Method and system for virtual service isolation

    公开(公告)号:US20060242229A1

    公开(公告)日:2006-10-26

    申请号:US11112234

    申请日:2005-04-21

    IPC分类号: G06F15/16

    CPC分类号: G06F9/5077

    摘要: A method of managing resources in a host computer includes generating a virtual service provider in two different computer partitions and linking them in a serial manner. The virtual service providers are associated with a computer resource. Virtual service clients in different partitions may use the virtual service provider software to access the related computer resources. The virtual service providers provide a transparent interface to the associated hardware. Virtual service clients can use the combination of series computer resource functions or can access the a lesser number of the series connected virtual service providers. Fault tolerance can be built into the scheme using multiple virtual service providers located in different partitions accessible to virtual service clients using a failover control technique.

    Method and system for a resource negotiation between virtual machines
    2.
    发明申请
    Method and system for a resource negotiation between virtual machines 有权
    虚拟机之间资源协商的方法和系统

    公开(公告)号:US20060242641A1

    公开(公告)日:2006-10-26

    申请号:US11112273

    申请日:2005-04-21

    IPC分类号: G06F9/455

    CPC分类号: G06F9/5077 G06F9/45504

    摘要: A method of agreeing on the utilization of at least one computer resource between two virtual machines includes sending a first resource request by a first virtual machine to a second virtual machine having computer resources to allocate to the first virtual machine. The second virtual machine responds by sending at least one available resource for use by the first virtual machine. The first virtual machine can select from the at least one available resource. Both the first and second virtual machines can then execute on the agreed resource utilization by the first virtual machine and begin using the resource. When conditions change, either the first virtual machine or the second virtual machine can request a renegotiation of the agreement to use computer resources.

    摘要翻译: 一种同意在两个虚拟机之间使用至少一个计算机资源的方法包括:将具有计算机资源的第一虚拟机的第一资源请求发送给具有分配给第一虚拟机的计算机资源的第二虚拟机。 第二虚拟机通过发送至少一个可用资源来响应,以供第一虚拟机使用。 第一个虚拟机可以从至少一个可用资源中进行选择。 然后,第一和第二虚拟机都可以由第一虚拟机在商定的资源利用率上执行,并开始使用资源。 当条件改变时,第一个虚拟机或第二个虚拟机可以请求重新协商协议以使用计算机资源。

    Method and system for virtual service isolation
    3.
    发明授权
    Method and system for virtual service isolation 有权
    用于虚拟服务隔离的方法和系统

    公开(公告)号:US08578385B2

    公开(公告)日:2013-11-05

    申请号:US11112234

    申请日:2005-04-21

    IPC分类号: G06F9/46 G06F9/455 G06F11/00

    CPC分类号: G06F9/5077

    摘要: A method of managing resources in a host computer includes generating a virtual service provider in two different computer partitions and linking them in a serial manner. The virtual service providers are associated with a computer resource. Virtual service clients in different partitions may use the virtual service provider software to access the related computer resources. The virtual service providers provide a transparent interface to the associated hardware. Virtual service clients can use the combination of series computer resource functions or can access the a lesser number of the series connected virtual service providers. Fault tolerance can be built into the scheme using multiple virtual service providers located in different partitions accessible to virtual service clients using a failover control technique.

    摘要翻译: 管理主计算机中的资源的方法包括在两个不同的计算机分区中生成虚拟服务提供商,并以串行方式链接它们。 虚拟服务提供商与计算机资源相关联。 不同分区中的虚拟服务客户机可能会使用虚拟服务提供商软件来访问相关的计算机资源。 虚拟服务提供商提供对相关硬件的透明接口。 虚拟服务客户端可以使用系列计算机资源功能的组合,也可以访问较少数量的连接的虚拟服务提供商。 使用故障切换控制技术的虚拟服务客户机可访问的不同分区中的多个虚拟服务提供商可以将容错内置到该方案中。

    Enhanced network system through the combination of network objects
    4.
    发明申请
    Enhanced network system through the combination of network objects 有权
    通过网络对象的组合增强网络系统

