公开(公告)号：US20130339950A1

公开(公告)日：2013-12-19

申请号：US13527420

申请日：2012-06-19

申请人： Aravind Ramarathinam ,  Srivatsan Parthasarathy

发明人： Aravind Ramarathinam ,  Srivatsan Parthasarathy

IPC分类号： G06F9/46 ,  G06F9/455

CPC分类号： G06F9/44505 ,  G06F9/45533 ,  G06F9/5077

摘要： A system in which a virtual machine manager determines tasks that are to be performed on virtual machines executing on a host computing system. The host computing system further executes an intermediary virtual machine task management module that receives virtual machine tasks from the virtual machine manager. Upon request from the virtual machines, the intermediary module identifies the tasks that are to be performed on the requesting virtual machine to the requesting virtual machine. The virtual machines may perhaps also initiate the performance of such identified tasks. Since the virtual machine itself is initiating contact with the intermediary module, and is not interacting directly with the virtual machine manager, the virtual machine manager need not be in the same sphere of trust as the virtual machine.

摘要翻译： 虚拟机管理器确定要在主计算系统上执行的虚拟机上执行的任务的系统。 主计算系统进一步执行从虚拟机管理器接收虚拟机任务的中间虚拟机任务管理模块。 根据来自虚拟机的请求，中间模块将在请求的虚拟机上向请求的虚拟机识别要执行的任务。 虚拟机也许也可以启动这种所识别的任务的执行。 由于虚拟机本身正在启动与中间模块的联系，并且不直接与虚拟机管理器进行交互，所以虚拟机管理器不需要与虚拟机处于相同的信任范围。

公开(公告)号：US09191454B2

公开(公告)日：2015-11-17

申请号：US13169024

申请日：2011-06-27

申请人： Robert Fries ,  Srivatsan Parthasarathy ,  Ashvinkumar Sanghvi ,  Aravind Ramarathinam ,  Michael Grier

发明人： Robert Fries ,  Srivatsan Parthasarathy ,  Ashvinkumar Sanghvi ,  Aravind Ramarathinam ,  Michael Grier

IPC分类号： G06F9/455 ,  H04L29/08 ,  G06F9/54

CPC分类号： H04L65/1069 ,  G06F9/45558 ,  G06F9/54 ,  G06F2009/45595 ,  H04L67/2814 ,  H04L67/2861

摘要： A logical communication path is provided between a target virtual machine (VM) and a host or application communicating with the VM. The target VM runs on a hypervisor host that has a hypervisor and a proxy agent. The hypervisor manages execution of the VM. A mapping is maintained indicating which VMs execute on which hosts. When the host or application is to send a message or packet to the target VM, the mapping is consulted and the hypervisor host hosting the target VM is identified. The message or packet, which may identify the target VM, is transmitted to the hypervisor host. A proxy agent at the hypervisor host selects a communication channel between the hypervisor and the target VM. The hypervisor then passes the message or packet through the selected channel to the target VM.

摘要翻译： 在目标虚拟机（VM）和与VM通信的主机或应用程序之间提供逻辑通信路径。 目标VM在具有管理程序和代理代理的管理程序主机上运行。 管理程序管理VM的执行。 维护映射，指示哪些虚拟机在哪些主机上执行。 当主机或应用程序要向目标VM发送消息或数据包时，将查看映射，并标识托管目标VM的管理程序主机。 可以识别目标VM的消息或分组被发送到管理程序主机。 管理程序主机上的代理代理选择管理程序和目标VM之间的通信通道。 管理程序然后将消息或数据包通过所选通道传递到目标VM。

公开(公告)号：US08719398B2

公开(公告)日：2014-05-06

申请号：US12074146

申请日：2008-02-29

申请人： Tin Qian ,  Aravind Ramarathinam ,  Michael Bishop

发明人： Tin Qian ,  Aravind Ramarathinam ,  Michael Bishop

IPC分类号： G06F15/173 ,  G06F15/16 ,  G01R31/08 ,  G08C15/00 ,  H04J3/16 ,  H04J3/22

CPC分类号： H04L41/5003 ,  H04L41/0896 ,  H04L43/0864 ,  H04L43/0882

摘要： A network performance monitor for a computer. The performance monitor maintains a baseline for communication paths between a networked computer and other networked computers connected. The network performance baseline is established and maintained by measuring and updating network performance parameters of the communication paths. The network performance parameters are updated using values obtained during time intervals when the communication path consumed a bandwidth approximately equal to its estimated bandwidth. If congestion is detected on the network or the network is underutilized, values of the network performance parameters obtained during that interval are not used to update the network performance parameters. Some performance parameters in the baseline, such as minimum and maximum bandwidth values may be updated by computing a moving average of each parameter. Asymmetric weight values for updating the moving average may be selected based on a direction of change of a value of a network parameter.

