-
1.
公开(公告)号:US09411628B2
公开(公告)日:2016-08-09
申请号:US14540640
申请日:2014-11-13
Applicant: Microsoft Technology Licensing, LLC
Inventor: Angshuman Bezbaruah , Lars Reuther , Taylor O'Neil Brown
CPC classification number: G06F11/1458 , G06F3/0619 , G06F3/065 , G06F3/0689 , G06F9/45558 , G06F11/1438 , G06F11/1446 , G06F11/1484 , G06F11/2046 , G06F2009/45583 , G06F2201/82 , G06F2201/84
Abstract: Embodiments are directed to backing up a virtual machine cluster and to determining virtual machine node ownership prior to backing up a virtual machine cluster. In one scenario, a computer system determines which virtual machines nodes are part of the virtual machine cluster, determines which shared storage resources are part of the virtual machine cluster and determines which virtual machine nodes own the shared storage resources. The computer system then indicates to the virtual machine node owners that at least one specified application is to be quiesced over the nodes of the virtual machine cluster, such that a consistent, cluster-wide checkpoint can be created. The computer system further creates a cluster-wide checkpoint which includes a checkpoint for each virtual machine in the virtual machine cluster.
Abstract translation: 实施例涉及在备份虚拟机集群之前备份虚拟机集群并确定虚拟机节点所有权。 在一种情况下,计算机系统确定哪些虚拟机节点是虚拟机集群的一部分,确定哪些共享存储资源是虚拟机集群的一部分,并确定哪些虚拟机节点拥有共享存储资源。 然后,计算机系统向虚拟机节点所有者指示至少一个指定的应用将在虚拟机集群的节点上停顿,使得可以创建一致的集群范围的检查点。 计算机系统还创建一个集群范围的检查点,其中包含虚拟机集群中每个虚拟机的检查点。
-
公开(公告)号:US20160179568A1
公开(公告)日:2016-06-23
申请号:US14573976
申请日:2014-12-17
Applicant: c/o Microsoft Technology Licensing, LLC
Inventor: Angshuman Bezbaruah , Lars Reuther , Taylor O'Neil Brown , John Andrew Starks
CPC classification number: G06F11/1451 , G06F3/0619 , G06F3/065 , G06F3/067 , G06F9/45558 , G06F11/1446 , G06F2009/45579 , G06F2009/45591 , G06F2201/815 , G06F2201/84
Abstract: Embodiments are directed to establishing efficient virtual machine reference points and to specifying a virtual machine reference point to query incremental changes. In one scenario, a computer system accesses a stable virtual machine checkpoint that includes portions of underlying data stored in data storage, where the checkpoint is associated with a specific point in time. The computer system then queries the data storage to determine data storage identifiers that reference the point in time associated with the checkpoint and stores the determined data storage identifiers as a virtual machine reference point, where each subsequent change to the data storage results in an update to the data storage identifier, so that virtual machine reference point is usable to identify incremental changes from specific points in time on.
Abstract translation: 实施例涉及建立有效的虚拟机参考点并指定虚拟机参考点来查询增量变化。 在一种情况下,计算机系统访问稳定的虚拟机检查点,其包括存储在数据存储中的底层数据的部分,其中检查点与特定时间点相关联。 计算机系统然后查询数据存储器以确定引用与检查点相关联的时间点的数据存储标识符,并将确定的数据存储标识符存储为虚拟机参考点,其中对数据存储器的每个后续更改导致更新到 数据存储标识符,使得虚拟机参考点可用于识别来自特定时间点的增量更改。
-
公开(公告)号:US10855725B2
公开(公告)日:2020-12-01
申请号:US15171917
申请日:2016-06-02
Applicant: Microsoft Technology Licensing, LLC
Inventor: Navin Narayan Pai , Charles G. Jeffries , Giridhar Viswanathan , Benjamin M. Schultz , Frederick J. Smith , Lars Reuther , Michael B. Ebersol , Gerardo Diaz Cuellar , Ivan Dimitrov Pashov , Poornananda R. Gaddehosur , Hari R. Pulapaka , Vikram Mangalore Rao
Abstract: A host operating system running on a computing device monitors network communications for the computing device to identify network resources that are requested by the computing device. The host operating system compares requested network resources against security policies to determine if the requested network resources are trusted. When an untrusted network resource is identified, the host operating system accesses the untrusted network resource within a container that is isolated from the host operating system kernel using techniques discussed herein. By restricting access to untrusted network resources to isolated containers, the host operating system is protected from even kernel-level attacks or infections that may result from an untrusted network resource.
