公开(公告)号：US20220222123A1

公开(公告)日：2022-07-14

申请号：US17710823

申请日：2022-03-31

Applicant: Oracle International Corporation

Inventor： Nathaniel Martin Glass

IPC: G06F9/50 ,  G06F8/71 ,  H04L41/5054 ,  H04L41/0816 ,  G06F8/60 ,  H04L41/5041 ,  H04L41/50 ,  G06F9/38 ,  G06F9/4401 ,  H04L41/0806 ,  G06F9/48 ,  G06F11/07 ,  G06F11/32 ,  G06F16/901 ,  G06F9/445 ,  G06F9/451 ,  G06F3/0484 ,  H04L67/00 ,  G06F11/14 ,  G06F11/36 ,  H04L67/10 ,  H04L67/1008 ,  H04L67/1031 ,  H04L67/566

Abstract: Techniques for preventing concurrent execution of an infrastructure orchestration service are described. Worker nodes can receive instructions, or tasks, for deploying infrastructure resources and can provide heartbeat notifications to scheduler nodes, also considered a lease. A signing proxy can track the heartbeat notifications sent from the worker nodes to the scheduler node. The signing proxy can receive requests corresponding to a performance of the tasks assigned to the worker nodes. The signing proxy can determine whether the lease between each worker node and the scheduler is valid. If the lease is valid, the signing proxy may make a call to services on behalf of the worker node, and if the lease is not valid, the signing proxy may not make a call to services on behalf of the worker node. Instead, the signing proxy may cut off all outgoing network traffic, blocking access of the worker node to services.

公开(公告)号：US20220214916A1

公开(公告)日：2022-07-07

申请号：US17703734

申请日：2022-03-24

Applicant: Oracle International Corporation

Inventor： Tanvir Singh Mundra ,  Christopher Richard Newcombe ,  Nathaniel Martin Glass

IPC: G06F9/48 ,  G06F9/50 ,  G06F11/30

Abstract: Techniques are disclosed for efficient utilization worker threads in a workflow-as-a-service (WFaaS) environment. A client device may request a workflow for execution by the client device. The client device may receive the requested workflow and initialize a set of worker threads to execute the workflow and a set of heartbeater threads to monitor the set of worker threads. Upon receiving an indication of a processing delay, the client device may capture the state of the workflow, suspend execution of the workflow, and store the workflow in a temporary queue. While the processing delay persists, the client device may use the set of worker threads to execute other tasks. When the processing delay terminates, the client device may resume execution of the workflow.

公开(公告)号：US20220147388A1

公开(公告)日：2022-05-12

申请号：US17091978

申请日：2020-11-06

Applicant: Oracle International Corporation

Inventor： Tanvir Singh Mundra ,  Christopher Richard Newcombe ,  Nathaniel Martin Glass

IPC: G06F9/48 ,  G06F9/50 ,  G06F21/44 ,  G06F11/30

Abstract: Techniques are disclosed for efficient utilization worker threads in a workflow-as-a-service (WFaaS) environment. A client device may request a workflow for execution by the client device. The client device may receive the requested workflow and initialize a set of worker threads to execute the workflow and a set of heartbeater threads to monitor the set of worker threads. Upon receiving an indication of a processing delay, the client device may capture the state of the workflow, suspend execution of the workflow, and store the workflow in a temporary queue. While the processing delay persists, the client device may use the set of worker threads to execute other tasks. When the processing delay terminates, the client device may resume execution of the workflow.

公开(公告)号：US11321137B2

公开(公告)日：2022-05-03

申请号：US17008102

申请日：2020-08-31

Applicant: Oracle International Corporation

Inventor： Eric Tyler Barsalou ,  Nathaniel Martin Glass

IPC: G06F8/60 ,  G06F9/50 ,  H04L12/24 ,  G06F3/0484 ,  G06F8/61 ,  G06F8/71 ,  G06F9/38 ,  G06F9/4401 ,  G06F9/445 ,  G06F9/451 ,  G06F9/48 ,  G06F11/07 ,  G06F11/14 ,  G06F11/32 ,  G06F11/36 ,  G06F16/901 ,  H04L29/08 ,  H04L41/5054 ,  H04L41/0816 ,  H04L41/5041 ,  H04L41/50 ,  H04L41/0806 ,  H04L67/00 ,  H04L67/10 ,  H04L67/1008 ,  H04L67/1031 ,  H04L67/566

Abstract: Techniques for implementing an infrastructure orchestration service are described. In certain embodiments, a cloud infrastructure orchestration system (CIOS) is disclosed that generates customized flock configurations for services to be deployed to different regions supported by the CIOS. The CIOS receives generic configuration information describing a set of infrastructure assets associated with a service and identifies first portions of the generic configuration information for deploying the set of infrastructure assets associated with the service that are configurable. The CIOS receives region configuration information for configuring the generic configuration information and updates the generic configuration information based on the region configuration information. The CIOS then transmits the updated configuration information to set of regions managed by the CIOS.

