A communication apparatus comprises a rollback control unit to create a second process to roll back a currently working first process thereto; a storage to store states shared by the first and the second processes, the second process taking over a state(s) stored in the storage unit; a buffer; and a timing control unit that controls of timing of rollback. The rollback control unit starts event buffering to store in the buffer all of an event(s) received during when the first process is processing and destined to the first process, and upon completion of the processing of the event by the first process, the rollback control unit performs switching of a working process from the first process to the second process, sends the event(s) stored therein from start of the event buffering to the second process and stop event buffering.

A switch apparatus includes: a plurality of ports; a VLAN setting management unit storing entries, in each of which VLAN information and at least one of the plurality of ports are associated with each other, and adding or updating, if an entry corresponding to a combination of VLAN information included in a packet received from a port and the reception port of the packet is not stored, a corresponding entry for the received packet; and a functional unit notifying a predetermined control apparatus of an added or updated content of the entry.

A method and apparatus of a device that dynamically changes how management data is managed in response to events detected in a network system is described. In an exemplary embodiment, the device detects an event occurring in the network system. The device further determines if the event triggers a system change in how the management data is reported on one or more of the managed nodes. If the event notification does trigger the system change, for each of the one or more of the managed nodes, the device determines a command for that manage node that represents a specific change in how frequent the management data is reported to the network management system. In addition, the device sends the command to that managed node, where the agent applies the command to the managed node and the applied command implements the specific change in how frequent the management data is reported to the network management system.

Example implementations disclosed herein can be used to generate composite network policy graphs based on multiple network policy graphs input by network users that may have different goals for the network. The resulting composite network policy graph can be used to program a network so that it meets the requirements necessary to achieve the goals of at least some of the network users. In one example implementation, a method can include receiving multiple network policy graphs, generating composite endpoint groups based on relationships between endpoint groups and policy graph sources, generating composite paths based on the relationships between the endpoints and the network policy graphs, generating a composite network policy graph based on the composite endpoint groups and the composite paths, and analyzing the composite network policy graph to determine conflicts or errors.

A management server is provided that manages a plurality of image forming apparatuses including an image forming apparatus compliant with a setting management function that enables an operation of security information, and an image forming apparatus non-compliant with the setting management function. The management server receives security information from the image forming apparatus, and determines whether the security information includes a change. When the image forming apparatus that is a transmission source of the security information including the change is non-compliant with the setting management function, the management server outputs a notice indicating that the security information including the change as a notice, whereas when the image forming apparatus is compliant with the setting management function, the management server outputs a notice indicating that the security information including the change as a warning.

Aspects of the present invention provide isolating and applying a common protocol which may be used by multiple devices across multiple network levels to analyze an entire system of control networks. A generic message may be sent individually to targeted addresses across a network level. If a response is received from a device at a targeted address, such as within a timeout period, a specific message customized to the individual device may be sent to extract further detail about the device, including its connectivity to other devices and networks. The system may continue automatically until resource utilization of the entire system is determined to thereby provide diagnostic and reliability services.

Methods, apparatuses and systems for cloud-based disaster recovery are provided. The method, for example, includes configuring, at a cloud-based computing platform, a workload associated with a function-based service used by a client machine, the workload including generated steps listing servers associated with the function-based service and configured based on information provided by a user at the client machine; and restoring the servers for each of the generated steps of the workload including executing at least one of a pre-restore script, a post-restore script, or a manual input upon receiving, from the client machine, a failure indication associated with the servers.

A method for deploying different virtual networks over several public cloud datacenters for different entities. For each entity, the method (1) identifies a set of public cloud datacenters of one or more public cloud providers to connect a set of machines of the entity, (2) deploys managed forwarding nodes (MFNs) for the entity in the identified set of public cloud datacenters, and then (3) configures the MFNs to implement a virtual network that connects the entity's set of machines across its identified set of public cloud datacenters. In some embodiments, the method identifies the set of public cloud datacenters for an entity by receiving input from the entity's network administrator. In some embodiments, this input specifies the public cloud providers to use and/or the public cloud regions in which the virtual network should be defined. Conjunctively, or alternatively, this input in some embodiments specifies actual public cloud datacenters to use.

A method for managing a communication according to a transport protocol of a terminal equipment in a communication network. The method includes: detecting presence, on a path allowing the terminal equipment to be reached on a second IP address of the terminal equipment, of a status function which maintains a status associated with a communication on the path, including transmitting a first message from a first IP resource of the terminal equipment, including a first IP address and a first port number, to a second IP resource of the terminal equipment, including the second IP address and a second port number, and deciding on presence of a status function on the path according to data received by the second IP resource in response the first message; and managing a communication of the terminal equipment on the path allowing the terminal equipment to be reached on the second IP address.

A method for managing a communication according to a transport protocol of a terminal equipment in a communication network. The method includes: detecting presence, on a path allowing the terminal equipment to be reached on a second IP address of the terminal equipment, of a status function which maintains a status associated with a communication on the path, including transmitting a first message from a first IP resource of the terminal equipment, including a first IP address and a first port number, to a second IP resource of the terminal equipment, including the second IP address and a second port number, and deciding on presence of a status function on the path according to data received by the second IP resource in response the first message; and managing a communication of the terminal equipment on the path allowing the terminal equipment to be reached on the second IP address.