110 results about "Name space" patented technology

A system and method for configuring a client device to communicate utilizing a secure web gateway. The method includes generating a virtual network interface having a namespace with a plurality of names, wherein a first name of the namespace is assigned to a client device; assigning a second name of the namespace to a resource accessible to the client device through a zero trust network environment, wherein the resource is deployed in a secure network environment; and configuring the client device to communicate only through the virtual network interface.

A distributed data storage system includes clusters of data storage appliances interconnected by an inter-cluster (IC) network having an IC namespace. Storage processing (SP) nodes exchange management traffic using mesh network (MN) addresses of a separate MN namespace. Gateways provide IC tunnels for routing management traffic among the clusters using IC network addresses. Operation includes, in each gateway for traffic from a local SP node destined for a remote SP node of another cluster, (1) performing a routing check based on a routing rule associating an MN destination address with a dummy MN address further associated with a respective IC tunnel, (2) applying a tunnel configuration rule of the IC tunnel associating the MN destination address with the IC network address of a remote gateway for the remote SP, and (3) forwarding the traffic on the respective IC tunnel using the IC network address of the remote gateway.

A zero trust cloud environment provides access to a secure network, and secure network applications. The zero trust cloud environment performs authentication of a user account, and upon successful completion initiates a secure network application, such as an SSH session to a server in a secure network. The server is instructed to generate an isolated network namespace through which a virtual network interface is bridged to the default network namespace. A firewall of the default network namespace does not permit network traffic from the virtual network interface to pass if it is directed to an address of the secure network.

Presented embodiments facilitate efficient and effective flexible implementation of different types of testing procedures in a test system. In one embodiment, a multiple-name-space testing system comprises a load board, testing electronics, and a namespace testing tracker. The load board is configured to couple with a plurality of devices under test (DUTs). The testing electronics are configured to test the plurality of DUTs, wherein the testing electronics are coupled to the load board. The controller is configured to direct testing of multiple-name-spaces across the plurality of DUTs at least in part in parallel. The controller can be coupled to the testing electronics. The namespace testing tracker is configured to track testing of the plurality of DUTs, including the testing of the multiple-name-spaces across the plurality of DUTs at least in part in parallel. In one embodiment, the DUTs are NVMe SSD devices.

A method and device for testing a base station comprising one or more radio units and a baseband unit connectable to the one or more radio units, wherein the device includes a configuration module configured to generate a first test case configuration associated with the one or more radio units and the baseband unit, where the first test case configuration includes a first protocol stack including a first protocol associated with a first layer and a second protocol associated with a second layer, and where a first set of protocol parameters associated with the first protocol is in a first namespace and a second set of protocol parameters associated with the second protocol is in a second namespace that is distinct from the first name space.

An apparatus is disclosed that includes a network interface device comprising processors to implement network interface device functionality and communication protocol engine circuitry, wherein the network interface device is to: receive a request to write data to a memory node communicably coupled to the network interface device; identify network information corresponding to the request, wherein the network information includes at least one of quality of service (QoS), physical function (PF), virtual function (VF), name space identifier (NSID), flow ID, service level objectives (SLOs), or process address space ID (PASID); identify characteristics of the memory node, wherein the characteristics include at least page size of the memory node; and cause the data to be coalesced with other data on the memory node based on the network information and the characteristics.

An apparatus supports single root input / output virtualization (SR-IOV) capable devices. The apparatus includes input / output ports, and SR-IOV capable PCIe devices. Each SR-IOV capable PCIe device has one or more namespaces or controller memory buffers. The SR-IOV capable PCIe device provides one or more physical functions and virtual functions that can access the one or more namespaces or controller memory buffers. A PCIe switch controller communicates with host servers coupled to the input / output ports, and assigns one or more virtual functions to each host device, and enables the host devices to access one or more namespaces or controller memory buffers through the assigned virtual functions. The PCIe device is configured to attach one or more namespaces or one or more partitions of one or more controller memory buffers to each virtual function, set at least one namespace or controller memory buffer to a shared state and allow different host devices to access the same namespace or controller memory buffer using respective assigned virtual functions.

