Reducing latency for nested virtual machines

    公开(公告)号:US12175271B2

    公开(公告)日:2024-12-24

    申请号:US17305033

    申请日:2021-06-29

    Applicant: Red Hat, Inc.

    Abstract: System and method for reducing latency for nested virtual machines. An example method may include: running, by a host computer system, a hypervisor managing a first virtual machine associated with a first virtual processor (vCPU) implemented by a first processing thread, wherein the first virtual machine manages a second virtual machine; creating, by the hypervisor, a second processing thread implementing a second vCPU associated with the second virtual machine; and responsive to receiving an interrupt directed to the second virtual machine, causing, by the hypervisor, the second processing thread to process the interrupt.

    RANDOMIZATION-BASED PROTECTION FOR MEMORY DEDUPLICATION

    公开(公告)号:US20240402931A1

    公开(公告)日:2024-12-05

    申请号:US18204076

    申请日:2023-05-31

    Applicant: Red Hat, Inc.

    Abstract: Systems, methods, and apparatuses for managing memory usage in virtualized computing environments are provided herein. An example method includes generating a random key, associating the key with a page or range of pages in a memory, and selectively deduplicating pages based upon the key associated with each respective page.

    EXTENDED PAGE TABLE FOR ENCRYPTED VIRTUAL MACHINES

    公开(公告)号:US20240354137A1

    公开(公告)日:2024-10-24

    申请号:US18302534

    申请日:2023-04-18

    Applicant: Red Hat, Inc.

    Inventor: Michael Tsirkin

    CPC classification number: G06F9/45558 G06F2009/45583 G06F2009/45587

    Abstract: The technology disclosed herein generates, by a virtual machine running on a host computer system, a plurality of direct guest physical addresses, maps each guest virtual address of a plurality of guest virtual addresses to a direct guest physical address of the plurality of direct guest physical addresses, and updates, for each guest virtual address to direct guest physical address mapping, an entry of a shadow page table with the direct guest physical address to a guest physical address mapping.

    Fast virtual machine resume at host upgrade

    公开(公告)号:US12124866B2

    公开(公告)日:2024-10-22

    申请号:US17082701

    申请日:2020-10-28

    Applicant: Red Hat, Inc.

    Inventor: Michael Tsirkin

    Abstract: A system includes at least one memory including a persistent storage, at least one processor in communication with the at least one memory, a virtual machine associated with a virtual machine memory, and a hypervisor executing on the at least one processor. The hypervisor is configured to map the virtual machine memory to the persistent storage, detect a request to restart a host, and synchronize the virtual machine memory by copying data to the persistent storage for each page of the virtual machine memory that has changed. The hypervisor is also configured to pause the virtual machine prior to the host restarting, save a virtual machine state to the persistent storage, restore the virtual machine state after the host restarts, and resume operation of the virtual machine.

    EFFICIENT QUEUE ACCESS FOR USER-SPACE PACKET PROCESSING

    公开(公告)号:US20240264956A1

    公开(公告)日:2024-08-08

    申请号:US18624661

    申请日:2024-04-02

    Applicant: Red Hat, Inc.

    Inventor: Michael Tsirkin

    CPC classification number: G06F13/1668 G06F13/20

    Abstract: An example method may include determining whether a preemption flag associated with a first input/output (I/O) handling thread is equal to a first value indicating that preemption of the first I/O queue handling thread is forthcoming, wherein the first I/O queue handling thread is executing on a first processor, the first I/O queue handling thread is associated with a first set of one or more queue identifiers, and each queue identifier identifies a queue being handled by the first I/O queue handling thread, and, responsive to determining that the preemption flag is equal to the first value, transferring the first set of one or more queue identifiers to a second I/O queue handling thread executing on a second processor. Transferring the first set of queue identifiers may include removing the one or more queue identifiers from the first set.

    Automatically Inputting an Authentication Code for an Authentication Process

    公开(公告)号:US20240193257A1

    公开(公告)日:2024-06-13

    申请号:US18080414

    申请日:2022-12-13

    Applicant: RED HAT, INC.

    Inventor: Michael Tsirkin

    CPC classification number: G06F21/45

    Abstract: An authentication code for an authentication process such as multifactor authentication can be automatically inputted according to some examples described herein. In one example, a computing device can execute an authenticator application to generate an authentication code for use during an authentication process associated with a user logging into an account. The computing device can establish a connection with a target device that is separate from the computing device. The target device may be configured to display a graphical user interface that includes an input box into which the user is to manually type the authentication code as part of the authentication process. The computing device can transmit the authentication code to the target device via the connection. The target device can be configured to receive the authentication code and automatically enter the authentication code into the input box on behalf of the user.

    Secure reliable application environments

    公开(公告)号:US11943337B2

    公开(公告)日:2024-03-26

    申请号:US18111491

    申请日:2023-02-17

    Applicant: Red Hat, Inc.

    Inventor: Michael Tsirkin

    Abstract: A system includes an application instance or application environment instance and a first cloud service of a trusted cloud provider. The first cloud service is configured to receive an encrypted disk image and to launch the application instance or application environment instance. The system also includes a second cloud service of a first alternate cloud provider, which is configured to launch a first attestation service instance from an attestation disk image that includes a secret and to provide the secret to the application instance or application environment instance.

Patent Agency Ranking