Discovery and Capability Exchange Management in a Virtualized Computing Platform
    51.
    发明申请
    Discovery and Capability Exchange Management in a Virtualized Computing Platform 有权
    虚拟化计算平台中的发现和能力交换管理

    公开(公告)号:US20120188870A1

    公开(公告)日:2012-07-26

    申请号:US13438450

    申请日:2012-04-03

    IPC分类号: H04L12/22

    摘要: In various embodiments a traffic class manager is a resource within a virtualized computer systems trusted entity (e.g. a hypervisor, trusted partition, etc.) that maps requirements from a platform management and associated network capabilities onto an adapter (e.g. SR-IOV adapter, etc.) in order to appropriately allocate adapter and network resources to virtualized computer partitions. In various embodiments the traffic class manager defines network traffic classes that meet the objectives of a platform administrator based on the capabilities of the adapter and the network attached to the adapter ports. Once the traffic classes are defined, in various embodiments, the traffic class manager enforces the assignment of a traffic class to a virtual interface queue pair within a partition.

    摘要翻译: 在各种实施例中,业务类别管理器是将需求从平台管理和相关网络能力映射到适配器(例如,SR-IOV适配器等)的虚拟化计算机系统可信实体(例如,管理程序,可信分区等)内的资源 ),以便将适配器和网络资源适当地分配给虚拟化的计算机分区。 在各种实施例中,业务类管理器基于适配器和连接到适配器端口的网络的能力来定义满足平台管理员的目标的网络业务类别。 一旦定义了流量类,在各种实施例中,流量类别管理器将流量类别的分配强制执行到分区内的虚拟接口队列对。

    Method, apparatus and computer program product for cell phone security
    52.
    发明授权
    Method, apparatus and computer program product for cell phone security 失效
    用于手机安全的方法,设备和计算机程序产品

    公开(公告)号:US07949008B2

    公开(公告)日:2011-05-24

    申请号:US11342952

    申请日:2006-01-30

    IPC分类号: H04J3/16

    摘要: An audio application program is isolated from an Internet application program in a cell phone system having a processor. An operating system program, a partition manager process and the audio and Internet application programs are stored in a computer readable memory of the cell phone. The method includes executing the partition manager process, the audio application program and the Internet application program by the cell phone system processor. Executing the partition manager process includes the partition manager process controlling the audio application program executing to be associated with a first executing instance of the cell phone operating system and the Internet application program executing to be associated with a second executing instance of the cell phone operating system, so that the audio application program is isolated from the Internet application program.

    摘要翻译: 音频应用程序与具有处理器的蜂窝电话系统中的因特网应用程序隔离。 操作系统程序,分区管理器处理和音频和因特网应用程序存储在蜂窝电话的计算机可读存储器中。 该方法包括由手机系统处理器执行分区管理器处理,音频应用程序和因特网应用程序。 执行分区管理器处理包括分配管理器进程,其控制执行与蜂窝电话操作系统的第一执行实例相关联的音频应用程序和执行为与手机操作系统的第二执行实例相关联的因特网应用程序 ,使得音频应用程序与互联网应用程序隔离。

    Broadcast of shared I/O fabric error messages in a multi-host environment to all affected root nodes
    54.
    发明授权
    Broadcast of shared I/O fabric error messages in a multi-host environment to all affected root nodes 有权
    在多主机环境中向所有受影响的根节点广播共享的I / O结构错误消息

    公开(公告)号:US07930598B2

    公开(公告)日:2011-04-19

    申请号:US12355931

    申请日:2009-01-19

    IPC分类号: G06F11/00

    摘要: A method, mechanism and computer usable medium is provided for distributing I/O fabric errors to the appropriate root nodes in a multi-root environment. The case where the I/O fabric is attached to more than one root node and where each root can potentially share with the other roots the I/O adapter (IOA) resources which are attached to the I/O is addressed. Additionally, a method, mechanism and computer usable medium is provided by which errors detected in an I/O fabric may be routed to all root nodes which may be affected by the error, while not being reported to the root nodes that will not be affected by those errors. In particular, distributed computing system which uses the PCI Express protocol to communicate over the I/O fabric is addressed.