A system and method for directing network traffic in a client device based on a domain catalog. The method includes generating a virtual network interface having a namespace with a plurality of names, wherein a first name of the namespace is assigned to a client device; assigning a second name of the namespace to a resource accessible to the client device through a zero trust network environment; configuring the client device to communicate only through the virtual network interface; and sending network traffic to the resource, in response to determining that the resource is allowed based on a domain catalog.

A method for providing access to objects associated with a particular client in a cloud storage system is disclosed. The method includes the steps of establishing a connection with a user, providing a client namespace associated with the client to the user, where the client namespace represents objects stored on the cloud storage system and objects stored on a private storage system apart from the cloud storage system, receiving a request from the user to access an object stored on the private storage system, and providing information to the user to facilitate access to the object stored on the private storage system by said user. Other systems and methods are also disclosed. Important advantages of the present invention are facilitated by separating the logic for user access (control plane) from the actual storage (Storage plane). Private file system access can still be managed from the cloud, while keeping the client data private.

An application-operating organization may delegate a third-party server to serve as an automated contextual authentication responder and an authorization responder. The third-party server may manage a delegated section of the organization's namespace that includes the public identities of various devices controlled by the organization. The third-party server may also dynamically generate interaction control list that is tailored to a requesting device's context based on the interaction control policies set forth by the organization. The interaction control list may include information that determines the authorization of the requesting device to interact with another device. The third-party server may also automatically determine the role of a new device to which existing policies are inapplicable and provide guided workflow for the organization to set up new interaction control policies in governing the new device. The determination of the roles of devices may be based on an iterative process using external data sources.

Methods and systems for solid state drives are provided, including assigning a first namespace to a first instance of a storage operating system and a second instance of the storage operating system for enabling read access to a first portion of a flash storage system by the first instance, and read and write access to the second instance; allocating a second namespace to the first instance for exclusive read and write access within a second portion of the flash storage system; generating, by the first instance, a request for the second instance to transfer a data object from the second portion owned by the first instance to the first portion; storing, by the second instance, the data object at the first portion; and updating metadata of the data object at the second portion, the metadata indicating a storage location at the second portion where the data object is stored.

A file system and a related method are presented. The file system includes a data storage including a plurality of data blocks; a merge index including a plurality of namespace entries, wherein the plurality of namespace entries include a plurality of blockmap entries and a plurality of local reference entries; a deduplication database including a plurality of deduplication indices and a plurality of global reference entries for a plurality of datasets; and an indexing system configured to generate the plurality of namespace entries and the plurality of global reference entries.

A data processing architecture controls data processing arbitration in a high performance computing system that includes one or more premises. Individual premises can include one or more server computers executing an instance of a local file system and including one or more temporary data storage devices. Individual instances of the local file system can access files stored in objects of a primary data store. Individual objects of the primary data store can be accessed using a common identifier indicating a storage location of the individual objects in the primary data store.

Some embodiments of the invention provide a method of sending data in a network that includes multiple worker nodes, each worker node executing at least one set of containers, a gateway interface, and a virtual local area network (VLAN) tunnel interface. The method configures the gateway interface of each worker node to associate the gateway interface with multiple subnets. Each subnet is associated with a namespace, a first worker node executes a first set of containers of a first namespace, and a second worker node executes a second set of containers of the first namespace and a third set of containers of a second namespace. The method sends data between the first set of containers and the second set of containers through a VLAN tunnel between the first and second worker nodes.

A method for replicating a set of parent resources from an administrator namespace to a set of tenant namespaces is described. The method includes receiving, by the administrator namespace, a global object that includes a set of object fields that reference (1) a set of parent resources and (2) the set of tenant namespaces; monitoring, by an operator controller of the administrator namespace, the global object to determine whether a change has been made to the global object; and replicating, by the operator controller, the set of parent resources to the set of tenant namespaces as child resources based on the global object in response to detecting a change to the global object.

