SANDBOXING FOR MULTI-TENANCY
    3.
    发明申请
    SANDBOXING FOR MULTI-TENANCY 审中-公开
    多伦多沙发

    公开(公告)号:US20130160115A1

    公开(公告)日:2013-06-20

    申请号:US13330682

    申请日:2011-12-20

    IPC分类号: G06F11/00

    摘要: Systems and methods according to various embodiments disclose a worker process manager adapted to spawn one or more worker processes on a server and to load an application on each of the worker processes. The worker process manager is adapted to isolate the one or more worker processes from each other and to control resource usage by the worker processes. A resource manager is adapted to detect applications that overuse system resources. The worker process manager is adapted to isolate worker processes and to control resource usage using one or more of the following techniques: least-privilege execution, messaging isolation, credentials isolation, data isolation, network isolation, fair share resource usage, and managed runtime security. Heuristic algorithms are used to detect applications that frequently overuse system resources that are unchargeable and that cause system unresponsiveness.

    摘要翻译: 根据各种实施例的系统和方法公开了适于在服务器上产生一个或多个工作进程并且在每个工作进程上加载应用程序的工作进程管理器。 工作进程管理器适于将一个或多个工作进程彼此隔离并且控制工作进程的资源使用。 资源管理器适用于检测过度使用系统资源的应用程序。 工作进程管理器适用于使用以下一种或多种技术来隔离工作进程并控制资源使用:最小权限执行,消息传递隔离,凭据隔离,数据隔离,网络隔离,公平共享资源使用以及受管理的运行时安全性 。 启发式算法用于检测经常过度使用不可充电的系统资源并导致系统无响应的应用程序。

    Multi-tenant, high-density container service for hosting stateful and stateless middleware components
    4.
    发明授权
    Multi-tenant, high-density container service for hosting stateful and stateless middleware components 有权
    多租户,高密度容器服务,用于托管状态和无状态的中间件组件

    公开(公告)号:US08468548B2

    公开(公告)日:2013-06-18

    申请号:US12972411

    申请日:2010-12-17

    IPC分类号: G06F13/00

    CPC分类号: G06F9/5061

    摘要: A container service is capable of hosting large numbers of middleware components for multiple tenants. A central container manager controls a plurality of compute nodes. The central container manager receives middleware components from external devices or services and assigns the components to containers on one or more designated compute nodes. Each compute node has a container management agent and one or more containers. The container management agents activate and manage the appropriate number of containers to run the assigned middleware components. The container management agent assigns each container on its compute node a limited set of privileges to control access to shared resources. The central container manager and each node's container management agent monitor container load levels and dynamically adjust the placement of the middleware components to maintain balanced operation. The compute nodes are grouped into clusters based upon the type of middleware components hosted on each compute node.

    摘要翻译: 容器服务能够为多个租户托管大量的中间件组件。 中央容器管理器控制多个计算节点。 中央容器管理器从外部设备或服务器接收中间件组件,并将组件分配给一个或多个指定的计算节点上的容器。 每个计算节点都有一个容器管理代理和一个或多个容器。 容器管理代理激活并管理适当数量的容器以运行分配的中间件组件。 容器管理代理在其计算节点上分配有限的一组权限以控制对共享资源的访问。 中央集装箱管理员和每个节点的集装箱管理代理监控集装箱装载水平,动态调整中间件组件的位置,保持平衡运行。 基于每个计算节点上托管的中间件组件的类型,将计算节点分组为集群。

    MULTI-TENANT, HIGH-DENSITY CONTAINER SERVICE FOR HOSTING STATEFUL AND STATELESS MIDDLEWARE COMPONENTS
    6.
    发明申请
    MULTI-TENANT, HIGH-DENSITY CONTAINER SERVICE FOR HOSTING STATEFUL AND STATELESS MIDDLEWARE COMPONENTS 有权
    多重承诺,高密度集装箱服务,用于托管状态和状态中间件组件

    公开(公告)号:US20120159523A1

    公开(公告)日:2012-06-21

    申请号:US12972411

    申请日:2010-12-17

    IPC分类号: G06F9/46

    CPC分类号: G06F9/5061

    摘要: A container service is capable of hosting large numbers of middleware components for multiple tenants. A central container manager controls a plurality of compute nodes. The central container manager receives middleware components from external devices or services and assigns the components to containers on one or more designated compute nodes. Each compute node has a container management agent and one or more containers. The container management agents activate and manage the appropriate number of containers to run the assigned middleware components. The container management agent assigns each container on its compute node a limited set of privileges to control access to shared resources. The central container manager and each node's container management agent monitor container load levels and dynamically adjust the placement of the middleware components to maintain balanced operation. The compute nodes are grouped into clusters based upon the type of middleware components hosted on each compute node.

    摘要翻译: 容器服务能够为多个租户托管大量的中间件组件。 中央容器管理器控制多个计算节点。 中央容器管理器从外部设备或服务器接收中间件组件,并将组件分配给一个或多个指定的计算节点上的容器。 每个计算节点都有一个容器管理代理和一个或多个容器。 容器管理代理激活并管理适当数量的容器以运行分配的中间件组件。 容器管理代理在其计算节点上分配有限的一组权限以控制对共享资源的访问。 中央集装箱管理员和每个节点的集装箱管理代理监控集装箱装载水平,动态调整中间件组件的位置,保持平衡运行。 基于每个计算节点上托管的中间件组件的类型,将计算节点分组为集群。

    TYPE BRIDGES
    8.
    发明申请
    TYPE BRIDGES 有权
    类型桥

    公开(公告)号:US20070124738A1

    公开(公告)日:2007-05-31

    申请号:US11567058

    申请日:2006-12-05

    IPC分类号: G06F9/46

    CPC分类号: G06F8/51 Y10S707/99944

    摘要: Methods, systems, and computer program products for converting an object of one type to an object of another type that allow for the runtime operation of the conversion process to be altered or customized. The conversion may occur within an extensible serialization engine that serializes, deserializes, and transforms objects of various types. The runtime operation of the serialization engine is altered by one or more extension routines that implement the desired customizations or extensions, without requiring replacement of other existing routines. Based on type information, identified for an initial object, the object is converted to an intermediate representation which permits runtime modification, including modification of object names, object types, and object data. The intermediate representation of the initial object is modified in accordance with extension routines that alter the runtime operation of the serialization engine, and the intermediate representation is converted to a final object and type.

    摘要翻译: 用于将一种类型的对象转换为另一种类型的对象的方法,系统和计算机程序产品,其允许改变或定制转换过程的运行时操作。 转换可能发生在可扩展的序列化引擎中,它可以串行化,反序列化和转换各种类型的对象。 序列化引擎的运行时操作由实现所需的定制或扩展的一个或多个扩展例程改变,而不需要替换其他现有的例程。 基于为初始对象标识的类型信息,将对象转换为允许运行时修改的中间表示,包括对对象名称,对象类型和对象数据的修改。 根据改变序列化引擎的运行时操作的扩展例程修改初始对象的中间表示,并将中间表示转换为最终对象和类型。