address is one of the plurality of stored IP addresses, of whether the target domain is one of a plurality of domains indicated within stored second data, and forwarding, if it is determined that the source IP address is one of the plurality of stored IP addresses and the target domain is one of a plurality of domains indicated within stored second data, of the request to the target domain.

Domain-specific access management using IP filtering

The present disclosure relates to computer-implemented methods, software, and systems for dynamic configuration of access restrictions on an application in relation to databases running in a cloud environment. An instruction to run an application is received by a virtual machine (VM) manager. The VM manager retrieves from a database manager information identifying databases accessible to the application. The databases are associated with at least one account of the application. The VM manager sends configuration instructions to dynamically configure a particular VM at which the application is to run. The particular VM is configured based on the configuration instructions that are generated based on the retrieved information and include rules for accessing the one or more databases identified in the retrieved information. The rules identify each database by its respective network address, and wherein the rules cause the particular VM to allow the application to access the one or more databases.

Dynamic configuration of access restrictions for an application in relation to databases running in a cloud environment

The present disclosure relates to computer-implemented methods, software, and systems for managing incompliances of application instances running in a cloud environment. Compliance requests can be generated for incompliant instances of cloud applications running on a cloud platform. In response, compliance checks for the one or more incompliant instances of cloud applications running on the cloud platform can be automatically executed. Incompliances can be identified by different compliance monitors instantiated at the cloud platform. Each compliance monitor is responsible for a particular type of incompliances. In response to identifying that a first instance of a first cloud application has a first type of incompliance, a maintenance action to be automatically executed by a first compliance maintainer running on the cloud platform is scheduled. The first compliance maintainer executes automatically a compliance measurement action for the first type of incompliance.

Managing incompliances identified at instances of cloud applications

The present disclosure relates to computer-implemented methods, software, and systems for on-demand outage notifications in a cloud environment. Data defining statuses of network calls exchanged between web agents registered at correspondingly different network segments of a cloud platform is evaluated to determine health statuses of the cloud platform. In response to receiving a request to subscribe an application for notifications for a current health status, registering, at the health service, the application to receive the notifications associated with health statuses of network connectivity of the cloud platform. The application is registered to receive the notifications at a subscription network address under a notification regime. A notification for the current health status of network connectivity of the cloud platform is dynamically provided by the health service. The notification is provided to the registered application according to notification rules defined in the notification regime.

On-demand outages notification in a cloud environment

The present disclosure relates to computer-implemented methods, software, and systems for detecting outages in a multiple availability zone cloud environment. Structured data defining network connectivity statuses of network segments is received. Multiple availability zones of the first cloud platform are defined in a multiple availability zone cloud architecture. External structure data defining inbound connectivity statuses of the network segments correspondingly defined for the availability zones of the first cloud platform is iteratively collecting. The inbound connectivity statuses define availability for an entity running at an external cloud platform to the first cloud platform to connect to at least one entity running at the first cloud platform. In response to evaluating the internal and external structured data, determining a health status of the first cloud platform to be provided to platform services provided by the first cloud platform and/or applications running on the first cloud platform to support managing of lifecycle of entities running on the first cloud platform.

Detecting outages in a multiple availability zone cloud environment

The present disclosure relates to computer-implemented methods, software, and systems for detecting outages in a cloud environment. Internal web agents installed at corresponding network segments of a first cloud platform and external web agents installed at an external second cloud platform are configured to perform network calls between themselves and the other web agents. Data from the internal web agents is automatically collected to generate structured data defining network connectivity status corresponding to the network segments of the first cloud platform based on the performed network calls between the internal and external web agents. In response to evaluating the structured data, a health status of network connectivity of the first cloud platform is determined. The health status can be provided to platform services provided by the first cloud platform and/or applications running on the first cloud platform to support managing of lifecycles of entities running on the first cloud platform.

Detecting outages in a cloud environment

The present disclosure relates to computer-implemented methods, software, and systems for detecting isolated zones in a cloud platform. Aggregated data for network connectivity status of web agents at the cloud platform is iteratively collected at a health service. The aggregated data is generated based on network call log data for external accessibility of the web agents. The web agents run at different network segments of the cloud platform. The network call log data is generated based on executed network calls issued from one or more external web agents running outside of the cloud platform and directed to each of the web agents at the cloud platform. A poll request for a network connectivity status for inbound connectivity for an entity running on the cloud platform is received. In response to evaluating the collected aggregated data, the network connectivity status for inbound connectivity for the entity is provided.

Reverse health checks

Growing community of inventors

Sofia, Bulgaria

Stoyan Zhivkov Boshev