The invention discloses a domain name resolution method based on a cloud computing technology and a cloud management platform, and belongs to the technical field of cloud computing. The method is applied to a cloud management platform, and comprises the following steps: grouping a plurality of DNS servers to obtain a plurality of DNS server groups, the plurality of DNS servers being used for analyzing domain names in a target name area in a DNS name space; obtaining a plurality of domain name suffixes, wherein the plurality of domain name suffixes are suffixes of domain names in the target name area; generating a target mapping relation based on the plurality of domain name suffixes and the plurality of DNS server groups; and distributing a plurality of domain name suffixes to the corresponding DNS server group based on the target mapping relationship, so that the DNS server in the corresponding DNS server group analyzes the domain name resolution request when receiving the domain name resolution request. According to the method and the device, the DNS servers are flexibly grouped, and the DNS servers are scheduled by the groups to perform domain name resolution, so that the high availability of the domain name resolution service is ensured.

A data processing architecture controls data processing arbitration in a high performance computing system that includes one or more premises. Individual premises can include one or more server computers executing an instance of a local file system and including one or more temporary data storage devices. Individual instances of the local file system can access files stored in objects of a primary data store. Individual objects of the primary data store can be accessed using a common identifier indicating a storage location of the individual objects in the primary data store.

The embodiment of the invention relates to remote server isolation using a zero-trust architecture. A zero-trust cloud environment provides access to secure networks and secure network applications. A zero-trust cloud environment performs authentication of a user account and initiates a secure network application, such as an SSH session with a server in a secure network, upon successful completion. The server is instructed to generate an isolated network namespace through which the virtual network interface is bridged to a default network namespace. If network traffic from the virtual network interface is directed to a secure address, the firewall of the default network namespace does not allow the traffic to pass.

A process control system software security architecture, that is more effective at preventing zero-day or other types of malware attacks, implements the use of “least privileges” when executing the applications and services run within a computer device. The least privileges based architecture separates “service” processes from desktop applications that run on behalf of a logged-on user by partitioning the global namespace of the software system into service namespaces and logged-on user namespaces, and by strictly controlling communications between the applications and services in these different namespaces using interprocess communications. Moreover, the security architecture uses custom accounts to assure that each service process has the least set of privileges that are needed for implementing its function regardless of the privileges associated with the calling application or user.

Methods, systems, and devices to support techniques for container registry credentials management are described. An operator executed across a set of clusters may manage credentials for multiple namespaces distributed across multiple clusters. For example, the operator may identify a configuration of a namespace (e.g., detect a creation of a configuration, detect an update to a configuration) and may provision the namespace within the container image registry using an application programming interface (API) call transmitted to the registry. The operator may retrieve one or more credentials associated with the namespace from the container image registry based on an operational mode (e.g., an application mode, an infrastructure mode). The operator may store the one or more credentials to a database associated with the cluster.

The invention discloses a processing method for coexistence of multiple versions of project software, which comprises the following steps of: defining a namespace and a routing rule, and mapping requests of different versions to corresponding service instances; differentiating versions based on the URL, HTTP header, or client identification; according to the dynamic request feature, the flow direction of the request is determined based on a load balancing algorithm, the project software multi-version coexistence processing method provides options of multiple versions for users at the same time, the learning cost and the pressure of adapting to new functions are reduced, the anti-risk capacity of software during updating is improved, and stability and safety are high.

A data processing system implements receiving, at a file system filter, a request to access a file information associated with a file from a requesting application on a user device; determining that neither a copy of the file or a placeholder file are available on the user device; accessing file mapping information from a file mapping datastore to determine whether a path associated with the file is within a namespace under control of the cloud file provider, the filename information, or both the path information and the filename information associated with the files; obtaining content associated with the file from the cloud file provider based on the file mapping information responsive to the path associated with the file being within the namespace under control of the cloud file provider; and providing the content associated with the file to the requesting application.

A system includes a memory device and a processing device, operatively coupled with the memory device, to perform operations including: receiving a request to modify one or more regions of the memory device; identifying one or more mapping structures associated with each region of the one or more regions of the memory device; determining that a counter satisfies a threshold criterion, wherein the counter indicates a number of memory access commands at the one or more regions; creating a copy of each mapping structure associated with each region; and modifying the copy of each mapping structure according to the request to modify the one or more regions of the memory device.