摘要翻译： 计算机的网络性能监视器。 性能监视器维护联网计算机和所连接的其他联网计算机之间的通信路径的基线。 通过测量和更新通信路径的网络性能参数来建立和维护网络性能基线。 当通信路径消耗大约等于其估计带宽的带宽时，在时间间隔期间获得的值来更新网络性能参数。 如果在网络上检测到拥塞或网络未充分利用，则在该间隔期间获得的网络性能参数的值不用于更新网络性能参数。 可以通过计算每个参数的移动平均值来更新基线中的一些性能参数，例如最小和最大带宽值。 可以基于网络参数的值的改变的方向来选择用于更新移动平均线的不对称权重值。

公开(公告)号：US20120096271A1

公开(公告)日：2012-04-19

申请号：US12905889

申请日：2010-10-15

申请人： Aravind Ramarathinam ,  Srivatsan Parthasarathy ,  Michael Michael

发明人： Aravind Ramarathinam ,  Srivatsan Parthasarathy ,  Michael Michael

IPC分类号： H04L9/32 ,  G06F15/16 ,  G06F21/00 ,  G06F9/455

CPC分类号： H04L63/168 ,  G06F9/45558 ,  G06F2009/45587 ,  H04L63/0807 ,  H04L63/0823

摘要： An end user of an enterprise is enabled to receive secure remote presentation access to the assigned virtual machines in a hosted public cloud through the cloud provider's virtualization hosts and remote presentation gateway. Thus an enterprise administrator may purchase computing capacity from the cloud provider and further sub-divide the purchased computing capacity among enterprise end users. The cloud provider need not create shadow accounts for each end user of the enterprise. The cloud provider AD and the enterprise AD do not need to trust each other. The cloud provider also need not expose host information to the tenants. Authorization may be provided by using a combination of a custom authorization plug-in at the terminal services gateway and an indirection listener component at the virtualization host. The host details may also be abstracted when the client connects to the remote presentation gateway so as to protect the fabric from attack and enabling the tenant virtual machines to freely move across the cloud provider's virtualization hosts.

摘要翻译： 企业的最终用户能够通过云提供商的虚拟化主机和远程呈现网关接收托管公共云中分配的虚拟机的安全远程呈现访问。 因此，企业管理员可以从云提供商购买计算能力，并进一步细分企业最终用户购买的计算能力。 云提供商不需要为企业的每个最终用户创建影子帐户。 云提供商AD和企业AD不需要彼此信任。 云提供商也不需要向租户披露主机信息。 授权可以通过使用终端服务网关上的定制授权插件和虚拟化主机的间接侦听器组件的组合来提供。 当客户端连接到远程呈现网关时，主机细节也可以被抽象，以保护结构免受攻击，并使租户虚拟机能够自由地跨越云提供商的虚拟化主机。

公开(公告)号：US20090222555A1

公开(公告)日：2009-09-03

申请号：US12074146

申请日：2008-02-29

申请人： Tin Qian ,  Aravind Ramarathinam ,  Michael Bishop

发明人： Tin Qian ,  Aravind Ramarathinam ,  Michael Bishop

IPC分类号： G06F15/173

CPC分类号： H04L41/5003 ,  H04L41/0896 ,  H04L43/0864 ,  H04L43/0882

摘要： A network performance monitor for a computer. The performance monitor maintains a baseline for communication paths between a networked computer and other networked computers connected. The network performance baseline is established and maintained by measuring and updating network performance parameters of the communication paths. The network performance parameters are updated using values obtained during time intervals when the communication path consumed a bandwidth approximately equal to its estimated bandwidth. If congestion is detected on the network or the network is underutilized, values of the network performance parameters obtained during that interval are not used to update the network performance parameters. Some performance parameters in the baseline, such as minimum and maximum bandwidth values may be updated by computing a moving average of each parameter. Asymmetric weight values for updating the moving average may be selected based on a direction of change of a value of a network parameter.

