-
公开(公告)号：US20140281308A1
公开(公告)日：2014-09-18
申请号：US13837375
申请日：2013-03-15
发明人： Jason A. LANGO , John K. Edwards
IPC分类号： G06F3/06
CPC分类号： G06F3/061 , G06F3/0605 , G06F3/0614 , G06F3/0628 , G06F3/0634 , G06F3/0649 , G06F3/0653 , G06F3/0683 , G06F3/0685 , G06F9/45533 , G06F12/1036
摘要： Performance information for storage units located at a virtual data center is determined by executing storage administrator logic whose execution is controlled by a management entity different than the virtual data center provider. Performance expectations are automatically determined based on the determined performance information. In response to determining that a particular storage unit is incompatible with performance expectations applicable to the particular storage unit, embodiments cause a reduction in utilization of the particular storage unit. Based on determined performance information, another embodiment determines that a performance pattern indicating a physical co-location of a first storage unit and a second storage unit has occurred. In response to determining that the performance pattern indicating a physical co-location of a first storage unit and a second storage unit has occurred, the embodiment disables use of a selected storage unit of the first storage unit or the second storage unit for at least a particular purpose.
摘要翻译： 通过执行由不同于虚拟数据中心提供商的管理实体控制其执行的存储管理员逻辑来确定位于虚拟数据中心的存储单元的性能信息。 性能预期将根据确定的绩效信息自动确定。 响应于确定特定存储单元与适用于特定存储单元的性能期望不兼容，实施例导致特定存储单元的利用率降低。 基于确定的性能信息，另一实施例确定指示第一存储单元和第二存储单元的物理共位置的性能模式已经发生。 响应于确定指示第一存储单元和第二存储单元的物理共位置的性能模式已经发生，本实施例禁止使用第一存储单元或第二存储单元的选定存储单元至少一个 特殊用途。
-
公开(公告)号：US09953168B1
公开(公告)日：2018-04-24
申请号：US15633685
申请日：2017-06-26
发明人： Jason A. Lango , Adam Cain , Nitin Bahadur , John K. Edwards , Kevin George , William McGovern , Andrew G. Tucker
CPC分类号： G06F21/575 , G06F9/4401 , G06F9/45545 , G06F9/45558 , G06F21/53 , G06F2009/45562 , G06F2009/45587 , H04L9/0631 , H04L9/0822 , H04L9/3213 , H04L9/3268 , H04L63/0428 , H04L63/166
摘要： In an approach, a secure boot process includes two phases. In the first phase an on premises device generates a data encryption key (DEK) with which to encrypt an operating system image and a key encryption key (KEK) with which to wrap the DEK. The on-premises device then utilizes a key management service to wrap the KEK with an account root key and writes the wrapped DEK and wrapped KEK onto a label of the encrypted operating system image. The encrypted operating system image is then uploaded to a virtual data center and merged with an intermediary guest manager image. When the encrypted machine image is used to generate a virtual machine instance, the intermediary guest manager utilizes the key management service to unwrap the KEK. The unwrapped KEK is then used to unwrap the wrapped DEK which is then used to launch the encrypted guest operating system.
-
公开(公告)号：US09306978B2
公开(公告)日：2016-04-05
申请号：US13837456
申请日：2013-03-15
CPC分类号： H04L63/20 , G06F3/0605 , G06F3/0631 , G06F3/067 , G06F17/30 , G06F17/30233 , G06F17/30306 , H04L41/5019 , H04L41/5096 , H04L47/70 , H04L67/1097
摘要： A computer-implemented process receives a request to utilize one or more virtual data center (VDC) resources at a virtual data center and determines a particular service level applicable to request. Based on the particular service level and mapping information that indicates associations between VDC resource utilization policies and service levels, the process determines a particular VDC resource utilization policy corresponding to the request and causes completion of the request according to the particular VDC resource utilization policy. Another process determines that a resource utilization performance is incompatible with a requested service level and selects a new resource utilization based in part on the resource utilization performance information and mapping information. The process causes data distributed according to a prior resource utilization policy to be distributed according to the new resource utilization policy in one or more resources at a virtual data center.
