公开(公告)号：US20180203730A1

公开(公告)日：2018-07-19

申请号：US15921822

申请日：2018-03-15

Applicant: VMware, Inc.

Inventor： Christoph Klee ,  Mukund Gunti ,  Adrian Drzewiecki

IPC: G06F9/50 ,  G06F3/06 ,  G06F9/54 ,  G06F9/52

Abstract: The approaches described herein implement synchronous execution of a user space operation from a kernel context. A thread, executing on a computing device, initializes a second kernel stack based on a first kernel stack. The computing device executes an operating system having a user space and a kernel space. The thread, executing in kernel space, performs a non-blocking call (e.g., an upcall) to execute an upcall function in user space. The upcall function may further call other user space functions or system calls. The system calls are performed using the second kernel stack. Upon termination of the upcall function, the thread continues execution on the first kernel stack.

公开(公告)号：US09934067B2

公开(公告)日：2018-04-03

申请号：US14304480

申请日：2014-06-13

Applicant: VMware, Inc.

Inventor： Christoph Klee ,  Mukund Gunti ,  Adrian Drzewiecki

IPC: G06F9/46 ,  G06F9/50 ,  G06F9/52 ,  G06F3/06 ,  G06F9/54

CPC classification number: G06F9/50 ,  G06F3/0605 ,  G06F3/0659 ,  G06F3/0673 ,  G06F9/5005 ,  G06F9/52 ,  G06F9/545

Abstract: The approaches described herein implement synchronous execution of a user space operation from a kernel context. A thread, executing on a computing device, initializes a second kernel stack based on a first kernel stack. The computing device executes an operating system having a user space and a kernel space. The thread, executing in kernel space, performs a non-blocking call (e.g., an upcall) to execute an upcall function in user space. The upcall function may further call other user space functions or system calls. The system calls are performed using the second kernel stack. Upon termination of the upcall function, the thread continues execution on the first kernel stack.

公开(公告)号：US09766920B2

公开(公告)日：2017-09-19

申请号：US14839862

申请日：2015-08-28

Applicant: VMware, Inc.

Inventor： Christoph Klee ,  Aman Nijhawan

IPC: G06F3/06 ,  G06F9/455

CPC classification number: G06F9/45558 ,  G06F3/0619 ,  G06F3/065 ,  G06F3/0665 ,  G06F3/0689 ,  G06F2009/45579

Abstract: A dynamic content disk for a virtual computing instance is created as a thinly-provisioned virtual disk having a file system that is synthesized in accordance with a set of applications that are provisioned for a virtual machine (VM). To limit the allocated size of the dynamic content disk, a filter is attached to the dynamic content disk to intercept input-output operations (IOs) directed to the dynamic content disk and convert them to IOs directed to an application virtual disk that stores the actual files of the applications that are provisioned for the VM. The application virtual disk may be stored on different back-ends, such as storage area network (SAN), network file system, virtual SAN, cloud storage, or local storage.

公开(公告)号：US09542224B2

公开(公告)日：2017-01-10

申请号：US14304477

申请日：2014-06-13

Applicant: VMware, Inc.

Inventor： Christoph Klee ,  Mukund Gunti ,  Adrian Drzewiecki

IPC: G06F3/00 ,  G06F9/50 ,  G06F9/52 ,  G06F3/06 ,  G06F9/54

CPC classification number: G06F9/50 ,  G06F3/0605 ,  G06F3/0659 ,  G06F3/0673 ,  G06F9/5005 ,  G06F9/52 ,  G06F9/545

Abstract: The approaches described herein implement execution of a user space operation from a kernel context. A thread, executing on a computing device, initializes a second kernel stack based on a first kernel stack. The computing device executes an operating system having a user space and a kernel space. The thread, executing in kernel space, performs a non-blocking call (e.g., an upcall) to execute an upcall function in user space, such as filtering input/output (I/O) requests. The upcall function may further call other user space functions or system calls. The system calls are performed using the second kernel stack. Upon termination of the upcall function, the thread continues execution on the first kernel stack in kernel space. For example, the thread handles the filtered I/O commands.