摘要翻译： 计算机的网络性能监视器。 性能监视器维护联网计算机和所连接的其他联网计算机之间的通信路径的基线。 通过测量和更新通信路径的网络性能参数来建立和维护网络性能基线。 当通信路径消耗大约等于其估计带宽的带宽时，在时间间隔期间获得的值来更新网络性能参数。 如果在网络上检测到拥塞或网络未充分利用，则在该间隔期间获得的网络性能参数的值不用于更新网络性能参数。 可以通过计算每个参数的移动平均值来更新基线中的一些性能参数，例如最小和最大带宽值。 可以基于网络参数的值的改变的方向来选择用于更新移动平均线的不对称权重值。

公开(公告)号：US20120331461A1

公开(公告)日：2012-12-27

申请号：US13169024

申请日：2011-06-27

申请人： Robert Fries ,  Srivatsan Parthasarathy ,  Ashvinkumar Sanghvi ,  Aravind Ramarathinam ,  Michael Grier

发明人： Robert Fries ,  Srivatsan Parthasarathy ,  Ashvinkumar Sanghvi ,  Aravind Ramarathinam ,  Michael Grier

IPC分类号： G06F9/455

CPC分类号： H04L65/1069 ,  G06F9/45558 ,  G06F9/54 ,  G06F2009/45595 ,  H04L67/2814 ,  H04L67/2861

摘要： A logical communication path is provided between a target virtual machine (VM) and a host or application communicating with the VM. The target VM runs on a hypervisor host that has a hypervisor and a proxy agent. The hypervisor manages execution of the VM. A mapping is maintained indicating which VMs execute on which hosts. When the host or application is to send a message or packet to the target VM, the mapping is consulted and the hypervisor host hosting the target VM is identified. The message or packet, which may identify the target VM, is transmitted to the hypervisor host. A proxy agent at the hypervisor host selects a communication channel between the hypervisor and the target VM. The hypervisor then passes the message or packet through the selected channel to the target VM.

摘要翻译： 在目标虚拟机（VM）和与VM通信的主机或应用程序之间提供逻辑通信路径。 目标VM在具有管理程序和代理代理的管理程序主机上运行。 管理程序管理VM的执行。 维护映射，指示哪些虚拟机在哪些主机上执行。 当主机或应用程序要向目标VM发送消息或数据包时，将查看映射，并标识托管目标VM的管理程序主机。 可以识别目标VM的消息或分组被发送到管理程序主机。 管理程序主机上的代理代理选择管理程序和目标VM之间的通信通道。 管理程序然后将消息或数据包通过所选通道传递到目标VM。

公开(公告)号：US08244862B2

公开(公告)日：2012-08-14

申请号：US13183545

申请日：2011-07-15

申请人： Tin Qian ,  Aravind Ramarathinam ,  Michael Bishop

发明人： Tin Qian ,  Aravind Ramarathinam ,  Michael Bishop

IPC分类号： G06F15/173

CPC分类号： H04L12/2602 ,  H04L41/14 ,  H04L43/00 ,  H04L43/022 ,  H04L43/0864 ,  H04L43/087 ,  H04L43/0876 ,  H04L43/0882 ,  H04L43/16

摘要： A method of measuring, for communication paths between a networked computer and at least one other networked computer connected via a network performance, network information to detect network performance degradation and diagnose source(s) of the performance degradation. The diagnosis may be performed by a progressive elimination of possible sources. Network performance degradation may be attributed to problems at a local network or the Internet. The problem sources on the Internet may comprise, for example, an internet server provider (ISP) or a single remote server in communication with the networked computer. A network performance baseline established and maintained for each path may be employed in diagnosing the network performance degradation.

摘要翻译： 一种用于测量网络计算机与经由网络性能连接的至少一个其它联网计算机之间的通信路径的网络信息以检测网络性能退化并诊断性能下降的源的方法。 诊断可以通过逐渐消除可能的来源进行。 网络性能下降可能归因于本地网络或Internet上的问题。 互联网上的问题源可以包括例如互联网服务器提供商（ISP）或与联网计算机通信的单个远程服务器。 为每个路径建立和维护的网络性能基准可用于诊断网络性能下降。

公开(公告)号：US07991881B2

公开(公告)日：2011-08-02

申请号：US12072936

申请日：2008-02-29

申请人： Tin Qian ,  Aravind Ramarathinam ,  Michael Bishop

发明人： Tin Qian ,  Aravind Ramarathinam ,  Michael Bishop

IPC分类号： G09F15/173

CPC分类号： H04L12/2602 ,  H04L41/14 ,  H04L43/00 ,  H04L43/022 ,  H04L43/0864 ,  H04L43/087 ,  H04L43/0876 ,  H04L43/0882 ,  H04L43/16

摘要： A method of measuring, for communication paths between a networked computer and at least one other networked computer connected via a network performance, network information to detect network performance degradation and diagnose source(s) of the performance degradation. The diagnosis may be performed by a progressive elimination of possible sources. Network performance degradation may be attributed to problems at a local network or the Internet. The problem sources on the Internet may comprise, for example, an internet server provider (ISP) or a single remote server in communication with the networked computer. A network performance baseline established and maintained for each path may be employed in diagnosing the network performance degradation.