摘要翻译： 计算机实现的过程接收在虚拟数据中心利用一个或多个虚拟数据中心（VDC）资源的请求，并确定适用于请求的特定服务级别。 基于指示VDC资源利用策略和服务级别之间的关联的特定服务级别和映射信息，该过程确定与请求相对应的特定VDC资源利用策略，并根据特定的VDC资源利用策略完成请求。 另一个过程确定资源利用性能与所请求的服务级别不兼容，并且部分地基于资源利用率性能信息和映射信息来选择新的资源利用。 该过程使得根据先前的资源利用策略分发的数据在虚拟数据中心的一个或多个资源中根据新的资源利用策略进行分发。
-
公开(公告)号：US09892256B1
公开(公告)日：2018-02-13
申请号：US15483971
申请日：2017-04-10
发明人： Jason A. Lango , Dennis Ramdass , James J. Voll
CPC分类号： G06F21/554 , G06F9/45558 , G06F21/53 , G06F21/56 , G06F2009/45587 , G06F2221/034
摘要： In an approach, an intermediary guest manager operates within a virtual machine hosted by a host machine and managed by a hypervisor. The intermediary guest manager manages one or more guest operating systems operating within the virtual machine and implements one or more security services for the guest operating systems. The security services provided to the guest operating systems may include system call filtering, memory protections, secure memory dumps, and others. In some cases, the intermediary guest manager consults a threat defense policy which contains a number of records, where each record has one or more triggers representing suspicious activity and one or more actions to take in response to being triggered. When the intermediary guest manager identifies a request, such as a system call or memory access, that meets the trigger of a particular record, the intermediary guest manager executes the associated actions to remediate the suspicious activity.
-
公开(公告)号：US20160212176A1
公开(公告)日：2016-07-21
申请号：US15085736
申请日：2016-03-30
IPC分类号： H04L29/06 , H04L12/911
CPC分类号： H04L63/20 , G06F3/0605 , G06F3/0631 , G06F3/067 , G06F17/30 , G06F17/30233 , G06F17/30306 , H04L41/5019 , H04L41/5096 , H04L47/70 , H04L67/1097
摘要： A computer-implemented process receives a request to utilize one or more virtual data center (VDC) resources at a virtual data center and determines a particular service level applicable to request. Based on the particular service level and mapping information that indicates associations between VDC resource utilization policies and service levels, the process determines a particular VDC resource utilization policy corresponding to the request and causes completion of the request according to the particular VDC resource utilization policy. Another process determines that a resource utilization performance is incompatible with a requested service level and selects a new resource utilization based in part on the resource utilization performance information and mapping information. The process causes data distributed according to a prior resource utilization policy to be distributed according to the new resource utilization policy in one or more resources at a virtual data center.
摘要翻译： 计算机实现的过程接收在虚拟数据中心利用一个或多个虚拟数据中心（VDC）资源的请求，并确定适用于请求的特定服务级别。 基于指示VDC资源利用策略和服务级别之间的关联的特定服务级别和映射信息，该过程确定与请求相对应的特定VDC资源利用策略，并根据特定的VDC资源利用策略完成请求。 另一个过程确定资源利用性能与所请求的服务级别不兼容，并且部分地基于资源利用率性能信息和映射信息来选择新的资源利用。 该过程使得根据先前的资源利用策略分发的数据在虚拟数据中心的一个或多个资源中根据新的资源利用策略进行分发。
-
公开(公告)号：US09335932B2
公开(公告)日：2016-05-10
申请号：US13837375
申请日：2013-03-15
发明人： Jason A. Lango , John K. Edwards
CPC分类号： G06F3/061 , G06F3/0605 , G06F3/0614 , G06F3/0628 , G06F3/0634 , G06F3/0649 , G06F3/0653 , G06F3/0683 , G06F3/0685 , G06F9/45533 , G06F12/1036
摘要： Performance information for storage units located at a virtual data center is determined by executing storage administrator logic whose execution is controlled by a management entity different than the virtual data center provider. Performance expectations are automatically determined based on the determined performance information. In response to determining that a particular storage unit is incompatible with performance expectations applicable to the particular storage unit, embodiments cause a reduction in utilization of the particular storage unit. Based on determined performance information, another embodiment determines that a performance pattern indicating a physical co-location of a first storage unit and a second storage unit has occurred. In response to determining that the performance pattern indicating a physical co-location of a first storage unit and a second storage unit has occurred, the embodiment disables use of a selected storage unit of the first storage unit or the second storage unit for at least a particular purpose.
