Generating and using checkpoints in a virtual computer system
    42.
    发明授权
    Generating and using checkpoints in a virtual computer system 有权
    在虚拟计算机系统中生成和使用检查点

    公开(公告)号:US08266404B2

    公开(公告)日:2012-09-11

    申请号:US13171268

    申请日:2011-06-28

    IPC分类号: G06F12/02

    摘要: To generate a checkpoint for a virtual machine (VM), first, while the VM is still running, a copy-on-write (COW) disk file is created pointing to a parent disk file that the VM is using. Next, the VM is stopped, the VM's memory is marked COW, the device state of the VM is saved to memory, the VM is switched to use the COW disk file, and the VM begins running again for substantially the remainder of the checkpoint generation. Next, the device state that was stored in memory and the unmodified VM memory pages are saved to a checkpoint file. Also, a copy may be made of the parent disk file for retention as part of the checkpoint, or the original parent disk file may be retained as part of the checkpoint. If a copy of the parent disk file was made, then the COW disk file may be committed to the original parent disk file.

    摘要翻译: 要为虚拟机(VM)生成检查点,首先,当VM仍在运行时,会创建指向VM所使用的父磁盘文件的写时复制(COW)磁盘文件。 接下来,VM停止,VM的内存被标记为COW,VM的设备状态被保存到内存,VM被切换为使用COW磁盘文件,并且VM再次开始运行,大部分剩下的检查点生成 。 接下来,将存储在存储器中的设备状态和未修改的VM内存页保存到检查点文件。 另外,作为检查点的一部分,可以将父磁盘文件作为副本作为保留,也可以将原始的父磁盘文件作为检查点的一部分进行保留。 如果生成了父磁盘文件的副本,则COW磁盘文件可能会提交到原始的父磁盘文件。

    Managing network data transfers in a virtual computer system
    43.
    发明授权
    Managing network data transfers in a virtual computer system 有权
    管理虚拟计算机系统中的网络数据传输

    公开(公告)号:US08266275B2

    公开(公告)日:2012-09-11

    申请号:US12468011

    申请日:2009-05-18

    IPC分类号: G06F15/173

    摘要: A method for protecting a virtual computer system which may be susceptible to adverse effects from a Denial of Service attack is described. The virtual computer system includes a plurality of VMs. In the method, data that is transferred between the virtual computer system and the computer network is monitored for an indication of a possible Denial of Service attack. If an indication of a possible Denial of Service attack is detected, one or more of the VMs is suspended, to reduce the risk of adverse effects on one or more other VMs.

    摘要翻译: 描述了一种用于保护可能容易遭受拒绝服务攻击的不利影响的虚拟计算机系统的方法。 虚拟计算机系统包括多个虚拟机。 在该方法中,监视在虚拟计算机系统和计算机网络之间传送的数据,以示出可能的拒绝服务攻击的指示。 如果检测到可能的拒绝服务攻击的指示,则一个或多个VM被暂停,以减少对一个或多个其他VM的不利影响的风险。

    Storage area network access for virtual machines
    44.
    发明授权
    Storage area network access for virtual machines 有权
    虚拟机的存储区域网络访问

    公开(公告)号:US08166475B1

    公开(公告)日:2012-04-24

    申请号:US11478200

    申请日:2006-06-29

    摘要: Detailed herein are approaches to allowing individual virtual machines executing on a single physical host to have their own substantially unique identifier for access to a storage area network (SAN). In one approach, a substantially unique identifier (SUI) is associated with a virtual machine, and the physical node is instructed to use that SUI when logging into the SAN and when performing input or output operations on behalf of the virtual machine.

    摘要翻译: 这里详细描述了允许在单个物理主机上执行的各个虚拟机具有用于访问存储区域网络(SAN)的本身基本上唯一的标识符的方法。 在一种方法中,基本上唯一的标识符(SUI)与虚拟机相关联,并且指示物理节点在登录SAN时以及当代表虚拟机执行输入或输出操作时使用该SUI。

    Lock-up free data sharing
    49.
    发明授权
    Lock-up free data sharing 失效
    锁定免费数据共享

    公开(公告)号:US5787480A

    公开(公告)日:1998-07-28

    申请号:US684281

    申请日:1996-07-17

    IPC分类号: G06F9/46 G06F12/00

    CPC分类号: G06F9/52

    摘要: A software implemented method for lock-up free data sharing operates in a networked computer system including a plurality of workstations. Each workstation including a processor, a memory having addresses, and an input/output interface connected to each other by a bus. A set of addresses of the memories are designated as virtual shared addresses to store shared data. A portion of the virtual shared addresses is allocated to store the shared data as a plurality of blocks accessible by programs executing in any of the processors, each block including an integer number of lines. A program is instrumented to request an exclusive copy of the block if the program includes a store instruction which attempts to access data stored in a non-exclusive copy of the block. Additional instructions of the program are executed while the request for the exclusive copy of the block is pending. Addresses of data of the block modified by the additional instructions are recorded. In response to receiving the exclusive copy of the block, the modified data stored at the recorded addresses are merged with the data of the exclusive copy of the block.

    摘要翻译: 用于锁定免费数据共享的软件实现方法在包括多个工作站的联网计算机系统中运行。 每个工作站包括处理器,具有地址的存储器以及通过总线彼此连接的输入/输出接口。 存储器的一组地址被指定为虚拟共享地址以存储共享数据。 分配虚拟共享地址的一部分以将共享数据存储为可由在任何处理器中执行的程序访问的多个块,每个块包括整数行。 如果程序包括尝试访问存储在块的非排他性副本中的数据的存储指令,则程序被用来请求块的排他副本。 当程序的独占副本的请求待决时,执行程序的附加指令。 记录由附加指令修改的块的数据地址。 响应于接收到块的独占副本,存储在记录地址处的修改数据与块的专用副本的数据合并。