公开(公告)号：US20240028357A1

公开(公告)日：2024-01-25

申请号：US17818795

申请日：2022-08-10

Applicant: VMware, Inc.

Inventor： Jian LAN ,  Liang CUI ,  Yan QI ,  Xiaoli TIE ,  Weiqing WU ,  Aravind SRINIVASAN ,  Hemanth Kumar PANNEM ,  Uday Suresh MASUREKAR ,  Todd SABIN

IPC: G06F9/455 ,  G06F9/54

CPC classification number: G06F9/45558 ,  G06F9/45545 ,  G06F9/541

Abstract: The disclosure provides an approach for simulating a virtual environment. A method includes simulating, using a virtualization simulator, a plurality of hosts; simulating, using the virtualization simulator, a plurality of virtual computing instances (VCIs) associated with the plurality of simulated hosts, based on information obtained from a cluster application programming interface (API) provider; creating, using a virtualization simulator operator, one or more node simulator schedulers; creating, using the one or more node schedulers, a node simulator; simulating, using the node simulator, a plurality of guest operating systems (OSs) associated with the plurality of simulated VCIs; and joining the plurality of simulated guest OSs to one or more node clusters in a data center via an API server.

公开(公告)号：US20240176639A1

公开(公告)日：2024-05-30

申请号：US18153283

申请日：2023-01-11

Applicant: VMware, Inc.

Inventor： Jian LAN ,  Qi WANG ,  Yan QI ,  Liang CUI ,  Aravind SRINIVASAN ,  Weiqing WU ,  Uday Suresh MASUREKAR ,  Todd SABIN ,  Hemanth Kumar PANNEM ,  Govind HARIDAS

IPC: G06F9/455 ,  H04L67/10

CPC classification number: G06F9/45558 ,  H04L67/10 ,  G06F2009/4557 ,  G06F2009/45595

Abstract: An example method of diagnosing remote sites of a distributed container orchestration system includes: receiving, at a management cluster, definition of a test suite custom resource; detecting, by a test controller agent in a cluster of the remote sites, a diagnosis object in the management cluster created in response to the test suite custom resource; deploying, by the test controller agent in response to the diagnosis object, a first pod in the cluster; deploying, by the first pod, a second pod in a server of a first remote site of the remote sites; checking, by the second pod, configuration of the server that includes an additional pod executing alongside the second pod, at least one virtual machine (VM) in which the second pod and the additional pod execute, a hypervisor configured to support the at least one VM, and a hardware platform on which the hypervisor executes; and returning test data from the second pod to the first pod, the test data including results of the step of checking the configuration of the server.

公开(公告)号：US20240028441A1

公开(公告)日：2024-01-25

申请号：US17902350

申请日：2022-09-02

Applicant: VMware, Inc.

Inventor： Jian LAN ,  Liang CUI ,  Aravind SRINIVASAN ,  Hailing XU ,  Yan QI ,  Prachi DALVI ,  Shuting MA ,  Todd SABIN ,  Uday Suresh MASUREKAR ,  Weiqing WU

IPC: G06F11/07 ,  G06F9/455

CPC classification number: G06F11/0784 ,  G06F9/45558 ,  G06F11/0709 ,  G06F2009/45591

Abstract: An example method of propagating fault domain topology information in a distributed container orchestration system includes: receiving, at control plane software executing in a data center, the fault domain topology, which includes tags for a protection group and fault domains for remote sites in communication with the data center; deploying, by a master server of the distributed container orchestration system that executes in the data center, a node pool comprising virtual machines (VMs) executing in servers of the remote sites, the VMs being nodes of the distributed container orchestration system in which containers execute; determining, by a controller of the master server, relationships among the VMs, the servers, the protection group, and the fault domains based on state of resources maintained by the master server; and providing, by the controller, labels to the servers for associating the tags of the protection group and the fault domains to the VMs.

公开(公告)号：US20240028370A1

公开(公告)日：2024-01-25

申请号：US17902327

申请日：2022-09-02

Applicant: VMware, Inc.

Inventor： Jian LAN ,  Liang CUI ,  Qi WANG ,  Aravind SRINIVASAN ,  Todd SABIN ,  Govind HARIDAS ,  Weiqing WU ,  Uday Suresh MASUREKAR ,  Wenwu PENG ,  Ni LU

IPC: G06F9/455 ,  G06F9/50 ,  G06F11/36

CPC classification number: G06F9/45558 ,  G06F9/5077 ,  G06F11/36 ,  G06F2009/4557

Abstract: An example method of diagnosing remote sites of a distributed container orchestration system includes: receiving, at a management cluster, definition of a test suite custom resource; deploying, in response to the test suite custom resource, a first pod in the management cluster; deploying, by the first pod, a second pod in a server of a first remote site of the remote sites; checking, by the second pod, configuration of the server that includes an additional pod executing alongside the second pod, at least one virtual machine (VM) in which the second pod and the additional pod execute, a hypervisor configured to support the at least one VM, and a hardware platform on which the hypervisor executes; and returning test data from the second pod to the first pod, the test data including results of the step of checking the configuration of the server.

公开(公告)号：US20240020145A1

公开(公告)日：2024-01-18

申请号：US17902308

申请日：2022-09-02

Applicant: VMware, Inc.

Inventor： Yan QI ,  Jian LAN ,  Prachi DALVI ,  Liang CUI ,  Todd SABIN ,  Hemanth Kumar PANNEM

IPC: G06F9/455 ,  G06F8/65

CPC classification number: G06F9/45558 ,  G06F9/45541 ,  G06F8/65 ,  G06F2009/45595

Abstract: An example method of updating device firmware in a distributed container orchestration system includes: receiving, at a master server executing in a data center, a definition for a firmware custom resource; obtaining, by an operator of the master server in response to the firmware custom resource, a firmware file set; providing, from the operator to a plurality of remote sites in communication with the data center, the firmware file set; and executing, by servers at the plurality of remote sites, updates of firmware for devices of the servers.

公开(公告)号：US20210029146A1

公开(公告)日：2021-01-28

申请号：US16546513

申请日：2019-08-21

Applicant: VMware, Inc.

Inventor： Mani KANCHERLA ,  Jian LAN ,  Xi ZENG ,  Hailing XU ,  K. Antion SHIBAN

IPC: H04L29/06 ,  H04W12/08

Abstract: Embodiments described herein relate to managing firewall rules. Embodiments include identifying a plurality of firewall rules for request handling. Embodiments include determining a deny count for each given firewall rule of the plurality of firewall rules based on a number of requests flagged on account of the given firewall rule. Embodiments include determining an anomaly score for each given firewall rule of the plurality of firewall rules indicating a severity of attacks the given firewall rule protects against. Embodiments include determining an urgency measure for each given firewall rule of the plurality of firewall rules based on the deny count for the given firewall rule and the anomaly score for the given firewall rule. Embodiments include determining an update to at least one firewall rule of the plurality of firewall rules based on the urgency measure for each given firewall rule of the plurality of firewall rules.