摘要翻译： 通过执行由不同于虚拟数据中心提供商的管理实体控制其执行的存储管理员逻辑来确定位于虚拟数据中心的存储单元的性能信息。 性能预期将根据确定的绩效信息自动确定。 响应于确定特定存储单元与适用于特定存储单元的性能期望不兼容，实施例导致特定存储单元的利用率降低。 基于确定的性能信息，另一实施例确定指示第一存储单元和第二存储单元的物理共位置的性能模式已经发生。 响应于确定指示第一存储单元和第二存储单元的物理共位置的性能模式已经发生，本实施例禁止使用第一存储单元或第二存储单元的选定存储单元至少一个 特殊用途。
-
公开(公告)号：US20140282521A1
公开(公告)日：2014-09-18
申请号：US13842670
申请日：2013-03-15
发明人： Jason A. LANGO , James J. Voll , Andrew G. Tucker
IPC分类号： G06F9/455
CPC分类号： G06F9/45558 , G06F9/45533 , G06F9/45545 , G06F2009/45583 , G06F2009/45595
摘要： One or more services for enhancing guest utilization of a virtual machine and other VDC resources may be provided at the intermediary manager. In an embodiment, the intermediary manager intercepts a hypercall from a guest operating system that is separate from the intermediary manager. The intermediary manager determines that a particular intermediary service is associated with the hypercall and causes execution of service instructions associated with the particular intermediary service. The intermediary manager and guest operating systems may operate within a virtual machine hosted by a host machine and managed by a hypervisor. Embodiments may be useful in any of a virtualized enterprise computer system; a virtual machine infrastructure in a private data center; computing, storage or networking resources in a private cloud; computing, storage or networking resources of cloud service provider; and a hybrid cloud computing environment.
摘要翻译： 可以在中介管理器处提供用于增强虚拟机和其他VDC资源的访客利用的一个或多个服务。 在一个实施例中，中间管理器拦截来自与中间管理器分离的客户操作系统的超调。 中间管理器确定特定的中间服务与超调用相关联并且导致与特定中间服务相关联的服务指令的执行。 中间管理器和客户机操作系统可以在由主机托管的虚拟机内运行并由管理程序管理。 实施例可以在虚拟化企业计算机系统中的任何一个中有用; 私人数据中心的虚拟机基础设施; 私有云中的计算，存储或网络资源; 云服务提供商的计算，存储或网络资源; 和混合云计算环境。
-
公开(公告)号：US20140281350A1
公开(公告)日：2014-09-18
申请号：US14206123
申请日：2014-03-12
IPC分类号： G06F3/06
CPC分类号： G06F3/0665 , G06F3/0604 , G06F3/0631 , G06F3/0667 , G06F3/067 , G06F3/0671
摘要： A storage administrator may maintain location information in separate layers. A data storage system may identify the location of particular data by identifying the virtual location of data, such as the logical extent to which the data belongs. Object stores may maintain mappings of virtual locations to physical locations, such as mappings of extent identifiers to virtual storage objects and mappings of virtual storage objects to storage unit locations. When particular data is relocated to a new location, a storage administrator may update mappings used to translate virtual locations to physical locations, such as an extent-object mapping or an object-storage unit mapping. References to the virtual locations, such as references to logical extent identifiers, may not be updated in response to the relocation of data.
