Server access processing system
    1.
    发明授权
    Server access processing system 有权
    服务器访问处理系统

    公开(公告)号:US09516142B2

    公开(公告)日:2016-12-06

    申请号:US13459160

    申请日:2012-04-28

    摘要: A method, programmed medium and system are provided for preventing the denial of file system access to a plurality of clients accessing a NFS server. In one example, an NFS server is configured to listen on a server port. The server runs a separate daemon which “watches” client requests as they are received at the NFS server. The server processing system tracks the number of times a client sends consecutive TCP zero-window packets in response to a data packet from the server. If the number of zero-window packets crosses a user-defined threshold, then a routine is called to stop responding to that client using a backoff algorithm. When the server reaches a point where the number of available threads or any other relevant resource dips below a user-defined threshold, the server process starts terminating connections to the clients starting from the ones with the oldest entry in the table.

    摘要翻译: 提供了一种编程介质和系统的方法,用于防止文件系统访问访问NFS服务器的多个客户机的访问。 在一个示例中,NFS服务器配置为在服务器端口上侦听。 服务器运行一个单独的守护进程,它在NFS服务器上收到客户端请求。 服务器处理系统跟踪客户端响应于来自服务器的数据分组发送连续的TCP零窗口分组的次数。 如果零窗口数据包的数量跨越用户定义的阈值,则调用例程以使用退避算法停止对该客户端的响应。 当服务器达到可用线程数或任何其他相关资源下降到低于用户定义阈值的点时,服务器进程将从具有表中最早条目的服务器开始终止与客户端的连接。

    Determining the value of an association between ontologies
    2.
    发明授权
    Determining the value of an association between ontologies 失效
    确定本体之间的关联值

    公开(公告)号:US08539001B1

    公开(公告)日:2013-09-17

    申请号:US13589614

    申请日:2012-08-20

    IPC分类号: G06F17/30 G06F7/00

    CPC分类号: G06F17/30292 G06N5/02

    摘要: An approach is presented for determining a value of a bridge of a first ontology schema (S1) with a second ontology schema (S2). A bridge of S1 with S2 is generated. A sub-schema S is extracted from the bridge of S1 with S2. A schema S′ is created from S by removing common concepts and relationships to the common concepts, and for each common concept to which first and second concepts have immediate links in S, by creating a new immediate link in S′ between the first and second concepts. An intrinsic value of S′ and a strength of a bridge of S1 with S are determined. Based on the intrinsic value of S′ and the strength of the bridge of S1 with S, the value of the bridge of S1 with S2 is determined.

    摘要翻译: 提出了一种用于确定具有第二本体架构(S2)的第一本体架构(S1)的桥的值的方法。 生成S1与S2的桥。 从S2的S1桥提取子模式S。 通过删除与共同概念的共同概念和关系,以及对于第一和第二概念在S中具有即时链接的每个通用概念,通过在第一和第二之间的S'中创建新的立即链接来从S创建模式S' 概念 确定S'的固有值和S1与S的桥梁的强度。 基于S'的固有值和S1与S的桥梁的强度,确定S1与S2的桥的值。

    Secure Route Discovery Node and Policing Mechanism
    3.
    发明申请
    Secure Route Discovery Node and Policing Mechanism 审中-公开
    安全路由发现节点和管理机制

    公开(公告)号:US20110066851A1

    公开(公告)日:2011-03-17

    申请号:US12558744

    申请日:2009-09-14

    IPC分类号: H04L9/00 G06F15/173

    摘要: A computer implemented method and computer program product for obtaining a secure route. A trusted host sets a node security association for a trusted host. The trusted host receives, at the trusted host, a client communication request directed to a destination host. The trusted host builds a secure route query comprising a trusted host address, a destination host address, and at least one security level, to form at least one secure route. The trusted host sends packets from the trusted host to the destination host based on the at least one secure route. The packets are responsive to the client communication request, and the packets each have a security label that matches the security level.

