Back to results
US 10,853,143 B2Granted
Automatic segmentation of data-center applications
AssigneeGuardicore Ltd.
InventorsLiron Schiff, Ariel Zeitlin, Ofri Ziv
Life of this patent
Estimating the term…
Abstract
An apparatus includes an interface and a processor. The interface is configured to receive attributes of communication connections of multiple workloads running in a computing system. The processor is configured to automatically segment the multiple workloads into groups based on the attributes of the communication connections, wherein the workloads in each group collectively run a respective application.
Claims26
An apparatus, comprising:
- an interface, configured to receive attributes of communication connections of multiple workloads running in a computing system;
- and
- a processor, configured to collect for each given workload of the multiple workloads, information on the communication connections of the given workload with other workloads, to identify tiers of given workloads that have similar collections of communication connections with other workloads, to assign weights to the communication connections between the tiers, to combine the tiers into groups responsive to the weights of the connections between the tiers, and to provide indication of the workloads in each group, for management of the computing system,
- wherein in identifying given workloads that have similar collections of communication connections with other workloads, the processor calculates for each pair of workloads a similarity measure, and clusters, into a same tier, workloads having a similarity measure above a threshold.
1 more element
A method, comprising:
- receiving attributes of communication connections of multiple workloads running in a computing system;
- based on the attributes, automatically segmenting the multiple workloads into groups, wherein the workloads in a given group collectively run a respective application;
- and
- acting upon segmentation of the workloads into the groups
- wherein automatically segmenting the multiple workloads into groups comprises:
- collecting for each given workload of the multiple workloads, information on the communication connections of the given workload with other workloads;
- identifying tiers of given workloads that have similar collections of communication connections with other workloads;
- assigning weights to the connections between the tiers;
- and
- combining the tiers into groups responsive to the weights of the connections between the tiers,
- wherein identifying tiers of given workloads that have similar collections of communication connections with other workloads comprises merging workloads identified as belonging to a same tier, into a single node.
8 more elements
A computer software product, the product comprising a tangible non-transitory computer-readable medium in which program instructions are stored, which instructions, when read by a processor, causes the processor to:
- receive attributes of communication connections of multiple workloads running in a computing system;
- and
- automatically segment the multiple workloads into groups based on the attributes of the communication connections, wherein the workloads in each group collectively run a respective application wherein automatically segmenting the multiple workloads into groups comprises:
- collecting for each given workload of the multiple workloads, information on the communication connections of the given workload with other workloads;
- identifying tiers of given workloads that have similar collections of communication connections with other workloads;
- assigning weights to the connections between the tiers;
- and
- combining the tiers into groups responsive to the weights of the connections between the tiers,
- wherein in identifying tiers of given workloads that have similar collections of communication connections with other workloads, the processor identifies groups of workloads that have incoming connections with a same destination port and from a source workload inside the group.
6 more elements
An apparatus, comprising:
- an interface, configured to receive attributes of communication connections of multiple workloads running in a computing system;
- and
- a processor, configured to collect for each given workload of the multiple workloads, information on the communication connections of the given workload with other workloads, to identify tiers of given workloads that have similar collections of communication connections with other workloads, to assign weights to the communication connections between the tiers, to combine the tiers into groups responsive to the weights of the connections between the tiers, and to provide indication of the workloads in each group, for management of the computing system,
- wherein in identifying given workloads that have similar collections of communication connections with other workloads, the processor merges workloads identified as belonging to a same tier, into a single node.
1 more element
An apparatus, comprising:
- an interface, configured to receive attributes of communication connections of multiple workloads running in a computing system;
- and
- a processor, configured to collect for each given workload of the multiple workloads, information on the communication connections of the given workload with other workloads, to identify tiers of given workloads that have similar collections of communication connections with other workloads, to assign weights to the communication connections between the tiers, to combine the tiers into groups responsive to the weights of the connections between the tiers, and to provide indication of the workloads in each group, for management of the computing system,
- wherein in identifying given workloads that have similar collections of communication connections with other workloads, the processor identifies groups of workloads that have incoming connections with a same destination port and from a source workload inside the group.
1 more element
Dependencies are inferred from the claim text.