Microsoft Technology Licensing, LLC

Oracle International Corporation

Amazon Technologies, Inc.

Microsoft Corporation

Thomas W Kuehnel

Amer A Hassan

Christian F Huitema

Deyun Wu

Hui Shen

Yi Lu

Jiandong Ruan

Shai Guday

Taroon Mandhana

Alok Manchanda

Eden Grail Adogla

Abhishek Abhishek

David T Jones

Piyush Goyal

Triptpal Singh Lamba

Saumaya Sharma

Vishesh Parikh

Mukesh Karki

David Neil MacDonald

Yusuf Atas

Shannon J Chan

Darya Mazandarany

Andrew Thomas Baron

Donald M Gray

James Christopher Gray

Francis Duong

Anand Valavi

D Gabriel Frost

Adam Sapek

Saurabh Mahajan

Brent Edward Ford

Sundar P Subramani

Vinod K Swamy

Noel Wayne Anderson

Alireza Dabagh

Srinivas Raghu Gatta

Vishal Soni

Sidharth Nabar

Rao Salapaka

Pan Chun Wen

Ranveer Chandra

Sean O Lyndersay

John David Bruner

Dale Alan Sather

Humayun Mukhtar Khan

James M Lyon

John Mark Miller

Gursharan Singh Sidhu

Jin Guo

Gregory James Scott

Vladimir Holostov

Anish Desai

Ruchir Astavans

Guillaume Simonnet

Mansoor Jafry

King Shaw

Hiep V Khuu

Mark Lino Nielson

Omar Abdul Baki

Adam R Dyba

Tript Singh Lamba

Naile Daoud

Joseph Neil Garfinkel

Vikas Singh

Jonathan Hathaway

Paramvir Bahl

Pradeep Bahl

Samuel Scott Gigliotti

Ralph A Lipe

Mitesh K Desai

William G Parry

Mohammad Shabbir Alam

Christopher R Rice

Hugh A Teegan

Calvin Choe

Kosar Akram Jaff

John W Archer

Nicholas A Banks

Scott Michael Bragg

Brian Ashley Garber

Savas Guven

John M Gehlsen

Roland J Ayala

Douglas Edward Stamper

Tan Shen Cliff Chung

James N Gray

Navaneeth Garakahalli

John Ryan Gartrell

Mark Lino Nielsen

Kimberly A Rodriguez

Laura Ann Duffey

Zackery Vincent Paladino

Nick Banks

Javier Flores Assad

Pavneet Singh

David Jones

Guillaume Simmonet

David Neil Macdonald

Techniques are disclosed for a mobile prefab factory for building region data centers. The mobile prefab factory can include a containment enclosure configured to mount physical computing resources of a data center, a networking device, a power supply electrically connected to the networking device, and a plurality of computing devices of the physical computing resources communicatively connected to the networking device and electrically connected to the power supply. A manager service can configure the computing devices for transmission to the destination site by implementing a seed server device of the plurality of computing devices and implementing a software resource repository at the seed server device. While the containment enclosure is in transit, the seed server device can deploy software resources to the plurality of computing devices.

Mobile prefab factory for building cloud regions

Techniques are disclosed for rotating network addresses following the installation of a prefab region network at a destination site. A manager service executing within a distributed computing system can allocate a rotation network address pool to a root allocator service that may be configured to provide network addresses from network address pools to dependent nodes within the distributed computing system, with each dependent node associated with a corresponding first network address of the network address pools. The manager service can receive an indication that a second network address of the rotation network address pool is associated with a dependent node. In response, the manager service can execute and a migration operation for the dependent node to redirect network traffic within the distributed computing system from the first network address to the second network address.

Techniques for rotating network addresses in prefab regions

Techniques are disclosed for validating a cloud region built at a prefab factory. A computing device of the cloud region can receive a network configuration from a manager service. The network configuration can correspond to a network topology of physical resources in the cloud region and can include a first identifier associated with a computing device, a second identifier associated with a neighboring computing device, and information associating the computing device with the neighboring computing device. The computing device can be configured for transmitting to a second data center and can boot into a test mode at the second data center and receive a new identifier from a server device. The computing device can verify the new identifier and send a validation request to the neighboring computing device. The computing device can validate a network connection to the neighboring computing device based on a response to the validation request.

Techniques for validating cloud regions built at a prefab factory

Techniques for facilitating connectivity to vPLCs created in a CSP-provided infrastructure in a region. Within the CSP-provided infrastructure in a region, when the destination of a packet is determined to be an endpoint associated with a particular vPLC, the packet is tagged with information related to the particular vPLC. The vPLC-related information for the particular vPLC can include, for example, a vPLC identifier identifying the particular vPLC, an identifier identifying a customer associated with the endpoint, a virtual cloud network identifier identifying a virtual cloud network (VCN) belonging to the particular vPLC and where the endpoint is part of the VCN, and other vPLC-related information. The packet is then routed or communicated within the CSP-provided infrastructure in a region along with the tagged vPLC-related information. The vPLC-related information is used as part of the connectivity and for routing of packets within the CSP-provided infrastructure in a region.