    摘要翻译: 一种用于获得安全路线的计算机实现的方法和计算机程序产品。 可信主机为可信主机设置节点安全关联。 可信主机在受信任的主机处接收指向目的地主机的客户端通信请求。 可信主机构建包括可信主机地址,目的主机地址和至少一个安全级别的安全路由查询,以形成至少一个安全路由。 可信主机基于至少一个安全路由将信息包从可信主机发送到目的地主机。 分组响应于客户端通信请求,并且分组各自具有与安全级别匹配的安全标签。

    Method for detecting and reducing packet drops
    4.
    发明授权
    Method for detecting and reducing packet drops 失效
    检测和减少数据包丢包的方法

    公开(公告)号:US07551621B1

    公开(公告)日:2009-06-23

    申请号:US12176489

    申请日:2008-07-21

    IPC分类号: H04L12/56

    CPC分类号: H04L47/10 H04L47/34

    摘要: A method for detecting and reducing packet drops in a communications system may include receiving a first packet having a sequence number, determining if a second packet having a sequence number immediately preceding the sequence number of the first packet is lost, and/or determining if a third packet having a sequence number immediately preceding the sequence number of the second packet is lost. A counter may be incremented if the second and third packets are determined as lost. An amount of time required before detecting link activity after an end of a previous frame may be reduced if the counter violates the count threshold and the amount of time has not been previously reduced. A lower link speed may be negotiated if a current link speed is above a negotiable threshold and the amount of time required before detecting link activity has been previously reduced.

    摘要翻译: 用于检测和减少通信系统中的分组丢弃的方法可以包括接收具有序列号的第一分组,确定具有紧邻第一分组的序列号之前的序列号的第二分组是否丢失,和/或确定是否 具有紧接在第二分组的序列号之前的序列号的第三分组丢失。 如果第二和第三个分组被确定为丢失,则计数器可以递增。 如果计数器违反计数阈值并且之前的时间量未被减小,则在先前帧结束之前检测链路活动之前所需的时间量可能会减少。 如果当前链路速度高于协商阈值,并且检测链路活动之前所需的时间量先前已经减少,则可以协商较低的链路速度。

    Remote procedure call (RPC) bind service with physical interface query and selection
    5.
    发明授权
    Remote procedure call (RPC) bind service with physical interface query and selection 有权
    远程过程调用(RPC)绑定服务与物理接口查询和选择

    公开(公告)号:US09021510B2

    公开(公告)日:2015-04-28

    申请号:US13584359

    申请日:2012-08-13

    IPC分类号: G06F15/173 G06F9/54

    CPC分类号: G06F9/547

    摘要: A service module that provides for discovery of one or more network interfaces connecting a prospective remote procedure call (RPC) client, facilitates the provision of RPC programs in a network including multi-horned systems. When a request for a network address to an RPC application providing an RPC program is received from the RPC client, the RPC bind daemon discovers from the module, using the client response address, over which interface(s) the client is accessible. The daemon then selects an address of a network path to the RPC application that the prospective client can access and returns the corresponding network address. The service module monitors the network stack for RPC get address requests and builds tables of client address entries with corresponding network interface identifiers. The entries are retired according to an aging policy.

    摘要翻译: 提供用于发现连接预期远程过程调用(RPC)客户端的一个或多个网络接口的服务模块,有助于在包括多角度系统的网络中提供RPC程序。 当从RPC客户端接收到提供RPC程序的RPC应用程序的网络地址的请求时,RPC绑定守护程序使用客户端响应地址从模块发现客户端可访问哪个接口。 守护程序然后选择预期客户端可以访问的RPC应用程序的网络路径的地址,并返回相应的网络地址。 服务模块监视网络堆栈以获取RPC获取地址请求,并使用相应的网络接口标识符构建客户端地址表的表。 这些条目根据老龄化政策退休。

    Resolution of System Hang due to Filesystem Corruption
    6.
    发明申请
    Resolution of System Hang due to Filesystem Corruption 有权
    由于文件系统损坏,系统挂起的分辨率

    公开(公告)号:US20140006854A1

    公开(公告)日:2014-01-02

    申请号:US13539673

    申请日:2012-07-02

    IPC分类号: G06F11/07

    CPC分类号: G06F11/0757 G06F11/0736

    摘要: File system errors are handled and computing systems are recovered by, responsive to receiving a page buffer request, initializing a sleep timer according to a detection interval value plus a hang resolution range value; responsive to the timer expiring, detecting that a process, thread, application program, daemon, or task is waiting on availability of the requested page buffer; and responsive to the detection, quarantining metadata associated with the requested page buffer, failing the page buffer request and releasing one or more locks on the requested page buffer. This process is then optionally repeated for additional processes, threads, application programs, daemons, tasks or combinations thereof which are waiting for availability of the requested page buffer, optionally randomizing the detection interval value in order to avoid an instantaneous recovery from the error.