摘要翻译： 存储管理员可以在单独的层中维护位置信息。 数据存储系统可以通过识别数据的虚拟位置（例如数据所属的逻辑范围）来识别特定数据的位置。 对象存储可以维护虚拟位置到物理位置的映射，例如对虚拟存储对象的区段标识符的映射以及虚拟存储对象到存储单元位置的映射。 当特定数据重新定位到新位置时，存储管理员可以更新用于将虚拟位置转换为物理位置的映射，例如扩展对象映射或对象存储单元映射。 对虚拟位置的引用（例如对逻辑区段标识符的引用）可能不会响应于数据的重新定位而被更新。
-
9.发明申请公开(公告)号：US20180217858A1
公开(公告)日：2018-08-02
申请号：US15420523
申请日：2017-01-31
发明人： Marcel Moolenaar
IPC分类号： G06F9/455 , H04L29/12 , H04L12/833
CPC分类号： G06F9/45558 , G06F2009/45595 , H04L47/31 , H04L61/2007
摘要： A technique transparently deploys an operating entity (OE) into a network data path of a virtualized computing environment that includes a guest operating system (OS) running in a virtual machine instance (VMI) of a virtual data center (VDC). The OE is embodied as an intermediary manager, e.g., a meta-hypervisor (metavisor), of a computing cell within the VMI that includes the guest OS and associated applications.The computing cell is layered over a hypervisor which manages system resources of the VDC in an arrangement such that the metavisor is disposed between the hypervisor and guest OS, and operates transparent to the guest OS. The transparent deployment technique involves a set of conditional tests and actions embodied as modules of the metavisor that is applied to examine network packet traffic exchanged over the network data path and that operates to make the presence of the metavisor within the network data path “invisible” (i.e., transparent) to the guest OS, i.e., so that the guest OS is unaware of the presence of the metavisor.
-
公开(公告)号：US09578064B2
公开(公告)日：2017-02-21
申请号：US15085736
申请日：2016-03-30
CPC分类号： H04L63/20 , G06F3/0605 , G06F3/0631 , G06F3/067 , G06F17/30 , G06F17/30233 , G06F17/30306 , H04L41/5019 , H04L41/5096 , H04L47/70 , H04L67/1097
摘要： A computer-implemented process receives a request to utilize one or more virtual data center (VDC) resources at a virtual data center and determines a particular service level applicable to request. Based on the particular service level and mapping information that indicates associations between VDC resource utilization policies and service levels, the process determines a particular VDC resource utilization policy corresponding to the request and causes completion of the request according to the particular VDC resource utilization policy. Another process determines that a resource utilization performance is incompatible with a requested service level and selects a new resource utilization based in part on the resource utilization performance information and mapping information. The process causes data distributed according to a prior resource utilization policy to be distributed according to the new resource utilization policy in one or more resources at a virtual data center.
摘要翻译： 计算机实现的过程接收在虚拟数据中心利用一个或多个虚拟数据中心（VDC）资源的请求，并确定适用于请求的特定服务级别。 基于指示VDC资源利用策略和服务级别之间的关联的特定服务级别和映射信息，该过程确定与请求相对应的特定VDC资源利用策略，并根据特定的VDC资源利用策略完成请求。 另一个过程确定资源利用性能与所请求的服务级别不兼容，并且部分地基于资源利用率性能信息和映射信息来选择新的资源利用。 该过程使得根据先前的资源利用策略分发的数据在虚拟数据中心的一个或多个资源中根据新的资源利用策略进行分发。
-
-
-
-
-
-
-
-
-
搜索结果
15 条记录 (耗时 0.017 秒)
