SYSTEM AND METHOD FOR VIRTUAL PARTITION MONITORING
    91.
    发明公开
    SYSTEM AND METHOD FOR VIRTUAL PARTITION MONITORING 有权
    用于虚拟分区监视的系统和方法

    公开(公告)号:EP2737395A2

    公开(公告)日:2014-06-04

    申请号:EP12816928.1

    申请日:2012-07-26

    申请人: McAfee, Inc.

    摘要: A method is provided in one example embodiment that includes rebasing a module in a virtual partition to load at a fixed address and storing a hash of a page of memory associated with the fixed address. An external handler may receive a notification associated with an event affecting the page. An internal agent within the virtual partition can execute a task and return results based on the task to the external handler, and a policy action may be taken based on the results returned by the internal agent. In some embodiments, a code portion and a data portion of the page can be identified and only a hash of the code portion is stored.

    摘要翻译: 在一个示例实施例中提供了一种方法,该方法包括重定位虚拟分区中的模块以加载固定地址并存储与固定地址相关联的存储器页面的散列。 外部处理程序可能会收到与影响页面的事件相关的通知。 虚拟分区内的内部代理可以执行任务,并将基于该任务的结果返回给外部处理程序,并且可以根据内部代理返回的结果采取策略操作。 在一些实施例中,可以识别页面的代码部分和数据部分,并且仅存储代码部分的散列。

    VIRTUAL MACHINE MIGRATION TECHNIQUES
    92.
    发明公开
    VIRTUAL MACHINE MIGRATION TECHNIQUES 审中-公开
    迁移过程虚拟机

    公开(公告)号:EP2577450A4

    公开(公告)日:2014-05-07

    申请号:EP11790209

    申请日:2011-05-25

    申请人: MICROSOFT CORP

    IPC分类号: G06F9/455

    摘要: Techniques for migrating a virtual machine from a source computer system to a target computer system are disclosed. In an exemplary embodiment, a group of pages can be mapped writable in response to determining that the guest operating system attempted to change a specific page. In the same, or other embodiments, pages can be compressed prior to sending such that throughput of a communication channel is maximized. In the same, or other embodiments, storage IO jobs can be canceled on a source computer system and reissued by a target computer system.

    STACK OVERFLOW PREVENTION IN PARALLEL EXECUTION RUNTIME
    93.
    发明公开
    STACK OVERFLOW PREVENTION IN PARALLEL EXECUTION RUNTIME 有权
    EINERPARALLELAUSFÜHRUNGSLAUFZEIT中的STAPELÜBERFLUSSVERHINDERUNG

    公开(公告)号:EP2585917A4

    公开(公告)日:2014-04-09

    申请号:EP11807220

    申请日:2011-06-10

    申请人: MICROSOFT CORP

    IPC分类号: G06F9/455 G06F9/48 G06F11/00

    摘要: A parallel execution runtime prevents stack overflow by maintaining an inline counter for each thread executing tasks of a process. Each time that the runtime determines that inline execution of a task is desired on a thread, the runtime determines whether the inline counter for the corresponding thread indicates that stack overflow may occur. If not, the runtime increments the inline counter for the thread and allows the task to be executed inline. If the inline counter indicates a risk of stack overflow, then the runtime performs additional one or more checks using a previous stack pointer of the stack (i.e., a lowest known safe watermark), the current stack pointer, and memory boundaries of the stack. If the risk of stack overflow remains after all checks have been performed, the runtime prevents inline execution of the task.

    摘要翻译: 并行执行运行程序通过为执行进程的任务的每个线程维护一个内联计数器来防止堆栈溢出。 每当运行时确定在线程上期望执行任务时,运行时确定对应线程的内联计数器是否指示可能发生堆栈溢出。 如果没有,运行时会增加线程的内联计数器,并允许任务在线执行。 如果内联计数器指示堆栈溢出的风险,则运行时使用堆栈的先前堆栈指针(即,最低已知的安全水印),当前堆栈指针和堆栈的存储器边界来执行附加的一个或多个检查。 如果在执行所有检查后仍然存在堆栈溢出的风险,则运行时可以防止任务的内联执行。

    VIRTUAL MACHINE MIGRATION TECHNIQUES
    96.
    发明公开
    VIRTUAL MACHINE MIGRATION TECHNIQUES 审中-公开
    迁移过程虚拟机

    公开(公告)号:EP2577450A2

    公开(公告)日:2013-04-10

    申请号:EP11790209.8

    申请日:2011-05-25

    IPC分类号: G06F9/06 G06F9/44

    摘要: Techniques for migrating a virtual machine from a source computer system to a target computer system are disclosed. In an exemplary embodiment, a group of pages can be mapped writable in response to determining that the guest operating system attempted to change a specific page. In the same, or other embodiments, pages can be compressed prior to sending such that throughput of a communication channel is maximized. In the same, or other embodiments, storage IO jobs can be canceled on a source computer system and reissued by a target computer system.

