-
11.
公开(公告)号:US11150933B2
公开(公告)日:2021-10-19
申请号:US16355497
申请日:2019-03-15
Applicant: VMware, Inc.
Inventor: Andrei Warkentin , Cyprien Laplace , Regis Duchesne , Ye Li , Alexander Fainkichen
IPC: G06F9/455 , G06F11/34 , G06F1/3287 , G06F1/3234 , G06F9/50 , G06F11/30 , G06F1/329 , G06F9/48
Abstract: Techniques for optimizing CPU usage in a host system based on VM guest OS power and performance management are provided. In one embodiment, a hypervisor of the host system can capture information from a VM guest OS that pertains to a target power or performance state set by the guest OS for a vCPU of the VM. The hypervisor can then perform, based on the captured information, one or more actions that align usage of host CPU resources by the vCPU with the target power or performance state.
-
公开(公告)号:US11042485B2
公开(公告)日:2021-06-22
申请号:US16013263
申请日:2018-06-20
Applicant: VMware, Inc.
Inventor: Andrei Warkentin , Cyprien Laplace , Alexander Fainkichen , Ye Li , Regis Duchesne
Abstract: An example method of implementing firmware runtime services in a computer system having a processor with a plurality of hierarchical privilege levels, the method including: calling, from software executing at a first privilege level of the processor, a runtime service stub in a firmware of the computer system; executing, by the runtime service stub, an upcall instruction from the first privilege level to a second privilege level of the processor that is more privileged than the first privilege level; and executing, by a handler, a runtime service at the second privilege level in response to execution of the upcall instruction.
-
13.
公开(公告)号:US20190213033A1
公开(公告)日:2019-07-11
申请号:US16355497
申请日:2019-03-15
Applicant: VMware, Inc.
Inventor: Andrei Warkentin , Cyprien Laplace , Regis Duchesne , Ye Li , Alexander Fainkichen
IPC: G06F9/455 , G06F9/50 , G06F1/3287 , G06F11/34 , G06F1/3234
CPC classification number: G06F9/45558 , G06F1/3234 , G06F1/3287 , G06F9/5077 , G06F11/3423
Abstract: Techniques for optimizing CPU usage in a host system based on VM guest OS power and performance management are provided. In one embodiment, a hypervisor of the host system can capture information from a VM guest OS that pertains to a target power or performance state set by the guest OS for a vCPU of the VM. The hypervisor can then perform, based on the captured information, one or more actions that align usage of host CPU resources by the vCPU with the target power or performance state.
-
公开(公告)号:US12248799B2
公开(公告)日:2025-03-11
申请号:US17553607
申请日:2021-12-16
Applicant: VMware, Inc.
Inventor: Andrei Warkentin , Ye Li , Alexander Fainkichen , Regis Duchesne , Cyprien Laplace , Shruthi Muralidhara Hiriyuru , Sunil Kumar Kotian
IPC: G06F9/455
Abstract: An example method of managing guest time for a virtual machine (VM) supported by a hypervisor of a virtualized host computer includes: configuring, by the hypervisor, a central processing unit (CPU) of the host computer to trap, to the hypervisor, access by guest code in the VM to a physical counter and timer of the CPU; configuring, by the hypervisor, the guest code in the VM to use the physical counter and timer of the CPU rather than a virtual counter and timer of the CPU; trapping, at the hypervisor, an access to the physical counter and timer by the guest code; and executing, by the hypervisor, the access to the physical counter and timer on behalf of the guest code while compensating for an adjustment of a system count of the physical counter and timer to maintain the guest time as scaled with respect to frequency of the physical counter and timer.
-
公开(公告)号:US11436318B2
公开(公告)日:2022-09-06
申请号:US16905652
申请日:2020-06-18
Applicant: VMware, Inc.
Inventor: Ye Li , David Ott , Cyprien Laplace , Alexander Fainkichen , Shruthi Hiriyuru
Abstract: System and method for performing a remote attestation for creation of a trusted execution environment (TEE) using a virtual secure enclave device running in a virtualized environment utilizes a trusted bootloader appliance in a TEE virtual computing instance, which is created in response to a request for a TEE from a software process running in the system. The trusted bootloader appliance manages the provisioning of a TEE in the TEE virtual computing instance for the software process. The remote attestation includes performing a first stage attestation on the trusted bootloader appliance by a hardware platform of the computer system and performing a second stage attestation on the provisioned TEE by the trusted bootloader appliance.
-
16.
公开(公告)号:US11263019B2
公开(公告)日:2022-03-01
申请号:US16521434
申请日:2019-07-24
Applicant: VMware, Inc.