公开(公告)号：US11233845B1

公开(公告)日：2022-01-25

申请号：US16921490

申请日：2020-07-06

Applicant: Oracle International Corporation

Inventor： Mohamed Saber Abdelfattah Hassan ,  Jonathan Jorge Nadal ,  Nathaniel Martin Glass ,  Yu Wu ,  Daniel M. Vogel ,  Geoff Hopcraft

IPC: G06F15/16 ,  G06F9/54 ,  H04L29/06 ,  H04L29/08 ,  H04L12/801 ,  G06F16/951 ,  G06F9/50 ,  G06F9/46 ,  H04L12/911

Abstract: Techniques for managing network-accessible infrastructure metadata are provided. A method includes receiving a resource request comprising resource metadata corresponding to a network-accessible infrastructure resource, determining whether to commit the resource request based at least in part on a constraint associated with the network-accessible infrastructure resource, and, in accordance with a determination to commit the resource request: generating, by the computer system, a resource identifier describing resource metadata in accordance with the resource request, storing, by the computer system, the resource metadata in a data store in communication with the computer system, receiving, by the computer system, a data request to provide the resource metadata described by the resource identifier, and providing, by the computer system, the resource metadata described by the resource identifier in accordance with the data request.

公开(公告)号：US20210224133A1

公开(公告)日：2021-07-22

申请号：US17027507

申请日：2020-09-21

Applicant: Oracle International Corporation

Inventor： Eric Tyler Barsalou ,  Nathaniel Martin Glass

IPC: G06F9/50 ,  G06F9/4401 ,  G06F9/38

Abstract: Techniques for implementing an infrastructure orchestration service are described. A configuration file for a deployment to a first execution target and a second execution target can be received. A first safety plan can be generated for the first execution target that comprises a first list of resources and operations associated with deployment at the first execution target. Approval of the first safety plan can be received. A second safety plan can be generated for the second execution target that comprises a second list of resources and operations associated with deployment at the second execution target. A determination can be made whether the second safety plan is a subset of the first safety plan. If the determination is that the second safety plan is a subset of the first safety plan, the second safety plan can automatically be approved and transmitted to the second execution target for deployment.

公开(公告)号：US20210224122A1

公开(公告)日：2021-07-22

申请号：US16953262

申请日：2020-11-19

Applicant: Oracle International Corporation

Inventor： Nathaniel Martin Glass ,  Gregory Mark Jablonski

IPC: G06F9/50 ,  G06F16/901

Abstract: Techniques are disclosed for utilizing directed acyclic graphs for deployment instructions. A computer-implemented method can include various operations. Instructions may be executed by a computing device to perform parses of configuration data associated with a deployment. The computing device may cause a first directed acyclic graph (DAG) to be generated, the first DAG being utilized for deploying a first resource based on the parses. A second DAG may be generated for deploying execution targets based on the parses, the second DAG specifying dependencies between execution targets of the deployment. The computing device may generate a linked list data structure based on the parses and may deploy the computing system by traversal of the linked list data structure.

公开(公告)号：US20210224107A1

公开(公告)日：2021-07-22

申请号：US16926515

申请日：2020-07-10

Applicant: Oracle International Corporation

Inventor： Phillip Vassenkov ,  Nathaniel Martin Glass ,  Eric Tyler Barsalou ,  Caleb Dockter

IPC: G06F9/48 ,  G06F9/50 ,  G06F11/07 ,  G06F11/32 ,  G06F9/38

Abstract: Techniques for implementing an infrastructure orchestration service are described. In some examples, a declarative provisioner of the infrastructure orchestration service receives instructions for deployment of a resource. The declarative provisioner identifies that the deployment of the resource is a long-running task stores state information corresponding to the deployment of the resource. In certain embodiments, upon identifying that the deployment of the resource is a long-running task, the declarative provisioner pauses its execution of the long-running task. Responsive to a trigger received from the infrastructure orchestration service, the declarative provisioner resumes execution of the deployment of the resource using the state information and transmits deployment information corresponding to the deployment of the resource to the infrastructure orchestration service.

公开(公告)号：US20190104082A1

公开(公告)日：2019-04-04

申请号：US15908465

申请日：2018-02-28

Applicant: Oracle International Corporation

Inventor： Andrey Efimov ,  John Christopher Petry ,  Julien Nicolas Dollon ,  Nathaniel Martin Glass

IPC: H04L12/917 ,  H04L29/08

Abstract: Techniques for resegmenting a partition in a distributed stream-processing platform are provided. The techniques include receiving a trigger to move a partition of the distributed stream-processing platform from a first broker on a first set of physical resources to a second broker on a second a set of physical resources. In response to the trigger, the partition is allocated on the second broker, and the first broker is configured to redirect, to the second broker, requests for new messages after a last offset in the partition without replicating older messages before the last offset to the second broker. Idempotent produce metadata for the partition from the first broker is then merged into the second broker. Finally, metadata for processing requests for the partition is updated to include the second broker.

公开(公告)号：US12301631B2

公开(公告)日：2025-05-13

申请号：US18329417

申请日：2023-06-05

Applicant: Oracle International Corporation

Inventor： Igor Dozorets ,  Thoulfekar Alrahem ,  Jun Tong ,  Leonid Kuperman ,  Nachiketh Rao Potlapally ,  Bala Ganesh Chandran ,  Brian Pratt ,  Nathaniel Martin Glass ,  Girish Nagaraja ,  Jonathan Jorge Nadal

IPC: H04L9/40 ,  H04L67/10

Abstract: A cloud-based security solution that provides a robust and secure framework for managing and enforcing security policies related to various resources managed in the cloud is disclosed. The cloud-based security solution is implemented by a security zone policy enforcement system in a cloud service provider infrastructure. The system receives a request to perform an operation on a resource and determines a compartment associated with the resource. The system determines that the compartment is associated with a security zone and determines a set of one or more security zone policies applicable to the resource. The system then determines that the operation on the resource is permitted based on the set of one or more security zone policies and responsive to determining that the operation on the resource is permitted, allows the operation to be performed on the resource.