International Business Machines Corporation

Tian Cheng Liu

Ying Li

Yue Hua Zhang

Kai Zheng

Xin Hui Li

Bao Hua Yang

Bo Yang

Anca Sailer

Ke Wei Sun

Jie Qiu

Shubir Kapoor

Qi Ming Teng

Baohua Yang

Ashish Kundu

Yu Meng Li

Nataraj Nagaratnam

Lin Y Yang

Dimitrios Pendarakis

Sreekanth Ramakrishna Iyer

Paul Anthony Ashley

He Huang

Chao Xue

Ronald B Williams

Stefan Berger

Jing Luo

Xiao Zhong

Qiming Teng

Boa Hua Yang

Yu Zhang

Ying Liu

Jing Min Xu

Hang Liu

Tao Yu

Andreas Kind

Ling Shao

Andrew John Schofield

David Alvra Wood, Iii

William J Tracey, Ii

Bentley John Hargrave

Susan Patricia Paice

Peng Chen

Yichong Yu

Peini Liu

Quan Long

Zhang Yu

Cheng Wei Wang

Yan Yan Hu

Shelf

A computing device receives template files and parameters associated with the template files, where the template files comprise scripts, and where the associated parameters comprise a user preference associated with an efficiency of the image. The computing device may determine dependencies between layers of the scripts based on a unified image model. The unified image model may generate a logic tree that includes nodes, where each one of the nodes represents each one of the layers of the scripts. The computing device may generate an efficient logic tree based on the logic tree and the user preference of a generated image model. The generated image model may generates the efficient logic tree by changing the dependencies of the nodes in the logic tree based on the user preference. Based on the generated efficient logic tree the computing device may build the image.

Self-adaptive building container images

Computer-implemented methods, computer program products and systems for automated self-recovery of a distributed service are disclosed. In embodiments, a missing resource of the service is determined based on a pre-defined service description responsive to a detection of a failure of the service. The service description defines base elements for recovering the service. A recovery strategy is further generated based on the missing resource in accordance with inference rules. A resource is further retrieved from a pool in accordance with the recovery strategy and based on the retrieved resource, the service is further recovered in accordance with the recovery strategy.

Automated self-recovery of distributed services

A migration system for migrating an application between environments is provided. The migration system includes analyzes a profile of the application on a first environment based on a conformance check. The migration system reconstructs application dependencies with respect to a second environment, based on the application profile analysis, to produce an updated environment with reconstructed application dependencies. The migration system migrates the application from the first environment to the updated environment with the reconstructed application dependencies.

Migrating applications to updated environments

The present invention discloses a method and apparatus for processing a data packet in a software defined network SDN protocol-based network. The method comprises: receiving a data packet forwarded by a SDN switch in the network; obtaining a rule corresponding to a data flow where the data packet is located; determining, according to the received data packet, data flow characteristics of the data flow where the data packet is located; determining timeout information of the rule according to a predetermined matching relationship between the data flow characteristics and the timeout information, the timeout information indicating time that the rule will be kept in a flow table of the SDN switch; and sending the rule and the timeout information of the rule to the SDN switch for processing the data packet by the SDN switch according to the rule. By means of the method and apparatus of the embodiments of the present invention, the timeout information of the rule may be set flexibly, so that the performance of SDN is boosted efficiently.

Data packet processing in SDN

The present invention relates to data packet processing in a data network, and provides a method and system for processing data packets. The method comprising: dividing flows containing data packets into elephant flows and mice flows according to a particular division parameter, wherein, an elephant flow contains more data packets than a mice flow; transmitting the divided elephant flows and mice flows to a virtual switch in a server; processing the mice flows at the virtual switch, and transmitting the elephant flows and the processed mice flows to a hardware switch in network; and processing the elephant flows at the hardware switch, and forwarding the received mice flows and the processed elephant flows. With the method and system, network performance may be effectively improved.

Data packet processing

In one embodiment, a system includes a first tracked device and a second tracked device. The first tracked device includes first known device data, describing one or more previous connections known to the first tracked device. The second tracked device includes second known device data, describing one or more previous connections known to the second tracked device. The first tracked device is configured to connect to the second tracked device, transfer to the second tracked device at least a portion of the first known device data, and receive from the second tracked device at least a portion of the second known device data. The first tracked device is further configured to modify the first known device data to incorporate the second known device data. The second known device data includes data related to a previous connection involving a third tracked device outside a signal range of the first tracked device.

Data communication with low-energy devices

A method and apparatus for managing remote devices. In one embodiment of the present invention, there is provided a method of managing a remote device, comprising: obtaining a first identifier based on a name sequence in state information of the remote device, the first identifier being for indicating a template that provides the state information; obtaining a second identifier based on a numerical value sequence in the state information; sending a state access notification that comprises at least the first identifier and the second identifier; and providing the state information based on the first identifier and the second identifier in response to having received a result of activating the state access notification. In one embodiment of the present invention, there is provided an apparatus for managing a remote device.

Managing remote devices

Techniques for realizing service chaining, a corresponding apparatus and an SDN (Software Defined Network) controller are disclosed. The method includes temporarily modifying an original destination MAC (media access control) address of a packet and an original source MAC address the packet during the time the packet makes a hop from one middlebox to another. A restore operation is used to restore the original source and destination MAC addresses after the hop is made.

Techniques for realizing service chaining

A method for processing a resource access request in a network based on a software defined network (SDN) protocol includes receiving a resource access request forwarded by a first SDN switch in the network, wherein there exists no forwarding rule matching the resource access request in the first SDN switch; obtaining, according to the resource access request, resource server information of a resource server where the requested resource is stored, wherein the resource server is located in the network; generating a forwarding rule corresponding to the resource access request according to the resource server information; and sending to the first SDN switch at least one portion of the forwarding rule corresponding to the resource access request, so that the first SDN switch forwards the resource access request according to the at least one portion of the forwarding rule.

Processing resource access request in network

A method and system for deploying a cluster, wherein the cluster contains a plurality of cluster members, the method comprising: obtaining a unique identifier for each cluster member; according to the unique identifier of each cluster member, obtaining cluster configuration information for the cluster member; configuring the cluster member using the obtained cluster configuration information of the cluster member; and deploying the cluster. The method and system can enhance the cluster deployment efficiency.

Deploying a cluster

A method includes retrieving, from a memory accessible by a computer, a document comprising a workload definition document that defines an intended virtual configuration to include at least one virtual machine and at least one network appliance to be associated with at least one of the virtual machines in the intended virtual configuration, each network appliance respectively serving a role in the intended virtual configuration of transforming, inspecting, filtering, or otherwise manipulating all the network traffic, before it reaches an intended virtual machine, for purpose other than a data packet forwarding in a virtual configuration. The workload definition document is parsed to extract attributes of each of the network appliances, including one or more security policy to be applied to each network appliance. Configuration data is extracted from the parsed workload definition document that is related to any security policy of any of the network appliances to be deployed. A security template library is accessed to select a security template for each network appliance that will implement the one or more security policy for that network appliance to be deployed.

System and method for software defined deployment of security appliances using policy templates

Growing community of inventors

Beijing, China

Tian Cheng Liu