Inventor: Andrei Warkentin , Cyprien Laplace , Ye Li , Alexander Fainkichen , Regis Duchesne
IPC: G06F15/177 , G06F9/00 , G06F9/4401 , G06F16/22
Abstract: A method for generating boot tables for a device having access to device information. It is determined whether there exists at least one system boot table stored in a memory. If it is determined that a system boot table does not exist, the device information is retrieved, and the device information is converted to at least one boot table. The converting includes generating a first boot table by populating the first boot table with information of components of the device that have a correspondence to a computer system boot information standard. The generating also includes generating a second boot table for another component of the device that does not have a correspondence to the computer system boot information standard, by creating an entry in the second boot table that is populated with an identifier used to find a compatible component defined in the computer system boot standard.
-
公开(公告)号:US10698783B2
公开(公告)日:2020-06-30
申请号:US15865770
申请日:2018-01-09
Applicant: VMware, Inc.
Inventor: Andrei Warkentin , Cyprien Laplace , Regis Duchesne , Ye Li , Alexander Fainkichen
Abstract: A method of detecting virtualization in a computing system, which includes a processor having at least three hierarchical privilege levels including a third privilege level more privileged than a second privilege level, the second privilege level more privileged than a first privilege level, is described. The method includes: executing a program on the processor at a privilege level less privileged than the third privilege level, the program including a load-exclusive instruction of the processor, followed by at least one instruction of the processor capable of being trapped to the third privilege level, followed by a store-exclusive instruction of the processor; and determining presence or absence of virtualization software at least a portion of which executes at the third privilege level in response to a return status of the store-exclusive instruction.
-
18.
公开(公告)号:US10379870B2
公开(公告)日:2019-08-13
申请号:US15644670
申请日:2017-07-07
Applicant: VMware, Inc.
Inventor: Andrei Warkentin , Cyprien Laplace , Regis Duchesne , Alexander Fainkichen , Ye Li
IPC: G06F9/44 , G06F9/4401 , G06F3/06 , G06F12/1009 , G06F9/38 , G06F12/121 , G06F12/1027
Abstract: A method of initializing a secondary processor pursuant to a soft reboot of system software comprises storing code to be executed by the secondary processor in memory, building first page tables to map the code into a first address space and second page tables to identically map the code into a second address space, fetching a first instruction of the code based on a first virtual address in the first address space and the first page tables, and executing the code beginning with the first instruction to switch from the first to the second page tables. The method further comprises, fetching a next instruction of the code using a second virtual address, which is identically mapped to a corresponding machine address, turning off a memory management unit of the secondary processor, and executing a waiting loop until a predetermined location in the physical memory changes in value.
-
公开(公告)号:US20180173539A1
公开(公告)日:2018-06-21
申请号:US15387332
申请日:2016-12-21
Applicant: VMware, Inc.
Inventor: Andrei Warkentin , Cyrien Laplace , Alexander Fainkichen , Ye Li , Regis Duchesne
IPC: G06F9/44 , G06F12/1009
CPC classification number: G06F12/1009 , G06F9/4401 , G06F12/109 , G06F12/1441 , G06F2212/1008 , G06F2212/657
Abstract: Examples construct a bootloader address space using a page fault exception. A bootloader executing in machine address (MA) space determines the MA at which the bootloader has been loaded into memory. The bootloader calculates a difference between an expected virtual address (VA) and the loaded MA. The bootloader defines a page table mapping the bootloader MA to an expected VA, and sets an exception handling vector to point to the expected VA. When a memory management unit (MMU) utilizing the defined page table for address translation is enabled, a page fault exception occurs. The page fault exception handling resumes execution of the bootloader at the expected VA via an exception handling vector pointing thereto.
-
20.
公开(公告)号:US11954198B2
公开(公告)日:2024-04-09
申请号:US16671106
申请日:2019-10-31
Applicant: VMware, Inc.
Inventor: Ye Li , David Ott , Cyprien Laplace , Andrei Warkentin , Regis Duchesne
CPC classification number: G06F21/53 , G06F9/45558 , G06F21/604 , G06F2009/45591 , G06F2221/033
Abstract: System and method for creating and managing trusted execution environments (TEEs) using different underlying hardware TEE mechanisms use a virtual secure enclave device which runs in a virtualized environment in a computer system. The device enables an enclave command transmitted to the virtual secure enclave device to be retrieved and parsed to extract an enclave operation to be executed. A TEE backend module is used to interact with a particular hardware TEE mechanism among those available in the computer system. The module ensures the enclave operation for the software process is executed by the particular hardware TEE mechanism, or the TEE scheme based on a particular hardware TEE mechanism.
-
-
-
-
-
-
-
-
-