-
公开(公告)号:US10198026B1
公开(公告)日:2019-02-05
申请号:US15475030
申请日:2017-03-30
Applicant: Amazon Technologies, Inc.
Inventor: Guy Nakibly , Usama Nassir , Saar Gross , Nafea Bshara , Barak Wasserstrom , Daniel Joseph Grey
Abstract: In a system having a first clock domain with a first clock and a second clock domain with a second clock, the first and second clocks are monitored to determine whether one or both clocks are active. The first clock is selected to be an output clock if the first clock is active and the second clock is disabled irrespective of the clock selection signal. The second clock is selected to be the output clock if the second clock is active and the first clock is disabled irrespective of the clock selection signal. If both the first clock and the second clock are active, either the first clock or the second clock is selected according to a received clock selection signal.
-
公开(公告)号:US11650835B1
公开(公告)日:2023-05-16
申请号:US16836527
申请日:2020-03-31
Applicant: Amazon Technologies, Inc.
Inventor: Barak Wasserstrom , Said Bshara , Akram Baransi , Omri Itach , Tal Zilcer
CPC classification number: G06F9/455 , G06F13/4282 , G06F2213/0026
Abstract: Multiple independent endpoint devices can be emulated using a single system on chip (SoC) device. Such a SoC can have multiple cores that can emulate ports according to a specified protocol, such as the peripheral component interconnect express (PCIe) protocol useful for data communications. An emulation agent can manage various aspects of these emulated endpoint devices in software, including serving interrupts for relevant emulated devices according to a determined priority scheme. Interrupts can be registered for each device, and data structures allocated dynamically for a determined number and type(s) of PCIe endpoint devices to be emulated. Each PCIe core on the SoC can function as a separate PCIe endpoint device endpoint for communicating with one or more hosts or other such devices.
-
公开(公告)号:US11645075B1
公开(公告)日:2023-05-09
申请号:US17305152
申请日:2021-06-30
Applicant: Amazon Technologies, Inc.
Inventor: Barak Wasserstrom , Adi Habusha , Ron Diamant , Erez Sabbag
CPC classification number: G06F9/30058 , G06F9/3836 , G06F9/45558 , G06K9/6256 , G06N3/08
Abstract: Execution flows of a program can be characterized by a series of execution events. The rates at which these execution events occur for a particular program can be collected periodically, and the execution events statistics can be utilized for both training a machine learning model, and later on for making classification inferences to determine whether a program run contains any abnormality. When an abnormality is encountered, an alert can be generated and provided to supervisory logic of a computing system to indicate that an abnormal program flow has been detected.
-
公开(公告)号:US11023589B2
公开(公告)日:2021-06-01
申请号:US16435391
申请日:2019-06-07
Applicant: Amazon Technologies, Inc.
Inventor: Anthony Nicholas Liguori , Barak Wasserstrom
IPC: G06F21/57 , G06F9/455 , G06F9/4401 , H04L9/00 , H04L9/06 , H04L9/08 , H04L9/14 , H04L9/30 , H04L9/32 , H04L29/06
Abstract: A multi-phase boot operation of a virtualization manager at a virtualization host is initiated at an offload card. In a first phase of the boot, a security key stored in a tamper-resistant location of the offload card is used. In a second phase, firmware programs are measured using a security module, and a first version of a virtualization coordinator is instantiated at the offload card. The first version of the virtualization coordinator obtains a different version of the virtualization coordinator and launches the different version at the offload card. Other components of the virtualization manager (such as various hypervisor components that do not run at the offload card) are launched by the different version of the virtualization controller.
-
公开(公告)号:US10972449B1
公开(公告)日:2021-04-06
申请号:US16022271
申请日:2018-06-28
Applicant: Amazon Technologies, Inc.
Inventor: Alex Levin , Barak Wasserstrom , Georgy Zorik Machulsky , Saar Gross , Or Yochanan
Abstract: Disclosed herein are techniques for enabling device communication in a secure environment. In one example, a system comprises a storage in a server, a first component in the server, the first component being isolated in a secure environment in the server, and an entry point device authorized to access the first component via the secure environment. The entry point device may receive a request to access the first component. The entry point device may store a notification in a region of the storage accessible by the first component, wherein the notification is to be read by the first component from the storage to set the first component to an operation mode. The entry point device may store operation data in the storage, wherein the operation data is to be acquired by the first component from the storage to control an operation of the first component in the operation mode.
