MAINTAINING HIGH AVAILABILITY OF A GROUP OF VIRTUAL MACHINES USING HEARTBEAT MESSAGES
    2.
    发明申请
    MAINTAINING HIGH AVAILABILITY OF A GROUP OF VIRTUAL MACHINES USING HEARTBEAT MESSAGES 有权
    使用心跳信息维护一组虚拟机的高可用性

    公开(公告)号:US20120278801A1

    公开(公告)日:2012-11-01

    申请号:US13096188

    申请日:2011-04-28

    IPC分类号: G06F9/455

    摘要: Embodiments maintain high availability of software application instances in a fault domain. Subordinate hosts are monitored by a master host. The subordinate hosts publish heartbeats via a network and datastores. Based at least in part on the published heartbeats, the master host determines the status of each subordinate host, distinguishing between subordinate hosts that are entirely inoperative and subordinate hosts that are operative but partitioned (e.g., unreachable via the network). The master host may restart software application instances, such as virtual machines, that are executed by inoperative subordinate hosts or that cease executing on partitioned subordinate hosts.

    摘要翻译: 实施例在故障域中保持软件应用程序实例的高可用性。 主机由主机监控。 下级主机通过网络和数据存储发布心跳。 至少部分地基于所发布的心跳,主主机确定每个从属主机的状态,区分完全不起作用的从属主机和可操作但被分区的下级主机(例如,经由网络不可达)。 主主机可以重新启动由不能操作的下属主机执行的软件应用程序实例,例如虚拟机,或者停止在分区的下级主机上执行。

    High availability system allowing conditionally reserved computing resource use and reclamation upon a failover
    5.
    发明授权
    High availability system allowing conditionally reserved computing resource use and reclamation upon a failover 有权
    高可用性系统允许有条件保留的计算资源在故障转移时使用和回收

    公开(公告)号:US08635493B2

    公开(公告)日:2014-01-21

    申请号:US13109300

    申请日:2011-05-17

    IPC分类号: G06F11/00

    摘要: In one embodiment, a method attempts, by a computing device, to determine a placement of a set of virtual machines on available hosts upon failure of a host. The placement considers the set of virtual machines as being not powered on any of the available hosts. The method further determines, by the computing device, a placed list of virtual machines in the set of virtual machines as a recommendation to power on to the available hosts. The determination of the placed list of virtual machines is used to determine a power off list of virtual machines in the set of virtual machines to power off, wherein virtual machines in the power off list of virtual machines are currently powered on available hosts but were considered to be powered off to determine the placement.

    摘要翻译: 在一个实施例中,方法通过计算设备尝试在主机故障时确定一组虚拟机在可用主机上的放置。 该展示位置会将该组虚拟机视为未启动任何可用主机。 该方法还通过计算设备确定虚拟机组中的放置的虚拟机列表,作为对可用主机加电的建议。 确定放置的虚拟机列表用于确定虚拟机集合中的虚拟机的电源关闭列表以关闭,其中虚拟机的电源关闭列表中的虚拟机当前已通过可用主机供电,但被认为是 关闭电源以确定放置位置。

    Method and system for cluster resource management in a virtualized computing environment
    6.
    发明授权
    Method and system for cluster resource management in a virtualized computing environment 有权
    虚拟化计算环境中集群资源管理的方法和系统

    公开(公告)号:US08510590B2

    公开(公告)日:2013-08-13

    申请号:US12726119

    申请日:2010-03-17

    IPC分类号: G06F11/00

    摘要: Methods and systems for cluster resource management in virtualized computing environments are described. VM spares are used to reserve (or help discover or otherwise obtain) a set of computing resources for a VM. While VM spares may be used for a variety of scenarios, particular uses of VM spares include using spares to ensure resource availability for requests to power on VMs as well as for discovering, obtaining, and defragmenting the resources and VMs on a cluster, e.g., in response to requests to reserve resources for a VM or to respond to a notification of a failure for a given VM.

    摘要翻译: 描述了虚拟化计算环境中集群资源管理的方法和系统。 VM备件用于为VM预留(或帮助发现或以其他方式获取)一组计算资源。 虽然VM备件可用于各种场景,但VM备件的特定用途包括使用备件来确保为VM启动的请求的资源可用性,以及发现,获取和碎片整理群集上的资源和VM,例如, 响应于为VM预留资源的请求或响应给定VM的故障通知。

    Method and apparatus for analyzing one or more firewalls
    7.
    发明授权
    Method and apparatus for analyzing one or more firewalls 有权
    用于分析一个或多个防火墙的方法和装置

    公开(公告)号:US07016980B1

    公开(公告)日:2006-03-21

    申请号:US09483876

    申请日:2000-01-18

    IPC分类号: G06F15/16

    摘要: A method and apparatus are disclosed for analyzing the operation of one or more network gateways, such as firewalls or routers, that perform a packet filtering function in a network environment. Given a user query, the disclosed firewall analysis tool simulates the behavior of the various firewalls, taking into account the topology of the network environment, and determines which portions of the services or machines specified in the original query would manage to reach from the source to the destination. The relevant packet-filtering configuration files are collected and an internal representation of the implied security policy is derived. A graph data structure is used to represent the network topology. A gateway-zone graph permits the firewall analysis tool to determine where given packets will travel in the network, and which gateways will be encountered along those paths. In this manner, the firewall analysis tool can evaluate a query object against each rule-base object, for each gateway node in the gateway-zone graph that is encountered along each path between the source and destination. A graphical user interface is provided for receiving queries, such as whether one or more given services are permitted between one or more given machines, and providing results. A spoofing attack can be simulated by allowing the user to specify where packets are to be injected into the network, which may not be the true location of the source host-group.

    摘要翻译: 公开了一种用于分析在网络环境中执行分组过滤功能的一个或多个网络网关(例如防火墙或路由器)的操作的方法和装置。 给定用户查询,所公开的防火墙分析工具模拟各种防火墙的行为,考虑到网络环境的拓扑,并确定原始查询中指定的服务或计算机的哪些部分将从源头到达 目的地。 收集相关的包过滤配置文件,并导出隐含的安全策略的内部表示。 图形数据结构用于表示网络拓扑。 网关区域图允许防火墙分析工具确定给定数据包在网络中传播的位置,以及沿着这些路径将遇到哪些网关。 以这种方式,防火墙分析工具可以根据源和目标之间的每个路径遇到的网关区域图中的每个网关节点,针对每个规则库对象评估查询对象。 提供用于接收查询的图形用户界面,诸如在一个或多个给定机器之间是允许一个或多个给定服务,还是提供结果。 可以通过允许用户指定要在网络中注入数据包的位置来模拟欺骗攻击,这可能不是源主机组的真实位置。