ENFORCING REFERENCE OPERATING STATE COMPLIANCE FOR CLOUD COMPUTING-BASED COMPUTE APPLIANCES

    公开(公告)号:US20230353477A1

    公开(公告)日:2023-11-02

    申请号:US17661074

    申请日:2022-04-28

    Abstract: A process includes enforcing compliance of a compute appliance to a reference operating state for the compute appliance. The compute appliance is part of a cloud-based computing system. Enforcing compliance with the reference operating state includes, responsive to a startup of the compute appliance, the compute appliance determining an actual compute state of the compute appliance. The actual compute state includes an actual physical topology placement of a hardware component of the compute appliance. Determining the actual compute state includes determining the physical topology placement of the hardware component. Enforcing compliance with the reference operating state includes verifying whether the actual compute state complies with the reference compute state. The verification includes comparing the actual compute state to the reference compute state. Enforcing compliance with the reference operating state includes, responsive to a result of the verification, controlling whether the compute appliance is part of the cloud-based computing system.

    FLEXIBLE HIGH-AVAILABILITY COMPUTING WITH PARALLEL CONFIGURABLE FABRICS

    公开(公告)号:US20220350767A1

    公开(公告)日:2022-11-03

    申请号:US17245455

    申请日:2021-04-30

    Abstract: Composable computing architectures with an interconnection fabric to provide high availability and fault tolerance are described. An interconnection fabric routes packets between compute resources, memory resources, and input/output (I/O) resources. A fabric manager is coupled with the interconnection fabric to receive an I/O or memory requirement for a compute workload for a host device, and to map individual I/O or memory resources from the plurality of I/O resources to individual compute resources from the plurality of compute resource and to dynamically map individual I/O resources from the plurality of I/O resources based on received resource requests.

    Securing transactions involving protected memory regions having different permission levels

    公开(公告)号:US11226908B2

    公开(公告)日:2022-01-18

    申请号:US16528559

    申请日:2019-07-31

    Abstract: In exemplary aspects described herein, system memory is secured using protected memory regions. Portions of a system memory are assigned to endpoint devices, such as peripheral component interconnect express (PCIe) compliant devices. The portions of the system memory can include protected memory regions. The protected memory regions of the system memory assigned to each of the endpoint devices are configured to control access thereto using device identifiers and/or process identifiers, such as a process address space ID (PASID). When a transaction request is received by a device, the memory included in that request is used to determine whether it corresponds to a protected memory region. If so, the transaction request is executed if the identifiers in the request match the identifiers for which access is allowed to that protected memory region.

    SECURING MEMORY USING PROTECTED MEMORY REGIONS

    公开(公告)号:US20210034547A1

    公开(公告)日:2021-02-04

    申请号:US16528559

    申请日:2019-07-31

    Abstract: In exemplary aspects described herein, system memory is secured using protected memory regions. Portions of a system memory are assigned to endpoint devices, such as peripheral component interconnect express (PCIe) compliant devices. The portions of the system memory can include protected memory regions. The protected memory regions of the system memory assigned to each of the endpoint devices are configured to control access thereto using device identifiers and/or process identifiers, such as a process address space ID (PASID). When a transaction request is received by a device, the memory included in that request is used to determine whether it corresponds to a protected memory region. If so, the transaction request is executed if the identifiers in the request match the identifiers for which access is allowed to that protected memory region.

    Method and system for facilitating high availability in a multi-fabric system

    公开(公告)号:US12301427B2

    公开(公告)日:2025-05-13

    申请号:US18464680

    申请日:2023-09-11

    Abstract: An apparatus in a first computing device is provided. During operation, the apparatus can present, to a processor of the first computing device, a virtual interface switch (VIS) coupled to an interface port of the processor. The apparatus can present to the processor that a target device, which is reachable via a remote apparatus of a second computing device, is coupled to the VIS. The apparatuses can be coupled via at least a first fabric and a second fabric. A respective fabric may facilitate communication based on a fabric switching protocol. The apparatus can obtain a set of packets, which can be issued from the interface port via the VIS and directed to the target device. The apparatus can then forward, to the remote apparatus, a first subset of the set of packets via the first fabric and a second subset of the set of packets via the second fabric.

    Method and system for facilitating high availability in a multi-fabric system

    公开(公告)号:US11765037B2

    公开(公告)日:2023-09-19

    申请号:US16997473

    申请日:2020-08-19

    CPC classification number: H04L41/12 H04L49/10 H04L49/70 H04L49/356

    Abstract: An apparatus in a first computing device is provided. During operation, the apparatus can present, to a processor of the first computing device, a virtual interface switch (VIS) coupled to an interface port of the processor. The apparatus can present to the processor that a target device, which is reachable via a remote apparatus of a second computing device, is coupled to the VIS. The apparatuses can be coupled via at least a first fabric and a second fabric. A respective fabric may facilitate communication based on a fabric switching protocol. The apparatus can obtain a set of packets, which can be issued from the interface port via the VIS and directed to the target device. The apparatus can then forward, to the remote apparatus, a first subset of the set of packets via the first fabric and a second subset of the set of packets via the second fabric.

    Extending supervisory services into trusted cloud operator domains

    公开(公告)号:US11625338B1

    公开(公告)日:2023-04-11

    申请号:US17452790

    申请日:2021-10-29

    Abstract: A supervisory service of a node that includes a smart input/output (I/O) peripheral is extended into a cloud operator domain that is associated with the smart I/O peripheral. The supervisory service determines a state of a ready state indicator that is provided by the smart I/O peripheral. Based on the state, the supervisory service performs at least one of regulating an availability of an instance of an application operating environment of the node or determining whether the smart I/O peripheral is ready to be configured by the supervisory service.

    Enforcing reference operating state compliance for cloud computing-based compute appliances

    公开(公告)号:US11949583B2

    公开(公告)日:2024-04-02

    申请号:US17661074

    申请日:2022-04-28

    Abstract: A process includes enforcing compliance of a compute appliance to a reference operating state for the compute appliance. The compute appliance is part of a cloud-based computing system. Enforcing compliance with the reference operating state includes, responsive to a startup of the compute appliance, the compute appliance determining an actual compute state of the compute appliance. The actual compute state includes an actual physical topology placement of a hardware component of the compute appliance. Determining the actual compute state includes determining the physical topology placement of the hardware component. Enforcing compliance with the reference operating state includes verifying whether the actual compute state complies with the reference compute state. The verification includes comparing the actual compute state to the reference compute state. Enforcing compliance with the reference operating state includes, responsive to a result of the verification, controlling whether the compute appliance is part of the cloud-based computing system.

Patent Agency Ranking