Techniques are described for performing latency-aware load balancing. In some examples, a computing device communicably coupled to a plurality of service endpoints that are in motion with respect to the computing device may receive data to be processed. The computing device may select, based at least in part on a communication latency of each of the plurality of service endpoints and a predicted compute latency of each of the plurality of service endpoints, a service endpoint out of the plurality of service endpoints to process the data. The computing device may send the data to the selected service endpoint for processing.

A system is provided for enforcing time-based user access levels in a computing infrastructure of an organization. The system includes a processor and a computer readable medium operably coupled thereto, to perform operations which include executing a synchronization of the time-based user access levels, obtaining a first login identifier (ID) of a plurality of login IDs for a group of employees of the organization, identifying a position ID and an employment status ID for the first login ID, determining a current time and a last login timestamp for the first login ID, determining a time-based access rule for the group of employees, determining whether a time period from the last login timestamp to the current time violates the time-based access rule, and setting, for the synchronization of the first login ID, at least a first access level of the first login ID to computing resources.

Methods and devices for creating and operating a combined network and computational slice instance (NCSI) in a Multi-access Edge Computing (MEC) scenario. Communication and computational resources may be reserved by a NCSI controller for the NCSI. The communication resources may include network slices and the computational resources may include MEC computational resources of one or more MEC servers. The reserved resources may be selected based on quality of service (QoS) requirements of UEs that will utilize the NCSI. During operation, reserved resources for the NCSI may be dynamically renegotiated based on an aggregate load of the NCSI, the QoS of data traffic, and/or updated QoS requirements of the UEs.

Methods and devices for creating and operating a combined network and computational slice instance (NCSI) in a Multi-access Edge Computing (MEC) scenario. Communication and computational resources may be reserved by a NCSI controller for the NCSI. The communication resources may include network slices and the computational resources may include MEC computational resources of one or more MEC servers. The reserved resources may be selected based on quality of service (QoS) requirements of UEs that will utilize the NCSI. During operation, reserved resources for the NCSI may be dynamically renegotiated based on an aggregate load of the NCSI, the QoS of data traffic, and/or updated QoS requirements of the UEs.

A request may be identified having one or more constraints for accessing disaggregated resources in a computing environment. One or more resources in a plurality of disaggregated resources may be identified based on the request. Computing server instances may be dynamically orchestrated using the one or more resources in the plurality of disaggregated resources based on the one or more constraints.

A request may be identified having one or more constraints for accessing disaggregated resources in a computing environment. One or more resources in a plurality of disaggregated resources may be identified based on the request. Computing server instances may be dynamically orchestrated using the one or more resources in the plurality of disaggregated resources based on the one or more constraints.

Route exchange in a plurality of network controller appliances on a per-tenant basis is disclosed. In one aspect, a method includes receiving, from a network management system and at a first network controller appliance, a designation of at least two tenants to be hosted on the first network controller appliance, the first network controller appliance being one of a plurality of network controller appliances in a SD-WAN; sending, from the first network controller appliance to other network controller appliances of the plurality of network controller appliances, a tenant list query message to obtain a corresponding tenant list of each of the other network controller appliances; and receiving a corresponding response from each of the other network controller appliances indicating the corresponding tenant list of each of the other network controller appliances, the corresponding response being used to update the tenant list on the first network controller appliance.

Route exchange in a plurality of network controller appliances on a per-tenant basis is disclosed. In one aspect, a method includes receiving, from a network management system and at a first network controller appliance, a designation of at least two tenants to be hosted on the first network controller appliance, the first network controller appliance being one of a plurality of network controller appliances in a SD-WAN; sending, from the first network controller appliance to other network controller appliances of the plurality of network controller appliances, a tenant list query message to obtain a corresponding tenant list of each of the other network controller appliances; and receiving a corresponding response from each of the other network controller appliances indicating the corresponding tenant list of each of the other network controller appliances, the corresponding response being used to update the tenant list on the first network controller appliance.

Methods and systems are provided for performing lossy dropping and ECN marking in a flow-based network. The system can maintain state information of individual packet flows, which can be set up or released dynamically based on injected data. Each flow can be provided with a flow-specific input queue upon arriving at a switch. Packets of a respective flow are acknowledged after reaching the egress point of the network, and the acknowledgement packets are sent back to the ingress point of the flow along the same data path. As a result, each switch can obtain state information of each flow and perform per-flow packet dropping and ECN marking.

[Problem] A lead time for providing a network service can be shortened. [Solution] A network service management apparatus 100 that uses resources included in a network functions virtualization infrastructure 140 to provide a network service includes an orchestrator 110 that defines resources that satisfy a resource requirement of a virtual network function constituting the network service and are allocated to the virtual network function, and reserves the resources, and a virtualized infrastructure manager 130 that secures the reserved resources, activates the virtual network function on the secured resources, and generates the network service. When the securing of the reserved resources fails, the orchestrator 110 re-reserves resources to replace the reserved resources, and the virtualized infrastructure manager 130 secures the re-reserved resources, and activates the virtual network functions on the secured resources.