公开(公告)号：US20190340003A1

公开(公告)日：2019-11-07

申请号：US15968704

申请日：2018-05-01

申请人： VMware, Inc.

发明人： Arun RAMANATHAN ,  Yanlei ZHAO ,  Rohan Pradip SHAH ,  Benjamin Yun LIANG ,  Gabriel TARASUK-LEVIN

IPC分类号： G06F9/455 ,  G06F17/30

摘要： A method of migrating a virtual machine (VM) having a virtual disk from a source data center to a destination data center includes generating a snapshot of the VM to create a base disk and a delta disk in which writes to the virtual disk subsequent to the snapshot are recorded, and copying the base disk to a destination data store. The method further includes, in response to a request to migrate the VM, preparing a migration specification at the source and transmitting the migration specification to the destination, the migration specification including a VM identifier and a current content ID of the base disk, and determining that a content ID of the copied base disk matches the current content ID of the base disk included in the migration specification and updating the migration specification to indicate that the base disk does not need to be migrated.

公开(公告)号：US20230229771A1

公开(公告)日：2023-07-20

申请号：US17966822

申请日：2022-10-15

申请人： VMware, Inc.

发明人： Manisha Sameer Gambhir Parekh ,  Pranav Narayan Gokhale ,  Aditya Anil Gokhale

IPC分类号： G06F21/56 ,  G06F21/53

CPC分类号： G06F21/565 ,  G06F21/53 ,  G06F2221/033

摘要： Some embodiments provide a method of preventing network spread of malware files. At a host computer executing in a datacenter, the method receives a request from a particular compute machine executing on the host computer to open a file that was downloaded to the host computer for the particular machine. The method determines whether the file is a known file that has been previously assessed to contain malware. Based on a determination that the file is unknown, the method allows the particular compute machine to open the file while also (i) creating a record to identify the file as a file that is currently being analyzed to assess whether the file contains malware, and (ii) distributing the record to other host computers in the datacenter to ensure that the file cannot be opened on the other host computers until it has been analyzed to confirm that the file does not contain malware.

公开(公告)号：US20230231741A1

公开(公告)日：2023-07-20

申请号：US17684160

申请日：2022-03-01

申请人： VMware, Inc.

发明人： Qiang Tang ,  Zhaoqian Xiao

IPC分类号： H04L12/46 ,  H04L12/66 ,  H04L49/00 ,  H04L67/133 ,  G06F9/455

CPC分类号： H04L12/4641 ,  G06F9/45558 ,  H04L12/66 ,  H04L49/70 ,  H04L67/40 ,  G06F2009/45595

摘要： Some embodiments of the invention provide a method of sending data in a network that includes multiple worker nodes, each worker node executing at least one set of containers, a gateway interface, and a virtual local area network (VLAN) tunnel interface. The method configures the gateway interface of each worker node to associate the gateway interface with multiple subnets. Each subnet is associated with a namespace, a first worker node executes a first set of containers of a first namespace, and a second worker node executes a second set of containers of the first namespace and a third set of containers of a second namespace. The method sends data between the first set of containers and the second set of containers through a VLAN tunnel between the first and second worker nodes. The method sends data between the first set of containers and the third set of containers through the gateway interface.

公开(公告)号：US20240364637A1

公开(公告)日：2024-10-31

申请号：US18309741

申请日：2023-04-28

申请人： VMware LLC

发明人： Antonio Kristiyanov FILIPOV ,  Davor ROGLIC ,  Ivan Dimitrov DUHOV ,  Dimitar Veskov PETKOV ,  Petar PENEV

IPC分类号： H04L47/32

CPC分类号： H04L47/32

摘要： The rate of incoming data records in a data stream is dynamically limited based on stream delay. A current delay representing a latency between a beginning of the data stream and a currently processed data record is obtained. A maximum delay representing a maximum tolerated delay is determined. A threshold delay representing a delay value that triggers calculation of a new drop rate is determined. A drop rate is calculated based on the current delay, the maximum delay, and the threshold delay. The drop rate represents a percentage of the incoming data records. A drop strategy is selected. One or more data records are discarded from the incoming data stream based on the drop rate, according to the drop strategy.

公开(公告)号：US20240362329A1

公开(公告)日：2024-10-31

申请号：US18308254

申请日：2023-04-27

申请人： VMware LLC

发明人： Giovanni Vigna ,  Stefano Ortolani ,  Nicola Ruaro ,  Fabio Pagani ,  Christopher Kruegel

IPC分类号： G06F21/56

CPC分类号： G06F21/566 ,  G06F2221/033

摘要： Techniques that leverage symbolic execution to automatically analyze and understand malicious XL4 macros is provided. Using symbolic execution, these techniques can automatically infer the “correct” values for environmental inputs that are employed by advanced XL4 malware for obfuscating their malicious payloads, thereby allowing for a complete analysis of such malware.

公开(公告)号：US20240362050A1

公开(公告)日：2024-10-31

申请号：US18306950

申请日：2023-04-25

申请人： VMware, Inc.