-
公开(公告)号:US10917362B1
公开(公告)日:2021-02-09
申请号:US16009141
申请日:2018-06-14
Applicant: Amazon Technologies, Inc.
Inventor: Tzachi Zidenberg , Barak Wasserstrom , Guy Zalik
IPC: H04L12/947 , H04L12/935
Abstract: Disclosed is a network device, comprising a first network interface port, a second network interface port, and a processor coupled to the first network interface port and the second network interface port. The processor can be configured to operate in a first switching mode to receive network control packets via the first network interface port and transmit the received network control packets via the second network interface port. The processor can also be configured operate in a second communications mode to receive and transmit network communication packets using the first network interface independently of the operation in the first switching mode.
-
公开(公告)号:US10891140B1
公开(公告)日:2021-01-12
申请号:US16144267
申请日:2018-09-27
Applicant: Amazon Technologies, Inc.
Inventor: Alex Levin , Georgy Zorik Machulsky , Idan Aharoni , Barak Wasserstrom , Erez Tsidon
Abstract: Configuration snapshots can be obtained from various connected devices, such as network interface cards or hardware offload devices, to determine whether the configuration matches expected values. If discrepancies are determined then the appropriate values can be automatically applied to those devices. For each type and version of device, there can be a set of expected configuration values, or a golden model of configuration, that is determined and stored. The models can also be used to test updated configuration values, as the new values can be pushed to a subset of devices and the impact on performance determined. If acceptable performance improvement is detected, or another such target achieved, then the golden model can be updated with the new values and those values can be pushed out to the remainder of the devices.
-
公开(公告)号:US10003554B1
公开(公告)日:2018-06-19
申请号:US14979319
申请日:2015-12-22
Applicant: Amazon Technologies, Inc.
Inventor: Tzachi Zidenberg , Barak Wasserstrom , Guy Zalik
IPC: H04L12/947 , H04L12/935
Abstract: Disclosed is a network device, comprising a first network interface port, a second network interface port, and a processor coupled to the first network interface port and the second network interface port. The processor can be configured to operate in a first switching mode to receive network control packets via the first network interface port and transmit the received network control packets via the second network interface port. The processor can also be configured operate in a second communications mode to receive and transmit network communication packets using the first network interface independently of the operation in the first switching mode.
-
公开(公告)号:US09791506B1
公开(公告)日:2017-10-17
申请号:US14925044
申请日:2015-10-28
Applicant: Amazon Technologies, Inc.
Inventor: Yaniv Meidan , Ronen Shitrit , Guy Zalik , Barak Wasserstrom
IPC: G01R31/28 , G01R31/3177 , G01R31/317
CPC classification number: G01R31/31907 , G01R31/31919
Abstract: In one example case, a cross-platform system includes a first automated test platform having a first test instrument and a first glue layer interface that exposes test functions to direct testing by the first test instrument. The system further includes a second automated test platform having a second test instrument and a second glue layer interface that exposes the same test functions to direct testing by the second test instrument. In the system, the glue layers abstract the respective and different control commands used by the different, first and second test instruments. Using the glue layers, the same higher-level test code can be executed by the control computers of both the first and second automated test platforms.
-
公开(公告)号:US12093706B2
公开(公告)日:2024-09-17
申请号:US18186748
申请日:2023-03-20
Applicant: Amazon Technologies, Inc.
Inventor: Barak Wasserstrom , Said Bshara , Akram Baransi , Omri Itach , Tal Zilcer
CPC classification number: G06F9/455 , G06F13/105 , G06F13/24 , G06F13/4221 , G06F13/4282 , G06F2213/0026
Abstract: Multiple independent endpoint devices can be emulated using a single system on chip (SoC) device. Such a SoC can have multiple cores that can emulate ports according to a specified protocol, such as the peripheral component interconnect express (PCIe) protocol useful for data communications. An emulation agent can manage various aspects of these emulated endpoint devices in software, including serving interrupts for relevant emulated devices according to a determined priority scheme. Interrupts can be registered for each device, and data structures allocated dynamically for a determined number and type(s) of PCIe endpoint devices to be emulated. Each PCIe core on the SoC can function as a separate PCIe endpoint device endpoint for communicating with one or more hosts or other such devices.
-
-
-
-
-
-
-
-
-