    摘要翻译: 提供了一种方法,机制和计算机可用介质,用于在多根环境中向适当的根节点分发I / O结构错误。 I / O结构连接到多个根节点的情况下,并且每个根可以与其他根可能共享的情况下,附加到I / O的I / O适配器(IOA)资源被寻址。 另外,提供了一种方法,机制和计算机可用介质,通过该方法,机构和计算机可用介质可以将在I / O结构中检测到的错误路由到可能受到错误影响的所有根节点,同时不向根节点报告不受影响 由这些错误。 特别地,解决了使用PCI Express协议在I / O结构上进行通信的分布式计算系统。

    Differentiating traffic types in a multi-root PCI express environment
    55.
    发明授权
    Differentiating traffic types in a multi-root PCI express environment 失效
    在多根PCI Express环境中区分流量类型

    公开(公告)号:US07913024B2

    公开(公告)日:2011-03-22

    申请号:US12330578

    申请日:2008-12-09

    IPC分类号: G06F13/36

    CPC分类号: G06F13/4022

    摘要: Mechanisms for differentiating traffic types in a multi-root PCI Express environment are provided. The mechanisms generate a first mapping data structure that, for each single-root virtual hierarchy in the multi-root data processing system, associates a plurality of traffic classes with a plurality of priority groups and maps each traffic class in the plurality of traffic classes to a corresponding virtual channel in a plurality of virtual channels. Moreover, a second mapping data structure is generated that maps each virtual channel in the plurality of virtual channels to corresponding virtual link in a plurality of virtual links of the multi-root data processing system. Traffic of a particular priority group is routed from a single-root virtual hierarchy to a particular virtual link in the plurality of the virtual links based on the first mapping data structure and second mapping data structure.

    摘要翻译: 提供了在多根PCI Express环境中区分流量类型的机制。 这些机制产生第一映射数据结构,对于多根数据处理系统中的每个单根虚拟层次结构,将多个业务类与多个优先级组相关联并将多个业务类中的每个业务类映射到 在多个虚拟通道中的对应的虚拟通道。 此外,生成将多个虚拟信道中的每个虚拟信道映射到多根数据处理系统的多个虚拟链路中的相应虚拟链路的第二映射数据结构。 基于第一映射数据结构和第二映射数据结构,特定优先级组的业务从单根虚拟层次被路由到多个虚拟链路中的特定虚拟链路。

    Method of routing I/O adapter error messages in a multi-host environment
    56.
    发明授权
    Method of routing I/O adapter error messages in a multi-host environment 有权
    在多主机环境中路由I / O适配器错误消息的方法

    公开(公告)号:US07889667B2

    公开(公告)日:2011-02-15

    申请号:US12134872

    申请日:2008-06-06

    IPC分类号: H04B7/212

    摘要: A method and apparatus is provided for routing error messages in a distributed computer system comprising multiple root nodes, and further comprising one or more PCI switches and one or more I/O adapters, wherein each root node includes one or more system images. In one useful embodiment, a method is provided for routing I/O error messages to root nodes respectively associated with the errors contained in the messages. The method includes detecting occurrence of an error at a specified one of the adapters, wherein the error affects one of the system images, and generating an error message at the specified adapter. The method further comprises routing the error message from the specified adapter to the particular root node that includes the affected system image. The error message is then selectively processed at the particular root node, in order to identify the affected system image. Usefully, the step of routing the error message includes using a bus/device/function number associated with the error, together with a routing table located in one of the PCI switches, to route the error message to the correct root node and system image.