    公开(公告)号:US20060209718A1

    公开(公告)日:2006-09-21

    申请号:US11082509

    申请日:2005-03-17

    IPC分类号: H04L12/28

    摘要: A system and method for reducing the cost of framing network packets in a virtual machine environment combines certain network objects to eliminate the cost of fully framing packets between the combined objects. In a virtual environment, for example, this allows a virtual NIC in one partition to send only data to a network provider partition and to rely on the latter to frame and route the data. A source network object, destination network object, or an intermediate network object may enable a separate intermediate network object to frame its data so that the network system may take advantage of offload framing when one or more of the intermediate network object's ports has the capacity to offload framing. Alternatively, the intermediate network object may perform the offload itself. Also, the source or destination network object may query the intermediate network object for properties (such as the MTU of the network), or the intermediate network object may push its properties to the source and/or destination network objects through a back control data communications channel. The intermediate network object may further reconfigure the VM network for the purpose of efficiency by reconfiguring the network tree into a graph for increased performance for traffic moving between the nodes.

    摘要翻译: 用于降低虚拟机环境中的网络分组成帧的系统和方法将特定的网络对象组合以消除在组合对象之间完全成帧分组的成本。 例如,在虚拟环境中,这允许一个分区中的虚拟NIC仅将数据发送到网络提供商分区,并依靠后者来构建和路由数据。 源网络对象,目的网络对象或中间网络对象可以使单独的中间网络对象能够对其数据进行帧化,使得当中间网络对象的一个​​或多个端口具有以下能力时,网络系统可以利用卸载成帧 卸载框架。 或者,中间网络对象可以执行卸载本身。 此外,源或目标网络对象可以查询中间网络对象的属性(例如网络的MTU),或者中间网络对象可以通过后台控制数据通信将其属性推送到源和/或目标网络对象 渠道。 为了提高效率的目的,中间网络对象可以通过将网络树重新配置为图形以增加在节点之间移动的流量的性能来进一步重新配置VM网络。

    Communicating in a virtual environment
    5.
    发明申请
    Communicating in a virtual environment 有权
    在虚拟环境中进行通信

    公开(公告)号:US20070253436A1

    公开(公告)日:2007-11-01

    申请号:US11413868

    申请日:2006-04-28

    IPC分类号: H04L12/56

    摘要: A computer system and method for communicating in a virtual environment. The computer system may include a first partition and a virtual service client implemented at a first position in the first partition. The computer system may also include a second partition, and a virtual service provider implemented at a second position in the second partition. The first partition and the second partition may be in operative communication via the virtual service client and the virtual service provider. The first position and the second position may enable the virtual service client and the virtual service provider to reduce processing overhead associated with communicating in the virtual environment by eliminating a processing step, a buffer copy, a software interrupt, and/or a context switch.

    摘要翻译: 一种用于在虚拟环境中通信的计算机系统和方法。 计算机系统可以包括在第一分区中的第一位置处实现的第一分区和虚拟服务客户端。 计算机系统还可以包括在第二分区中的第二位置处实现的第二分区和虚拟服务提供商。 第一分区和第二分区可以经由虚拟服务客户端和虚拟服务提供商进行操作性通信。 第一位置和第二位置可以使虚拟服务客户端和虚拟服务提供商能够通过消除处理步骤,缓冲器拷贝,软件中断和/或上下文切换来减少与虚拟环境中的通信相关联的处理开销。

    Controlled disconnection of a network device
    6.
    发明申请
    Controlled disconnection of a network device 审中-公开
    网络设备的控制断开

    公开(公告)号:US20070162594A1

    公开(公告)日:2007-07-12

    申请号:US11330645

    申请日:2006-01-12

    IPC分类号: G06F15/173

    摘要: Methods, computer-readable media and systems for preparing for the disconnection of a device from a network. In the method, a pending disconnection of a network device is detected and a message indicative of the pending disconnection is generated. The message is sent to at least one component of the network and the disconnection of the device is paused.

    摘要翻译: 方法,用于准备将设备从网络断开的计算机可读介质和系统。 在该方法中,检测到网络设备的挂起断开,并产生指示挂起断开的消息。 该消息被发送到网络的至少一个组件,并且设备的断开被暂停。

    VM network traffic monitoring and filtering on the host
    7.
    发明申请
    VM network traffic monitoring and filtering on the host 有权
    VM网络流量监控和主机过滤