-
公开(公告)号:US20190296957A1
公开(公告)日:2019-09-26
申请号:US16437928
申请日:2019-06-11
Applicant: Microsoft Technology Licensing, LLC
Inventor: David Matthew Kruse , Lars Reuther , Kevin Michael Broas
Abstract: Embodiments provide a method and system for transferring data between different computing devices. Specifically, a communication session is established between a first computing device and a second computing device. The communication session may be established using a first communication protocol. The first computing device creates a virtual memory object which is bound to one or more memory blocks of the first computing device. A path to the virtual memory object is generated and the path is transmitted to the second computing device using the communication session. The second computing device may then read or write data directly into/from the virtual memory object using a second communication protocol that is different from the first communication protocol. The data is written into and read from the virtual memory object using file system commands.
-
公开(公告)号:US10310893B2
公开(公告)日:2019-06-04
申请号:US15189557
申请日:2016-06-22
Applicant: Microsoft Technology Licensing, LLC
Inventor: Yevgeniy M. Bak , Lars Reuther , Kevin M. Broas , Mehmet Iyigun , Hari R. Pulapaka , Morakinyo Korede Olugbade , Benjamin M. Schultz
Abstract: An operating system running on a computing device uses containers for hardware resource partitioning. Using the techniques discussed herein, pausing and resuming of containers is managed to reduce the pressure a container exerts on system resources when paused. Resuming of containers can further be managed to reduce the startup time for containers. This managing of containers can implemented various different techniques, such as stopping scheduling of virtual processors, stopping scheduling of processes or threads, compressing memory, swapping pages of memory for the container to a page file on a hard drive, and so forth.
-
公开(公告)号:US09875160B2
公开(公告)日:2018-01-23
申请号:US15219958
申请日:2016-07-26
Applicant: MICROSOFT TECHNOLOGY LICENSING, LLC
Inventor: Angshuman Bezbaruah , Lars Reuther , Taylor O'Neil Brown , John Andrew Starks
CPC classification number: G06F11/1451 , G06F3/0619 , G06F3/065 , G06F3/067 , G06F9/45558 , G06F11/1446 , G06F2009/45579 , G06F2009/45591 , G06F2201/815 , G06F2201/84
Abstract: A computer system maintains identifiers that identify changed blocks of virtual machine (VM) storage. The computer system accesses a stable VM checkpoint comprising a restorable VM image at a time, and that stores a representation of data of at least one block as it existed at the time. The computer system converts the checkpoint to a reference point. Reference point information is transferable with the VM, such that if the VM is moved to a different computing system, any data identified by the reference point is recoverable. The conversion includes querying the storage to determine an identifier corresponding to the block of the checkpoint at the time, storing this identifier as a part of the reference point, and releasing the representation of the data of the block from the checkpoint. The computer system then uses the reference point to identify changes in the blocks of the storage since the time.
-
公开(公告)号:US20170322824A1
公开(公告)日:2017-11-09
申请号:US15280201
申请日:2016-09-29
Applicant: Microsoft Technology Licensing, LLC
Inventor: Lars Reuther , David A. Hepkin , Kevin M. Broas , John A. Starks , Arun U. Kishan , John J. Richardson , Mehmet Iyigun , Yevgeniy M. Bak
CPC classification number: G06F9/45558 , G06F3/0604 , G06F3/0632 , G06F3/065 , G06F3/0665 , G06F3/0683 , G06F9/4843 , G06F2009/45562 , G06F2009/45583
Abstract: An operating system running on a computing device, also referred to herein as a host device, uses containers for hardware resource partitioning. A container can include one or more of various different components, such as a base operating system, a user-mode environment, an application, virtual devices, combinations thereof, and so forth. One or more container templates are maintained for a computing device, and in response to a request to create a new container, a template container is copied into memory of the computing device to create the new container. The template container includes the various components of the container, and these components are copied into memory of the computing device rather than being launched or started one after the other. Thus, time need not be expended starting the various components included in the container—the components are just copied into memory as a new container.