Connectivity for virtual private label clouds

Novel techniques are disclosed for providing vPLC-specific metadata service including customized vPLC-specific metadata. In certain embodiments, each vPLC may generate a customized metadata using its corresponding vPLC-specific customization instructions. In some embodiments, a vPLC-specific metadata service may be performed using pre-generated customized vPLC-specific metadata, on-the-fly customized metadata, pre-generated CSP-format metadata, or combinations thereof.

Metadata customization for virtual private label clouds

A method may include generating a first cloud network associated with a first security level and including data associated with a service. The method may include generating a second cloud network associated with the first security level and deploying the service and the data associated with the service to the second cloud network and generating a first ingress channel to permit data to be transmitted to the second cloud network. Restricted data associated with a tenant may be deployed to the second cloud network. The method may include generating a third cloud network associated with the first security level and including the service and the data associated with the service and generating a second ingress channel to permit data to be transmitted to the third cloud network. A data sync may be implemented between the second and third cloud networks to deploy the restricted data to the third cloud network.

Merging a new region into classified realms

The present embodiments relate to providing near real-time communications from a public network to a private network. A first computing device in a public network can obtain data packets to be provided to the private network from an application executing on the first computing device. A trust module executed by the first computing device can authenticate the user, application, and the data packets to be provided to the private network and add metadata relating to the sending user, recipient user, etc. The data packets can be forwarded to the private network via a cross-domain system (CDS). The metadata and the digital signature on the data packets can be verified by a trust module executing on a second computing device in the private network. The second computing device can receive the data packets and store the data packets for subsequent actions to be performed in the private network.

Semi-interactive one-way transfer of data to an isolated network

In some aspects, a network interface card (NIC) may receive, at a first node of a network interface card associated with a disconnected network, a message intended for the disconnected network and sent using a first communication protocol. The network interface card may send the message from the first node to a second node of the network interface card using a second communication protocol, the second communication protocol being configured for unidirectional communication. The network interface card may receive the message at the second node. The network interface card may send, from the second node, the message to a destination node of the disconnected network using a third communication protocol. Numerous other aspects are described.

Cloud based cross domain system—virtual data diode

In some aspects, a computing device of the virtual cloud network may select one or more filters from a plurality of filters for a data pipeline, the plurality of filters comprising at least one of: a malware filter; a content filter; a signature filter; a content analyzer; a machine learning filter; or an artificial intelligence filter. A sequential order for the one or more selected filters in the data pipeline can be determined. A message may be received in the data pipeline from a network interface card (NIC), the network interface card being configured as a one-way transfer device. The message in the data pipeline may be filtered by passing the message through the one or more selected filters in the determined sequential order. The computing device of the virtual cloud network may provide logs of events occurring in the data pipeline via a logging network.

Cloud based cross domain system—CDSaaS

In some aspects, a computing device of the disconnected network may generate an application programming interface (API) configured to present a set of filter types. A selection of one or more filters types from the set of filter types may be received via an API. A sequential order for the selected filter types may be received via an API. A data pipeline with the selection of filters in the sequential order may be generated. A message received at a one-way transfer device may be analyzed by passing the message through the selected filters in the sequential order. A log of events occurring in the data pipeline may be received via a logging network. The log of events may be presented via the application programing interface. The data pipeline may be terminated upon receiving a termination command via the application programming interface.

Cloud based cross domain system—CDS with disaggregated parts

A system in which a device may automatically provision another device with credentials, at the behest of a cloud-based service, based in part on the physical proximity of the device to be provisioned. The provisioning device and the device to be provisioned may use a radio access technology (RAT) with a limited radio range. Account information associated with the device to be provisioned is known to the cloud-based service, which authenticates the device to be provisioned via the device with credentials.

Cloud-based provisioning using peer devices

A computing environment containing a mesh network that is adapted to provide a reliable transport mechanism over which services may be delivered. Nodes of the mesh can automatically select routable addresses without conflicts, which allows nodes of the mesh to be accessed, even as the mesh changes through the addition or deletion of nodes. Also, nodes communicate with a protocol that supports service advertisements. These advertisements can identify mesh nodes that supply services, such as file or print servers, for which devices that have not yet connected to the network may be searching. Advertisements can also identify services to be used by nodes in the network, allowing, for example, a node to select a gateway providing a reliable connection to an external network. The mesh network can be used as a transport for communication using protocols, such as TCP/IP, that generally exhibit poor performance when using unreliable transports.

Gateway advertisement in a wireless mesh

Discovery of services between devices is provided prior to establishing a connection between devices, including wireless-enabled devices or devices that are communicatively coupled to wireless access points or other wireless communication devices. Discovering services prior to establishing a connection may facilitate finding a desired service. The services that may be discovered may be, for example, print services, camera services, PDA services or any other suitable services. Services may be discovered using 802.11, Bluetooth, UWB or any other suitable wireless technology. A graphical user interface is provided that enables a user to select a desired service.

Notification framework for wireless networks

Growing community of inventors

Seattle, WA, United States of America

Thomas W Kuehnel