公开(公告)号：US08819211B2

公开(公告)日：2014-08-26

申请号：US13556769

申请日：2012-07-24

申请人： Katherine Barabash ,  Rami Cohen ,  Vinit Jain ,  Renato J. Recio ,  Benny Rochwerger

发明人： Katherine Barabash ,  Rami Cohen ,  Vinit Jain ,  Renato J. Recio ,  Benny Rochwerger

IPC分类号： G06F15/173

CPC分类号： H04L41/0893 ,  H04L63/20

摘要： According to one embodiment of the present disclosure, an approach is provided in which a policy server receives a request for a policy from a requestor. The policy server identifies an initiating virtual machine; the initial virtual machine's corresponding virtual network; and a destination virtual machine. Next, a policy corresponding to sending data from the first virtual machine to the second virtual machine is selected. The policy includes one or more logical references to the virtual network and does not include a physical reference to a physical entity located on a physical network. In turn, a physical path translation corresponding to the selected policy is identified and sent to the requestor.

摘要翻译： 根据本公开的一个实施例，提供了一种方法，其中策略服务器从请求者接收对策略的请求。 策略服务器识别启动虚拟机; 初始虚拟机的对应虚拟网络; 和目标虚拟机。 接下来，选择对应于从第一虚拟机向第二虚拟机发送数据的策略。 策略包括对虚拟网络的一个或多个逻辑引用，并且不包括对位于物理网络上的物理实体的物理引用。 反过来，识别对应于所选策略的物理路径转换并将其发送到请求者。

公开(公告)号：US08302091B2

公开(公告)日：2012-10-30

申请号：US11422099

申请日：2006-06-05

申请人： Yariv Aridor ,  Alex Glikson ,  Oleg Goldshmidt ,  Benny Rochwerger

发明人： Yariv Aridor ,  Alex Glikson ,  Oleg Goldshmidt ,  Benny Rochwerger

IPC分类号： G06F9/445

CPC分类号： G06F8/656

摘要： Systems and methods for remotely installing software on a computing system while the computing system is running on a first bootable image, so that the computing system is not removed from operation during the installation of a second bootable image. The method comprises constructing the second bootable image on a storage medium accessible to the computing system while the computing system is operating in a first operating environment in association with the first bootable image, customizing the second bootable image so that the computing system can operate in a second operating environment in association with the second bootable image, disassociating the computing system from the first bootable image, and associating the computing system with the second bootable image.

摘要翻译： 在计算系统在第一可启动图像上运行时在计算系统上远程安装软件的系统和方法，使得计算系统在安装第二可引导映像期间不会被删除。 该方法包括在计算系统与第一可启动图像相关联的第一操作环境中操作计算系统可访问的存储介质上构建第二可启动图像，自定义第二可启动图像，使得计算系统可以在 与第二可启动图像相关联的第二操作环境，使计算系统与第一可启动图像分离，以及将计算系统与第二可启动图像相关联。

公开(公告)号：US20120240110A1

公开(公告)日：2012-09-20

申请号：US13048909

申请日：2011-03-16

申请人： David Breitgand ,  Irit Loy ,  Kenneth Nagin ,  Benny Rochwerger ,  Ezra Silvera

发明人： David Breitgand ,  Irit Loy ,  Kenneth Nagin ,  Benny Rochwerger ,  Ezra Silvera

IPC分类号： G06F9/455

CPC分类号： H04L43/16 ,  G06F9/45558 ,  G06F9/5005 ,  G06F2009/45562 ,  G06F2009/4557 ,  G06F2009/45575 ,  H04L67/101

摘要： Systems and methods for deploying a virtual machine (VM) on a host are provided. An exemplary method comprises notifying a host to download a master copy of a VM image from a remotely located network storage device, in response to a service provider providing a definition manifest for a service request supported by the VM, wherein the host deploys the VM directly from the VM image downloaded to a storage medium locally connected to the host machine, wherein deployment of the VM allows the host to locally service the service request associated with the definition manifest, wherein the host replicates copies of the VM image, in response to receiving additional service requests to create one or more VM clones; wherein the host customizes the one or more VM clones based on the definition manifest.