    摘要翻译: 通过响应于接收到页面缓冲器请求,根据检测间隔值加上挂起分辨率范围值初始化睡眠定时器来处理文件系统错误并且恢复计算系统; 响应于定时器到期,检测进程,线程,应用程序,守护程序或任务正在等待所请求的页缓冲器的可用性; 并且响应于检测,隔离与所请求的页面缓冲器相关联的元数据,不执行页面缓冲器请求并释放所请求的页面缓冲器上的一个或多个锁定。 然后可选地重复该进程,用于正在等待所请求的页面缓冲区的可用性的附加进程,线程,应用程序,守护程序,任务或其组合,可选地随机化该检测间隔值,以避免从错误中即时恢复。

    Server Resource Allocation
    7.
    发明申请
    Server Resource Allocation 失效
    服务器资源分配

    公开(公告)号:US20120215922A1

    公开(公告)日:2012-08-23

    申请号:US13459193

    申请日:2012-04-29

    IPC分类号: G06F15/173 G06F17/30

    CPC分类号: G06F9/5038 G06F2209/5021

    摘要: A method, programmed medium and system are disclosed which provide for end-to-end QoS for a set of processes that comprise a workload over nfs. A set of processes that comprise a workload such as the processes of a WPAR, or an entire LPAR are given a class designation and assigned priority/limits. The data are then passed to the server which allocates resources based on the sum total of all the current classes and their priorities and/or limits. This requires re-engineering the nfs client code to be workload-aware and the nfs server code to accommodate the resource allocation and prioritization needs of the nfs clients.

    摘要翻译: 公开了一种方法,编程介质和系统,其为包括nfs上的工作负载的一组进程提供端到端QoS。 给出了一组包含WPAR或整个LPAR的工作负载的进程,并给出了类别指定和分配的优先级/限制。 然后将数据传递给服务器,该服务器根据所有当前类及其优先级和/或限制的总和来分配资源。 这需要重新设计nfs客户端代码以使工作负载感知和nfs服务器代码适应nfs客户端的资源分配和优先级排序。

    Server resource allocation
    9.
    发明授权
    Server resource allocation 失效
    服务器资源分配

    公开(公告)号:US08356099B2

    公开(公告)日:2013-01-15

    申请号:US13459193

    申请日:2012-04-29

    IPC分类号: G06F15/16

    CPC分类号: G06F9/5038 G06F2209/5021

    摘要: A method, programmed medium and system are disclosed which provide for end-to-end QoS for a set of processes that comprise a workload over nfs. A set of processes that comprise a workload such as the processes of a WPAR, or an entire LPAR are given a class designation and assigned priority/limits. The data are then passed to the server which allocates resources based on the sum total of all the current classes and their priorities and/or limits. This requires re-engineering the nfs client code to be workload-aware and the nfs server code to accommodate the resource allocation and prioritization needs of the nfs clients.

    摘要翻译: 公开了一种方法,编程介质和系统,其为包括nfs上的工作负载的一组进程提供端到端QoS。 给出了一组包含WPAR或整个LPAR的工作负载的进程,并给出了类别指定和分配的优先级/限制。 然后将数据传递给服务器,该服务器根据所有当前类及其优先级和/或限制的总和来分配资源。 这需要重新设计nfs客户端代码以使工作负载感知和nfs服务器代码适应nfs客户端的资源分配和优先级排序。

    MEMORY AFFINITIZATION IN MULTITHREADED ENVIRONMENTS
    10.
    发明申请
    MEMORY AFFINITIZATION IN MULTITHREADED ENVIRONMENTS 审中-公开
    多媒体环境中的记忆修复

    公开(公告)号:US20120272016A1

    公开(公告)日:2012-10-25

    申请号:US13092840

    申请日:2011-04-22

    IPC分类号: G06F12/00

    CPC分类号: G06F9/5077

    摘要: A method, system, and computer program product for memory affinitization in a multithreaded environment are provided in the illustrative embodiments. A first affinity domain formed in a computer receives from a second thread executing in a second affinity domain a request to access a unit of memory in the first affinity domain. The computer determines whether to migrate the unit of memory to the second affinity domain. The computer migrates, responsive the determining being affirmative, the unit of memory to the second affinity domain, thereby affinitizing the unit of memory with the second thread.

    摘要翻译: 在说明性实施例中提供了用于在多线程环境中用于存储器关联的方法,系统和计算机程序产品。 在计算机中形成的第一亲和度域从在第二关联域执行的第二线程接收访问第一亲和域中的存储单元的请求。 计算机确定是否将内存单元迁移到第二个关联域。 计算机将确定肯定地移动到第二亲和度域的存储单元,从而与第二线程关联存储器单元。