A system and method for managing data compaction in zones in memory devices. An example method includes responsive to determining that a capacity counter associated with a first zoned namespace (ZNS) zone satisfies a threshold criterion, causing a memory device to copy, from a first management unit of the memory device to a second management unit of the memory device, first data associated with the first ZNS zone, wherein the first management unit comprises a first subset of memory pages configured to store a first number of bits per memory cell and the second management unit comprises a second subset of memory pages configured to store a second number of bits per memory cell; and causing the memory device to copy, from the first management unit to a third management unit of the memory device, second data associated with a second ZNS zone.

The present application belongs to the technical field of cloud computing. Disclosed are a domain name resolution method based on cloud computing technology, and a cloud management platform. The method is applied to a cloud management platform. The method comprises: grouping a plurality of DNS servers to obtain a plurality of DNS server groups, wherein the plurality of DNS servers are used for resolving domain names in a target name area in a DNS name space; acquiring a plurality of domain name suffixes, wherein the plurality of domain name suffixes are suffixes of the domain names in the target name area; generating a target mapping relationship on the basis of the plurality of domain name suffixes and the plurality of DNS server groups; and allocating the plurality of domain name suffixes to corresponding DNS server groups on the basis of the target mapping relationship, so that the DNS servers in the corresponding DNS server groups resolve a domain name resolution request upon receiving the domain name resolution request. In the present application, by means of flexibly grouping the DNS servers and scheduling the DNS servers in groups to perform domain name resolution, the high availability of a domain name resolution service is ensured.

Disclosed is a method of operating a storage device which includes a non-volatile memory device. The method includes informing a host that a designation functionality for designating a data criticality and a priority to namespaces of the non-volatile memory device is possible, enabling the designation functionality in response to receiving an approval of the designation functionality, receiving, from the host, a first request for designating a data criticality and a priority for a first namespace of the namespaces, and generating a namespace mapping table in response to the first request.

A method of generating a file hash using mount namespace data includes identifying, by a user space monitoring application executing in a user space of an operating system, a target application file associated with a target application process executing in the user space of the operating system, wherein the target application process is associated with a first mount namespace, accessing, by the user space monitoring application, a mapping between the first mount namespace and one or more processes executing in the user space of the operating system, switching, by a processing device, the user space monitoring application to the first mount namespace based on the mapping, and accessing, by the user space monitoring application, the target application file in the first mount namespace.

Techniques are described for mapping a namespace to a compartment. An example method includes receiving, by a manager instance and from a pod, a first request for a token. The manager instance can transmit, to a token issuance service, a second request for the token. The token issuance service can identify a mapping object that maps the namespace to the resource. The token issuance service can transmit, to an identity service, the mapping object and a third request for the token. The identity service can identify a compartment of the customer tenancy based at least in part on the compartment identifier, the compartment managing the resource. The identity service can determine whether the pod has permission to access the resource. The identity service can generate the token based at least in part on the mapping object and the policy. The identity service can transmit the token to the pod.

Described is a system (and method) that maintains deduplication efficiency when storing data within a clustered data storage environment that implements a global namespace. To provide such a capability, the system may obtain granular data source identifying information from a client system that provides data to be backed-up by a backup component. The data source identifying information may take the form of a placement tag that is associated with the received data. The backup component may then provide such placement tags when providing the backup data to the clustered storage system. The placement tags may then be used to intelligently distribute backup files to particular storage nodes of the clustered storage system to improve deduplication efficiency.

The present technology is directed to providing a multi-root architecture for managing devices associated with their own root namespaces. The system can include backing up multiple computing devices to a single user account such that the content items from each computing device are stored in their own respective root namespace at the user account. With each user account having multiple root namespaces, the system can identify which root namespace is receiving changes, identify which changes are necessary to synchronize the system, and then communicate those changes to the content management system. This process is facilitated by running a synchronization engine for each root namespace, thereby controlling synchronization for each root namespace. Each synchronization engine is able to retain its own parameters of operation, which provides the ability to tailor synchronization modes on each synchronization engine.