Examples include a method for providing multi-site orchestration in a public network for factory automation. The public network provides communication and computing functionality to a plurality of sites which are configured to communicate with each other by means of slice of the public network. The method includes building a multi-site orchestration model based on initial performance of communication between different sites; determining choreography opportunities between the different sites by using the multi-site orchestration model; triggering choreography between the different sites; and evaluating performance of the choreography between the different sites and updating the multi-site orchestration model.

A configuration of a cloud application exposed via a public IP address is duplicated with modifications to include a private IP address to expose the application internally. The original configuration is updated so that external network traffic sent to the application is redirected to and distributed across agents running on nodes of a cloud cluster by which web application firewalls (WAFs) are implemented. A set of agents for which the respective WAFs should inspect the redirected network traffic are selected based on cluster metrics, such as network and resource utilization metrics. The redirected network traffic targets a port allocated to the agents that is unique to the application, where ports are allocated on a per-application basis so each of the agents can support WAF protection for multiple applications. Network traffic which a WAF allows to pass is directed from the agent to the application via its private IP address.

Systems and methods are provided for updating resource allocation in a distributed network. For example, the method may comprise allocating a plurality of resource containers in a distributed network in accordance with a first distributed resource configuration. Upon determining that a processing workload value exceeds a stabilization threshold of the distributed network, determining a resource efficiency value of the plurality of resource containers in the distributed network. When a resource efficiency value is greater than or equal to the threshold resource efficiency value, the method may generate a second distributed resource configuration that includes a resource upscaling process, or when the resource efficiency value is less than the threshold resource efficiency value, the method may generate the second distributed resource configuration that includes a resource outscaling process. The resource allocation may transmit the second to update the resource allocation.

A method for controlling the admission of slices in a virtualized telecommunication network and the congestion generated between services with different priorities instantiated on the slices and likely to share a given quantity of resources comprising the following steps of: defining a priority scale to be assigned to the network slices, defining a low priority threshold, determining the quantity of available and used network resources s.sub.p(t) and x.sub.p(t), determining the quantity of resources allocated to slices with a priority lower than the low priority threshold and which may be temporarily assigned to new slices with a priority higher than the threshold, and determining the slices likely to be accepted into the network, taking into account the available resources and the priority of the slices.

Described embodiments provide systems and methods for upgrading user space networking stacks without disruptions to network traffic. A first packet engine can read connection information of existing connections of a second packet engine written to a shared memory region by the second packet engine. The first packet engine can establish one or more virtual connections according to the connection information of existing connections of the second packet engine. Each of the first packet engine and the second packet engine can receive mirrored traffic data. The first packet engine can receive a first packet and determine that the first packet is associated with a virtual connection corresponding to an existing connection of the second packet engine. The first packet engine can drop the first packet responsive to the determination that the first packet is associated with the virtual connection.

A device may include a processor configured to register a network function, of a core network associated with a radio access network, in a network function repository for the core network. The processor may be further configured to obtain load information for the network function, wherein the load information indicates a load associated with the network function during a time period; determine that the load associated with the network function has reached a threshold based on the load information; and send an alert to an orchestration system to adjust a capacity for the network function, in response to determining that the load associated with the network function has reached the threshold.

Disclosed are a network slice management method, a terminal device, and a non-transitory computer-readable storage medium. The network slice management method comprises: acquiring terminal operation information (S100); determining, according to the terminal operation information, a network slice to be released from network slices accessed by applications of the terminal (S200); and releasing the network slice to be released (S300).

The subject technology selects a particular zone among multiple zones based on a target skew to meet a global balancing of cluster instances. The subject technology deploys a particular type of cluster instance to the particular zone. The subject technology, for each zone from the multiple zones, determines a respective number of cluster instances. The subject technology identifies a second particular type of cluster instance to remove based on a total number of the second particular type of cluster instance in the multiple zones and a second total number of the particular type of cluster instance in the multiple zones. The subject technology removes the second particular type of cluster instance from a second particular zone to meet the global balancing of cluster instances in the multiple zones.

According to the present disclosure various network functions are dynamically instantiated on a selected data center to utilize the most efficient and rapid resources available. An analytic module and a data lake receive performance data from the various data centers of a cellular network, such as a Regional Data Center, a National Data Center and an Edge Data Center. The analytic module will analyze the received performance data and apply artificial intelligence and machine learning to determine current resource use and estimate future resources available on various data centers of the cellular network. The appropriate data center is then selected to perform a particular network function.

A processing apparatus (10) processes received input data and outputs output data that is to be transferred to a synchronization target apparatus using a predetermined bandwidth. The processing apparatus (10) measures the generation rate of the output data that is to be output by the processing unit (122). Based on the measurement result, the processing apparatus (10) controls the input of input data such that a condition set in advance for the corresponding type of input data is satisfied and the generation rate of the output data rate is below the transmission rate of the band.