发明人： Kashish Bhatia

IPC分类号： G06F9/455 ,  G06F13/16

CPC分类号： G06F9/45558 ,  G06F13/1668 ,  G06F2009/45579 ,  G06F2009/45583

摘要： The disclosure provides a method for handling heterogeneous input/output (I/O) load for containers running in a virtualized environment. The method generally includes receiving, from an application running in a container, an I/O indicating to write data to a persistent volume backed by a virtual disk file in storage, determining a maximum number of in-flight write I/Os allowed for the persistent volume based on a share of a total write I/O bandwidth assigned to the virtual disk file and allocated to the persistent volume, determining a current number of in-flight write I/Os for the persistent volume, and determining whether the current number of in-flight write I/Os for the persistent volume is greater than or equal to the maximum number of in-flight write I/Os allowed for the persistent volume to determine whether the received I/O is to be rejected or processed.

公开(公告)号：US12132780B2

公开(公告)日：2024-10-29

申请号：US18219187

申请日：2023-07-07

申请人： VMware LLC

发明人： Jeremy Tidemann ,  Constantine Polychronopoulos ,  Marc-Andre Bordeleau ,  Edward Choh ,  Ojas Gupta ,  Robert Kidd ,  Raja Kommula ,  Georgios Oikonomou ,  Mingjie Zhao

IPC分类号： H04L67/1012 ,  H04L47/2441 ,  H04L47/2475 ,  H04L47/2483 ,  H04L67/51 ,  H04L69/22

CPC分类号： H04L67/1012 ,  H04L47/2441 ,  H04L47/2475 ,  H04L47/2483 ,  H04L67/51 ,  H04L69/22

摘要： Some embodiments of the invention provide novel methods for performing services on data messages passing through a network connecting one or more datacenters, such as software defined datacenters (SDDCs). The method of some embodiments uses service containers executing on host computers to perform different chains (e.g., ordered sequences) of services on different data message flows. For a data message of a particular data message flow that is received or generated at a host computer, the method in some embodiments uses a service classifier executing on the host computer to identify a service chain that specifies several services to perform on the data message. For each service in the identified service chain, the service classifier identifies a service container for performing the service. The service classifier then forwards the data message to a service forwarding element to forward the data message through the service containers identified for the identified service chain. The service classifier and service forwarding element are implemented in some embodiments as processes that are defined as hooks in the virtual interface endpoints (e.g., virtual Ethernet ports) of the host computer's operating system (e.g., Linux operating system) over which the service containers execute.

公开(公告)号：US12131189B2

公开(公告)日：2024-10-29

申请号：US18104806

申请日：2023-02-02

申请人： VMWARE, INC.

发明人： Thomas James O'Rourke ,  Brian Davis ,  Abhinandan Baheti ,  Matthew Carpenter ,  Vivek Kumar Singh

IPC分类号： G06F9/50 ,  G06F9/54 ,  H04L41/12

CPC分类号： G06F9/5005 ,  G06F9/54 ,  H04L41/12

摘要： A computer-implemented method, computer-readable medium, and computer system that involve operations including receiving, from a computing cluster, a first request for changing a first object type specified by an approval policy resource, where the approval policy resource is a first one of a plurality of custom resources; identifying, in response to receiving the first request and using a second custom resource of the plurality, an approval process associated with the first object type; performing the approval process associated with the first object type; and sending, to the computing cluster, a first notification indicating that the request has been approved.

公开(公告)号：US20240357339A1

公开(公告)日：2024-10-24

申请号：US18305089

申请日：2023-04-21

申请人： VMware, Inc.

发明人： Yang Yang ,  Robert Soni ,  Rittwik Jana ,  Padma Sudarsan ,  Islam El abbasy

IPC分类号： H04W8/08

CPC分类号： H04W8/08

摘要： This disclosure is directed to methods and system for intelligent roaming of user equipment (“UE”) of a home network onto a visited network. The methods and systems monitor performance of voice and data services for UEs in coverage areas of edge cell sites of the home network. The methods and systems determine which UEs in the coverage areas of the edge cell sites to roam on the visited network based on decreases in voice and data services. The UEs in the coverage areas selected for roaming are pushed to roam on the visited network by sending a signal that instructs selected UEs to switch into roaming mode while the UEs are still in the coverage areas of the edge cell sites.

公开(公告)号：US20240356853A1

公开(公告)日：2024-10-24

申请号：US18137536

申请日：2023-04-21

申请人： VMware, Inc.

发明人： Chandan Ghosh ,  Anantha Mohan Raj, M.D. ,  Gaurav Jindal ,  Siddhant Verma ,  Saurabh Garg

IPC分类号： H04L47/12 ,  H04L41/147 ,  H04L43/0876

CPC分类号： H04L47/12 ,  H04L41/147 ,  H04L43/0876

摘要： Some embodiments provide a novel method for preemptively deploying gateways in a first network to one or more external networks. The first network of some embodiments includes a first gateway connecting to the one or more external networks. The method collects a set of statistics for the first gateway associated with bandwidth usage of the first gateway. The method determines that a second gateway needs to be deployed in the first network (1) by using the collected set of statistics to perform predictive modeling computations to predict a future load on the first gateway, and (2) by determining that the predicted future load exceeds a particular threshold. The method distributes a set of one or more forwarding rules to forward data message flows from a subset of machines in the first network to a particular external network through the second gateway.