摘要翻译： 提供了在主机上部署虚拟机（VM）的系统和方法。 一种示例性方法包括通知主机从远程位置的网络存储设备下载VM映像的主副本，响应于服务提供商为VM支持的服务请求提供定义清单，其中主机直接部署VM 从下载的VM映像到本地连接到主机的存储介质，其中VM的部署允许主机本地地服务与定义清单相关联的服务请求，其中主机响应于接收到复制VM映像的副本 创建一个或多个VM克隆的附加服务请求; 其中所述主机基于所述定义清单自定义所述一个或多个VM克隆。

公开(公告)号：US20080256534A1

公开(公告)日：2008-10-16

申请号：US11734549

申请日：2007-04-12

申请人： David M. Chess ,  Sean L. Dague ,  Tamar Eilam ,  Ronald T. Goering ,  Ryan P. Grimm ,  James E. Hanson ,  Giovanni Pacifici ,  Benny Rochwerger ,  Hidayatullah H. Shaikh ,  Ian N. Whalley ,  Jian Yin

发明人： David M. Chess ,  Sean L. Dague ,  Tamar Eilam ,  Ronald T. Goering ,  Ryan P. Grimm ,  James E. Hanson ,  Giovanni Pacifici ,  Benny Rochwerger ,  Hidayatullah H. Shaikh ,  Ian N. Whalley ,  Jian Yin

IPC分类号： G06F9/455

CPC分类号： G06F9/45558 ,  G06F2009/45562

摘要： The present invention relates to a method for the customization of virtual machine images. The method comprises identifying and retrieving a virtual machine image template. A customized virtual machine image is created from the virtual machine image template. The customized virtual machine image template being created by identifying at least one file-system or memory image that is associated with the virtual machine image template, identifying within the at least one file-system or memory image at least one data set, wherein the at least one data set comprises metadata. The metadata contains information detailing the required execution context customization aspects for at least one specified image subset of the virtual machine. Execution context-specific information that is required to customize the image subset of the virtual machine is retrieved. Further, the image subset of the virtual machine is modified in accordance with the retrieved execution context-specific information.

摘要翻译： 本发明涉及一种用于定制虚拟机图像的方法。 该方法包括识别和检索虚拟机图像模板。 从虚拟机映像模板创建自定义虚拟机映像。 通过识别与虚拟机图像模板相关联的至少一个文件系统或存储器映像来创建定制的虚拟机映像模板，在至少一个文件系统或存储器映像内标​​识至少一个数据集，其中， 至少一个数据集包括元数据。 元数据包含详细说明虚拟机的至少一个指定图像子集所需的执行上下文定制方面的信息。 检索自定义虚拟机的映像子集所需的执行上下文特定信息。 此外，根据检索的执行上下文特定信息来修改虚拟机的图像子集。

公开(公告)号：US08924541B2

公开(公告)日：2014-12-30

申请号：US13118424

申请日：2011-05-29

申请人： David Hadas ,  Irit Loy ,  Kenneth Nagin ,  Benny Rochwerger ,  Alexander Glikson ,  Liran Schour

发明人： David Hadas ,  Irit Loy ,  Kenneth Nagin ,  Benny Rochwerger ,  Alexander Glikson ,  Liran Schour

IPC分类号： G06F15/173 ,  G06F15/16

CPC分类号： G06F9/4856 ,  H04L41/28 ,  H04L63/0407

摘要： Systems and methods for migrating a virtual resource from a source host in a source network to a destination host in a destination network are provided. In one embodiment, the method comprises establishing a secure communication connection between a source proxy in the source network and a destination proxy in the destination network; and monitoring migration traffic directed from the source host to the source proxy and forwarding said traffic to the destination proxy which in turn forwards the traffic to the destination host over the secure communication connection between the source proxy and the destination proxy, such that the communication addresses of the source host and the destination host remain guarded from direct access by an entity outside of the source network or the destination network.