    公开(公告)号:US20060206300A1

    公开(公告)日:2006-09-14

    申请号:US11077575

    申请日:2005-03-11

    IPC分类号: G06F9/455

    摘要: A system and method is provided that enables older legacy guest operating systems like Windows NT 4.0 and Windows95® to take advantage of newly developed NDIS Intermediate (IM) drivers that support firewalls, quality of service, IP security, intrusion detection, and other functionality for monitoring/filtering incoming and outgoing network traffic in contemporary host operating systems such as Windows XP operating in a virtual machine (VM) environment. The invention thus makes such older legacy operating systems less susceptible to Internet viruses, and worms, network denial of service (DOS) attacks, and the like. For each Virtual Network Interface Card (VNIC) in a guest VM, a corresponding VNIC is created on the host OS, and a point to point connection is established between the guest and host VNICs. The NDIS IM drivers bind themselves on top of the host VNIC and effectively place themselves as a filter on the point to point connection.

    摘要翻译: 提供了一种系统和方法,可使较旧的旧版客户机操作系统(如Windows NT 4.0和Windows 95(R))利用新开发的支持防火墙的NDIS中间(IM)驱动程序,服务质量,IP安全性,入侵检测等 用于监视/过滤当前主机操作系统(如虚拟机(VM))中运行的Windows XP的传入和传出网络流量的功能。 因此,本发明使得这种较旧的旧式操作系统不易受到Internet病毒,蠕虫,网络拒绝服务(DOS)攻击等的影响。 对于来宾虚拟机中的每个虚拟网络接口卡(VNIC),在主机OS上创建相应的VNIC,并且在客户端和主机VNIC之间建立点对点连接。 NDIS IM驱动程序将自身绑定在主机VNIC之上,并将其自身作为点对点连接的过滤器。

    Universal serial bus host controller driver over a network
    8.
    发明授权
    Universal serial bus host controller driver over a network 有权
    通用串行总线主机控制器驱动程序通过网络

    公开(公告)号:US08813098B2

    公开(公告)日:2014-08-19

    申请号:US12082978

    申请日:2008-04-15

    摘要: A method to interact with a local USB device is disclosed. Messages are transmitted to a remote host controller driver from a host controller associated with the local USB device. Messages are received from the remote host controller driver for the host controller. In some embodiments, a transfer descriptor prototype is received from the remote host controller driver. A completed transfer descriptor is received from the remote host controller driver. The completed transfer descriptor and the transfer descriptor prototype are transformed into a modified transfer descriptor in part by using a collection of rules. The modified transfer descriptor is submitted to the local host controller without intervention from the remote host controller driver.

    摘要翻译: 公开了与本地USB设备交互的方法。 消息从与本地USB设备相关联的主机控制器传输到远程主机控制器驱动程序。 从主机控制器的远程主机控制器驱动程序接收到消息。 在一些实施例中,从远程主机控制器驱动程序接收传输描述符原型。 从远程主机控制器驱动程序接收完成的传输描述符。 完成的传输描述符和传输描述符原型通过使用规则集合部分地被转换成修改的传输描述符。 修改的传输描述符被提交给本地主机控制器,而不需要远程主机控制器驱动程序的干预。

    Dynamic Processor Mapping for Virtual Machine Network Traffic Queues
    10.
    发明申请
    Dynamic Processor Mapping for Virtual Machine Network Traffic Queues 有权
    虚拟机网络流量队列的动态处理器映射

    公开(公告)号:US20130239119A1

    公开(公告)日:2013-09-12

    申请号:US13415856

    申请日:2012-03-09

    IPC分类号: G06F9/46

    摘要: An algorithm for dynamically adjusting the number of processors servicing Virtual Machine Queues (VMQ) and the mapping of the VMQ to the processors based on network load and processor usage in the system The algorithm determines the total load on a processor and depending on whether the total load exceeds or falls below a threshold respectively, the algorithm moves at least one of the VMQs to a different processor based on certain criteria such as whether the destination processor is the home processor to the VMQ or whether it shares a common NUMA node with the VMQ. By doing so, better I/O throughput and lower power consumption can be achieved.

    摘要翻译: 用于动态调整服务于虚拟机队列(VMQ)的处理器数量以及根据系统中网络负载和处理器使用情况将VMQ映射到处理器的算法该算法确定处理器上的总负载,并且取决于总计 负载分别超过或低于阈值,算法基于某些标准将至少一个VMQ移动到不同的处理器,例如目的地处理器是否为VMQ的归属处理器,或者它是否与VMQ共享公共NUMA节点 。 通过这样做,可以实现更好的I / O吞吐量和更低的功耗。