Abstract translation: 本文描述的方法实现了从内核上下文执行用户空间操作。 在计算设备上执行的线程基于第一内核栈初始化第二内核栈。 计算设备执行具有用户空间和内核空间的操作系统。 在内核空间中执行的线程执行非阻塞调用（例如，上调）来执行用户空间中的上调功能，例如过滤输入/输出（I / O）请求。 上调功能可以进一步调用其他用户空间功能或系统调用。 使用第二个内核堆栈执行系统调用。 在上调功能终止后，线程将继续执行内核空间中的第一个内核栈。 例如，线程处理过滤的I / O命令。

公开(公告)号：US09542112B2

公开(公告)日：2017-01-10

申请号：US14686527

申请日：2015-04-14

Applicant: VMware, Inc.

Inventor： Adrian Drzewiecki ,  Christoph Klee ,  Mounesh Badiger

IPC: G06F12/14 ,  G06F3/06 ,  G06F13/16

CPC classification number: G06F3/0622 ,  G06F3/0637 ,  G06F3/0659 ,  G06F3/0673 ,  G06F12/14 ,  G06F12/1416 ,  G06F13/1663

Abstract: Techniques for enabling secure cross-process memory sharing are provided. In one set of embodiments, a first user process executing on a computer system can create a memory handle representing a memory space of the first user process. The first user process can further define one or more access restrictions with respect to the memory handle. The first user process can then transmit the memory handle to a second user process executing on the computer system, the memory handle enabling the second user process to access at least a portion of the first process' memory space, subject to the one or more access restrictions.

Abstract translation: 提供了用于实现安全的跨进程内存共享的技术。 在一组实施例中，在计算机系统上执行的第一用户进程可以创建表示第一用户进程的存储器空间的存储器句柄。 第一用户进程可以进一步定义关于存储器句柄的一个或多个访问限制。 然后，第一用户进程可以将存储器句柄传送到在计算机系统上执行的第二用户进程，存储器句柄使得第二用户进程能够访问第一进程的存储器空间的至少一部分，受到一个或多个访问 限制

公开(公告)号：US10509673B2

公开(公告)日：2019-12-17

申请号：US15921822

申请日：2018-03-15

Applicant: VMware, Inc.

Inventor： Christoph Klee ,  Mukund Gunti ,  Adrian Drzewiecki

IPC: G06F9/44 ,  G06F9/50 ,  G06F9/52 ,  G06F3/06 ,  G06F9/54

Abstract: The approaches described herein implement synchronous execution of a user space operation from a kernel context. A thread, executing on a computing device, initializes a second kernel stack based on a first kernel stack. The computing device executes an operating system having a user space and a kernel space. The thread, executing in kernel space, performs a non-blocking call (e.g., an upcall) to execute an upcall function in user space. The upcall function may further call other user space functions or system calls. The system calls are performed using the second kernel stack. Upon termination of the upcall function, the thread continues execution on the first kernel stack.

公开(公告)号：US10331559B2

公开(公告)日：2019-06-25

申请号：US14838200

申请日：2015-08-27

Applicant: VMware, Inc.

Inventor： Christoph Klee ,  Adrian Drzewiecki ,  Aman Nijhawan

IPC: G06F12/0802 ,  G06F9/50 ,  G06F3/06

Abstract: Exemplary methods, apparatuses, and systems include a first input/output (I/O) filter receiving, from a first filter module within a virtualization stack of a host computer, an input/output (I/O) request originated by a virtual machine and directed to a first virtual disk. The first I/O filter determines to redirect the I/O request to a second virtual disk and, in response, forwards the I/O request to a second I/O filter associated with the second virtual disk. The first I/O filter is a part of a first instance of a filter framework within the host computer and the second I/O filter is part of a second, separate instance of the filter framework.