    ACCELERATING MEMORY OPERATIONS USING VIRTUALIZATION INFORMATION
    97.
    发明公开
    ACCELERATING MEMORY OPERATIONS USING VIRTUALIZATION INFORMATION 审中-公开
    商店运营加速使用虚拟化信息

    公开(公告)号:EP2548123A2

    公开(公告)日:2013-01-23

    申请号:EP11756799.0

    申请日:2011-03-14

    IPC分类号: G06F12/08 G06F9/44

    摘要: A method of accelerating memory operations using virtualization information includes executing a hypervisor on hardware resources of a computing system. A plurality of domains are created under the control of the hypervisor, are created. Each domain is allocated memory resources that include accessible memory space that is exclusively accessible by that domain. Each domain is allocated one or more processor resources. The hypervisor identifies domain layout information that includes a boundary of accessible memory space of each domain. The hypervisor provides the domain layout information to each processor resource. Each processor resource is configured to implement, on a per domain basis, a restricted coherency protocol based on the domain layout information. The restricted coherency protocol bypasses, relative to the domain, downstream aches when a cache line falls within the accessible memory space of that domain.

    Protecting guest virtual machine memory
    98.
    发明公开
    Protecting guest virtual machine memory 审中-公开
    Schutz eines virtuellen Gastmaschinenspeichers

    公开(公告)号:EP2498183A2

    公开(公告)日:2012-09-12

    申请号:EP12154530.5

    申请日:2012-02-08

    申请人: SafeNet, Inc.

    发明人: Elteto, Laszlo

    IPC分类号: G06F9/455

    摘要: A hypervisor runs on a host computer system and defines at least one virtual machine. An address space of the virtual machine resides on physical memory of the host computer system under control of the hypervisor. A guest operating system runs in the virtual machine. At least one of a host operating system and the hypervisor sets parts of the address space of the host computer system corresponding to parts of the address space of the virtual machine to a locked state in which those parts can be read but not written to.

    摘要翻译: 虚拟机管理程序在主机计算机系统上运行,并定义至少一个虚拟机。 虚拟机的地址空间驻留在主机计算机系统的物理内存上,在管理程序的控制下。 客户机操作系统在虚拟机中运行。 主机操作系统和管理程序中的至少一个将与虚拟机的地址空间的一部分相对应的主计算机系统的地址空间的部分设置为可以读取但不写入的部分的锁定状态。

    DIRECT MEMORY ACCESS FILTER FOR VIRTUALIZED OPERATING SYSTEMS
    99.
    发明公开
    DIRECT MEMORY ACCESS FILTER FOR VIRTUALIZED OPERATING SYSTEMS 审中-公开
    直接存储器访问过滤器虚拟化的操作系统

    公开(公告)号:EP2313832A4

    公开(公告)日:2011-11-09

    申请号:EP09770712

    申请日:2009-06-05

    申请人: MICROSOFT CORP

    发明人: OSHINS JACOB

    摘要: Described techniques increase runtime performance of workloads executing on a hypervisor by executing virtualization-aware code in an otherwise non virtualization-aware guest operating system. In one implementation, the virtualization-aware code allows workloads direct access to physical hardware devices, while allowing the system memory allocated to the workloads to be overcommitted. In one implementation, a DMA filter driver is inserted into an I/O driver stack to ensure that the target guest physical memory of a DMA transfer is resident before the transfer begins. The DMA filter driver may utilize a cache to track which pages of memory are resident. The cache may also indicate which pages of memory are in use by one or more transfers, enabling the hypervisor to avoid appropriating pages of memory during a transfer.

    Network policy implementation for a multi-virtual machine appliance
    100.
    发明公开

    公开(公告)号:EP2378711A1

    公开(公告)日:2011-10-19

    申请号:EP11159372.9

    申请日:2011-03-23

    IPC分类号: H04L12/24 G06F9/455 H04L29/08

    摘要: A networking policy implementation for a multi-virtual machine appliance that includes a method for selecting a network implementation by applying a network policy to existing network configurations within a virtualization environment of a computing device. A control program that executes within the virtualization environment, receives an event notification generated by a virtual machine in response to a lifecycle event. The control program, in response to receiving the notification, invokes a policy engine that applies a network policy to existing network configurations of the virtualization environment. This network policy can correspond to the virtual machine or to a network object connected to virtual interface objects of the virtual machine. The policy engine then identifies an existing network configuration that has attributes which satisfy the network policy, and selects a network implementation that satisfies the network policy and the network configuration.

    摘要翻译: 一种用于多虚拟机器设备的网络策略实现,其包括通过对计算设备的虚拟化环境中的现有网络配置应用网络策略来选择网络实现的方法。 在虚拟化环境内执行的控制程序响应于生命周期事件接收由虚拟机生成的事件通知。 控制程序响应于接收到该通知,调用将网络策略应用于虚拟化环境的现有网络配置的策略引擎。 该网络策略可以对应于虚拟机或连接到虚拟机的虚拟接口对象的网络对象。 然后,策略引擎识别具有满足网络策略的属性的现有网络配置,并选择满足网络策略和网络配置的网络实现。