摘要翻译： 提供了将虚拟资源从源网络中的源主机迁移到目标网络中的目标主机的系统和方法。 在一个实施例中，该方法包括在源网络中的源代理和目的地网络中的目的地代理之间建立安全通信连接; 以及监视从源主​​机引导到源代理的迁移流量，并将所述流量转发到目的地代理，所述目的地代理又通过源代理和目的地代理之间的安全通信连接将流量转发到目的地主机，使得通信地址 源主机和目标主机保持不受来自源网络或目的网络之外的实体的直接访问。

公开(公告)号：US20120291024A1

公开(公告)日：2012-11-15

申请号：US13107350

申请日：2011-05-13

申请人： Katherine Barabash ,  Rami Cohen ,  Vinit Jain ,  Renato J. Recio ,  Benny Rochwerger

发明人： Katherine Barabash ,  Rami Cohen ,  Vinit Jain ,  Renato J. Recio ,  Benny Rochwerger

IPC分类号： G06F9/455

CPC分类号： H04L49/356 ,  H04L12/4633 ,  H04L12/4641 ,  H04L49/70

摘要： According to one embodiment of the present disclosure, an approach is provided in which a policy module receives data that is initiated by a first virtual machine and has a destination at a second virtual machine. The policy module selects a policy that corresponds to sending the data from the first virtual machine to the second virtual machine. The policy includes one or more logical references to one or more virtual networks, and does not include a physical reference to a physical entity located on a physical network. In turn, the policy module encapsulates the data with a physical path translation that is based upon the selected policy, and sends the encapsulated data over the physical network to a second policy module that corresponds to the second virtual machine.

摘要翻译： 根据本公开的一个实施例，提供了一种方法，其中策略模块接收由第一虚拟机发起且在第二虚拟机上具有目的地的数据。 策略模块选择对应于将数据从第一虚拟机发送到第二虚拟机的策略。 策略包括对一个或多个虚拟网络的一个或多个逻辑引用，并且不包括对位于物理网络上的物理实体的物理引用。 反过来，策略模块使用基于所选择的策略的物理路径转换来封装数据，并且通过物理网络将封装的数据发送到对应于第二虚拟机的第二策略模块。

公开(公告)号：US20120182993A1

公开(公告)日：2012-07-19

申请号：US13006758

申请日：2011-01-14

申请人： DAVID HADAS ,  VIVEK KASHYAP ,  JAYAKRISHNA KIDAMBI ,  RENATO J. RECIO ,  BENNY ROCHWERGER

发明人： DAVID HADAS ,  VIVEK KASHYAP ,  JAYAKRISHNA KIDAMBI ,  RENATO J. RECIO ,  BENNY ROCHWERGER

IPC分类号： H04L12/56

CPC分类号： H04L12/4641

摘要： A physical host executes a virtual machine monitor (VMM) in communication with a plurality of consumer virtual machines (VMs). In response to receipt of a packet, the VMM determines whether a service is to be performed for the packet by a service virtual machine (VM) in communication with the VMM. In response to determining that the service is to be performed for the packet by the service VM, the VMM applies a tag to the packet that differentiates the packet from any other packet sharing a common address with the packet but having a different associated consumer, passes the packet to the service VM for performance of the service, and thereafter removes the tag from the packet in response to receipt of the packet from the service VM following performance of the service. In response to receipt of the packet from the service VM, the VMM forwards the packet.

公开(公告)号：US20120023208A1

公开(公告)日：2012-01-26

申请号：US13006836

申请日：2011-01-14

申请人： David Hadas ,  Irit Loy ,  Benny Rochwerger ,  Julian Satran

发明人： David Hadas ,  Irit Loy ,  Benny Rochwerger ,  Julian Satran

IPC分类号： G06F15/16

CPC分类号： H04L65/4076

摘要： A method for managing communication between nodes in a virtual network is provided. A first computing system utilizes first information to forward first data to the second computing system in a physical network. If the first information is incorrect, the second computing system forwards an unlearning request to the first computing system, and the first computing system updates or deletes the first information. If the first information is not available, the first computing system forwards the first data to a group of computing systems in the physical network by way of an unknown network service. Upon receiving the first data, the second computing system or a third computing system in the physical network forwards a learning request to the first computing system, and the first computing system utilizes the learning request to generate the first information.