    摘要翻译: 提供了一种用于在包括多个根节点的分布式计算机系统中路由错误消息的方法和装置,并且还包括一个或多个PCI交换机和一个或多个I / O适配器,其中每个根节点包括一个或多个系统映像。 在一个有用的实施例中,提供了一种用于将I / O错误消息路由到分别与消息中包含的错误相关联的根节点的方法。 该方法包括检测指定的一个适配器中的错误的发生,其中该错误影响系统映像之一,并在指定的适配器处生成错误消息。 该方法还包括将错误消息从指定的适配器路由到包括受影响的系统映像的特定根节点。 然后在特定根节点处选择性地处理错误消息,以便识别受影响的系统映像。 有用的是,路由错误消息的步骤包括使用与错误相关联的总线/设备/功能号码以及位于其中一个PCI交换机中的路由表将错误消息路由到正确的根节点和系统映像。

    Communication between host systems using a transaction protocol and shared memories
    57.
    发明授权
    Communication between host systems using a transaction protocol and shared memories 失效
    使用事务协议和共享存储器的主机系统之间的通信

    公开(公告)号:US07860930B2

    公开(公告)日:2010-12-28

    申请号:US11612530

    申请日:2006-12-19

    IPC分类号: G06F15/16

    CPC分类号: G06F13/4022 G06F13/1652

    摘要: A method mechanism is provided for communication between host systems using a transaction protocol and shared memories. Shared memories are initialized based on a discovery process in a communication fabric such that at least one endpoint has address ranges in shared memories of at least two host systems. A transaction oriented protocol may be established for using the shared memories of the host systems to communicate between root complexes and endpoints of the same or different host systems. The transaction oriented protocol specifies a series of transactions to be performed by the various elements, e.g., root complex or endpoint, to push or pull data. Various combinations of push and pull transactions may be utilized.

    摘要翻译: 提供了一种用于使用事务协议和共享存储器在主机系统之间进行通信的方法机制。 基于通信结构中的发现过程来初始化共享存储器,使得至少一个端点具有至少两个主机系统的共享存储器中的地址范围。 可以建立面向事务的协议,以使用主机系统的共享存储器在相同或不同的主机系统的根配合和端点之间进行通信。 面向事务的协议指定要由各种元素执行的一系列事务,例如根复合或端点,以推或拉数据。 可以利用推挽事务的各种组合。

    Providing server security via a security sensor application shared by multiple operating system partitions
    58.
    发明授权
    Providing server security via a security sensor application shared by multiple operating system partitions 失效
    通过多个操作系统分区共享的安全传感器应用程序来提供服务器安全性

    公开(公告)号:US07844744B2

    公开(公告)日:2010-11-30

    申请号:US12109452

    申请日:2008-04-25

    CPC分类号: H04L63/1416 G06F21/52

    摘要: When a hypervisor in a computer server receives input/output (I/O) data traffic, the hypervisor sends the I/O data traffic to a security sensor application shared by multiple operating system (OS) partitions. If the security sensor application indicates that the I/O data traffic meets pre-defined security standards in the security sensor application, and the I/O data traffic is addressed to one of the OS partitions in the computer server, the hypervisor sends the I/O data traffic to the applicable OS partition. If the I/O data traffic meets the pre-defined security standards, and the I/O data traffic is not addressed to one of the OS partitions, the hypervisor sends the I/O data traffic to an external destination in a network coupled to the computer server.

    摘要翻译: 当计算机服务器中的管理程序接收输入/输出(I / O)数据流量时,管理程序将I / O数据流量发送到由多个操作系统(OS)分区共享的安全传感器应用程序。 如果安全传感器应用程序指示I / O数据流量满足安全传感器应用程序中的预定义安全标准,并且I / O数据流量被寻址到计算机服务器中的一个OS分区,则管理程序将I / O到适用的操作系统分区的数据流量。 如果I / O数据流量满足预定义的安全标准,并且I / O数据流量未被寻址到OS分区之一,则管理程序将I / O数据流量发送到耦合到的网络中的外部目的地 电脑服务器。

    Method for confirming identity of a master node selected to control I/O fabric configuration in a multi-host environment
    59.
    发明授权
    Method for confirming identity of a master node selected to control I/O fabric configuration in a multi-host environment 有权
    用于确认被选择用于控制多主机环境中的I / O结构配置的主节点的身份的方法