摘要翻译： 一种用于测量网络计算机与经由网络性能连接的至少一个其他联网计算机之间的通信路径的网络信息以检测网络性能退化并诊断性能下降的源的方法。 诊断可以通过逐渐消除可能的来源进行。 网络性能下降可能归因于本地网络或Internet上的问题。 互联网上的问题源可以包括例如互联网服务器提供商（ISP）或与联网计算机通信的单个远程服务器。 为每个路径建立和维护的网络性能基准可用于诊断网络性能下降。

公开(公告)号：US08607054B2

公开(公告)日：2013-12-10

申请号：US12905889

申请日：2010-10-15

申请人： Aravind Ramarathinam ,  Srivatsan Parthasarathy ,  Michael Michael

发明人： Aravind Ramarathinam ,  Srivatsan Parthasarathy ,  Michael Michael

IPC分类号： H04L29/00

CPC分类号： H04L63/168 ,  G06F9/45558 ,  G06F2009/45587 ,  H04L63/0807 ,  H04L63/0823

摘要： An end user of an enterprise is enabled to receive secure remote presentation access to the assigned virtual machines in a hosted public cloud through the cloud provider's virtualization hosts and remote presentation gateway. Thus an enterprise administrator may purchase computing capacity from the cloud provider and further sub-divide the purchased computing capacity among enterprise end users. The cloud provider need not create shadow accounts for each end user of the enterprise. The cloud provider AD and the enterprise AD do not need to trust each other. The cloud provider also need not expose host information to the tenants. Authorization may be provided by using a combination of a custom authorization plug-in at the terminal services gateway and an indirection listener component at the virtualization host. The host details may also be abstracted when the client connects to the remote presentation gateway so as to protect the fabric from attack and enabling the tenant virtual machines to freely move across the cloud provider's virtualization hosts.

摘要翻译： 企业的最终用户能够通过云提供商的虚拟化主机和远程呈现网关接收托管公共云中分配的虚拟机的安全远程呈现访问。 因此，企业管理员可以从云提供商购买计算能力，并进一步细分企业最终用户购买的计算能力。 云提供商不需要为企业的每个最终用户创建影子帐户。 云提供商AD和企业AD不需要彼此信任。 云提供商也不需要向租户披露主机信息。 授权可以通过使用终端服务网关上的定制授权插件和虚拟化主机的间接侦听器组件的组合来提供。 当客户端连接到远程呈现网关时，主机细节也可以被抽象，以保护结构免受攻击，并使租户虚拟机能够自由地跨越云提供商的虚拟化主机。

公开(公告)号：US09342326B2

公开(公告)日：2016-05-17

申请号：US13527420

申请日：2012-06-19

申请人： Aravind Ramarathinam ,  Srivatsan Parthasarathy

发明人： Aravind Ramarathinam ,  Srivatsan Parthasarathy

IPC分类号： G06F9/445 ,  G06F9/455 ,  G06F9/50

CPC分类号： G06F9/44505 ,  G06F9/45533 ,  G06F9/5077

摘要： A system in which a virtual machine manager determines tasks that are to be performed on virtual machines executing on a host computing system. The host computing system further executes an intermediary virtual machine task management module that receives virtual machine tasks from the virtual machine manager. Upon request from the virtual machines, the intermediary module identifies the tasks that are to be performed on the requesting virtual machine to the requesting virtual machine. The virtual machines may perhaps also initiate the performance of such identified tasks. Since the virtual machine itself is initiating contact with the intermediary module, and is not interacting directly with the virtual machine manager, the virtual machine manager need not be in the same sphere of trust as the virtual machine.

摘要翻译： 虚拟机管理器确定要在主计算系统上执行的虚拟机上执行的任务的系统。 主计算系统进一步执行从虚拟机管理器接收虚拟机任务的中间虚拟机任务管理模块。 根据来自虚拟机的请求，中间模块将在请求的虚拟机上向请求的虚拟机识别要执行的任务。 虚拟机也许也可以启动这种所识别的任务的执行。 由于虚拟机本身正在启动与中间模块的联系，并且不直接与虚拟机管理器进行交互，所以虚拟机管理器不需要与虚拟机处于相同的信任范围。