公开(公告)号：US20160306643A1

公开(公告)日：2016-10-20

申请号：US14686558

申请日：2015-04-14

Applicant: VMware, Inc.

Inventor： Christoph Klee ,  Adrian Drzewiecki

IPC: G06F9/455 ,  G06F9/54 ,  G06F3/06

CPC classification number: G06F9/45545 ,  G06F3/0619 ,  G06F3/0665 ,  G06F3/0689 ,  G06F9/45558 ,  G06F9/54 ,  G06F9/545 ,  G06F2009/45579

Abstract: Techniques for enabling filter-level access to a virtual disk (VMDK) are provided. In one set of embodiments, an application can invoke a first application programming interface (API) for opening the VMDK, the invoking of the first API causing an ordered group of filters associated with the VMDK to be instantiated. The application can further coordinate with a target filter in the ordered group of filters to establish a communication channel with the target filter and can receive, from the target filter, a handle to the target filter via the communication channel. The application can then issue an I/O request to the VMDK via the target filter using the handle, the issuing causing data associated with the I/O request to be filtered by other filters that are downstream from the target filter in the ordered group.

Abstract translation: 提供了启用对虚拟磁盘（VMDK）的过滤器级访问的技术。 在一组实施例中，应用可以调用用于打开VMDK的第一应用程序编程接口（API），调用第一API，导致与要与VMDK相关联的有序过滤器组被实例化。 应用可以进一步与有序滤波器组中的目标滤波器协调，以建立与目标滤波器的通信信道，并且可以经由通信信道从目标滤波器接收到目标滤波器的句柄。 然后，应用程序可以使用句柄通过目标过滤器向VMDK发出I / O请求，发出导致与I / O请求相关联的数据由排序组中的目标过滤器下游的其他过滤器进行过滤。

公开(公告)号：US10929169B2

公开(公告)日：2021-02-23

申请号：US16256047

申请日：2019-01-24

Applicant: VMware, Inc.

Inventor： Gabriel Tarasuk-Levin ,  Chi-Hsiang Su ,  Christoph Klee ,  Robert Bosch

IPC: G06F9/455 ,  G06F9/50 ,  H04L29/12

Abstract: The disclosure provides an approach for dynamically reprogramming network and network infrastructure in response to VM mobility. The approach provides a hypervisor layer that can observe changes in VM-host relationships and reprogram the associated network and network infrastructure to maintain network communication. The hypervisor layer notifies a controller of a data center to migrate an ENI of the migrated VM to the same destination host as the migrated VM, in response to VM migration.

公开(公告)号：US20150212855A1

公开(公告)日：2015-07-30

申请号：US14304480

申请日：2014-06-13

Applicant: VMware, Inc.

Inventor： Christoph Klee ,  Mukund Gunti ,  Adrian Drzewiecki

IPC: G06F9/50 ,  G06F9/52

CPC classification number: G06F9/50 ,  G06F3/0605 ,  G06F3/0659 ,  G06F3/0673 ,  G06F9/5005 ,  G06F9/52 ,  G06F9/545

Abstract: The approaches described herein implement synchronous execution of a user space operation from a kernel context. A thread, executing on a computing device, initializes a second kernel stack based on a first kernel stack. The computing device executes an operating system having a user space and a kernel space. The thread, executing in kernel space, performs a non-blocking call (e.g., an upcall) to execute an upcall function in user space. The upcall function may further call other user space functions or system calls. The system calls are performed using the second kernel stack. Upon termination of the upcall function, the thread continues execution on the first kernel stack.

Abstract translation: 这里描述的方法实现了从内核上下文中的用户空间操作的同步执行。 在计算设备上执行的线程基于第一内核栈初始化第二内核栈。 计算设备执行具有用户空间和内核空间的操作系统。 在内核空间中执行的线程执行非阻塞调用（例如，上调）以在用户空间中执行上调功能。 上调功能可以进一步调用其他用户空间功能或系统调用。 使用第二个内核堆栈执行系统调用。 在上调功能终止时，线程继续执行第一个内核堆栈。