    公开(公告)号:US07631050B2

    公开(公告)日:2009-12-08

    申请号:US11260624

    申请日:2005-10-27

    IPC分类号: G06F15/16

    CPC分类号: G06F15/17

    摘要: In a distributed computer system having multiple root nodes, a challenge protocol is provided, for use in determining or confirming the root node in which a PCI Configuration Manager (PCM) actually resides. This node is referred to as the master node. The challenge procedure is activated whenever the identity of the PCM, which is determined by the root node in which it resides, appears to be uncertain. The challenge procedure resolves this uncertainty, and enables the PCM to continue to configure routings throughout the system. In a useful embodiment, a method is directed to a distributed computer system of the above type which is further provided with PCI switches and with adapters that are available for sharing by different nodes. The method includes the steps of selecting a first one of the root nodes to be master root node, and operating the first root node to query the configuration space of a particular one of the PCI switches. The method further includes detecting information indicating that a second root node is considered to be the master root node for the particular switch. A challenge protocol is implemented in response to this detected information, to seek confirmation that the first root node is the master root node. The configuration space querying procedure is continued if the first root node is confirmed to be the master root node, and is otherwise aborted.

    摘要翻译: 在具有多个根节点的分布式计算机系统中,提供质询协议,用于确定或确认PCI配置管理器(PCM)实际驻留的根节点。 该节点称为主节点。 每当由其驻留的根节点确定的PCM的身份似乎不确定时,激活挑战过程被激活。 挑战程序解决了这种不确定性,并使PCM能够在整个系统中继续配置路由。 在有用的实施例中,一种方法针对上述类型的分布式计算机系统,其进一步提供有PCI交换机以及可由不同节点共享的适配器。 该方法包括以下步骤:将根节点中的第一个选择为主根节点,以及操作第一根节点以查询特定一个PCI交换机的配置空间。 该方法还包括检测指示第二根节点被认为是特定交换机的主根节点的信息。 响应于该检测到的信息来实现质询协议,以寻求第一根节点是主根节点的确认。 如果第一个根节点被确认为主根节点,则会继续进行配置空间查询过程,否则中止。

    Native and Non-Native I/O Virtualization in a Single Adapter
    60.
    发明申请
    Native and Non-Native I/O Virtualization in a Single Adapter 有权
    单一适配器中的本地和非本机I / O虚拟化

    公开(公告)号:US20090276551A1

    公开(公告)日:2009-11-05

    申请号:US12114970

    申请日:2008-05-05

    IPC分类号: G06F13/12 G06F13/00

    CPC分类号: G06F13/102

    摘要: Mechanisms for enabling both native and non-native input/output virtualization (IOV) in a single I/O adapter are provided. The mechanisms allow a system with a large number of logical partitions (LPARs) and system images to use IOV to share a native IOV enabled I/O adapter or endpoint that does not implement the necessary number of virtual functions (VFs) for each LPAR and system image. A number of VFs supported by the I/O adapter, less one, are assigned to LPARs and system images so that they may make use of native IOV using these VFs. The remaining VF is associated with a virtual intermediary (VI) which handles non-native IOV of the I/O adapter. Any remaining LPARs and system images share the I/O adapter using the non-native IOV via the VI. Thus, any number of LPARs and system images may share the same I/O adapter or endpoint.

    摘要翻译: 提供了在单个I / O适配器中实现本机和非本机输入/输出虚拟化(IOV)的机制。 这些机制允许具有大量逻辑分区(LPAR)和系统映像的系统使用IOV来共享不为每个LPAR实现必需数量的虚拟函数(VF)的本机IOV使能的I / O适配器或端点, 系统图像。 I / O适配器支持的多个VF分配给LPAR和系统映像,从而可以利用这些VF使用本机IOV。 剩余的VF与处理I / O适配器的非本地IOV的虚拟中介(VI)相关联。 任何剩余的LPAR和系统映像都使用非本机IOV通过VI共享I / O适配器。 因此,任何数量的LPAR和系统映像可以共享相同的I / O适配器或端点。