摘要翻译： 提供了一种用于管理虚拟网络中的节点之间的通信的方法。 第一计算系统利用第一信息将物理网络中的第一数据转发到第二计算系统。 如果第一信息不正确，则第二计算系统将未学习请求转发给第一计算系统，并且第一计算系统更新或删除第一信息。 如果第一信息不可用，则第一计算系统通过未知网络服务将第一数据转发到物理网络中的一组计算系统。 在接收到第一数据时，物理网络中的第二计算系统或第三计算系统将学习请求转发到第一计算系统，并且第一计算系统利用学习请求来生成第一信息。

公开(公告)号：US06507586B1

公开(公告)日：2003-01-14

申请号：US09138994

申请日：1998-08-24

申请人： Julian Satran ,  Efraim Zeidner ,  Benny Rochwerger

发明人： Julian Satran ,  Efraim Zeidner ,  Benny Rochwerger

IPC分类号： H04J326

CPC分类号： H04H20/95 ,  H04L12/185 ,  H04L12/1859 ,  H04L12/2801

摘要： Data transmission system comprising a single transmitter and a plurality of receivers and in which the transmitter sends a group Gi of data items to the plurality of receivers over a one-way channel, wherein each data item to be transmitted is divided in blocks which are encapsulated to form datagrams, each datagram including a block sequence number, a data item identifier, a timestamp reflecting the age of the data item, and a group directory GD is regularly sent by the transmitter) to each one of the plurality of receivers, the group directory containing information for all groups Gi of data items being sent enabling each one of the plurality of receivers to select the group of data items it wants to receive.

摘要翻译： 数据传输系统包括单个发射机和多个接收机，其中发射机通过单向信道向多个接收机发送数据项组Gi，其中要传输的每个数据项被分成封装的块 为了形成数据报，每个数据报包括块序列号，数据项标识符，反映数据项的年龄的时间戳和发射机定期发送的组目录GD）到多个接收机中的每一个，组 发送的数据项的所有组Gi的信息使多个接收器中的每一个能够选择要接收的数据项的组。

公开(公告)号：US06430183B1

公开(公告)日：2002-08-06

申请号：US09127153

申请日：1998-07-31

申请人： Julian Satran ,  Efraim Zeidner ,  Benny Rochwerger ,  Kenneth M. Nagin ,  Itamar Gilad

发明人： Julian Satran ,  Efraim Zeidner ,  Benny Rochwerger ,  Kenneth M. Nagin ,  Itamar Gilad

IPC分类号： H04Q100

CPC分类号： H04L29/06 ,  H04L69/22 ,  H04N21/2381 ,  H04N21/2665 ,  H04N21/4381 ,  H04N21/6405 ,  H04N21/6408

摘要： A data transmission system, including a plurality of transmitters for transmitting a stream of multiplexed packets over a broadband channel, the packets being constructed from a stream of variable length data blocks, each of the blocks originating from different sources. The system also includes a plurality of receivers for receiving the stream of packets from the broadband channel and reconstructing the stream of variable length data blocks. The data blocks are distributed over one or more packets. The packets also include a packet header having a source identifier (SID) for identifying the source of the packet, and the first of the packets further including a block header having a block identifier (BID) for identifying the data block being transmitted.

摘要翻译： 一种数据传输系统，包括用于通过宽带信道发送复用分组流的多个发射机，所述分组由可变长度数据块流构成，每个块源自不同的源。 该系统还包括多个接收器，用于从宽带信道接收分组流并重构可变长度数据块流。 数据块分布在一个或多个数据包上。 分组还包括具有用于标识分组的源的源标识符（SID）的分组报头，并且第一分组还包括具有用于识别正在发送的数据块的块标识符（BID）的块报头。