In one embodiment, an electronic device maintains one or more tunnel-based overlays for a communication network. The communication network includes two or more physical provider networks. The device maintains a mapping between a particular application and the one or more overlays for the communication network. The device adjusts the mapping between the particular application and the one or more overlays for the communication network. The device causes one or more routers in the communication network to route traffic for the particular application according to the adjusted mapping between the application and the one or more overlays for the communication network.

A method, an apparatus, and a system are provided for load balancing of a service chain. The method includes: receiving, by a flow classifier, a service chain selection and control policy sent by a policy and charging rules function (PCRF) unit; hashing, by the flow classifier according to a hash quantity, a service flow corresponding to a service chain identifier, to obtain multiple subflows, and adding the service chain identifier and hashing factors to packets of the subflows, where different subflows correspond to different hashing factors; and sending, by the flow classifier, the packets of the subflows after the service chain identifier and the hashing factors are added, to a forwarding device.

In one embodiment, an electronic device maintains one or more tunnel-based overlays for a communication network. The communication network includes two or more physical provider networks. The device maintains a mapping between a particular application and the one or more overlays for the communication network. The device adjusts the mapping between the particular application and the one or more overlays for the communication network. The device causes one or more routers in the communication network to route traffic for the particular application according to the adjusted mapping between the application and the one or more overlays for the communication network.

Systems and methods for providing a network management platform for managing a plurality of deployments are described herein. In an embodiment, a server computer receives a request to generate a plurality of network deployments, including first interface elements and rules for a first network deployment and second interface elements and rules for a second network deployment. The server computer sends the first network deployment to a first plurality of client computing devices and sends the second network deployment to a second plurality of client computing devices. When the server computer receives network usage data from the first and second plurality of computing devices, the server computer provides the network usage data to a network operation with an identification of a corresponding deployment.

A method, an apparatus, and a system are provided for load balancing of a service chain. The method includes: receiving, by a flow classifier, a service chain selection and control policy sent by a policy and charging rules function PCRF unit; hashing, by the flow classifier according to a hash quantity, a service flow corresponding to a service chain identifier, to obtain multiple subflows, and adding the service chain identifier and hashing factors to packets of the subflows, where different subflows correspond to different hashing factors; and sending, by the flow classifier, the packets of the subflows after the service chain identifier and the hashing factors are added, to a forwarding device.

IT assets of the IT system are grouped into asset groups by verifying characteristics and relations of the IT assets against affinity criteria in decreasing order of an affinity level of corresponding affinity criteria. A description of target platforms eligible to host the IT assets includes an indication of one or more hosting constraints and an indication of a complexity level of each target platform. At least part of the IT assets of the asset groups are mapped onto respective the target platforms by verifying the characteristics and/or relations of the IT assets of the asset groups, in decreasing order of the affinity level of the corresponding affinity criteria. The IT system is configured by hosting each mapped IT asset on the respective one or more target platform, which aggregates IT assets that have a higher affinity level on target platforms that have a lower complexity level.

A method for providing a differentiated feature to a first user equipment (UE) connected to a local area network (LAN) implemented by a router connected to a customer premises equipment (CPE) provisioned with a default feature associated with a first service tier of a plurality of service tiers provided by an internet service provider includes obtaining data indicating the first UE has connected to the LAN and determining the first UE is eligible for a second service tier of the different tiers. In response to determining the first UE is eligible for the second service tier, the method includes causing the CPE to be dynamically provisioned for a differentiated service associated with the second service tier. The method includes sending a message to the router to configure the router to provide the differentiated feature to the first UE.

The present application is directed to a distributed system that provides multi-cloud aggregation and that includes a cloud-connector server, cloud-connector nodes, and one or more service-provider nodes that cooperate to provide services that are distributed across multiple clouds. A service-provider node obtains tenant-associated information from a virtual data center in which the service-provider node is installed and provides the tenant-associated information to the cloud-connector server.

A method and system for configuring an Information Technology (IT) system in a manner that decreases a complexity of the IT system. At least part of IT assets of the IT system is mapped onto respective one or more target platforms of a plurality of target platforms by verifying characteristics and/or relations of the IT assets, in decreasing order of the affinity level of corresponding affinity criteria of a plurality of affinity criteria, against one or more hosting constraints of the target platforms, in increasing order of a complexity level of the corresponding target platforms. The IT system is configured, including hosting each mapped IT asset on the respective one or more target platform, which aggregates IT assets that have a higher affinity level on target platforms that have a lower complexity level so as to decrease the complexity of the IT system.

A system and method for privacy policy enforcement to ensure reconciliation between users communicating via an open system interconnection (OSI) communication architecture, with receiving of a privacy policy for at least one user's device and a usage policy for at least one user, receiving encryption codes, receiving private data from a first user to be sent to a second user, encrypting by a first server the received data, receiving a privacy policy enforcement vector, and performing selective decryption, by a second server, for each data segment, wherein data segments that correspond to a match between the privacy policy and usage policy are decrypted, and wherein at least one of the first server and the second server is external to the first user and second user.