-
公开(公告)号:US20160004467A1
公开(公告)日:2016-01-07
申请号:US14789860
申请日:2015-07-01
Applicant: Microsoft Technology Licensing, LLC
Inventor: Dustin L. Green , Jacob K. Oshins , Lars Reuther
IPC: G06F3/06
CPC classification number: G06F3/0619 , G06F3/0617 , G06F3/0647 , G06F3/065 , G06F3/0659 , G06F3/0665 , G06F3/067 , G06F3/0689 , G06F9/45558 , G06F11/2066 , G06F2009/45579 , H04L67/1097
Abstract: Described is a technology by which a virtual hard disk is migrated from a source storage location to a target storage location without needing any shared physical storage, in which a machine may continue to use the virtual hard disk during migration. This facilitates use the virtual hard disk in conjunction with live-migrating a virtual machine. Virtual hard disk migration may occur fully before or after the virtual machine is migrated to the target host, or partially before and partially after virtual machine migration. Background copying, sending of write-through data, and/or servicing read requests may be used in the migration. Also described is throttling data writes and/or data communication to manage the migration of the virtual hard disk.
Abstract translation: 描述了将虚拟硬盘从源存储位置迁移到目标存储位置而不需要任何共享物理存储器的技术,其中机器可以在迁移期间继续使用虚拟硬盘。 这有助于将虚拟硬盘与实时迁移虚拟机结合使用。 在虚拟机迁移到目标主机之前或之后,或部分在虚拟机迁移之前或之后,虚拟硬盘迁移可能会完全发生。 可以在迁移中使用后台复制,直写数据的发送和/或服务读请求。 还描述了限制数据写入和/或数据通信以管理虚拟硬盘的迁移。
-
公开(公告)号:US12164948B2
公开(公告)日:2024-12-10
申请号:US16893288
申请日:2020-06-04
Applicant: Microsoft Technology Licensing, LLC
Inventor: Amber Tianqi Guo , Frederick J. Smith, IV , John Starks , Lars Reuther , Deepu Thomas , Hari R. Pulapaka , Benjamin M. Schultz , Judy J. Liu
Abstract: A fine-grain selectable partially privileged container virtual computing environment provides a vehicle by which processes that are directed to modifying specific aspects of a host computing environment can be delivered to, and executed upon, the host computing environment while simultaneously maintaining the advantageous and desirable protections and isolations between the remaining aspects of the host computing environment and the partially privileged container computing environment. Such partial privilege is provided based upon directly or indirectly delineated actions that are allowed to be undertaken on the host computing environment by processes executing within the partially privileged container virtual computing environment and actions which are not allowed. Aspects of the host computing environment operating system, such as the kernel, are extended to interface with container-centric mechanisms to receive information upon which actions can be allowed or denied by the kernel even if the process attempting such actions would otherwise have sufficient privilege.
-
公开(公告)号:US11112975B2
公开(公告)日:2021-09-07
申请号:US16020820
申请日:2018-06-27
Applicant: Microsoft Technology Licensing, LLC
Inventor: Dustin L. Green , Jacob K. Oshins , Lars Reuther
Abstract: Described is a technology by which a virtual hard disk is migrated from a source storage location to a target storage location without needing any shared physical storage, in which a machine may continue to use the virtual hard disk during migration. This facilitates use the virtual hard disk in conjunction with live-migrating a virtual machine. Virtual hard disk migration may occur fully before or after the virtual machine is migrated to the target host, or partially before and partially after virtual machine migration. Background copying, sending of write-through data, and/or servicing read requests may be used in the migration. Also described is throttling data writes and/or data communication to manage the migration of the virtual hard disk.
-
-
-
-
-
-
-
-
-